| |
| |||||||
Log-Analyse und Auswertung: Irgendwas stimmt nicht.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
09.08.2009, 18:03
| #1 |
| |  Irgendwas stimmt nicht. Hallo ich hab hier n Log. Bei mir stimmt irgendwas nicht kann mal jemand nachsehen? Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:00:58, on 09.08.2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18294) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe C:\Program Files\Launch Manager\LManager.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Windows\ehome\ehtray.exe C:\Program Files\DAEMON Tools Pro\DTProAgent.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Windows\system32\conime.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=0&o=vp32&d=0209&m=aspire_8930 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=0&o=vp32&d=0209&m=aspire_8930 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=0&o=vp32&d=0209&m=aspire_8930 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe" O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe O4 - HKLM\..\Run: [ZPdtWzdVitaKey MC3000] "C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe" show O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" -autorun O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe O9 - Extra 'Tools' menuitem: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe O9 - Extra button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll O13 - Gopher Prefix: O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/german/partner/de/kavwebscan_unicode.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: AWinNotifyVitaKey MC3000 - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: BlackfishSQL - CodeGear - C:\Program Files\CodeGear\RAD Studio\6.0\bin\BSQLServer.exe O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iGroupTec Service (IGBASVC) - Unknown owner - C:\Program Files\Acer\Acer Bio Protection\BASVC.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing) O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe -- End of file - 10888 bytes |
|
10.08.2009, 14:22
| #2 | |
| /// Malwareteam   | Irgendwas stimmt nicht.Zitat:
Das Logfile sieht nicht verdächtig aus. Gruss Swiss |
|
10.08.2009, 22:10
| #3 |
| | Irgendwas stimmt nicht. ich weiß net was ich tun soll
__________________ . Auf einmal kann ich keine mails mehr schreiben, mein pc ist super langsam. Obwohl ich ihn letzte woche erst neu gemacht hatte. Ich habe einen hacker in verdacht oder spy programm... kann das sein? Ich wäre euch für einen tip sehr dankbar. hier ist der log file: Malwarebytes' Anti-Malware 1.40 Datenbank Version: 2594 Windows 5.1.2600 Service Pack 3 10.08.2009 23:32:59 mbam-log-2009-08-10 (23-32-59).txt Scan-Methode: Quick-Scan Durchsuchte Objekte: 77057 Laufzeit: 2 minute(s), 58 second(s) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) und der hier: Logfile of random's system information tool 1.06 (written by random/random) Run by xxxxxx at 2009-08-10 23:33:38 Microsoft Windows XP Home Edition Service Pack 3 System drive C: has 23 GB (78%) free of 30 GB Total RAM: 959 MB (59% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:33:40, on 10.08.2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\Avira\AntiVir Desktop\sched.exe C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe C:\Programme\Avira\AntiVir Desktop\avguard.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\sistray.EXE C:\WINDOWS\system32\keyhook.exe C:\Programme\Avira\AntiVir Desktop\avgnt.exe C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe C:\WINDOWS\vsnp2std.exe C:\WINDOWS\system32\ctfmon.exe C:\Programme\Skype\Phone\Skype.exe C:\Programme\Skype\Plugin Manager\skypePM.exe C:\Dokumente und Einstellungen\xxxxx\Desktop\RSIT.exe C:\Programme\Trend Micro\HijackThis\xxxxxx.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe" O4 - HKLM\..\Run: [snp2std] C:\WINDOWS\vsnp2std.exe O4 - HKLM\..\Run: [TMRUBottedTray] "C:\Programme\Trend Micro\RUBotted\TMRUBottedTray.exe" O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [IncrediMail] C:\Programme\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Programme\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1248635914304 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe O23 - Service: Trend Micro RUBotted Service (RUBotted) - Trend Micro Inc. - C:\Programme\Trend Micro\RUBotted\TMRUBotted.exe -- End of file - 4601 bytes teil 2 folgt!!! Geändert von dragonheart1 (10.08.2009 um 22:52 Uhr) |
|
10.08.2009, 22:54
| #4 |
| | Irgendwas stimmt nicht. teil 2: ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live Anmelde-Hilfsprogramm - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SiS Tray"=C:\WINDOWS\system32\sistray.EXE [2003-10-30 667648] "SiS Windows KeyHook"=C:\WINDOWS\system32\keyhook.exe [2003-10-30 249856] "avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153] "TrueImageMonitor.exe"=C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe [2008-10-03 4378000] "AcronisTimounterMonitor"=C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe [2008-10-03 962480] "Acronis Scheduler2 Service"=C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe [2008-10-03 165144] "snp2std"=C:\WINDOWS\vsnp2std.exe [2005-11-16 344064] "TMRUBottedTray"=C:\Programme\Trend Micro\RUBotted\TMRUBottedTray.exe [2008-11-06 288088] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Malwarebytes' Anti-Malware"=C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe [2009-08-03 419088] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] "IncrediMail"=C:\Programme\IncrediMail\bin\IncMail.exe [2009-05-03 245760] "Messenger (Yahoo!)"=C:\Programme\Yahoo!\Messenger\YahooMessenger.exe [2009-05-26 4351216] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Programme\IncrediMail\bin\IncMail.exe"="C:\Programme\IncrediMail\bin\IncMail.exe:*:Enabled:IncrediMail" "C:\Programme\IncrediMail\bin\ImApp.exe"="C:\Programme\IncrediMail\bin\ImApp.exe:*:Enabled:IncrediMail" "C:\Programme\IncrediMail\bin\ImpCnt.exe"="C:\Programme\IncrediMail\bin\ImpCnt.exe:*:Enabled:IncrediMail" "C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Programme\Yahoo!\Messenger\YahooMessenger.exe"="C:\Programme\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger" "C:\Programme\Skype\Phone\Skype.exe"="C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" ======List of files/folders created in the last 1 months====== 2009-08-10 23:33:38 ----D---- C:\rsit 2009-08-10 23:22:20 ----D---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\Malwarebytes 2009-08-10 23:22:14 ----D---- C:\Programme\Malwarebytes' Anti-Malware 2009-08-10 23:22:14 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes 2009-08-10 22:28:05 ----HD---- C:\WINDOWS\PIF 2009-08-10 21:44:04 ----D---- C:\WINDOWS\LastGood 2009-08-10 21:44:00 ----D---- C:\Programme\Trend Micro 2009-08-10 21:43:22 ----D---- C:\Dokumente und Einstellungen\xxxxx\Anwendungsdaten\InstallShield 2009-08-10 10:23:40 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$ 2009-08-10 09:47:41 ----A---- C:\WINDOWS\system32\muweb.dll 2009-08-10 09:47:41 ----A---- C:\WINDOWS\system32\mucltui.dll.mui 2009-08-10 09:47:41 ----A---- C:\WINDOWS\system32\mucltui.dll 2009-08-09 22:12:49 ----A---- C:\WINDOWS\system32\vfwwdm32.dll 2009-08-09 22:10:45 ----A---- C:\WINDOWS\WindowsXP-KB822603-x86.exe 2009-08-09 22:10:45 ----A---- C:\WINDOWS\vsnp2std.exe 2009-08-09 22:10:45 ----A---- C:\WINDOWS\snp2std.ini 2009-08-09 22:10:44 ----D---- C:\Programme\Trust 2009-08-09 22:10:44 ----A---- C:\WINDOWS\vsnp2std.dll 2009-08-09 22:10:44 ----A---- C:\WINDOWS\system32\csnp2std.dll 2009-08-09 22:10:44 ----A---- C:\WINDOWS\rsnp2std.dll 2009-08-09 22:10:32 ----D---- C:\download 2009-08-09 22:09:49 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Messenger Plus! 2009-08-09 21:34:54 ----A---- C:\ashampoo-acdw-log.txt 2009-08-09 21:34:53 ----D---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\Ashampoo 2009-08-09 21:30:51 ----D---- C:\Programme\Ashampoo 2009-08-09 21:24:19 ----D---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\skypePM 2009-08-09 21:23:06 ----D---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\Skype 2009-08-09 21:22:39 ----D---- C:\Programme\Skype 2009-08-09 21:22:39 ----D---- C:\Programme\Gemeinsame Dateien\Skype 2009-08-09 21:22:33 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype 2009-08-09 21:17:24 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Yahoo! 2009-08-09 21:17:21 ----D---- C:\Programme\Yahoo! 2009-08-09 21:15:06 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Google 2009-08-09 21:09:56 ----D---- C:\Programme\Messenger Plus! Live 2009-08-09 21:08:41 ----D---- C:\Programme\CCleaner 2009-08-09 18:35:12 ----D---- C:\Programme\Microsoft 2009-08-09 18:34:55 ----D---- C:\Programme\Windows Live SkyDrive 2009-08-09 18:34:33 ----D---- C:\Programme\Windows Live 2009-08-09 18:12:33 ----D---- C:\Programme\Gemeinsame Dateien\Windows Live 2009-08-09 18:00:03 ----D---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\WinRAR 2009-07-26 22:35:51 ----D---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\Acronis 2009-07-26 22:26:25 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\IM 2009-07-26 22:25:40 ----D---- C:\Programme\IncrediMail 2009-07-26 22:25:40 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\IncrediMail 2009-07-26 22:05:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$ 2009-07-26 22:05:01 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$ 2009-07-26 22:04:56 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$ 2009-07-26 22:04:50 ----HDC---- C:\WINDOWS\$NtUninstallKB969897$ 2009-07-26 22:04:44 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$ 2009-07-26 22:04:39 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$ 2009-07-26 22:04:35 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$ 2009-07-26 22:04:14 ----D---- C:\WINDOWS\ie8updates 2009-07-26 22:03:59 ----D---- C:\WINDOWS\WBEM 2009-07-26 22:03:11 ----HDC---- C:\WINDOWS\ie8 2009-07-26 22:02:22 ----A---- C:\WINDOWS\system32\MRT.exe 2009-07-26 21:58:11 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$ 2009-07-26 21:58:06 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$ 2009-07-26 21:58:01 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$ 2009-07-26 21:57:49 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$ 2009-07-26 21:57:43 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$ 2009-07-26 21:57:37 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$ 2009-07-26 21:57:34 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$ 2009-07-26 21:57:30 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$ 2009-07-26 21:57:26 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$ 2009-07-26 21:57:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$ 2009-07-26 21:57:18 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$ 2009-07-26 21:57:14 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$ 2009-07-26 21:57:09 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$ 2009-07-26 21:57:05 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$ 2009-07-26 21:57:01 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$ 2009-07-26 21:56:56 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$ 2009-07-26 21:56:51 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$ 2009-07-26 21:56:47 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$ 2009-07-26 21:56:43 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$ 2009-07-26 21:56:39 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$ 2009-07-26 21:56:35 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$ 2009-07-26 21:56:32 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$ 2009-07-26 21:56:27 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$ 2009-07-26 21:56:22 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$ 2009-07-26 21:56:15 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$ 2009-07-26 21:56:10 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$ 2009-07-26 21:56:04 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$ 2009-07-26 21:53:33 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Windows Genuine Advantage 2009-07-26 21:48:59 ----D---- C:\WINDOWS\Prefetch 2009-07-26 21:44:49 ----N---- C:\WINDOWS\system32\msxml6r.dll 2009-07-26 21:44:49 ----A---- C:\WINDOWS\system32\msxml6.dll 2009-07-26 21:44:34 ----N---- C:\WINDOWS\system32\bitsprx4.dll 2009-07-26 21:44:34 ----N---- C:\WINDOWS\system32\azroles.dll 2009-07-26 21:44:34 ----N---- C:\WINDOWS\system32\ativvaxx.dll 2009-07-26 21:44:34 ----N---- C:\WINDOWS\system32\ativtmxx.dll 2009-07-26 21:44:34 ----N---- C:\WINDOWS\system32\ati3duag.dll 2009-07-26 21:44:34 ----N---- C:\WINDOWS\system32\ati3d1ag.dll 2009-07-26 21:44:34 ----N---- C:\WINDOWS\system32\ati2dvag.dll 2009-07-26 21:44:34 ----N---- C:\WINDOWS\system32\ati2dvaa.dll 2009-07-26 21:44:34 ----N---- C:\WINDOWS\system32\ati2cqag.dll 2009-07-26 21:44:34 ----N---- C:\WINDOWS\system32\aaclient.dll 2009-07-26 21:44:33 ----N---- C:\WINDOWS\system32\dot3ui.dll 2009-07-26 21:44:33 ----N---- C:\WINDOWS\system32\dot3svc.dll 2009-07-26 21:44:33 ----N---- C:\WINDOWS\system32\dot3msm.dll 2009-07-26 21:44:33 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll 2009-07-26 21:44:33 ----N---- C:\WINDOWS\system32\dot3dlg.dll 2009-07-26 21:44:33 ----N---- C:\WINDOWS\system32\dot3cfg.dll 2009-07-26 21:44:33 ----N---- C:\WINDOWS\system32\dot3api.dll 2009-07-26 21:44:33 ----N---- C:\WINDOWS\system32\dimsroam.dll 2009-07-26 21:44:33 ----N---- C:\WINDOWS\system32\dimsntfy.dll 2009-07-26 21:44:33 ----N---- C:\WINDOWS\system32\dhcpqec.dll 2009-07-26 21:44:33 ----N---- C:\WINDOWS\system32\credssp.dll 2009-07-26 21:44:32 ----N---- C:\WINDOWS\system32\hsfcisp2.dll 2009-07-26 21:44:32 ----N---- C:\WINDOWS\system32\eapsvc.dll 2009-07-26 21:44:32 ----N---- C:\WINDOWS\system32\eapqec.dll 2009-07-26 21:44:32 ----N---- C:\WINDOWS\system32\eappprxy.dll 2009-07-26 21:44:32 ----N---- C:\WINDOWS\system32\eapphost.dll 2009-07-26 21:44:32 ----N---- C:\WINDOWS\system32\eappgnui.dll 2009-07-26 21:44:32 ----N---- C:\WINDOWS\system32\eappcfg.dll 2009-07-26 21:44:32 ----N---- C:\WINDOWS\system32\eapp3hst.dll 2009-07-26 21:44:32 ----N---- C:\WINDOWS\system32\eapolqec.dll 2009-07-26 21:44:31 ----N---- C:\WINDOWS\system32\kbdiultn.dll 2009-07-26 21:44:31 ----N---- C:\WINDOWS\system32\kbdbhc.dll 2009-07-26 21:44:30 ----N---- C:\WINDOWS\system32\mmcperf.exe 2009-07-26 21:44:30 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll 2009-07-26 21:44:30 ----N---- C:\WINDOWS\system32\mmcex.dll 2009-07-26 21:44:30 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll 2009-07-26 21:44:30 ----N---- C:\WINDOWS\system32\mdmxsdk.dll 2009-07-26 21:44:30 ----N---- C:\WINDOWS\system32\l2gpstore.dll 2009-07-26 21:44:30 ----N---- C:\WINDOWS\system32\kmsvc.dll 2009-07-26 21:44:30 ----N---- C:\WINDOWS\system32\kbdpash.dll 2009-07-26 21:44:30 ----N---- C:\WINDOWS\system32\kbdnepr.dll 2009-07-26 21:44:29 ----N---- C:\WINDOWS\system32\onex.dll 2009-07-26 21:44:29 ----N---- C:\WINDOWS\system32\nv4_disp.dll 2009-07-26 21:44:29 ----N---- C:\WINDOWS\system32\napstat.exe 2009-07-26 21:44:29 ----N---- C:\WINDOWS\system32\napmontr.dll 2009-07-26 21:44:29 ----N---- C:\WINDOWS\system32\napipsec.dll 2009-07-26 21:44:29 ----N---- C:\WINDOWS\system32\mtxparhd.dll 2009-07-26 21:44:29 ----N---- C:\WINDOWS\system32\msshavmsg.dll 2009-07-26 21:44:29 ----N---- C:\WINDOWS\system32\mssha.dll 2009-07-26 21:44:28 ----N---- C:\WINDOWS\system32\slcoinst.dll 2009-07-26 21:44:28 ----N---- C:\WINDOWS\system32\setupn.exe 2009-07-26 21:44:28 ----N---- C:\WINDOWS\system32\s3gnb.dll 2009-07-26 21:44:28 ----N---- C:\WINDOWS\system32\rhttpaa.dll 2009-07-26 21:44:28 ----N---- C:\WINDOWS\system32\rasqec.dll 2009-07-26 21:44:28 ----N---- C:\WINDOWS\system32\qutil.dll 2009-07-26 21:44:28 ----N---- C:\WINDOWS\system32\qcliprov.dll 2009-07-26 21:44:28 ----N---- C:\WINDOWS\system32\qagentrt.dll 2009-07-26 21:44:28 ----N---- C:\WINDOWS\system32\qagent.dll 2009-07-26 21:44:28 ----N---- C:\WINDOWS\system32\photometadatahandler.dll 2009-07-26 21:44:27 ----N---- C:\WINDOWS\system32\xpsp3res.dll 2009-07-26 21:44:27 ----N---- C:\WINDOWS\system32\tsgqec.dll 2009-07-26 21:44:27 ----N---- C:\WINDOWS\system32\slserv.exe 2009-07-26 21:44:27 ----N---- C:\WINDOWS\system32\slrundll.exe 2009-07-26 21:44:27 ----N---- C:\WINDOWS\system32\slgen.dll 2009-07-26 21:44:27 ----N---- C:\WINDOWS\system32\slextspk.dll 2009-07-26 21:44:26 ----N---- C:\WINDOWS\system32\wmphoto.dll 2009-07-26 21:44:26 ----N---- C:\WINDOWS\system32\wlanapi.dll 2009-07-26 21:44:26 ----N---- C:\WINDOWS\system32\windowscodecsext.dll 2009-07-26 21:44:26 ----N---- C:\WINDOWS\system32\windowscodecs.dll 2009-07-26 21:44:26 ----N---- C:\WINDOWS\system32\verclsid.exe 2009-07-26 21:44:26 ----N---- C:\WINDOWS\system32\tzchange.exe 2009-07-26 21:44:26 ----N---- C:\WINDOWS\system32\tspkg.dll 2009-07-26 21:44:25 ----N---- C:\WINDOWS\slrundll.exe 2009-07-26 21:44:25 ----D---- C:\WINDOWS\system32\de-de 2009-07-26 21:44:25 ----A---- C:\WINDOWS\system32\xmllite.dll 2009-07-26 21:44:24 ----D---- C:\WINDOWS\system32\de 2009-07-26 21:44:24 ----D---- C:\WINDOWS\system32\bits 2009-07-26 21:44:24 ----D---- C:\WINDOWS\l2schemas 2009-07-26 21:42:04 ----D---- C:\WINDOWS\ServicePackFiles 2009-07-26 21:39:51 ----D---- C:\WINDOWS\network diagnostic 2009-07-26 21:38:40 ----D---- C:\WINDOWS\system32\ReinstallBackups 2009-07-26 21:36:32 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$ 2009-07-26 21:36:30 ----D---- C:\WINDOWS\EHome 2009-07-26 21:30:55 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Acronis 2009-07-26 21:30:22 ----D---- C:\Programme\Acronis 2009-07-26 21:30:20 ----D---- C:\Programme\Gemeinsame Dateien\Acronis 2009-07-26 21:29:15 ----D---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\Macromedia 2009-07-26 21:29:14 ----D---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\Adobe 2009-07-26 21:23:37 ----D---- C:\WINDOWS\system32\PreInstall 2009-07-26 21:23:37 ----A---- C:\WINDOWS\system32\spupdsvc.exe 2009-07-26 21:23:36 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$ 2009-07-26 21:23:36 ----HD---- C:\WINDOWS\$hf_mig$ 2009-07-26 21:23:12 ----N---- C:\WINDOWS\system32\spmsg.dll 2009-07-26 21:23:04 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$ 2009-07-26 21:19:22 ----A---- C:\WINDOWS\system32\wups2.dll 2009-07-26 21:19:22 ----A---- C:\WINDOWS\system32\wucltui.dll.mui 2009-07-26 21:19:22 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui 2009-07-26 21:19:21 ----D---- C:\WINDOWS\system32\SoftwareDistribution 2009-07-26 21:19:21 ----A---- C:\WINDOWS\system32\wuapi.dll.mui 2009-07-26 21:16:54 ----D---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\Mozilla 2009-07-26 21:16:49 ----D---- C:\Programme\Mozilla Firefox 2009-07-26 21:09:41 ----SHD---- C:\RECYCLER 2009-07-26 21:09:26 ----D---- C:\Programme\WinRAR 2009-07-26 21:08:06 ----D---- C:\Programme\Avira 2009-07-26 21:08:06 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira 2009-07-26 18:13:15 ----SH---- C:\boot.ini 2009-07-26 18:06:53 ----RSHDC---- C:\WINDOWS\system32\dllcache 2009-07-26 18:06:53 ----RSD---- C:\WINDOWS\Fonts 2009-07-26 18:06:53 ----RD---- C:\WINDOWS\Web 2009-07-26 18:06:53 ----HD---- C:\WINDOWS\inf 2009-07-26 18:06:53 ----D---- C:\WINDOWS\WinSxS 2009-07-26 18:06:53 ----D---- C:\WINDOWS\twain_32 2009-07-26 18:06:53 ----D---- C:\WINDOWS\Temp 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\wins 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\wbem 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\usmt 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\spool 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\ShellExt 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\Setup 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\ras 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\oobe 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\npp 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\mui 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\inetsrv 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\IME 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\icsxml 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\ias 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\export 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\drivers 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\dhcp 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\config 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\3com_dmi 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\3076 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\2052 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\1054 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\1042 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\1041 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\1037 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\1033 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\1031 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\1028 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32\1025 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system32 2009-07-26 18:06:53 ----D---- C:\WINDOWS\system 2009-07-26 18:06:53 ----D---- C:\WINDOWS\security 2009-07-26 18:06:53 ----D---- C:\WINDOWS\Resources 2009-07-26 18:06:53 ----D---- C:\WINDOWS\repair 2009-07-26 18:06:53 ----D---- C:\WINDOWS\Provisioning 2009-07-26 18:06:53 ----D---- C:\WINDOWS\PeerNet 2009-07-26 18:06:53 ----D---- C:\WINDOWS\pchealth 2009-07-26 18:06:53 ----D---- C:\WINDOWS\mui 2009-07-26 18:06:53 ----D---- C:\WINDOWS\msapps 2009-07-26 18:06:53 ----D---- C:\WINDOWS\msagent 2009-07-26 18:06:53 ----D---- C:\WINDOWS\Media 2009-07-26 18:06:53 ----D---- C:\WINDOWS\java 2009-07-26 18:06:53 ----D---- C:\WINDOWS\ime 2009-07-26 18:06:53 ----D---- C:\WINDOWS\Help 2009-07-26 18:06:53 ----D---- C:\WINDOWS\Driver Cache 2009-07-26 18:06:53 ----D---- C:\WINDOWS\Debug 2009-07-26 18:06:53 ----D---- C:\WINDOWS\Cursors 2009-07-26 18:06:53 ----D---- C:\WINDOWS\Connection Wizard 2009-07-26 18:06:53 ----D---- C:\WINDOWS\Config 2009-07-26 18:06:53 ----D---- C:\WINDOWS\AppPatch 2009-07-26 18:06:53 ----D---- C:\WINDOWS\addins 2009-07-26 18:06:53 ----D---- C:\WINDOWS 2009-07-26 17:27:20 ----A---- C:\WINDOWS\system32\h323log.txt 2009-07-26 17:17:35 ----A---- C:\WINDOWS\system32\hidserv.dll 2009-07-26 17:16:25 ----A---- C:\WINDOWS\system32\usbui.dll 2009-07-26 17:15:20 ----SHD---- C:\WINDOWS\Installer 2009-07-26 17:15:20 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-07-26 17:15:19 ----D---- C:\Programme\Gemeinsame Dateien\ODBC 2009-07-26 17:15:19 ----A---- C:\WINDOWS\ODBCINST.INI 2009-07-26 17:15:16 ----D---- C:\Programme\Gemeinsame Dateien\SpeechEngines 2009-07-26 17:15:15 ----RD---- C:\Programme 2009-07-26 17:15:15 ----D---- C:\Programme\Gemeinsame Dateien\Microsoft Shared 2009-07-26 17:15:15 ----D---- C:\Programme\Gemeinsame Dateien 2009-07-26 17:15:11 ----RA---- C:\WINDOWS\system32\kbdtuq.dll 2009-07-26 17:15:11 ----RA---- C:\WINDOWS\system32\kbdtuf.dll 2009-07-26 17:15:11 ----RA---- C:\WINDOWS\system32\kbdazel.dll 2009-07-26 17:15:09 ----RA---- C:\WINDOWS\system32\kbduzb.dll 2009-07-26 17:15:09 ----RA---- C:\WINDOWS\system32\kbdur.dll 2009-07-26 17:15:09 ----RA---- C:\WINDOWS\system32\kbdtat.dll 2009-07-26 17:15:09 ----RA---- C:\WINDOWS\system32\kbdmon.dll 2009-07-26 17:15:09 ----RA---- C:\WINDOWS\system32\kbdkyr.dll 2009-07-26 17:15:09 ----RA---- C:\WINDOWS\system32\kbdkaz.dll 2009-07-26 17:15:09 ----RA---- C:\WINDOWS\system32\kbdaze.dll 2009-07-26 17:15:08 ----RA---- C:\WINDOWS\system32\kbdycc.dll 2009-07-26 17:15:08 ----RA---- C:\WINDOWS\system32\kbdru1.dll 2009-07-26 17:15:08 ----RA---- C:\WINDOWS\system32\kbdru.dll 2009-07-26 17:15:08 ----RA---- C:\WINDOWS\system32\kbdbu.dll 2009-07-26 17:15:08 ----RA---- C:\WINDOWS\system32\kbdblr.dll 2009-07-26 17:15:06 ----RA---- C:\WINDOWS\system32\kbdhept.dll 2009-07-26 17:15:06 ----RA---- C:\WINDOWS\system32\kbdhela3.dll 2009-07-26 17:15:06 ----RA---- C:\WINDOWS\system32\kbdhela2.dll 2009-07-26 17:15:06 ----RA---- C:\WINDOWS\system32\kbdhe319.dll 2009-07-26 17:15:06 ----RA---- C:\WINDOWS\system32\kbdhe220.dll 2009-07-26 17:15:06 ----RA---- C:\WINDOWS\system32\kbdhe.dll 2009-07-26 17:15:06 ----RA---- C:\WINDOWS\system32\kbdgkl.dll 2009-07-26 17:15:04 ----RA---- C:\WINDOWS\system32\kbdlv1.dll 2009-07-26 17:15:04 ----RA---- C:\WINDOWS\system32\kbdlv.dll 2009-07-26 17:15:04 ----RA---- C:\WINDOWS\system32\kbdlt1.dll 2009-07-26 17:15:04 ----RA---- C:\WINDOWS\system32\kbdlt.dll 2009-07-26 17:15:04 ----RA---- C:\WINDOWS\system32\kbdest.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdycl.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdsl1.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdsl.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdro.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdpl1.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdpl.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdhu1.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdhu.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdcz2.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdcz1.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdcz.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\kbdcr.dll 2009-07-26 17:15:01 ----RA---- C:\WINDOWS\system32\KBDAL.DLL 2009-07-26 17:14:59 ----A---- C:\WINDOWS\system32\irclass.dll 2009-07-26 17:14:58 ----A---- C:\WINDOWS\system32\spxcoins.dll 2009-07-26 17:14:58 ----A---- C:\WINDOWS\system32\EqnClass.Dll 2009-07-26 17:14:58 ----A---- C:\WINDOWS\system32\dgsetup.dll 2009-07-26 17:14:58 ----A---- C:\WINDOWS\system32\dgrpsetu.dll 2009-07-26 17:14:56 ----A---- C:\WINDOWS\TASKMAN.EXE 2009-07-26 17:14:55 ----A---- C:\WINDOWS\system32\batt.dll 2009-07-26 17:14:54 ----A---- C:\WINDOWS\notepad.exe 2009-07-26 17:14:53 ----A---- C:\WINDOWS\system32\storprop.dll 2009-07-26 17:14:47 ----ASH---- C:\Dokumente und Einstellungen\All -----------------EOF----------------- |
|
10.08.2009, 22:55
| #5 |
| | Irgendwas stimmt nicht. und teil 3 ewww sorry  Users\Anwendungsdaten\desktop.ini 2009-07-26 17:14:33 ----D---- C:\WINDOWS\system32\CatRoot2 2009-07-26 17:14:33 ----D---- C:\WINDOWS\system32\CatRoot 2009-07-26 17:14:27 ----SD---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft 2009-07-26 17:14:03 ----SHD---- C:\System Volume Information 2009-07-26 17:14:03 ----D---- C:\Dokumente und Einstellungen 2009-07-26 16:55:07 ----N---- C:\WINDOWS\system32\TVModeLib.dll 2009-07-26 16:55:07 ----N---- C:\WINDOWS\system32\SiSApCom.dll 2009-07-26 16:54:49 ----A---- C:\WINDOWS\system32\Keyhook.exe 2009-07-26 16:54:47 ----HD---- C:\Programme\InstallShield Installation Information 2009-07-26 16:54:47 ----A---- C:\WINDOWS\system32\sistray.exe 2009-07-26 16:54:46 ----D---- C:\WINDOWS\SiS 2009-07-26 16:54:45 ----A---- C:\WINDOWS\VGAsetup.ini 2009-07-26 16:54:40 ----D---- C:\Programme\Multimedia V3.54 2009-07-26 16:54:32 ----D---- C:\WINDOWS\system32\trayres 2009-07-26 16:54:29 ----A---- C:\WINDOWS\system32\VGAunistlog.ini 2009-07-26 16:53:42 ----D---- C:\Programme\SiS7012 2009-07-26 16:53:41 ----A---- C:\WINDOWS\system32\ksuser.dll 2009-07-26 16:53:27 ----D---- C:\Programme\Gemeinsame Dateien\InstallShield 2009-07-26 16:51:51 ----D---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\Identities 2009-07-26 16:51:49 ----HD---- C:\Programme\Uninstall Information 2009-07-26 16:51:44 ----ASH---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\desktop.ini 2009-07-26 16:51:43 ----SD---- C:\Dokumente und Einstellungen\xxxxxx\Anwendungsdaten\Microsoft 2009-07-26 16:49:53 ----D---- C:\WINDOWS\SoftwareDistribution 2009-07-26 16:49:52 ----SD---- C:\WINDOWS\system32\Microsoft 2009-07-26 16:49:52 ----N---- C:\WINDOWS\SchedLgU.Txt 2009-07-26 16:41:06 ----D---- C:\WINDOWS\system32\xircom 2009-07-26 16:41:06 ----D---- C:\Programme\xerox 2009-07-26 16:41:06 ----D---- C:\Programme\microsoft frontpage 2009-07-26 16:40:57 ----A---- C:\WINDOWS\control.ini 2009-07-26 16:40:57 ----A---- C:\AUTOEXEC.BAT 2009-07-26 16:40:40 ----A---- C:\WINDOWS\system32\mapi32.dll 2009-07-26 16:39:52 ----SD---- C:\WINDOWS\Downloaded Program Files 2009-07-26 16:39:52 ----RD---- C:\WINDOWS\Offline Web Pages 2009-07-26 16:39:52 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest 2009-07-26 16:39:46 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest 2009-07-26 16:39:42 ----HD---- C:\Programme\WindowsUpdate 2009-07-26 16:39:38 ----D---- C:\Programme\Online-Dienste 2009-07-26 16:39:18 ----D---- C:\WINDOWS\system32\DirectX 2009-07-26 16:38:53 ----A---- C:\WINDOWS\system32\atrace.dll 2009-07-26 16:38:50 ----A---- C:\WINDOWS\system32\desktop.ini 2009-07-26 16:38:50 ----A---- C:\WINDOWS\desktop.ini 2009-07-26 16:38:43 ----A---- C:\WINDOWS\system32\nmevtmsg.dll 2009-07-26 16:38:41 ----D---- C:\Programme\Gemeinsame Dateien\Dienste 2009-07-26 16:38:41 ----A---- C:\WINDOWS\system32\acctres.dll 2009-07-26 16:38:37 ----SD---- C:\WINDOWS\Tasks 2009-07-26 16:38:37 ----A---- C:\WINDOWS\system32\icfgnt5.dll 2009-07-26 16:38:36 ----D---- C:\Programme\Gemeinsame Dateien\MSSoap 2009-07-26 16:38:32 ----D---- C:\WINDOWS\srchasst 2009-07-26 16:38:31 ----D---- C:\WINDOWS\system32\Macromed 2009-07-26 16:38:27 ----A---- C:\WINDOWS\system32\wuweb.dll 2009-07-26 16:38:27 ----A---- C:\WINDOWS\system32\wups.dll 2009-07-26 16:38:27 ----A---- C:\WINDOWS\system32\wucltui.dll 2009-07-26 16:38:27 ----A---- C:\WINDOWS\system32\wuauserv.dll 2009-07-26 16:38:27 ----A---- C:\WINDOWS\system32\wuaueng1.dll 2009-07-26 16:38:27 ----A---- C:\WINDOWS\system32\wuaueng.dll 2009-07-26 16:38:26 ----A---- C:\WINDOWS\system32\wuauclt1.exe 2009-07-26 16:38:26 ----A---- C:\WINDOWS\system32\wuauclt.exe 2009-07-26 16:38:26 ----A---- C:\WINDOWS\system32\wuapi.dll 2009-07-26 16:38:26 ----A---- C:\WINDOWS\system32\qmgrprxy.dll 2009-07-26 16:38:26 ----A---- C:\WINDOWS\system32\qmgr.dll 2009-07-26 16:38:26 ----A---- C:\WINDOWS\system32\bitsprx3.dll 2009-07-26 16:38:26 ----A---- C:\WINDOWS\system32\bitsprx2.dll 2009-07-26 16:38:22 ----D---- C:\Programme\Movie Maker 2009-07-26 16:38:16 ----A---- C:\WINDOWS\system32\safrslv.dll 2009-07-26 16:38:16 ----A---- C:\WINDOWS\system32\safrdm.dll 2009-07-26 16:38:16 ----A---- C:\WINDOWS\system32\safrcdlg.dll 2009-07-26 16:38:16 ----A---- C:\WINDOWS\system32\racpldlg.dll 2009-07-26 16:38:13 ----A---- C:\WINDOWS\system32\fltlib.dll 2009-07-26 16:38:12 ----D---- C:\WINDOWS\system32\Restore 2009-07-26 16:38:12 ----A---- C:\WINDOWS\system32\srsvc.dll 2009-07-26 16:38:12 ----A---- C:\WINDOWS\system32\srrstr.dll 2009-07-26 16:38:12 ----A---- C:\WINDOWS\system32\srclient.dll 2009-07-26 16:38:12 ----A---- C:\WINDOWS\system32\fltmc.exe 2009-07-26 16:38:11 ----A---- C:\WINDOWS\system32\isrdbg32.dll 2009-07-26 16:38:11 ----A---- C:\WINDOWS\system32\ils.dll 2009-07-26 16:38:10 ----A---- C:\WINDOWS\system32\nmmkcert.dll 2009-07-26 16:38:10 ----A---- C:\WINDOWS\system32\msconf.dll 2009-07-26 16:38:10 ----A---- C:\WINDOWS\system32\mnmsrvc.exe 2009-07-26 16:38:10 ----A---- C:\WINDOWS\system32\mnmdd.dll 2009-07-26 16:38:07 ----D---- C:\Programme\NetMeeting 2009-07-26 16:38:07 ----A---- C:\WINDOWS\system32\msoert2.dll 2009-07-26 16:38:07 ----A---- C:\WINDOWS\system32\msoeacct.dll 2009-07-26 16:38:06 ----A---- C:\WINDOWS\system32\inetres.dll 2009-07-26 16:38:05 ----A---- C:\WINDOWS\system32\inetcomm.dll 2009-07-26 16:38:03 ----D---- C:\Programme\Outlook Express 2009-07-26 16:38:03 ----A---- C:\WINDOWS\system32\schedsvc.dll 2009-07-26 16:38:03 ----A---- C:\WINDOWS\system32\mstinit.exe 2009-07-26 16:38:03 ----A---- C:\WINDOWS\system32\mstask.dll 2009-07-26 16:38:02 ----A---- C:\WINDOWS\system32\isign32.dll 2009-07-26 16:38:02 ----A---- C:\WINDOWS\system32\inetcfg.dll 2009-07-26 16:38:02 ----A---- C:\WINDOWS\system32\icwphbk.dll 2009-07-26 16:38:02 ----A---- C:\WINDOWS\system32\icwdial.dll 2009-07-26 16:37:55 ----D---- C:\Programme\Gemeinsame Dateien\System 2009-07-26 16:37:54 ----D---- C:\Programme\Internet Explorer 2009-07-26 16:37:43 ----D---- C:\Programme\ComPlus Applications 2009-07-26 16:37:41 ----A---- C:\WINDOWS\vbaddin.ini 2009-07-26 16:37:41 ----A---- C:\WINDOWS\vb.ini 2009-07-26 16:37:36 ----D---- C:\WINDOWS\Registration 2009-07-26 16:37:05 ----D---- C:\Programme\Windows Media Player 2009-07-26 16:37:05 ----D---- C:\Programme\Online Services 2009-07-26 16:37:00 ----D---- C:\Programme\Messenger 2009-07-26 16:36:56 ----D---- C:\Programme\MSN Gaming Zone 2009-07-26 16:36:56 ----A---- C:\WINDOWS\system32\write.exe 2009-07-26 16:36:44 ----A---- C:\WINDOWS\system32\sndvol32.exe 2009-07-26 16:36:43 ----A---- C:\WINDOWS\system32\hticons.dll 2009-07-26 16:36:43 ----A---- C:\WINDOWS\system32\avwav.dll 2009-07-26 16:36:43 ----A---- C:\WINDOWS\system32\avtapi.dll 2009-07-26 16:36:43 ----A---- C:\WINDOWS\system32\avmeter.dll 2009-07-26 16:36:42 ----A---- C:\WINDOWS\system32\winchat.exe 2009-07-26 16:36:34 ----A---- C:\WINDOWS\system32\getuname.dll 2009-07-26 16:36:33 ----A---- C:\WINDOWS\system32\sol.exe 2009-07-26 16:36:33 ----A---- C:\WINDOWS\system32\charmap.exe 2009-07-26 16:36:33 ----A---- C:\WINDOWS\system32\calc.exe 2009-07-26 16:36:32 ----A---- C:\WINDOWS\system32\winmine.exe 2009-07-26 16:36:32 ----A---- C:\WINDOWS\system32\usrlogon.cmd 2009-07-26 16:36:32 ----A---- C:\WINDOWS\system32\reset.exe 2009-07-26 16:36:32 ----A---- C:\WINDOWS\system32\mshearts.exe 2009-07-26 16:36:32 ----A---- C:\WINDOWS\system32\freecell.exe 2009-07-26 16:36:31 ----A---- C:\WINDOWS\system32\tsshutdn.exe 2009-07-26 16:36:31 ----A---- C:\WINDOWS\system32\tslabels.ini 2009-07-26 16:36:31 ----A---- C:\WINDOWS\system32\tskill.exe 2009-07-26 16:36:31 ----A---- C:\WINDOWS\system32\tsdiscon.exe 2009-07-26 16:36:31 ----A---- C:\WINDOWS\system32\tscon.exe 2009-07-26 16:36:31 ----A---- C:\WINDOWS\system32\shadow.exe 2009-07-26 16:36:31 ----A---- C:\WINDOWS\system32\rwinsta.exe 2009-07-26 16:36:31 ----A---- C:\WINDOWS\system32\regini.exe 2009-07-26 16:36:31 ----A---- C:\WINDOWS\system32\rdpcfgex.dll 2009-07-26 16:36:31 ----A---- C:\WINDOWS\system32\qwinsta.exe 2009-07-26 16:36:31 ----A---- C:\WINDOWS\system32\qappsrv.exe 2009-07-26 16:36:30 ----A---- C:\WINDOWS\system32\msg.exe 2009-07-26 16:36:30 ----A---- C:\WINDOWS\system32\logoff.exe 2009-07-26 16:36:29 ----A---- C:\WINDOWS\system32\msdtcprf.ini 2009-07-26 16:36:29 ----A---- C:\WINDOWS\system32\cdmodem.dll 2009-07-26 16:36:28 ----A---- C:\WINDOWS\system32\stclient.dll 2009-07-26 16:36:28 ----A---- C:\WINDOWS\system32\mtxlegih.dll 2009-07-26 16:36:28 ----A---- C:\WINDOWS\system32\mtxex.dll 2009-07-26 16:36:28 ----A---- C:\WINDOWS\system32\mtxdm.dll 2009-07-26 16:36:28 ----A---- C:\WINDOWS\system32\dcomcnfg.exe 2009-07-26 16:36:28 ----A---- C:\WINDOWS\system32\comsnap.dll 2009-07-26 16:36:28 ----A---- C:\WINDOWS\system32\comrepl.dll 2009-07-26 16:36:28 ----A---- C:\WINDOWS\system32\comaddin.dll 2009-07-26 16:36:22 ----A---- C:\WINDOWS\system32\wmimgmt.msc 2009-07-26 16:36:13 ----D---- C:\Programme\MSN 2009-07-26 16:36:12 ----A---- C:\WINDOWS\system32\accwiz.exe 2009-07-26 16:36:11 ----A---- C:\WINDOWS\system32\sndrec32.exe 2009-07-26 16:36:11 ----A---- C:\WINDOWS\system32\mplay32.exe 2009-07-26 16:36:11 ----A---- C:\WINDOWS\system32\hypertrm.dll 2009-07-26 16:36:10 ----D---- C:\Programme\Windows NT 2009-07-26 16:36:10 ----A---- C:\WINDOWS\system32\spider.exe 2009-07-26 16:36:10 ----A---- C:\WINDOWS\system32\mspaint.exe 2009-07-26 16:36:10 ----A---- C:\WINDOWS\system32\clipbrd.exe 2009-07-26 16:36:09 ----A---- C:\WINDOWS\system32\tscfgwmi.dll 2009-07-26 16:36:09 ----A---- C:\WINDOWS\system32\mstscax.dll 2009-07-26 16:36:09 ----A---- C:\WINDOWS\system32\mstsc.exe 2009-07-26 16:36:08 ----A---- C:\WINDOWS\system32\tscupgrd.exe 2009-07-26 16:36:08 ----A---- C:\WINDOWS\system32\termsrv.dll 2009-07-26 16:36:08 ----A---- C:\WINDOWS\system32\sessmgr.exe 2009-07-26 16:36:08 ----A---- C:\WINDOWS\system32\remotepg.dll 2009-07-26 16:36:08 ----A---- C:\WINDOWS\system32\rdshost.exe 2009-07-26 16:36:08 ----A---- C:\WINDOWS\system32\rdsaddin.exe 2009-07-26 16:36:08 ----A---- C:\WINDOWS\system32\rdchost.dll 2009-07-26 16:36:07 ----D---- C:\WINDOWS\system32\MsDtc 2009-07-26 16:36:07 ----A---- C:\WINDOWS\system32\rdpwsx.dll 2009-07-26 16:36:07 ----A---- C:\WINDOWS\system32\rdpsnd.dll 2009-07-26 16:36:07 ----A---- C:\WINDOWS\system32\rdpclip.exe 2009-07-26 16:36:07 ----A---- C:\WINDOWS\system32\qprocess.exe 2009-07-26 16:36:07 ----A---- C:\WINDOWS\system32\mtxoci.dll 2009-07-26 16:36:07 ----A---- C:\WINDOWS\system32\msdtcuiu.dll 2009-07-26 16:36:07 ----A---- C:\WINDOWS\system32\icaapi.dll 2009-07-26 16:36:07 ----A---- C:\WINDOWS\system32\cfgbkend.dll 2009-07-26 16:36:06 ----A---- C:\WINDOWS\system32\xolehlp.dll 2009-07-26 16:36:06 ----A---- C:\WINDOWS\system32\msdtctm.dll 2009-07-26 16:36:06 ----A---- C:\WINDOWS\system32\msdtcprx.dll 2009-07-26 16:36:06 ----A---- C:\WINDOWS\system32\msdtclog.dll 2009-07-26 16:36:06 ----A---- C:\WINDOWS\system32\msdtc.exe 2009-07-26 16:36:05 ----D---- C:\WINDOWS\system32\Com 2009-07-26 16:36:05 ----A---- C:\WINDOWS\system32\colbact.dll 2009-07-26 16:36:04 ----A---- C:\WINDOWS\system32\clbcatex.dll 2009-07-26 16:36:04 ----A---- C:\WINDOWS\system32\catsrvut.dll 2009-07-26 16:36:04 ----A---- C:\WINDOWS\system32\catsrvps.dll 2009-07-26 16:36:04 ----A---- C:\WINDOWS\system32\catsrv.dll 2009-07-26 16:36:03 ----A---- C:\WINDOWS\system32\comuid.dll 2009-07-26 16:36:03 ----A---- C:\WINDOWS\system32\comsvcs.dll 2009-07-26 16:36:03 ----A---- C:\WINDOWS\system32\clbcatq.dll 2009-07-26 16:35:57 ----A---- C:\WINDOWS\system32\servdeps.dll 2009-07-26 16:35:57 ----A---- C:\WINDOWS\system32\mmfutil.dll 2009-07-26 16:35:57 ----A---- C:\WINDOWS\system32\licwmi.dll 2009-07-26 16:35:57 ----A---- C:\WINDOWS\system32\cmprops.dll 2009-07-24 20:07:39 ----A---- C:\WINDOWS\system32\a3d.dll 2009-07-24 20:07:27 ----A---- C:\WINDOWS\system32\SiSParse.dll 2009-07-24 20:07:27 ----A---- C:\WINDOWS\system32\SiSInst.dll 2009-07-24 20:07:27 ----A---- C:\WINDOWS\system32\sisgrv.dll 2009-07-24 20:07:27 ----A---- C:\WINDOWS\system32\sisgl.dll 2009-07-24 20:07:27 ----A---- C:\WINDOWS\system32\SiSBase.dll 2009-07-24 20:07:27 ----A---- C:\WINDOWS\system32\instFunc.dll ======List of files/folders modified in the last 1 months====== 2009-08-09 22:10:47 ----A---- C:\WINDOWS\win.ini 2009-07-26 17:15:14 ----A---- C:\WINDOWS\system.ini 2009-07-19 18:41:10 ----A---- C:\WINDOWS\system32\ieframe.dll 2009-07-19 15:11:12 ----A---- C:\WINDOWS\system32\mshtml.dll ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AmdK7;AMD K7-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41856] R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys [] R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104] R1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720] R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2003-10-30 11264] R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520] R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-08-09 55656] R2 tifsfilter;Acronis True Image FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2009-07-26 44704] R3 hidusb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368] R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-04 12288] R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2003-10-30 427776] R3 SiS7012;Service for AC'97 Sample Driver (WDM); C:\WINDOWS\system32\drivers\sis7012.sys [2004-11-03 267136] R3 SISNIC;SiS-PCI-Fast Ethernet- Adaptertreiber; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2004-08-03 32768] R3 SNP2STD;USB2.0 PC Camera (SNP2STD); C:\WINDOWS\system32\DRIVERS\snp2sxp.sys [2005-11-18 10192896] R3 TMPassthruMP;TMPassthruMP; C:\WINDOWS\system32\DRIVERS\TMPassthru.sys [2008-03-02 206608] R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128] R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208] R3 usbhub;Microsoft USB-Standardhubtreiber; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520] R3 usbohci;Miniporttreiber für Microsoft USB Open Host-Controller; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152] S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504] S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248] S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136] S3 streamip;BDA-IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232] S3 TMPassthru;Trend Micro Passthru Ndis Service; C:\WINDOWS\system32\DRIVERS\TMPassthru.sys [2008-03-02 206608] S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368] S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe [2008-10-03 554264] R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Programme\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289] R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2009-08-09 185089] S2 RUBotted;Trend Micro RUBotted Service; C:\Programme\Trend Micro\RUBotted\TMRUBotted.exe [2008-11-06 582992] |
|
10.08.2009, 23:13
| #6 |
| /// Malwareteam | Irgendwas stimmt nicht. Hast Du das System komplett Neuaufgesetzt oder darüber installiert? Mach einen Scan mit Superantispyware und poste das Log Gruss swiss |
|
12.08.2009, 19:08
| #7 |
| | Irgendwas stimmt nicht. Mein PC ist plötzlich etwas langsam, er Reagiert nicht oder nciht sofort auf den Herunterfahren-Button. Und auch andere Sachen muss er sich erst 2 mal sagen lassen......ich mach nochmal ein neues log: Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:08:14, on 12.08.2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18294) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe C:\Program Files\ICQ6.5\ICQ.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\DAEMON Tools Pro\DTProShellHlp.exe C:\Program Files\CodeGear\RAD Studio\6.0\bin\bds.exe C:\Windows\system32\conime.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=0&o=vp32&d=0209&m=aspire_8930 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=0&o=vp32&d=0209&m=aspire_8930 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=0&o=vp32&d=0209&m=aspire_8930 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe" O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe O4 - HKLM\..\Run: [ZPdtWzdVitaKey MC3000] "C:\Program Files\Acer\Acer Bio Protection\PdtWzd.exe" show O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe O9 - Extra 'Tools' menuitem: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Program Files\Acer\Acer Bio Protection\PwdBank.exe O9 - Extra button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll O13 - Gopher Prefix: O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/german/partner/de/kavwebscan_unicode.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: AWinNotifyVitaKey MC3000 - C:\Program Files\Acer\Acer Bio Protection\WinNotify.dll O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: BlackfishSQL - CodeGear - C:\Program Files\CodeGear\RAD Studio\6.0\bin\BSQLServer.exe O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iGroupTec Service (IGBASVC) - Unknown owner - C:\Program Files\Acer\Acer Bio Protection\BASVC.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Unknown owner - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (file missing) O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe -- End of file - 10898 bytes |
|
12.08.2009, 22:06
| #8 |
| /// Malwareteam | Irgendwas stimmt nicht. Hast du alle anderen Sachen, welche ich gepostet habe, abgearbeitet? Was meinte Kaspersky? Mach bitte auch noch eine Scan mit Avira. Gruss Swiss |
|
| Themen zu Irgendwas stimmt nicht. |
| adobe, agere systems, antivir, antivir guard, avg, avira, bho, defender, desktop, explorer, firefox, hijack, hijackthis, internet, internet explorer, launch, monitor, mozilla, nvidia, object, plug-in, registry, rundll, senden, software, studio, system, vista, windows |
Hybrid-Darstellung
