TR/Drop.VB.lhn.6

Logfile of random's system information tool 1.06 (written by random/random)
Run by Bianca at 2009-07-16 19:16:55
Microsoft Windows XP Professional Service Pack 3
System drive C: has 4 GB (45%) free of 8 GB
Total RAM: 1271 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:16:59, on 16.07.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\T-Clock\TClock.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\msiexec.exe
C:\Dokumente und Einstellungen\Bianca\Desktop\RSIT.exe
C:\Programme\Trend Micro\HijackThis\Bianca.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Acronis*True*Image Monitor] "C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] D:\Programme\CCleaner\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: firefox.exe.lnk = C:\Programme\Mozilla Firefox\firefox.exe
O4 - Startup: Sygate Personal Firewall.lnk = C:\Programme\Sygate\SPF\Smc.exe
O4 - Startup: TClock.lnk = C:\Programme\T-Clock\TClock.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Programme\Sygate\SPF\smc.exe

--
End of file - 4822 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Klick-Wartung.job
C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1136900144.job
C:\WINDOWS\tasks\NSSstub.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 322368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2009-06-24 41368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-06-24 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2004-07-01 118784]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"Acronis*True*Image Monitor"=C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe [2006-01-10 437264]
"Acronis Scheduler2 Service"=C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe [2006-01-10 81920]
"avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"SunJavaUpdateSched"=C:\Programme\Java\jre6\bin\jusched.exe [2009-06-24 148888]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=D:\Programme\CCleaner\Malwarebytes' Anti-Malware\mbamgui.exe [2009-07-13 414992]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MsnMsgr"=C:\Programme\MSN Messenger\MsnMsgr.Exe [2007-01-19 5674352]
""= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare]
C:\Programme\BearShare\BearShare.exe /pause []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
G:\Programme\ICQ6\ICQ.exe [2008-09-01 173304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando]
C:\Programme\Pando Networks\Pando\Pando.exe [2009-04-14 4044616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Booster]
D:\Programme\pcbooster.exe [2007-12-07 14503936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^Bianca^Startmenü^Programme^Autostart^OpenOffice.org 2.0.lnk]
C:\PROGRA~1\OPENOF~1.0\program\QUICKS~1.EXE [2005-09-23 61440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"usnjsvc"=3
"aawservice"=2
"a2free"=2

C:\Dokumente und Einstellungen\Bianca\Startmenü\Programme\Autostart
firefox.exe.lnk - C:\Programme\Mozilla Firefox\firefox.exe
Sygate Personal Firewall.lnk - C:\Programme\Sygate\SPF\Smc.exe
TClock.lnk - C:\Programme\T-Clock\TClock.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2004-07-01 344064]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"DisableLocalMachineRun"=
"DisableLocalMachineRunOnce"=
"DisableCurrentUserRun"=
"DisableCurrentUserRunOnce"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\Gemeinsame Dateien\aol\ACS\AOLDial.exe"="C:\Programme\Gemeinsame Dateien\aol\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Programme\Gemeinsame Dateien\aol\ACS\AOLacsd.exe"="C:\Programme\Gemeinsame Dateien\aol\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Programme\AOL 9.0\waol.exe"="C:\Programme\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programme\MSN Messenger\msnmsgr.exe"="C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Programme\Pando Networks\Pando\pando.exe"="C:\Programme\Pando Networks\Pando\pando.exe:*:Enabled:pando"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\Gemeinsame Dateien\aol\ACS\AOLDial.exe"="C:\Programme\Gemeinsame Dateien\aol\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Programme\Gemeinsame Dateien\aol\ACS\AOLacsd.exe"="C:\Programme\Gemeinsame Dateien\aol\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Programme\AOL 9.0\waol.exe"="C:\Programme\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programme\MSN Messenger\msnmsgr.exe"="C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{7375970a-4f20-11dc-9a24-003005672ab1}]
shell\AutoRun\command - L:\USBSuite.exe


======List of files/folders created in the last 2 months======

2009-07-16 19:16:55 ----DC---- C:\rsit
2009-07-16 17:43:04 ----DC---- C:\Dokumente und Einstellungen\Bianca\Anwendungsdaten\Malwarebytes
2009-07-16 17:42:16 ----DC---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2009-07-10 01:50:43 ----DC---- C:\Programme\CCleaner
2009-07-08 01:43:27 ----AC---- C:\WINDOWS\system32\javaws.exe
2009-07-08 01:43:27 ----AC---- C:\WINDOWS\system32\javaw.exe
2009-07-08 01:43:27 ----AC---- C:\WINDOWS\system32\java.exe
2009-07-08 01:30:12 ----DC---- C:\WINDOWS\system32\Adobe
2009-06-26 12:24:38 ----DC---- C:\Programme\Gemeinsame Dateien\Logox.4.0
2009-06-26 12:24:38 ----AC---- C:\WINDOWS\LgxSetup.exe
2009-06-26 12:23:13 ----DC---- C:\Programme\Lernwerkstatt 6
2009-06-24 12:58:06 ----AC---- C:\WINDOWS\system32\deploytk.dll
2009-06-16 13:48:37 ----AC---- C:\WINDOWS\system32\wmpns.dll
2009-06-16 13:47:50 ----DC---- C:\WINDOWS\Prefetch
2009-06-16 13:29:07 ----C---- C:\WINDOWS\system32\msxml6r.dll
2009-06-16 13:29:06 ----C---- C:\WINDOWS\system32\msxml6.dll
2009-06-16 13:28:35 ----C---- C:\WINDOWS\system32\comsdupd.exe
2009-06-16 13:28:28 ----C---- C:\WINDOWS\system32\ati3d1ag.dll
2009-06-16 13:28:28 ----C---- C:\WINDOWS\system32\ati2dvag.dll
2009-06-16 13:28:28 ----C---- C:\WINDOWS\system32\ati2dvaa.dll
2009-06-16 13:28:28 ----C---- C:\WINDOWS\system32\ati2cqag.dll
2009-06-16 13:28:28 ----C---- C:\WINDOWS\system32\aaclient.dll
2009-06-16 13:28:27 ----C---- C:\WINDOWS\system32\bitsprx4.dll
2009-06-16 13:28:27 ----C---- C:\WINDOWS\system32\azroles.dll
2009-06-16 13:28:27 ----C---- C:\WINDOWS\system32\ativvaxx.dll
2009-06-16 13:28:27 ----C---- C:\WINDOWS\system32\ativtmxx.dll
2009-06-16 13:28:27 ----C---- C:\WINDOWS\system32\ati3duag.dll
2009-06-16 13:28:26 ----C---- C:\WINDOWS\system32\dot3api.dll
2009-06-16 13:28:26 ----C---- C:\WINDOWS\system32\dimsroam.dll
2009-06-16 13:28:26 ----C---- C:\WINDOWS\system32\dimsntfy.dll
2009-06-16 13:28:26 ----C---- C:\WINDOWS\system32\dhcpqec.dll
2009-06-16 13:28:26 ----C---- C:\WINDOWS\system32\credssp.dll
2009-06-16 13:28:25 ----C---- C:\WINDOWS\system32\eapp3hst.dll
2009-06-16 13:28:25 ----C---- C:\WINDOWS\system32\eapolqec.dll
2009-06-16 13:28:25 ----C---- C:\WINDOWS\system32\dot3ui.dll
2009-06-16 13:28:25 ----C---- C:\WINDOWS\system32\dot3svc.dll
2009-06-16 13:28:25 ----C---- C:\WINDOWS\system32\dot3msm.dll
2009-06-16 13:28:25 ----C---- C:\WINDOWS\system32\dot3gpclnt.dll
2009-06-16 13:28:25 ----C---- C:\WINDOWS\system32\dot3dlg.dll
2009-06-16 13:28:25 ----C---- C:\WINDOWS\system32\dot3cfg.dll
2009-06-16 13:28:24 ----C---- C:\WINDOWS\system32\eapsvc.dll
2009-06-16 13:28:24 ----C---- C:\WINDOWS\system32\eapqec.dll
2009-06-16 13:28:24 ----C---- C:\WINDOWS\system32\eappprxy.dll
2009-06-16 13:28:24 ----C---- C:\WINDOWS\system32\eapphost.dll
2009-06-16 13:28:24 ----C---- C:\WINDOWS\system32\eappgnui.dll
2009-06-16 13:28:24 ----C---- C:\WINDOWS\system32\eappcfg.dll
2009-06-16 13:28:23 ----C---- C:\WINDOWS\system32\hsfcisp2.dll
2009-06-16 13:28:22 ----C---- C:\WINDOWS\system32\kbdbhc.dll
2009-06-16 13:28:21 ----C---- C:\WINDOWS\system32\l2gpstore.dll
2009-06-16 13:28:21 ----C---- C:\WINDOWS\system32\kmsvc.dll
2009-06-16 13:28:21 ----C---- C:\WINDOWS\system32\kbdpash.dll
2009-06-16 13:28:21 ----C---- C:\WINDOWS\system32\kbdnepr.dll
2009-06-16 13:28:21 ----C---- C:\WINDOWS\system32\kbdiultn.dll
2009-06-16 13:28:20 ----C---- C:\WINDOWS\system32\mmcperf.exe
2009-06-16 13:28:20 ----C---- C:\WINDOWS\system32\mmcfxcommon.dll
2009-06-16 13:28:20 ----C---- C:\WINDOWS\system32\mmcex.dll
2009-06-16 13:28:20 ----C---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2009-06-16 13:28:20 ----C---- C:\WINDOWS\system32\mdmxsdk.dll
2009-06-16 13:28:19 ----C---- C:\WINDOWS\system32\napipsec.dll
2009-06-16 13:28:19 ----C---- C:\WINDOWS\system32\mtxparhd.dll
2009-06-16 13:28:19 ----C---- C:\WINDOWS\system32\msshavmsg.dll
2009-06-16 13:28:19 ----C---- C:\WINDOWS\system32\mssha.dll
2009-06-16 13:28:18 ----C---- C:\WINDOWS\system32\onex.dll
2009-06-16 13:28:18 ----C---- C:\WINDOWS\system32\nv4_disp.dll
2009-06-16 13:28:18 ----C---- C:\WINDOWS\system32\napstat.exe
2009-06-16 13:28:18 ----C---- C:\WINDOWS\system32\napmontr.dll
2009-06-16 13:28:17 ----C---- C:\WINDOWS\system32\qagent.dll
2009-06-16 13:28:17 ----C---- C:\WINDOWS\system32\photometadatahandler.dll
2009-06-16 13:28:16 ----C---- C:\WINDOWS\system32\setupn.exe
2009-06-16 13:28:16 ----C---- C:\WINDOWS\system32\s3gnb.dll
2009-06-16 13:28:16 ----C---- C:\WINDOWS\system32\rhttpaa.dll
2009-06-16 13:28:16 ----C---- C:\WINDOWS\system32\rasqec.dll
2009-06-16 13:28:16 ----C---- C:\WINDOWS\system32\qutil.dll
2009-06-16 13:28:16 ----C---- C:\WINDOWS\system32\qcliprov.dll
2009-06-16 13:28:16 ----C---- C:\WINDOWS\system32\qagentrt.dll
2009-06-16 13:28:14 ----C---- C:\WINDOWS\system32\windowscodecsext.dll
2009-06-16 13:28:14 ----C---- C:\WINDOWS\system32\windowscodecs.dll
2009-06-16 13:28:14 ----C---- C:\WINDOWS\system32\verclsid.exe
2009-06-16 13:28:14 ----C---- C:\WINDOWS\system32\tzchange.exe
2009-06-16 13:28:14 ----C---- C:\WINDOWS\system32\tspkg.dll
2009-06-16 13:28:14 ----C---- C:\WINDOWS\system32\tsgqec.dll
2009-06-16 13:28:13 ----C---- C:\WINDOWS\system32\wmphoto.dll
2009-06-16 13:28:13 ----C---- C:\WINDOWS\system32\wlanapi.dll
2009-06-16 13:28:11 ----DC---- C:\WINDOWS\system32\de-de
2009-06-16 13:28:11 ----C---- C:\WINDOWS\system32\xmllite.dll
2009-06-16 13:28:06 ----DC---- C:\Programme\msn
2009-06-16 13:28:05 ----DC---- C:\WINDOWS\system32\de
2009-06-16 13:28:05 ----DC---- C:\WINDOWS\l2schemas
2009-06-16 13:28:04 ----DC---- C:\WINDOWS\system32\bits
2009-06-16 13:23:42 ----DC---- C:\WINDOWS\ServicePackFiles
2009-06-16 13:21:07 ----DC---- C:\WINDOWS\network diagnostic
2009-06-16 13:19:17 ----AC---- C:\WINDOWS\002768_.tmp
2009-06-16 13:14:32 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-06-12 21:26:59 ----AC---- C:\WINDOWS\windowsxp-kb936929-sp3-x86-deu_f2dcd2211384a78df215c696a7fd1a7949dc794b.exe

======List of files/folders modified in the last 2 months======

2009-07-16 19:08:01 ----SHDC---- C:\WINDOWS\Installer
2009-07-16 17:42:21 ----DC---- C:\WINDOWS\system32\drivers
2009-07-16 17:39:15 ----DC---- C:\Programme\Mozilla Firefox
2009-07-16 17:27:19 ----DC---- C:\WINDOWS\Temp
2009-07-16 17:26:23 ----DC---- C:\WINDOWS
2009-07-16 10:49:52 ----DC---- C:\Programme\Mozilla Thunderbird
2009-07-14 18:48:54 ----DC---- C:\WINDOWS\system32\CatRoot2
2009-07-14 18:10:52 ----N---- C:\WINDOWS\SchedLgU.Txt
2009-07-13 20:20:39 ----DC---- C:\Dokumente und Einstellungen\Bianca\Anwendungsdaten\OpenOffice.org2
2009-07-13 19:24:27 ----HDC---- C:\WINDOWS\inf
2009-07-13 18:55:00 ----DC---- C:\WINDOWS\system32
2009-07-12 23:33:26 ----AC---- C:\WINDOWS\unins000.exe
2009-07-10 01:51:48 ----DC---- C:\WINDOWS\Debug
2009-07-10 01:50:43 ----RDC---- C:\Programme
2009-07-09 12:33:16 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-07-09 12:33:11 ----DC---- C:\WINDOWS\system32\inetsrv
2009-07-09 12:23:15 ----DC---- C:\Programme\Spybot - Search & Destroy
2009-07-09 12:23:14 ----DC---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
2009-07-09 12:22:18 ----DC---- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard
2009-07-08 12:37:44 ----DC---- C:\Dokumente und Einstellungen\Bianca\Anwendungsdaten\Azureus
2009-07-08 11:08:00 ----DC---- C:\Programme\Java
2009-07-08 11:07:27 ----DC---- C:\Programme\Gemeinsame Dateien
2009-07-08 01:31:55 ----DC---- C:\Dokumente und Einstellungen\Bianca\Anwendungsdaten\Adobe
2009-07-08 01:31:17 ----SDC---- C:\WINDOWS\Tasks
2009-07-07 23:33:29 ----RSDC---- C:\WINDOWS\Fonts
2009-06-26 12:24:46 ----HDC---- C:\Programme\InstallShield Installation Information
2009-06-16 13:51:24 ----SHC---- C:\boot.ini
2009-06-16 13:51:24 ----AC---- C:\WINDOWS\win.ini
2009-06-16 13:51:24 ----AC---- C:\WINDOWS\system.ini
2009-06-16 13:50:02 ----DC---- C:\Programme\MSN Messenger
2009-06-16 13:48:36 ----DC---- C:\Programme\Windows Media Player
2009-06-16 13:47:24 ----DC---- C:\WINDOWS\system32\Setup
2009-06-16 13:47:23 ----DC---- C:\WINDOWS\system32\wbem
2009-06-16 13:47:23 ----DC---- C:\WINDOWS\AppPatch
2009-06-16 13:33:58 ----DC---- C:\WINDOWS\system32\CatRoot
2009-06-16 13:33:50 ----DC---- C:\WINDOWS\security
2009-06-16 13:29:17 ----DC---- C:\WINDOWS\WinSxS
2009-06-16 13:29:13 ----DC---- C:\Programme\Messenger
2009-06-16 13:29:07 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-06-16 13:29:03 ----DC---- C:\WINDOWS\Help
2009-06-16 13:28:37 ----DC---- C:\WINDOWS\ehome
2009-06-16 13:28:33 ----DC---- C:\WINDOWS\ime
2009-06-16 13:28:11 ----DC---- C:\WINDOWS\system32\usmt
2009-06-16 13:28:06 ----DC---- C:\Programme\Internet Explorer
2009-06-16 13:28:04 ----DC---- C:\WINDOWS\PeerNet
2009-06-16 13:28:04 ----DC---- C:\Programme\Movie Maker
2009-06-16 13:23:29 ----DC---- C:\WINDOWS\system32\Restore
2009-06-16 13:23:28 ----DC---- C:\WINDOWS\system32\npp
2009-06-16 13:23:27 ----DC---- C:\WINDOWS\msagent
2009-06-16 13:23:25 ----DC---- C:\WINDOWS\srchasst
2009-06-16 13:23:24 ----DC---- C:\Programme\NetMeeting
2009-06-16 13:23:23 ----DC---- C:\WINDOWS\system32\Com
2009-06-16 13:23:19 ----DC---- C:\Programme\Windows NT
2009-06-16 13:23:19 ----DC---- C:\Programme\Outlook Express
2009-06-16 13:23:15 ----DC---- C:\Programme\Gemeinsame Dateien\System
2009-06-16 13:22:47 ----DC---- C:\WINDOWS\system32\oobe
2009-06-16 13:22:44 ----DC---- C:\WINDOWS\system
2009-06-16 13:19:12 ----DC---- C:\WINDOWS\system32\ReinstallBackups
2009-06-09 12:39:57 ----AC---- C:\WINDOWS\NeroDigital.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2006-01-10 82380]
R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-04-28 96104]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-06-12 28520]
R1 wpsdrvnt;wpsdrvnt; \??\C:\WINDOWS\system32\drivers\wpsdrvnt.sys []
R2 ACEDRV07;ACEDRV07; \??\C:\WINDOWS\system32\drivers\ACEDRV07.sys []
R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2006-01-10 8552]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-04-28 55640]
R2 tifsfilter;Acronis TrueImage FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2006-01-10 28928]
R2 wg3n;SyGate for NT, wg3n; C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys [2004-02-02 11914]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2004-02-24 400384]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-04-28 616124]
R3 AN983;ADMtek AN983/AN985/ADM951X 10/100Mbps Fast Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\AN983.sys [2003-04-18 38784]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2004-07-01 724221]
R3 intelppm;Intel-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R3 MODEMCSA;Unimodem-Datenstromfiltergerät; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\system32\DRIVERS\Mtlmnt5.sys [2003-07-16 221736]
R3 Slntamr;SmartLink AMR_PCI Driver; C:\WINDOWS\system32\DRIVERS\slntamr.sys [2003-08-20 548952]
R3 SlWdmSup;SlWdmSup; C:\WINDOWS\system32\DRIVERS\SlWdmSup.sys [2003-07-02 39348]
R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;USB2-aktivierter Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbstor;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2003-03-09 51024]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2003-03-09 16080]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2003-03-09 21456]
S3 Mtlstrm;Mtlstrm; C:\WINDOWS\system32\DRIVERS\Mtlstrm.sys [2003-07-02 1301128]
S3 NtMtlFax;NtMtlFax; C:\WINDOWS\system32\DRIVERS\NtMtlFax.sys [2003-07-02 167384]
S3 SlNtHal;SlNtHal; C:\WINDOWS\system32\DRIVERS\Slnthal.sys [2003-07-02 86128]
S3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;USB-Scannertreiber; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S4 sr;Filtertreiber für Systemwiederherstellung; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73472]