Pc zeigt Trojaner, geht aus, schließt Programme

#1 Hallo,

also zunächst einmal muss ich zugeben, dass ich mich mit Pcs nicht allzu gut auskenne, aber ich denke die "so postest du richtig seite" bekomme ich nach und nach abgearbeitet

Ich hoffe ich bin hier richtig, ich wusste einfach nicht mehr weiter.. vielen Dank bereits im Voraus für das Anschauen.

Also

1.
Problembeschreibung / Symptome ?


Seit kurzem (etwa 2 Wochen) zeigte mir Antivir immer wieder eine Meldung an :

In der Datei 'G:\System Volume Information\_restore{1E76FDA0-40D4-40B8-B9AA-F745226372A8}\RP352\A0069231.EXE'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.
Ausgeführte Aktion: Datei löschen

Diese Meldung zeigte er dann immer häufiger an. bei einem Suchlauf ergab es aber merkwürdiger Weise nichts.
Also habe ich eines Tages Spybot S&D runtergeladen.
Nach einem Scan wurden mehrere Sachen gefunden die dann aber "erfolgreich" repariert werden konnten.
Danach lief auch dieser erfolgreich durch.
Kurze Zeit später jedoch wurde es mit meinem Pc aber nicht besser er beendete einfach Programme und Anwendungen ohne Grund und Meldung egal ob Spiele oder Firefox oder noch anderes. Anfangs wurde es nur runtergetabt und in die desktopleite minimiert und später erschienen nur noch diese "sofort beenden - programm reagiert nicht " fenster.
Und inzwischen startet der ganze PC einfach neu. Gelegentlich gehen einfach die Programme aus.

Demzufolge habe ich die Demo von Spywarefighter runtergelanden und Scannen lassen. diese ergab :

02.02.2010 12:03:59: I| C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Temporary Internet Files\Content.IE5\8PE3W9OR\q002106204317r0007R81a0fe4cXab687833Ye03c15d4Z0100f060[1].pdf infected by Trojan.Pidief.BB

02.02.2010 12:03:59: I| C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Temporary Internet Files\Content.IE5\8PE3W9OR\q002106204317r0007R81a0fe4cXab687833Ye03c15d4Z0100f060[1].pdf put to Quarantine

Nun steht da dass die obengenannte Infektion in Quarantäne ist und keine Gefahr mehr darstellt, aber der pc macht nach wie vor Ärger und es wird immer häufiger.



2.
Temporäre Dateien beseitigen

Das habe ich die Anleitung befolgend erledigt :o)

#2 3.
mache einen Scan mit Malwarebytes
es ist hilfreich für den Mod im Sicherheitsforum, wenn dann das Reinigungslog von Malwarebytes mit in den Beitrag kopiert wird.



Malwarebytes' Anti-Malware 1.44
Datenbank Version: 3694
Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

05.02.2010 19:13:21
mbam-log-2010-02-05 (19-13-17).txt

Scan-Methode: Quick-Scan
Durchsuchte Objekte: 156313
Laufzeit: 6 minute(s), 17 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 8
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CURRENT_USER\SOFTWARE\BMIMZMHMFM (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\WS9E3IQBKY (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\IGB (Rogue.Residue) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\IGB (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\WINDOWS\system32\h@tkeysh@@k.dll (Trojan.Agent) -> No action taken.




4.

Erstelle ein Gmer Report, Report in den eigenen Thread einfuegen...

das ist schrecklich lang geworden.. war nciht sicher ob es richtig ist habe es aber aufgehoben, also falls es nötig wird poste ich es nochmal nach :o)


5.
Erstellen eines Hijackthis-Logfiles


Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 22:24:32, on 05.02.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
E:\Avira\AntiVir Desktop\sched.exe
C:\Programme\Analog Devices\SoundMAX\SMTray.exe
E:\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
E:\Fighters\SPYWAREfighter\SWPROTray.exe
C:\WINDOWS\system32\ctfmon.exe
G:\Joanna\zeit\Spybot\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\System32\svchost.exe
E:\Avira\AntiVir Desktop\avguard.exe
C:\Programme\Gemeinsame Dateien\Common Toolkit Suite\AVEngine\AVScanningService.exe
C:\Programme\Gemeinsame Dateien\Common Toolkit Suite\FighterSuiteService.exe
C:\Programme\Java\jre6\bin\jqs.exe
E:\Norton Utilities\NPROTECT.EXE
C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
E:\Speed Disk\nopdb.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\msiexec.exe
E:\Treiber\HJT\TrendMicro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [Smapp] C:\Programme\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [avgnt] "E:\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "E:\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SWPROguard] E:\Fighters\SPYWAREfighter\SWPROTray.exe
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Programme\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] G:\Joanna\zeit\Spybot\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} - http://www.turntool.com/ViewerInstall.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - E:\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - E:\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AV Engine Scanning Service - Preventon Technologies Limited - C:/Programme/Gemeinsame Dateien/Common Toolkit Suite/AVEngine/AVScanningService.exe
O23 - Service: Common Toolkit Service - SPAMfighter - C:\Programme\Gemeinsame Dateien\Common Toolkit Suite\FighterSuiteService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - E:\Norton Utilities\NPROTECT.EXE
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Speed Disk service - Symantec Corporation - E:\Speed Disk\nopdb.exe

--
End of file - 5440 bytes


6.
Erstellen einer Uninstall Liste


Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 9.2 - Deutsch
Adobe Shockwave Player 11.5
Apple Software Update
ATI Catalyst Control Center
ATI Catalyst Registration
ATI Display Driver
Avira AntiVir Personal - Free Antivirus
BrettspielWelt
Catalyst Control Center - Branding
Darkstar One
Die Sims Deluxe
DivX Codec
Fallout 2
Far Cry
Fiesta Online(EU_German) 1.02.004
FLV Player 2.0 (build 25)
Hello Kitty Online
Hello Kitty Online Download Manager
HiJackThis
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix für Windows Media Player 11 (KB939683)
Hotfix für Windows XP (KB952287)
Hotfix für Windows XP (KB961118)
Hotfix für Windows XP (KB970653-v3)
Hotfix für Windows XP (KB976098-v2)
Java(TM) 6 Update 17
Java(TM) 6 Update 6
Java(TM) 6 Update 7
Jojo's Fashion Show 2 - Las Cruces
LiveReg (Symantec Corporation)
LiveUpdate 1.6 (Symantec Corporation)
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 German Language Pack
Microsoft .NET Framework 1.1 Security Update (KB953297)
Microsoft .NET Framework 2.0 Language Pack - DEU
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 German Language Pack
Microsoft .NET Framework 3.0 German Language Pack
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Games for Windows - LIVE Redistributable
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Mozilla Firefox (3.5.7)
MSP3885-E 56K PCI Modem
MSXML 6.0 Parser (KB925673)
Norton Utilities 2002 for Windows
Pizza Syndicate
Pony Ranch
QuickTime
Runes of Magic
Sicherheitsupdate für Windows Media Player (KB952069)
Sicherheitsupdate für Windows Media Player (KB954155)
Sicherheitsupdate für Windows Media Player (KB968816)
Sicherheitsupdate für Windows Media Player (KB973540)
Sicherheitsupdate für Windows Media Player 11 (KB936782)
Sicherheitsupdate für Windows Media Player 11 (KB954154)
Sicherheitsupdate für Windows XP (KB923561)
Sicherheitsupdate für Windows XP (KB923789)
Sicherheitsupdate für Windows XP (KB938464)
Sicherheitsupdate für Windows XP (KB941569)
Sicherheitsupdate für Windows XP (KB946648)
Sicherheitsupdate für Windows XP (KB950762)
Sicherheitsupdate für Windows XP (KB950974)
Sicherheitsupdate für Windows XP (KB951066)
Sicherheitsupdate für Windows XP (KB951376-v2)
Sicherheitsupdate für Windows XP (KB951698)
Sicherheitsupdate für Windows XP (KB951748)
Sicherheitsupdate für Windows XP (KB952004)
Sicherheitsupdate für Windows XP (KB952954)
Sicherheitsupdate für Windows XP (KB953839)
Sicherheitsupdate für Windows XP (KB954211)
Sicherheitsupdate für Windows XP (KB954459)
Sicherheitsupdate für Windows XP (KB954600)
Sicherheitsupdate für Windows XP (KB955069)
Sicherheitsupdate für Windows XP (KB956390)
Sicherheitsupdate für Windows XP (KB956391)
Sicherheitsupdate für Windows XP (KB956572)
Sicherheitsupdate für Windows XP (KB956744)
Sicherheitsupdate für Windows XP (KB956802)
Sicherheitsupdate für Windows XP (KB956803)
Sicherheitsupdate für Windows XP (KB956841)
Sicherheitsupdate für Windows XP (KB956844)
Sicherheitsupdate für Windows XP (KB957095)
Sicherheitsupdate für Windows XP (KB957097)
Sicherheitsupdate für Windows XP (KB958215)
Sicherheitsupdate für Windows XP (KB958644)
Sicherheitsupdate für Windows XP (KB958687)
Sicherheitsupdate für Windows XP (KB958690)
Sicherheitsupdate für Windows XP (KB958869)
Sicherheitsupdate für Windows XP (KB959426)
Sicherheitsupdate für Windows XP (KB960225)
Sicherheitsupdate für Windows XP (KB960714)
Sicherheitsupdate für Windows XP (KB960715)
Sicherheitsupdate für Windows XP (KB960803)
Sicherheitsupdate für Windows XP (KB960859)
Sicherheitsupdate für Windows XP (KB961371)
Sicherheitsupdate für Windows XP (KB961373)
Sicherheitsupdate für Windows XP (KB961501)
Sicherheitsupdate für Windows XP (KB963027)
Sicherheitsupdate für Windows XP (KB968537)
Sicherheitsupdate für Windows XP (KB969059)
Sicherheitsupdate für Windows XP (KB969897)
Sicherheitsupdate für Windows XP (KB969898)
Sicherheitsupdate für Windows XP (KB969947)
Sicherheitsupdate für Windows XP (KB970238)
Sicherheitsupdate für Windows XP (KB970430)
Sicherheitsupdate für Windows XP (KB971486)
Sicherheitsupdate für Windows XP (KB971557)
Sicherheitsupdate für Windows XP (KB971633)
Sicherheitsupdate für Windows XP (KB971657)
Sicherheitsupdate für Windows XP (KB971961)
Sicherheitsupdate für Windows XP (KB972260)
Sicherheitsupdate für Windows XP (KB972270)
Sicherheitsupdate für Windows XP (KB973346)
Sicherheitsupdate für Windows XP (KB973354)
Sicherheitsupdate für Windows XP (KB973507)
Sicherheitsupdate für Windows XP (KB973525)
Sicherheitsupdate für Windows XP (KB973869)
Sicherheitsupdate für Windows XP (KB973904)
Sicherheitsupdate für Windows XP (KB974112)
Sicherheitsupdate für Windows XP (KB974318)
Sicherheitsupdate für Windows XP (KB974392)
Sicherheitsupdate für Windows XP (KB974455)
Sicherheitsupdate für Windows XP (KB974571)
Sicherheitsupdate für Windows XP (KB975025)
Sicherheitsupdate für Windows XP (KB975467)
Sicherheitsupdate für Windows XP (KB976325)
Skype™ 4.1
SoundMAX
Spybot - Search & Destroy
SPYWAREfighter
SPYWAREfighter
Stupid Invaders
TeamSpeak 2 RC2
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update für Windows XP (KB951072-v2)
Update für Windows XP (KB951978)
Update für Windows XP (KB955759)
Update für Windows XP (KB955839)
Update für Windows XP (KB967715)
Update für Windows XP (KB968389)
Update für Windows XP (KB971737)
Update für Windows XP (KB973687)
Update für Windows XP (KB973815)
Update für Windows XP (KB976749)
Update für Windows XP (KB978207)
VC80CRTRedist - 8.0.50727.4053
VDMSound
Wichtiges Update für Windows Media Player 11 (KB959772)
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows Presentation Foundation
Windows Presentation Foundation Language Pack (DEU)
Windows Workflow Foundation DE Language Pack
Windows XP Service Pack 3
WinRAR
World of Warcraft
World of Warcraft FREE Trial
XML Paper Specification Shared Components Language Pack 1.0





Ich hoffe das alles bringt was ...danke euch und sagt ruhig wenn ich was falsch mache .D

#3

Zitat

In der Datei 'G:\System Volume Information\_restore{1E76FDA0-40D4-40B8-B9AA-F745226372A8}\RP352\A0069231.EXE'
wurde ein Virus oder unerwünschtes Programm 'TR/Dropper.Gen' [trojan] gefunden.

Das ist in der Wiederherstellung. Mal schauen ob noch mehr vorhanden ist.

Poste als erstes das GMER Log.

Danach:

Schritt 1

Teatimer abstellen

Mit laufendem TeaTimer von Spybot Search&Destroy lässt sich keine Reinigung durchführen, da er alle gelöschten Einträge wiederherstellt. Der Teatimer muss also während der Reinigungsarbeiten abgestellt werden (lasse den Teatimer so lange ausgeschaltet, bis wir mit der Reinigung fertig sind):
Starte Spybot S&D => stelle im Menü "Modus" den "Erweiterten Modus" ein => klicke dann links unten auf "Werkzeuge" => klicke auf "Resident" => das Häkchen entfernen bei Resident "TeaTimer" (Schutz aller Systemeinstellungen) => Spybot Search&Destroy schließen => Rechner neu starten. Bebilderte Anleitung.

Schritt 2

Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

>Doppelklick auf die OTL.exe
-->Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
>Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
>Unter Extra Registry, wähle bitte Use SafeList
>Klicke nun auf Run Scan links oben
>Wenn der Scan beendet wurde werden 2 Logfiles erstellt
>Poste die Logfiles in Code-Tags hier in den Thread.

#4 GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-02-05 22:19:59
Windows 5.1.2600 Service Pack 3
Running: 6qlrrmbu.exe; Driver: C:\DOKUME~1\Ilja\LOKALE~1\Temp\uwlyqkoc.sys


---- System - GMER 1.0.15 ----

SSDT F7F5B4A6 ZwCreateKey
SSDT F7F5B49C ZwCreateThread
SSDT F7F5B4AB ZwDeleteKey
SSDT F7F5B4B5 ZwDeleteValueKey
SSDT F7F5B4BA ZwLoadKey
SSDT F7F5B488 ZwOpenProcess
SSDT F7F5B48D ZwOpenThread
SSDT F7F5B4C4 ZwReplaceKey
SSDT F7F5B4BF ZwRestoreKey
SSDT F7F5B4B0 ZwSetValueKey
SSDT F7F5B497 ZwTerminateProcess

---- Kernel code sections - GMER 1.0.15 ----

.text ntoskrnl.exe!_abnormal_termination + 24D 804E28A9 3 Bytes [B4, F5, F7]
? hhjtx.sys Das System kann die angegebene Datei nicht finden. !
.text C:\WINDOWS\system32\DRIVERS\ati2mtag.sys section is writeable [0xF727C000, 0x1C5D58, 0xE8000020]
.text C:\WINDOWS\system32\drivers\ACEDRV06.sys section is writeable [0xEEBAB000, 0x319AA, 0xE8000020]
.pklstb C:\WINDOWS\system32\drivers\ACEDRV06.sys entry point in ".pklstb" section [0xEEBEE000]
.relo2 C:\WINDOWS\system32\drivers\ACEDRV06.sys unknown last section [0xEEC09000, 0x8E, 0x42000040]
.text C:\WINDOWS\system32\drivers\ACEDRV07.sys section is writeable [0xEEB21000, 0x328BA, 0xE8000020]
.pklstb C:\WINDOWS\system32\drivers\ACEDRV07.sys entry point in ".pklstb" section [0xEEB65000]
.relo2 C:\WINDOWS\system32\drivers\ACEDRV07.sys unknown last section [0xEEB81000, 0x8E, 0x42000040]
.text C:\WINDOWS\system32\DRIVERS\atksgt.sys section is writeable [0xEE2F1300, 0x3ACC8, 0xE8000020]
.text C:\WINDOWS\system32\DRIVERS\lirsgt.sys section is writeable [0xF7B2E300, 0x1B7E, 0xE8000020]

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat SYMEVENT.SYS (Symantec Event Library/Symantec Corporation)

---- Files - GMER 1.0.15 ----

File C:\RECYCLER\NPROTECT 0 bytes
File C:\RECYCLER\NPROTECT\00053013 2396 bytes
File C:\RECYCLER\NPROTECT\00053015.MSI 13824 bytes
File C:\RECYCLER\NPROTECT\00053018.edb 1056768 bytes
File C:\RECYCLER\NPROTECT\00053026 2396 bytes
File C:\RECYCLER\NPROTECT\00053029.MSI 13824 bytes
File C:\RECYCLER\NPROTECT\00053033.edb 65536 bytes
File C:\RECYCLER\NPROTECT\00053035.TXT 363 bytes
File C:\RECYCLER\NPROTECT\00053036.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053037.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053042.DBE 3608 bytes
File C:\RECYCLER\NPROTECT\00053043.DBE 2576 bytes
File C:\RECYCLER\NPROTECT\00053044.DBE 512 bytes
File C:\RECYCLER\NPROTECT\00053051.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00053052.TXT 275 bytes
File C:\RECYCLER\NPROTECT\00053053.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00053054.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053055.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053097.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053098.TXT 362 bytes
File C:\RECYCLER\NPROTECT\00053099.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00053109.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00053110.TXT 363 bytes
File C:\RECYCLER\NPROTECT\00053111.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053120.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053121.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053122.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053132.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053133.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053134.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053146.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053147.TXT 362 bytes
File C:\RECYCLER\NPROTECT\00053148.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00053149.MSI 13824 bytes
File C:\RECYCLER\NPROTECT\00053151 2396 bytes
File C:\RECYCLER\NPROTECT\00053156.edb 65536 bytes
File C:\RECYCLER\NPROTECT\00053163.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00053164.TXT 363 bytes
File C:\RECYCLER\NPROTECT\00053165.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053188.mfl 1166431 bytes
File C:\RECYCLER\NPROTECT\00053190.SQL 25136 bytes
File C:\RECYCLER\NPROTECT\00053191.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053192.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053193.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053194.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053195.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053196.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053197.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053198.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053199.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053204.DBE 3608 bytes
File C:\RECYCLER\NPROTECT\00053205.DBE 2576 bytes
File C:\RECYCLER\NPROTECT\00053209.LNK 436 bytes
File C:\RECYCLER\NPROTECT\00053215.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053219.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053220.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053221.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053222.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053223.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053224.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053225.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053226.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053227.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053228.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053229.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053230.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053231.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053232.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053233.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053235.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053236.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053238.SOL 110 bytes
File C:\RECYCLER\NPROTECT\00053248.dat 515 bytes
File C:\RECYCLER\NPROTECT\00053258 2396 bytes
File C:\RECYCLER\NPROTECT\00053264.lnk 1027 bytes
File C:\RECYCLER\NPROTECT\00053267.lnk 1027 bytes
File C:\RECYCLER\NPROTECT\00053270.lnk 1027 bytes
File C:\RECYCLER\NPROTECT\00053290.SQL 36632 bytes
File C:\RECYCLER\NPROTECT\00053291.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\00053292.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053293.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053294.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\00053295.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053296.JS 22322 bytes
File C:\RECYCLER\NPROTECT\00053297.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053298.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053303.mfl 1180009 bytes
File C:\RECYCLER\NPROTECT\00053306.SQL 33344 bytes
File C:\RECYCLER\NPROTECT\00053307.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053308.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053309.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053310.LNK 665 bytes
File C:\RECYCLER\NPROTECT\00053311.LNK 428 bytes
File C:\RECYCLER\NPROTECT\00053314.LNK 520 bytes
File C:\RECYCLER\NPROTECT\00053319.SQL 4256360 bytes
File C:\RECYCLER\NPROTECT\00053327.DLL 20480 bytes executable
File C:\RECYCLER\NPROTECT\00053332.TXT 154 bytes
File C:\RECYCLER\NPROTECT\00053333.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\00053334.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053335.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053336.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\00053338.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053339.JS 2052 bytes
File C:\RECYCLER\NPROTECT\00053341.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053342.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053343.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053345 2388 bytes
File C:\RECYCLER\NPROTECT\00053346 2388 bytes
File C:\RECYCLER\NPROTECT\00053347.LNK 520 bytes
File C:\RECYCLER\NPROTECT\00053357.MSI 13824 bytes
File C:\RECYCLER\NPROTECT\00053359.LNK 625 bytes
File C:\RECYCLER\NPROTECT\00053360.LNK 410 bytes
File C:\RECYCLER\NPROTECT\00053362.LNK 520 bytes
File C:\RECYCLER\NPROTECT\00053366.mfl 1016299 bytes
File C:\RECYCLER\NPROTECT\00053368.SQL 21032 bytes
File C:\RECYCLER\NPROTECT\00053369.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053370.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053371.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00053376.edb 65536 bytes
File C:\RECYCLER\NPROTECT\00053377.SQL 5352128 bytes
File C:\RECYCLER\NPROTECT\00053378.SQL 821312 bytes
File C:\RECYCLER\NPROTECT\00053383.LNK 520 bytes
File C:\RECYCLER\NPROTECT\00053385.LNK 520 bytes
File C:\RECYCLER\NPROTECT\NPROTECT.LOG 646528 bytes
File C:\RECYCLER\NPROTECT\00052957 2396 bytes
File C:\RECYCLER\NPROTECT\00052958 2396 bytes
File C:\RECYCLER\NPROTECT\00052960.MSI 13824 bytes
File C:\RECYCLER\NPROTECT\00052961.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00052962.TXT 266 bytes
File C:\RECYCLER\NPROTECT\00052963.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00052964.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00052965.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00052971.edb 65536 bytes
File C:\RECYCLER\NPROTECT\00052983.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00052984.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00052985.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00052997.TXT 361 bytes
File C:\RECYCLER\NPROTECT\00052998.TXT 363 bytes
File C:\RECYCLER\NPROTECT\00052999.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053008.TXT 364 bytes
File C:\RECYCLER\NPROTECT\00053009.TXT 363 bytes
File C:\RECYCLER\NPROTECT\00053057.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053058.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053059.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053060.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053061.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053062.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053063.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053064.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053065.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053066.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053067.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053068.vdf 82944 bytes
File C:\RECYCLER\NPROTECT\00053069.dat 1226 bytes
File C:\RECYCLER\NPROTECT\00053070.DBE 3608 bytes
File C:\RECYCLER\NPROTECT\00053072.DBE 4640 bytes
File C:\RECYCLER\NPROTECT\00053073.LOG 13260 bytes
File C:\RECYCLER\NPROTECT\00053074.avl 1638 bytes
File C:\RECYCLER\NPROTECT\00052838._P 7098 bytes
File C:\RECYCLER\NPROTECT\00052864.dll 1509888 bytes executable
File C:\RECYCLER\NPROTECT\00052883.dll 81920 bytes executable
File C:\RECYCLER\NPROTECT\00052902.INF 97060 bytes
File C:\RECYCLER\NPROTECT\00052926.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00052956.UPL 693 bytes
File C:\RECYCLER\NPROTECT\00053012.TXT 363 bytes
File C:\RECYCLER\NPROTECT\00053056.vdf 2048 bytes
File C:\RECYCLER\NPROTECT\00053077.LOG 470 bytes
File C:\RECYCLER\NPROTECT\00053152 2396 bytes
File C:\RECYCLER\NPROTECT\00053206.DBE 512 bytes
File C:\RECYCLER\NPROTECT\00053234.SQL 2576 bytes
File C:\RECYCLER\NPROTECT\00053299.SQL 14960 bytes
File C:\RECYCLER\NPROTECT\00053340.LNK 520 bytes
File C:\RECYCLER\NPROTECT\00052799.mst 47104 bytes
File C:\RECYCLER\NPROTECT\00052801.rbs 9886 bytes
File C:\RECYCLER\NPROTECT\00052802.ipi 7168 bytes
File C:\RECYCLER\NPROTECT\00052803.msi 854528 bytes
File C:\RECYCLER\NPROTECT\00052821.CAB 25084 bytes
File C:\RECYCLER\NPROTECT\00052824.TXT 127 bytes
File C:\RECYCLER\NPROTECT\00052826._P 331 bytes
File C:\RECYCLER\NPROTECT\00052827._P 143423 bytes
File C:\RECYCLER\NPROTECT\00052828._P 15406 bytes
File C:\RECYCLER\NPROTECT\00052829._P 187 bytes
File C:\RECYCLER\NPROTECT\00052830._P 587 bytes
File C:\RECYCLER\NPROTECT\00052831._P 357 bytes
File C:\RECYCLER\NPROTECT\00052832._P 265 bytes
File C:\RECYCLER\NPROTECT\00052833._P 41859 bytes
File C:\RECYCLER\NPROTECT\00052834._P 811 bytes
File C:\RECYCLER\NPROTECT\00052835._P 31219 bytes
File C:\RECYCLER\NPROTECT\00052836._P 7241 bytes
File C:\RECYCLER\NPROTECT\00052837._P 1805 bytes
File C:\RECYCLER\NPROTECT\00052839._P 541 bytes
File C:\RECYCLER\NPROTECT\00052840._P 2353 bytes
File C:\RECYCLER\NPROTECT\00052841 1306 bytes
File C:\RECYCLER\NPROTECT\00052842.CAB 275290 bytes
File C:\RECYCLER\NPROTECT\00052846.inf 99975 bytes
File C:\RECYCLER\NPROTECT\00052847.pnf 168860 bytes
File C:\RECYCLER\NPROTECT\00052848.cat 28743 bytes
File C:\RECYCLER\NPROTECT\00052852.CAB 275290 bytes
File C:\RECYCLER\NPROTECT\00052853.STA 4 bytes
File C:\RECYCLER\NPROTECT\00052854.STA 34 bytes
File C:\RECYCLER\NPROTECT\00052856.ocx 61952 bytes executable
File C:\RECYCLER\NPROTECT\00052857.ocx 61952 bytes executable
File C:\RECYCLER\NPROTECT\00052858.dll 81920 bytes executable
File C:\RECYCLER\NPROTECT\00052859.dll 81920 bytes executable
File C:\RECYCLER\NPROTECT\00052860.iec 371200 bytes executable
File C:\RECYCLER\NPROTECT\00052861.iec 371200 bytes executable
File C:\RECYCLER\NPROTECT\00052862.dll 672768 bytes executable
File C:\RECYCLER\NPROTECT\00052863.dll 1509888 bytes executable
File C:\RECYCLER\NPROTECT\00052865.dll 628736 bytes executable
File C:\RECYCLER\NPROTECT\00052866.dll 672768 bytes executable
File C:\RECYCLER\NPROTECT\00052867.dll 628736 bytes executable
File C:\RECYCLER\NPROTECT\00052868.dll 3091968 bytes executable
File C:\RECYCLER\NPROTECT\00052869.dll 3091968 bytes executable
File C:\RECYCLER\NPROTECT\00052870.BLO 719054 bytes
File C:\RECYCLER\NPROTECT\00052871.inf 99975 bytes
File C:\RECYCLER\NPROTECT\00052872.pnf 168860 bytes
File C:\RECYCLER\NPROTECT\00052873.cat 28743 bytes
File C:\RECYCLER\NPROTECT\00052875.iec 371200 bytes executable
File C:\RECYCLER\NPROTECT\00052876.dll 81920 bytes executable
File C:\RECYCLER\NPROTECT\00052877.dll 3091968 bytes executable
File C:\RECYCLER\NPROTECT\00052878.dll 1509888 bytes executable
File C:\RECYCLER\NPROTECT\00052879.ocx 61952 bytes executable
File C:\RECYCLER\NPROTECT\00052880.dll 628736 bytes executable
File C:\RECYCLER\NPROTECT\00052881.dll 672768 bytes executable
File C:\RECYCLER\NPROTECT\00052882.iec 371200 bytes executable
File C:\RECYCLER\NPROTECT\00052884.dll 3091968 bytes executable
File C:\RECYCLER\NPROTECT\00052885.dll 1509888 bytes executable
File C:\RECYCLER\NPROTECT\00052886.ocx 61952 bytes executable
File C:\RECYCLER\NPROTECT\00052887.dll 628736 bytes executable
File C:\RECYCLER\NPROTECT\00052888.dll 672768 bytes executable
File C:\RECYCLER\NPROTECT\00052889.BLO 719054 bytes
File C:\RECYCLER\NPROTECT\00052890.dll 18808 bytes executable
File C:\RECYCLER\NPROTECT\00052891.exe 234872 bytes executable
File C:\RECYCLER\NPROTECT\00052892.req 1345 bytes
File C:\RECYCLER\NPROTECT\00052893.inf 926 bytes
File C:\RECYCLER\NPROTECT\00052894.txt 1011 bytes
File C:\RECYCLER\NPROTECT\00052895.cat 28743 bytes
File C:\RECYCLER\NPROTECT\00052896.dll 26488 bytes executable
File C:\RECYCLER\NPROTECT\00052897.exe 765304 bytes executable
File C:\RECYCLER\NPROTECT\00052899.url 5324 bytes
File C:\RECYCLER\NPROTECT\00052900.ver 5540 bytes
File C:\RECYCLER\NPROTECT\00052901.inf 678 bytes
File C:\RECYCLER\NPROTECT\00052903.INF 99161 bytes
File C:\RECYCLER\NPROTECT\00052904.INF 99975 bytes
File C:\RECYCLER\NPROTECT\00052905.INF 99367 bytes
File C:\RECYCLER\NPROTECT\00052906.dll 388984 bytes executable
File C:\RECYCLER\NPROTECT\00052907.PSM 38793 bytes
File C:\RECYCLER\NPROTECT\00052908.STA 4 bytes
File C:\RECYCLER\NPROTECT\00052909.STA 34 bytes
File C:\RECYCLER\NPROTECT\00052910.STA 34 bytes
File C:\RECYCLER\NPROTECT\00052917.SQL 36632 bytes
File C:\RECYCLER\NPROTECT\00052918.TXT 154 bytes
File C:\RECYCLER\NPROTECT\00052919.SQL 3608 bytes
File C:\RECYCLER\NPROTECT\00052920.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00052921.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00052922.SQL 4640 bytes
File C:\RECYCLER\NPROTECT\00052923.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00052924.JS 4791 bytes
File C:\RECYCLER\NPROTECT\00052925.SQL 512 bytes
File C:\RECYCLER\NPROTECT\00052927.SQL 8768 bytes
File C:\RECYCLER\NPROTECT\00052931.DLL 926 bytes
File C:\RECYCLER\NPROTECT\00052932.DLL 18808 bytes executable
File C:\RECYCLER\NPROTECT\00052933.DLL 28743 bytes
File C:\RECYCLER\NPROTECT\00052934.ocx 61952 bytes executable
File C:\RECYCLER\NPROTECT\00052935.dll 81920 bytes executable
File C:\RECYCLER\NPROTECT\00052936.iec 371200 bytes executable
File C:\RECYCLER\NPROTECT\00052937.dll 672768 bytes executable
File C:\RECYCLER\NPROTECT\00052938.dll 628736 bytes executable
File C:\RECYCLER\NPROTECT\00052939.ocx 61952 bytes executable
File C:\RECYCLER\NPROTECT\00052940.dll 1509888 bytes executable
File C:\RECYCLER\NPROTECT\00052941.dll 3091968 bytes executable
File C:\RECYCLER\NPROTECT\00052942.dll 81920 bytes executable
File C:\RECYCLER\NPROTECT\00052943.inf 99975 bytes
File C:\RECYCLER\NPROTECT\00052944.pnf 168860 bytes
File C:\RECYCLER\NPROTECT\00052945.cat 28743 bytes
File C:\RECYCLER\NPROTECT\00052946.edb 1056768 bytes
File D:\RECYCLER\NPROTECT 0 bytes
File D:\RECYCLER\NPROTECT\NPROTECT.LOG 646528 bytes
File E:\RECYCLER\NPROTECT 0 bytes
File E:\RECYCLER\NPROTECT\00000000.und 607 bytes
File E:\RECYCLER\NPROTECT\00000001.und 631 bytes
File E:\RECYCLER\NPROTECT\00000002.und 568 bytes
File E:\RECYCLER\NPROTECT\00000003.und 598 bytes
File E:\RECYCLER\NPROTECT\00000004.und 602 bytes
File E:\RECYCLER\NPROTECT\00000005.und 602 bytes
File E:\RECYCLER\NPROTECT\00000006.und 598 bytes
File E:\RECYCLER\NPROTECT\00000007.und 644 bytes
File E:\RECYCLER\NPROTECT\00000008.und 564 bytes
File E:\RECYCLER\NPROTECT\00000009.und 588 bytes
File E:\RECYCLER\NPROTECT\00000010.und 596 bytes
File E:\RECYCLER\NPROTECT\00000011.und 682 bytes
File E:\RECYCLER\NPROTECT\00000012.SYS 18520 bytes executable
File E:\RECYCLER\NPROTECT\00000013.SYS 19160 bytes executable
File E:\RECYCLER\NPROTECT\00000014.SYS 22104 bytes executable
File E:\RECYCLER\NPROTECT\00000015.DLL 95056 bytes executable
File E:\RECYCLER\NPROTECT\00000016.DLL 84816 bytes executable
File E:\RECYCLER\NPROTECT\NPROTECT.LOG 646528 bytes
File F:\RECYCLER\NPROTECT 0 bytes
File F:\RECYCLER\NPROTECT\00000000.TRA 345232 bytes executable
File F:\RECYCLER\NPROTECT\00000001.TRA 11196560 bytes executable
File F:\RECYCLER\NPROTECT\00000002.MPQ 1800533 bytes
File F:\RECYCLER\NPROTECT\00000003.TRA 1454799 bytes
File F:\RECYCLER\NPROTECT\00000004.TRA 8947 bytes
File F:\RECYCLER\NPROTECT\00000005.TRA 43858 bytes
File F:\RECYCLER\NPROTECT\00000006.TRA 352 bytes
File F:\RECYCLER\NPROTECT\00000007.TRA 351 bytes
File F:\RECYCLER\NPROTECT\00000008.TRA 27934 bytes
File F:\RECYCLER\NPROTECT\00000009.TRA 36135296 bytes
File F:\RECYCLER\NPROTECT\00000010.TRA 467600 bytes
File F:\RECYCLER\NPROTECT\00000041.wtf 174 bytes
File F:\RECYCLER\NPROTECT\00000045.dll 48388 bytes executable
File F:\RECYCLER\NPROTECT\NPROTECT.LOG 646528 bytes
File G:\RECYCLER\NPROTECT 0 bytes
File G:\RECYCLER\NPROTECT\00001535.JGD 7824 bytes
File G:\RECYCLER\NPROTECT\00001536.JGD 55120 bytes
File G:\RECYCLER\NPROTECT\00001537.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001538.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001539.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001540.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001541.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001542.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001543.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001544.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001545.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001546.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001547.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001548.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001549.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001550.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001551.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001553.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001554.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001555.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001556.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001557.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00001558.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00001559.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00001560.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00001561.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001562.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001563.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001564.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001565.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001566.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001567.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001568.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001569.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001571.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001572.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001573.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001574.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001575.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001576.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001577.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001578.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001579.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001580.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001581.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00001582.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00001583.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00001584.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00001585.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001586.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001587.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001589.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001590.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001591.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001592.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001593.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001594.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001595.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001596.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001597.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001598.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001599.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001600.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001601.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001602.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001603.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001604.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001605.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00001607.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00001608.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00001609.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001610.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001611.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001612.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001613.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001614.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001615.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001616.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001617.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001618.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001619.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001620.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001621.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001622.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001623.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001625.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001626.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001627.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001628.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001629.JGD 12160 bytes
File G:\RECYCLER\NPROTECT\00001630.JGD 12160 bytes
File G:\RECYCLER\NPROTECT\00001631.JGD 12160 bytes
File G:\RECYCLER\NPROTECT\00001632.JGD 12160 bytes
File G:\RECYCLER\NPROTECT\00001633.JGD 67920 bytes
File G:\RECYCLER\NPROTECT\00001634.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001635.JGD 40720 bytes
File G:\RECYCLER\NPROTECT\00001636.JGD 40758 bytes
File G:\RECYCLER\NPROTECT\00001637.JGD 41488 bytes
File G:\RECYCLER\NPROTECT\00001638.JGD 41488 bytes
File G:\RECYCLER\NPROTECT\00001639.JGD 39952 bytes
File G:\RECYCLER\NPROTECT\00001640.JGD 39952 bytes
File G:\RECYCLER\NPROTECT\00001641.JGD 42000 bytes
File G:\RECYCLER\NPROTECT\00001643.JGD 28496 bytes
File G:\RECYCLER\NPROTECT\00001644.JGD 40192 bytes
File G:\RECYCLER\NPROTECT\00001645.JGD 16656 bytes
File G:\RECYCLER\NPROTECT\00001646.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001647.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001648.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001649.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001650.JGD 12048 bytes
File G:\RECYCLER\NPROTECT\00001651.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001652.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001653.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001654.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001655.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001656.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001657.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001658.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001659.JGD 15424 bytes
File G:\RECYCLER\NPROTECT\00001661.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001662.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001663.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001664.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001665.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001666.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001667.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001668.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001669.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001670.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001671.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001672.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001673.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001674.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001675.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001676.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001677.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001679.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001680.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001681.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001682.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001683.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001684.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001685.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001686.JGD 4214 bytes
File G:\RECYCLER\NPROTECT\00001687.JGD 16224 bytes
File G:\RECYCLER\NPROTECT\00001688.JGD 11008 bytes
File G:\RECYCLER\NPROTECT\00001689.JGD 11024 bytes
File G:\RECYCLER\NPROTECT\00001690.JGD 9984 bytes
File G:\RECYCLER\NPROTECT\00001691.JGD 10000 bytes
File G:\RECYCLER\NPROTECT\00001692.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00001693.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00001694.JGD 24464 bytes
File G:\RECYCLER\NPROTECT\00001695.JGD 24464 bytes
File G:\RECYCLER\NPROTECT\00001697.JGD 4368 bytes
File G:\RECYCLER\NPROTECT\00001698.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00001699.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00001700.JGD 3792 bytes
File G:\RECYCLER\NPROTECT\00001701.JGD 3856 bytes
File G:\RECYCLER\NPROTECT\00001702.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001703.JGD 3600 bytes
File G:\RECYCLER\NPROTECT\00001704.JGD 4048 bytes
File G:\RECYCLER\NPROTECT\00001705.JGD 3920 bytes
File G:\RECYCLER\NPROTECT\00001706.JGD 3728 bytes
File G:\RECYCLER\NPROTECT\00001707.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001708.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00001709.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00001710.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001711.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00001712.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00001713.JGD 14864 bytes
File G:\RECYCLER\NPROTECT\00001715.JGD 3792 bytes
File G:\RECYCLER\NPROTECT\00001716.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00001717.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00001718.JGD 4944 bytes
File G:\RECYCLER\NPROTECT\00001719.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001720.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001721.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001722.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00001723.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00001724.JGD 24656 bytes
File G:\RECYCLER\NPROTECT\00001725.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001726.JGD 4368 bytes
File G:\RECYCLER\NPROTECT\00001727.JGD 5584 bytes
File G:\RECYCLER\NPROTECT\00001728.JGD 5520 bytes
File G:\RECYCLER\NPROTECT\00001729.JGD 6032 bytes
File G:\RECYCLER\NPROTECT\00001730.JGD 5840 bytes
File G:\RECYCLER\NPROTECT\00001731.JGD 5520 bytes
File G:\RECYCLER\NPROTECT\00001733.JGD 6352 bytes
File G:\RECYCLER\NPROTECT\00001734.JGD 6736 bytes
File G:\RECYCLER\NPROTECT\00001735.JGD 24656 bytes
File G:\RECYCLER\NPROTECT\00001736.JGD 43280 bytes
File G:\RECYCLER\NPROTECT\00001737.JGD 7440 bytes
File G:\RECYCLER\NPROTECT\00001738.JGD 7568 bytes
File G:\RECYCLER\NPROTECT\00001739.JGD 9168 bytes
File G:\RECYCLER\NPROTECT\00001740.JGD 9872 bytes
File G:\RECYCLER\NPROTECT\00001741.JGD 10320 bytes
File G:\RECYCLER\NPROTECT\00001742.JGD 3024 bytes
File G:\RECYCLER\NPROTECT\00001743.JGD 3536 bytes
File G:\RECYCLER\NPROTECT\00001744.JGD 3920 bytes
File G:\RECYCLER\NPROTECT\00001745.JGD 3344 bytes
File G:\RECYCLER\NPROTECT\00001746.JGD 5264 bytes
File G:\RECYCLER\NPROTECT\00001747.JGD 43280 bytes
File G:\RECYCLER\NPROTECT\00001748.JGD 53264 bytes
File G:\RECYCLER\NPROTECT\00001749.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00001751.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001752.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001753.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001754.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001755.JGD 7824 bytes
File G:\RECYCLER\NPROTECT\00001756.JGD 59600 bytes
File G:\RECYCLER\NPROTECT\00001757.JGD 67920 bytes
File G:\RECYCLER\NPROTECT\00001758.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001759.JGD 39696 bytes
File G:\RECYCLER\NPROTECT\00001760.JGD 41488 bytes
File G:\RECYCLER\NPROTECT\00001761.JGD 39952 bytes
File G:\RECYCLER\NPROTECT\00001762.JGD 38672 bytes
File G:\RECYCLER\NPROTECT\00001763.JGD 24656 bytes
File G:\RECYCLER\NPROTECT\00001764.JGD 40448 bytes
File G:\RECYCLER\NPROTECT\00001765.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001766.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001767.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001769.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001770.JGD 12176 bytes
File G:\RECYCLER\NPROTECT\00001771.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001772.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001773.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001774.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001775.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001776.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001777.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001778.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001779.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001780.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001781.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001782.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001783.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001784.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001785.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001787.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001788.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001789.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001790.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001791.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001792.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001793.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001794.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001795.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001796.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001797.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001798.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001799.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001800.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001801.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001802.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001803.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001805.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001806.JGD 4864 bytes
File G:\RECYCLER\NPROTECT\00001807.JGD 15424 bytes
File G:\RECYCLER\NPROTECT\00001808.JGD 10880 bytes
File G:\RECYCLER\NPROTECT\00001809.JGD 10240 bytes
File G:\RECYCLER\NPROTECT\00001810.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00001811.JGD 20240 bytes
File G:\RECYCLER\NPROTECT\00001812.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00001813.JGD 3920 bytes
File G:\RECYCLER\NPROTECT\00001814.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00001815.JGD 4048 bytes
File G:\RECYCLER\NPROTECT\00001816.JGD 3792 bytes
File G:\RECYCLER\NPROTECT\00001817.JGD 3792 bytes
File G:\RECYCLER\NPROTECT\00001818.JGD 16224 bytes
File G:\RECYCLER\NPROTECT\00001819.JGD 3344 bytes
File G:\RECYCLER\NPROTECT\00001820.JGD 3472 bytes
File G:\RECYCLER\NPROTECT\00001821.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00001823.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001824.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00001825.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00001826.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001827.JGD 3792 bytes
File G:\RECYCLER\NPROTECT\00001828.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00001829.JGD 15632 bytes
File G:\RECYCLER\NPROTECT\00001830.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001831.JGD 4752 bytes
File G:\RECYCLER\NPROTECT\00001832.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00001833.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00001834.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001835.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00001836.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00001837.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001838.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001839.JGD 4368 bytes
File G:\RECYCLER\NPROTECT\00001841.JGD 4944 bytes
File G:\RECYCLER\NPROTECT\00001842.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001843.JGD 5584 bytes
File G:\RECYCLER\NPROTECT\00001844.JGD 5520 bytes
File G:\RECYCLER\NPROTECT\00001845.JGD 6032 bytes
File G:\RECYCLER\NPROTECT\00001846.JGD 5840 bytes
File G:\RECYCLER\NPROTECT\00001847.JGD 5520 bytes
File G:\RECYCLER\NPROTECT\00001848.JGD 5840 bytes
File G:\RECYCLER\NPROTECT\00001849.JGD 6352 bytes
File G:\RECYCLER\NPROTECT\00001850.JGD 6736 bytes
File G:\RECYCLER\NPROTECT\00001851.JGD 35600 bytes
File G:\RECYCLER\NPROTECT\00001852.JGD 7440 bytes
File G:\RECYCLER\NPROTECT\00001853.JGD 7568 bytes
File G:\RECYCLER\NPROTECT\00001854.JGD 9744 bytes
File G:\RECYCLER\NPROTECT\00001855.JGD 9168 bytes
File G:\RECYCLER\NPROTECT\00001856.JGD 10320 bytes
File G:\RECYCLER\NPROTECT\00001857.JGD 3024 bytes
File G:\RECYCLER\NPROTECT\00001859.JGD 3920 bytes
File G:\RECYCLER\NPROTECT\00001860.JGD 3344 bytes
File G:\RECYCLER\NPROTECT\00001861.JGD 5264 bytes
File G:\RECYCLER\NPROTECT\00001862.JGD 49168 bytes
File G:\RECYCLER\NPROTECT\00001863.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00001864.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00001865.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001866.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001867.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001868.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001869.JGD 7824 bytes
File G:\RECYCLER\NPROTECT\00001870.JGD 61840 bytes
File G:\RECYCLER\NPROTECT\00001871.JGD 67920 bytes
File G:\RECYCLER\NPROTECT\00001872.JGD 16224 bytes
File G:\RECYCLER\NPROTECT\00001873.JGD 37904 bytes
File G:\RECYCLER\NPROTECT\00001874.JGD 42768 bytes
File G:\RECYCLER\NPROTECT\00001875.JGD 42256 bytes
File G:\RECYCLER\NPROTECT\00001877.JGD 24656 bytes
File G:\RECYCLER\NPROTECT\00001878.JGD 40192 bytes
File G:\RECYCLER\NPROTECT\00001879.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001880.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001881.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001882.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001883.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001884.JGD 10768 bytes
File G:\RECYCLER\NPROTECT\00001885.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001886.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001887.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001888.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001889.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001890.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001891.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001892.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001893.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001895.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001896.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001897.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001898.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001899.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001900.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001901.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001902.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001903.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001904.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001905.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001906.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001907.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001908.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001909.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001910.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001911.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001913.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001914.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001915.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001916.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001917.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001918.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001919.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001920.JGD 4864 bytes
File G:\RECYCLER\NPROTECT\00001921.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001922.JGD 11008 bytes
File G:\RECYCLER\NPROTECT\00001923.JGD 9984 bytes
File G:\RECYCLER\NPROTECT\00001924.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00001925.JGD 20240 bytes
File G:\RECYCLER\NPROTECT\00001926.JGD 3728 bytes
File G:\RECYCLER\NPROTECT\00001927.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00001928.JGD 3728 bytes
File G:\RECYCLER\NPROTECT\00001929.JGD 3472 bytes
File G:\RECYCLER\NPROTECT\00001517.JGD 47120 bytes
File G:\RECYCLER\NPROTECT\00001518.JGD 7552 bytes
File G:\RECYCLER\NPROTECT\00001519.JGD 7616 bytes
File G:\RECYCLER\NPROTECT\00001520.JGD 9024 bytes
File G:\RECYCLER\NPROTECT\00001521.JGD 8704 bytes
File G:\RECYCLER\NPROTECT\00001522.JGD 10368 bytes
File G:\RECYCLER\NPROTECT\00001523.JGD 3008 bytes
File G:\RECYCLER\NPROTECT\00001524.JGD 3392 bytes
File G:\RECYCLER\NPROTECT\00001525.JGD 3392 bytes
File G:\RECYCLER\NPROTECT\00001526.JGD 3968 bytes
File G:\RECYCLER\NPROTECT\00001527.JGD 3584 bytes
File G:\RECYCLER\NPROTECT\00001528.JGD 41488 bytes
File G:\RECYCLER\NPROTECT\00001529.JGD 3456 bytes
File G:\RECYCLER\NPROTECT\00001530.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00001531.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001532.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001533.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001552.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001570.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001588.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001606.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00001624.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001642.JGD 42000 bytes
File G:\RECYCLER\NPROTECT\00001660.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001678.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001696.JGD 3600 bytes
File G:\RECYCLER\NPROTECT\00001714.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001732.JGD 6032 bytes
File G:\RECYCLER\NPROTECT\00001750.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00001768.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001786.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001804.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001822.JGD 3536 bytes
File G:\RECYCLER\NPROTECT\00001931.JGD 3792 bytes
File G:\RECYCLER\NPROTECT\00001932.JGD 15424 bytes
File G:\RECYCLER\NPROTECT\00001933.JGD 3344 bytes
File G:\RECYCLER\NPROTECT\00001934.JGD 3920 bytes
File G:\RECYCLER\NPROTECT\00001935.JGD 3856 bytes
File G:\RECYCLER\NPROTECT\00001936.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00001937.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001938.JGD 3792 bytes
File G:\RECYCLER\NPROTECT\00001939.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00001940.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001941.JGD 4752 bytes
File G:\RECYCLER\NPROTECT\00001942.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00001943.JGD 13968 bytes
File G:\RECYCLER\NPROTECT\00001944.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001945.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00001946.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00001947.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00001949.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001950.JGD 4368 bytes
File G:\RECYCLER\NPROTECT\00001951.JGD 4944 bytes
File G:\RECYCLER\NPROTECT\00001952.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00001953.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001954.JGD 20816 bytes
File G:\RECYCLER\NPROTECT\00001955.JGD 4944 bytes
File G:\RECYCLER\NPROTECT\00001956.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001957.JGD 5584 bytes
File G:\RECYCLER\NPROTECT\00001958.JGD 5520 bytes
File G:\RECYCLER\NPROTECT\00001959.JGD 6032 bytes
File G:\RECYCLER\NPROTECT\00001960.JGD 6032 bytes
File G:\RECYCLER\NPROTECT\00001961.JGD 5520 bytes
File G:\RECYCLER\NPROTECT\00001962.JGD 5840 bytes
File G:\RECYCLER\NPROTECT\00001963.JGD 6416 bytes
File G:\RECYCLER\NPROTECT\00001964.JGD 6736 bytes
File G:\RECYCLER\NPROTECT\00001965.JGD 42000 bytes
File G:\RECYCLER\NPROTECT\00001967.JGD 7568 bytes
File G:\RECYCLER\NPROTECT\00001968.JGD 9808 bytes
File G:\RECYCLER\NPROTECT\00001969.JGD 9872 bytes
File G:\RECYCLER\NPROTECT\00001970.JGD 10320 bytes
File G:\RECYCLER\NPROTECT\00001971.JGD 3024 bytes
File G:\RECYCLER\NPROTECT\00001972.JGD 3536 bytes
File G:\RECYCLER\NPROTECT\00001973.JGD 3920 bytes
File G:\RECYCLER\NPROTECT\00001974.JGD 3344 bytes
File G:\RECYCLER\NPROTECT\00001975.JGD 5264 bytes
File G:\RECYCLER\NPROTECT\00001976.JGD 37392 bytes
File G:\RECYCLER\NPROTECT\00001977.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00001978.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00001979.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001980.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001981.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001982.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001983.JGD 7824 bytes
File G:\RECYCLER\NPROTECT\00001985.JGD 67920 bytes
File G:\RECYCLER\NPROTECT\00001986.JGD 15424 bytes
File G:\RECYCLER\NPROTECT\00001987.JGD 36112 bytes
File G:\RECYCLER\NPROTECT\00001988.JGD 42768 bytes
File G:\RECYCLER\NPROTECT\00001989.JGD 42256 bytes
File G:\RECYCLER\NPROTECT\00001990.JGD 42000 bytes
File G:\RECYCLER\NPROTECT\00001991.JGD 28688 bytes
File G:\RECYCLER\NPROTECT\00001992.JGD 40448 bytes
File G:\RECYCLER\NPROTECT\00001993.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001994.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001995.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001996.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001997.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001998.JGD 12176 bytes
File G:\RECYCLER\NPROTECT\00001999.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00002000.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00002001.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00002003.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00002004.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00002005.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00002006.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00002007.JGD 16224 bytes
File G:\RECYCLER\NPROTECT\00002008.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00002009.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00002010.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00002011.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00002012.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00002013.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00002014.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00002015.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00002016.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002017.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002018.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002019.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002021.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002022.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002023.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002024.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002025.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002026.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002027.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002028.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002029.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002030.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002031.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002032.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00002033.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00002034.JGD 4224 bytes
File G:\RECYCLER\NPROTECT\00002035.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00002036.JGD 11008 bytes
File G:\RECYCLER\NPROTECT\00002037.JGD 9984 bytes
File G:\RECYCLER\NPROTECT\00002039.JGD 24464 bytes
File G:\RECYCLER\NPROTECT\00002040.JGD 3792 bytes
File G:\RECYCLER\NPROTECT\00002041.JGD 3856 bytes
File G:\RECYCLER\NPROTECT\00002042.JGD 3536 bytes
File G:\RECYCLER\NPROTECT\00002043.JGD 3920 bytes
File G:\RECYCLER\NPROTECT\00002044.JGD 3728 bytes
File G:\RECYCLER\NPROTECT\00002045.JGD 3856 bytes
File G:\RECYCLER\NPROTECT\00002046.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00002047.JGD 3536 bytes
File G:\RECYCLER\NPROTECT\00002048.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00002049.JGD 4368 bytes
File G:\RECYCLER\NPROTECT\00002050.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00002051.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00002052.JGD 4752 bytes
File G:\RECYCLER\NPROTECT\00002053.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00002054.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00002055.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00002057.JGD 14736 bytes
File G:\RECYCLER\NPROTECT\00002058.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00002059.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00002060.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00002061.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00002062.JGD 4944 bytes
File G:\RECYCLER\NPROTECT\00002063.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00002064.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00002065.JGD 4944 bytes
File G:\RECYCLER\NPROTECT\00002066.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00002067.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00002068.JGD 20624 bytes
File G:\RECYCLER\NPROTECT\00002069.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00002070.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00002071.JGD 5584 bytes
File G:\RECYCLER\NPROTECT\00002072.JGD 5520 bytes
File G:\RECYCLER\NPROTECT\00002073.JGD 6032 bytes
File G:\RECYCLER\NPROTECT\00002075.JGD 5520 bytes
File G:\RECYCLER\NPROTECT\00002076.JGD 6032 bytes
File G:\RECYCLER\NPROTECT\00002077.JGD 6416 bytes
File G:\RECYCLER\NPROTECT\00002078.JGD 6736 bytes
File G:\RECYCLER\NPROTECT\00002079.JGD 47120 bytes
File G:\RECYCLER\NPROTECT\00002080.JGD 7440 bytes
File G:\RECYCLER\NPROTECT\00002081.JGD 7568 bytes
File G:\RECYCLER\NPROTECT\00002082.JGD 9872 bytes
File G:\RECYCLER\NPROTECT\00002083.JGD 9168 bytes
File G:\RECYCLER\NPROTECT\00002084.JGD 10320 bytes
File G:\RECYCLER\NPROTECT\00002085.JGD 3024 bytes
File G:\RECYCLER\NPROTECT\00002086.JGD 3536 bytes
File G:\RECYCLER\NPROTECT\00002087.JGD 3920 bytes
File G:\RECYCLER\NPROTECT\00002088.JGD 3344 bytes
File G:\RECYCLER\NPROTECT\00002089.JGD 5264 bytes
File G:\RECYCLER\NPROTECT\00002090.JGD 41488 bytes
File G:\RECYCLER\NPROTECT\00002091.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00002093.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00002094.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00002095.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00002096.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00002097.JGD 7824 bytes
File G:\RECYCLER\NPROTECT\00002098.JGD 55120 bytes
File G:\RECYCLER\NPROTECT\00002099.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00002100.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00002101.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00002102.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00002103.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002104.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002105.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002106.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002107.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00002108.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00002109.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00002111.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002112.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002113.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002114.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002115.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002116.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002117.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002118.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002119.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00002120.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00002121.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00002122.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00002123.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00002124.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00002125.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00002126.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00002127.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002129.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002130.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002131.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00002132.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00002133.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00002134.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00002135.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002136.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002137.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002138.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002139.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002140.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002141.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002142.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002143.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00002144.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00002145.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00002147.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002148.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002149.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002150.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002151.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002152.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002153.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002154.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002155.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00002156.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00002157.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00002158.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00002159.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002160.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002161.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002162.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002163.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001858.JGD 3536 bytes
File G:\RECYCLER\NPROTECT\00001876.JGD 38416 bytes
File G:\RECYCLER\NPROTECT\00001894.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001912.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001930.JGD 3728 bytes
File G:\RECYCLER\NPROTECT\00001948.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00001966.JGD 7440 bytes
File G:\RECYCLER\NPROTECT\00001984.JGD 55120 bytes
File G:\RECYCLER\NPROTECT\00002002.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00002020.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00002038.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00002056.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00002074.JGD 6032 bytes
File G:\RECYCLER\NPROTECT\00002092.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00002110.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00002128.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002146.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00002164.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002165.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002166.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002167.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00002168.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00002169.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00002170.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00002171.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002172.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002173.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002174.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00002175.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002176.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002177.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002178.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00002179.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00002180.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00002181.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00002182.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00002183.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002184.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002185.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002186.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00002187.EXE 70880 bytes
File G:\RECYCLER\NPROTECT\00002188.LOG 83116 bytes
File G:\RECYCLER\NPROTECT\NPROTECT.LOG 646528 bytes
File G:\RECYCLER\NPROTECT\00000689.JGD 3472 bytes
File G:\RECYCLER\NPROTECT\00000690.JGD 3472 bytes
File G:\RECYCLER\NPROTECT\00000691.JGD 3600 bytes
File G:\RECYCLER\NPROTECT\00000692.JGD 3472 bytes
File G:\RECYCLER\NPROTECT\00000693.JGD 3536 bytes
File G:\RECYCLER\NPROTECT\00000694.JGD 16224 bytes
File G:\RECYCLER\NPROTECT\00000695.JGD 3920 bytes
File G:\RECYCLER\NPROTECT\00000696.JGD 3664 bytes
File G:\RECYCLER\NPROTECT\00000697.JGD 3856 bytes
File G:\RECYCLER\NPROTECT\00000698.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00000699.JGD 4368 bytes
File G:\RECYCLER\NPROTECT\00000700.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00000701.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00000702.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00000703.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00000704.JGD 4368 bytes
File G:\RECYCLER\NPROTECT\00000705.JGD 15632 bytes
File G:\RECYCLER\NPROTECT\00000707.JGD 4112 bytes
File G:\RECYCLER\NPROTECT\00000708.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00000709.JGD 4368 bytes
File G:\RECYCLER\NPROTECT\00000710.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000711.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000712.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000713.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00000714.JGD 4880 bytes
File G:\RECYCLER\NPROTECT\00000715.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00000716.JGD 20816 bytes
File G:\RECYCLER\NPROTECT\00000717.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00000718.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00000719.JGD 5456 bytes
File G:\RECYCLER\NPROTECT\00000720.JGD 6032 bytes
File G:\RECYCLER\NPROTECT\00000721.JGD 6224 bytes
File G:\RECYCLER\NPROTECT\00000722.JGD 6096 bytes
File G:\RECYCLER\NPROTECT\00000723.JGD 6096 bytes
File G:\RECYCLER\NPROTECT\00000725.JGD 6288 bytes
File G:\RECYCLER\NPROTECT\00000726.JGD 6544 bytes
File G:\RECYCLER\NPROTECT\00000727.JGD 35600 bytes
File G:\RECYCLER\NPROTECT\00000728.JGD 6672 bytes
File G:\RECYCLER\NPROTECT\00000729.JGD 8016 bytes
File G:\RECYCLER\NPROTECT\00000730.JGD 9040 bytes
File G:\RECYCLER\NPROTECT\00000731.JGD 8912 bytes
File G:\RECYCLER\NPROTECT\00000732.JGD 10768 bytes
File G:\RECYCLER\NPROTECT\00000733.JGD 3024 bytes
File G:\RECYCLER\NPROTECT\00000734.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00000735.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00000736.JGD 3984 bytes
File G:\RECYCLER\NPROTECT\00000737.JGD 3344 bytes
File G:\RECYCLER\NPROTECT\00000738.JGD 49168 bytes
File G:\RECYCLER\NPROTECT\00000739.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00000740.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00000741.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000743.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00000744.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00000745.JGD 7824 bytes
File G:\RECYCLER\NPROTECT\00000746.JGD 61840 bytes
File G:\RECYCLER\NPROTECT\00000747.JGD 67920 bytes
File G:\RECYCLER\NPROTECT\00000748.JGD 16224 bytes
File G:\RECYCLER\NPROTECT\00000749.JGD 37904 bytes
File G:\RECYCLER\NPROTECT\00000750.JGD 42768 bytes
File G:\RECYCLER\NPROTECT\00000751.JGD 42256 bytes
File G:\RECYCLER\NPROTECT\00000752.JGD 38416 bytes
File G:\RECYCLER\NPROTECT\00000753.JGD 24656 bytes
File G:\RECYCLER\NPROTECT\00000754.JGD 40192 bytes
File G:\RECYCLER\NPROTECT\00000755.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00000756.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00000757.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00000758.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00000759.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00000761.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00000762.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000763.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000764.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000765.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00000766.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000767.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000768.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000769.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00000770.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00000771.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000772.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000773.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000774.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00000775.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000776.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000777.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000779.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000780.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000781.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000782.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000783.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000784.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000785.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000786.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000787.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000788.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000789.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000790.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000791.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000792.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000793.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000794.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00000795.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00000797.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00000798.JGD 11008 bytes
File G:\RECYCLER\NPROTECT\00000799.JGD 9984 bytes
File G:\RECYCLER\NPROTECT\00000800.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00000801.JGD 20240 bytes
File G:\RECYCLER\NPROTECT\00000802.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00000803.JGD 3344 bytes
File G:\RECYCLER\NPROTECT\00000804.JGD 3472 bytes
File G:\RECYCLER\NPROTECT\00000805.JGD 3344 bytes
File G:\RECYCLER\NPROTECT\00000806.JGD 3216 bytes
File G:\RECYCLER\NPROTECT\00000807.JGD 3216 bytes
File G:\RECYCLER\NPROTECT\00000808.JGD 15424 bytes
File G:\RECYCLER\NPROTECT\00000809.JGD 3600 bytes
File G:\RECYCLER\NPROTECT\00000810.JGD 3472 bytes
File G:\RECYCLER\NPROTECT\00000811.JGD 3472 bytes
File G:\RECYCLER\NPROTECT\00000812.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00000813.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00000815.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00000816.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00000817.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00000818.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00000819.JGD 13968 bytes
File G:\RECYCLER\NPROTECT\00000820.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00000821.JGD 3728 bytes
File G:\RECYCLER\NPROTECT\00000822.JGD 3792 bytes
File G:\RECYCLER\NPROTECT\00000823.JGD 4368 bytes
File G:\RECYCLER\NPROTECT\00000824.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000825.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000826.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000827.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00000828.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00000829.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00000830.JGD 20816 bytes
File G:\RECYCLER\NPROTECT\00000831.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00000833.JGD 4880 bytes
File G:\RECYCLER\NPROTECT\00000834.JGD 5456 bytes
File G:\RECYCLER\NPROTECT\00000835.JGD 6096 bytes
File G:\RECYCLER\NPROTECT\00000836.JGD 6096 bytes
File G:\RECYCLER\NPROTECT\00000837.JGD 6224 bytes
File G:\RECYCLER\NPROTECT\00000838.JGD 6096 bytes
File G:\RECYCLER\NPROTECT\00000839.JGD 6352 bytes
File G:\RECYCLER\NPROTECT\00000840.JGD 6544 bytes
File G:\RECYCLER\NPROTECT\00000841.JGD 42000 bytes
File G:\RECYCLER\NPROTECT\00000842.JGD 7440 bytes
File G:\RECYCLER\NPROTECT\00000843.JGD 8016 bytes
File G:\RECYCLER\NPROTECT\00000844.JGD 9040 bytes
File G:\RECYCLER\NPROTECT\00000845.JGD 9680 bytes
File G:\RECYCLER\NPROTECT\00000846.JGD 10768 bytes
File G:\RECYCLER\NPROTECT\00000847.JGD 3024 bytes
File G:\RECYCLER\NPROTECT\00000848.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00000849.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00000851.JGD 3344 bytes
File G:\RECYCLER\NPROTECT\00000852.JGD 37392 bytes
File G:\RECYCLER\NPROTECT\00000853.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00000854.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00000855.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000856.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000857.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00000858.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00000859.JGD 7824 bytes
File G:\RECYCLER\NPROTECT\00000860.JGD 55120 bytes
File G:\RECYCLER\NPROTECT\00000861.JGD 67920 bytes
File G:\RECYCLER\NPROTECT\00000862.JGD 15424 bytes
File G:\RECYCLER\NPROTECT\00000863.JGD 36112 bytes
File G:\RECYCLER\NPROTECT\00000864.JGD 42768 bytes
File G:\RECYCLER\NPROTECT\00000865.JGD 42256 bytes
File G:\RECYCLER\NPROTECT\00000866.JGD 42000 bytes
File G:\RECYCLER\NPROTECT\00000867.JGD 28688 bytes
File G:\RECYCLER\NPROTECT\00000869.JGD 16400 bytes
File G:\RECYCLER\NPROTECT\00000870.JGD 16400 bytes
File G:\RECYCLER\NPROTECT\00000871.JGD 16400 bytes
File G:\RECYCLER\NPROTECT\00000872.JGD 16400 bytes
File G:\RECYCLER\NPROTECT\00000873.JGD 16400 bytes
File G:\RECYCLER\NPROTECT\00000874.JGD 12432 bytes
File G:\RECYCLER\NPROTECT\00000875.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000876.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000877.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000878.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000879.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000880.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000881.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000882.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00000883.JGD 16224 bytes
File G:\RECYCLER\NPROTECT\00000884.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000885.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000887.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000888.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000889.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000890.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000891.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000892.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000893.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000894.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000895.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000896.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000897.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000898.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000899.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000900.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000901.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000902.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000903.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000905.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000906.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000907.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000908.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00000909.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00000910.JGD 4224 bytes
File G:\RECYCLER\NPROTECT\00000911.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00000912.JGD 11008 bytes
File G:\RECYCLER\NPROTECT\00000913.JGD 9984 bytes
File G:\RECYCLER\NPROTECT\00000914.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00000915.JGD 24464 bytes
File G:\RECYCLER\NPROTECT\00000916.JGD 3280 bytes
File G:\RECYCLER\NPROTECT\00000917.JGD 3536 bytes
File G:\RECYCLER\NPROTECT\00000918.JGD 3728 bytes
File G:\RECYCLER\NPROTECT\00000919.JGD 3664 bytes
File G:\RECYCLER\NPROTECT\00000920.JGD 3472 bytes
File G:\RECYCLER\NPROTECT\00000921.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00000923.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00000924.JGD 3472 bytes
File G:\RECYCLER\NPROTECT\00000925.JGD 3216 bytes
File G:\RECYCLER\NPROTECT\00000926.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00000927.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00000928.JGD 4176 bytes
File G:\RECYCLER\NPROTECT\00000929.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00000930.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00000931.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00000932.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00000933.JGD 14736 bytes
File G:\RECYCLER\NPROTECT\00000934.JGD 4496 bytes
File G:\RECYCLER\NPROTECT\00000935.JGD 4112 bytes
File G:\RECYCLER\NPROTECT\00000936.JGD 4112 bytes
File G:\RECYCLER\NPROTECT\00000937.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00000938.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000939.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000706.JGD 4368 bytes
File G:\RECYCLER\NPROTECT\00000724.JGD 6096 bytes
File G:\RECYCLER\NPROTECT\00000742.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000760.JGD 10768 bytes
File G:\RECYCLER\NPROTECT\00000778.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000796.JGD 4864 bytes
File G:\RECYCLER\NPROTECT\00000814.JGD 3792 bytes
File G:\RECYCLER\NPROTECT\00000832.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00000850.JGD 3984 bytes
File G:\RECYCLER\NPROTECT\00000868.JGD 40448 bytes
File G:\RECYCLER\NPROTECT\00000886.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000904.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00000941.JGD 4880 bytes
File G:\RECYCLER\NPROTECT\00000942.JGD 4688 bytes
File G:\RECYCLER\NPROTECT\00000943.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00000944.JGD 20624 bytes
File G:\RECYCLER\NPROTECT\00000945.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00000946.JGD 5136 bytes
File G:\RECYCLER\NPROTECT\00000947.JGD 5456 bytes
File G:\RECYCLER\NPROTECT\00000948.JGD 5968 bytes
File G:\RECYCLER\NPROTECT\00000949.JGD 6096 bytes
File G:\RECYCLER\NPROTECT\00000950.JGD 6096 bytes
File G:\RECYCLER\NPROTECT\00000951.JGD 6224 bytes
File G:\RECYCLER\NPROTECT\00000952.JGD 6096 bytes
File G:\RECYCLER\NPROTECT\00000953.JGD 6288 bytes
File G:\RECYCLER\NPROTECT\00000954.JGD 6544 bytes
File G:\RECYCLER\NPROTECT\00000955.JGD 47120 bytes
File G:\RECYCLER\NPROTECT\00000956.JGD 6672 bytes
File G:\RECYCLER\NPROTECT\00000957.JGD 8016 bytes
File G:\RECYCLER\NPROTECT\00000959.JGD 9680 bytes
File G:\RECYCLER\NPROTECT\00000960.JGD 10768 bytes
File G:\RECYCLER\NPROTECT\00000961.JGD 3024 bytes
File G:\RECYCLER\NPROTECT\00000962.JGD 4240 bytes
File G:\RECYCLER\NPROTECT\00000963.JGD 4304 bytes
File G:\RECYCLER\NPROTECT\00000964.JGD 3984 bytes
File G:\RECYCLER\NPROTECT\00000965.JGD 3344 bytes
File G:\RECYCLER\NPROTECT\00000966.JGD 41488 bytes
File G:\RECYCLER\NPROTECT\00000967.JGD 4624 bytes
File G:\RECYCLER\NPROTECT\00000968.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00000969.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000970.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000971.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00000972.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00000973.JGD 7824 bytes
File G:\RECYCLER\NPROTECT\00000974.JGD 55120 bytes
File G:\RECYCLER\NPROTECT\00000975.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00000977.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00000978.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00000979.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00000980.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00000981.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00000982.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00000983.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00000984.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00000985.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00000986.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00000987.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00000988.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00000989.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00000990.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00000991.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00000992.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00000993.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00000995.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00000996.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00000997.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00000998.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00000999.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001000.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001001.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001002.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00001003.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001004.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001005.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001006.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001007.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001008.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001009.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001010.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001011.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001013.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001014.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001015.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001016.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001017.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001018.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001019.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00001020.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00001021.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00001022.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00001023.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001024.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001025.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001026.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001027.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001028.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001029.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001031.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001032.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001033.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001034.JGD 14608 bytes
File G:\RECYCLER\NPROTECT\00001035.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001036.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001037.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001038.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001039.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001040.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001041.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001042.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001043.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00001044.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00001045.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00001046.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00001047.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001049.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001050.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001051.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001052.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001053.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001054.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001055.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001056.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001057.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001058.JGD 16528 bytes
File G:\RECYCLER\NPROTECT\00001059.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001060.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001061.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001062.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001063.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001064.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001065.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001067.JGD 12160 bytes
File G:\RECYCLER\NPROTECT\00001068.JGD 12160 bytes
File G:\RECYCLER\NPROTECT\00001069.JGD 12160 bytes
File G:\RECYCLER\NPROTECT\00001070.JGD 12160 bytes
File G:\RECYCLER\NPROTECT\00001071.JGD 135440 bytes
File G:\RECYCLER\NPROTECT\00001072.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001073.JGD 40720 bytes
File G:\RECYCLER\NPROTECT\00001074.JGD 40758 bytes
File G:\RECYCLER\NPROTECT\00001075.JGD 41488 bytes
File G:\RECYCLER\NPROTECT\00001076.JGD 41488 bytes
File G:\RECYCLER\NPROTECT\00001077.JGD 39952 bytes
File G:\RECYCLER\NPROTECT\00001078.JGD 39952 bytes
File G:\RECYCLER\NPROTECT\00001079.JGD 42000 bytes
File G:\RECYCLER\NPROTECT\00001080.JGD 42000 bytes
File G:\RECYCLER\NPROTECT\00001081.JGD 28496 bytes
File G:\RECYCLER\NPROTECT\00001082.JGD 40192 bytes
File G:\RECYCLER\NPROTECT\00001083.JGD 15744 bytes
File G:\RECYCLER\NPROTECT\00001085.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001086.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001087.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001088.JGD 12032 bytes
File G:\RECYCLER\NPROTECT\00001089.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001090.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001091.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001092.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001093.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001094.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001095.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001096.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001097.JGD 15424 bytes
File G:\RECYCLER\NPROTECT\00001098.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001099.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001100.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001101.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001103.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001104.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001105.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001106.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001107.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001108.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001109.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001110.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001111.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001112.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001113.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001114.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001115.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001116.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001117.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001118.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001119.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001121.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001122.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001123.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001124.JGD 4214 bytes
File G:\RECYCLER\NPROTECT\00001125.JGD 16224 bytes
File G:\RECYCLER\NPROTECT\00001126.JGD 11008 bytes
File G:\RECYCLER\NPROTECT\00001127.JGD 11024 bytes
File G:\RECYCLER\NPROTECT\00001128.JGD 9984 bytes
File G:\RECYCLER\NPROTECT\00001129.JGD 10000 bytes
File G:\RECYCLER\NPROTECT\00001130.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00001131.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00001132.JGD 24464 bytes
File G:\RECYCLER\NPROTECT\00001133.JGD 24464 bytes
File G:\RECYCLER\NPROTECT\00001134.JGD 4032 bytes
File G:\RECYCLER\NPROTECT\00001135.JGD 3648 bytes
File G:\RECYCLER\NPROTECT\00001136.JGD 4096 bytes
File G:\RECYCLER\NPROTECT\00001137.JGD 3520 bytes
File G:\RECYCLER\NPROTECT\00001139.JGD 3712 bytes
File G:\RECYCLER\NPROTECT\00001140.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001141.JGD 4288 bytes
File G:\RECYCLER\NPROTECT\00001142.JGD 4608 bytes
File G:\RECYCLER\NPROTECT\00001143.JGD 4416 bytes
File G:\RECYCLER\NPROTECT\00001144.JGD 3712 bytes
File G:\RECYCLER\NPROTECT\00001145.JGD 4224 bytes
File G:\RECYCLER\NPROTECT\00001146.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001147.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001148.JGD 3712 bytes
File G:\RECYCLER\NPROTECT\00001149.JGD 4096 bytes
File G:\RECYCLER\NPROTECT\00001150.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001151.JGD 14864 bytes
File G:\RECYCLER\NPROTECT\00001152.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001153.JGD 3712 bytes
File G:\RECYCLER\NPROTECT\00001154.JGD 4160 bytes
File G:\RECYCLER\NPROTECT\00001155.JGD 4288 bytes
File G:\RECYCLER\NPROTECT\00001157.JGD 5056 bytes
File G:\RECYCLER\NPROTECT\00001158.JGD 5120 bytes
File G:\RECYCLER\NPROTECT\00001159.JGD 4992 bytes
File G:\RECYCLER\NPROTECT\00001160.JGD 4672 bytes
File G:\RECYCLER\NPROTECT\00001161.JGD 5696 bytes
File G:\RECYCLER\NPROTECT\00001162.JGD 24656 bytes
File G:\RECYCLER\NPROTECT\00001163.JGD 4480 bytes
File G:\RECYCLER\NPROTECT\00001164.JGD 5120 bytes
File G:\RECYCLER\NPROTECT\00001165.JGD 4992 bytes
File G:\RECYCLER\NPROTECT\00001166.JGD 5376 bytes
File G:\RECYCLER\NPROTECT\00001167.JGD 6016 bytes
File G:\RECYCLER\NPROTECT\00001168.JGD 6016 bytes
File G:\RECYCLER\NPROTECT\00001169.JGD 5440 bytes
File G:\RECYCLER\NPROTECT\00001170.JGD 6080 bytes
File G:\RECYCLER\NPROTECT\00001171.JGD 6272 bytes
File G:\RECYCLER\NPROTECT\00001172.JGD 6592 bytes
File G:\RECYCLER\NPROTECT\00001173.JGD 24656 bytes
File G:\RECYCLER\NPROTECT\00001175.JGD 7488 bytes
File G:\RECYCLER\NPROTECT\00001176.JGD 7616 bytes
File G:\RECYCLER\NPROTECT\00001177.JGD 9024 bytes
File G:\RECYCLER\NPROTECT\00001178.JGD 8704 bytes
File G:\RECYCLER\NPROTECT\00001179.JGD 10368 bytes
File G:\RECYCLER\NPROTECT\00001180.JGD 3008 bytes
File G:\RECYCLER\NPROTECT\00001181.JGD 3520 bytes
File G:\RECYCLER\NPROTECT\00001182.JGD 3392 bytes
File G:\RECYCLER\NPROTECT\00001183.JGD 3968 bytes
File G:\RECYCLER\NPROTECT\00001184.JGD 3328 bytes
File G:\RECYCLER\NPROTECT\00001185.JGD 43280 bytes
File G:\RECYCLER\NPROTECT\00001186.JGD 53264 bytes
File G:\RECYCLER\NPROTECT\00001187.JGD 3520 bytes
File G:\RECYCLER\NPROTECT\00001188.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00001189.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001190.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001191.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001193.JGD 7824 bytes
File G:\RECYCLER\NPROTECT\00001194.JGD 59600 bytes
File G:\RECYCLER\NPROTECT\00001195.JGD 116240 bytes
File G:\RECYCLER\NPROTECT\00001196.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001197.JGD 39696 bytes
File G:\RECYCLER\NPROTECT\00001198.JGD 41488 bytes
File G:\RECYCLER\NPROTECT\00001199.JGD 39952 bytes
File G:\RECYCLER\NPROTECT\00001200.JGD 38672 bytes
File G:\RECYCLER\NPROTECT\00001201.JGD 24656 bytes
File G:\RECYCLER\NPROTECT\00001202.JGD 40448 bytes
File G:\RECYCLER\NPROTECT\00001203.JGD 15744 bytes
File G:\RECYCLER\NPROTECT\00001204.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001205.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001206.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001207.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001208.JGD 12288 bytes
File G:\RECYCLER\NPROTECT\00001209.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001211.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001212.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001213.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001214.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001215.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001216.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001217.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001218.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001219.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001220.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001221.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001222.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001223.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001224.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001225.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001226.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001227.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001229.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001230.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001231.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001232.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001233.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001234.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001235.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001236.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001237.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001238.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001239.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001240.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001241.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001242.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001243.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001244.JGD 4864 bytes
File G:\RECYCLER\NPROTECT\00001245.JGD 15424 bytes
File G:\RECYCLER\NPROTECT\00000940.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00000958.JGD 9040 bytes
File G:\RECYCLER\NPROTECT\00000976.JGD 11920 bytes
File G:\RECYCLER\NPROTECT\00000994.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001012.JGD 11536 bytes
File G:\RECYCLER\NPROTECT\00001030.JGD 11280 bytes
File G:\RECYCLER\NPROTECT\00001048.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001066.JGD 13712 bytes
File G:\RECYCLER\NPROTECT\00001084.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001102.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001120.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001138.JGD 3968 bytes
File G:\RECYCLER\NPROTECT\00001156.JGD 4992 bytes
File G:\RECYCLER\NPROTECT\00001174.JGD 43280 bytes
File G:\RECYCLER\NPROTECT\00001192.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001210.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00000922.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001228.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001534.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001840.JGD 20816 bytes
File G:\RECYCLER\NPROTECT\00001247.JGD 10240 bytes
File G:\RECYCLER\NPROTECT\00001248.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00001249.JGD 20240 bytes
File G:\RECYCLER\NPROTECT\00001250.JGD 3648 bytes
File G:\RECYCLER\NPROTECT\00001251.JGD 3392 bytes
File G:\RECYCLER\NPROTECT\00001252.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001253.JGD 3200 bytes
File G:\RECYCLER\NPROTECT\00001254.JGD 4416 bytes
File G:\RECYCLER\NPROTECT\00001255.JGD 3712 bytes
File G:\RECYCLER\NPROTECT\00001256.JGD 16224 bytes
File G:\RECYCLER\NPROTECT\00001257.JGD 4608 bytes
File G:\RECYCLER\NPROTECT\00001258.JGD 4032 bytes
File G:\RECYCLER\NPROTECT\00001259.JGD 3904 bytes
File G:\RECYCLER\NPROTECT\00001260.JGD 3328 bytes
File G:\RECYCLER\NPROTECT\00001261.JGD 4224 bytes
File G:\RECYCLER\NPROTECT\00001262.JGD 4288 bytes
File G:\RECYCLER\NPROTECT\00001263.JGD 4160 bytes
File G:\RECYCLER\NPROTECT\00001265.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001266.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001267.JGD 15632 bytes
File G:\RECYCLER\NPROTECT\00001268.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001269.JGD 4224 bytes
File G:\RECYCLER\NPROTECT\00001270.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001271.JGD 4096 bytes
File G:\RECYCLER\NPROTECT\00001272.JGD 4992 bytes
File G:\RECYCLER\NPROTECT\00001273.JGD 4672 bytes
File G:\RECYCLER\NPROTECT\00001274.JGD 5696 bytes
File G:\RECYCLER\NPROTECT\00001275.JGD 4480 bytes
File G:\RECYCLER\NPROTECT\00001276.JGD 4672 bytes
File G:\RECYCLER\NPROTECT\00001277.JGD 5120 bytes
File G:\RECYCLER\NPROTECT\00001278.JGD 20816 bytes
File G:\RECYCLER\NPROTECT\00001279.JGD 4480 bytes
File G:\RECYCLER\NPROTECT\00001280.JGD 5248 bytes
File G:\RECYCLER\NPROTECT\00001281.JGD 5440 bytes
File G:\RECYCLER\NPROTECT\00001283.JGD 6080 bytes
File G:\RECYCLER\NPROTECT\00001284.JGD 6016 bytes
File G:\RECYCLER\NPROTECT\00001285.JGD 5376 bytes
File G:\RECYCLER\NPROTECT\00001286.JGD 6016 bytes
File G:\RECYCLER\NPROTECT\00001287.JGD 6272 bytes
File G:\RECYCLER\NPROTECT\00001288.JGD 6592 bytes
File G:\RECYCLER\NPROTECT\00001289.JGD 35600 bytes
File G:\RECYCLER\NPROTECT\00001290.JGD 7232 bytes
File G:\RECYCLER\NPROTECT\00001291.JGD 7616 bytes
File G:\RECYCLER\NPROTECT\00001292.JGD 9024 bytes
File G:\RECYCLER\NPROTECT\00001293.JGD 8704 bytes
File G:\RECYCLER\NPROTECT\00001294.JGD 10368 bytes
File G:\RECYCLER\NPROTECT\00001295.JGD 3008 bytes
File G:\RECYCLER\NPROTECT\00001296.JGD 3392 bytes
File G:\RECYCLER\NPROTECT\00001297.JGD 3520 bytes
File G:\RECYCLER\NPROTECT\00001298.JGD 3968 bytes
File G:\RECYCLER\NPROTECT\00001299.JGD 3264 bytes
File G:\RECYCLER\NPROTECT\00001301.JGD 3520 bytes
File G:\RECYCLER\NPROTECT\00001302.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00001303.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001304.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001305.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001306.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001307.JGD 7824 bytes
File G:\RECYCLER\NPROTECT\00001308.JGD 61840 bytes
File G:\RECYCLER\NPROTECT\00001309.JGD 105360 bytes
File G:\RECYCLER\NPROTECT\00001310.JGD 16224 bytes
File G:\RECYCLER\NPROTECT\00001311.JGD 37904 bytes
File G:\RECYCLER\NPROTECT\00001312.JGD 42768 bytes
File G:\RECYCLER\NPROTECT\00001313.JGD 42256 bytes
File G:\RECYCLER\NPROTECT\00001314.JGD 38416 bytes
File G:\RECYCLER\NPROTECT\00001315.JGD 24656 bytes
File G:\RECYCLER\NPROTECT\00001316.JGD 40192 bytes
File G:\RECYCLER\NPROTECT\00001317.JGD 15744 bytes
File G:\RECYCLER\NPROTECT\00001319.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001320.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001321.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001322.JGD 10624 bytes
File G:\RECYCLER\NPROTECT\00001323.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001324.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001325.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001326.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001327.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001328.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001329.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001330.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001331.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001332.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001333.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001334.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001335.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001337.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001338.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001339.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001340.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001341.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001342.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001343.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001344.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001345.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001346.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001347.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001348.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001349.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001350.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001351.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001352.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001353.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001355.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001356.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001357.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001358.JGD 4864 bytes
File G:\RECYCLER\NPROTECT\00001359.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001360.JGD 11008 bytes
File G:\RECYCLER\NPROTECT\00001361.JGD 9984 bytes
File G:\RECYCLER\NPROTECT\00001362.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00001363.JGD 20240 bytes
File G:\RECYCLER\NPROTECT\00001364.JGD 3264 bytes
File G:\RECYCLER\NPROTECT\00001365.JGD 3200 bytes
File G:\RECYCLER\NPROTECT\00001366.JGD 4032 bytes
File G:\RECYCLER\NPROTECT\00001367.JGD 3520 bytes
File G:\RECYCLER\NPROTECT\00001368.JGD 3904 bytes
File G:\RECYCLER\NPROTECT\00001369.JGD 3328 bytes
File G:\RECYCLER\NPROTECT\00001370.JGD 15424 bytes
File G:\RECYCLER\NPROTECT\00001371.JGD 4032 bytes
File G:\RECYCLER\NPROTECT\00001373.JGD 3584 bytes
File G:\RECYCLER\NPROTECT\00001374.JGD 3328 bytes
File G:\RECYCLER\NPROTECT\00001375.JGD 3712 bytes
File G:\RECYCLER\NPROTECT\00001376.JGD 4096 bytes
File G:\RECYCLER\NPROTECT\00001377.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001378.JGD 4224 bytes
File G:\RECYCLER\NPROTECT\00001379.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001380.JGD 4160 bytes
File G:\RECYCLER\NPROTECT\00001381.JGD 13968 bytes
File G:\RECYCLER\NPROTECT\00001382.JGD 4288 bytes
File G:\RECYCLER\NPROTECT\00001383.JGD 4224 bytes
File G:\RECYCLER\NPROTECT\00001384.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001385.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001386.JGD 4480 bytes
File G:\RECYCLER\NPROTECT\00001387.JGD 4672 bytes
File G:\RECYCLER\NPROTECT\00001388.JGD 5120 bytes
File G:\RECYCLER\NPROTECT\00001389.JGD 4480 bytes
File G:\RECYCLER\NPROTECT\00001391.JGD 5248 bytes
File G:\RECYCLER\NPROTECT\00001392.JGD 20816 bytes
File G:\RECYCLER\NPROTECT\00001393.JGD 4992 bytes
File G:\RECYCLER\NPROTECT\00001394.JGD 5120 bytes
File G:\RECYCLER\NPROTECT\00001395.JGD 4928 bytes
File G:\RECYCLER\NPROTECT\00001396.JGD 5376 bytes
File G:\RECYCLER\NPROTECT\00001397.JGD 6016 bytes
File G:\RECYCLER\NPROTECT\00001398.JGD 6016 bytes
File G:\RECYCLER\NPROTECT\00001399.JGD 5440 bytes
File G:\RECYCLER\NPROTECT\00001400.JGD 6080 bytes
File G:\RECYCLER\NPROTECT\00001401.JGD 6272 bytes
File G:\RECYCLER\NPROTECT\00001402.JGD 6464 bytes
File G:\RECYCLER\NPROTECT\00001403.JGD 42000 bytes
File G:\RECYCLER\NPROTECT\00001404.JGD 7232 bytes
File G:\RECYCLER\NPROTECT\00001405.JGD 7616 bytes
File G:\RECYCLER\NPROTECT\00001406.JGD 9024 bytes
File G:\RECYCLER\NPROTECT\00001407.JGD 8704 bytes
File G:\RECYCLER\NPROTECT\00001409.JGD 3008 bytes
File G:\RECYCLER\NPROTECT\00001410.JGD 3520 bytes
File G:\RECYCLER\NPROTECT\00001411.JGD 3520 bytes
File G:\RECYCLER\NPROTECT\00001412.JGD 4032 bytes
File G:\RECYCLER\NPROTECT\00001413.JGD 3264 bytes
File G:\RECYCLER\NPROTECT\00001414.JGD 37392 bytes
File G:\RECYCLER\NPROTECT\00001415.JGD 3520 bytes
File G:\RECYCLER\NPROTECT\00001416.JGD 3408 bytes
File G:\RECYCLER\NPROTECT\00001417.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001418.JGD 5008 bytes
File G:\RECYCLER\NPROTECT\00001419.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001420.JGD 5648 bytes
File G:\RECYCLER\NPROTECT\00001421.JGD 7824 bytes
File G:\RECYCLER\NPROTECT\00001422.JGD 55120 bytes
File G:\RECYCLER\NPROTECT\00001423.JGD 107280 bytes
File G:\RECYCLER\NPROTECT\00001424.JGD 15424 bytes
File G:\RECYCLER\NPROTECT\00001425.JGD 36112 bytes
File G:\RECYCLER\NPROTECT\00001427.JGD 42256 bytes
File G:\RECYCLER\NPROTECT\00001428.JGD 42000 bytes
File G:\RECYCLER\NPROTECT\00001429.JGD 28688 bytes
File G:\RECYCLER\NPROTECT\00001430.JGD 40448 bytes
File G:\RECYCLER\NPROTECT\00001431.JGD 15744 bytes
File G:\RECYCLER\NPROTECT\00001432.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001433.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001434.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001435.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001436.JGD 12160 bytes
File G:\RECYCLER\NPROTECT\00001437.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001438.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001439.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001440.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001441.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001442.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001443.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001445.JGD 16224 bytes
File G:\RECYCLER\NPROTECT\00001446.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001447.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001448.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001449.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001450.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001451.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001452.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001453.JGD 16758 bytes
File G:\RECYCLER\NPROTECT\00001454.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001455.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001456.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001457.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001458.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001459.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001460.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001461.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001463.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001464.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001465.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001466.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001467.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001468.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001469.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001470.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001471.JGD 28880 bytes
File G:\RECYCLER\NPROTECT\00001472.JGD 4224 bytes
File G:\RECYCLER\NPROTECT\00001473.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001474.JGD 11008 bytes
File G:\RECYCLER\NPROTECT\00001475.JGD 9984 bytes
File G:\RECYCLER\NPROTECT\00001476.JGD 17200 bytes
File G:\RECYCLER\NPROTECT\00001477.JGD 24464 bytes
File G:\RECYCLER\NPROTECT\00001478.JGD 3520 bytes
File G:\RECYCLER\NPROTECT\00001479.JGD 3392 bytes
File G:\RECYCLER\NPROTECT\00001481.JGD 4032 bytes
File G:\RECYCLER\NPROTECT\00001482.JGD 3584 bytes
File G:\RECYCLER\NPROTECT\00001483.JGD 3328 bytes
File G:\RECYCLER\NPROTECT\00001484.JGD 16704 bytes
File G:\RECYCLER\NPROTECT\00001485.JGD 3840 bytes
File G:\RECYCLER\NPROTECT\00001486.JGD 4288 bytes
File G:\RECYCLER\NPROTECT\00001487.JGD 3968 bytes
File G:\RECYCLER\NPROTECT\00001488.JGD 3712 bytes
File G:\RECYCLER\NPROTECT\00001489.JGD 3712 bytes
File G:\RECYCLER\NPROTECT\00001490.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001491.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001492.JGD 4224 bytes
File G:\RECYCLER\NPROTECT\00001493.JGD 4288 bytes
File G:\RECYCLER\NPROTECT\00001494.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001495.JGD 14736 bytes
File G:\RECYCLER\NPROTECT\00001496.JGD 4096 bytes
File G:\RECYCLER\NPROTECT\00001497.JGD 3712 bytes
File G:\RECYCLER\NPROTECT\00001499.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001500.JGD 4480 bytes
File G:\RECYCLER\NPROTECT\00001501.JGD 5056 bytes
File G:\RECYCLER\NPROTECT\00001502.JGD 5248 bytes
File G:\RECYCLER\NPROTECT\00001503.JGD 4992 bytes
File G:\RECYCLER\NPROTECT\00001504.JGD 5056 bytes
File G:\RECYCLER\NPROTECT\00001505.JGD 5120 bytes
File G:\RECYCLER\NPROTECT\00001506.JGD 20624 bytes
File G:\RECYCLER\NPROTECT\00001507.JGD 4992 bytes
File G:\RECYCLER\NPROTECT\00001508.JGD 5696 bytes
File G:\RECYCLER\NPROTECT\00001509.JGD 5440 bytes
File G:\RECYCLER\NPROTECT\00001510.JGD 5440 bytes
File G:\RECYCLER\NPROTECT\00001511.JGD 6080 bytes
File G:\RECYCLER\NPROTECT\00001512.JGD 6016 bytes
File G:\RECYCLER\NPROTECT\00001513.JGD 5376 bytes
File G:\RECYCLER\NPROTECT\00001514.JGD 6016 bytes
File G:\RECYCLER\NPROTECT\00001515.JGD 6272 bytes
File G:\RECYCLER\NPROTECT\00001246.JGD 10880 bytes
File G:\RECYCLER\NPROTECT\00001264.JGD 3712 bytes
File G:\RECYCLER\NPROTECT\00001282.JGD 5440 bytes
File G:\RECYCLER\NPROTECT\00001300.JGD 49168 bytes
File G:\RECYCLER\NPROTECT\00001318.JGD 15760 bytes
File G:\RECYCLER\NPROTECT\00001336.JGD 16720 bytes
File G:\RECYCLER\NPROTECT\00001354.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001372.JGD 3840 bytes
File G:\RECYCLER\NPROTECT\00001390.JGD 5056 bytes
File G:\RECYCLER\NPROTECT\00001408.JGD 10368 bytes
File G:\RECYCLER\NPROTECT\00001426.JGD 42768 bytes
File G:\RECYCLER\NPROTECT\00001444.JGD 15798 bytes
File G:\RECYCLER\NPROTECT\00001462.JGD 8192 bytes
File G:\RECYCLER\NPROTECT\00001480.JGD 3648 bytes
File G:\RECYCLER\NPROTECT\00001498.JGD 4544 bytes
File G:\RECYCLER\NPROTECT\00001516.JGD 6464 bytes

---- EOF - GMER 1.0.15 ----

#5 Ich hoffe das war schonmal das Richtige

Und nun noch die OTL Logs :

Code

  OTL logfile created on: 06.02.2010 02:50:18 - Run 1
OTL by OldTimer - Version 3.1.28.0     Folder = C:\Dokumente und Einstellungen\Ilja\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1.024,00 Mb Total Physical Memory | 587,00 Mb Available Physical Memory | 57,00% Memory free
5,00 Gb Paging File | 4,00 Gb Available in Paging File | 92,00% Paging File free
Paging file location(s): D:\pagefile.sys 4096 4096 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 11,00 Gb Total Space | 2,87 Gb Free Space | 26,09% Space Free | Partition Type: NTFS
Drive D: | 4,89 Gb Total Space | 0,86 Gb Free Space | 17,59% Space Free | Partition Type: NTFS
Drive E: | 44,38 Gb Total Space | 14,08 Gb Free Space | 31,72% Space Free | Partition Type: NTFS
Drive F: | 49,71 Gb Total Space | 19,58 Gb Free Space | 39,40% Space Free | Partition Type: NTFS
Drive G: | 39,06 Gb Total Space | 33,07 Gb Free Space | 84,66% Space Free | Partition Type: NTFS
Drive H: | 7,62 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
I: Drive not present or media not loaded
 
Computer Name: WOLFBANE_HOME
Current User Name: Ilja
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - C:\Dokumente und Einstellungen\Ilja\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Gemeinsame Dateien\Common Toolkit Suite\FighterSuiteService.exe (SPAMfighter)
PRC - E:\Fighters\SPYWAREfighter\swproTray.exe (SPAMfighter)
PRC - C:\Programme\Gemeinsame Dateien\Common Toolkit Suite\AVEngine\AVScanningService.exe (Preventon Technologies Limited)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Programme\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
PRC - E:\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - E:\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - E:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\WINDOWS\system32\ati2evxx.exe (ATI Technologies Inc.)
PRC - C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Advanced Micro Devices Inc.)
PRC - C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (ATI Technologies Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
PRC - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe (Analog Devices, Inc.)
PRC - E:\Speed Disk\NOPDB.EXE (Symantec Corporation)
PRC - E:\Norton Utilities\NPROTECT.EXE (Symantec Corporation)
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - C:\Dokumente und Einstellungen\Ilja\Desktop\OTL.exe (OldTimer Tools)
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - (Akamai) -- c:\Programme\Gemeinsame Dateien\Akamai\rswin_3647.dll ()
SRV - (Common Toolkit Service) -- C:\Programme\Gemeinsame Dateien\Common Toolkit Suite\FighterSuiteService.exe (SPAMfighter)
SRV - (AV Engine Scanning Service) -- C:/Programme/Gemeinsame Dateien/Common Toolkit Suite/AVEngine/AVScanningService.exe ()
SRV - (JavaQuickStarterService) -- C:\Programme\Java\jre6\bin\jqs.exe (Sun Microsystems, Inc.)
SRV - (AntiVirService) -- E:\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- E:\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (Ati HotKey Poller) -- C:\WINDOWS\system32\ati2evxx.exe (ATI Technologies Inc.)
SRV - (ATI Smart) -- C:\WINDOWS\system32\ati2sgag.exe ()
SRV - (SoundMAX Agent Service (default)) -- C:\Programme\Analog Devices\SoundMAX\SMAgent.exe (Analog Devices, Inc.)
SRV - (Speed Disk service) -- E:\Speed Disk\NOPDB.EXE (Symantec Corporation)
SRV - (NProtectService) -- E:\Norton Utilities\NPROTECT.EXE (Symantec Corporation)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - (AVFSFilter) -- C:\WINDOWS\system32\drivers\avfsfilter.sys ()
DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (atksgt) -- C:\WINDOWS\system32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\WINDOWS\system32\drivers\lirsgt.sys ()
DRV - (ACEDRV07) -- C:\WINDOWS\system32\drivers\ACEDRV07.sys (Protect Software GmbH)
DRV - (ACEDRV06) -- C:\WINDOWS\system32\drivers\ACEDRV06.sys (Protect Software GmbH)
DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (avgio) -- E:\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (Secdrv) -- C:\WINDOWS\system32\drivers\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)
DRV - (Ptilink) -- C:\WINDOWS\system32\drivers\ptilink.sys (Parallel Technologies, Inc.)
DRV - (HSF_DP) -- C:\WINDOWS\system32\drivers\HSFDPSP2.sys (Conexant Systems, Inc.)
DRV - (mdmxsdk) -- C:\WINDOWS\system32\drivers\mdmxsdk.sys (Conexant)
DRV - (HSFHWBS2) -- C:\WINDOWS\system32\drivers\HSFBS2S2.sys (Conexant Systems, Inc.)
DRV - (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)
DRV - (smwdm) -- C:\WINDOWS\system32\drivers\smwdm.sys (Analog Devices, Inc.)
DRV - (FETNDISB) -- C:\WINDOWS\system32\drivers\fetnd5b.sys (VIA Technologies, Inc.              )
DRV - (viaagp1) -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys (VIA Technologies, Inc.)
DRV - (aeaudio) -- C:\WINDOWS\system32\drivers\aeaudio.sys (Andrea Electronics Corporation)
DRV - (MODEMCSA) -- C:\WINDOWS\system32\drivers\MODEMCSA.sys (Microsoft Corporation)
DRV - (FETNDIS) -- C:\WINDOWS\system32\drivers\fetnd5.sys (VIA Technologies, Inc.              )
DRV - (NPDriver) -- C:\WINDOWS\system32\drivers\NPDRIVER.SYS (Symantec Corporation)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems)
DRV - (basic2) -- C:\WINDOWS\system32\drivers\basic2.sys (Conexant Systems)
DRV - (V124) -- C:\WINDOWS\system32\drivers\v124nt.sys (Conexant Systems)
DRV - (SymEvent) -- C:\Programme\Symantec\SYMEVENT.SYS (Symantec Corporation)
DRV - (Rksample) -- C:\WINDOWS\system32\drivers\rksample.sys (Conexant Systems)
DRV - (Cnxtdiag) -- C:\WINDOWS\system32\drivers\cnxtdiag.sys (Conexant Systems)
DRV - (K56) -- C:\WINDOWS\system32\drivers\k56nt.sys (Conexant)
DRV - (Fsks) -- C:\WINDOWS\system32\drivers\fsksnt.sys (Conexant)
DRV - (SoftFax) -- C:\WINDOWS\system32\drivers\faxnt.sys (Conexant)
DRV - (Tones) -- C:\WINDOWS\system32\drivers\tonesnt.sys (Conexant)
DRV - (Fallback) -- C:\WINDOWS\system32\drivers\fallback.sys (Conexant)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.selectedEngine: "World of Warcraft-Arsenal"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 49
FF - prefs.js..extensions.enabledItems: firefoxhelper@mozilla.org:1.0
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {35106bca-6c78-48c7-ac28-56df30b51d2d}:1.2.4
FF - prefs.js..extensions.enabledItems: {888d99e7-e8b5-46a3-851e-1ec45da1e644}:3.6.2
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.01.16 21:05:30 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.7\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.01.16 21:05:30 | 000,000,000 | ---D | M]
 
[2008.09.17 17:59:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ilja\Anwendungsdaten\Mozilla\Extensions
[2010.02.05 23:53:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ilja\Anwendungsdaten\Mozilla\Firefox\Profiles\if1r6nqv.default\extensions
[2009.11.28 13:44:44 | 000,000,000 | ---D | M] (PopupMaster) -- C:\Dokumente und Einstellungen\Ilja\Anwendungsdaten\Mozilla\Firefox\Profiles\if1r6nqv.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2d}
[2009.12.17 21:28:56 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Dokumente und Einstellungen\Ilja\Anwendungsdaten\Mozilla\Firefox\Profiles\if1r6nqv.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2009.11.20 16:30:40 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Dokumente und Einstellungen\Ilja\Anwendungsdaten\Mozilla\Firefox\Profiles\if1r6nqv.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2008.10.02 14:40:33 | 000,002,791 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Anwendungsdaten\Mozilla\Firefox\Profiles\if1r6nqv.default\searchplugins\world-of-warcraft-arsenal.xml
[2010.02.05 23:53:30 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions
[2009.11.25 11:58:57 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions\firefoxhelper@mozilla.org
[2010.01.16 21:05:24 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.01.16 21:05:24 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.01.16 21:05:24 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.01.16 21:05:24 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.01.16 21:05:24 | 000,000,801 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2010.01.30 18:48:05 | 000,377,841 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1    www.007guard.com
O1 - Hosts: 127.0.0.1    007guard.com
O1 - Hosts: 127.0.0.1    008i.com
O1 - Hosts: 127.0.0.1    www.008k.com
O1 - Hosts: 127.0.0.1    008k.com
O1 - Hosts: 127.0.0.1    www.00hq.com
O1 - Hosts: 127.0.0.1    00hq.com
O1 - Hosts: 127.0.0.1    010402.com
O1 - Hosts: 127.0.0.1    www.032439.com
O1 - Hosts: 127.0.0.1    032439.com
O1 - Hosts: 127.0.0.1    www.0scan.com
O1 - Hosts: 127.0.0.1    0scan.com
O1 - Hosts: 127.0.0.1    www.1000gratisproben.com
O1 - Hosts: 127.0.0.1    1000gratisproben.com
O1 - Hosts: 127.0.0.1    www.1001namen.com
O1 - Hosts: 127.0.0.1    1001namen.com
O1 - Hosts: 127.0.0.1    www.100888290cs.com
O1 - Hosts: 127.0.0.1    100888290cs.com
O1 - Hosts: 127.0.0.1    www.100sexlinks.com
O1 - Hosts: 127.0.0.1    100sexlinks.com
O1 - Hosts: 127.0.0.1    10sek.com
O1 - Hosts: 127.0.0.1    www.10sek.com
O1 - Hosts: 127.0.0.1    1-2005-search.com
O1 - Hosts: 127.0.0.1    www.1-2005-search.com
O1 - Hosts: 13022 more lines...
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] E:\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ATICustomerCare] C:\Programme\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [avgnt] E:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [QuickTime Task] E:\QuickTime\QTTask.exe (Apple Inc.)
O4 - HKLM..\Run: [Smapp] C:\Programme\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [SWPROguard] E:\Fighters\SPYWAREfighter\swproTray.exe (SPAMfighter)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O15 - HKLM\..Trusted Domains: 64 domain(s) and sub-domain(s) not assigned to a zone.
O15 - HKCU\..Trusted Domains: 63 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {402EE96E-2CE8-482D-ADA5-CECEEA07E16D} http://www.turntool.com/ViewerInstall.exe (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab (Java Plug-in 1.6.0_17)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.08.18 17:58:52 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2005.03.30 11:04:10 | 000,000,081 | R--- | M] () - H:\Autorun.inf -- [ UDF ]
O33 - MountPoints2\{4278e3af-832d-11dd-886e-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{4278e3af-832d-11dd-886e-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{4278e3af-832d-11dd-886e-806d6172696f}\Shell\AutoRun\command - "" = H:\0data\CBS.exe -- [2008.01.10 11:08:00 | 000,637,952 | R--- | M] (getanet.MEDIA)
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2010.02.06 02:49:22 | 000,549,376 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ilja\Desktop\OTL.exe
[2010.02.05 19:03:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ilja\Anwendungsdaten\Malwarebytes
[2010.02.05 19:03:44 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.02.05 19:03:41 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Malwarebytes
[2010.02.05 19:03:40 | 000,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.02.01 22:47:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\clp
[2010.02.01 22:43:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ilja\Anwendungsdaten\Common Toolkit Suite
[2010.02.01 22:42:06 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Common Toolkit Suite
[2010.02.01 22:42:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Common Toolkit Suite
[2010.02.01 22:38:23 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\{C6F7446C-1BD2-4E50-9F6B-44747FECDCDF}
[2010.02.01 22:37:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ilja\Anwendungsdaten\Fighters
[2010.02.01 22:37:26 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Anwendungsdaten\PackageAware
[2010.02.01 22:36:17 | 005,286,112 | ---- | C] (SPAMfighter ApS) -- C:\Dokumente und Einstellungen\Ilja\Desktop\spywarefighter.exe
[2010.01.31 20:25:17 | 000,188,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\Wingde.dll
[2010.01.31 20:25:17 | 000,092,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\Wing.dll
[2010.01.31 20:25:17 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\Wing32.dll
[2010.01.31 20:25:17 | 000,006,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\Wingdib.drv
[2010.01.31 20:25:17 | 000,005,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\Wingpal.wnd
[2010.01.31 18:20:14 | 000,000,000 | ---D | C] -- C:\Programme\Software2000
[2010.01.30 22:04:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ilja\Anwendungsdaten\Help
[2010.01.19 16:59:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Spybot - Search & Destroy
[2010.01.19 13:57:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ilja\Anwendungsdaten\Gamelab
[2010.01.19 13:55:17 | 000,000,000 | ---D | C] -- C:\WINDOWS\Jojo's Fashion Show 2 - Las Cruces
[2010.01.18 22:23:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ilja\Eigene Dateien\Jojos Fashion Show 2
[2010.01.18 22:23:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Trymedia
[2010.01.17 23:25:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\iWin Games
[2010.01.12 21:33:41 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll
[2008.08.23 18:26:22 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft
[2008.08.18 18:04:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2008.08.18 18:04:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2008.08.18 17:58:44 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft
[10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2010.02.06 02:49:22 | 000,549,376 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ilja\Desktop\OTL.exe
[2010.02.06 02:38:40 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.02.06 02:38:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.02.06 02:38:36 | 1073,319,936 | -HS- | M] () -- C:\hiberfil.sys
[2010.02.06 02:37:41 | 007,602,176 | -H-- | M] () -- C:\Dokumente und Einstellungen\Ilja\NTUSER.DAT
[2010.02.06 02:37:41 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Ilja\ntuser.ini
[2010.02.06 02:37:30 | 005,335,646 | -H-- | M] () -- C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Anwendungsdaten\IconCache.db
[2010.02.05 22:26:44 | 000,002,357 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\HJT.lnk
[2010.02.05 19:03:47 | 000,000,483 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.02.05 16:34:41 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.02.05 16:26:58 | 000,000,354 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\'Folding@Home'.lnk
[2010.02.03 19:28:33 | 000,002,075 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Skype.lnk
[2010.02.01 22:42:28 | 000,001,848 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\SPYWAREfighter.lnk
[2010.02.01 22:36:41 | 005,286,112 | ---- | M] (SPAMfighter ApS) -- C:\Dokumente und Einstellungen\Ilja\Desktop\spywarefighter.exe
[2010.02.01 19:24:28 | 000,073,285 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wohnzimmer 002.JPG
[2010.02.01 19:19:17 | 000,069,875 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wohnzimmer 009.JPG
[2010.02.01 19:17:02 | 000,058,109 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wohnzimmer 011.JPG
[2010.02.01 19:12:20 | 000,081,845 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wohnzimmer 005.JPG
[2010.02.01 15:10:17 | 000,086,226 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wohnzimmer 007.JPG
[2010.02.01 14:45:33 | 000,111,852 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\riese.jpg
[2010.02.01 14:41:20 | 000,046,645 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\Bild küche.JPG
[2010.02.01 14:39:24 | 000,073,564 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\Bild 031.JPG
[2010.02.01 14:38:46 | 000,075,530 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\Bild 023.JPG
[2010.01.31 21:24:48 | 000,000,761 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Pony Ranch.lnk
[2010.01.31 18:20:20 | 000,000,558 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Pizza Syndicate.lnk
[2010.01.30 18:48:05 | 000,377,841 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010.01.27 11:54:26 | 000,010,264 | ---- | M] () -- C:\WINDOWS\System32\drivers\avfsfilter.sys
[2010.01.23 17:35:51 | 000,044,577 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wand.JPG
[2010.01.21 12:27:04 | 000,373,673 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100130-184805.backup
[2010.01.19 17:00:08 | 000,000,904 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\Spybot - Search & Destroy.lnk
[2010.01.19 13:56:43 | 000,000,618 | ---- | M] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\Jojos Fashion Show 2.lnk
[2010.01.18 11:23:12 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010.01.07 16:07:14 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.01.07 16:07:04 | 000,019,160 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[10 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2010.02.05 22:22:45 | 000,002,357 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\HJT.lnk
[2010.02.05 19:03:47 | 000,000,483 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.02.01 22:42:28 | 000,001,848 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\SPYWAREfighter.lnk
[2010.02.01 21:56:22 | 1073,319,936 | -HS- | C] () -- C:\hiberfil.sys
[2010.02.01 19:24:28 | 000,073,285 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wohnzimmer 002.JPG
[2010.02.01 19:19:17 | 000,069,875 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wohnzimmer 009.JPG
[2010.02.01 19:17:02 | 000,058,109 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wohnzimmer 011.JPG
[2010.02.01 19:12:20 | 000,081,845 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wohnzimmer 005.JPG
[2010.02.01 15:10:17 | 000,086,226 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wohnzimmer 007.JPG
[2010.02.01 14:45:33 | 000,111,852 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\riese.jpg
[2010.02.01 14:41:20 | 000,046,645 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\Bild küche.JPG
[2010.02.01 14:39:24 | 000,073,564 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\Bild 031.JPG
[2010.02.01 14:38:46 | 000,075,530 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\Bild 023.JPG
[2010.01.31 21:24:48 | 000,000,761 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Pony Ranch.lnk
[2010.01.31 18:20:20 | 000,000,558 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Pizza Syndicate.lnk
[2010.01.27 11:54:26 | 000,010,264 | ---- | C] () -- C:\WINDOWS\System32\drivers\avfsfilter.sys
[2010.01.23 17:35:51 | 000,044,577 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\wand.JPG
[2010.01.19 17:00:08 | 000,000,904 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\Spybot - Search & Destroy.lnk
[2010.01.19 13:56:06 | 000,000,618 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Desktop\Jojos Fashion Show 2.lnk
[2009.10.26 18:31:57 | 000,278,728 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2009.10.26 18:31:57 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2009.10.23 02:26:10 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2009.10.23 02:26:10 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2009.09.17 19:07:00 | 000,000,060 | ---- | C] () -- C:\WINDOWS\WinFrotz.INI
[2009.08.17 13:16:06 | 000,354,816 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll
[2008.09.17 20:58:42 | 000,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2008.09.15 14:53:08 | 000,008,192 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.09.15 13:42:44 | 000,000,137 | ---- | C] () -- C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008.09.15 13:10:37 | 000,001,082 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2007.11.26 21:56:28 | 000,151,415 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 142 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:38849DE5
@Alternate Data Stream - 141 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:B3B92717
< End of report >
   

.

#6

Code

   OTL Extras logfile created on: 06.02.2010 02:50:18 - Run 1
OTL by OldTimer - Version 3.1.28.0     Folder = C:\Dokumente und Einstellungen\Ilja\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1.024,00 Mb Total Physical Memory | 587,00 Mb Available Physical Memory | 57,00% Memory free
5,00 Gb Paging File | 4,00 Gb Available in Paging File | 92,00% Paging File free
Paging file location(s): D:\pagefile.sys 4096 4096 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 11,00 Gb Total Space | 2,87 Gb Free Space | 26,09% Space Free | Partition Type: NTFS
Drive D: | 4,89 Gb Total Space | 0,86 Gb Free Space | 17,59% Space Free | Partition Type: NTFS
Drive E: | 44,38 Gb Total Space | 14,08 Gb Free Space | 31,72% Space Free | Partition Type: NTFS
Drive F: | 49,71 Gb Total Space | 19,58 Gb Free Space | 39,40% Space Free | Partition Type: NTFS
Drive G: | 39,06 Gb Total Space | 33,07 Gb Free Space | 84,66% Space Free | Partition Type: NTFS
Drive H: | 7,62 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
I: Drive not present or media not loaded
 
Computer Name: WOLFBANE_HOME
Current User Name: Ilja
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- C:\Programme\Internet Explorer\iexplore.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Programme\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
htmlfile [opennew] -- "C:\Programme\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Programme\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
https [open] -- "C:\Programme\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [scan_with_SPYWAREfighter] -- E:\Fighters\SPYWAREfighter\swproTray.exe /scan "%1" (SPAMfighter)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Programme\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Programme\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"3724:TCP" = 3724:TCP:*:Enabled:Blizzard Downloader: 3724
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"F:\World of Warcraft\Repair.exe" = F:\World of Warcraft\Repair.exe:*:Enabled:Blizzard Repair Utility -- (Blizzard Entertainment, Inc.)
"F:\World of Warcraft\BackgroundDownloader.exe" = F:\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Temp\Blizzard Launcher Temporary - 04d3f640\Launcher.exe" = C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Temp\Blizzard Launcher Temporary - 04d3f640\Launcher.exe:*:Enabled:Blizzard Launcher -- File not found
"C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Temp\Blizzard Launcher Temporary - 3a68e568\Launcher.exe" = C:\Dokumente und Einstellungen\Ilja\Lokale Einstellungen\Temp\Blizzard Launcher Temporary - 3a68e568\Launcher.exe:*:Enabled:Blizzard Launcher -- File not found
"F:\World of Warcraft\Launcher.exe" = F:\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher -- (Blizzard Entertainment)
"C:\Programme\Windows Media Player\wmplayer.exe" = C:\Programme\Windows Media Player\wmplayer.exe:*:Enabled:Windows Media Player -- (Microsoft Corporation)
"F:\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-deDE-downloader.exe" = F:\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-deDE-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Programme\Java\jre6\bin\java.exe" = C:\Programme\Java\jre6\bin\java.exe:*:Disabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"F:\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-deDE-downloader.exe" = F:\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-deDE-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"F:\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-deDE-downloader.exe" = F:\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-deDE-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"F:\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-deDE-downloader.exe" = F:\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-deDE-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"G:\Skype\Plugin Manager\skypePM.exe" = G:\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager -- (Skype Technologies)
"G:\Skype\Phone\Skype.exe" = G:\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02EBDBB9-4600-41D3-B566-40CB861511D2}" = World of Warcraft FREE Trial
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}" = HiJackThis
"{10798AE3-DCBB-43C3-9C93-C23512427E25}" = Die Sims Deluxe 
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{256FA7E0-D9C2-44FE-AA9E-42AE2CCC2D50}_is1" = Hello Kitty Online
"{26A24AE4-039D-4CA4-87B4-2F83216010FF}" = Java(TM) 6 Update 17
"{292E65F1-E9F8-4416-90A6-5916A8C95672}_is1" = Hello Kitty Online Download Manager
"{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{4324BC93-C82F-ED16-BA86-5E34B9E05303}" = ccc-core-static
"{498A4E3D-562E-4129-8722-6DCAB12384AE}" = Windows Communication Foundation Language Pack - DEU
"{4ED118EE-785C-CC18-5D2E-D5CA4BAA03F0}" = Catalyst Control Center Graphics Full New
"{539475B7-44B7-8B0A-134C-F01B9C8B7569}" = ccc-core-preinstall
"{5A7D2B13-9522-48A9-A06F-A9C4AA33D8AD}" = SPYWAREfighter
"{5AC7AE54-55DF-1126-076C-623F008D40B6}" = Catalyst Control Center Graphics Full Existing
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{6351D217-3EE3-1967-29BE-6A77635FE485}" = Skins
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6AB9CD3A-F91F-233B-923B-6C59BA63524D}" = Catalyst Control Center HydraVision Full
"{7228FD8C-3B9E-4204-AE36-8A466107685B}" = Windows Workflow Foundation DE Language Pack
"{72736F5F-520D-472A-88CC-7B02872FD34E}" = ATI Catalyst Registration
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7EF15AAF-42AC-4CF6-B4B4-C4F0D1D92122}" = Far Cry (Patch 1.4)
"{85A91C22-C369-FCFB-5F1F-D59EB21AD0E1}" = CCC Help English
"{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU
"{929CE49F-1CA7-4CF3-A9A1-6D757443C63F}" = Microsoft Games for Windows - LIVE Redistributable
"{92DF2F1B-F63C-4D9A-B3E1-B2D11AE29790}" = Windows Presentation Foundation Language Pack (DEU)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A2F166A0-F031-4E27-A057-C69733219434}_is1" = Runes of Magic
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A6D0140F-E62F-9D1E-2408-9CFF91FF6FC8}" = ccc-utility
"{A816AE22-1878-CACA-7541-47C56F9A96F7}" = ATI Catalyst Install Manager
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{AC76BA86-7AD7-1031-7B44-A92000000001}" = Adobe Reader 9.2 - Deutsch
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C44A7422-E380-44BE-79FE-1C032D8A03A7}" = Catalyst Control Center Core Implementation
"{C78EAC6F-7A73-452E-8134-DBB2165C5A68}" = QuickTime
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D3B1C799-CB73-42DE-BA0F-2344793A095C}" = Catalyst Control Center - Branding
"{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry
"{E5D24929-91A4-B0A1-DE00-AFC453921EF7}" = Catalyst Control Center Graphics Light
"{E62D7633-365F-4866-9C85-7BF0B9A63793}" = Pony Ranch
"{E6C09BFB-BA75-15C7-5B18-A2CE31C4F42B}" = Catalyst Control Center Graphics Previews Common
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F2A7F421-1679-48D5-B918-96999014ED53}" = Microsoft .NET Framework 3.0 German Language Pack
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"ATI Display Driver" = ATI Display Driver
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"BSW" = BrettspielWelt
"CNXT_MODEM_PCI_VEN_14F1&DEV_2F00&SUBSYS_8D88122D" = MSP3885-E 56K PCI Modem
"Darkstar One_is1" = Darkstar One
"Fallout 2" = Fallout 2
"Fiesta Online(EU_German)" = Fiesta Online(EU_German) 1.02.004
"FLV Player" = FLV Player 2.0 (build 25)
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"InstallShield_{D6DBDC2A-E72C-4284-B6AD-6B3B61B4DABC}" = Far Cry
"Jojo's Fashion Show 2 - Las Cruces" = Jojo's Fashion Show 2 - Las Cruces
"LiveReg" = LiveReg (Symantec Corporation)
"LiveUpdate1.6" = LiveUpdate 1.6 (Symantec Corporation)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU
"Microsoft .NET Framework 3.0 German Language Pack" = Microsoft .NET Framework 3.0 German Language Pack
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.7)" = Mozilla Firefox (3.5.7)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Norton Speed Disk" = Norton Speed Disk 6.0 für Windows NT
"Norton Utilities" = Norton Utilities 2002 for Windows
"Pizza Syndicate" = Pizza Syndicate
"SPYWAREfighter" = SPYWAREfighter
"Stupid Invaders" = Stupid Invaders
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"VDMSound" = VDMSound
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"World of Warcraft" = World of Warcraft
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 27.01.2010 11:10:20 | Computer Name = WOLFBANE_HOME | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung firefox.exe, Version 1.9.1.3642, Stillstandmodul
 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
 
Error - 31.01.2010 13:23:13 | Computer Name = WOLFBANE_HOME | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung Pizza.exe, Version 1.0.0.1, Stillstandmodul
 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
 
Error - 03.02.2010 12:25:29 | Computer Name = WOLFBANE_HOME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung ponyranch.exe, Version 0.0.0.0, fehlgeschlagenes
 Modul ponyranch.exe, Version 0.0.0.0, Fehleradresse 0x000cbb14.
 
Error - 03.02.2010 14:25:28 | Computer Name = WOLFBANE_HOME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung skype.exe, Version 4.1.0.179, fehlgeschlagenes
 Modul skype.exe, Version 4.1.0.179, Fehleradresse 0x00711c4c.
 
Error - 03.02.2010 14:27:22 | Computer Name = WOLFBANE_HOME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung skype.exe, Version 4.1.0.179, fehlgeschlagenes
 Modul skype.exe, Version 4.1.0.179, Fehleradresse 0x006f6ffb.
 
Error - 03.02.2010 14:27:47 | Computer Name = WOLFBANE_HOME | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung Skype.exe, Version 4.1.0.179, Stillstandmodul
 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
 
Error - 03.02.2010 14:27:57 | Computer Name = WOLFBANE_HOME | Source = Application Hang | ID = 1001
Description = Fehlerhafter Speicherbereich 1503589297.
 
Error - 04.02.2010 15:20:49 | Computer Name = WOLFBANE_HOME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.1.3642, fehlgeschlagenes
 Modul npswf32.dll, Version 10.0.32.18, Fehleradresse 0x001f6ebe.
 
Error - 04.02.2010 18:25:03 | Computer Name = WOLFBANE_HOME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.1.3642, fehlgeschlagenes
 Modul npswf32.dll, Version 10.0.32.18, Fehleradresse 0x001f6ebe.
 
Error - 05.02.2010 21:06:29 | Computer Name = WOLFBANE_HOME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.1.3642, fehlgeschlagenes
 Modul npswf32.dll, Version 10.0.32.18, Fehleradresse 0x001f6ebe.
 
[ System Events ]
Error - 05.02.2010 12:47:31 | Computer Name = WOLFBANE_HOME | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "E:" aus.
 
Error - 05.02.2010 12:47:42 | Computer Name = WOLFBANE_HOME | Source = Service Control Manager | ID = 7023
Description = Der Dienst "SSHNAS" wurde mit folgendem Fehler beendet:   %%126
 
Error - 05.02.2010 14:17:58 | Computer Name = WOLFBANE_HOME | Source = sr | ID = 1
Description = Beim Verarbeiten der Datei "" auf Volume "HarddiskVolume1" ist im 
Wiederherstellungsfilter der unerwartete Fehler "0xC0000001" aufgetreten. Die Volumeüberwachung
 wurde angehalten.
 
Error - 05.02.2010 14:17:58 | Computer Name = WOLFBANE_HOME | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "E:" aus.
 
Error - 05.02.2010 14:17:58 | Computer Name = WOLFBANE_HOME | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "E:" aus.
 
Error - 05.02.2010 14:18:52 | Computer Name = WOLFBANE_HOME | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   uagp35  viaagp1
 
Error - 05.02.2010 14:23:24 | Computer Name = WOLFBANE_HOME | Source = BROWSER | ID = 8032
Description = Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport
 "\Device\NetBT_Tcpip_{50ED8CD8-FC74-4C72-BA48-9F5D5766ABF6}" zu oft fehl.  Der Sicherungssuchdienst
 wird beendet.
 
Error - 05.02.2010 21:39:02 | Computer Name = WOLFBANE_HOME | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "E:" aus.
 
Error - 05.02.2010 21:39:02 | Computer Name = WOLFBANE_HOME | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie chkdsk auf Volume "E:" aus.
 
Error - 05.02.2010 21:43:37 | Computer Name = WOLFBANE_HOME | Source = BROWSER | ID = 8032
Description = Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport
 "\Device\NetBT_Tcpip_{50ED8CD8-FC74-4C72-BA48-9F5D5766ABF6}" zu oft fehl.  Der Sicherungssuchdienst
 wird beendet.
 
 
< End of report >
   

.

#7 TeaTimer habe ich natürlich auch ausgemacht wenn noch was fehlt oder was verkehrt von mir durchgeführt wurde bitte nich schimpfen ^^

Vielen Dank auch für die schnelle Rückmeldung

Jomi

#8 Hast Du bei Malwarebytes eigentlich das Gefundene löschen lassen??


Schritt 1

Scan mit SystemLook

Lade SystemLook von jpshortstuff von einem der folgenden Spiegel herunter und speichere das Tool auf dem Desktop.

Download Mirror #1 - Download Mirror #2

• Doppelklick auf die SystemLook.exe, um das Tool zu starten.
Vista-User mit Rechtsklick und als Administrator starten.
• Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

Code

:filefind
Pizza.exe
ponyranch.exe

• Klicke nun auf den Button Look, um den Scan zu starten.
• Wenn der Suchlauf beendet ist, wird sich Dein Editor mit den Ergebnissen öffnen, diese hier in den Thread posten.
• Die Ergebnisse werden auf dem Desktop als SystemLook.txt gespeichert.


Schritt 2

• Eset Online Scanner (NOD32)
• Unterstützte Betriebssysteme: Microsoft Windows 98/ME/NT 4.0/2000/XP und Windows Vista
• Anmerkung für Vista-User: Bitte den Browser unbedingt als Administrator starten.
• Voraussetzung: Internet Explorer (IE) 5.0 oder höher
• Haken bei "YES, I accept the Terms of Use" machen
• Start
• ActiveX-Steuerelement installieren
• Start
• Signaturen werden heruntergeladen
• Haken machen bei "Remove found threads"
• Haken machen bei "Remove found threads" und "Scan unwanted applications"
• Scan
• Scanende
• Browser schließen
• Explorer öffnen
• C:\Programme\EsetOnlineScanner\log.txt
• Log hier posten
• Deinstallation: Systemsteuerung => Software => Eset Online Scanner entfernen.



Wie läuft das System inziwschen?


Sind diese beiden Programme extra auf dem System oder hattest Du einmal Norton Virenscan?

Zitat

"Norton Speed Disk" = Norton Speed Disk 6.0 für Windows NT
"Norton Utilities" = Norton Utilities 2002 for Windows

#9 Hi,

ja bei malware hatte ich löschen lassen, stand glaube ich auch in der Anleitung

Systemlook

Code

  SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 13:29 on 06/02/2010 by Ilja (Administrator - Elevation successful)

========== filefind ==========

Searching for "Pizza.exe"
No files found.

Searching for "ponyranch.exe"
No files found.

-=End Of File=- 

.


sowohl pony als auch pizza sind originalspiele wenn da irgendwie hilft..

#10 Eset Online Scanner (NOD32) ...das konnte ich leider nicht durchführen denn immer in etwa bei der Mitte des Scans startet der PC einfach neu. Werde es aber weiter versuchen. Dasselbe macht er inzwischen auch bei Antivir.

Ansonsten habe ich nicht viel gemacht außer gestern karten zu spielen auf stargames.de und da ist mir auch firefox zugegangen. Insofern nichts wirklich Neues.

Die beiden Programme "Norton Speed Disk" = Norton Speed Disk 6.0 für Windows NT
"Norton Utilities" = Norton Utilities 2002 for Windows sind bewusst von meinem Mann draufgemacht worden und den Norton Virenscan hatten wir noch nie .

#11 So habe es nochmal verscuht und wieder bei 40 % neustart.
ich bin nicht hundert prozent sicher meine aber dass er gerade direct x am scannen war, falls das irgendwie weiterhilft.

#12 Versuche einmal andere Onlinescans. Evtl FSecure oder Bitdefender:
http://forum.hijackthis.de/allgemeines/25893-kostenlose-online-scanner.html

Zudem:

Rootkitscan mit RootRepeal
• Gehe hierhin, scrolle runter und downloade RootRepeal.zip.
• Entpacke die Datei auf Deinen Desktop.
• Doppelklicke die RootRepeal.exe, um den Scanner zu starten.
• Klicke auf den Reiter Report und dann auf den Button Scan.
• Mache einen Haken bei den folgenden Elementen und klicke Ok.
.
Drivers
Files
Processes
SSDT
Stealth Objects
Hidden Services
Shadow SSDT
.
• Im Anschluss wirst Du gefragt, welche Laufwerke gescannt werden sollen.
• Wähle C:\ und klicke wieder Ok.
• Der Suchlauf beginnt automatisch, es wird eine Weile dauern, bitte Geduld.
• Wenn der Suchlauf beendet ist, klicke auf Save Report.
• Speichere das Logfile als RootRepeal.txt auf dem Desktop.
• Kopiere den Inhalt hier in den Thread.

#13 hi also hier nach mehreren test gelang es endlich mit dem Panda scan

Code

 ;***********************************************************************************************************************************************************************************
ANALYSIS: 2010-02-06 20:51:26
PROTECTIONS: 1
MALWARE: 21
SUSPECTS: 6
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description                                  Version                       Active    Updated
;===================================================================================================================================================================================
AntiVir Desktop                              9.0.1.32                      No        Yes
;===================================================================================================================================================================================
MALWARE
Id        Description                        Type                Active    Severity  Disinfectable  Disinfected Location
;===================================================================================================================================================================================
00139061  Cookie/Doubleclick                 TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@doubleclick[1].txt
00139064  Cookie/Atlas DMT                   TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\ilja\cookies\ilja@atdmt[1].txt
00139064  Cookie/Atlas DMT                   TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@atdmt[2].txt
00145405  Cookie/RealMedia                   TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@247realmedia[1].txt
00145457  Cookie/FastClick                   TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@fastclick[1].txt
00145731  Cookie/Tribalfusion                TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@tribalfusion[1].txt
00145738  Cookie/Mediaplex                   TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@mediaplex[1].txt
00168056  Cookie/YieldManager                TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@ad.yieldmanager[2].txt
00168061  Cookie/Apmebf                      TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@apmebf[2].txt
00168076  Cookie/BurstNet                    TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@burstnet[2].txt
00168090  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\ilja\cookies\ilja@serving-sys[2].txt
00168093  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\ilja\cookies\ilja@bs.serving-sys[1].txt
00168109  Cookie/Adtech                      TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\ilja\cookies\ilja@adtech[2].txt
00169190  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@advertising[1].txt
00169190  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\ilja\cookies\ilja@advertising[1].txt
00170556  Cookie/RealMedia                   TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@realmedia[1].txt
00172221  Cookie/Zedo                        TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@zedo[2].txt
00184846  Cookie/Adrevolver                  TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\hofmann\cookies\hofmann@adrevolver[2].txt
00273339  Cookie/Smartadserver               TrackingCookie      No        0         Yes            No           c:\dokumente und einstellungen\ilja\cookies\ilja@smartadserver[1].txt
00623824  trj/sinowal.wbv                    Virus/Trojan        No        0         Yes            No           hkey_current_user\software\mc
02463795  Adware/iWinArcade                  Adware              No        0         Yes            No           g:\system volume information\_restore{1e76fda0-40d4-40b8-b9aa-f745226372a8}\rp346\a0067733.exe
02463795  Adware/iWinArcade                  Adware              No        0         No             No           c:\system volume information\_restore{1e76fda0-40d4-40b8-b9aa-f745226372a8}\rp348\a0068029.exe[iwintrusted.exe]
02893775  Spyware/Iehelp                     Spyware             No        1         Yes            No           g:\system volume information\_restore{1e76fda0-40d4-40b8-b9aa-f745226372a8}\rp346\a0067729.exe
02893775  Spyware/Iehelp                     Spyware             No        1         No             No           c:\system volume information\_restore{1e76fda0-40d4-40b8-b9aa-f745226372a8}\rp348\a0068029.exe[iwinarcadelauncher.exe]
03587590  Adware/Yassist                     Adware              No        0         No             No           e:\divxinstaller.exe[²çç\y_toolbar.exe][²èç]
;===================================================================================================================================================================================
SUSPECTS
Sent      Location
;===================================================================================================================================================================================
No        c:\system volume information\_restore{1e76fda0-40d4-40b8-b9aa-f745226372a8}\rp348\a0068029.exe[adminworker.exe]
No        c:\system volume information\_restore{1e76fda0-40d4-40b8-b9aa-f745226372a8}\rp348\a0068029.exe[uninstall.exe]
No        c:\system volume information\_restore{1e76fda0-40d4-40b8-b9aa-f745226372a8}\rp348\a0068029.exe[webupdater.exe]
No        g:\system volume information\_restore{1e76fda0-40d4-40b8-b9aa-f745226372a8}\rp346\a0067727.exe
No        g:\system volume information\_restore{1e76fda0-40d4-40b8-b9aa-f745226372a8}\rp346\a0067728.exe
No        g:\system volume information\_restore{1e76fda0-40d4-40b8-b9aa-f745226372a8}\rp346\a0067735.exe
;===================================================================================================================================================================================
VULNERABILITIES
Id        Severity       Description
;===================================================================================================================================================================================
;===================================================================================================================================================================================

 

.

#14 Und hier RootRepeal Report das ging wesentlich schneller *hüpf*

Code

 ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time:        2010/02/06 21:00
Program Version:        Version 1.3.5.0
Windows Version:        Windows XP SP3
==================================================

Drivers
-------------------
Name: rootrepeal.sys
Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
Address: 0xF7A0E000    Size: 49152    File Visible: No    Signed: -
Status: -

Hidden/Locked Files
-------------------
Path: C:\hiberfil.sys
Status: Locked to the Windows API!

Path: C:\RECYCLER\NPROTECT
Status: Invisible to the Windows API!

SSDT
-------------------
#: 041    Function Name: NtCreateKey
Status: Hooked by "<unknown>" at address 0xf7f67d06

#: 053    Function Name: NtCreateThread
Status: Hooked by "<unknown>" at address 0xf7f67cfc

#: 063    Function Name: NtDeleteKey
Status: Hooked by "<unknown>" at address 0xf7f67d0b

#: 065    Function Name: NtDeleteValueKey
Status: Hooked by "<unknown>" at address 0xf7f67d15

#: 098    Function Name: NtLoadKey
Status: Hooked by "<unknown>" at address 0xf7f67d1a

#: 122    Function Name: NtOpenProcess
Status: Hooked by "<unknown>" at address 0xf7f67ce8

#: 128    Function Name: NtOpenThread
Status: Hooked by "<unknown>" at address 0xf7f67ced

#: 193    Function Name: NtReplaceKey
Status: Hooked by "<unknown>" at address 0xf7f67d24

#: 204    Function Name: NtRestoreKey
Status: Hooked by "<unknown>" at address 0xf7f67d1f

#: 247    Function Name: NtSetValueKey
Status: Hooked by "<unknown>" at address 0xf7f67d10

#: 257    Function Name: NtTerminateProcess
Status: Hooked by "<unknown>" at address 0xf7f67cf7

==EOF== 

.

#15 Erstelle einen neuen Systemwiederherstellungspunkt

Das ist ein guter Zeitpunkt, die Systemwiederherstellung zu leeren und einen neuen sauberen Wiederherstellungspunkt zu erstellen (Anleitung für Vista-User).

* Start => Alle Programme => Zubehör => Systemprogramme => Systemwiederherstellung
* Wähle "Einen Wiederherstellungspunkt erstellen" => Weiter
* Gebe als Beschreibung z. B. "Nach_Bereinigung" ein => Erstellen => Schließen.
* Nun Start => Ausführen => cleanmgr (reinschreiben) => OK => Reiter Weitere Optionen
* Klicke unter Systemwiederherstellung auf Bereinigen und bestätige das Löschen mit Ja => OK.

Das wird alle Wiederherstellungspunkte bis auf den letzten neu erstellten löschen.


Scan mit SystemLook

Lade SystemLook von jpshortstuff von einem der folgenden Spiegel herunter und speichere das Tool auf dem Desktop.

Download Mirror #1 - Download Mirror #2

• Doppelklick auf die SystemLook.exe, um das Tool zu starten.
Vista-User mit Rechtsklick und als Administrator starten.
• Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

Code

:filefind
hhjtx.sys

:regfind
hhjtx.sys

• Klicke nun auf den Button Look, um den Scan zu starten.
• Wenn der Suchlauf beendet ist, wird sich Dein Editor mit den Ergebnissen öffnen, diese hier in den Thread posten.
• Die Ergebnisse werden auf dem Desktop als SystemLook.txt gespeichert.




Scan mit Avira

Stelle Avira wie folgt ein und scanne, Log posten.
http://www.trojaner-board.de/54192-anleitung-avira-antivir-agressive-einstellungen.html



Kommen noch Meldungen?