Ergebnis 1 bis 5 von 5

Thema: Vista infiziert, portwexexe.exe und andere

  1. #1
    Einsteiger Avatar von Smily0815
    Registriert seit
    17.10.2011
    Beiträge
    3

    Vista infiziert, portwexexe.exe und andere

    Hallo,

    ich bräuchte bitte eure Hilfe, ehe ich hier etwas falsch mache.

    Windows Vista
    Antivir meldet ständig Viren, kann sie aber nicht löschen, bzw. sie kommen wieder.

    hjtscanlist
    Code:
     
                            $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
                            º                                    º 
                                        hjtscanlist v2.0              
                            º                                    º 
                            $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
    
    Microsoft Windows [Version 6.0.6002]
     
     
    C:
    
      18.10.2011 12:57     C:\Config.Msi --------- 4096   
      18.10.2011 12:57     C:\Program Files --------- 24576   
      18.10.2011 12:57     C:\System Volume Information --------- 32768   
      18.10.2011 12:52     C:\ProgramData --------- 12288   
           C:\hiberfil.sys ---------    
           C:\pagefile.sys ---------    
      14.07.2011 19:19     C:\Windows --------- 32768   
      19.05.2011 07:27     C:\ATI --------- 0   
      19.05.2011 07:07     C:\AMD --------- 0   
      17.05.2011 14:05     C:\$Recycle.Bin --------- 4096   
      17.05.2011 14:04     C:\Users --------- 4096   
      14.04.2011 08:45     C:\600c901c20c7fae90f --------- 0   
      20.01.2011 19:58     C:\portwexexe --------- 0   
      30.10.2010 18:39     C:\Boot --------- 4096   
      10.09.2010 13:25     C:\PerfLogs --------- 0   
      03.02.2010 18:48     C:\1169236560260 --------- 0   
      11.04.2009 08:36     C:\bootmgr --------- 333257   
      01.04.2009 22:50     C:\srogram Files --------- 0   
      20.02.2009 21:04     C:\1rogram Files --------- 0   
      17.02.2009 18:02     C:\MSDOS.SYS --------- 0   
      17.02.2009 18:02     C:\IO.SYS --------- 0   
      29.07.2008 14:21     C:\Toshiba --------- 4096   
      28.07.2008 19:01     C:\Programme --------- 0   
      28.07.2008 19:01     C:\Dokumente und Einstellungen --------- 0   
      05.06.2007 07:38     C:\SWSTAMP.TXT --------- 123   
      31.05.2007 14:50     C:\RHDSetup.log --------- 420   
      31.05.2007 13:47     C:\BOOTSECT.BAK --------- 8192   
      02.11.2006 15:02     C:\Documents and Settings --------- 0   
      18.09.2006 23:43     C:\config.sys --------- 10   
      18.09.2006 23:43     C:\autoexec.bat --------- 24   
    ----------------------------------------
    
     
    C:\Windows
    
      18.10.2011 12:51     C:\Windows\WindowsUpdate.log --------- 1422769   
      18.10.2011 12:45     C:\Windows\bootstat.dat --------- 67584   
      18.10.2011 12:45     C:\Windows\PFRO.log --------- 233932   
      01.09.2011 10:54     C:\Windows\setupact.log --------- 122229   
      05.06.2011 13:29     C:\Windows\IE9_main.log --------- 3133   
      08.01.2011 18:30     C:\Windows\hpwins23.dat --------- 214717   
      08.01.2011 18:30     C:\Windows\win.ini --------- 179   
      19.09.2010 15:16     C:\Windows\ie8_main.log --------- 2084   
      10.09.2010 18:41     C:\Windows\WindowsShell.Manifest --------- 749   
      10.09.2010 18:38     C:\Windows\DtcInstall.log --------- 3324   
      26.11.2009 16:09     C:\Windows\msxml4-KB973688-enu.LOG --------- 279700   
      08.08.2009 13:20     C:\Windows\ocsetup_install_NetFx3.etl --------- 48037888   
      08.08.2009 13:20     C:\Windows\ocsetup_cbs_install_NetFx3.perf --------- 196608   
      08.08.2009 13:20     C:\Windows\ocsetup_cbs_install_NetFx3.dpx --------- 65536   
      11.04.2009 08:27     C:\Windows\explorer.exe --------- 2926592   
      13.11.2008 10:23     C:\Windows\msxml4-KB954430-enu.LOG --------- 288318   
      25.10.2008 11:30     C:\Windows\hpwmdl23.dat --------- 1847   
      15.10.2008 19:49     C:\Windows\Twunk_32.dll --------- 12288   
      15.10.2008 19:49     C:\Windows\Twunk_16.dll --------- 12288   
      04.09.2008 13:11     C:\Windows\ntbtlog.txt --------- 177320   
      31.07.2008 12:39     C:\Windows\msxml4-KB941833-enu.LOG --------- 261056   
      28.07.2008 20:50     C:\Windows\msxml4-KB936181-enu.LOG --------- 264226   
      28.07.2008 17:43     C:\Windows\DPINST.LOG --------- 14776   
      06.06.2008 10:16     C:\Windows\TSSysprep.log --------- 3540   
      19.01.2008 09:33     C:\Windows\regedit.exe --------- 134656   
      19.01.2008 09:33     C:\Windows\notepad.exe --------- 151040   
      19.01.2008 09:33     C:\Windows\HelpPane.exe --------- 498176   
      19.01.2008 09:33     C:\Windows\fveupdate.exe --------- 13312   
      19.01.2008 09:33     C:\Windows\bfsvc.exe --------- 58880   
      05.06.2007 07:38     C:\Windows\csup.txt --------- 11   
      31.05.2007 16:06     C:\Windows\mgxoschk.ini --------- 6642   
      31.05.2007 15:32     C:\Windows\NDSTray.INI --------- 0   
      31.05.2007 14:49     C:\Windows\DIFxAPI.dll --------- 319456   
      31.05.2007 14:49     C:\Windows\HideWin.exe --------- 315392   
      25.04.2007 11:14     C:\Windows\RtHDVCpl.exe --------- 4444160   
      13.04.2007 15:36     C:\Windows\SkyTel.exe --------- 1822720   
      26.03.2007 07:56     C:\Windows\atiogl.xml --------- 11441   
      16.01.2007 10:39     C:\Windows\RtlUpd.exe --------- 1191936   
      12.01.2007 16:54     C:\Windows\RtlExUpd.dll --------- 520192   
      09.01.2007 15:22     C:\Windows\agrsmdel.exe --------- 50752   
      04.01.2007 07:40     C:\Windows\RtDefLvl.ini --------- 291   
      03.11.2006 14:30     C:\Windows\oemlogo.bmp --------- 43254   
      02.11.2006 14:52     C:\Windows\setuperr.log --------- 0   
      02.11.2006 14:47     C:\Windows\SETUPAPI.LOG --------- 94   
      02.11.2006 14:35     C:\Windows\WMSysPr9.prx --------- 316640   
      02.11.2006 14:34     C:\Windows\twunk_16.exe --------- 49680   
      02.11.2006 14:34     C:\Windows\twain_32.dll --------- 50688   
      02.11.2006 14:34     C:\Windows\twunk_32.exe --------- 31232   
      02.11.2006 14:34     C:\Windows\twain.dll --------- 94784   
      02.11.2006 11:45     C:\Windows\winhlp32.exe --------- 9216   
      02.11.2006 11:45     C:\Windows\hh.exe --------- 14848   
      02.11.2006 09:46     C:\Windows\mib.bin --------- 43131   
      19.09.2006 13:41     C:\Windows\HomePremium.xml --------- 8328   
      18.09.2006 23:46     C:\Windows\system.ini --------- 219   
      18.09.2006 23:43     C:\Windows\_default.pif --------- 707   
      18.09.2006 23:43     C:\Windows\winhelp.exe --------- 256192   
      18.09.2006 23:30     C:\Windows\msdfmap.ini --------- 1405   
      21.10.1998 18:43     C:\Windows\IsUn0407.exe --------- 328704   
      06.11.1997 04:00     C:\Windows\unin0407.exe --------- 284160   
    ----------------------------------------
    
     
    C:\Windows\System
    
     02.11.2006 14:34      C:\Windows\System\mciseq.drv --------- 25264 
     02.11.2006 14:34      C:\Windows\System\mciwave.drv --------- 28160 
     02.11.2006 14:34      C:\Windows\System\avifile.dll --------- 109456 
     02.11.2006 14:34      C:\Windows\System\avicap.dll --------- 69584 
     02.11.2006 14:34      C:\Windows\System\mciavi.drv --------- 73376 
     02.11.2006 14:34      C:\Windows\System\msvideo.dll --------- 126912 
     02.11.2006 09:10      C:\Windows\System\OLESVR.DLL --------- 24064 
     02.11.2006 09:10      C:\Windows\System\WFWNET.DRV --------- 12704 
     02.11.2006 09:10      C:\Windows\System\COMMDLG.DLL --------- 32816 
     02.11.2006 09:10      C:\Windows\System\TIMER.DRV --------- 4048 
     02.11.2006 09:10      C:\Windows\System\MMSYSTEM.DLL --------- 68992 
     02.11.2006 09:10      C:\Windows\System\mmtask.tsk --------- 1152 
     02.11.2006 09:10      C:\Windows\System\mouse.drv --------- 2032 
     02.11.2006 09:10      C:\Windows\System\vga.drv --------- 2176 
     02.11.2006 09:10      C:\Windows\System\sound.drv --------- 1744 
     02.11.2006 09:10      C:\Windows\System\keyboard.drv --------- 2000 
     02.11.2006 09:10      C:\Windows\System\SHELL.DLL --------- 5120 
     02.11.2006 09:10      C:\Windows\System\system.drv --------- 3360 
     18.09.2006 23:43      C:\Windows\System\ver.dll --------- 9008 
     18.09.2006 23:43      C:\Windows\System\olecli.dll --------- 82944 
     18.09.2006 23:43      C:\Windows\System\lzexpand.dll --------- 9936 
     18.09.2006 23:35      C:\Windows\System\stdole.tlb --------- 5532 
    ----------------------------------------
    
     
    C:\Windows\System32
    
     18.10.2011 13:16     C:\Windows\system32\hjtscanlist.txt --------- 7776  
     18.10.2011 12:53     C:\Windows\system32\catroot --------- 0  
     18.10.2011 12:52     C:\Windows\system32\drivers --------- 65536  
     18.10.2011 12:45     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 --------- 3568  
     18.10.2011 12:45     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 --------- 3568  
     18.10.2011 11:39     C:\Windows\system32\perfh009.dat --------- 595996  
     18.10.2011 11:39     C:\Windows\system32\perfc009.dat --------- 104070  
     18.10.2011 11:39     C:\Windows\system32\perfh007.dat --------- 628742  
     18.10.2011 11:39     C:\Windows\system32\perfc007.dat --------- 126260  
     18.10.2011 11:39     C:\Windows\system32\PerfStringBackup.INI --------- 1445116  
     17.10.2011 23:05     C:\Windows\system32\Tasks --------- 4096  
     17.10.2011 17:35     C:\Windows\system32\catroot2 --------- 8192  
     14.10.2011 10:56     C:\Windows\system32\FNTCACHE.DAT --------- 326336  
     14.10.2011 09:38     C:\Windows\system32\migration --------- 4096  
     14.10.2011 09:38     C:\Windows\system32\de-DE --------- 266240  
     14.10.2011 09:23     C:\Windows\system32\mrt.exe --------- 48324552  
     02.10.2011 20:53     C:\Windows\system32\FlashPlayerCPLApp.cpl --------- 404640  
     06.09.2011 15:30     C:\Windows\system32\win32k.sys --------- 2043392  
     01.09.2011 04:36     C:\Windows\system32\mshtml.dll --------- 12275200  
     01.09.2011 04:35     C:\Windows\system32\jscript9.dll --------- 1798144  
     01.09.2011 04:33     C:\Windows\system32\ieframe.dll --------- 9704960  
     01.09.2011 04:28     C:\Windows\system32\urlmon.dll --------- 1102848  
     01.09.2011 04:28     C:\Windows\system32\wininet.dll --------- 1126912  
     01.09.2011 04:27     C:\Windows\system32\url.dll --------- 231936  
     01.09.2011 04:26     C:\Windows\system32\jsproxy.dll --------- 65024  
     01.09.2011 04:24     C:\Windows\system32\jscript.dll --------- 716800  
     01.09.2011 04:23     C:\Windows\system32\iertutil.dll --------- 1791488  
     01.09.2011 04:23     C:\Windows\system32\mshtmled.dll --------- 72704  
     01.09.2011 04:22     C:\Windows\system32\mshtml.tlb --------- 2382848  
     01.09.2011 04:21     C:\Windows\system32\ieui.dll --------- 176640  
     25.08.2011 18:15     C:\Windows\system32\UIAutomationCore.dll --------- 555520  
     25.08.2011 18:14     C:\Windows\system32\oleaut32.dll --------- 563712  
     25.08.2011 18:14     C:\Windows\system32\oleacc.dll --------- 238080  
     25.08.2011 15:31     C:\Windows\system32\oleaccrc.dll --------- 4096  
     29.07.2011 18:01     C:\Windows\system32\psisdecd.dll --------- 293376  
     29.07.2011 18:01     C:\Windows\system32\psisrndr.ax --------- 217088  
     29.07.2011 18:00     C:\Windows\system32\MSDvbNP.ax --------- 57856  
     29.07.2011 18:00     C:\Windows\system32\Mpeg2Data.ax --------- 69632  
     11.07.2011 15:25     C:\Windows\system32\tzres.dll --------- 2048  
     20.06.2011 10:54     C:\Windows\system32\ntkrnlpa.exe --------- 3602832  
     20.06.2011 10:54     C:\Windows\system32\ntoskrnl.exe --------- 3550096  
     17.06.2011 18:03     C:\Windows\system32\winsrv.dll --------- 375808  
     15.06.2011 20:27     C:\Windows\system32\jupdate-1.6.0_26-b03.log --------- 3939  
     15.06.2011 18:12     C:\Windows\system32\xmllite.dll --------- 182784  
     05.06.2011 13:34     C:\Windows\system32\wbem --------- 61440  
     05.06.2011 13:34     C:\Windows\system32\en-US --------- 8192  
     05.06.2011 13:29     C:\Windows\system32\ticrf.rat --------- 1988  
     05.06.2011 13:29     C:\Windows\system32\icrav03.rat --------- 8798  
     05.06.2011 13:29     C:\Windows\system32\msls31.dll --------- 161792  
     05.06.2011 13:29     C:\Windows\system32\msrating.dll --------- 162304  
     05.06.2011 13:29     C:\Windows\system32\RegisterIEPKEYs.exe --------- 74752  
     05.06.2011 13:29     C:\Windows\system32\SetIEInstalledDate.exe --------- 76800  
     05.06.2011 13:29     C:\Windows\system32\mshtmler.dll --------- 48640  
     05.06.2011 13:29     C:\Windows\system32\iesysprep.dll --------- 86528  
     05.06.2011 13:29     C:\Windows\system32\tdc.ocx --------- 63488  
     05.06.2011 13:29     C:\Windows\system32\html.iec --------- 367104  
     05.06.2011 13:29     C:\Windows\system32\dxtrans.dll --------- 223232  
     05.06.2011 13:29     C:\Windows\system32\dxtmsft.dll --------- 353792  
     05.06.2011 13:29     C:\Windows\system32\ieapfltr.dat --------- 3695416  
     05.06.2011 13:29     C:\Windows\system32\ieapfltr.dll --------- 434176  
     05.06.2011 13:29     C:\Windows\system32\icardie.dll --------- 66048  
     05.06.2011 13:29     C:\Windows\system32\ie4uinit.exe --------- 74240  
     05.06.2011 13:29     C:\Windows\system32\iernonce.dll --------- 31744  
     05.06.2011 13:29     C:\Windows\system32\ieuinit.inf --------- 72822  
     05.06.2011 13:29     C:\Windows\system32\iesetup.dll --------- 74752  
     05.06.2011 13:29     C:\Windows\system32\iedkcs32.dll --------- 353584  
     05.06.2011 13:29     C:\Windows\system32\inetcpl.cpl --------- 1427456  
     05.06.2011 13:29     C:\Windows\system32\webcheck.dll --------- 203776  
     05.06.2011 13:29     C:\Windows\system32\licmgr10.dll --------- 23552  
     05.06.2011 13:29     C:\Windows\system32\inseng.dll --------- 78848  
     05.06.2011 13:29     C:\Windows\system32\wextract.exe --------- 152064  
     05.06.2011 13:29     C:\Windows\system32\iexpress.exe --------- 150528  
     05.06.2011 13:29     C:\Windows\system32\msfeeds.dll --------- 580608  
     05.06.2011 13:29     C:\Windows\system32\vbscript.dll --------- 420864  
     05.06.2011 13:29     C:\Windows\system32\ieUnatt.exe --------- 142848  
     05.06.2011 13:29     C:\Windows\system32\occache.dll --------- 123392  
     05.06.2011 13:29     C:\Windows\system32\pngfilt.dll --------- 54272  
     05.06.2011 13:29     C:\Windows\system32\mshta.exe --------- 11776  
     05.06.2011 13:29     C:\Windows\system32\admparse.dll --------- 101888  
     05.06.2011 13:29     C:\Windows\system32\ieaksie.dll --------- 227840  
     05.06.2011 13:29     C:\Windows\system32\ieakui.dll --------- 163840  
     05.06.2011 13:29     C:\Windows\system32\imgutil.dll --------- 35840  
     05.06.2011 13:29     C:\Windows\system32\advpack.dll --------- 114176  
     05.06.2011 13:29     C:\Windows\system32\iepeers.dll --------- 118784  
     05.06.2011 13:29     C:\Windows\system32\msfeedsbs.dll --------- 41472  
     05.06.2011 13:29     C:\Windows\system32\msfeedssync.exe --------- 10752  
     05.06.2011 13:29     C:\Windows\system32\IEAdvpack.dll --------- 110592  
     05.06.2011 13:29     C:\Windows\system32\ieakeng.dll --------- 130560  
     24.05.2011 19:14     C:\Windows\system32\MpSigStub.exe --------- 222080  
     04.05.2011 04:52     C:\Windows\system32\javaws.exe --------- 157472  
     04.05.2011 04:52     C:\Windows\system32\javaw.exe --------- 145184  
     04.05.2011 04:52     C:\Windows\system32\java.exe --------- 145184  
     04.05.2011 04:52     C:\Windows\system32\deployJava1.dll --------- 472808  
     02.05.2011 19:16     C:\Windows\system32\inetcomm.dll --------- 739328  
     29.04.2011 17:59     C:\Windows\system32\schannel.dll --------- 276992  
     20.04.2011 17:50     C:\Windows\system32\csrsrv.dll --------- 49152  
     19.04.2011 22:10     C:\Windows\system32\OVDecode.dll --------- 59904  
     19.04.2011 22:10     C:\Windows\system32\OpenCL.dll --------- 51712  
     19.04.2011 22:10     C:\Windows\system32\amdocl.dll --------- 12385280  
     12.04.2011 18:07     C:\Windows\system32\kernel32.dll --------- 892416  
    ----------------------------------------
    
     
    C:\Windows\Prefetch
    
     18.10.2011 13:16     C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf --------- 16304  
     18.10.2011 13:16     C:\Windows\Prefetch\CONSENT.EXE-531BD9EA.pf --------- 109580  
     18.10.2011 13:15     C:\Windows\Prefetch\VERCLSID.EXE-7C52E31C.pf --------- 17352  
     18.10.2011 13:14     C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf --------- 127832  
     18.10.2011 13:14     C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf --------- 182330  
     18.10.2011 13:14     C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf --------- 16630  
     18.10.2011 13:14     C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf --------- 23226  
     18.10.2011 13:09     C:\Windows\Prefetch\AVWSC.EXE-4630B658.pf --------- 47618  
     18.10.2011 13:08     C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf --------- 104360  
     18.10.2011 13:01     C:\Windows\Prefetch\GOOGLEUPDATERSERVICE.EXE-09540BCD.pf --------- 21802  
     18.10.2011 13:00     C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf --------- 53506  
     18.10.2011 13:00     C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-7226D1F8.pf --------- 58400  
     18.10.2011 12:59     C:\Windows\Prefetch\FIREFOX.EXE-A606B53C.pf --------- 160936  
     18.10.2011 12:59     C:\Windows\Prefetch\WERCON.EXE-E36BD04E.pf --------- 92402  
     18.10.2011 12:58     C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf --------- 35584  
     18.10.2011 12:58     C:\Windows\Prefetch\TASKMGR.EXE-5F5F473D.pf --------- 362250  
     18.10.2011 12:58     C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf --------- 107824  
     18.10.2011 12:57     C:\Windows\Prefetch\UPDRGUI.EXE-650B9264.pf --------- 35194  
     18.10.2011 12:57     C:\Windows\Prefetch\UPDATE.EXE-026DCA13.pf --------- 91582  
     18.10.2011 12:56     C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf --------- 18064  
     18.10.2011 12:56     C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf --------- 28754  
     18.10.2011 12:56     C:\Windows\Prefetch\MSIEXEC.EXE-A2D55CB6.pf --------- 110524  
     18.10.2011 12:55     C:\Windows\Prefetch\AVCENTER.EXE-C4AEDCEC.pf --------- 145960  
     18.10.2011 12:53     C:\Windows\Prefetch\AVCONFIG.EXE-E1ECA235.pf --------- 48776  
     18.10.2011 12:53     C:\Windows\Prefetch\AVGNT.EXE-83ACEFAC.pf --------- 59452  
     18.10.2011 12:53     C:\Windows\Prefetch\SCHED.EXE-75765D6F.pf --------- 32780  
     18.10.2011 12:53     C:\Windows\Prefetch\AVSHADOW.EXE-CC252F8D.pf --------- 18214  
     18.10.2011 12:53     C:\Windows\Prefetch\REGSVR32.EXE-8461DBEE.pf --------- 32582  
     18.10.2011 12:53     C:\Windows\Prefetch\AVGUARD.EXE-037D9CD6.pf --------- 27340  
     18.10.2011 12:53     C:\Windows\Prefetch\RUNDLL32.EXE-9F8303C7.pf --------- 19948  
     18.10.2011 12:53     C:\Windows\Prefetch\RUNONCE.EXE-D0649312.pf --------- 19446  
     18.10.2011 12:53     C:\Windows\Prefetch\GRPCONV.EXE-B823222B.pf --------- 11044  
     18.10.2011 12:53     C:\Windows\Prefetch\RUNDLL32.EXE-EB5137D2.pf --------- 19804  
     18.10.2011 12:53     C:\Windows\Prefetch\RUNDLL32.EXE-44A02E0B.pf --------- 18394  
     18.10.2011 12:52     C:\Windows\Prefetch\RUNDLL32.EXE-1399E325.pf --------- 18588  
     18.10.2011 12:52     C:\Windows\Prefetch\GOOGLEUPDATE.EXE-FE771DDA.pf --------- 41076  
     18.10.2011 12:51     C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf --------- 64750  
     18.10.2011 12:50     C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf --------- 19194  
     18.10.2011 12:50     C:\Windows\Prefetch\HPRBLOG.EXE-EF38A44E.pf --------- 40180  
     18.10.2011 12:50     C:\Windows\Prefetch\HPQGPC01.EXE-92C87699.pf --------- 23320  
     18.10.2011 12:50     C:\Windows\Prefetch\GOOGLECRASHHANDLER.EXE-573BF5B7.pf --------- 22066  
     18.10.2011 12:49     C:\Windows\Prefetch\CFSWMGR.EXE-B6130199.pf --------- 32758  
     18.10.2011 12:49     C:\Windows\Prefetch\HPQBAM08.EXE-5B656772.pf --------- 18020  
     18.10.2011 12:49     C:\Windows\Prefetch\HPQSTE08.EXE-8FA26316.pf --------- 29954  
     18.10.2011 12:49     C:\Windows\Prefetch\CCC.EXE-AE792174.pf --------- 125124  
     18.10.2011 12:49     C:\Windows\Prefetch\READER_SL.EXE-E503013B.pf --------- 17444  
     18.10.2011 12:49     C:\Windows\Prefetch\ReadyBoot --------- 4096  
     18.10.2011 12:48     C:\Windows\Prefetch\WINSVC.EXE-B0ADD09F.pf --------- 17896  
     18.10.2011 12:48     C:\Windows\Prefetch\SVCHOST.EXE-007FEA55.pf --------- 14164  
     18.10.2011 12:48     C:\Windows\Prefetch\EHMSAS.EXE-2D3B2F21.pf --------- 14416  
     18.10.2011 12:48     C:\Windows\Prefetch\KENOTIFY.EXE-2C13E0E5.pf --------- 22398  
     18.10.2011 12:48     C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf --------- 17844  
     18.10.2011 12:48     C:\Windows\Prefetch\SETUP.EXE-AA832CE8.pf --------- 22380  
     18.10.2011 12:48     C:\Windows\Prefetch\117D.EXE-1F078E20.pf --------- 17832  
     18.10.2011 12:46     C:\Windows\Prefetch\5995.TMP-C605C5AF.pf --------- 26472  
     18.10.2011 12:46     C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf --------- 2396204  
     18.10.2011 12:44     C:\Windows\Prefetch\AgGlFgAppHistory.db --------- 1515768  
     18.10.2011 12:44     C:\Windows\Prefetch\AgGlFaultHistory.db --------- 641538  
     18.10.2011 12:44     C:\Windows\Prefetch\AgGlGlobalHistory.db --------- 3481394  
     18.10.2011 12:44     C:\Windows\Prefetch\AgRobust.db --------- 563952  
     18.10.2011 12:44     C:\Windows\Prefetch\PfSvPerfStats.bin --------- 508  
     18.10.2011 12:44     C:\Windows\Prefetch\CLI.EXE-B3817BB7.pf --------- 8206  
     18.10.2011 12:44     C:\Windows\Prefetch\WERFAULT.EXE-E69F695A.pf --------- 13300  
     18.10.2011 12:22     C:\Windows\Prefetch\AVRESTART.EXE-D772BEC7.pf --------- 40538  
     18.10.2011 12:21     C:\Windows\Prefetch\RUNDLL32.EXE-1B6A6151.pf --------- 19828  
     18.10.2011 12:20     C:\Windows\Prefetch\RUNDLL32.EXE-74B9578A.pf --------- 19986  
     18.10.2011 12:20     C:\Windows\Prefetch\DLLHOST.EXE-B2EB1806.pf --------- 48088  
     18.10.2011 12:20     C:\Windows\Prefetch\SETUP.EXE-6DE68AD1.pf --------- 44528  
     18.10.2011 12:20     C:\Windows\Prefetch\APNSTUB.EXE-1850CCF2.pf --------- 45224  
     18.10.2011 12:20     C:\Windows\Prefetch\SETUP.EXE-E50229E6.pf --------- 229596  
     18.10.2011 12:20     C:\Windows\Prefetch\_IU14D2N.TMP-66BF5C90.pf --------- 20942  
     18.10.2011 12:20     C:\Windows\Prefetch\UNINS000.EXE-8814BB23.pf --------- 30916  
     18.10.2011 12:19     C:\Windows\Prefetch\SETUP.EXE-E13E1694.pf --------- 27490  
     18.10.2011 12:19     C:\Windows\Prefetch\VCREDIST_X86.EXE-172728A6.pf --------- 79698  
     18.10.2011 12:19     C:\Windows\Prefetch\PRESETUP.EXE-0B81BDC9.pf --------- 39232  
     18.10.2011 12:18     C:\Windows\Prefetch\AVIRA_FREE_ANTIVIRUS_DE.EXE-99CD7864.pf --------- 182150  
     18.10.2011 11:49     C:\Windows\Prefetch\SPYBOTSD.EXE-DC433942.pf --------- 113212  
     18.10.2011 11:48     C:\Windows\Prefetch\SDUPDATE.EXE-3B52587C.pf --------- 45384  
     18.10.2011 11:48     C:\Windows\Prefetch\TEATIMER166.EXE-52EB857C.pf --------- 16672  
     18.10.2011 11:48     C:\Windows\Prefetch\TEATIMER166.TMP-8793C1AC.pf --------- 42384  
     18.10.2011 11:48     C:\Windows\Prefetch\ADVCHECK165.EXE-6957D095.pf --------- 16746  
     18.10.2011 11:48     C:\Windows\Prefetch\ADVCHECK165.TMP-91BB8F33.pf --------- 34156  
     18.10.2011 11:48     C:\Windows\Prefetch\UPDATE.EXE-EBE74E11.pf --------- 25826  
     18.10.2011 11:45     C:\Windows\Prefetch\SPYBOTSD162.TMP-47970245.pf --------- 17260  
     18.10.2011 11:45     C:\Windows\Prefetch\SPYBOTSD162.EXE-2BCA1AC9.pf --------- 17138  
     18.10.2011 11:45     C:\Windows\Prefetch\SPYBOTSD162.TMP-F70B0979.pf --------- 23372  
     18.10.2011 11:44     C:\Windows\Prefetch\GUARDGUI.EXE-84F705BC.pf --------- 19288  
     18.10.2011 11:43     C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf --------- 28628  
     18.10.2011 11:43     C:\Windows\Prefetch\RUNDLL32.EXE-41CD37D2.pf --------- 20320  
     18.10.2011 11:43     C:\Windows\Prefetch\BACHELORARBEIT.EXE-03DF4552.pf --------- 13442  
     18.10.2011 11:42     C:\Windows\Prefetch\NACHHILFE.EXE-323FBFA9.pf --------- 13618  
     18.10.2011 11:41     C:\Windows\Prefetch\ACRORD32.EXE-91E1AAD6.pf --------- 65930  
     18.10.2011 11:38     C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf --------- 32982  
     18.10.2011 11:37     C:\Windows\Prefetch\WMPLAYER.EXE-BAD6BD53.pf --------- 52404  
     18.10.2011 11:31     C:\Windows\Prefetch\B63.EXE-C11C5B27.pf --------- 22288  
     18.10.2011 11:30     C:\Windows\Prefetch\97CC.EXE-8833111D.pf --------- 17580  
     18.10.2011 11:30     C:\Windows\Prefetch\LVVM.EXE-109ED95F.pf --------- 17322  
     18.10.2011 11:29     C:\Windows\Prefetch\CF7F4.EXE-81CADA67.pf --------- 17320  
     18.10.2011 11:14     C:\Windows\Prefetch\HPQUSGL.EXE-BF611759.pf --------- 12918  
     18.10.2011 11:13     C:\Windows\Prefetch\SOFFICE.EXE-0C715DD8.pf --------- 13538  
     18.10.2011 11:13     C:\Windows\Prefetch\SOFFICE.BIN-FFFF76B3.pf --------- 247828  
     18.10.2011 11:12     C:\Windows\Prefetch\8091676.EXE-F1A06F20.pf --------- 97458  
     18.10.2011 11:10     C:\Windows\Prefetch\HPQDIREC.EXE-6B6EA665.pf --------- 61526  
     18.10.2011 11:05     C:\Windows\Prefetch\SYNTPHELPER.EXE-0A20AAC4.pf --------- 8008  
     18.10.2011 11:04     C:\Windows\Prefetch\HPQTRA08.EXE-B5C3CA4D.pf --------- 1458  
     18.10.2011 11:02     C:\Windows\Prefetch\PRESENTATIONSETTINGS.EXE-2F4708C9.pf --------- 16416  
     18.10.2011 11:02     C:\Windows\Prefetch\DWM.EXE-6FFD3DA8.pf --------- 26702  
     18.10.2011 11:02     C:\Windows\Prefetch\USERINIT.EXE-2257A3E7.pf --------- 11808  
     18.10.2011 11:00     C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf --------- 87476  
     18.10.2011 11:00     C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf --------- 12248  
     18.10.2011 00:13     C:\Windows\Prefetch\SNDVOL.EXE-5D4CC7D6.pf --------- 23260  
     17.10.2011 23:35     C:\Windows\Prefetch\ADOBEARM.EXE-719325FF.pf --------- 19544  
     17.10.2011 23:32     C:\Windows\Prefetch\IEXPLORE.EXE-908C99F8.pf --------- 125196  
     17.10.2011 23:18     C:\Windows\Prefetch\MSHTA.EXE-A970B441.pf --------- 62418  
     17.10.2011 23:05     C:\Windows\Prefetch\TV_W32.EXE-570CDEF4.pf --------- 13398  
     17.10.2011 23:04     C:\Windows\Prefetch\TEAMVIEWER_DESKTOP.EXE-73B3E96D.pf --------- 47344  
     17.10.2011 23:03     C:\Windows\Prefetch\TEAMVIEWER.EXE-FDEEED80.pf --------- 99922  
     17.10.2011 22:51     C:\Windows\Prefetch\AVIRA_FREE_ANTIVIRUS_DE.EXE-FBB3126A.pf --------- 216512  
     17.10.2011 22:36     C:\Windows\Prefetch\AVNOTIFY.EXE-FEC2FEC4.pf --------- 18128  
     17.10.2011 22:11     C:\Windows\Prefetch\TASKMGR.EXE-5332D97C.pf --------- 12762  
     17.10.2011 21:57     C:\Windows\Prefetch\WSCTOOL.EXE-7F329123.pf --------- 28666  
     17.10.2011 21:57     C:\Windows\Prefetch\DLLHOST.EXE-7819DDC0.pf --------- 22084  
     17.10.2011 21:55     C:\Windows\Prefetch\RUNDLL32.EXE-E8AC3089.pf --------- 38306  
     17.10.2011 21:55     C:\Windows\Prefetch\CONTROL.EXE-817F8F1D.pf --------- 20078  
     17.10.2011 21:53     C:\Windows\Prefetch\0275165.EXE-501C13D1.pf --------- 12534  
     17.10.2011 21:52     C:\Windows\Prefetch\SKYPE.EXE-4929A84C.pf --------- 2128  
     17.10.2011 21:46     C:\Windows\Prefetch\AgCx_SC1.db --------- 518942  
     17.10.2011 21:45     C:\Windows\Prefetch\AgCx_SC1.db.trx --------- 73754  
     17.10.2011 21:43     C:\Windows\Prefetch\8050890.EXE-16381AE5.pf --------- 12534  
     17.10.2011 21:42     C:\Windows\Prefetch\SVCHOST.EXE-40F9D24E.pf --------- 20634  
     17.10.2011 21:29     C:\Windows\Prefetch\2519756.EXE-B50FEDAE.pf --------- 76974  
     17.10.2011 21:28     C:\Windows\Prefetch\6818562.EXE-E462542B.pf --------- 12644  
     17.10.2011 21:27     C:\Windows\Prefetch\SVPWUTIL.EXE-BB308D3E.pf --------- 900  
     17.10.2011 18:56     C:\Windows\Prefetch\A9A6.TMP-14A8E738.pf --------- 30310  
     17.10.2011 18:48     C:\Windows\Prefetch\5348531.EXE-265D75F8.pf --------- 12558  
     17.10.2011 18:47     C:\Windows\Prefetch\0037858.EXE-173E9CA2.pf --------- 12700  
     17.10.2011 17:50     C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-4225854602-2362561003-147886621-1000.db --------- 951911  
     17.10.2011 17:50     C:\Windows\Prefetch\AgGlUAD_S-1-5-21-4225854602-2362561003-147886621-1000.db --------- 2054798  
     17.10.2011 17:33     C:\Windows\Prefetch\RUNDLL32.EXE-230FC512.pf --------- 2010  
     17.10.2011 17:24     C:\Windows\Prefetch\Layout.ini --------- 1831976  
     19.05.2011 07:31     C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-4225854602-2362561003-147886621-500.db --------- 1045396  
     19.05.2011 07:31     C:\Windows\Prefetch\AgGlUAD_S-1-5-21-4225854602-2362561003-147886621-500.db --------- 914818  
     03.02.2010 18:00     C:\Windows\Prefetch\AgCx_S1_S-1-5-21-4225854602-2362561003-147886621-1000.snp.db --------- 2975590  
     07.01.2009 10:47     C:\Windows\Prefetch\AgCx_SC2.db --------- 952235  
     06.06.2008 10:16     C:\Windows\Prefetch\AgAppLaunch.db --------- 332116  
    ----------------------------------------
    
     
    C:\Windows\Tasks
    
     18.10.2011 13:01     C:\Windows\Tasks\Google Software Updater.job --------- 1022  
     18.10.2011 12:52     C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job --------- 1098  
     18.10.2011 12:46     C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job --------- 1094  
     18.10.2011 12:45     C:\Windows\Tasks\SA.DAT --------- 6  
     18.10.2011 12:44     C:\Windows\Tasks\SCHEDLGU.TXT --------- 32534  
    ----------------------------------------
    
     
    C:\Windows\Temp
    
     18.10.2011 12:57     C:\Windows\Temp\hpqddsvc.log --------- 6077  
     18.10.2011 12:55     C:\Windows\Temp\AVSETUP_4e9d5937 --------- 0  
     18.10.2011 12:46     C:\Windows\Temp\HPSLPSVC0000.log --------- 2235  
     18.10.2011 12:20     C:\Windows\Temp\AVSETUP_4e9d52d7 --------- 65536  
     18.10.2011 11:50     C:\Windows\Temp\{5F29E3A5-472D-4877-B55C-8E159943010A} --------- 0  
     18.10.2011 11:50     C:\Windows\Temp\gisa0fe7 --------- 4096  
     18.10.2011 11:50     C:\Windows\Temp\gis4fb358 --------- 0  
     18.10.2011 11:50     C:\Windows\Temp\gis315f0 --------- 4096  
     18.10.2011 11:50     C:\Windows\Temp\gis19cab25 --------- 0  
     18.10.2011 11:50     C:\Windows\Temp\gis15e87a --------- 4096  
     18.10.2011 11:50     C:\Windows\Temp\._msige60 --------- 24576  
     18.10.2011 11:50     C:\Windows\Temp\._msige52 --------- 28672  
     18.10.2011 10:58     C:\Windows\Temp\HPSLPSVC0565.log --------- 8372  
     14.10.2011 09:34     C:\Windows\Temp\MPTelemetrySubmit --------- 0  
     14.10.2011 09:16     C:\Windows\Temp\KB2572078_10.0.30319 --------- 0  
     20.08.2011 18:24     C:\Windows\Temp\KB2533523_10.0.30319 --------- 0  
     20.08.2011 18:20     C:\Windows\Temp\KB2468871v2_10.0.30319 --------- 0  
     12.08.2011 13:24     C:\Windows\Temp\KB2539636_10.0.30319 --------- 0  
     14.07.2011 19:17     C:\Windows\Temp\Microsoft Visual C++ 2010  x86 Redistributable Setup_10.0.30319 --------- 0  
     30.06.2011 08:35     C:\Windows\Temp\KB2478663_10.0.30319 --------- 0  
     30.06.2011 08:25     C:\Windows\Temp\KB2518870_10.0.30319 --------- 0  
     28.04.2011 14:58     C:\Windows\Temp\History --------- 0  
     28.04.2011 14:58     C:\Windows\Temp\Cookies --------- 0  
     14.04.2011 08:45     C:\Windows\Temp\KB2446708_10.0.30319 --------- 0  
     16.08.2010 10:37     C:\Windows\Temp\SxsTemp --------- 0  
     22.06.2010 22:57     C:\Windows\Temp\Google Toolbar --------- 0  
     19.06.2010 21:23     C:\Windows\Temp\mgxgroups --------- 0  
     19.06.2010 21:19     C:\Windows\Temp\mgxlicense --------- 0  
     15.10.2009 14:06     C:\Windows\Temp\RtSigs --------- 0  
     26.05.2009 14:52     C:\Windows\Temp\Temporary Internet Files --------- 0  
     13.12.2008 00:06     C:\Windows\Temp\GUMCA7F.tmp --------- 0  
     28.07.2008 17:43     C:\Windows\Temp\{29F972A1-B5B0-4B36-B5EB-34FD7D89A4FD} --------- 0  
     06.06.2008 10:24     C:\Windows\Temp\{E7E75AD9-6FAE-46AA-B462-42C562C013EE} --------- 0  
     02.11.2006 14:48     C:\Windows\Temp\cmi{99681151-3537-434F-8D53-AA0EF9812DEC} --------- 0  
     02.11.2006 13:18     C:\Windows\Temp\~msdt --------- 0  
    ----------------------------------------
    
     
    C:\Users\nina\AppData\Local\Temp
    
     18.10.2011 13:02     C:\Users\nina\AppData\Local\Temp\plugtmp-62 --------- 0  
     18.10.2011 12:59     C:\Users\nina\AppData\Local\Temp\~DFA6CE.tmp --------- 114688  
     18.10.2011 12:57     C:\Users\nina\AppData\Local\Temp\~DFF3EB.tmp --------- 114688  
     18.10.2011 12:57     C:\Users\nina\AppData\Local\Temp\IpAdrSet.log --------- 2535  
     18.10.2011 12:57     C:\Users\nina\AppData\Local\Temp\nina.bmp --------- 31832  
     18.10.2011 12:53     C:\Users\nina\AppData\Local\Temp\jusched.log --------- 702  
     18.10.2011 12:48     C:\Users\nina\AppData\Local\Temp\hpqddusr.log --------- 312  
     18.10.2011 12:48     C:\Users\nina\AppData\Local\Temp\MAR3784.tmp --------- 1285  
     18.10.2011 12:48     C:\Users\nina\AppData\Local\Temp\MAR35DE.tmp --------- 1342  
     18.10.2011 12:48     C:\Users\nina\AppData\Local\Temp\APNLogs --------- 0  
     18.10.2011 12:48     C:\Users\nina\AppData\Local\Temp\ArmUI.ini --------- 148526  
     18.10.2011 12:48     C:\Users\nina\AppData\Local\Temp\AskSLib.dll --------- 246440  
     18.10.2011 12:48     C:\Users\nina\AppData\Local\Temp\APN-Stub --------- 0  
     18.10.2011 12:47     C:\Users\nina\AppData\Local\Temp\WPDNSE --------- 0  
     18.10.2011 12:46     C:\Users\nina\AppData\Local\Temp\117D.tmp --------- 0  
     18.10.2011 12:19     C:\Users\nina\AppData\Local\Temp\AppRemover_Log.txt --------- 2464  
     18.10.2011 12:19     C:\Users\nina\AppData\Local\Temp\Microsoft Visual C++ 2010  x86 Redistributable Setup_20111018_121902936.html --------- 76158  
     18.10.2011 12:19     C:\Users\nina\AppData\Local\Temp\Microsoft Visual C++ 2010  x86 Redistributable Setup_20111018_121902936-MSI_vc_red.msi.txt --------- 799906  
     18.10.2011 12:19     C:\Users\nina\AppData\Local\Temp\Microsoft Visual C++ 2010  x86 Redistributable Setup_10.0.40219 --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\~rnsetup --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\~rnsetu0 --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\~DEST --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\{F778A4FE-54F6-4A1B-BCC1-1E58BBFE00BB} --------- 4096  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\{542B32D8-4998-4642-816D-24E0DCA81980} --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\__SkypeIEToolbar_Cache --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZFEC9.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZFCEC.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZFCC9.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZF3B3.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZF1EE.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZEF32.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZEDB5.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZEBC8.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZE917.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZE7A3.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZE767.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZE540.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZD520.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZD1B3.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZD06F.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZC6E7.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZC64A.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZC35A.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZC177.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZBD89.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZB98A.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZB886.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZB704.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZB6FF.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZB326.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZAFEA.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZAE40.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZAD46.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZACB8.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZAA66.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZA8F0.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZA766.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZA63.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZA624.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZA573.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZA4E6.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZA1F9.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZA180.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZA16F.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ9FCA.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ98B9.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ9695.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ95E9.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ933B.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ92DE.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ8B91.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ8A98.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ8A73.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ8813.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ85F.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ83A0.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ8353.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ7F8E.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ6A77.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ61F5.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ5F3F.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ5E55.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ5BDE.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ5A8F.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ54E7.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ518A.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ50C2.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ4CAB.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ4C32.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ4AAF.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ499D.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ452B.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ42F9.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ429.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ4185.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ40A8.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ3F08.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ3D31.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ38ED.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ315C.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ2F89.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ2D1E.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ2CAC.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ29AA.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ2990.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ2971.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ2903.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ203F.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ1C85.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ1C5A.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ1C0B.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ1860.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ1742.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ1693.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ163F.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ156B.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\WLZ119F.tmp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\tmp76118.WMC --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\Temp1_Steffi-Geburtstag-030911_1.zip --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\Temp1_Simple Past unregelmaessiger Verben.zip --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\Temp1_Future tenses_ will and going_to.zip --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\SxsTemp --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\rninst~0 --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\rb --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_992_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_980_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_948_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_876_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_872_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_868_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_852_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_840_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_836_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_836_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_832_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_832_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_828_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_824_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_824_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_820_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_820_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_820_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_816_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_816_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_816_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_812_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_808_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_808_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_808_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_804_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_800_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_796_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_768_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_708_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_700_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_688_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_684_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_656_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_624_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_624_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_600_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_600_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5892_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_576_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5716_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5712_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5700_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5688_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5604_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5592_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5552_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5524_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5496_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5436_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5400_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5380_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5360_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5356_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5340_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5340_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5324_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5316_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5304_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5280_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5276_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5268_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_524_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5232_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5220_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5208_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5200_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5192_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5192_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5184_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5180_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5180_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5168_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3872_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3872_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3868_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3868_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3864_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3860_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3860_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3860_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3856_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3856_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3852_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3852_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3848_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3848_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3844_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3844_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3844_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3844_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3840_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3840_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3836_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3836_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3828_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3828_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3824_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3816_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3812_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3804_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3804_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3800_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3800_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3800_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3796_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3792_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3792_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3792_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3784_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3784_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3776_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3776_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3776_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3764_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3764_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3760_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3756_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3756_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3744_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3744_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3736_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3732_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3732_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3732_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3724_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3720_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3720_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3716_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3716_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3712_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3712_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3712_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3708_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3708_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3704_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3700_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3696_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3692_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3684_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3684_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3684_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3680_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3672_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3672_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3672_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3672_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3664_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3656_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3656_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3656_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3656_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3652_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3648_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3648_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3640_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3640_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3636_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3632_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3628_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3628_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3628_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3624_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3608_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3608_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3604_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3596_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3592_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3588_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3584_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3580_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3580_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3580_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3576_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3576_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3576_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3556_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3556_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3552_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3552_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3552_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3536_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3524_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3524_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3520_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3520_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3512_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3512_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3508_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3508_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3504_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3492_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3472_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3464_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3460_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3456_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3456_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3448_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3448_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3448_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3440_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3436_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3436_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3436_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3436_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3432_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3428_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3416_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3412_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_340_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3404_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3396_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3392_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3376_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3364_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3360_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3360_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3356_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3356_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3356_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3352_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3344_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3340_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3340_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3336_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_332_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3328_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3328_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3320_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3320_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3320_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3316_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3312_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3308_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3300_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3292_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3292_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_328_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3288_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3284_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3280_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3276_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3272_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3268_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3264_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3264_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3264_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3264_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3260_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3260_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3256_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3256_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3252_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3252_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3244_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3240_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3236_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3232_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3232_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3228_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3224_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3224_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3220_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3216_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3216_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3212_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3208_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3204_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3200_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3196_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3196_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3196_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3188_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3180_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3172_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3168_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3168_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3148_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3148_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3144_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3140_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3140_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3132_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3132_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3132_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3124_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3124_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3120_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3120_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3108_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3100_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3100_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3096_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3092_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3076_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3076_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3068_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3068_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3064_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3056_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3044_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3044_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3040_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3028_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3020_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3020_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3016_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3016_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3012_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3012_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3012_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3012_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3008_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3008_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3004_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3000_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2996_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2992_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2992_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2992_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2988_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2984_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2976_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2976_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2972_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2964_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2956_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2952_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2952_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2948_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_292_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2920_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2920_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2892_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2892_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2888_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2888_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2884_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2876_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2868_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2868_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2868_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2864_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2864_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2860_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2856_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2856_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2852_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2844_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2844_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2844_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2844_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2840_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2832_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2828_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2824_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2824_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2820_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2816_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2816_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2816_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2808_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2800_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2800_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2800_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2788_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2780_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2780_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2776_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2776_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2768_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2764_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2760_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2748_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2748_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2740_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2740_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2736_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2732_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2728_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2728_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2728_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2716_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2712_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2708_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2708_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2704_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2700_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2696_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2696_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2692_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2684_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2676_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2676_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2668_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2656_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2656_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2656_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2652_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2652_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2648_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2640_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2636_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2636_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2620_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2616_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2612_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2600_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2600_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2592_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2592_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2584_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2584_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2576_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2576_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2576_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2576_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_256_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2568_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2560_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2556_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2552_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2548_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2544_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2540_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2540_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2540_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2528_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2512_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2512_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2504_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2500_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2500_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2480_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2476_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2468_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2452_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2448_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2444_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2436_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2428_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2408_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2396_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2392_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2384_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2372_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2368_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2368_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2368_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2360_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2352_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2348_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2328_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2328_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2324_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2316_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2316_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2308_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2304_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2292_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2292_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2292_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2288_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2284_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2284_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2280_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2276_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2272_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2268_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2260_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2256_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2252_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2252_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2248_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2240_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2240_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2232_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2232_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2228_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2228_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2224_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2208_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2204_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2192_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2184_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2172_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2164_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2164_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2160_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2156_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2152_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2116_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2112_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2108_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2108_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2100_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2064_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2064_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2056_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2056_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2052_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2040_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2036_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2032_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2032_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_2016_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1980_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1956_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1948_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1936_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1916_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1904_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1872_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1872_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1856_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1820_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1808_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1800_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1776_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1772_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1768_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1760_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1756_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1744_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1744_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1736_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1736_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_172_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1728_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1724_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1720_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1696_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1684_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1680_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_1672_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1668_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1668_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1664_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1656_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1656_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1648_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1640_4.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1640_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1640_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1628_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1604_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_156_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_156_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1568_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1564_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1560_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1544_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1536_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1516_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1516_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1492_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1492_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1484_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1480_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1452_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1448_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1436_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1436_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1432_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1416_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1408_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1408_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1400_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1400_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1396_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1388_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1384_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1380_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1372_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1368_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1364_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1364_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1360_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1352_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1348_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1348_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1344_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1344_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1332_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1332_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1328_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1324_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1316_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1312_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1308_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1300_5.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1300_4.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1300_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1300_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1280_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1280_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1276_4.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1276_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1276_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1268_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1264_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1248_5.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1248_4.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1248_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1248_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1240_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1236_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1232_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1228_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1224_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1216_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1216_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1212_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1212_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1204_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1200_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1200_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1196_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1196_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1180_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1176_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1176_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1172_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1164_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1164_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1152_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1148_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1144_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1144_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1132_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1116_3.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1116_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1104_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1092_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1084_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1032_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1024_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1020_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1008_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ppcrlui_1000_2.ui --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-9 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-8 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-7 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-6 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-5 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-45 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-4 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-3 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-27 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-22 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-21 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-2 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-18 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-17 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-16 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-15 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-14 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-13 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-12 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-11 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-10 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp-1 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\plugtmp --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\offer --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\Low --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ImageDebug --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\Google Toolbar --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ge5584 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ge5404 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ge260 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ge2552 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\ge2468 --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\Digital_Foto_Maker --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\CDM --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\AVSETUP_4a1ae3bd --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\AutoRun --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\Adobe --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\825A.dir --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\81CD.dir --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\7zSE198.tmp --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\7zOB389.tmp --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\7zO7984.tmp --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\7zO342D.tmp --------- 0  
     18.10.2011 11:49     C:\Users\nina\AppData\Local\Temp\69E9.dir --------- 0  
     18.10.2011 12:49     C:\Users\nina\AppData\Local\Temp\AdobeARM.log --------- 393955  
     18.10.2011 11:11     C:\Users\nina\AppData\Local\Temp\8091676.exe --------- 249856  
     17.10.2011 23:05     C:\Users\nina\AppData\Local\Temp\{112307d2-3fd3-441f-96fb-e14b1a35d6e3} --------- 0  
     17.10.2011 16:56     C:\Users\nina\AppData\Local\Temp\plugtmp-61 --------- 0  
     17.10.2011 16:47     C:\Users\nina\AppData\Local\Temp\Seminarplan_Studis.doc --------- 59904  
     13.10.2011 13:38     C:\Users\nina\AppData\Local\Temp\hsperfdata_nina --------- 0  
     30.09.2011 13:05     C:\Users\nina\AppData\Local\Temp\plugtmp-60 --------- 0  
     28.09.2011 19:22     C:\Users\nina\AppData\Local\Temp\plugtmp-59 --------- 0  
     19.09.2011 13:08     C:\Users\nina\AppData\Local\Temp\Temp1_Spiel mit Action Cards.zip --------- 0  
     15.09.2011 20:32     C:\Users\nina\AppData\Local\Temp\lilo.5364 --------- 0  
     06.09.2011 17:16     C:\Users\nina\AppData\Local\Temp\Schulplatzverteilung_Englisch-Realschule.Stand_06-09-11.pdf --------- 21849  
     06.09.2011 16:23     C:\Users\nina\AppData\Local\Temp\plugtmp-58 --------- 0  
     01.09.2011 10:51     C:\Users\nina\AppData\Local\Temp\MaglevExpressTemp --------- 0  
     20.08.2011 18:17     C:\Users\nina\AppData\Local\Temp\ge4448 --------- 0  
     19.08.2011 15:55     C:\Users\nina\AppData\Local\Temp\plugtmp-57 --------- 0  
     18.08.2011 16:13     C:\Users\nina\AppData\Local\Temp\Ablaufplan_Pr„v__SS_2011.docx --------- 11012  
     18.08.2011 15:38     C:\Users\nina\AppData\Local\Temp\plugtmp-56 --------- 0  
     25.07.2011 16:44     C:\Users\nina\AppData\Local\Temp\plugtmp-55 --------- 0  
     23.07.2011 16:41     C:\Users\nina\AppData\Local\Temp\TeamViewer --------- 0  
     22.07.2011 20:01     C:\Users\nina\AppData\Local\Temp\plugtmp-54 --------- 0  
     22.07.2011 18:00     C:\Users\nina\AppData\Local\Temp\PP_SS11_Verhaltensstoerungen_4F.pdf --------- 362441  
     22.07.2011 17:52     C:\Users\nina\AppData\Local\Temp\PP_SS11_ADHS_4F.pdf --------- 341632  
     22.07.2011 17:37     C:\Users\nina\AppData\Local\Temp\PP_SS11_Rechenstoerung_4F.pdf --------- 241726  
     22.07.2011 17:24     C:\Users\nina\AppData\Local\Temp\PP_SS11_LRS_4F.pdf --------- 868137  
     22.07.2011 16:43     C:\Users\nina\AppData\Local\Temp\PP_SS11_Alllg_Lernst”rungen_4F.pdf --------- 277839  
     22.07.2011 15:04     C:\Users\nina\AppData\Local\Temp\PP_SS11_schulleistungsstudien_4F.pdf --------- 491415  
     22.07.2011 14:48     C:\Users\nina\AppData\Local\Temp\PP_SS11_Diagnostik_4F.pdf --------- 169091  
     22.07.2011 14:47     C:\Users\nina\AppData\Local\Temp\R„ume_Kupfer_Zigler_15_E10.pdf --------- 42951  
     22.07.2011 14:46     C:\Users\nina\AppData\Local\Temp\Merkblatt_Matrikelnummer.pdf --------- 56298  
     22.07.2011 14:44     C:\Users\nina\AppData\Local\Temp\Hamburger_Verst„ndlichkeitsfragebogen.pdf --------- 12839  
     22.07.2011 14:42     C:\Users\nina\AppData\Local\Temp\leitlinien_fr_Abbildungen.pdf --------- 73586  
     22.07.2011 14:04     C:\Users\nina\AppData\Local\Temp\PP_SS11_medien_4F.pdf --------- 999972  
     22.07.2011 13:50     C:\Users\nina\AppData\Local\Temp\PP_SS11_sozialformen_4F.pdf --------- 970695  
     22.07.2011 13:43     C:\Users\nina\AppData\Local\Temp\PP_SS11_unterrichtsfuehrung_4F.pdf --------- 165579  
     22.07.2011 12:22     C:\Users\nina\AppData\Local\Temp\PP_SS11_akteure.pdf --------- 1233090  
     22.07.2011 12:16     C:\Users\nina\AppData\Local\Temp\PP_SS11_Einfuehrung.pdf --------- 1246237  
     17.07.2011 22:17     C:\Users\nina\AppData\Local\Temp\plugtmp-53 --------- 0  
     17.07.2011 18:53     C:\Users\nina\AppData\Local\Temp\Patenantrag-Download.doc --------- 22016  
     12.07.2011 22:38     C:\Users\nina\AppData\Local\Temp\plugtmp-52 --------- 0  
     09.07.2011 16:17     C:\Users\nina\AppData\Local\Temp\plugtmp-51 --------- 0  
     02.07.2011 22:49     C:\Users\nina\AppData\Local\Temp\HPQKYGRP_000007A4 --------- 0  
     29.06.2011 22:46     C:\Users\nina\AppData\Local\Temp\Protokoll_Martyrium.doc --------- 61952  
     14.06.2011 19:17     C:\Users\nina\AppData\Local\Temp\{1A41F700-8530-4195-A716-F02E7BE5CA6E} --------- 0  
     13.04.2011 15:32     C:\Users\nina\AppData\Local\Temp\plugtmp-50 --------- 0  
     10.04.2011 19:43     C:\Users\nina\AppData\Local\Temp\plugtmp-49 --------- 0  
     18.03.2011 15:18     C:\Users\nina\AppData\Local\Temp\plugtmp-48 --------- 0  
     09.03.2011 00:34     C:\Users\nina\AppData\Local\Temp\ge6104 --------- 0  
     01.03.2011 23:13     C:\Users\nina\AppData\Local\Temp\Hot_BestWesternPost_Film.wmv --------- 6461089  
     26.02.2011 20:57     C:\Users\nina\AppData\Local\Temp\plugtmp-47 --------- 0  
     19.01.2011 20:50     C:\Users\nina\AppData\Local\Temp\History --------- 0  
     19.01.2011 20:50     C:\Users\nina\AppData\Local\Temp\Cookies --------- 0  
     19.01.2011 20:50     C:\Users\nina\AppData\Local\Temp\Temporary Internet Files --------- 0  
     19.01.2011 00:28     C:\Users\nina\AppData\Local\Temp\plugtmp-46 --------- 0  
     18.01.2011 22:09     C:\Users\nina\AppData\Local\Temp\DPE --------- 0  
     18.01.2011 22:00     C:\Users\nina\AppData\Local\Temp\SilverStreakLog --------- 0  
     28.12.2010 23:09     C:\Users\nina\AppData\Local\Temp\PDFCreator --------- 0  
     09.12.2010 16:06     C:\Users\nina\AppData\Local\Temp\plugtmp-44 --------- 0  
     03.12.2010 13:02     C:\Users\nina\AppData\Local\Temp\plugtmp-43 --------- 0  
     22.11.2010 13:20     C:\Users\nina\AppData\Local\Temp\plugtmp-42 --------- 0  
     20.11.2010 23:25     C:\Users\nina\AppData\Local\Temp\plugtmp-41 --------- 0  
     20.11.2010 21:59     C:\Users\nina\AppData\Local\Temp\Praktikumsbericht 07.11.2010[1].doc --------- 209408  
     09.11.2010 20:23     C:\Users\nina\AppData\Local\Temp\plugtmp-40 --------- 0  
     04.11.2010 20:25     C:\Users\nina\AppData\Local\Temp\plugtmp-39 --------- 0  
     04.11.2010 20:23     C:\Users\nina\AppData\Local\Temp\Lebenslauf 1.doc --------- 16937  
     04.11.2010 20:22     C:\Users\nina\AppData\Local\Temp\Bewerbung.odt --------- 14645  
     30.10.2010 21:34     C:\Users\nina\AppData\Local\Temp\plugtmp-38 --------- 0  
     28.10.2010 08:42     C:\Users\nina\AppData\Local\Temp\plugtmp-37 --------- 0  
     22.10.2010 13:19     C:\Users\nina\AppData\Local\Temp\plugtmp-36 --------- 0  
     22.10.2010 12:17     C:\Users\nina\AppData\Local\Temp\Leitfaden FP-1-1.doc --------- 89088  
     29.09.2010 16:44     C:\Users\nina\AppData\Local\Temp\plugtmp-35 --------- 0  
     27.09.2010 20:01     C:\Users\nina\AppData\Local\Temp\{d1ea822f-ef3f-424a-9899-22587c0c690f} --------- 0  
     19.09.2010 15:10     C:\Users\nina\AppData\Local\Temp\Microsoft .NET Framework Client Profile Language Pack Setup_4.0.30319 --------- 0  
     19.09.2010 15:05     C:\Users\nina\AppData\Local\Temp\Microsoft .NET Framework 4 Client Profile Setup_4.0.30319 --------- 0  
     30.08.2010 17:04     C:\Users\nina\AppData\Local\Temp\plugtmp-34 --------- 0  
     30.08.2010 14:36     C:\Users\nina\AppData\Local\Temp\Leitfaden FP-1.doc --------- 89088  
     24.08.2010 14:51     C:\Users\nina\AppData\Local\Temp\plugtmp-33 --------- 0  
     24.08.2010 14:46     C:\Users\nina\AppData\Local\Temp\Lebensmittel.pdf --------- 18742  
     24.08.2010 11:42     C:\Users\nina\AppData\Local\Temp\Klausur_GK_Psych_II_SS10_Ergebnisse.pdf --------- 31708  
     20.08.2010 13:06     C:\Users\nina\AppData\Local\Temp\plugtmp-32 --------- 0  
     19.08.2010 17:09     C:\Users\nina\AppData\Local\Temp\plugtmp-31 --------- 0  
     17.08.2010 20:10     C:\Users\nina\AppData\Local\Temp\plugtmp-30 --------- 0  
     16.08.2010 16:43     C:\Users\nina\AppData\Local\Temp\plugtmp-29 --------- 0  
     16.08.2010 15:11     C:\Users\nina\AppData\Local\Temp\Text Erstlesen,Erstschreiben.docx --------- 26701  
     16.08.2010 15:10     C:\Users\nina\AppData\Local\Temp\Protokoll Grammtikalisierung 20.05.docx --------- 16561  
     16.08.2010 13:30     C:\Users\nina\AppData\Local\Temp\Verteilung_Deutsch-Haupt-_u._Realschulen_Stand_07-07-10.pdf --------- 27688  
     11.08.2010 15:05     C:\Users\nina\AppData\Local\Temp\plugtmp-28 --------- 0  
     22.07.2010 15:41     C:\Users\nina\AppData\Local\Temp\plugtmp-26 --------- 0  
     22.07.2010 14:09     C:\Users\nina\AppData\Local\Temp\ge2796 --------- 0  
     19.07.2010 19:30     C:\Users\nina\AppData\Local\Temp\plugtmp-25 --------- 0  
     13.07.2010 23:16     C:\Users\nina\AppData\Local\Temp\plugtmp-24 --------- 0  
     10.07.2010 22:31     C:\Users\nina\AppData\Local\Temp\plugtmp-23 --------- 0  
     17.06.2010 19:05     C:\Users\nina\AppData\Local\Temp\plugtmp-20 --------- 0  
     13.05.2010 14:30     C:\Users\nina\AppData\Local\Temp\plugtmp-19 --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4112_6.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4828_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3904_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3908_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3908_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3912_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3928_6.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3948_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3996_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4012_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4012_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4056_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4092_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4140_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4228_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4240_8.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4240_9.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4256_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4304_11.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4340_6.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4356_6.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4424_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4428_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4436_7.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4480_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4832_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4884_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4964_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4972_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_504_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5092_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_5120_3.ui --------- 0  
     01.02.2010 19:00     C:\Users\nina\AppData\Local\Temp\elfte_sitzung_schultheorie_stud-ip.ppt --------- 456192  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3384_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_388_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3884_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3888_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3888_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3896_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3896_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3912_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3912_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3912_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3920_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3928_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3932_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3932_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3932_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3936_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3944_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3960_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3964_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3968_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3972_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3980_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_3984_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4008_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4008_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4016_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4020_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4032_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4048_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4048_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4072_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4072_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4076_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4084_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4084_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4088_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4092_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4100_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4100_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4104_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4128_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4152_7.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4164_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4164_6.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4184_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4196_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4236_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4252_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4260_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4268_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4272_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4304_10.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4304_8.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4304_9.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4308_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4312_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4316_2.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4320_6.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4328_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4336_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4336_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4340_5.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4360_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4368_3.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4368_4.ui --------- 0  
     18.10.2011 11:50     C:\Users\nina\AppData\Local\Temp\ppcrlui_4372_3.ui --------- 0  
    ----------------------------------------
    
     
    C:\Program Files
    
     18.10.2011 12:59     C:\Program Files\Internet Explorer --------- 4096  
     18.10.2011 12:57     C:\Program Files\Trend Micro --------- 0  
     18.10.2011 12:52     C:\Program Files\Avira --------- 0  
     18.10.2011 12:20     C:\Program Files\Spybot - Search & Destroy --------- 8192  
     14.10.2011 10:53     C:\Program Files\Microsoft Silverlight --------- 4096  
     14.10.2011 09:38     C:\Program Files\Windows Mail --------- 4096  
     02.10.2011 20:54     C:\Program Files\Mozilla Firefox --------- 40960  
     23.07.2011 16:41     C:\Program Files\TeamViewer --------- 0  
     15.07.2011 13:40     C:\Program Files\Google --------- 4096  
     13.07.2011 17:49     C:\Program Files\Skype --------- 0  
     13.07.2011 17:49     C:\Program Files\Common Files --------- 4096  
     11.07.2011 20:24     C:\Program Files\qotrdecoder-win32-0.0.247-r1132 --------- 0  
     19.06.2011 18:54     C:\Program Files\Adobe --------- 0  
     15.06.2011 20:27     C:\Program Files\Java --------- 4096  
     19.05.2011 07:34     C:\Program Files\AMD APP --------- 0  
     19.05.2011 07:33     C:\Program Files\ATI Technologies --------- 0  
     28.04.2011 12:31     C:\Program Files\QuickTime --------- 4096  
     23.04.2011 16:51     C:\Program Files\OTR Decoder --------- 0  
     11.02.2011 22:29     C:\Program Files\InstallShield Installation Information --------- 8192  
     10.02.2011 13:51     C:\Program Files\Power Druckstudio Gold --------- 4096  
     08.01.2011 18:27     C:\Program Files\HP --------- 4096  
     08.01.2011 18:20     C:\Program Files\Hewlett-Packard --------- 0  
     28.12.2010 23:38     C:\Program Files\CanonBJ --------- 0  
     28.12.2010 23:37     C:\Program Files\Canon --------- 4096  
     28.12.2010 23:08     C:\Program Files\PDFCreator --------- 4096  
     03.12.2010 22:08     C:\Program Files\Rossmann Fotowelt Software --------- 8192  
     30.10.2010 21:40     C:\Program Files\Windows Portable Devices --------- 0  
     30.10.2010 21:28     C:\Program Files\Winamp --------- 4096  
     30.10.2010 18:29     C:\Program Files\Windows Calendar --------- 0  
     30.10.2010 18:29     C:\Program Files\Movie Maker --------- 4096  
     30.10.2010 18:29     C:\Program Files\Windows Sidebar --------- 4096  
     30.10.2010 18:29     C:\Program Files\Windows Media Player --------- 4096  
     30.10.2010 18:29     C:\Program Files\Windows Collaboration --------- 4096  
     30.10.2010 18:29     C:\Program Files\Windows Journal --------- 4096  
     30.10.2010 18:29     C:\Program Files\Windows Photo Gallery --------- 4096  
     30.10.2010 18:29     C:\Program Files\Windows Defender --------- 4096  
     14.10.2010 22:42     C:\Program Files\OpenOffice.org 3 --------- 4096  
     19.09.2010 15:06     C:\Program Files\Microsoft.NET --------- 0  
     10.09.2010 18:41     C:\Program Files\desktop.ini --------- 174  
     16.08.2010 10:37     C:\Program Files\Microsoft CAPICOM 2.1.0.2 --------- 0  
     08.07.2010 22:28     C:\Program Files\Symantec --------- 0  
     19.06.2010 21:23     C:\Program Files\ALDI Foto Service --------- 4096  
     19.06.2010 21:21     C:\Program Files\Aldi Nord Fotoservice --------- 4096  
     12.04.2010 22:14     C:\Program Files\Winamp Detect --------- 0  
     29.03.2010 16:43     C:\Program Files\SIL --------- 0  
     13.03.2010 13:11     C:\Program Files\Real --------- 0  
     11.03.2010 00:28     C:\Program Files\VideoLAN --------- 0  
     21.02.2010 17:43     C:\Program Files\Apple Software Update --------- 4096  
     28.12.2009 19:50     C:\Program Files\Electronic Arts --------- 0  
     08.08.2009 19:07     C:\Program Files\Opera --------- 4096  
     02.07.2009 16:55     C:\Program Files\ICQ6Toolbar --------- 0  
     02.07.2009 16:55     C:\Program Files\ICQ6 --------- 0  
     17.02.2009 18:03     C:\Program Files\3D Garten --------- 4096  
     05.09.2008 11:38     C:\Program Files\ICQToolbar --------- 4096  
     28.07.2008 20:05     C:\Program Files\Toshiba TEMPRO --------- 8192  
     28.07.2008 19:13     C:\Program Files\TOSHIBA --------- 4096  
     28.07.2008 19:01     C:\Program Files\Gemeinsame Dateien --------- 0  
     28.07.2008 19:01     C:\Program Files\Windows NT --------- 4096  
     28.07.2008 17:43     C:\Program Files\Atheros --------- 0  
     06.06.2008 10:23     C:\Program Files\Synaptics --------- 0  
     06.06.2008 10:19     C:\Program Files\ltmoh --------- 0  
     06.06.2008 10:19     C:\Program Files\Camera Assistant Software for Toshiba --------- 4096  
     06.06.2008 10:16     C:\Program Files\ATI --------- 0  
     31.05.2007 16:06     C:\Program Files\MAGIX --------- 4096  
     31.05.2007 16:04     C:\Program Files\myphotobook --------- 8192  
     31.05.2007 16:03     C:\Program Files\IDM --------- 0  
     31.05.2007 15:41     C:\Program Files\InterVideo --------- 0  
     31.05.2007 15:41     C:\Program Files\Windows Media-Komponenten --------- 0  
     31.05.2007 15:37     C:\Program Files\Ulead Systems --------- 0  
     31.05.2007 15:08     C:\Program Files\My Company Name --------- 0  
     31.05.2007 14:55     C:\Program Files\Realtek --------- 0  
     31.05.2007 14:23     C:\Program Files\MSXML 4.0 --------- 0  
     02.11.2006 15:01     C:\Program Files\Uninstall Information --------- 0  
     02.11.2006 14:37     C:\Program Files\Microsoft Games --------- 4096  
     02.11.2006 14:37     C:\Program Files\MSBuild --------- 0  
     02.11.2006 14:37     C:\Program Files\Reference Assemblies --------- 0  
    ----------------------------------------
    
     
    C:\ProgramData\.. 
    
    nina    
    Administrator    
    desktop.ini    
    Public    
    Default    
    All Users    
    Default User    
    ----------------------------------------
    
     
    C:\Windows\system32\drivers\etc\hosts
    
    127.0.0.1       localhost
    ::1             localhost
    
    ----------------------------------------
    
     
    
    Abbildname                     PID Sitzungsname       Sitz.-Nr. Speichernutzung
    ========================= ======== ================ =========== ===============
    System Idle Process              0 Services                   0            24 K
    System                           4 Services                   0        42.676 K
    smss.exe                       460 Services                   0           840 K
    csrss.exe                      560 Services                   0         5.592 K
    wininit.exe                    612 Services                   0         3.984 K
    csrss.exe                      624 Console                    1         9.760 K
    services.exe                   656 Services                   0         7.004 K
    lsass.exe                      688 Services                   0         2.104 K
    lsm.exe                        696 Services                   0         5.140 K
    winlogon.exe                   724 Console                    1         5.604 K
    svchost.exe                    884 Services                   0         6.760 K
    PresentationFontCache.exe      928 Services                   0        13.232 K
    svchost.exe                    972 Services                   0         7.064 K
    Ati2evxx.exe                  1108 Services                   0         4.104 K
    svchost.exe                   1124 Services                   0        11.892 K
    svchost.exe                   1152 Services                   0        72.556 K
    svchost.exe                   1164 Services                   0        50.144 K
    audiodg.exe                   1272 Services                   0        15.808 K
    svchost.exe                   1292 Services                   0         4.956 K
    SLsvc.exe                     1308 Services                   0        11.620 K
    svchost.exe                   1340 Services                   0        13.040 K
    Ati2evxx.exe                  1484 Console                    1         5.960 K
    svchost.exe                   1596 Services                   0        21.988 K
    spoolsv.exe                   1844 Services                   0        11.116 K
    svchost.exe                   1868 Services                   0        16.264 K
    armsvc.exe                    2028 Services                   0         3.488 K
    agrsmsvc.exe                  2044 Services                   0         2.428 K
    Fuel.Service.exe               304 Services                   0         8.276 K
    CFSvcs.exe                     408 Services                   0         2.380 K
    FABS.exe                       532 Services                   0         4.724 K
    svchost.exe                    548 Services                   0         8.484 K
    svchost.exe                    808 Services                   0         3.044 K
    svchost.exe                   1328 Services                   0         2.844 K
    svchost.exe                   1460 Services                   0         5.276 K
    PSIService.exe                2076 Services                   0         3.692 K
    svchost.exe                   2108 Services                   0         6.220 K
    TeamViewer_Service.exe        2168 Services                   0         8.628 K
    TeamViewer_Service.exe        2188 Services                   0         8.972 K
    TempoSVC.exe                  2280 Services                   0        15.248 K
    TNaviSrv.exe                  2352 Services                   0         1.608 K
    TODDSrv.exe                   2384 Services                   0         3.612 K
    TosCoSrv.exe                  2408 Services                   0         4.232 K
    ULCDRSvr.exe                  2588 Services                   0         1.648 K
    svchost.exe                   2624 Services                   0         2.084 K
    SearchIndexer.exe             2644 Services                   0        21.180 K
    taskeng.exe                   2708 Console                    1        10.732 K
    taskeng.exe                   2776 Services                   0         5.672 K
    dwm.exe                       2784 Console                    1        44.316 K
    explorer.exe                  3036 Console                    1        49.036 K
    CF7F4.exe                     3164 Console                    1        10.316 K
    svchost.exe                   3444 Services                   0         5.972 K
    B63.exe                       3540 Console                    1         7.292 K
    RtHDVCpl.exe                   768 Console                    1         7.444 K
    TPwrMain.exe                  2612 Console                    1         5.664 K
    TCrdMain.exe                  2200 Console                    1        44.340 K
    wmpnscfg.exe                  3696 Console                    1         5.100 K
    wmpnetwk.exe                  3768 Services                   0        29.980 K
    KeNotify.exe                  3212 Console                    1         4.900 K
    NDSTray.exe                   2760 Console                    1         7.104 K
    SynTPEnh.exe                  2040 Console                    1         8.832 K
    hpwuSchd2.exe                 3992 Console                    1         2.940 K
    jusched.exe                   1448 Console                    1         3.764 K
    AdobeARM.exe                  3924 Console                    1        10.580 K
    sidebar.exe                   1004 Console                    1        34.456 K
    ehtray.exe                    3220 Console                    1         1.312 K
    GoogleToolbarNotifier.exe     1576 Console                    1         1.636 K
    hpqtra08.exe                  1496 Console                    1        11.532 K
    lvvm.exe                      1972 Console                    1         5.516 K
    MOM.exe                       1076 Console                    1         4.248 K
    ehmsas.exe                    3156 Console                    1         3.860 K
    SynTPHelper.exe               2380 Console                    1         2.612 K
    SynToshiba.exe                3052 Console                    1         4.272 K
    svchost.exe                   2700 Services                   0         6.312 K
    winsvc.exe                    2904 Console                    1         3.948 K
    CCC.exe                       3428 Console                    1        13.636 K
    hpqste08.exe                  4268 Console                    1         9.604 K
    hpqbam08.exe                  5252 Console                    1         4.872 K
    CFSwMgr.exe                   5404 Console                    1         7.964 K
    hpqgpc01.exe                  2736 Console                    1         7.204 K
    avguard.exe                   5828 Services                   0        23.388 K
    avshadow.exe                  5856 Services                   0         5.928 K
    sched.exe                     5804 Services                   0           924 K
    avgnt.exe                     3092 Console                    1         5.416 K
    HiJackThis.exe                3784 Console                    1        14.024 K
    notepad.exe                   5824 Console                    1         5.068 K
    firefox.exe                   5700 Console                    1       157.384 K
    plugin-container.exe          5764 Console                    1        21.352 K
    WmiPrvSE.exe                  5600 Services                   0         7.052 K
    OTL.exe                       5596 Console                    1        23.692 K
    SearchProtocolHost.exe        3624 Services                   0         8.588 K
    SearchFilterHost.exe          1096 Services                   0         6.892 K
    cmd.exe                       3288 Console                    1         3.096 K
    tasklist.exe                  2260 Console                    1         4.636 K
    
     
    ***** Ende des Scans 18.10.2011 um 13:16:21,79 ***

    HijackThis
    Code:
    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 12:59:26, on 18.10.2011
    Platform: Windows Vista SP2 (WinNT 6.00.1906)
    MSIE: Internet Explorer v9.00 (9.00.8112.16421)
    Boot mode: Normal
    
    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Users\nina\AppData\Roaming\8A0F3\CF7F4.exe
    C:\Users\nina\AppData\Roaming\Microsoft\F458\B63.exe
    C:\Windows\RtHDVCpl.exe
    C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
    C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
    C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Windows\ehome\ehtray.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Users\nina\AppData\Roaming\F37A6\lvvm.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    C:\Program Files\Synaptics\SynTP\SynToshiba.exe
    C:\Users\nina\M-1-52-5782-8752-5245\winsvc.exe
    C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
    C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
    
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:52121
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
    R3 - URLSearchHook: (no name) -  - (no file)
    F3 - REG:win.ini: load=C:\Users\nina\AppData\Roaming\F37A6\lvvm.exe
    O1 - Hosts: ::1 localhost
    O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
    O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
    O4 - HKLM\..\Run: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
    O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
    O4 - HKLM\..\Run: [KeNotify] C:\Program Files\TOSHIBA\Utilities\KeNotify.exe
    O4 - HKLM\..\Run: [HWSetup] \HWSetup.exe hwSetUP
    O4 - HKLM\..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
    O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
    O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
    O4 - HKCU\..\Run: [portwexexe.exe] C:\portwexexe\portwexexe.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
    O4 - HKCU\..\Run: [Microsoft® Windows Update] C:\Users\nina\M-1-52-5782-8752-5245\winsvc.exe
    O4 - HKCU\..\Run: [B63.exe] C:\Users\nina\AppData\Roaming\Microsoft\F458\B63.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
    O8 - Extra context menu item: Öffnen mit WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta
    O9 - Extra button: eBay - Der weltweite Online Marktplatz - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/707-44556-9400-3/4 (file missing)
    O9 - Extra button: Amazon.de - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.de/exec/obidos/redirect-home?tag=Toshibadebholink-21&site=home (file missing)
    O9 - Extra button: HP Intelligente Auswahl - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
    O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    O23 - Service: Avira Planer (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira Echtzeit Scanner (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
    O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
    O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
    O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Update-Dienst (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe
    O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
    O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
    O23 - Service: Notebook Performance Tuning Service  (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe
    O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
    O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe
    O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
    O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (file missing)
    O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    
    --
    End of file - 9979 bytes
    OTL extras.txt
    Code:
    OTL Extras logfile created on: 18.10.2011 13:12:55 - Run 1
    OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\nina\Desktop
    Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
     
    3,00 Gb Total Physical Memory | 1,76 Gb Available Physical Memory | 58,74% Memory free
    6,22 Gb Paging File | 4,82 Gb Available in Paging File | 77,57% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]
     
    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
    Drive C: | 277,99 Gb Total Space | 181,93 Gb Free Space | 65,44% Space Free | Partition Type: NTFS
    Drive E: | 97,01 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
     
    Computer Name: NINA-PC | User Name: nina | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: Current user
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
     
    ========== Extra Registry (SafeList) ==========
     
     
    ========== File Associations ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
    .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
    .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
     
    [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
    .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
     
    ========== Shell Spawning ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
    batfile [open] -- "%1" %*
    cmdfile [open] -- "%1" %*
    comfile [open] -- "%1" %*
    cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
    exefile [open] -- "%1" %*
    helpfile [open] -- Reg Error: Key error.
    hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
    htmlfile [edit] -- Reg Error: Key error.
    htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
    inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
    piffile [open] -- "%1" %*
    regfile [merge] -- Reg Error: Key error.
    scrfile [config] -- "%1"
    scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
    scrfile [open] -- "%1" /S
    txtfile [edit] -- Reg Error: Key error.
    Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
    Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
    Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
    Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
    Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
    Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
    Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
    Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
    Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
    Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
    Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
     
    ========== Security Center Settings ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
    "cval" = 1
    "UacDisableNotify" = 1
    "InternetSettingsDisableNotify" = 1
    "AutoUpdateDisableNotify" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
    "DisableMonitoring" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
    "DisableMonitoring" = 1
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
    "AntiVirusOverride" = 0
    "AntiSpywareOverride" = 0
    "FirewallOverride" = 0
    "VistaSp1" = Reg Error: Unknown registry data type -- File not found
    "VistaSp2" = Reg Error: Unknown registry data type -- File not found
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
     
    ========== Firewall Settings ==========
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
    "DisableNotifications" = 0
    "EnableFirewall" = 1
    "DoNotAllowExceptions" = 0
     
    ========== Authorized Applications List ==========
     
     
    ========== Vista Active Open Ports Exception List ==========
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{08229AFA-8714-4026-A454-D546B0526E4A}" = lport=10243 | protocol=6 | dir=in | app=system | 
    "{1AADCBFB-BDEB-456A-B4C4-DA183E0B7E27}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
    "{42AE7893-E30A-4811-9698-D43835F3C06F}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
    "{4B5132D5-FD36-4D1D-A942-AFA5D97F15C8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
    "{67043F0F-3A26-4571-AA3A-D551A77CCF5E}" = lport=2869 | protocol=6 | dir=in | app=system | 
    "{704E1A5B-FC1C-45DE-8A37-8FCCF899D308}" = rport=10243 | protocol=6 | dir=out | app=system | 
    "{77FAF79E-DA2A-4007-9C8D-A64B8517CCBB}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
    "{BBB7892E-7F6B-4EB4-B269-12D3D874D28F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
    "{D89AF6DF-1570-4F79-AAB8-73497B371A01}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
     
    ========== Vista Active Application Exception List ==========
     
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
    "{07A9B46F-AD78-42AD-A63A-9D71E5152015}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe | 
    "{0DFBBA4E-A7DC-431F-B313-32C20478584F}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpzwiz01.exe | 
    "{2605ADB4-5418-46EE-81B8-2B56D5A027ED}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version6\teamviewer_service.exe | 
    "{326E11F6-76FF-4608-9B35-001DFE30EFCE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
    "{32A3727A-28F5-4225-9E27-D7595EA0B8B0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
    "{4136F962-E4AC-4938-A4AE-FBD49373E928}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpofxm08.exe | 
    "{41CBF302-6D23-409E-BA38-3584E59F090C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
    "{49A38F0C-5368-4EA2-AC81-AC2B86275583}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version6\teamviewer_service.exe | 
    "{51793750-825E-4EE3-B2AD-BDEAB92370A1}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version6\teamviewer.exe | 
    "{6143795B-DC8F-4064-9499-8E47C6EAE042}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version5\teamviewer_service.exe | 
    "{6692F48D-4A8D-49C4-BBB1-44E78EFD9AF0}" = dir=in | app=c:\program files\hp\digital imaging\bin\hposfx08.exe | 
    "{687F267D-A8AD-4256-B439-8DD7059CE98C}" = dir=in | app=c:\program files\hp\digital imaging\bin\hposid01.exe | 
    "{6DFE4AF1-4286-4BE6-AF13-9E342DFEFDD0}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
    "{8B29C180-E18F-4A82-BBEE-0CEEE3447CE0}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
    "{9887D230-E6D0-4966-A505-E6A5AC340E79}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version5\teamviewer_service.exe | 
    "{9DFF4546-F9E6-4205-A24A-A1D795FC7B1B}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version6\teamviewer.exe | 
    "{A6622429-5607-4017-9C39-E3170EDD952C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
    "{BA12EF85-F6C3-4E50-A75E-8F03A5E75829}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
    "{BD227324-EA45-45CC-9C89-941DCAE2A0BD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
    "{CBABBA8B-EEA9-4AF9-8A49-8D53C5C78451}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
    "{DB01642A-3035-4927-8A9B-205559067B72}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqkygrp.exe | 
    "{DB3C44A6-269A-46A6-9B31-E54E4714146C}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
    "{E2F4D4C9-DE19-4836-B693-6E0B5E7EE3C8}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqtra08.exe | 
    "{E6061B08-4B09-4BFC-9D27-A26B6A4AC2FE}" = protocol=6 | dir=out | app=system | 
    "{E6C8B4EA-35C8-465C-A060-17EA089BCC10}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version5\teamviewer.exe | 
    "{E901FDD1-8E70-4E43-A999-961D7F9357F9}" = dir=in | app=c:\program files\hp\digital imaging\bin\hpqste08.exe | 
    "{EB378060-81FF-47D8-84C4-742DF6ED1F7D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
    "{FE8BA384-E1B6-40F2-97B1-A0C21EC5E00D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
    "TCP Query User{0A36AC17-F9F8-4368-918C-DEEABD8A4F78}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe | 
    "TCP Query User{5EF1D04B-A9A2-4062-85A4-7E9B404D2BB1}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe | 
    "TCP Query User{9E1ED567-4E17-4E6E-B947-9F3A7C42A5EC}C:\program files\google\google earth\client\googleearth.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | 
    "TCP Query User{FC229457-B66A-4829-8132-17F9F0D47E21}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
    "TCP Query User{FD2CF942-B7AF-40EF-A42C-30F44D943F0A}C:\program files\icq6\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6\icq.exe | 
    "UDP Query User{3387DFDD-619A-400D-83E9-D3B4EA25C8F7}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe | 
    "UDP Query User{683D265B-6D05-4213-BA04-2EE1786563EC}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe | 
    "UDP Query User{8E46E479-FF2F-45E7-8A3B-20DAC839F860}C:\program files\google\google earth\client\googleearth.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\client\googleearth.exe | 
    "UDP Query User{94132F36-A650-43C0-B460-4F409921CD2A}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe | 
    "UDP Query User{DC751FE8-C3D7-4125-A6D9-B8DD8252A953}C:\program files\icq6\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6\icq.exe | 
     
    ========== HKEY_LOCAL_MACHINE Uninstall List ==========
     
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
    "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
    "{008CA161-E080-8630-47B4-9205A0E45573}" = CCC Help Thai
    "{0323731F-5EFF-C9AE-B398-6077AE9C67D9}" = Catalyst Control Center Localization Chinese Standard
    "{03A7C57A-B2C8-409b-92E5-524A0DFD0DD3}" = Status
    "{03FAA727-E2B7-471C-AC41-2E1C7F29C7EA}" = Toshiba TEMPRO
    "{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
    "{084D94A9-D67E-D41B-6B4E-B6A481384D27}" = CCC Help Finnish
    "{087A66B8-1F0F-4a8d-A649-0CFE276AA7C0}" = WebReg
    "{0A8DA20B-1F01-D1C5-A24F-91EEE7A94A59}" = Catalyst Control Center Localization Korean
    "{0E33EC53-22CE-426C-A88B-2AAC231BAC85}" = Catalyst Control Center - Branding
    "{11951952-9640-92E5-4C47-E38C6C7E9265}" = CCC Help Czech
    "{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP3300" = Canon iP3300
    "{11D49772-0D06-0B31-DC09-CE413F9B0C93}" = CCC Help Chinese Traditional
    "{12688FD7-CB92-4A5B-BEE4-5C8E0574434F}" = Utility Common Driver
    "{12B3A009-A080-4619-9A2A-C6DB151D8D67}" = TOSHIBA Assist
    "{22721B8E-8D36-C102-8C79-925C221DD9B4}" = Catalyst Control Center Localization Russian
    "{2290A680-4083-410A-ADCC-7092C67FC052}" = Toshiba Online Product Information
    "{258203F7-1FDC-CD40-D409-01993D2DFC8F}" = CCC Help Swedish
    "{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 26
    "{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
    "{2A329FB6-389D-4396-A974-29656D6864AE}" = MarketResearch
    "{2D1B9BD2-C430-C5D6-6A40-BD00956F9CA4}" = Catalyst Control Center Graphics Previews Vista
    "{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
    "{3248F0A8-6813-11D6-A77B-00B0D0160000}" = Java(TM) SE Runtime Environment 6
    "{34E2872D-1493-25E6-FBD8-98FCC1A96645}" = CCC Help Portuguese
    "{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}" = Firebird SQL Server - MAGIX Edition
    "{35E2427E-C52B-2C23-044E-36F83B90A3EE}" = CCC Help Norwegian
    "{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba
    "{38DAE5F5-EC70-4aa5-801B-D11CA0A33B41}" = BPDSoftware
    "{3BF34856-1A5F-2AD8-7D50-66BE8A82B5C1}" = CCC Help Spanish
    "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
    "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
    "{45F00029-0A50-43AA-497A-67EFFF1E06F7}" = CCC Help Swedish
    "{46043895-694B-C3F5-1508-3575511AD35D}" = ATI Catalyst Install Manager
    "{47ECCB1F-2811-49C0-B6A7-26778639ABA0}" = 32 Bit HP CIO Components Installer
    "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
    "{4D304678-738E-42a0-931A-2B022F49DEB8}" = TrayApp
    "{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
    "{5034E4E7-A8E7-7BCA-0014-1534C77A7A5C}" = Catalyst Control Center Localization Turkish
    "{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisor Password
    "{51FDF02E-21A9-41A2-BEA4-1EC24F7DBD38}" = Glückwunschkarten
    "{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
    "{52EC92CA-771A-F8C8-95A2-37AFB43798B7}" = Catalyst Control Center Localization Spanish
    "{56995235-B76E-44A6-BA17-8FF13D3F907A}" = TOSHIBA Benutzerhandbücher
    "{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
    "{57F60D52-630B-43C5-BD20-176F5CD4EED6}" = bpd_scan
    "{595639AF-26D3-BF56-6A73-A09F1D4BD3AE}" = CCC Help Hungarian
    "{5980B928-1C95-4B3E-957B-B02D8147FF9E}" = Desktop SMS
    "{5AFBC2F3-D3F5-660A-A2AD-CAD3E8EDA1D7}" = CCC Help English
    "{5CD9E471-E03C-70A5-E5CA-217088BB2541}" = CCC Help Finnish
    "{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator
    "{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
    "{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
    "{63953BA4-7F92-98F7-B99D-FEB4B7BF6905}" = Catalyst Control Center Localization All
    "{64FA2F4C-F61D-9A7C-318D-711C63308A61}" = CCC Help German
    "{676981B7-A2D9-49D0-9F4C-03018F131DA9}" = DocProc
    "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
    "{6A1ACC15-7632-45ba-A3AB-0250EBD4B7DD}" = 6500_E709a
    "{6C5F3BDC-0A1B-4436-A696-5939629D5C31}" = TOSHIBA DVD PLAYER
    "{6CC080F1-2E00-41D5-BE47-A3BC784E9DFB}" = BPDSoftware_Ini
    "{6EED4269-588D-45b8-A80C-26A9CA62EE4E}" = HPSSupply
    "{6F5BFDFA-57A6-0CAC-EC50-67B4D8B7B725}" = CCC Help Italian
    "{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
    "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
    "{72E710CD-51E2-D3BA-108C-F00C54E5B7B0}" = CCC Help Japanese
    "{73F4842A-ACED-7EDD-0A96-99A8A97F4815}" = CCC Help German
    "{74CEA7F6-2E4B-FE86-E72F-ADAEAAF28880}" = CCC Help Japanese
    "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    "{7753A3B2-E858-F0B3-3DD9-C027B16CBB81}" = Catalyst Control Center InstallProxy
    "{78C6A78A-8B03-48C8-A47C-78BA1FCA2307}" = TOSHIBA ConfigFree
    "{79A4C5D0-EF1A-752A-43F9-C4E79341628A}" = Catalyst Control Center Localization Italian
    "{7AC09EE2-08B0-7C97-B8ED-961C58AA9E96}" = Catalyst Control Center Localization Greek
    "{7BD5E0A6-DB75-B763-CE09-0D883E97F5DF}" = Catalyst Control Center Localization Thai
    "{7CF70E3E-BDC7-5F46-F806-49D8D104A0E3}" = CCC Help Danish
    "{7D61830A-1867-6DFA-11FE-A64752B4658D}" = CCC Help Greek
    "{800E784D-53E3-4948-B491-9E7FA5EACBDC}" = SmartWebPrinting
    "{80FEE630-084D-50F6-9FC8-75757A87F015}" = Catalyst Control Center Localization Polish
    "{855201BD-9C9A-2E33-C3E8-41EB1647F14A}" = CCC Help Greek
    "{87A9A9A9-FAB7-4224-9328-0FA2058C0FD5}" = Network
    "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
    "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
    "{8D1E61D1-1395-4E97-997F-D002DB3A5074}" = OpenOffice.org 3.2
    "{8E5CF580-699D-821F-0FD1-A12CA9FE36C1}" = CCC Help Russian
    "{8E8780B8-2924-B51D-976B-59EE97713659}" = CCC Help Russian
    "{9129B46A-51F0-431b-9838-DF7272F3204E}" = ProductContext
    "{9297C744-C6D2-438F-A348-F4A450E191B9}" = Briefpapier
    "{95AEBA1F-23F4-3751-73FA-CFCFB962F789}" = CCC Help Polish
    "{9603DE6D-4567-4b78-B941-849322373DE2}" = SolutionCenter
    "{977D59F6-C638-B0AC-5CE4-D6A615D62033}" = Catalyst Control Center Localization Dutch
    "{9799BD05-5F89-484C-008E-F50592F53440}" = Harry Potter und der Feuerkelch™
    "{9954B400-AEB7-638D-E753-BB4ECE1064EE}" = CCC Help English
    "{99CDAAD6-6D21-194D-91CF-A04C373A9F98}" = CCC Help French
    "{9A1EFCBB-5E3C-7E13-2AAD-7AFA4FD9DBD9}" = Catalyst Control Center Localization Swedish
    "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    "{9CCCFD9C-248F-47FE-9496-1680E3E5C163}" = Scan
    "{9D1B99B7-DAD8-440d-B4FB-1915332FBCC2}" = HPProductAssistant
    "{9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}" = CD/DVD Drive Acoustic Silencer
    "{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
    "{A6D4234C-CB02-4048-AC3E-AD09404FA35A}" = Emdedded IR Driver
    "{A73730D7-1D88-3DAB-9A3B-3959093347CC}" = CCC Help Chinese Standard
    "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
    "{AA2DC9ED-518D-E669-FFA5-7C757C33F040}" = CCC Help Dutch
    "{AA9CCD6A-495C-43B3-8CBC-71BE9B0B9DC2}" = Zeitungen und Visitenkarten
    "{AAD49C89-CA9D-911E-0407-8EE0521EA24D}" = CCC Help Dutch
    "{AC13BA3A-336B-45a4-B3FE-2D3058A7B533}" = Toolbox
    "{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.0) - Deutsch
    "{B3FED300-806C-11E0-A0D0-B8AC6F97B88E}" = Google Earth
    "{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser
    "{B619787F-8796-6ED6-5934-25EAF9F1E688}" = CCC Help Portuguese
    "{B8EB9EF8-BA86-8858-E913-0A8011E5A824}" = CCC Help Chinese Traditional
    "{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}" = Nokia Connectivity Cable Driver
    "{BF49AD34-C4F3-115A-CACE-E06EA0B59EDC}" = CCC Help Korean
    "{C29C1940-CB85-4F3B-906C-33FEE0E67103}" = DocMgr
    "{C3075CFB-4EFE-AD80-587A-3FB74338A44D}" = Catalyst Control Center Localization Finnish
    "{C705D235-051D-B65E-DAF2-E4D104F640A6}" = CCC Help Norwegian
    "{C7340571-7773-4A8C-9EBC-4E4243B38C76}" = Microsoft XML Parser
    "{C818D485-2098-0125-35AF-FEC52F35670E}" = CCC Help Turkish
    "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
    "{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba
    "{CEDFF4EA-DFCF-312A-773A-4F743AAF78E2}" = Catalyst Control Center Localization Japanese
    "{D55BA1E9-0517-C325-00BD-B68087923AE9}" = CCC Help Hungarian
    "{D6F879CC-59D6-4D4B-AE9B-D761E48D25ED}" = Skype™ 5.3
    "{DB780B85-B4B5-4864-A49C-9B706B169C93}" = TIPCI
    "{DB8C3EE5-4DE7-B7C7-0437-14A41DB85230}" = CCC Help Chinese Standard
    "{DD3D3F5A-BFB9-CEC4-1A86-619E7FF83300}" = Catalyst Control Center Localization Chinese Traditional
    "{DE13432E-F0C1-4842-A5BA-CC997DA72A70}" = 6500_E709_eDocs
    "{E18F4B3D-1743-174B-E0C4-4D9FD084FB5C}" = CCC Help Polish
    "{E1B530E5-3515-AC68-CA75-0932BA837A1A}" = CCC Help Thai
    "{E1BBBAC5-2857-4155-82A6-54492CE88620}" = Opera 9.64
    "{E2616F7B-9E5B-7B21-EDB0-5659A5A4DDA1}" = Catalyst Control Center Graphics Previews Common
    "{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9-Reihe
    "{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218
    "{E54F065A-4DCB-1875-222D-CF27620AF646}" = Catalyst Control Center Localization Portuguese
    "{E6802BDF-0F93-6DB7-E542-B1B36BAA9FFF}" = Catalyst Control Center Localization French
    "{E858ECF5-7644-33F3-EBE5-1A6D4E606F5B}" = CCC Help Turkish
    "{E9AA51F1-5B79-B303-2997-F15DE38344D2}" = CCC Help Spanish
    "{EA6DCFC6-BCA2-D901-7417-19261C50802A}" = Catalyst Control Center Localization Hungarian
    "{EBFF48F5-3CFA-436F-8FD5-94FB01D3A0A7}" = TOSHIBA SD Memory Utilities
    "{ED47417C-5807-583D-50CF-DD18D87FFFFC}" = AMD Fuel
    "{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
    "{EEEB604C-C1A7-4f8c-B03F-56F9C1C9C45F}" = Fax
    "{EF9E56EE-0243-4BAD-88F4-5E7508AA7D96}" = Destination Component
    "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
    "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
    "{F185B35D-38E5-4D88-B275-15C8C7FC4357}" = 6500_E709_Help
    "{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}" = DVD MovieFactory for TOSHIBA
    "{F2AFB6AA-D2B8-92B9-5CAB-50107D14D9FB}" = CCC Help Danish
    "{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0
    "{F648FD09-7CEA-4257-BC68-A8389189FD51}" = GPBaseService2
    "{F6527F8D-F203-CD41-7D39-2C6FBB91DCAD}" = CCC Help Italian
    "{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
    "{F769B78E-FF0E-4db5-95E2-9F4C8D6352FE}" = DeviceDiscovery
    "{F7C4A253-1CA2-F45B-D517-BC47BBCDE14F}" = ccc-utility
    "{FA0F0A01-4631-4161-A6C2-948BF694382E}" = HP Officejet 6500 E709 Series
    "{FBB22939-6AAD-A6EB-5AA1-BAA166F2D032}" = CCC Help Czech
    "{FE890808-EE76-63DF-6D0E-4609D2520DF0}" = Catalyst Control Center Localization German
    "{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
    "{FEDD8B8B-6EA0-A35C-6CB4-06F1AF4D7769}" = Catalyst Control Center Localization Norwegian
    "{FEF90494-3911-A844-2622-545BD4008231}" = AMD VISION Engine Control Center
    "{FF30D03D-5C21-60EF-8735-C5FEE80D9DA6}" = CCC Help Korean
    "{FF62A079-FE47-C34A-AB88-C61CA838B007}" = CCC Help French
    "Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
    "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
    "ALDI Foto Service D" = ALDI Foto Service
    "ALDI Nord Foto Manager Free D" = ALDI Nord Foto Manager Free
    "Aldi Nord Fotoservice_is1" = Aldi Nord Fotoservice 2.7
    "ALDI Nord Online Druck Service" = ALDI Nord Online Druck Service 4.6
    "Avira AntiVir Desktop" = Avira Free Antivirus
    "Gentium" = Gentium 1.02
    "Google Updater" = Google Updater
    "greenstreet Picture Browser" = greenstreet Picture Browser
    "HP Document Manager" = HP Document Manager 2.0
    "HP Imaging Device Functions" = HP Imaging Device Functions 12.0
    "HP Smart Web Printing" = HP Smart Web Printing
    "HP Solution Center & Imaging Support Tools" = HP Solution Center 12.0
    "HPExtendedCapabilities" = HP Customer Participation Program 12.0
    "HPOCR" = OCR Software by I.R.I.S. 12.0
    "InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}" = TOSHIBA Supervisorkennwort
    "InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}" = TOSHIBA Hardware Setup
    "InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center
    "InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}" = TOSHIBA Flash Cards Support Utility
    "InstallShield_{A6D4234C-CB02-4048-AC3E-AD09404FA35A}" = Emdedded IR Driver
    "InstallShield_{DB780B85-B4B5-4864-A49C-9B706B169C93}" = Texas Instruments PCIxx21/x515/xx12 drivers.
    "InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package
    "MAGIX Digital Foto Maker SE D" = MAGIX Digital Foto Maker SE 4.1.0.835 (D)
    "MAGIX Foto Suite D" = MAGIX Foto Suite 1.12.0.89 (D)
    "MAGIX Online Druck Service D" = MAGIX Online Druck Service 2.3.2.0 (D)
    "Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
    "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
    "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
    "Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
    "Mozilla Firefox 7.0.1 (x86 de)" = Mozilla Firefox 7.0.1 (x86 de)
    "myphotobook" = myphotobook 3.1
    "OurGardenV4.0 deu" = 3D Garten
    "RealPlayer 12.0" = RealPlayer
    "Rossmann Fotowelt Software" = Rossmann Fotowelt Software 4.9
    "Shop for HP Supplies" = Shop for HP Supplies
    "SynTPDeinstKey" = Synaptics Pointing Device Driver
    "TeamViewer 5" = TeamViewer 5
    "TeamViewer 6" = TeamViewer 6
    "TOSHIBA Software Modem" = TOSHIBA Software Modem
    "VLC media player" = VLC media player 1.0.5
    "Winamp" = Winamp
    "Windows Media Encoder 9" = Windows Media Encoder 9-Reihe
     
    ========== HKEY_CURRENT_USER Uninstall List ==========
     
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
    "Winamp Detect" = Winamp Erkennungs-Plug-in
     
    ========== Last 10 Event Log Errors ==========
     
    [ Application Events ]
    Error - 17.10.2011 16:23:07 | Computer Name = nina-PC | Source = Windows Search Service | ID = 3013
    Description = 
     
    Error - 17.10.2011 16:23:07 | Computer Name = nina-PC | Source = Windows Search Service | ID = 3013
    Description = 
     
    Error - 17.10.2011 16:23:07 | Computer Name = nina-PC | Source = Windows Search Service | ID = 3013
    Description = 
     
    Error - 17.10.2011 16:23:07 | Computer Name = nina-PC | Source = Windows Search Service | ID = 3013
    Description = 
     
    Error - 17.10.2011 16:23:07 | Computer Name = nina-PC | Source = Windows Search Service | ID = 3013
    Description = 
     
    Error - 17.10.2011 16:23:07 | Computer Name = nina-PC | Source = Windows Search Service | ID = 3013
    Description = 
     
    Error - 17.10.2011 16:23:07 | Computer Name = nina-PC | Source = Windows Search Service | ID = 3013
    Description = 
     
    Error - 17.10.2011 16:23:07 | Computer Name = nina-PC | Source = Windows Search Service | ID = 3013
    Description = 
     
    Error - 17.10.2011 18:15:05 | Computer Name = nina-PC | Source = EventSystem | ID = 4621
    Description = 
     
    Error - 18.10.2011 06:20:21 | Computer Name = nina-PC | Source = VSS | ID = 8194
    Description = 
     
    [ System Events ]
    Error - 17.10.2011 15:41:32 | Computer Name = nina-PC | Source = Service Control Manager | ID = 7000
    Description = 
     
    Error - 17.10.2011 15:49:12 | Computer Name = nina-PC | Source = DCOM | ID = 10010
    Description = 
     
    Error - 17.10.2011 15:52:44 | Computer Name = nina-PC | Source = Service Control Manager | ID = 7000
    Description = 
     
    Error - 17.10.2011 15:52:44 | Computer Name = nina-PC | Source = Service Control Manager | ID = 7000
    Description = 
     
    Error - 17.10.2011 18:15:05 | Computer Name = nina-PC | Source = DCOM | ID = 10010
    Description = 
     
    Error - 18.10.2011 04:59:26 | Computer Name = nina-PC | Source = Service Control Manager | ID = 7000
    Description = 
     
    Error - 18.10.2011 04:59:26 | Computer Name = nina-PC | Source = Service Control Manager | ID = 7000
    Description = 
     
    Error - 18.10.2011 05:11:48 | Computer Name = nina-PC | Source = Dhcp | ID = 1002
    Description = Die IP-Adresslease 192.168.1.32 für die Netzwerkkarte mit der Netzwerkadresse
     001F3A6899D4 wurde durch den DHCP-Server 192.168.1.1 abgelehnt (der DHCP-Server
     hat eine DHCPNACK-Meldung gesendet).
     
    Error - 18.10.2011 06:47:10 | Computer Name = nina-PC | Source = Service Control Manager | ID = 7000
    Description = 
     
    Error - 18.10.2011 06:47:10 | Computer Name = nina-PC | Source = Service Control Manager | ID = 7000
    Description = 
     
     
    < End of report >
    OTL OTL.txt
    Code:
    OTL logfile created on: 18.10.2011 13:12:55 - Run 1
    OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\nina\Desktop
    Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
     
    3,00 Gb Total Physical Memory | 1,76 Gb Available Physical Memory | 58,74% Memory free
    6,22 Gb Paging File | 4,82 Gb Available in Paging File | 77,57% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]
     
    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
    Drive C: | 277,99 Gb Total Space | 181,93 Gb Free Space | 65,44% Space Free | Partition Type: NTFS
    Drive E: | 97,01 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
     
    Computer Name: NINA-PC | User Name: nina | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: Current user
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
     
    ========== Processes (SafeList) ==========
     
    PRC - [2011.10.18 13:11:09 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\nina\Desktop\OTL.exe
    PRC - [2011.10.18 12:47:19 | 000,193,024 | ---- | M] () -- C:\Users\nina\AppData\Roaming\F37A6\lvvm.exe
    PRC - [2011.10.18 11:30:57 | 000,175,616 | ---- | M] () -- C:\Users\nina\AppData\Roaming\Microsoft\F458\B63.exe
    PRC - [2011.10.16 15:01:18 | 000,281,600 | ---- | M] () -- C:\Users\nina\AppData\Roaming\8A0F3\CF7F4.exe
    PRC - [2011.10.16 15:00:50 | 000,090,112 | RHS- | M] (   ) -- C:\Users\nina\M-1-52-5782-8752-5245\winsvc.exe
    PRC - [2011.10.11 15:00:02 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
    PRC - [2011.10.11 14:59:49 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
    PRC - [2011.10.11 14:59:37 | 000,258,512 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
    PRC - [2011.10.11 14:59:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
    PRC - [2011.10.02 20:54:02 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
    PRC - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
    PRC - [2011.06.01 14:44:54 | 002,337,144 | ---- | M] (TeamViewer GmbH) -- C:\Programme\TeamViewer\Version6\TeamViewer_Service.exe
    PRC - [2011.04.19 22:17:18 | 000,294,400 | ---- | M] (Advanced Micro Devices, Inc.) -- C:\Programme\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    PRC - [2010.09.14 08:58:32 | 001,956,136 | ---- | M] (TeamViewer GmbH) -- C:\Programme\TeamViewer\Version5\TeamViewer_Service.exe
    PRC - [2010.03.25 18:42:36 | 000,388,096 | ---- | M] (Trend Micro Inc.) -- C:\Programme\Trend Micro\HiJackThis\HiJackThis.exe
    PRC - [2009.08.27 17:09:10 | 001,253,376 | ---- | M] (MAGIX AG) -- C:\Programme\Common Files\MAGIX Services\Database\bin\FABS.exe
    PRC - [2009.04.11 08:28:03 | 001,233,920 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Sidebar\sidebar.exe
    PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
    PRC - [2009.03.20 07:36:58 | 000,210,216 | ---- | M] (Synaptics Incorporated) -- C:\Programme\Synaptics\SynTP\SynToshiba.exe
    PRC - [2008.04.24 10:21:56 | 000,099,720 | ---- | M] (Toshiba Europe GmbH) -- C:\Programme\Toshiba TEMPRO\TempoSVC.exe
    PRC - [2008.01.19 09:33:39 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
    PRC - [2008.01.19 09:33:39 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnscfg.exe
    PRC - [2007.05.22 16:32:00 | 000,538,744 | ---- | M] (TOSHIBA Corporation) -- C:\Programme\TOSHIBA\FlashCards\TCrdMain.exe
    PRC - [2007.05.17 20:12:30 | 000,114,688 | ---- | M] (TOSHIBA Corporation) -- C:\Programme\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
    PRC - [2007.04.25 11:14:16 | 004,444,160 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
    PRC - [2007.03.29 10:39:00 | 000,427,576 | ---- | M] (TOSHIBA Corporation) -- C:\Programme\TOSHIBA\Power Saver\TosCoSrv.exe
    PRC - [2007.03.29 10:39:00 | 000,411,192 | ---- | M] (TOSHIBA Corporation) -- C:\Programme\TOSHIBA\Power Saver\TPwrMain.exe
    PRC - [2006.11.14 22:02:36 | 001,372,160 | ---- | M] (TOSHIBA CORPORATION) -- C:\Programme\TOSHIBA\ConfigFree\NDSTray.exe
    PRC - [2006.11.14 21:19:42 | 000,405,504 | ---- | M] (TOSHIBA CORPORATION) -- C:\Programme\TOSHIBA\ConfigFree\CFSwMgr.exe
    PRC - [2006.11.14 20:33:10 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) -- C:\Programme\TOSHIBA\ConfigFree\CFSvcs.exe
    PRC - [2006.11.06 17:14:44 | 000,034,352 | ---- | M] () -- C:\Programme\TOSHIBA\Utilities\KeNotify.exe
    PRC - [2006.11.02 20:40:12 | 000,174,656 | ---- | M] () -- C:\Windows\System32\PSIService.exe
    PRC - [2006.10.05 13:10:12 | 000,009,216 | ---- | M] (Agere Systems) -- C:\Windows\System32\agrsmsvc.exe
    PRC - [2006.08.23 16:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Programme\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
    PRC - [2006.05.25 19:30:16 | 000,114,688 | ---- | M] (TOSHIBA Corporation) -- C:\Windows\System32\TODDSrv.exe
     
     
    ========== Modules (No Company Name) ==========
     
    MOD - [2011.10.18 12:47:19 | 000,193,024 | ---- | M] () -- C:\Users\nina\AppData\Roaming\F37A6\lvvm.exe
    MOD - [2011.10.18 11:30:57 | 000,175,616 | ---- | M] () -- C:\Users\nina\AppData\Roaming\Microsoft\F458\B63.exe
    MOD - [2011.10.16 15:01:18 | 000,281,600 | ---- | M] () -- C:\Users\nina\AppData\Roaming\8A0F3\CF7F4.exe
    MOD - [2011.10.14 11:06:28 | 002,295,296 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\8adb45c62e4c797bd4c706afe9e8bfb9\System.Core.ni.dll
    MOD - [2011.10.14 11:06:22 | 000,998,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6bc98e9b5eedaa8f71c5454d36a4b772\System.Management.ni.dll
    MOD - [2011.10.14 11:04:22 | 011,804,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\e00630ec1e225a2376fdd430645e20f7\System.Web.ni.dll
    MOD - [2011.10.14 11:04:11 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\6d2f689baff5da3df134fdec0742a13c\System.Runtime.Remoting.ni.dll
    MOD - [2011.10.14 11:03:59 | 000,519,168 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\TCrdMain\520428aab583490165e87a78d9f1d0c1\TCrdMain.ni.exe
    MOD - [2011.10.14 11:03:51 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\40da9084d0863e07d7ce55953833b8b0\System.Configuration.ni.dll
    MOD - [2011.10.14 11:02:18 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c1c06a392871267db27f7cbc40e1c4fb\System.Xml.ni.dll
    MOD - [2011.10.14 11:01:56 | 012,430,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1363115565fff5a641243a48f396f107\System.Windows.Forms.ni.dll
    MOD - [2011.10.14 11:01:45 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\367c4043efc2f32d843cb588b0dc97fc\System.Drawing.ni.dll
    MOD - [2011.10.14 11:01:22 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\231b0b42eff55de5c7d7debe555c16b7\PresentationFramework.Aero.ni.dll
    MOD - [2011.10.14 11:01:18 | 014,328,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\94f892556ec9fa7a508fc9d214ceaedf\PresentationFramework.ni.dll
    MOD - [2011.10.14 11:00:57 | 012,216,832 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\53f949f4664bb316f9b7a00d73a6e290\PresentationCore.ni.dll
    MOD - [2011.10.14 11:00:40 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\fd2c727bcef2e019eb96c1145f423701\WindowsBase.ni.dll
    MOD - [2011.10.14 11:00:37 | 007,950,848 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\f9c36ea806e77872dce891c77b68fac3\System.ni.dll
    MOD - [2011.10.14 11:00:06 | 011,490,816 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll
    MOD - [2011.10.02 20:54:02 | 001,833,944 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
    MOD - [2011.10.02 20:53:53 | 006,277,280 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll
    MOD - [2011.04.19 22:17:24 | 000,095,232 | ---- | M] () -- C:\Programme\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
    MOD - [2011.03.14 14:21:10 | 000,016,384 | ---- | M] () -- C:\Programme\ATI Technologies\ATI.ACE\Branding\Branding.dll
    MOD - [2009.03.30 06:42:12 | 000,434,176 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll
    MOD - [2009.03.30 06:42:12 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll
    MOD - [2009.03.30 06:42:11 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
    MOD - [2009.02.25 03:16:56 | 000,249,856 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll
    MOD - [2007.05.25 12:25:38 | 000,958,464 | ---- | M] () -- C:\Programme\TOSHIBA\FlashCards\de\TCrdMain.resources.dll
    MOD - [2007.05.16 01:06:44 | 000,159,744 | ---- | M] () -- C:\Windows\System32\atitmmxx.dll
    MOD - [2007.04.23 10:38:08 | 000,009,216 | ---- | M] () -- C:\Programme\TOSHIBA\ConfigFree\NotifyCFF.dll
    MOD - [2006.12.01 18:55:42 | 000,009,216 | ---- | M] () -- C:\Programme\TOSHIBA\TBS\NotifyTBS.dll
    MOD - [2006.11.09 18:27:06 | 000,090,112 | ---- | M] () -- C:\Programme\TOSHIBA\FlashCards\TWarnMsg\TWarnMsg.dll
    MOD - [2006.11.08 18:08:30 | 000,009,216 | ---- | M] () -- C:\Programme\TOSHIBA\PCDiag\NotifyPCD.dll
    MOD - [2006.11.06 17:14:44 | 000,034,352 | ---- | M] () -- C:\Programme\TOSHIBA\Utilities\KeNotify.exe
    MOD - [2006.10.10 11:44:16 | 000,009,728 | ---- | M] () -- C:\Programme\TOSHIBA\TOSHIBA Assist\NotifyX.dll
    MOD - [2006.10.07 12:57:04 | 000,053,248 | ---- | M] () -- C:\Programme\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll
     
     
    ========== Win32 Services (SafeList) ==========
     
    SRV - File not found [Auto | Stopped] --  -- (TOSHIBA Bluetooth Service)
    SRV - [2011.10.11 14:59:49 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
    SRV - [2011.10.11 14:59:37 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
    SRV - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
    SRV - [2011.06.01 14:44:54 | 002,337,144 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Programme\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
    SRV - [2011.04.19 22:17:18 | 000,294,400 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
    SRV - [2010.09.14 08:58:32 | 001,956,136 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Programme\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5)
    SRV - [2009.08.27 17:09:10 | 001,253,376 | ---- | M] (MAGIX AG) [Unknown | Running] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
    SRV - [2008.08.07 11:10:02 | 003,276,800 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
    SRV - [2008.04.24 10:21:56 | 000,099,720 | ---- | M] (Toshiba Europe GmbH) [Auto | Running] -- C:\Program Files\Toshiba TEMPRO\TempoSVC.exe -- (TempoMonitoringService)
    SRV - [2007.05.17 20:12:30 | 000,114,688 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Programme\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe -- (TNaviSrv)
    SRV - [2007.03.29 10:39:00 | 000,427,576 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv)
    SRV - [2006.11.14 20:33:10 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto | Running] -- C:\Programme\TOSHIBA\ConfigFree\CFSvcs.exe -- (CFSvcs)
    SRV - [2006.11.02 20:40:12 | 000,174,656 | ---- | M] () [Auto | Running] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing)
    SRV - [2006.10.05 13:10:12 | 000,009,216 | ---- | M] (Agere Systems) [Auto | Running] -- C:\Windows\System32\agrsmsvc.exe -- (AgereModemAudio)
    SRV - [2006.08.23 16:39:48 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Programme\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
    SRV - [2006.05.25 19:30:16 | 000,114,688 | ---- | M] (TOSHIBA Corporation) [Auto | Running] -- C:\Windows\System32\TODDSrv.exe -- (TODDSrv)
     
     
    ========== Driver Services (SafeList) ==========
     
    DRV - [2011.10.11 15:00:01 | 000,134,344 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
    DRV - [2011.10.11 15:00:01 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
    DRV - [2011.10.11 15:00:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
    DRV - [2010.06.17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
    DRV - [2010.02.18 09:18:22 | 000,037,944 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\amdiox86.sys -- (amdiox86)
    DRV - [2009.06.19 21:44:14 | 000,290,816 | ---- | M] (Texas Instruments) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tifm21.sys -- (tifm21)
    DRV - [2008.07.29 05:05:04 | 000,919,552 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
    DRV - [2008.05.02 11:58:28 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
    DRV - [2008.05.02 11:58:14 | 000,020,864 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmbo.sys -- (nmwcdc)
    DRV - [2008.05.02 10:58:14 | 000,008,064 | ---- | M] (Windows (R) Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbser_lowerflt.sys -- (upperdev)
    DRV - [2008.05.02 10:58:12 | 000,017,536 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ccdcmb.sys -- (nmwcd)
    DRV - [2007.11.09 05:00:52 | 000,023,640 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\TVALZ_O.SYS -- (TVALZ)
    DRV - [2007.05.16 01:16:20 | 002,602,496 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
    DRV - [2007.04.27 20:13:58 | 000,285,184 | ---- | M] (TOSHIBA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\tos_sps32.sys -- (tos_sps32)
    DRV - [2007.03.12 21:47:54 | 000,011,264 | ---- | M] (Chicony Electronics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\UVCFTR_S.SYS -- (UVCFTR)
    DRV - [2007.01.18 16:47:18 | 000,211,072 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\kr10n.sys -- (KR10N)
    DRV - [2007.01.18 16:40:56 | 000,219,392 | ---- | M] (TOSHIBA CORPORATION) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\kr10i.sys -- (KR10I)
    DRV - [2006.12.25 18:35:08 | 000,067,072 | ---- | M] (Realtek Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
    DRV - [2006.11.28 16:11:00 | 001,161,888 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
    DRV - [2006.10.18 12:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdcmdpst.sys -- (tdcmdpst)
    DRV - [2006.07.28 16:25:26 | 000,019,456 | ---- | M] (COMPAL ELECTRONIC INC.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\LPCFilter.sys -- (LPCFilter)
     
     
    ========== Standard Registry (SafeList) ==========
     
     
    ========== Internet Explorer ==========
     
     
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
    IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
    IE - HKCU\..\URLSearchHook:  - No CLSID value found
    IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
    IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:52121
     
    ========== FireFox ==========
     
    FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
    FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
    FF - prefs.js..browser.startup.homepage: "http://www.google.de/"
    FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&q="
    FF - prefs.js..network.proxy.http: "127.0.0.1"
    FF - prefs.js..network.proxy.http_port: 52121
    FF - prefs.js..network.proxy.type: 1
     
     
    FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
    FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
    FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
    FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
    FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.709: c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
    FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.709: c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
    FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.709: c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
    FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
    FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
     
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2011.01.08 18:28:04 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.10.02 20:54:03 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.06.19 18:55:13 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2011.01.08 18:28:04 | 000,000,000 | ---D | M]
     
    [2009.06.13 01:03:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\nina\AppData\Roaming\mozilla\Extensions
    [2010.03.13 13:59:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\nina\AppData\Roaming\mozilla\Firefox\Profiles\2zh0arl5.default\extensions
    [2010.03.13 13:59:45 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\nina\AppData\Roaming\mozilla\Firefox\Profiles\2zh0arl5.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
    [2011.05.26 11:03:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\nina\AppData\Roaming\mozilla\Firefox\Profiles\lerppil7.Nina2\extensions
    [2010.06.27 18:52:51 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\nina\AppData\Roaming\mozilla\Firefox\Profiles\lerppil7.Nina2\extensions\{20a82645-c095-46ed-80e3-08825760534b}
    [2009.08.05 20:24:27 | 000,000,950 | ---- | M] () -- C:\Users\nina\AppData\Roaming\Mozilla\Firefox\Profiles\2zh0arl5.default\searchplugins\icqplugin-1.xml
    [2009.08.06 13:39:19 | 000,000,950 | ---- | M] () -- C:\Users\nina\AppData\Roaming\Mozilla\Firefox\Profiles\2zh0arl5.default\searchplugins\icqplugin-2.xml
    [2009.07.28 20:34:08 | 000,000,944 | ---- | M] () -- C:\Users\nina\AppData\Roaming\Mozilla\Firefox\Profiles\2zh0arl5.default\searchplugins\icqplugin.xml
    [2011.06.15 20:27:23 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
    [2009.07.02 16:55:28 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Programme\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
    [2010.04.24 18:40:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
    [2010.08.15 19:35:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
    [2010.10.14 17:57:26 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
    [2011.01.18 19:50:01 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
    [2011.06.15 20:27:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
    [2009.06.23 20:06:41 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
    [2011.10.02 20:54:03 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
    [2011.05.04 04:52:23 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
    [2010.01.14 00:46:00 | 000,063,488 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
    [2011.05.26 11:06:22 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
    [2011.05.26 11:06:22 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
    [2011.05.26 11:06:22 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
    [2011.05.26 11:06:22 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
    [2011.05.26 11:06:22 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
    [2011.05.26 11:06:22 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
     
    O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
    O1 - Hosts: 127.0.0.1       localhost
    O1 - Hosts: ::1             localhost
    O2 - BHO: (XTTBPos00 Class) - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Programme\ICQToolbar\toolbaru.dll (ICQ Inc.)
    O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
    O4 - HKLM..\Run: [00TCrdMain] C:\Programme\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation)
    O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
    O4 - HKLM..\Run: [B63.exe] C:\Programme\Internet Explorer\F458\B63.exe ()
    O4 - HKLM..\Run: [HSON] C:\Programme\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation)
    O4 - HKLM..\Run: [HWSetup] \HWSetup.exe hwSetUP File not found
    O4 - HKLM..\Run: [KeNotify] C:\Programme\TOSHIBA\Utilities\KeNotify.exe ()
    O4 - HKLM..\Run: [NDSTray.exe] NDSTray.exe File not found
    O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
    O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
    O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA)
    O4 - HKLM..\Run: [TPwrMain] C:\Programme\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation)
    O4 - HKCU..\Run: [B63.exe] C:\Users\nina\AppData\Roaming\Microsoft\F458\B63.exe ()
    O4 - HKCU..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent File not found
    O4 - HKCU..\Run: [Microsoft® Windows Update] C:\Users\nina\M-1-52-5782-8752-5245\winsvc.exe (   )
    O4 - HKCU..\Run: [portwexexe.exe] C:\portwexexe\portwexexe.exe File not found
    O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
    F3 - HKCU WinNT: Load - (C:\Users\nina\AppData\Roaming\F37A6\lvvm.exe) -C:\Users\nina\AppData\Roaming\F37A6\lvvm.exe ()
    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html File not found
    O8 - Extra context menu item: Öffnen mit WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta File not found
    O9 - Extra Button: eBay - Der weltweite Online Marktplatz - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/707-44556-9400-3/4 File not found
    O9 - Extra Button: Amazon.de - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.de/exec/obidos/redirect-home?tag=Toshibadebholink-21&site=home File not found
    O13 - gopher Prefix: missing
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
    O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0)
    O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{23F8D4F7-11A7-4118-86DD-E166FAB5F744}: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5514F19D-4D29-4A0A-B7F5-D171A4DC3FEA}: DhcpNameServer = 192.168.1.1
    O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
    O20 - HKCU Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
    O20 - HKCU Winlogon: Shell - (C:\Users\nina\AppData\Roaming\8A0F3\CF7F4.exe) -C:\Users\nina\AppData\Roaming\8A0F3\CF7F4.exe ()
    O24 - Desktop WallPaper: C:\Users\nina\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
    O24 - Desktop BackupWallPaper: C:\Users\nina\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg
    O32 - HKLM CDRom: AutoRun - 1
    O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
    O33 - MountPoints2\{4c822c62-4892-11df-95f9-001eec069d9a}\Shell\AutoRun\command - "" = D:\Launcher.exe
    O33 - MountPoints2\{9c031f32-1d6f-11df-8b13-001eec069d9a}\Shell\AutoRun\command - "" = D:\installer.exe
    O33 - MountPoints2\{9c031f32-1d6f-11df-8b13-001eec069d9a}\Shell\verb\command - "" = D:\installer.exe
    O34 - HKLM BootExecute: (autocheck autochk *)
    O35 - HKLM\..comfile [open] -- "%1" %*
    O35 - HKLM\..exefile [open] -- "%1" %*
    O37 - HKLM\...com [@ = comfile] -- "%1" %*
    O37 - HKLM\...exe [@ = exefile] -- "%1" %*
     
    ========== Files/Folders - Created Within 30 Days ==========
     
    [2011.10.18 13:11:05 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\nina\Desktop\OTL.exe
    [2011.10.18 12:57:13 | 000,000,000 | ---D | C] -- C:\Users\nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
    [2011.10.18 12:57:12 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
    [2011.10.18 12:53:31 | 000,000,000 | ---D | C] -- C:\Users\nina\AppData\Roaming\Avira
    [2011.10.18 12:53:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
    [2011.10.18 12:52:48 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
    [2011.10.18 12:52:47 | 000,134,344 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
    [2011.10.18 12:52:47 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avkmgr.sys
    [2011.10.18 12:52:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
    [2011.10.18 12:52:39 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
    [2011.10.18 11:45:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
    [2011.10.18 11:45:44 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
    [2011.10.17 18:47:55 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Users\nina\taskmgr.exe
    [2011.10.16 15:01:20 | 000,000,000 | ---D | C] -- C:\Users\nina\AppData\Roaming\F37A6
    [2011.10.16 15:00:57 | 000,000,000 | ---D | C] -- C:\Users\nina\AppData\Roaming\8A0F3
    [2011.10.16 15:00:51 | 000,000,000 | RHSD | C] -- C:\Users\nina\M-1-52-5782-8752-5245
    [2011.10.14 09:23:01 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
    [2011.10.14 09:23:00 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
    [2011.10.14 09:22:59 | 001,798,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
    [2011.10.14 09:22:59 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
    [2011.10.14 09:22:58 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
    [2011.10.13 10:30:25 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisdecd.dll
    [2011.10.13 10:30:25 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\psisrndr.ax
    [2011.10.13 10:30:25 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mpeg2Data.ax
    [2011.10.13 10:30:25 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSDvbNP.ax
    [2011.10.13 10:30:23 | 002,043,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
    [2011.10.13 10:28:55 | 000,555,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIAutomationCore.dll
    [2011.10.13 10:28:55 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\oleaccrc.dll
    [2011.10.02 20:53:53 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
    [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
     
    ========== Files - Modified Within 30 Days ==========
     
    [2011.10.18 13:15:53 | 000,030,259 | ---- | M] () -- C:\Users\nina\Desktop\hjtscanlist.bat
    [2011.10.18 13:15:53 | 000,000,022 | ---- | M] () -- C:\Users\nina\Desktop\hjtscanlist.zip
    [2011.10.18 13:11:09 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\nina\Desktop\OTL.exe
    [2011.10.18 13:01:00 | 000,001,022 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
    [2011.10.18 12:59:33 | 000,175,616 | ---- | M] () -- C:\Users\nina\AppData\Roaming\firefox.exe
    [2011.10.18 12:59:12 | 000,002,521 | ---- | M] () -- C:\Users\nina\Desktop\HiJackThis.lnk
    [2011.10.18 12:53:07 | 000,001,852 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
    [2011.10.18 12:52:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
    [2011.10.18 12:46:05 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
    [2011.10.18 12:45:46 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
    [2011.10.18 12:45:46 | 000,003,568 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
    [2011.10.18 12:45:37 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
    [2011.10.18 12:45:33 | 3219,177,472 | -HS- | M] () -- C:\hiberfil.sys
    [2011.10.18 11:39:01 | 000,628,742 | ---- | M] () -- C:\Windows\System32\perfh007.dat
    [2011.10.18 11:39:01 | 000,595,996 | ---- | M] () -- C:\Windows\System32\perfh009.dat
    [2011.10.18 11:39:01 | 000,126,260 | ---- | M] () -- C:\Windows\System32\perfc007.dat
    [2011.10.18 11:39:01 | 000,104,070 | ---- | M] () -- C:\Windows\System32\perfc009.dat
    [2011.10.18 11:37:58 | 000,175,616 | ---- | M] () -- C:\Users\nina\AppData\Roaming\wmplayer.exe
    [2011.10.14 10:56:31 | 000,326,336 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
    [2011.10.13 18:19:07 | 000,015,178 | ---- | M] () -- C:\Users\nina\Documents\Bachelorarbeit_Gliederung.odt
    [2011.10.11 15:00:01 | 000,134,344 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
    [2011.10.11 15:00:01 | 000,074,640 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
    [2011.10.11 15:00:01 | 000,036,000 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avkmgr.sys
    [2011.10.02 20:53:53 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
    [2011.09.29 15:24:40 | 001,885,567 | ---- | M] () -- C:\Users\nina\Documents\Ausarbeitung Teil 1 und 2.odt
    [2011.09.29 14:29:08 | 000,552,135 | ---- | M] () -- C:\Users\nina\Documents\Ausarbeitung Teil 1 und 2.pdf
    [2011.09.29 14:22:51 | 000,518,858 | ---- | M] () -- C:\Users\nina\Documents\lehrergesundheit.php
    [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
     
    ========== Files Created - No Company Name ==========
     
    [2011.10.18 13:14:41 | 000,000,022 | ---- | C] () -- C:\Users\nina\Desktop\hjtscanlist.zip
    [2011.10.18 12:59:33 | 000,175,616 | ---- | C] () -- C:\Users\nina\AppData\Roaming\firefox.exe
    [2011.10.18 12:57:13 | 000,002,521 | ---- | C] () -- C:\Users\nina\Desktop\HiJackThis.lnk
    [2011.10.18 12:53:07 | 000,001,852 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
    [2011.10.18 11:37:58 | 000,175,616 | ---- | C] () -- C:\Users\nina\AppData\Roaming\wmplayer.exe
    [2011.09.29 14:30:12 | 001,885,567 | ---- | C] () -- C:\Users\nina\Documents\Ausarbeitung Teil 1 und 2.odt
    [2011.09.29 14:29:01 | 000,552,135 | ---- | C] () -- C:\Users\nina\Documents\Ausarbeitung Teil 1 und 2.pdf
    [2011.09.29 14:22:46 | 000,518,858 | ---- | C] () -- C:\Users\nina\Documents\lehrergesundheit.php
    [2011.04.19 22:10:32 | 000,059,904 | ---- | C] () -- C:\Windows\System32\OVDecode.dll
    [2011.01.18 19:40:55 | 000,000,680 | ---- | C] () -- C:\Users\nina\AppData\Local\d3d9caps.dat
    [2011.01.08 18:17:05 | 000,214,717 | ---- | C] () -- C:\Windows\hpwins23.dat
    [2010.12.28 23:08:37 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
    [2010.09.11 14:35:06 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
    [2010.09.11 14:35:06 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
    [2010.09.11 14:12:52 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
    [2010.06.19 21:30:34 | 000,022,587 | ---- | C] () -- C:\Users\nina\AppData\Roaming\mdbu.bin
    [2010.06.19 21:18:07 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
    [2009.02.17 18:03:04 | 000,032,768 | ---- | C] () -- C:\Windows\System32\PLSINFO.EXE
    [2009.02.17 18:03:02 | 000,019,968 | ---- | C] () -- C:\Windows\System32\CPUINF32.DLL
    [2009.02.17 18:02:46 | 000,284,160 | ---- | C] () -- C:\Windows\unin0407.exe
    [2008.10.25 11:30:45 | 000,001,847 | ---- | C] () -- C:\Windows\hpwmdl23.dat
    [2008.10.07 15:00:13 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
    [2008.09.04 19:49:49 | 000,338,944 | ---- | C] () -- C:\Windows\System32\LFFPX7.DLL
    [2008.09.04 19:49:49 | 000,118,784 | ---- | C] () -- C:\Windows\System32\LFKODAK.DLL
    [2008.08.05 14:06:34 | 000,000,016 | -H-- | C] () -- C:\ProgramData\mxfilerelatedcache.mxc2
    [2008.07.29 13:19:43 | 000,000,016 | -H-- | C] () -- C:\Users\nina\AppData\Roaming\mxfilerelatedcache.mxc2
    [2008.07.29 13:19:43 | 000,000,016 | -H-- | C] () -- C:\Users\nina\AppData\Local\mxfilerelatedcache.mxc2
    [2008.07.28 20:30:31 | 000,026,624 | ---- | C] () -- C:\Users\nina\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
    [2008.07.28 19:51:45 | 000,000,952 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys
    [2008.06.06 10:19:45 | 000,128,113 | ---- | C] () -- C:\Windows\System32\csellang.ini
    [2008.06.06 10:19:45 | 000,045,056 | ---- | C] () -- C:\Windows\System32\csellang.dll
    [2008.06.06 10:19:45 | 000,010,146 | ---- | C] () -- C:\Windows\System32\tosmreg.ini
    [2008.06.06 10:19:45 | 000,007,671 | ---- | C] () -- C:\Windows\System32\cseltbl.ini
    [2007.05.31 16:05:10 | 000,006,642 | ---- | C] () -- C:\Windows\mgxoschk.ini
    [2007.05.31 15:41:48 | 000,204,800 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll
    [2007.05.31 15:41:48 | 000,200,704 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll
    [2007.05.31 15:41:48 | 000,192,512 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll
    [2007.05.31 15:41:48 | 000,192,512 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll
    [2007.05.31 15:41:48 | 000,188,416 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll
    [2007.05.31 15:41:48 | 000,020,480 | ---- | C] () -- C:\Windows\System32\IVIresize.dll
    [2007.05.31 15:32:33 | 000,000,000 | ---- | C] () -- C:\Windows\NDSTray.INI
    [2007.05.31 15:20:33 | 000,036,864 | ---- | C] () -- C:\Windows\System32\HWS_Ctrl.dll
    [2007.05.31 14:56:27 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
    [2007.05.31 14:49:39 | 000,000,291 | ---- | C] () -- C:\Windows\RtDefLvl.ini
    [2007.05.31 14:49:39 | 000,000,176 | ---- | C] () -- C:\Windows\System32\drivers\RTHDAEQ1.dat
    [2007.05.31 14:49:39 | 000,000,176 | ---- | C] () -- C:\Windows\System32\drivers\RTHDAEQ0.dat
    [2007.05.31 14:49:39 | 000,000,008 | ---- | C] () -- C:\Windows\System32\drivers\RtkHDAud.dat
    [2007.05.31 14:48:33 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
    [2007.05.31 14:48:33 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
    [2007.05.31 14:48:32 | 000,144,773 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
    [2006.12.05 13:05:06 | 000,114,688 | ---- | C] () -- C:\Windows\System32\TosBtAcc.dll
    [2006.11.02 20:40:12 | 000,174,656 | ---- | C] () -- C:\Windows\System32\PSIService.exe
    [2006.11.02 17:33:31 | 000,628,742 | ---- | C] () -- C:\Windows\System32\perfh007.dat
    [2006.11.02 17:33:31 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
    [2006.11.02 17:33:31 | 000,126,260 | ---- | C] () -- C:\Windows\System32\perfc007.dat
    [2006.11.02 17:33:31 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
    [2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
    [2006.11.02 14:47:37 | 000,326,336 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
    [2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
    [2006.11.02 12:33:01 | 000,595,996 | ---- | C] () -- C:\Windows\System32\perfh009.dat
    [2006.11.02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
    [2006.11.02 12:33:01 | 000,104,070 | ---- | C] () -- C:\Windows\System32\perfc009.dat
    [2006.11.02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
    [2006.11.02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
    [2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
    [2006.11.02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
    [2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
    [2006.11.02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
    [2005.11.23 13:55:42 | 000,024,576 | ---- | C] () -- C:\Windows\System32\SPCtl.dll
    [2005.07.22 21:30:20 | 000,065,536 | ---- | C] () -- C:\Windows\System32\TosCommAPI.dll
    [1999.01.26 23:00:00 | 000,114,816 | ---- | C] () -- C:\Windows\System32\MSMT4232.DLL
     
    ========== LOP Check ==========
     
    [2011.10.16 15:01:18 | 000,000,000 | ---D | M] -- C:\Users\nina\AppData\Roaming\8A0F3
    [2011.10.18 12:47:19 | 000,000,000 | ---D | M] -- C:\Users\nina\AppData\Roaming\F37A6
    [2008.07.29 19:55:47 | 000,000,000 | ---D | M] -- C:\Users\nina\AppData\Roaming\ICQ Toolbar
    [2010.06.19 21:23:34 | 000,000,000 | ---D | M] -- C:\Users\nina\AppData\Roaming\MAGIX
    [2009.06.23 20:15:47 | 000,000,000 | ---D | M] -- C:\Users\nina\AppData\Roaming\OpenOffice.org
    [2009.08.08 19:07:55 | 000,000,000 | ---D | M] -- C:\Users\nina\AppData\Roaming\Opera
    [2010.07.08 17:44:54 | 000,000,000 | ---D | M] -- C:\Users\nina\AppData\Roaming\TeamViewer
    [2008.07.29 13:23:09 | 000,000,000 | ---D | M] -- C:\Users\nina\AppData\Roaming\Toshiba
    [2011.10.18 12:44:17 | 000,032,534 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
     
    ========== Purity Check ==========
     
     
     
    ========== Alternate Data Streams ==========
     
    @Alternate Data Stream - 64 bytes -> C:\Users\nina\Documents\Vampire_Diaries_10.02.24_21-15_pro7_60_TVOON_DE.mpg.avi:TOC.WMV
    @Alternate Data Stream - 64 bytes -> C:\Users\nina\Documents\This is the most popular water balloon shot.mp4:TOC.WMV
    @Alternate Data Stream - 64 bytes -> C:\Users\nina\Documents\Kruse_Sascha_M5.mp4:TOC.WMV
    @Alternate Data Stream - 64 bytes -> C:\Users\nina\Documents\kahless-video.avi:TOC.WMV
    
    < End of report >

  2. #2
    Administrator Team-Mitglied Avatar von Petra
    Registriert seit
    03.05.2007
    Ort
    Nähe Düsseldorf
    Beiträge
    42.521

    AW: Vista infiziert, portwexexe.exe und andere


    Hallo Smily0815,

    zunächst bitte anklicken und aufmerksam durchlesen: Worauf muss ich während der Bereinigung achten?
    Bestätige mir bitte in Deiner nächsten Antwort, dass Du das gelesen und verstanden hast.

    Besonders wichtig ist, dass Du die Punkte in der vorgegebenen Reihenfolge abarbeitest und sofort stoppst und fragst, wenn etwas nicht funktioniert, damit ich die Anleitung ggfs. ändern kann!


    ===== Punkt 1 =====

    AntiVir - Funde rauskopieren

    Rechtsklick auf den AntiVir-Schirm in der Taskleiste => AntiVir starten => Übersicht => Ereignisse
    Typ anklicken, damit die Ereignisse nach Typart sortiert werden.
    Jeden Fund markieren (nicht alle Ereignisse, nur Funde) => Rechtsklick auf Funde => Ereignis(se) exportieren
    und als Ereignisse.txt auf dem Desktop speichern und den Inhalt hier posten.


    ===== Punkt 2 =====

    Was hast Du schon probiert?

    Falls es sich um einen Laptop oder einen Computer mit vorinstalliertem Windows handelt, schreibe mir bitte genau den Typ auf.
    Berichte möglichst genau, welche Tools/Remover Du evtl. schon ausprobiert hast, um das Problem loszuwerden.
    Poste mir evtl. vorhandene Logfiles.
    Seit wann ist das Problem vorhanden?
    Hast Du zu diesem Zeitpunkt etwas neues installiert oder hat sich an der Hardware etwas verändert?
    Hast Du ICQ und ICQ-Toolbar über Systemsteuerung => Programme deinstalliert?


    ===== Punkt 3 =====

    Malware mit Combofix beseitigen

    Lade Combofix von einem der folgenden Download-Spiegel herunter:

    BleepingComputer.com - ForoSpyware.com

    und speichere das Programm auf den Desktop, nicht woanders hin, das ist wichtig!
    Beachte die ausführliche Original-Anleitung.

    Zurzeit ist Combofix auf folgenden Windows-Versionen lauffähig:
    • Windows XP (nur 32-bit)
    • Windows 2000 (nur 32-bit)
    • Windows Vista (32-bit/64-bit)
    • Windows 7 (32-bit/64-bit)


    Vorbereitung und wichtige Hinweise
    • Bitte während des Scans mit Combofix Antiviren- sowie Antispy-Programme, die Firewall und evtl. vorhandenes Skript-Blocking (Norton) deaktivieren.
    • Liste der zu deaktivierenden Programme.
      Bei Unklarheiten bitte fragen.


    • ComboFix wird Deine Einstellungen in Bezug auf den Bildschirmschoner zurücksetzen.
    • Diese Einstellungen kannst Du nach Beendigung unserer Bereinigung wieder ändern.
    • {b]Mache nichts anderes[/b], wenn es Dir nicht gelungen ist, Combofix laufen zu lassen.
    • Teile uns das mit und warte auf unsere Anweisungen.


    • Starte die Combofix.exe mit Rechtsklick => Als Administrator ausführen und folge den Anweisungen.
    • Während des Laufs von Combofix nichts anderes am Computer machen!
    • Akzeptiere die Bedingungen (Disclaimer) mit "Ja".

    • Klicke "Ja", um mit dem Suchlauf nach Malware fortzufahren.
    • Es erscheint eine blaue Eingabeaufforderung, Combofix wird für den Suchlauf vorbereitet.
    • Bitte nicht in dieses Combofix-Fenster klicken.
    • Das könnte Dein System einfrieren oder hängen bleiben lassen.
    • Es wird ein Backup Deiner Registry erstellt.
    • Nun werden die einzelnen Stufen des Programms abgearbeitet, das kann eine Weile dauern.

    • Wenn ComboFix fertig ist, wird es ein Log erstellen (bitte warten, das dauert einen Moment).
    • Unbedingt warten, bis sich das Combofix-Fenster geschlossen hat und das Logfile im Editor erscheint.
    • Bitte poste die Log-Dateien C:\ComboFix.txt und C:\Qoobox\Add-Remove Programs.txt in Code-Tags hier in den Thread.

    • Hinweis: Combofix macht aus verschiedenen Gründen den Internet Explorer zum Standard-Browser und erstellt ein IE-Icon auf dem Desktop.
    • Das IE-Desktop-Icon kannst Du nach der Bereinigung wieder löschen und Deinen bevorzugten Browser wieder als Standard-Browser einstellen.


    Combofix nicht auf eigene Faust einsetzen. Wenn keine entsprechende Infektion vorliegt, kann das den Rechner lahmlegen und/oder nachhaltig schädigen!
    [°¿°] Ciao, Petra

    Neu hier? Bitte abarbeiten! | Malware-Bereinigung | Forenregeln
    Daten sichern! | Schulung | Kein Support per PN oder Mail! | Danke

  3. #3
    Einsteiger Avatar von Smily0815
    Registriert seit
    17.10.2011
    Beiträge
    3

    AW: Vista infiziert, portwexexe.exe und andere

    Hallo Petra,

    vielen Dank für deine Hilfe. Da aber zwischenzeitlich auch das Antivir sich weder deinstallieren noch neu installieren ließ, und der PC eh schon etwas lahm war, habe ich den PC per Recovery zurück gesetzt. Damit dürfte alles erledigt sein, war leider in diesem Fall die beste Möglichkeit.

    Trotzdem vielen Dank

    Smily0815

  4. #4
    Administrator Team-Mitglied Avatar von Petra
    Registriert seit
    03.05.2007
    Ort
    Nähe Düsseldorf
    Beiträge
    42.521

    AW: Vista infiziert, portwexexe.exe und andere

    Hallo Smily0815,

    ganz Deiner Meinung - ab und zu mal ganz frisch aufsetzen ist immer eine gute Wahl. Dann bleibt mir nichts weiter, als Dir noch ein paar Tipps zur Absicherung mit auf den Weg zu geben

    Nachsorge XP und Vista

    Im Anschluss gebe ich Dir einige Tipps und Hinweise, die Dir helfen werden, Dein System abzusichern und in Zukunft frei von Malware zu halten. Wenn Dein System infiziert war, rate ich Dir, alle Deine Passwörter zu ändern.

    Bitte betrachte die folgenden Tipps als Vorschläge und nicht als Nonplusultra.


    FileHippo Update Checker

    Lade den FileHippo Update Checker herunter und installiere ihn.
    Während der Installation den Haken bei "Run at Startup" entfernen.
    Lasse den Update Checker prüfen, welche Updates nötig sind und aktualisiere die gemeldeten Programme.
    Die meisten Programme können gleich von dort aus heruntergeladen werden.
    Mache das alle 14 Tage.
    Eine bebilderte und ausführliche Anleitung findest Du hier.


    Absicherung

    Falls noch nicht installiert, solltest Du die folgenden Programme installieren:

    Malwarebytes' Anti-Malware ist ein gutes Programm, welches schädliche Software sucht und unschädlich macht. Lasse Malwarebytes' Anti-Malware in regelmäßigen Abständen (z. B. einmal pro Woche) laufen und lasse vor der Überprüfung immer nach Updates suchen. Eine ausführliche Anleitung findest Du hier.

    Um Dein System frei von temporären Dateien zu halten, empfehlen wir CCleaner, (Toolbar nicht mitinstallieren) eine Freeware-Software zur Optimierung und zum Aufräumen von Windows, Einzelheiten siehe unsere Anleitung.

    Von Java immer nur die aktuellste Version auf dem Rechner haben, alle anderen deinstallieren.

    Verwende einen alternativen Browser, ich empfehle Firefox. Es gibt eine große Anzahl von Erweiterungen, wie z. B. Adblock Plus und NoScript. Mit der Erweiterung IE Tab 2 ist sogar das Windows- und Office-Upate über Firefox möglich. Die Erweiterung QuickJava sorgt dafür, dass Du Java und Java-Skript nur bei Bedarf einschalten kannst.

    Eine alternatives E-Mail-Programm ist Thunderbird. Auch dafür gibt es viele sehr gute Erweiterungen.

    Als Alternative für die ganzen Messenger kommen Pidgin, Miranda-IM oder Trillian infrage, da sie mit den wichtigsten Protokollen wie AIM, ICQ, IRC, MSN oder Yahoo zurechtkommen. Mit einem dieser Instant-Messenger kannst mit Deinen Chatfreunden über ein einziges Programm Chat-Kontakt halten, ohne x verschiedene Messenger installieren und starten zu müssen.

    "Wie konnte die Malware auf meinen Rechner kommen?", ist die wohl am häufigsten gestellte Frage. Malware gelangt in erster Linie über sogenannte Browser Exploits auf einen Rechner, also über Sicherheitslücken im Browser selbst. Weitere Schleusen sind E-Mail-Anhänge, Lecks im Betriebssystem und Programmen oder über Dateidownloads aus unsicheren Quellen.


    Durch Einsatz Deines Köpfchens und folgende simple Maßnahmen kannst Du den Schutz optimieren:
    • Betriebssystem und Software immer auf dem aktuellsten Stand halten.
    • Programme wenn möglich "benutzerdefiniert" installieren und Toolbars und Sponsoren abwählen.
    • Internet Explorer sicher konfigurieren, siehe auch hier und hier.
    • Nur Original-Software nutzen und auf Programme aus dubiosen Quellen konsequent verzichten.
    • Programme, die Du nicht mehr nutzt, über Systemsteuerung => Software/Programme entfernen/deinstallieren.
    • Nicht alles anklicken, wo klickmich draufsteht!
    • Gesunden Menschenverstand und Vorsicht walten lassen,
    • insbesondere bei Dateien, die Du Dir auf den PC holst, also E-Mails, Downloads etc.,
    • am besten auf Filesharing über P2P-Programme ganz verzichten.
    • Router durch Vergabe eines Kennwortes vor Änderungen von außen schützen.
    • Nicht benötigte Dienste und Programme gar nicht erst starten.
      Bezüglich der Dienste ist es allerdings nötig, sich damit ausführlich zu beschäftigen, ansonsten die Dienste lieber lassen, wie sie sind.
    • Nicht benötigte "Ports" (am eventuell vorhandenen DSL-Router), Freigaben u. ä. schließen.
    • Port-Scan-Test.
    • WLAN absichern.
    • Sichere Passwörter vergeben und nicht auf dem Computer speichern.
    • Nicht mehr als einen Virenscanner mit Hintergrundwächter installieren.
    • Nicht mehr als ein Antispyware-Programm mit Hintergrundwächter ständig laufen lassen.
    • Das System hin und wieder zusätzlich mit einem dieser kostenlosen Online Scanner überprüfen.
    • Datensicherung nicht vergessen!
      Wichtige Dokumente und Dateien (z. B. Fotos) auf externen Medien sichern.
      Immer eine saubere Datensicherung als zurückspielbares Image (z. B. mit Acronis True Image erstellen) auf Lager haben.
    • Poste im Internet nur Angaben und Fotos, die problemlos am nächsten Tag in der Zeitung stehen dürften,
      das gilt auch für sog. geschützte Räume in Online-Netzwerken.


    In der Regel schließe ich die erledigten Threads kurz nach dem Posten der Nachsorge, damit ich sie nicht mehr unter Beobachtung halten muss. Sollten sich nach der Schließung noch Fragen ergeben, schicke mir eine PN, ich werde den Thread dann wieder öffnen.
    [°¿°] Ciao, Petra

    Neu hier? Bitte abarbeiten! | Malware-Bereinigung | Forenregeln
    Daten sichern! | Schulung | Kein Support per PN oder Mail! | Danke

  5. #5
    Einsteiger Avatar von Smily0815
    Registriert seit
    17.10.2011
    Beiträge
    3

    AW: Vista infiziert, portwexexe.exe und andere

    Jo, mach dicht

Aktive Benutzer

Aktive Benutzer

Aktive Benutzer in diesem Thema: 1 (Registrierte Benutzer: 0, Gäste: 1)

Ähnliche Themen

  1. internet langsam und rlvknlg.exe und andere
    Von Berzerk im Forum Archiv
    Antworten: 7
    Letzter Beitrag: 16.08.2007, 03:42
  2. Antworten: 5
    Letzter Beitrag: 05.06.2007, 05:41
  3. Internet Explorer.exe und andere Probleme
    Von zaubermann im Forum Archiv
    Antworten: 26
    Letzter Beitrag: 14.10.2005, 11:05
  4. nail.exe und andere probleme..
    Von vanessa im Forum Archiv
    Antworten: 25
    Letzter Beitrag: 27.07.2005, 11:25
  5. MulMouse.exe und andere unbekannte Dateien -> Ruby
    Von philip_ohnewein im Forum Archiv
    Antworten: 1
    Letzter Beitrag: 16.02.2005, 21:54

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •