View Single Post
Old 12-06-2007, 05:42 PM   #12 (permalink)
lachs99
Registered User
 
Join Date: Nov 2007
Posts: 15
OS: WIN XP SP2


Re: Adware-gen + Trojan-gen + Agent-LTS --- rmv.exe etc. -- Red Wallpaper

Thank you for your assistance so far.

Here are the logs

DSS daft

DAFT Log saved on 2007-12-06 20:41:59
-----------------------------------------------------------------------
All associations okay!


SDFix Log


SDFix: Version 1.117

Run by Iven Engert on 06.12.2007 at 20:49

Microsoft Windows XP [Version 5.1.2600]

Running From: C:\SDFix\SDFix

Safe Mode:
Checking Services:


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting...


Normal Mode:
Checking Files:

Trojan Files Found:

C:\WINDOWS\nethop.exe - Deleted
C:\WINDOWS\rmvgor.dll - Deleted




Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found.

C:\WINDOWS\system32
No streams found.

C:\WINDOWS\system32\svchost.exe
No streams found.

C:\WINDOWS\system32\ntoskrnl.exe
No streams found.



Final Check:

catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-12-07 01:28:38
Windows 5.1.2600 Service Pack 2 FAT NTAPI

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Programme\\iTunes\\iTunes.exe"="C:\\Programme\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Programme\\eMule\\emule.exe"="C:\\Programme\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Programme\\Skype\\Phone\\Skype.exe"="C:\\Programme\\Skype\\Phone\\Skype.exe:*:Enabled:Skype. Take a deep breath "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

Remaining Files:
---------------

File Backups: - C:\SDFix\SDFix\backups\backups.zip

Files with Hidden Attributes:

Mon 18 Apr 2005 14,964 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
Wed 22 Sep 2004 4,348 A.SH. --- "C:\Dokumente und Einstellungen\All Users\DRM\DRMv1.bak"
Thu 29 Nov 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\11ff9edcc14d824e43781892eb21a97b\BIT6.tmp"
Fri 5 Jan 2007 0 A.SH. --- "C:\Dokumente und Einstellungen\All Users\DRM\Cache\Indiv01.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT16F.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT332.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT170.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT171.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT172.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT173.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT174.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT175.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT176.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT177.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT178.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT179.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT17A.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT17B.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT17C.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT17D.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT17E.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT17F.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT180.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT181.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT182.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT183.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT184.tmp"
Mon 26 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT3A.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT185.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT186.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT187.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT188.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT189.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT18A.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT18B.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT18C.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT18D.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT18E.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT18F.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT190.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT191.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT192.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT96.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT97.tmp"
Tue 27 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT98.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT99.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT9A.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT9B.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT9C.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT9D.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT9E.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT9F.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITA0.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITA1.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITA2.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITA3.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITA4.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITA5.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITA6.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITA7.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITA8.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITA9.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITAA.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITAB.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITAC.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITAD.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITAE.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITAF.tmp"
Tue 27 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITB0.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT193.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT194.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT195.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT196.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT197.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT198.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT199.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT19A.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT19B.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT19C.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT19D.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT19F.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT19E.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1A0.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1A1.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1A2.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1A3.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1A4.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1A5.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1A6.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BITC8.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1A7.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1A8.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1A9.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1AA.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1AB.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1AC.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1AD.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1AE.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT160.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT161.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT162.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT163.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT164.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT165.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT166.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT167.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT168.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT169.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT16A.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT16B.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT16C.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT16D.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT16E.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1AF.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1B0.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1B1.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1B2.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1B3.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT1B4.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT4D6.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT526.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT54B.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT55D.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT55E.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT55B.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT4E6.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT500.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT5A3.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT603.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT609.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT60A.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT60E.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT60F.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT610.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT611.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT612.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT60C.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT606.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT613.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT614.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT61F.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT623.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT626.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT619.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT630.tmp"
Fri 30 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT631.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT632.tmp"
Fri 30 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT633.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT62E.tmp"
Fri 30 Nov 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT41.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT42.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT43.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT44.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT45.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT46.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT47.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT48.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT49.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT4A.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT4C.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT50.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT54.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT55.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT56.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT57.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT5A.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT62.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT63.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT64.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\WINDOWS\temp\BIT65.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT62E.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT630.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT41.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITA8.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT3B.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT3C.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT3D.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT40.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT42.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT43.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT44.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT45.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT59.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT88.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT8D.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT8B.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITA3.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITA4.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITA6.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT95.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT96.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT97.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT98.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT9C.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT9D.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT9E.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT9A.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT9F.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITA5.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITA7.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITA9.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITAA.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITAB.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITA1.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITAC.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITAD.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITAE.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITAF.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITB0.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITB4.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITD3.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITD4.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITD5.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITB3.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITB8.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITB9.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITBA.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITBB.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITB7.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITBC.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITBD.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITC1.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITC4.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITC5.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITC8.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITC0.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITC9.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITCA.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITCB.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITCC.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITCD.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITCE.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITCF.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITD6.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITD2.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITE3.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITE4.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITE5.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITD7.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITD8.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITD9.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITDA.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITDE.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITE8.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITE2.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITE1.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITDD.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITF0.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITF2.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITEF.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITEB.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITF1.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITF9.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITFA.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITFC.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITFB.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BITFE.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT12F.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT10C.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT10D.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT10E.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT10F.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT110.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT111.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT112.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT113.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT114.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT118.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT119.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT11A.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT11E.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT117.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT11F.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT120.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT121.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT122.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT123.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT124.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT125.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT126.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT127.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT12B.tmp"
Sun 2 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\WINDOWS\temp\BIT133.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT5.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT7.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT4.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITA.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITB3.tmp"
Fri 30 Nov 2007 334,836 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT5B.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT90.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT8.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT9.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITE.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITF.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITC8.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITCA.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITCB.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD0.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD1.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITCC.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITCD.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITCE.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD2.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD3.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD4.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD5.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD6.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD7.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD8.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD9.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITDA.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITDB.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITDC.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITDD.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITDE.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITDF.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITE0.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITEC.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITED.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITE3.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITE4.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITE5.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITE6.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITE7.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITE8.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITE9.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITEA.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITEB.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITEE.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT13.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT15.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITB.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITF0.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITF9.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITC.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITFD.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITFE.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITFF.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT103.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT104.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT105.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT106.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT107.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT108.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT10A.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT10B.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT10C.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT10D.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT10E.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT10F.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT110.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT111.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT115.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT11E.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT127.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT13C.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT141.tmp"
Wed 28 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT146.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT10.tmp"
Wed 28 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT15F.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT11.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT12.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT17.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT18.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1C.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT14.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1D.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1E.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1B.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1F.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT20.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT21.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT16.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT23.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT19.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1A.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT22.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT24.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT25.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT26.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT27.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT2A.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT2B.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT2C.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT2D.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT2F.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT31.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT32.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT33.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT34.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT35.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT38.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT39.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT3A.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT3B.tmp"
Thu 29 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT3C.tmp"
Thu 29 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206082757\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT3E.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT40.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1.tmp"
Fri 30 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT4A.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT13.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT47.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT15.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT4B.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT4C.tmp"
Thu 6 Dec 2007 334,836 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT5B.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT19.tmp"
Fri 30 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT4D.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1A.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT4E.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT24.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT53.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT54.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT55.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT52.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT2.tmp"
Wed 8 Aug 2007 85,946 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT3.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT7.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITF.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT8.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT9.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITA.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITB.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITC.tmp"
Fri 30 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITD.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITE.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT18.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1F.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1B.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT14.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT17.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1C.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1D.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT1E.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT25.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT98.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT99.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT9A.tmp"
Fri 30 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT9B.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT9F.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITA0.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITA1.tmp"
Fri 30 Nov 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITA2.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT9D.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BITA3.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT16.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT20.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT21.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT22.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT23.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT28.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT26.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT2C.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT31.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT32.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT33.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT34.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT2E.tmp"
Sat 1 Dec 2007 388,090 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT35.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT39.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT37.tmp"
Sat 1 Dec 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT3A.tmp"
Fri 30 Nov 2007 0 A..H. --- "C:\Deckard\System Scanner\20071206204119\backup\DOKUME~1\IVENEN~1\LOKALE~1\Temp\BIT3F.tmp"

Finished!


SmitFraudFix Log

SmitFraudFix v2.258

Scan done at 1:38:04,10, 07.12.2007
Run from C:\Dokumente und Einstellungen\Iven Engert\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is FAT32
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTSERV.EXE
C:\WINDOWS\Explorer.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Programme\Avast4\aswUpdSv.exe
C:\Programme\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programme\Gemeinsame Dateien\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Utimaco\SafeGuard Easy\SgeCtl.exe
C:\WINDOWS\system32\SgLogPlayer.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\UPHClean\uphclean.exe
C:\Programme\Utimaco\SafeGuard Easy\WksCfgSrv.exe
C:\Programme\Avast4\ashMaiSv.exe
C:\Programme\Avast4\ashWebSv.exe
C:\Programme\Gemeinsame Dateien\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Programme\Logitech\SetPoint\LBTWiz.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Programme\Utimaco\SafeGuard Easy\Ecview.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe
C:\Programme\Skype\Phone\Skype.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\TrueCrypt\TrueCrypt.exe
C:\Programme\Copernic Desktop Search 2\DesktopSearchService.exe
C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\Programme\MSI\Core Center\CoreCenter.exe
C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Programme\Logitech\SetPoint\SetPoint.exe
C:\Programme\Skype\Plugin Manager\SkypePM.exe
C:\Programme\Gemeinsame Dateien\Logitech\KhalShared\KHALMNPR.EXE
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Programme\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\SNDVOL32.EXE

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Dokumente und Einstellungen\Iven Engert


»»»»»»»»»»»»»»»»»»»»»»»» C:\Dokumente und Einstellungen\Iven Engert\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Start Menu


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOKUME~1\IVENEN~1\FAVORI~1


»»»»»»»»»»»»»»»»»»»»»»»» Desktop


»»»»»»»»»»»»»»»»»»»»»»»» C:\Programme


»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components



»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: D-Link AirPlus DWL-520+ Wireless PCI Adapter #3
DNS Server Search Order: 192.168.0.1

Description: D-Link AirPlus DWL-520+ Wireless PCI Adapter #3
DNS Server Search Order: 195.50.140.178
DNS Server Search Order: 192.168.0.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{DED29E72-3071-4CA3-A580-123EF586936A}: DhcpNameServer=195.50.140.178 192.168.0.1
HKLM\SYSTEM\CCS\Services\Tcpip\..\{F62B00EF-F53D-45FE-84BE-AC0989E2DC40}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{E491C0E9-9C9A-457E-89F5-19766E237704}: NameServer=62.27.27.62 195.247.247.195
HKLM\SYSTEM\CS2\Services\Tcpip\..\{DED29E72-3071-4CA3-A580-123EF586936A}: DhcpNameServer=195.50.140.178 192.168.0.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{F62B00EF-F53D-45FE-84BE-AC0989E2DC40}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{DED29E72-3071-4CA3-A580-123EF586936A}: DhcpNameServer=195.50.140.178 192.168.0.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{F62B00EF-F53D-45FE-84BE-AC0989E2DC40}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=195.50.140.178 192.168.0.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=195.50.140.178 192.168.0.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=195.50.140.178 192.168.0.1


»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


»»»»»»»»»»»»»»»»»»»»»»»» End




New HJT log


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:39:01, on 07.12.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTSERV.EXE
C:\WINDOWS\Explorer.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Programme\Avast4\aswUpdSv.exe
C:\Programme\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programme\Gemeinsame Dateien\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Utimaco\SafeGuard Easy\SgeCtl.exe
C:\WINDOWS\system32\SgLogPlayer.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\UPHClean\uphclean.exe
C:\Programme\Utimaco\SafeGuard Easy\WksCfgSrv.exe
C:\Programme\Avast4\ashMaiSv.exe
C:\Programme\Avast4\ashWebSv.exe
C:\Programme\Gemeinsame Dateien\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Programme\Logitech\SetPoint\LBTWiz.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Programme\Utimaco\SafeGuard Easy\Ecview.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe
C:\Programme\Skype\Phone\Skype.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\TrueCrypt\TrueCrypt.exe
C:\Programme\Copernic Desktop Search 2\DesktopSearchService.exe
C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\Programme\MSI\Core Center\CoreCenter.exe
C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Programme\Logitech\SetPoint\SetPoint.exe
C:\Programme\Skype\Plugin Manager\SkypePM.exe
C:\Programme\Gemeinsame Dateien\Logitech\KhalShared\KHALMNPR.EXE
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Programme\iPod\bin\iPodService.exe
C:\Programme\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: Copernic Desktop Search 2 - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Programme\Copernic Desktop Search 2\DesktopSearchBand201013011.dll
O4 - HKLM\..\Run: [wtadd_taskmgr.exe] C:\WINDOWS\system32\taskmgr.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Logitech BT Wizard] LBTWiz.exe -silent
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [SgeEcView] C:\Programme\Utimaco\SafeGuard Easy\Ecview.exe
O4 - HKLM\..\Run: [EdWizard] C:\Programme\Utimaco\SafeGuard Easy\EdWizard.exe as
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [TrueCrypt] "C:\Programme\TrueCrypt\TrueCrypt.exe" /q preferences /a favorites
O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Programme\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - S-1-5-18 Startup: Verknüpfung mit startcopy.bat.lnk = C:\Dokumente und Einstellungen\Iven Engert\startcopy.bat (User 'SYSTEM')
O4 - .DEFAULT Startup: Verknüpfung mit startcopy.bat.lnk = C:\Dokumente und Einstellungen\Iven Engert\startcopy.bat (User 'Default user')
O4 - Startup: Verknüpfung mit startcopy.bat.lnk = C:\Dokumente und Einstellungen\Iven Engert\startcopy.bat
O4 - Global Startup: CoreCenter.lnk = C:\Programme\MSI\Core Center\CoreCenter.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Senden an &Bluetooth-Gerät... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/par...an_unicode.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O18 - Protocol: Festoon - (no CLSID) - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O18 - Protocol: vskype - (no CLSID) - (no file)
O20 - Winlogon Notify: !SASWinLogon - C:\Programme\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: NotLog - C:\WINDOWS\SYSTEM32\SGLogEx.dll
O20 - Winlogon Notify: SGLogNotification - C:\WINDOWS\SYSTEM32\SGLogNotification.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programme\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programme\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programme\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programme\Avast4\ashWebSv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech Inc. - C:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTSERV.EXE
O23 - Service: LVCOMSer - Logitech Inc. - C:\Programme\Gemeinsame Dateien\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Programme\Gemeinsame Dateien\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SafeGuard Easy Control (SgeCtl) - Utimaco Safeware AG - C:\Programme\Utimaco\SafeGuard Easy\SgeCtl.exe
O23 - Service: SafeGuard SGLOG Player (SgLogPlayer) - Utimaco Safeware AG - C:\WINDOWS\system32\SgLogPlayer.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SafeGuard Easy Workstation Server (WksCfgSrv) - Utimaco Safeware AG - C:\Programme\Utimaco\SafeGuard Easy\WksCfgSrv.exe

--
End of file - 10976 bytes
lachs99 is offline