System Check Trojaner?

amonika

Hallo,

seit heute morgen hab ich einen System Check Trojaner, der sich mit den hier gefunden Fehlermeldungen und der Anzeige des Desktop und der Aussage über den Taskmanager und den "verschwundenen " Dateien und Programme deckt.
Wie kann ich ihn beseitigen ohne meinen ganzen Laptop platt zu machen (nein, ich hatte keine Datensicherung gemacht und benötige diese dringend).

Ich hoffe, ich habe alle hier geforderten Daten erfolgreich geladen.

Über Hilfe, die auch ein Laie wie ich verstehen kann würde ich mich sehr freuen.

Liebe Grüsse

Claudia

Hier der DDS.txt:

.
DDS (Ver_2011-08-26.01) - FAT32x86
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_22
Run by Administrator at 22:38:19 on 2012-02-26
Microsoft Windows XP Professional 5.1.2600.3.1252.49.1031.18.1919.961 [GMT 1:00]
.
AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
SVCHOST.EXE
C:\WINDOWS\System32\svchost.exe -k netsvcs
SVCHOST.EXE
SVCHOST.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
SVCHOST.EXE
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\Programme\ICQ6Toolbar\ICQ Service.exe
C:\Programme\Avira\AntiVir Desktop\avshadow.exe
C:\Programme\Nero\Nero 7\InCD\InCDsrv.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
C:\Programme\LANCOM\Advanced VPN Client\ncpclcfg.exe
C:\Programme\LANCOM\Advanced VPN Client\ncprwsnt.exe
C:\Programme\LANCOM\Advanced VPN Client\ncpsec.exe
C:\Programme\CyberLink\Shared Files\RichVideo.exe
C:\Programme\LANCOM\Advanced VPN Client\rwsrsu.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\Programme\StarMoney 8.0 S-Edition\ouservice\StarMoneyOnlineUpdate.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\RealVNC\VNC4\WinVNC4.exe
C:\Programme\ATKOSD2\ATKOSD2.exe
C:\Programme\ATK Hotkey\Hcontrol.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programme\ASUS\ATK Media\DMEDIA.EXE
C:\Programme\ASUS\ASUS Live Update\ALU.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\Programme\ASUS\Splendid\ACMON.exe
C:\Programme\ASUSTek\ASUSDVD\PDVDServ.exe
C:\Programme\Nero\Nero 7\InCD\NBHGui.exe
C:\Programme\Nero\Nero 7\InCD\InCD.exe
C:\Programme\Motorola\SMSERIAL\sm56hlpr.exe
C:\WINDOWS\system32\ACEngSvr.exe
C:\Programme\ASUS\Power4 Gear\BatteryLife.exe
C:\Programme\Wireless Console 2\wcourier.exe
C:\WINDOWS\system32\ASUSTPE.exe
C:\WINDOWS\ASScrPro.exe
C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe
C:\Programme\LANCOM\Advanced VPN Client\NcpBudgetGui.exe
C:\Programme\LANCOM\Advanced VPN Client\rwsrsu.exe
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\ATK Hotkey\ATKOSD.exe
C:\Programme\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Programme\Gemeinsame Dateien\Lexware\Update Manager\LxUpdateManager.exe
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\qmbMTuLOUQqEwqQ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\ATK Hotkey\KBFiltr.exe
C:\Programme\Gemeinsame Dateien\LightScribe\LightScribeControlPanel.exe
C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programme\Microsoft ActiveSync\Wcescomm.exe
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe
C:\Programme\ATK Hotkey\WDC.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\r86bxgw7ITQOSS.exe
C:\WINDOWS\system32\dllhost.exe
C:\Programme\Malwarebytes' Anti-Malware\mbam.exe
C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
C:\WINDOWS\notepad.exe
C:\Programme\Microsoft Office\Office12\WINWORD.EXE
C:\Programme\Internet Explorer\iexplore.exe
C:\Dokumente und Einstellungen\Administrator\Eigene Dateien\Downloads\Defogger.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.de/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = hxxp://www.asus.com/
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
uURLSearchHooks: H - No File
uURLSearchHooks: ICQToolBar: {855f3b16-6d32-4fe6-8a56-bbb695989046} - c:\programme\icq6toolbar\ICQToolBar.dll
BHO: Adobe PDF Reader: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\programme\gemeinsame dateien\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Incredibar.com Helper Object: {6e13dde1-2b6e-46ce-8b66-dc8bf36f6b99} - c:\programme\incredibar.com\incredibar\1.5.3.27\bh\incredibar.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\programme\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\programme\google\googletoolbarnotifier\5.7.7227.1100\swg.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\programme\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\programme\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: ICQToolBar: {855f3b16-6d32-4fe6-8a56-bbb695989046} - c:\programme\icq6toolbar\ICQToolBar.dll
TB: Easy-WebPrint: {327c2873-e90d-4c37-aa9d-10ac9baba46c} - c:\programme\canon\easy-webprint\Toolband.dll
TB: Incredibar Toolbar: {f9639e4a-801b-4843-aee3-03d9da199e77} - c:\programme\incredibar.com\incredibar\1.5.3.27\incredibarTlbr.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\programme\google\google toolbar\GoogleToolbar_32.dll
EB: ICQToolBar: {855f3b16-6d32-4fe6-8a56-bbb695989046} - c:\programme\icq6toolbar\ICQToolBar.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [<NO NAME>]
uRun: [StartCCC] c:\programme\ati technologies\ati.ace\core-static\CLIStart.exe
uRun: [LightScribe Control Panel] c:\programme\gemeinsame dateien\lightscribe\LightScribeControlPanel.exe -hidden
uRun: [swg] "c:\programme\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [H/PC Connection Agent] "c:\programme\microsoft activesync\Wcescomm.exe"
uRun: [Facebook Update] "c:\dokumente und einstellungen\administrator\lokale einstellungen\anwendungsdaten\facebook\update\FacebookUpdate.exe" /c /nocrashserver
mRun: [ATKOSD2] "c:\programme\atkosd2\ATKOSD2.exe"
mRun: [ATKHOTKEY] "c:\programme\atk hotkey\Hcontrol.exe"
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [SkyTel] SkyTel.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [ATKMEDIA] c:\programme\asus\atk media\DMEDIA.EXE
mRun: [ASUS Live Update] c:\programme\asus\asus live update\ALU.exe
mRun: [SynTPEnh] c:\programme\synaptics\syntp\SynTPEnh.exe
mRun: [ACMON] "c:\programme\asus\splendid\ACMON.exe"
mRun: [ABLKSR] c:\windows\ablksr\ABLKSR.exe
mRun: [RemoteControl] c:\programme\asustek\asusdvd\PDVDServ.exe
mRun: [LanguageShortcut] c:\programme\asustek\asusdvd\language\Language.exe
mRun: [NeroFilterCheck] c:\programme\gemeinsame dateien\ahead\lib\NeroCheck.exe
mRun: [SecurDisc] c:\programme\nero\nero 7\incd\NBHGui.exe
mRun: [InCD] c:\programme\nero\nero 7\incd\InCD.exe
mRun: [SMSERIAL] c:\programme\motorola\smserial\sm56hlpr.exe
mRun: [Power_Gear] c:\programme\asus\power4 gear\BatteryLife.exe 1
mRun: [Wireless Console 2] "c:\programme\wireless console 2\wcourier.exe"
mRun: [ASUSTPE] c:\windows\system32\ASUSTPE.exe
mRun: [ASUS Camera ScreenSaver] c:\windows\ASScrProlog.exe
mRun: [ASUS Screen Saver Protector] c:\windows\ASScrPro.exe
mRun: [SunJavaUpdateSched] "c:\programme\gemeinsame dateien\java\java update\jusched.exe"
mRun: [TrueImageMonitor.exe] c:\programme\acronis\trueimagehome\TrueImageMonitor.exe
mRun: [AcronisTimounterMonitor] c:\programme\acronis\trueimagehome\TimounterMonitor.exe
mRun: [Acronis Scheduler2 Service] "c:\programme\gemeinsame dateien\acronis\schedule2\schedhlp.exe"
mRun: [Adobe Reader Speed Launcher] "c:\programme\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [NcpBudgetGui] "c:\programme\lancom\advanced vpn client\NcpBudgetGui.exe" -start
mRun: [NcpPopup] "c:\programme\lancom\advanced vpn client\ncppopup.exe" noerrmsg
mRun: [NcpRsuGui] "c:\programme\lancom\advanced vpn client\rwsrsu.exe" -gui
mRun: [avgnt] "c:\programme\avira\antivir desktop\avgnt.exe" /min
mRun: [OpwareSE2] "c:\programme\scansoft\omnipagese2.0\OpwareSE2.exe"
mRun: [QuickTime Task] "c:\programme\quicktime\qttask.exe" -atboottime
mRun: [LexwareInfoService] c:\programme\gemeinsame dateien\lexware\update manager\LxUpdateManager.exe /autostart
mRun: [qmbMTuLOUQqEwqQ.exe] c:\dokumente und einstellungen\all users\anwendungsdaten\qmbMTuLOUQqEwqQ.exe
mRun: [Malwarebytes' Anti-Malware] "c:\programme\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRunOnce: [ Malwarebytes Anti-Malware ] c:\programme\malwarebytes' anti-malware\mbamgui.exe /install /silent
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\dokume~1\admini~1\startm~1\progra~1\autost~1\ccc.lnk - c:\programme\ati technologies\ati.ace\core-static\CCC.exe
StartupFolder: c:\dokume~1\admini~1\startm~1\progra~1\autost~1\onenot~1.lnk - c:\programme\microsoft office\office12\ONENOTEM.EXE
StartupFolder: c:\dokume~1\admini~1\startm~1\progra~1\autost~1\openof~1.lnk - c:\programme\openoffice.org 3\program\quickstart.exe
uPolicies-explorer: NoDesktop = 1 (0x1)
IE: Easy-WebPrint - Drucken - c:\programme\canon\easy-webprint\Resource.dll/RC_Print.html
IE: Easy-WebPrint - Schnelldruck - c:\programme\canon\easy-webprint\Resource.dll/RC_HSPrint.html
IE: Easy-WebPrint - Vorschau - c:\programme\canon\easy-webprint\Resource.dll/RC_Preview.html
IE: Easy-WebPrint - Zu Druckliste hinzufügen - c:\programme\canon\easy-webprint\Resource.dll/RC_AddToList.html
IE: Nach Microsoft E&xel exportieren - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {E59EB121-F339-4851-A3BA-FE49C35617C2} - c:\programme\icq6.5\ICQ.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\programme\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~4\INetRepl.dll
IE: {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - {2EAF5BB0-070F-11D3-9307-00C04FAE2D4F} - c:\progra~1\micros~4\INetRepl.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {6E718D87-6909-4FCE-92D4-EDCB2F725727} - hxxp://navigram.com/engine/v1111/Navigram.cab
DPF: {745395C8-D0E1-4227-8586-624CA9A10A8D} - hxxp://172.16.200.115/activex/AMC.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://172.16.200.100/activex/AMC.cab
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{DCD367F5-B82B-4284-B40E-0CD9D2F5D30D} : DhcpNameServer = 192.168.2.1
Notify: AtiExtEvent - Ati2evxx.dll
LSA: Authentication Packages = msv1_0 relog_ap nwprovau
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\programme\gemeinsame dateien\lightscribe\LSRunOnce.exe"
mASetup: ccc-core-static - msiexec /fums {857D4360-762B-978B-76AD-491AA719E47A} /qb
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\dokumente und einstellungen\administrator\anwendungsdaten\mozilla\firefox\profiles\py0mfi38.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - plugin: c:\dokumente und einstellungen\administrator\lokale einstellungen\anwendungsdaten\facebook\video\skype\npFacebookVideoCalling.dll
FF - plugin: c:\programme\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\programme\google\update\1.3.21.99\npGoogleUpdate3.dll
FF - plugin: c:\programme\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\programme\mozilla firefox\plugins\npdeployJava1.dll
.
---- FIREFOX POLICIES ----
FF - user.js: extensions.incredibar_i.newTab - false
FF - user.js: extensions.incredibar_i.tlbrSrchUrl - hxxp://mystart.Incredibar.com/?a=6PQgQRHkZJ&loc=IB_TB&i=26&search=
FF - user.js: extensions.incredibar_i.id - 20e0dc4300000000000002004e435049
FF - user.js: extensions.incredibar_i.hardId - 20e0dc4300000000000002004e435049
FF - user.js: extensions.incredibar_i.instlDay - 15308
FF - user.js: extensions.incredibar_i.vrsn - 1.5.3.27
FF - user.js: extensions.incredibar_i.vrsni - 1.5.3.27
FF - user.js: extensions.incredibar_i.vrsnTs - 1.5.3.270:39:10
FF - user.js: extensions.incredibar_i.prtnrId - Incredibar
FF - user.js: extensions.incredibar_i.prdct - incredibar
FF - user.js: extensions.incredibar_i.aflt - orgnl
FF - user.js: extensions.incredibar_i.smplGrp - none
FF - user.js: extensions.incredibar_i.tlbrId - base
FF - user.js: extensions.incredibar_i.instlRef -
FF - user.js: extensions.incredibar_i.dfltLng -
FF - user.js: extensions.incredibar_i.excTlbr - false
FF - user.js: extensions.incredibar_i.ms_url_id -
FF - user.js: extensions.incredibar_i.upn2 - 6PQgQRHkZJ
FF - user.js: extensions.incredibar_i.upn2n - 92541945858085051
FF - user.js: extensions.incredibar_i.productid - 26
FF - user.js: extensions.incredibar_i.installerproductid - 26
FF - user.js: extensions.incredibar_i.did - 10590
FF - user.js: extensions.incredibar_i.ppd -
.
============= SERVICES / DRIVERS ===============
.
R1 avgio;avgio;c:\programme\avira\antivir desktop\avgio.sys [2010-12-5 11608]
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\avira\antivir desktop\sched.exe [2010-12-5 136360]
R2 AntiVirService;Avira AntiVir Guard;c:\programme\avira\antivir desktop\avguard.exe [2010-12-5 269480]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2010-12-5 66616]
R2 ICQ Service;ICQ Service;c:\programme\icq6toolbar\ICQ Service.exe [2009-12-17 222968]
R2 MBAMService;MBAMService;c:\programme\malwarebytes' anti-malware\mbamservice.exe [2012-2-26 652360]
R2 ncpclcfg;ncpclcfg;c:\programme\lancom\advanced vpn client\ncpclcfg.exe [2009-10-5 86016]
R2 ncprwsnt;ncprwsnt;c:\programme\lancom\advanced vpn client\NCPRWSNT.EXE [2009-10-5 1078792]
R2 NcpSec;NcpSec;c:\programme\lancom\advanced vpn client\NCPSEC.EXE [2009-10-5 32768]
R2 rwsrsu;RwsRsu;c:\programme\lancom\advanced vpn client\rwsrsu.exe [2009-10-5 850432]
R2 StarMoney 8.0 OnlineUpdate;StarMoney 8.0 OnlineUpdate;c:\programme\starmoney 8.0 s-edition\ouservice\StarMoneyOnlineUpdate.exe [2012-1-3 688648]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-2-26 20464]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2012-2-26 40776]
R3 NcpFiltMP;NcpFiltMP;c:\windows\system32\drivers\ncpvaxp.sys [2009-10-5 79528]
S2 gupdate;Google Update Service (gupdate);c:\programme\google\update\GoogleUpdate.exe [2010-4-1 135664]
S3 gupdatem;Google Update-Dienst (gupdatem);c:\programme\google\update\GoogleUpdate.exe [2010-4-1 135664]
S3 NcpFilt;Ncp Filter Service;c:\windows\system32\drivers\ncpvaxp.sys [2009-10-5 79528]
S3 ncpvaxp;NCP Secure Client Virtual Adapter Driver;c:\windows\system32\drivers\ncpvaxp.sys [2009-10-5 79528]
.
=============== Created Last 30 ================
.
2012-02-26 21:17:32 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2012-02-26 21:17:31 -------- d-----w- c:\dokumente und einstellungen\administrator\anwendungsdaten\Malwarebytes
2012-02-26 21:17:24 20464 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-02-26 21:17:24 -------- d-----w- c:\dokumente und einstellungen\all users\anwendungsdaten\Malwarebytes
2012-02-26 21:17:23 -------- d-----w- c:\programme\Malwarebytes' Anti-Malware
2012-02-26 20:28:16 -------- d-----w- c:\windows\system32\appmgmt
2012-02-26 17:01:11 355328 ---ha-w- c:\dokumente und einstellungen\all users\anwendungsdaten\r86bxgw7ITQOSS.exe
2012-02-26 12:53:02 450048 ---ha-w- c:\dokumente und einstellungen\all users\anwendungsdaten\qmbMTuLOUQqEwqQ.exe
2012-02-16 17:50:02 3072 ---h--w- c:\windows\system32\iacenc.dll
2012-02-16 17:50:02 3072 ---h--w- c:\windows\system32\dllcache\iacenc.dll
2012-02-10 18:36:27 -------- d--h--w- c:\programme\OnlineControl
2012-02-09 22:40:34 -------- d-sh--w- C:\FOUND.000
2012-01-29 21:55:49 -------- d--h--w- c:\dokumente und einstellungen\administrator\lokale einstellungen\anwendungsdaten\Facebook
.
==================== Find3M ====================
.
2012-02-17 00:35:04 4542 ---ha-w- c:\windows\system32\PerfStringBackup.TMP
2012-01-12 17:20:28 1860096 ---ha-w- c:\windows\system32\win32k.sys
2011-12-19 08:08:30 832512 ---ha-w- c:\windows\system32\wininet.dll
2011-12-19 08:08:30 78336 ---ha-w- c:\windows\system32\ieencode.dll
2011-12-19 08:08:30 1830912 ---h--w- c:\windows\system32\inetcpl.cpl
2011-12-19 08:08:28 17408 ---h--w- c:\windows\system32\corpol.dll
2011-10-18 22:30:10 38958968 ---ha-w- c:\programme\QuickTimeInstaller.exe
2011-10-01 22:57:54 7886336 ---ha-w- c:\programme\Microsoft_ActiveSync_4.5.msi
2011-10-01 22:55:54 28895326 ---ha-w- c:\programme\Phone_Software_Update-Windows_Mobile_IF1.exe
2011-09-17 12:41:44 286104 ---ha-w- c:\programme\SoftonicDownloader_fuer_photo-flash-maker.exe
2007-03-12 17:59:00 299008 ---ha-w- c:\programme\navigram_register.exe
.
============= FINISH: 22:39:20,92 ===============