|
Plagegeister aller Art und deren Bekämpfung: Trojaner (Virus) löscht alles wenn Internetverbindung bestehtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
29.08.2009, 12:19 | #1 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht Hi Leute, Ich habe mir eine datei aus dem Internet gezogen und ausgeführt. Auf einmal war diese datei weg und mein Bildschrim hat sich aufgehängt. Dann habe ich strg alt entf gedrückt (Taskmanager). Leider haben dateien gefehlt man konnte den Taskmanager nicht mehr starten. Ich habe dann meinen PC manuell ausgeschaltet. Habe das Internet-Kabel rausgezogen und den PC gestartet. Es ging alles wie normal. Auch das Anmelden ging/geht. Aber es sind viele Dateien gelöscht worden auf meinem Laufwerk C:\\ und man kann deswegen manche Sachen nicht mehr ausführen(Taskmanager, Suche, usw). Jetzt habe ich das Internetkabel wieder reingesteckt. Auf einmal hat mein PC wieder angefangen zu löschen -.-.Wie bekomme ich diesen Virus los??Ich habe McAffee Virusscan (auf dem neusten Stand;wird jeden Tag von mir aktualisiert) und mein Betriebssystem ist Windows XP.Wenn ich den Virus los habe kann ich vllt meine Dateien retten aber jetzt wird es wohl nichts bringen, falls der Virus auch schon auf meiner Platte D:\\ ist. Bitte um Hilfe!!!! MFG NagaraHyuga Hoffe ihr könnt mir helfen MFG NagaraHyuga |
29.08.2009, 12:30 | #2 |
/// TB-Ausbilder | Trojaner (Virus) löscht alles wenn Internetverbindung besteht Hi,
__________________löscht der Trojaner alles sobald der Rechner an ist, oder erst wenn Internetverbindung besteht? Wenn du den Rechner ohne Internetanbindung nutzen kannst, dann könntest du die entsprechenden Diagnosetools mittels CD/Diskette auf deinen infizierten Rechner bringen um zu schauen was drauf ist, (weil mich das durchaus mal itneressieren würde). Wenn das nicht geht, dann würde ich dir empfehlen eine Linux Live-CD zu brennen und mit dieser deine Daten auf eine externe Platte zu sichern und den Rechner dann zu formatieren. Alles was ausführbar ist (exe,com, scr, bat,pif, inf..) sollte nicht gesichert werden, nur Dokumente, Fotos, Filme, etc... lg myrtille
__________________ |
29.08.2009, 15:20 | #3 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht Also es löscht nur weiter wenn die Internetverbindung steht!!!Was für ein Tool schlägst du vor??
__________________ |
29.08.2009, 15:31 | #4 |
/// TB-Ausbilder | Trojaner (Virus) löscht alles wenn Internetverbindung besteht Hi, lade dir folgende Programme herunter: Rootrepeal,OTL, mbam-setup.exe, sowie FlashDisinfector. Führe Flash-Disinfector auf deinem noch sauberen Rechner aus: Download den Flash Disinfector von sUBs und speichere die Datei auf Deinem Desktop.
Der Flashdisinfector wird eine autorun.inf auf deinem USB-Stick anlegen, diese soll vorbeugen, dass dein USB-Stick vom infizierten Rechner angesteckt wird. Führe den Flashdisinifector bitte nochmal auf dem infizierten Rechner aus, er wird versuchen gängige Malware, die sich per USB verbreitet, zu finden und unschädlich zu machen. Hier findest du die Anleitung und den Downloadlink für mbam-setup.exe: Die Malwarebytes Anleitung Rootkitscan mit RootRepeal
Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Kopiere die Dateien, die von den Programmen erstellt wurden, wieder auf deinen USB-Stick und poste sie anschließend hier. Wenn du Glück hast, dann findet MBAM schon den Bösewicht und der Spuk hat vorerst ein Ende. lg myrtille
__________________ Anfragen per Email, Profil- oder privater Nachricht werden ignoriert! Hilfe gibts NUR im Forum! Wer nach 24 Stunden keine weitere Antwort von mir bekommen hat, schickt bitte eine PM Spelling mistakes? Never, but keybaord malfunctions constantly! |
30.08.2009, 17:50 | #5 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht Das mit dem Flash Disinfectoru hast gesagt man soll es an dem NOCH sauberen PC ausfürhren.Heißt das das danach der saubere PC auch mit Viren voll ist??Also ich bin hier am laptop. Ich soll also die Datei herunterladen und ausführen. Dabei soll Virusscan Firewall aus sein und keine Internetverbindung bestehen. Tut mir leid aber das hört sich an wie ein Virus^^ Also was genau macht das dann??Ist danach mein Laptop auch noch mit Viren verseucht??Oder wird dann nur mein MP§-Stick verseucht??(darf also nix drauf sein??)Bitte erläutere es genau. |
30.08.2009, 18:35 | #6 |
/// TB-Ausbilder | Trojaner (Virus) löscht alles wenn Internetverbindung besteht Hi, sorry wenn es da zu Verwirrung gekommen ist. FlashDisinfector ist ein Programm, dass Malware entfernt, die sich über externe Medien verbreitet. Was es tut ist folgendes: Es kontrolliert auf bestimmte Malware, wenn diese am Rechner ist, wird sie entfernt. (Das ist bei dir hoffentlich nicht der Fall). Es schreibt einen geschützten Ordner "autorun.inf" auf all deine externen Medien. Dieser Ordner macht nichts, aber er verhindert durch seine Anwesenheit (und ihren Schutz), dass jemand mit bösen Absichten eine schädliche autorun.inf Datei auf deinem USB-Stick ablegen kann. Die autorun.inf ist eine Datei, die unter Windows beim einstecken des Sticks direkt ausgeführt wird, sie wird in letzter Zeit aber immer häufiger von Malware missbraucht. Das Szenario, dem ich mit dem Anwenden von FlashDisinfector vorbeugen will ist folgendes: Du bringst die Programme mit deinem USB-Stick auf deinen infizierten Rechner, beim anschließen des USB-Sticks wird die Malware informiert, dass ein externes Speichergerät eingesteckt wurde. Sie kopiert ihren Schadcode auf deinen Stick und schreibt in die autorun.inf, dass der Schadcode ausgeführt und auf den Rechner kopiert werden soll, wenn der Stick an einen Rechner angeschlossen wird. Das passiert ohne, dass du davon was merkst. Du lässt also die Programme durchlaufen, kopierst die Logs auf deinen USB-Stick und schließt diesen an deinen sauberen Rechner um mir die Dateien zu posten: Die autorun.inf wird ausgeführt und kopiert den Schadcode auf deinen sauberen Rechner und fängt an all deine dortigen Dateien ebenfalls zu löschen. Wenn der von Flashdisinfector erstellte Ordner auf den Stick ist, dann kann die Malware die autorun.inf nicht erstellen, mit der es den Schadcode ausführen wollte und du bist dadurch geschützt(er). Firewall und Antivirus sind leider deswegen zu deaktivieren, da sie häufig zu fehlalarmen führen. Da du den Rechner physisch vom Netz trennen sollst, brauchst du dir keine Sorgen wegen "spionage" zu machen, das Programm will und kann nicht nach Hause telephonieren. Leider erkennen viele Antivirusprogramme Komponenten von Flash_Disinfector als "Risktool", da diese auch missbraucht werden können. So nutzt es zb nircmd.exe, http://www.nirsoft.net/utils/nircmd.html , was keinerlei schädliche Funktion hat, an sich.. es ist ein Alternative zur Kommandozeile unter Windows, dass aber von zahlreichen Antivirenrpogrammen als schädlich erkannt wird. lg myrtille
__________________ --> Trojaner (Virus) löscht alles wenn Internetverbindung besteht |
31.08.2009, 12:15 | #7 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht Hi, Ok danke hab es jetzt kapiert.Beim FlashDisinfector ging alles gut:sogar mein Taskmanager geht wieder!!(Kann mir einer erklären warum??)Als ich aber den Rootkitscan mit RootRepeal gestartet habe hat es sich beim Intialisieren aufgehängt.Nach 2 Stunden habe ich den PC dann ausgeschaltet.Nach dem 2. mal gab ich dann auf.Kann mir jemand sagen warum sich das immer aufhängt??Ich teste jetzt einfach mal die anderen Programme. MFG NagaraHyuga |
31.08.2009, 13:18 | #8 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht OTL logfile created on: 31.8.2009 13:23:04 - Run 1 OTL by OldTimer - Version 3.0.10.7 Folder = H:\^^ Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 7.0.5730.13) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: d.M.yyyy 2,00 Gb Total Physical Memory | 1,61 Gb Available Physical Memory | 80,45% Memory free 3,85 Gb Paging File | 3,60 Gb Available in Paging File | 93,38% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 31,64 Gb Total Space | 4,12 Gb Free Space | 13,01% Space Free | Partition Type: NTFS Drive D: | 111,77 Gb Total Space | 10,69 Gb Free Space | 9,57% Space Free | Partition Type: NTFS Drive E: | 6,70 Gb Total Space | 1,53 Gb Free Space | 22,85% Space Free | Partition Type: NTFS F: Drive not present or media not loaded G: Drive not present or media not loaded Drive H: | 992,17 Mb Total Space | 908,11 Mb Free Space | 91,53% Space Free | Partition Type: FAT32 I: Drive not present or media not loaded Computer Name: -MTDVD- Current User Name: Administrator Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (All) ========== PRC - C:\WINDOWS\System32\smss.exe (Microsoft Corporation) PRC - C:\WINDOWS\System32\csrss.exe (Microsoft Corporation) PRC - C:\WINDOWS\System32\winlogon.exe (Microsoft Corporation) PRC - C:\WINDOWS\System32\services.exe (Microsoft Corporation) PRC - C:\WINDOWS\System32\lsass.exe (Microsoft Corporation) PRC - C:\WINDOWS\System32\nvsvc32.exe (NVIDIA Corporation) PRC - C:\WINDOWS\System32\svchost.exe (Microsoft Corporation) PRC - C:\WINDOWS\System32\svchost.exe (Microsoft Corporation) PRC - C:\WINDOWS\System32\svchost.exe (Microsoft Corporation) PRC - C:\WINDOWS\System32\svchost.exe (Microsoft Corporation) PRC - C:\WINDOWS\System32\svchost.exe (Microsoft Corporation) PRC - C:\WINDOWS\System32\spoolsv.exe (Microsoft Corporation) PRC - C:\WINDOWS\System32\svchost.exe (Microsoft Corporation) PRC - C:\Programme\Network Associates\Common Framework\FrameworkService.exe (Network Associates, Inc.) PRC - C:\Programme\Network Associates\VirusScan\Mcshield.exe (Network Associates, Inc.) PRC - C:\Programme\Network Associates\VirusScan\VsTskMgr.exe (Network Associates, Inc.) PRC - C:\Programme\Network Associates\Common Framework\naPrdMgr.exe (Network Associates, Inc.) PRC - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (Rocket Division Software) PRC - C:\WINDOWS\Explorer.exe (Microsoft Corporation) PRC - C:\Programme\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) PRC - C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) PRC - C:\Programme\Network Associates\VirusScan\SHSTAT.EXE (Network Associates, Inc.) PRC - C:\Programme\Network Associates\Common Framework\UpdaterUI.exe (Network Associates, Inc.) PRC - C:\WINDOWS\System32\RUNDLL32.EXE (Microsoft Corporation) PRC - C:\WINDOWS\System32\alg.exe (Microsoft Corporation) PRC - C:\totalcmd\TOTALCMD.EXE (C. Ghisler & Co.) PRC - H:\^^\OTL.exe (OldTimer Tools) ========== Win32 Services (All) ========== SRV - (Alerter [Disabled | Stopped]) -- C:\WINDOWS\System32\alrsvc.dll (Microsoft Corporation) SRV - (ALG [On_Demand | Running]) -- C:\WINDOWS\System32\alg.exe (Microsoft Corporation) SRV - (AppMgmt [On_Demand | Stopped]) -- C:\WINDOWS\System32\appmgmts.dll (Microsoft Corporation) SRV - (aspnet_state [On_Demand | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation) SRV - (AudioSrv [Auto | Running]) -- C:\WINDOWS\System32\audiosrv.dll (Microsoft Corporation) SRV - (BITS [On_Demand | Stopped]) -- C:\WINDOWS\System32\qmgr.dll (Microsoft Corporation) SRV - (Browser [Auto | Stopped]) -- C:\WINDOWS\System32\browser.dll (Microsoft Corporation) SRV - (CiSvc [On_Demand | Stopped]) -- C:\WINDOWS\System32\cisvc.exe (Microsoft Corporation) SRV - (ClipSrv [Disabled | Stopped]) -- C:\WINDOWS\System32\clipsrv.exe (Microsoft Corporation) SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (COMSysApp [On_Demand | Stopped]) -- C:\WINDOWS\System32\dllhost.exe (Microsoft Corporation) SRV - (CryptSvc [Auto | Running]) -- C:\WINDOWS\System32\cryptsvc.dll (Microsoft Corporation) SRV - (DcomLaunch [Auto | Running]) -- C:\WINDOWS\System32\rpcss.dll (Microsoft Corporation) SRV - (Dhcp [Auto | Running]) -- C:\WINDOWS\System32\dhcpcsvc.dll (Microsoft Corporation) SRV - (dmadmin [On_Demand | Stopped]) -- C:\WINDOWS\System32\dmadmin.exe (Microsoft Corp., Veritas Software) SRV - (dmserver [Auto | Running]) -- C:\WINDOWS\System32\dmserver.dll (Microsoft Corp.) SRV - (Dnscache [Auto | Running]) -- C:\WINDOWS\System32\dnsrslvr.dll (Microsoft Corporation) SRV - (Dot3svc [On_Demand | Stopped]) -- C:\WINDOWS\System32\dot3svc.dll (Microsoft Corporation) SRV - (EapHost [On_Demand | Stopped]) -- C:\WINDOWS\System32\eapsvc.dll (Microsoft Corporation) SRV - (ERSvc [Auto | Running]) -- C:\WINDOWS\System32\ersvc.dll (Microsoft Corporation) SRV - (Eventlog [Auto | Running]) -- C:\WINDOWS\System32\services.exe (Microsoft Corporation) SRV - (EventSystem [On_Demand | Running]) -- C:\WINDOWS\System32\es.dll (Microsoft Corporation) SRV - (FastUserSwitchingCompatibility [On_Demand | Running]) -- C:\WINDOWS\System32\shsvcs.dll (Microsoft Corporation) SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) -- C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) SRV - (helpsvc [Auto | Running]) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation) SRV - (HidServ [Auto | Running]) -- C:\WINDOWS\System32\hidserv.dll (Microsoft Corporation) SRV - (hkmsvc [On_Demand | Stopped]) -- C:\WINDOWS\System32\kmsvc.dll (Microsoft Corporation) SRV - (HTTPFilter [On_Demand | Stopped]) -- C:\WINDOWS\System32\w3ssl.dll (Microsoft Corporation) SRV - (idsvc [Unknown | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation) SRV - (ImapiService [On_Demand | Stopped]) -- C:\WINDOWS\System32\imapi.exe (Microsoft Corporation) SRV - (LanmanServer [Auto | Running]) -- C:\WINDOWS\System32\srvsvc.dll (Microsoft Corporation) SRV - (lanmanworkstation [Auto | Running]) -- C:\WINDOWS\System32\wkssvc.dll (Microsoft Corporation) SRV - (LmHosts [Auto | Running]) -- C:\WINDOWS\System32\lmhsvc.dll (Microsoft Corporation) SRV - (McAfeeFramework [Auto | Running]) -- C:\Programme\Network Associates\Common Framework\FrameworkService.exe (Network Associates, Inc.) SRV - (McShield [Auto | Running]) -- C:\Programme\Network Associates\VirusScan\Mcshield.exe (Network Associates, Inc.) SRV - (McTaskManager [Auto | Running]) -- C:\Programme\Network Associates\VirusScan\VsTskMgr.exe (Network Associates, Inc.) SRV - (Messenger [Disabled | Stopped]) -- C:\WINDOWS\System32\msgsvc.dll (Microsoft Corporation) SRV - (MSDTC [On_Demand | Stopped]) -- C:\WINDOWS\System32\msdtc.exe (Microsoft Corporation) SRV - (MSIServer [On_Demand | Stopped]) -- C:\WINDOWS\System32\msiexec.exe (Microsoft Corporation) SRV - (napagent [On_Demand | Stopped]) -- C:\WINDOWS\System32\qagentrt.dll (Microsoft Corporation) SRV - (NetDDE [Disabled | Stopped]) -- C:\WINDOWS\System32\netdde.exe (Microsoft Corporation) SRV - (NetDDEdsdm [Disabled | Stopped]) -- C:\WINDOWS\System32\netdde.exe (Microsoft Corporation) SRV - (Netlogon [On_Demand | Stopped]) -- C:\WINDOWS\System32\lsass.exe (Microsoft Corporation) SRV - (Netman [On_Demand | Running]) -- C:\WINDOWS\System32\netman.dll (Microsoft Corporation) SRV - (NetTcpPortSharing [Disabled | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation) SRV - (Nla [On_Demand | Running]) -- C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation) SRV - (NtLmSsp [On_Demand | Stopped]) -- C:\WINDOWS\System32\lsass.exe (Microsoft Corporation) SRV - (NtmsSvc [On_Demand | Stopped]) -- C:\WINDOWS\System32\ntmssvc.dll (Microsoft Corporation) SRV - (nvsvc [Auto | Running]) -- C:\WINDOWS\System32\nvsvc32.exe (NVIDIA Corporation) SRV - (PlugPlay [Auto | Running]) -- C:\WINDOWS\System32\services.exe (Microsoft Corporation) SRV - (PolicyAgent [Auto | Running]) -- C:\WINDOWS\System32\lsass.exe (Microsoft Corporation) SRV - (ProtectedStorage [Auto | Running]) -- C:\WINDOWS\System32\lsass.exe (Microsoft Corporation) SRV - (RasAuto [On_Demand | Stopped]) -- C:\WINDOWS\System32\rasauto.dll (Microsoft Corporation) SRV - (RasMan [On_Demand | Running]) -- C:\WINDOWS\System32\rasmans.dll (Microsoft Corporation) SRV - (RDSessMgr [On_Demand | Stopped]) -- C:\WINDOWS\System32\sessmgr.exe (Microsoft Corporation) SRV - (RemoteAccess [Disabled | Stopped]) -- C:\WINDOWS\System32\mprdim.dll (Microsoft Corporation) SRV - (RemoteRegistry [Auto | Running]) -- C:\WINDOWS\System32\regsvc.dll (Microsoft Corporation) SRV - (RpcLocator [On_Demand | Stopped]) -- C:\WINDOWS\System32\locator.exe (Microsoft Corporation) SRV - (RpcSs [Auto | Running]) -- C:\WINDOWS\System32\rpcss.dll (Microsoft Corporation) SRV - (RSVP [On_Demand | Stopped]) -- C:\WINDOWS\System32\rsvp.exe (Microsoft Corporation) SRV - (SamSs [Auto | Running]) -- C:\WINDOWS\System32\lsass.exe (Microsoft Corporation) SRV - (SCardSvr [On_Demand | Stopped]) -- C:\WINDOWS\System32\SCardSvr.exe (Microsoft Corporation) SRV - (seclogon [Auto | Running]) -- C:\WINDOWS\System32\seclogon.dll (Microsoft Corporation) SRV - (SENS [Auto | Running]) -- C:\WINDOWS\System32\sens.dll (Microsoft Corporation) SRV - (SharedAccess [Auto | Running]) -- C:\WINDOWS\System32\ipnathlp.dll (Microsoft Corporation) SRV - (ShellHWDetection [Auto | Running]) -- C:\WINDOWS\System32\shsvcs.dll (Microsoft Corporation) SRV - (Spooler [Auto | Running]) -- C:\WINDOWS\System32\spoolsv.exe (Microsoft Corporation) SRV - (StarWindServiceAE [Auto | Running]) -- C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (Rocket Division Software) SRV - (stisvc [On_Demand | Stopped]) -- C:\WINDOWS\System32\wiaservc.dll (Microsoft Corporation) SRV - (SwPrv [On_Demand | Stopped]) -- C:\WINDOWS\System32\dllhost.exe (Microsoft Corporation) SRV - (SysmonLog [On_Demand | Stopped]) -- C:\WINDOWS\System32\smlogsvc.exe (Microsoft Corporation) SRV - (TapiSrv [On_Demand | Running]) -- C:\WINDOWS\System32\tapisrv.dll (Microsoft Corporation) SRV - (TermService [On_Demand | Running]) -- C:\WINDOWS\System32\termsrv.dll (Microsoft Corporation) SRV - (Themes [Auto | Running]) -- C:\WINDOWS\System32\shsvcs.dll (Microsoft Corporation) SRV - (TlntSvr [Disabled | Stopped]) -- C:\WINDOWS\System32\tlntsvr.exe (Microsoft Corporation) SRV - (TrkWks [Auto | Running]) -- C:\WINDOWS\System32\trkwks.dll (Microsoft Corporation) SRV - (UPS [On_Demand | Stopped]) -- C:\WINDOWS\System32\ups.exe (Microsoft Corporation) SRV - (VSS [On_Demand | Stopped]) -- C:\WINDOWS\System32\vssvc.exe (Microsoft Corporation) SRV - (W32Time [Auto | Running]) -- C:\WINDOWS\System32\w32time.dll (Microsoft Corporation) SRV - (WebClient [Auto | Running]) -- C:\WINDOWS\System32\webclnt.dll (Microsoft Corporation) SRV - (winmgmt [Auto | Running]) -- C:\WINDOWS\System32\wbem\WMIsvc.dll (Microsoft Corporation) SRV - (WinRM [On_Demand | Stopped]) -- C:\WINDOWS\System32\WsmSvc.dll (Microsoft Corporation) SRV - (Wmi [On_Demand | Stopped]) -- C:\WINDOWS\System32\advapi32.dll (Microsoft Corporation) SRV - (WmiApSrv [On_Demand | Stopped]) -- C:\WINDOWS\System32\wbem\wmiapsrv.exe (Microsoft Corporation) SRV - (WMPNetworkSvc [On_Demand | Stopped]) -- C:\Programme\Windows Media Player\WMPNetwk.exe (Microsoft Corporation) SRV - (wscsvc [Auto | Running]) -- C:\WINDOWS\System32\wscsvc.dll (Microsoft Corporation) SRV - (WudfSvc [On_Demand | Stopped]) -- C:\WINDOWS\System32\WUDFSvc.dll (Microsoft Corporation) SRV - (WZCSVC [Auto | Running]) -- C:\WINDOWS\System32\wzcsvc.dll (Microsoft Corporation) SRV - (xmlprov [On_Demand | Stopped]) -- C:\WINDOWS\System32\xmlprov.dll (Microsoft Corporation) ========== Driver Services (All) ========== |
31.08.2009, 13:19 | #9 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht DRV - (Abiosdsk [Disabled | Stopped]) -- File not found DRV - (abp480n5 [Disabled | Stopped]) -- File not found DRV - (ACPI [Boot | Running]) -- C:\WINDOWS\system32\DRIVERS\ACPI.sys (Microsoft Corporation) DRV - (ACPIEC [Disabled | Stopped]) -- C:\WINDOWS\System32\drivers\acpiec.sys (Microsoft Corporation) DRV - (adpu160m [Disabled | Stopped]) -- File not found DRV - (aec [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\aec.sys (Microsoft Corporation) DRV - (AFD [System | Running]) -- C:\WINDOWS\System32\drivers\afd.sys (Microsoft Corporation) DRV - (agp440 [Boot | Running]) -- C:\WINDOWS\system32\DRIVERS\agp440.sys (Microsoft Corporation) DRV - (Aha154x [Disabled | Stopped]) -- File not found DRV - (aic78u2 [Disabled | Stopped]) -- File not found DRV - (aic78xx [Disabled | Stopped]) -- File not found DRV - (ALCXSENS [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\ALCXSENS.SYS (Sensaura Ltd) DRV - (ALCXWDM [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.) DRV - (AliIde [Disabled | Stopped]) -- File not found DRV - (amsint [Disabled | Stopped]) -- File not found DRV - (asc [Disabled | Stopped]) -- File not found DRV - (asc3350p [Disabled | Stopped]) -- File not found DRV - (asc3550 [Disabled | Stopped]) -- File not found DRV - (Aspi32 [System | Running]) -- C:\WINDOWS\System32\drivers\aspi32.sys (Adaptec) DRV - (AsyncMac [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\asyncmac.sys (Microsoft Corporation) DRV - (atapi [Boot | Running]) -- C:\WINDOWS\system32\DRIVERS\atapi.sys (Microsoft Corporation) DRV - (Atdisk [Disabled | Stopped]) -- File not found DRV - (Atmarpc [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\atmarpc.sys (Microsoft Corporation) DRV - (audstub [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\audstub.sys (Microsoft Corporation) DRV - (Beep [System | Running]) -- C:\WINDOWS\System32\drivers\beep.sys (Microsoft Corporation) DRV - (cbidf2k [Disabled | Stopped]) -- C:\WINDOWS\System32\drivers\cbidf2k.sys (Microsoft Corporation) DRV - (cd20xrnt [Disabled | Stopped]) -- File not found DRV - (Cdaudio [System | Stopped]) -- C:\WINDOWS\System32\drivers\cdaudio.sys (Microsoft Corporation) DRV - (Cdfs [Disabled | Running]) -- C:\WINDOWS\System32\drivers\cdfs.sys (Microsoft Corporation) DRV - (Cdrom [System | Running]) -- C:\WINDOWS\System32\DRIVERS\cdrom.sys (Microsoft Corporation) DRV - (Changer [System | Stopped]) -- File not found DRV - (CmdIde [Disabled | Stopped]) -- File not found DRV - (Cpqarray [Disabled | Stopped]) -- File not found DRV - (dac960nt [Disabled | Stopped]) -- File not found DRV - (Disk [Boot | Running]) -- C:\WINDOWS\system32\DRIVERS\disk.sys (Microsoft Corporation) DRV - (dmboot [Disabled | Stopped]) -- C:\WINDOWS\System32\drivers\dmboot.sys (Microsoft Corp., Veritas Software) DRV - (dmio [Boot | Running]) -- C:\WINDOWS\System32\drivers\dmio.sys (Microsoft Corp., Veritas Software) DRV - (dmload [Boot | Running]) -- C:\WINDOWS\System32\drivers\dmload.sys (Microsoft Corp., Veritas Software.) DRV - (DMusic [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\DMusic.sys (Microsoft Corporation) DRV - (dpti2o [Disabled | Stopped]) -- File not found DRV - (drmkaud [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\drmkaud.sys (Microsoft Corporation) DRV - (Fastfat [Disabled | Running]) -- C:\WINDOWS\System32\drivers\fastfat.sys (Microsoft Corporation) DRV - (Fdc [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\fdc.sys (Microsoft Corporation) DRV - (Fips [System | Running]) -- C:\WINDOWS\System32\drivers\fips.sys (Microsoft Corporation) DRV - (Flpydisk [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\flpydisk.sys (Microsoft Corporation) DRV - (FltMgr [Boot | Running]) -- C:\WINDOWS\system32\drivers\fltmgr.sys (Microsoft Corporation) DRV - (Ftdisk [Boot | Running]) -- C:\WINDOWS\system32\DRIVERS\ftdisk.sys (Microsoft Corporation) DRV - (Gpc [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\msgpc.sys (Microsoft Corporation) DRV - (hidusb [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\hidusb.sys (Microsoft Corporation) DRV - (hpn [Disabled | Stopped]) -- File not found DRV - (HTTP [On_Demand | Stopped]) -- C:\WINDOWS\System32\Drivers\HTTP.sys (Microsoft Corporation) DRV - (i2omgmt [System | Stopped]) -- File not found DRV - (i2omp [Disabled | Stopped]) -- File not found DRV - (i8042prt [System | Running]) -- C:\WINDOWS\System32\DRIVERS\i8042prt.sys (Microsoft Corporation) DRV - (Imapi [System | Stopped]) -- C:\WINDOWS\System32\DRIVERS\imapi.sys (Microsoft Corporation) DRV - (ini910u [Disabled | Stopped]) -- File not found DRV - (IntelIde [Boot | Running]) -- C:\WINDOWS\system32\DRIVERS\intelide.sys (Microsoft Corporation) DRV - (intelppm [System | Running]) -- C:\WINDOWS\System32\DRIVERS\intelppm.sys (Microsoft Corporation) DRV - (Ip6Fw [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\ip6fw.sys (Microsoft Corporation) DRV - (IpFilterDriver [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys (Microsoft Corporation) DRV - (IpInIp [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\ipinip.sys (Microsoft Corporation) DRV - (IpNat [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ipnat.sys (Microsoft Corporation) DRV - (IPSec [System | Running]) -- C:\WINDOWS\System32\DRIVERS\ipsec.sys (Microsoft Corporation) DRV - (IRENUM [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\irenum.sys (Microsoft Corporation) DRV - (isapnp [Boot | Running]) -- C:\WINDOWS\system32\DRIVERS\isapnp.sys (Microsoft Corporation) DRV - (Kbdclass [System | Running]) -- C:\WINDOWS\System32\DRIVERS\kbdclass.sys (Microsoft Corporation) DRV - (kbdhid [System | Stopped]) -- C:\WINDOWS\System32\DRIVERS\kbdhid.sys (Microsoft Corporation) DRV - (kmixer [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\kmixer.sys (Microsoft Corporation) DRV - (KSecDD [Boot | Running]) -- C:\WINDOWS\System32\drivers\ksecdd.sys (Microsoft Corporation) DRV - (lbrtfdc [System | Stopped]) -- File not found DRV - (mnmdd [System | Running]) -- C:\WINDOWS\System32\drivers\mnmdd.sys (Microsoft Corporation) DRV - (Modem [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\modem.sys (Microsoft Corporation) DRV - (Mouclass [System | Running]) -- C:\WINDOWS\System32\DRIVERS\mouclass.sys (Microsoft Corporation) DRV - (mouhid [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\mouhid.sys (Microsoft Corporation) DRV - (MountMgr [Boot | Running]) -- C:\WINDOWS\System32\drivers\mountmgr.sys (Microsoft Corporation) DRV - (mraid35x [Disabled | Stopped]) -- File not found DRV - (MRxDAV [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\mrxdav.sys (Microsoft Corporation) DRV - (MRxSmb [System | Running]) -- C:\WINDOWS\System32\DRIVERS\mrxsmb.sys (Microsoft Corporation) DRV - (Msfs [System | Running]) -- C:\WINDOWS\System32\drivers\msfs.sys (Microsoft Corporation) DRV - (MSKSSRV [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\MSKSSRV.sys (Microsoft Corporation) DRV - (MSPCLOCK [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\MSPCLOCK.sys (Microsoft Corporation) DRV - (MSPQM [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\MSPQM.sys (Microsoft Corporation) DRV - (mssmbios [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\mssmbios.sys (Microsoft Corporation) DRV - (Mup [Boot | Running]) -- C:\WINDOWS\System32\drivers\mup.sys (Microsoft Corporation) DRV - (mv2 [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\mv2.sys (UVNC BVBA) DRV - (NaiAvFilter1 [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\naiavf5x.sys (Network Associates, Inc.) DRV - (NDIS [Boot | Running]) -- C:\WINDOWS\System32\drivers\ndis.sys (Microsoft Corporation) DRV - (NdisTapi [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ndistapi.sys (Microsoft Corporation) DRV - (Ndisuio [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ndisuio.sys (Microsoft Corporation) DRV - (NdisWan [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ndiswan.sys (Microsoft Corporation) DRV - (NDProxy [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\ndproxy.sys (Microsoft Corporation) DRV - (NetBIOS [System | Running]) -- C:\WINDOWS\System32\DRIVERS\netbios.sys (Microsoft Corporation) DRV - (NetBT [System | Running]) -- C:\WINDOWS\System32\DRIVERS\netbt.sys (Microsoft Corporation) DRV - (Npfs [System | Running]) -- C:\WINDOWS\System32\drivers\npfs.sys (Microsoft Corporation) DRV - (Ntfs [Disabled | Running]) -- C:\WINDOWS\System32\drivers\ntfs.sys (Microsoft Corporation) DRV - (Null [System | Running]) -- C:\WINDOWS\System32\drivers\null.sys (Microsoft Corporation) DRV - (nv [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\nv4_mini.sys (NVIDIA Corporation) DRV - (NwlnkFlt [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys (Microsoft Corporation) DRV - (NwlnkFwd [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys (Microsoft Corporation) DRV - (Parport [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\parport.sys (Microsoft Corporation) DRV - (PartMgr [Boot | Running]) -- C:\WINDOWS\System32\drivers\partmgr.sys (Microsoft Corporation) DRV - (ParVdm [Auto | Running]) -- C:\WINDOWS\System32\drivers\parvdm.sys (Microsoft Corporation) DRV - (PCI [Boot | Running]) -- C:\WINDOWS\system32\DRIVERS\pci.sys (Microsoft Corporation) DRV - (PCIDump [System | Stopped]) -- File not found DRV - (PCIIde [Boot | Running]) -- C:\WINDOWS\System32\drivers\pciide.sys (Microsoft Corporation) DRV - (Pcmcia [Disabled | Stopped]) -- C:\WINDOWS\System32\drivers\pcmcia.sys (Microsoft Corporation) DRV - (PDCOMP [On_Demand | Stopped]) -- File not found DRV - (PDFRAME [On_Demand | Stopped]) -- File not found DRV - (PDRELI [On_Demand | Stopped]) -- File not found DRV - (PDRFRAME [On_Demand | Stopped]) -- File not found DRV - (perc2 [Disabled | Stopped]) -- File not found DRV - (perc2hib [Disabled | Stopped]) -- File not found DRV - (PptpMiniport [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\raspptp.sys (Microsoft Corporation) DRV - (PSched [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\psched.sys (Microsoft Corporation) DRV - (Ptilink [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.) DRV - (ql1080 [Disabled | Stopped]) -- File not found DRV - (Ql10wnt [Disabled | Stopped]) -- File not found DRV - (ql12160 [Disabled | Stopped]) -- File not found DRV - (ql1240 [Disabled | Stopped]) -- File not found DRV - (ql1280 [Disabled | Stopped]) -- File not found DRV - (RasAcd [System | Running]) -- C:\WINDOWS\System32\DRIVERS\rasacd.sys (Microsoft Corporation) DRV - (Rasl2tp [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\rasl2tp.sys (Microsoft Corporation) DRV - (RasPppoe [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\raspppoe.sys (Microsoft Corporation) DRV - (Raspti [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\raspti.sys (Microsoft Corporation) DRV - (Rdbss [System | Running]) -- C:\WINDOWS\System32\DRIVERS\rdbss.sys (Microsoft Corporation) DRV - (RDPCDD [System | Running]) -- C:\WINDOWS\System32\DRIVERS\RDPCDD.sys (Microsoft Corporation) DRV - (rdpdr [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\rdpdr.sys (Microsoft Corporation) DRV - (RDPWD [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\rdpwd.sys (Microsoft Corporation) DRV - (redbook [System | Running]) -- C:\WINDOWS\System32\DRIVERS\redbook.sys (Microsoft Corporation) DRV - (rootrepeal [On_Demand | Stopped]) -- File not found DRV - (serenum [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\serenum.sys (Microsoft Corporation) DRV - (Serial [System | Running]) -- C:\WINDOWS\System32\DRIVERS\serial.sys (Microsoft Corporation) DRV - (Sfloppy [System | Stopped]) -- C:\WINDOWS\System32\drivers\sfloppy.sys (Microsoft Corporation) DRV - (Simbad [Disabled | Stopped]) -- File not found DRV - (Sparrow [Disabled | Stopped]) -- File not found DRV - (splitter [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\splitter.sys (Microsoft Corporation) DRV - (sptd [Boot | Running]) -- C:\WINDOWS\System32\Drivers\sptd.sys () DRV - (Srv [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\srv.sys (Microsoft Corporation) DRV - (swenum [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\swenum.sys (Microsoft Corporation) DRV - (swmidi [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\swmidi.sys (Microsoft Corporation) DRV - (symc810 [Disabled | Stopped]) -- File not found DRV - (symc8xx [Disabled | Stopped]) -- File not found DRV - (sym_hi [Disabled | Stopped]) -- File not found DRV - (sym_u3 [Disabled | Stopped]) -- File not found DRV - (sysaudio [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\sysaudio.sys (Microsoft Corporation) DRV - (Tcpip [System | Running]) -- C:\WINDOWS\System32\DRIVERS\tcpip.sys (Microsoft Corporation) DRV - (TDPIPE [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\tdpipe.sys (Microsoft Corporation) DRV - (TDTCP [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\tdtcp.sys (Microsoft Corporation) DRV - (TermDD [System | Running]) -- C:\WINDOWS\System32\DRIVERS\termdd.sys (Microsoft Corporation) DRV - (TosIde [Disabled | Stopped]) -- File not found DRV - (Udfs [Disabled | Stopped]) -- C:\WINDOWS\System32\drivers\udfs.sys (Microsoft Corporation) DRV - (ultra [Disabled | Stopped]) -- File not found DRV - (Update [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\update.sys (Microsoft Corporation) DRV - (usbaudio [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\usbaudio.sys (Microsoft Corporation) DRV - (usbccgp [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\usbccgp.sys (Microsoft Corporation) DRV - (usbehci [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\usbehci.sys (Microsoft Corporation) DRV - (usbhub [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\usbhub.sys (Microsoft Corporation) DRV - (USBSTOR [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS (Microsoft Corporation) DRV - (usbuhci [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\usbuhci.sys (Microsoft Corporation) DRV - (VgaSave [System | Running]) -- C:\WINDOWS\System32\drivers\vga.sys (Microsoft Corporation) DRV - (ViaIde [Disabled | Stopped]) -- File not found DRV - (VolSnap [Boot | Running]) -- C:\WINDOWS\System32\drivers\volsnap.sys (Microsoft Corporation) DRV - (Wanarp [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\wanarp.sys (Microsoft Corporation) DRV - (WDICA [On_Demand | Stopped]) -- File not found DRV - (wdmaud [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\wdmaud.sys (Microsoft Corporation) DRV - (WudfPf [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\WudfPf.sys (Microsoft Corporation) DRV - (WudfRd [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\wudfrd.sys (Microsoft Corporation) DRV - (yukonwxp [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\yukonwxp.sys (Marvell Semiconductor Inc.) ========== Standard Registry (All) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie IE - URLSearchHook: - Reg Error: Key error. File not found IE - URLSearchHook: {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru) IE - URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\System32\ieframe.dll (Microsoft Corporation) IE - URLSearchHook: {d51d388b-f5dc-471a-a1ce-5e2d671091c0} - C:\Programme\Mininova-Vuze\tbMini.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== |
31.08.2009, 13:24 | #10 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht FF - prefs.js..browser.search.defaultthis.engineName: "GEOTEK Customized Web Search" FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1318606&SearchSource=3&q={searchTerms}" FF - prefs.js..browser.search.selectedEngine: "GEOTEK Customized Web Search" FF - prefs.js..browser.startup.homepage: "google.de" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.1.1 FF - prefs.js..extensions.enabledItems: {0AC54906-5413-4C81-B446-07929BC39C25}:0.7.1 FF - prefs.js..extensions.enabledItems: {d7e4ce4d-a01d-420a-9d65-005fb62ffb0e}:2.2.0.9 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14 FF - prefs.js..extensions.enabledItems: {1dbc4a33-ea62-4330-966c-7bdad3455322}:1.0.6.6 FF - prefs.js..extensions.enabledItems: {9c51bd27-6ed8-4000-a2bf-36cb95c0c947}:10.1.0 FF - prefs.js..extensions.enabledItems: {AA994882-F391-4d2e-806F-8908DA4814ED}:1.11 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.2 FF - prefs.js..keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT1318606&SearchSource=2&q=" FF - prefs.js..network.proxy.backup.ftp: "" FF - prefs.js..network.proxy.backup.ftp_port: 0 FF - prefs.js..network.proxy.backup.gopher: "" FF - prefs.js..network.proxy.backup.gopher_port: 0 FF - prefs.js..network.proxy.backup.socks: "" FF - prefs.js..network.proxy.backup.socks_port: 0 FF - prefs.js..network.proxy.backup.ssl: "" FF - prefs.js..network.proxy.backup.ssl_port: 0 FF - prefs.js..network.proxy.ftp: "88.134.85.24" FF - prefs.js..network.proxy.gopher: "88.134.85.24" FF - prefs.js..network.proxy.http: "88.134.85.24" FF - prefs.js..network.proxy.share_proxy_settings: true FF - prefs.js..network.proxy.socks: "88.134.85.24" FF - prefs.js..network.proxy.ssl: "88.134.85.24" [2009.08.17 23:47:49 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\mozilla\Extensions [2009.08.17 23:47:49 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009.08.28 14:17:22 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\mozilla\Firefox\Profiles\g6j8rryi.default\extensions [2009.08.22 13:19:16 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\mozilla\Firefox\Profiles\g6j8rryi.default\extensions\{0AC54906-5413-4C81-B446-07929BC39C25} [2009.08.26 17:07:39 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\mozilla\Firefox\Profiles\g6j8rryi.default\extensions\{1dbc4a33-ea62-4330-966c-7bdad3455322} [2009.08.18 13:05:48 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\mozilla\Firefox\Profiles\g6j8rryi.default\extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947} [2009.08.22 12:16:14 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\mozilla\Firefox\Profiles\g6j8rryi.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED} [2009.08.18 13:01:19 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\mozilla\Firefox\Profiles\g6j8rryi.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2009.08.22 13:33:44 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\mozilla\Firefox\Profiles\g6j8rryi.default\extensions\{d51d388b-f5dc-471a-a1ce-5e2d671091c0} [2009.08.24 14:06:52 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\mozilla\Firefox\Profiles\g6j8rryi.default\extensions\{d7e4ce4d-a01d-420a-9d65-005fb62ffb0e} [2009.07.16 14:10:12 | 00,000,874 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Mozilla\FireFox\Profiles\g6j8rryi.default\searchplugins\conduit.xml O1 HOSTS File: (820 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_06\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (QIPBHO Class) - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Microsoft\Internet Explorer\qipsearchbar.dll (qip.ru) O2 - BHO: (Mininova-Vuze Toolbar) - {d51d388b-f5dc-471a-a1ce-5e2d671091c0} - C:\Programme\Mininova-Vuze\tbMini.dll (Conduit Ltd.) O2 - BHO: (kikin Plugin) - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Programme\kikin\ie_kikin.dll (kikin) O3 - HKLM\..\Toolbar: (Mininova-Vuze Toolbar) - {d51d388b-f5dc-471a-a1ce-5e2d671091c0} - C:\Programme\Mininova-Vuze\tbMini.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\ShellBrowser: (&Adresse) - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\System32\browseui.dll (Microsoft Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (Mininova-Vuze Toolbar) - {D51D388B-F5DC-471A-A1CE-5E2D671091C0} - C:\Programme\Mininova-Vuze\tbMini.dll (Conduit Ltd.) O4 - HKLM..\Run: [ICQ Lite] D:\Programme\ICQLite\ICQLite.exe (ICQ Ltd.) O4 - HKLM..\Run: [McAfeeUpdaterUI] C:\Programme\Network Associates\Common Framework\UpdaterUI.exe (Network Associates, Inc.) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Programme\NVIDIA Corporation\nView\nwiz.exe () O4 - HKLM..\Run: [ShStatEXE] C:\Programme\Network Associates\VirusScan\SHSTAT.EXE (Network Associates, Inc.) O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [Update] C:\WINDOWS\System32\update.exe () O4 - HKCU..\RunOnce: [ICQ Lite] D:\Programme\ICQLite\ICQLite.exe (ICQ Ltd.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 36 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = FF FF FF FF [binary data] O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_06\bin\npjpi160_06.dll (Sun Microsystems, Inc.) O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Programme\kikin\ie_kikin.dll (kikin) O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Programme\ICQLite\ICQLite.exe (ICQ Ltd.) O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Programme\ICQLite\ICQLite.exe (ICQ Ltd.) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\WINDOWS\System32\winrnr.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\System32\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\WINDOWS\System32\rsvpsp.dll (Microsoft Corporation) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06) O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.169.185.33 83.169.185.97 O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\System32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\System32\msvidctl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\wia {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\System32\wiascr.dll (Microsoft Corporation) O18 - Protocol\Filter: - application/octet-stream - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter: - application/x-complus - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter: - application/x-msdownload - C:\WINDOWS\System32\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter: - deflate - C:\WINDOWS\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter: - gzip - C:\WINDOWS\System32\urlmon.dll (Microsoft Corporation) O18 - Protocol\Filter: - text/webviewhtml - C:\WINDOWS\System32\SHELL32.dll (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: UIHost - (logonui.exe) - C:\WINDOWS\System32\logonui.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (rundll32 shell32) - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") - C:\WINDOWS\System32\sysdm.cpl (Microsoft Corporation) O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll - C:\WINDOWS\System32\crypt32.dll (Microsoft Corporation) O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll - C:\WINDOWS\System32\cryptnet.dll (Microsoft Corporation) O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll - C:\WINDOWS\System32\cscdll.dll (Microsoft Corporation) O20 - Winlogon\Notify\dimsntfy: DllName - %SystemRoot%\System32\dimsntfy.dll - C:\WINDOWS\System32\dimsntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll - C:\WINDOWS\System32\sclgntfy.dll (Microsoft Corporation) O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll - C:\WINDOWS\System32\WlNotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll - C:\WINDOWS\System32\WgaLogon.dll (Microsoft Corporation) O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll - C:\WINDOWS\System32\wlnotify.dll (Microsoft Corporation) O21 - SSODL: CDBurn - {fbeb8a05-beee-4442-804e-409d6c4515e9} - C:\WINDOWS\System32\SHELL32.dll (Microsoft Corporation) O21 - SSODL: PostBootReminder - {7849596a-48ea-486e-8937-a2a3009f31a9} - C:\WINDOWS\System32\SHELL32.dll (Microsoft Corporation) O21 - SSODL: SysTray - {35CEC8A3-2BE6-11D2-8773-92E220524153} - C:\WINDOWS\System32\stobject.dll (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\WINDOWS\System32\webcheck.dll (Microsoft Corporation) O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\System32\wpdshserviceobj.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {438755C2-A8BA-11D1-B96B-00A0C90312E1} - Browseui preloader - C:\WINDOWS\System32\browseui.dll (Microsoft Corporation) O22 - SharedTaskScheduler: {8C7461EF-2B13-11d2-BE35-3078302C2030} - Component Categories cache daemon - C:\WINDOWS\System32\browseui.dll (Microsoft Corporation) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O27 - HKLM IFEO\Your Image File Name Here without a path: Debugger - C:\WINDOWS\System32\ntsd.exe (Microsoft Corporation) O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\System32\shell32.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (schannel.dll) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O29 - HKLM SecurityProviders - (digest.dll) - C:\WINDOWS\System32\digest.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - C:\WINDOWS\System32\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\WINDOWS\System32\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\WINDOWS\System32\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\WINDOWS\System32\wdigest.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007.10.23 15:05:41 | 00,000,769 | ---- | M] () - C:\autoAlbum.log -- [ NTFS ] O32 - AutoRun File - [2006.01.07 22:38:56 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2009.08.30 20:25:16 | 00,000,000 | RHSD | M] - H:\autorun.inf -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found ========== Files/Folders - Created Within 30 Days ========== |
31.08.2009, 13:26 | #11 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht [2 C:\WINDOWS\System32\*.tmp files] [1 C:\WINDOWS\*.tmp files] File not found -- C:\WINDOWS\System32\winkey.dll File not found -- C:\WINDOWS\System32\reginv.dll File not found -- C:\WINDOWS\System32\lncom.exe File not found -- C:\WINDOWS\System32\Instmsng.dll File not found -- C:\WINDOWS\System\sservice.exe [2009.08.28 20:45:14 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData [2009.08.28 19:53:37 | 00,005,538 | ---- | C] () -- C:\WINDOWS\System32\update [2009.08.28 19:49:11 | 03,366,823 | ---- | C] () -- C:\WINDOWS\System32\update.exe [2009.08.28 19:17:57 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\°‘G [2009.08.28 18:40:25 | 00,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI [2009.08.28 18:21:31 | 00,000,145 | ---- | C] () -- C:\WINDOWS\w32dasm8.ini [2009.08.28 15:57:46 | 00,047,066 | ---- | C] () -- C:\WINDOWS\System32\lncom_.jpg [2009.08.28 15:56:27 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\aborange [2009.08.28 15:31:38 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Identities [2009.08.28 15:30:43 | 00,037,124 | ---- | C] () -- C:\WINDOWS\System32\imsn.exe [2009.08.28 15:29:16 | 00,065,275 | ---- | C] () -- C:\WINDOWS\p_ekran.jpg [2009.08.28 10:30:21 | 00,000,550 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\ICQ 5.1.lnk [2009.08.27 23:09:22 | 00,000,000 | ---D | C] -- C:\Programme\ICQ6Toolbar [2009.08.27 23:09:16 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\ICQ [2009.08.27 23:05:39 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Eigene Dateien\ICQ Lite [2009.08.27 23:04:42 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\ICQLite [2009.08.26 16:08:56 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\AceBIT [2009.08.26 16:08:56 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\AceBIT [2009.08.25 22:12:35 | 00,026,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS [2009.08.25 22:12:35 | 00,026,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbstor.sys [2009.08.25 21:17:56 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\NSPowertools [2009.08.25 21:17:53 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Protexis [2009.08.25 21:17:45 | 00,000,080 | RHS- | C] () -- C:\WINDOWS\System32\97EACEAFD6.dll [2009.08.25 15:01:04 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Lokale Einstellungen\Anwendungsdaten\Help [2009.08.25 15:01:04 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Help [2009.08.25 13:40:04 | 00,355,354 | ---- | C] () -- C:\AnalysisLog.sr0 [2009.08.24 17:43:15 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\FileZilla [2009.08.24 15:11:49 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Sun [2009.08.24 13:28:07 | 00,023,872 | ---- | C] (UVNC BVBA) -- C:\WINDOWS\System32\mv2.dll [2009.08.24 13:28:07 | 00,012,096 | ---- | C] (UVNC BVBA) -- C:\WINDOWS\System32\drivers\mv2.sys [2009.08.24 13:21:39 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\UltraVNC [2009.08.23 18:23:02 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Nvu [2009.08.23 15:54:37 | 00,485,920 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvudisp.exe [2009.08.23 15:54:37 | 00,019,495 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu [2009.08.23 15:53:52 | 10,457,088 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvoglnt.dll [2009.08.23 15:53:52 | 02,189,856 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuvid.dll [2009.08.23 15:53:52 | 02,002,944 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuda.dll [2009.08.23 15:53:52 | 01,706,528 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuvenc.dll [2009.08.23 15:53:52 | 00,868,352 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvapi.dll [2009.08.23 15:53:52 | 00,151,552 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcodins.dll [2009.08.23 15:53:52 | 00,151,552 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcod.dll [2009.08.23 15:53:49 | 01,597,690 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin [2009.08.23 15:47:46 | 00,485,920 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\NVUNINST.EXE [2009.08.23 13:58:55 | 00,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx [2009.08.23 13:52:54 | 00,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irbus.sys [2009.08.23 13:52:54 | 00,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spiisupd.exe [2009.08.23 13:52:54 | 00,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smtpapi.dll [2009.08.23 13:52:54 | 00,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwnh.dll [2009.08.23 13:52:54 | 00,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsdupd.exe [2009.08.23 13:52:53 | 00,377,984 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvaa.dll [2009.08.23 13:52:53 | 00,229,376 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2cqag.dll [2009.08.23 13:52:53 | 00,201,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvag.dll [2009.08.23 13:52:52 | 01,888,992 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3duag.dll [2009.08.23 13:52:52 | 01,737,856 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\mtxparhd.dll [2009.08.23 13:52:52 | 00,870,784 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3d1ag.dll [2009.08.23 13:52:52 | 00,516,768 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ativvaxx.dll [2009.08.23 13:52:52 | 00,397,056 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\s3gnb.dll [2009.08.23 13:52:52 | 00,286,792 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slextspk.dll [2009.08.23 13:52:52 | 00,086,016 | ---- | C] (Conexant) -- C:\WINDOWS\System32\mdmxsdk.dll [2009.08.23 13:52:52 | 00,073,832 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slcoinst.dll [2009.08.23 13:52:52 | 00,032,768 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativtmxx.dll [2009.08.23 13:52:52 | 00,032,285 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\hsfcisp2.dll [2009.08.23 13:52:52 | 00,023,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativmvxx.ax [2009.08.23 13:52:52 | 00,009,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativdaxx.ax [2009.08.23 13:52:51 | 00,188,508 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slgen.dll [2009.08.23 13:52:51 | 00,073,796 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slserv.exe [2009.08.23 13:52:51 | 00,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slrundll.exe [2009.08.23 13:52:51 | 00,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\slrundll.exe [2009.08.23 13:52:51 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax [2009.08.23 13:52:49 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\bits [2009.08.23 13:52:49 | 00,000,000 | ---D | C] -- C:\Programme\msn [2009.08.23 13:50:03 | 00,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys [2009.08.23 13:50:03 | 00,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys [2009.08.23 13:50:03 | 00,044,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\agpcpq.sys [2009.08.23 13:50:03 | 00,043,008 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\System32\drivers\amdagp.sys [2009.08.23 13:50:03 | 00,042,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\alim1541.sys [2009.08.23 13:50:03 | 00,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys [2009.08.23 13:50:03 | 00,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys [2009.08.23 13:50:03 | 00,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys [2009.08.23 13:50:03 | 00,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys [2009.08.23 13:50:03 | 00,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys [2009.08.23 13:50:03 | 00,004,255 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv01nt5.dll [2009.08.23 13:50:03 | 00,003,967 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv02nt5.dll [2009.08.23 13:50:03 | 00,003,775 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv11nt5.dll [2009.08.23 13:50:03 | 00,003,711 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv09nt5.dll [2009.08.23 13:50:03 | 00,003,647 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv07nt5.dll [2009.08.23 13:50:03 | 00,003,615 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv05nt5.dll [2009.08.23 13:50:03 | 00,003,135 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv08nt5.dll [2009.08.23 13:50:02 | 00,701,952 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys [2009.08.23 13:50:02 | 00,327,168 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys [2009.08.23 13:50:02 | 00,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys [2009.08.23 13:50:02 | 00,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys [2009.08.23 13:50:02 | 00,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod [2009.08.23 13:50:02 | 00,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys [2009.08.23 13:50:02 | 00,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys [2009.08.23 13:50:02 | 00,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys [2009.08.23 13:50:02 | 00,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys [2009.08.23 13:50:02 | 00,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys [2009.08.23 13:50:02 | 00,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys [2009.08.23 13:50:02 | 00,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys [2009.08.23 13:50:02 | 00,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys [2009.08.23 13:50:02 | 00,021,183 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv01nt5.dll [2009.08.23 13:50:02 | 00,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys [2009.08.23 13:50:02 | 00,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys [2009.08.23 13:50:02 | 00,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys [2009.08.23 13:50:01 | 00,685,056 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfcxts2.sys [2009.08.23 13:50:01 | 00,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthport.sys [2009.08.23 13:50:01 | 00,220,032 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfbs2s2.sys [2009.08.23 13:50:01 | 00,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty [2009.08.23 13:50:01 | 00,101,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthpan.sys [2009.08.23 13:50:01 | 00,046,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\gagp30kx.sys [2009.08.23 13:50:01 | 00,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthmodem.sys [2009.08.23 13:50:01 | 00,036,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthprint.sys [2009.08.23 13:50:01 | 00,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidbth.sys [2009.08.23 13:50:01 | 00,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv04nt5.dll [2009.08.23 13:50:01 | 00,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidir.sys [2009.08.23 13:50:01 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthusb.sys [2009.08.23 13:50:01 | 00,017,279 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv10nt5.dll [2009.08.23 13:50:01 | 00,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthenum.sys [2009.08.23 13:50:01 | 00,015,423 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\ch7xxnt5.dll [2009.08.23 13:50:01 | 00,014,143 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv06nt5.dll [2009.08.23 13:50:01 | 00,011,359 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv02nt5.dll [2009.08.23 13:50:00 | 01,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys [2009.08.23 13:50:00 | 01,041,536 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\drivers\hsfdpsp2.sys [2009.08.23 13:50:00 | 00,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys [2009.08.23 13:50:00 | 00,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys [2009.08.23 13:50:00 | 00,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys [2009.08.23 13:50:00 | 00,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys [2009.08.23 13:50:00 | 00,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys [2009.08.23 13:50:00 | 00,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys [2009.08.23 13:50:00 | 00,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys [2009.08.23 13:50:00 | 00,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img [2009.08.23 13:50:00 | 00,059,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rfcomm.sys [2009.08.23 13:50:00 | 00,044,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\uagp35.sys [2009.08.23 13:50:00 | 00,040,960 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\drivers\sisagp.sys [2009.08.23 13:50:00 | 00,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys [2009.08.23 13:50:00 | 00,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys [2009.08.23 13:50:00 | 00,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys [2009.08.23 13:50:00 | 00,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023x.sys [2009.08.23 13:50:00 | 00,012,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mutohpen.sys [2009.08.23 13:50:00 | 00,011,868 | ---- | C] (Conexant) -- C:\WINDOWS\System32\drivers\mdmxsdk.sys [2009.08.23 13:50:00 | 00,005,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smbali.sys [2009.08.23 13:50:00 | 00,003,901 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\siint5.dll [2009.08.23 13:49:59 | 00,121,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbvideo.sys [2009.08.23 13:49:59 | 00,042,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\viaagp.sys [2009.08.23 13:49:59 | 00,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys [2009.08.23 13:49:59 | 00,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys [2009.08.23 13:49:59 | 00,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wacompen.sys [2009.08.23 13:49:59 | 00,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys [2009.08.23 13:49:59 | 00,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys [2009.08.23 13:49:59 | 00,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys [2009.08.23 13:49:59 | 00,011,325 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\vchnt5.dll [2009.08.23 13:49:59 | 00,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys [2009.08.23 13:34:32 | 00,000,772 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Prototype(TM).lnk [2009.08.23 00:58:22 | 00,000,000 | ---D | C] -- C:\Programme\naruto videos [2009.08.22 17:35:19 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\teamspeak2 [2009.08.22 17:35:13 | 00,034,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\lhacm.acm [2009.08.22 17:35:12 | 00,000,539 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Desktop\Teamspeak 2 RC2.lnk [2009.08.22 13:28:57 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Eigene Dateien\Azureus Downloads [2009.08.22 13:25:27 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Azureus [2009.08.22 13:25:26 | 00,000,000 | ---D | C] -- C:\Programme\Conduit [2009.08.22 13:25:26 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Lokale Einstellungen\Anwendungsdaten\Conduit [2009.08.22 13:25:25 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Lokale Einstellungen\Anwendungsdaten\Mininova-Vuze [2009.08.22 13:25:25 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Azureus [2009.08.22 13:25:24 | 00,000,000 | ---D | C] -- C:\Programme\Mininova-Vuze [2009.08.21 22:40:58 | 00,000,000 | ---D | C] -- C:\Programme\kikin [2009.08.21 22:40:58 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\kikin [2009.08.19 12:27:49 | 00,000,723 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Desktop\Verknüpfung mit airrivals.lnk [2009.08.18 22:24:33 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mouhid.sys [2009.08.18 22:24:33 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mouhid.sys [2009.08.18 22:24:29 | 00,014,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\kbdhid.sys [2009.08.18 22:24:29 | 00,014,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhid.sys [2009.08.18 14:21:12 | 00,000,691 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\AirRivals_DE.lnk [2009.08.18 14:17:29 | 00,118,272 | ---- | C] (Lucent Technologies) -- C:\WINDOWS\System32\SX5363S.DLL [2009.08.18 14:17:29 | 00,102,400 | ---- | C] (RADVision) -- C:\WINDOWS\System32\RV32RTP.dll [2009.08.18 14:17:29 | 00,000,040 | ---- | C] () -- C:\WINDOWS\System32\Sx5363.ini [2009.08.18 12:47:25 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Lokale Einstellungen\Anwendungsdaten\Adobe [2009.08.18 10:49:03 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Talkback [2009.08.18 10:48:54 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Lokale Einstellungen\Anwendungsdaten\Thunderbird [2009.08.18 10:48:54 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Thunderbird [2009.08.18 10:42:12 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Eigene Dateien\Downloads [2009.08.18 10:32:47 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\vlc [2009.08.18 10:32:24 | 00,000,601 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\VLC media player.lnk [2009.08.18 10:11:58 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\WinRAR [2009.08.18 10:11:50 | 00,001,573 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\IrfanView Thumbnails.lnk [2009.08.18 10:11:50 | 00,000,693 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\IrfanView.lnk [2009.08.18 10:11:50 | 00,000,000 | ---D | C] -- C:\Programme\IrfanView 4.x [2009.08.18 10:11:49 | 00,000,000 | ---D | C] -- C:\Programme\7-Zip [2009.08.18 10:11:47 | 00,000,701 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Desktop\WinRAR 3.80.lnk [2009.08.18 10:11:46 | 00,000,000 | ---D | C] -- C:\Programme\WinRAR 3.80 [2009.08.18 10:06:29 | 00,000,811 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Alcohol 120%.lnk [2009.08.18 10:03:46 | 00,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009.08.18 10:03:30 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Adobe [2009.08.18 00:06:02 | 02,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll [2009.08.18 00:04:29 | 00,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpext.dll [2009.08.18 00:03:58 | 02,191,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe [2009.08.18 00:03:58 | 02,026,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe [2009.08.18 00:03:57 | 02,147,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe [2009.08.18 00:03:57 | 02,068,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlpa.exe [2009.08.18 00:03:38 | 00,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpsp4res.dll [2009.08.18 00:03:04 | 00,000,000 | ---D | C] -- C:\Programme\MSXML 4.0 [2009.08.18 00:02:51 | 00,455,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys [2009.08.17 23:56:10 | 00,000,524 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Desktop\QIP 2005.lnk [2009.08.17 23:54:53 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Lokale Einstellungen\Anwendungsdaten\GHISLER [2009.08.17 23:48:17 | 00,000,592 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Desktop\Firefox.lnk [2009.08.17 23:47:45 | 00,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2009.08.17 23:47:39 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Lokale Einstellungen\Anwendungsdaten\Mozilla [2009.08.17 23:47:39 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Mozilla [2009.08.17 23:43:35 | 00,001,281 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf [2009.08.17 23:43:01 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\QLIcons [2009.08.17 23:41:38 | 05,850,350 | -H-- | C] () -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Lokale Einstellungen\Anwendungsdaten\IconCache.db [2009.08.17 23:37:43 | 00,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation [2009.08.17 23:37:36 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\NVIDIA Corporation [2009.08.17 23:37:18 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\winrm |
31.08.2009, 13:29 | #12 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht [2009.08.17 23:37:18 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF [2009.08.17 23:37:18 | 00,000,000 | ---D | C] -- C:\WINDOWS\NLDRV [2009.08.17 23:37:18 | 00,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic [2009.08.17 23:37:18 | 00,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas [2009.08.17 23:35:53 | 07,741,664 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nv4_mini.sys [2009.08.17 23:35:53 | 07,741,664 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\nv4_mini.sys [2009.08.17 23:35:49 | 05,842,816 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nv4_disp.dll [2009.08.17 23:35:49 | 05,842,816 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\nv4_disp.dll [2009.08.17 23:33:28 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Macromedia [2009.08.17 23:33:28 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Adobe [2009.08.17 23:31:32 | 00,000,554 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Desktop\Total Commander.lnk [2009.08.17 23:31:30 | 00,000,545 | ---- | C] () -- C:\WINDOWS\UC.PIF [2009.08.17 23:31:30 | 00,000,545 | ---- | C] () -- C:\WINDOWS\RAR.PIF [2009.08.17 23:31:30 | 00,000,545 | ---- | C] () -- C:\WINDOWS\PKZIP.PIF [2009.08.17 23:31:30 | 00,000,545 | ---- | C] () -- C:\WINDOWS\PKUNZIP.PIF [2009.08.17 23:31:30 | 00,000,545 | ---- | C] () -- C:\WINDOWS\NOCLOSE.PIF [2009.08.17 23:31:30 | 00,000,545 | ---- | C] () -- C:\WINDOWS\LHA.PIF [2009.08.17 23:31:30 | 00,000,545 | ---- | C] () -- C:\WINDOWS\ARJ.PIF [2009.08.17 23:31:29 | 00,001,407 | ---- | C] () -- C:\WINDOWS\wincmd.ini [2009.08.17 23:31:29 | 00,000,000 | ---D | C] -- C:\totalcmd [2009.08.17 23:29:35 | 00,000,512 | ---- | C] () -- C:\WINDOWS\randseed.rnd [2009.08.17 23:25:15 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Network Associates [2009.08.17 23:22:25 | 00,765,952 | ---- | C] (Sensaura Ltd) -- C:\WINDOWS\System\crlds3d.dll [2009.08.17 23:22:25 | 00,155,648 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll [2009.08.17 23:22:25 | 00,065,536 | ---- | C] (Sensaura Ltd) -- C:\WINDOWS\System32\dllcache\a3d.dll [2009.08.17 23:22:25 | 00,065,536 | ---- | C] (Sensaura Ltd) -- C:\WINDOWS\System32\Audio3D.dll [2009.08.17 23:22:25 | 00,065,536 | ---- | C] (Sensaura Ltd) -- C:\WINDOWS\System32\a3d.dll [2009.08.17 23:22:24 | 00,601,100 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS [2009.08.17 23:22:24 | 00,391,424 | ---- | C] (Sensaura Ltd) -- C:\WINDOWS\System32\drivers\ALCXSENS.SYS [2009.08.17 23:22:24 | 00,065,536 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE [2009.08.17 23:22:22 | 05,672,960 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RTLCPL.EXE [2009.08.17 23:22:22 | 00,141,016 | ---- | C] () -- C:\WINDOWS\System32\ALSNDMGR.WAV [2009.08.17 23:22:18 | 14,204,416 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\ALSNDMGR.CPL [2009.08.17 23:22:18 | 00,208,896 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\alcupd.exe [2009.08.17 23:22:18 | 00,139,264 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\alcrmv.exe [2009.08.17 23:22:18 | 00,000,744 | ---- | C] () -- C:\WINDOWS\System32\drivers\alcxinit.dat [2009.08.17 22:54:13 | 00,006,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\splitter.sys [2009.08.17 22:54:12 | 00,142,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\aec.sys [2009.08.17 22:54:10 | 00,056,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\swmidi.sys [2009.08.17 22:54:09 | 00,052,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\DMusic.sys [2009.08.17 22:54:08 | 00,007,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\MSKSSRV.sys [2009.08.17 22:54:07 | 00,002,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmkaud.sys [2009.08.17 22:54:06 | 00,004,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\MSPQM.sys [2009.08.17 22:54:05 | 00,005,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\MSPCLOCK.sys [2009.08.17 22:54:03 | 00,060,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sysaudio.sys [2009.08.17 22:54:02 | 00,172,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\kmixer.sys [2009.08.17 22:54:01 | 00,083,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wdmaud.sys [2009.08.17 22:53:57 | 00,003,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\audstub.sys [2009.08.17 22:53:40 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\hidserv.dll [2009.08.17 22:53:38 | 00,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys [2009.08.17 22:53:38 | 00,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\portcls.sys [2009.08.17 22:53:38 | 00,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax [2009.08.17 22:53:38 | 00,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksproxy.ax [2009.08.17 22:53:38 | 00,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys [2009.08.17 22:53:38 | 00,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\drmk.sys [2009.08.17 22:53:38 | 00,060,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\USBAUDIO.sys [2009.08.17 22:53:38 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll [2009.08.17 22:53:38 | 00,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksuser.dll [2009.08.17 22:53:22 | 00,057,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\redbook.sys [2009.08.17 22:52:35 | 00,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\intelide.sys [2009.08.17 22:52:30 | 00,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll [2009.08.17 22:52:27 | 00,042,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\AGP440.SYS [2009.08.17 22:51:46 | 00,004,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\UMDF\INFCACHE.1 [2009.08.17 22:51:46 | 00,004,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\INFCACHE.1 [2009.08.17 22:51:46 | 00,004,128 | ---- | C] () -- C:\WINDOWS\System32\dllcache\INFCACHE.1 [2009.08.17 22:49:52 | 00,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF [2009.08.17 22:49:51 | 00,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Dokumente\Eigene Musik [2009.08.17 22:49:41 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls [2009.08.17 22:49:41 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls [2009.08.17 22:49:41 | 00,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0408.dll [2009.08.17 22:49:41 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040e.dll [2009.08.17 22:49:41 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt041f.dll [2009.08.17 22:49:41 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0419.dll [2009.08.17 22:49:41 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0415.dll [2009.08.17 22:49:41 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0405.dll [2009.08.17 22:49:39 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_857.nls [2009.08.17 22:49:39 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_857.nls [2009.08.17 22:49:39 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls [2009.08.17 22:49:39 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10081.nls [2009.08.17 22:49:39 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls [2009.08.17 22:49:39 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10081.nls [2009.08.17 22:49:39 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuq.dll [2009.08.17 22:49:39 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuf.dll [2009.08.17 22:49:39 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuq.dll [2009.08.17 22:49:39 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuf.dll [2009.08.17 22:49:39 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll [2009.08.17 22:49:39 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdazel.dll [2009.08.17 22:49:38 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll [2009.08.17 22:49:38 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll [2009.08.17 22:49:38 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll [2009.08.17 22:49:38 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll [2009.08.17 22:49:38 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtat.dll [2009.08.17 22:49:38 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdmon.dll [2009.08.17 22:49:38 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkyr.dll [2009.08.17 22:49:38 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdaze.dll [2009.08.17 22:49:37 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls [2009.08.17 22:49:37 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10017.nls [2009.08.17 22:49:37 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10007.nls [2009.08.17 22:49:37 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS [2009.08.17 22:49:37 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10017.nls [2009.08.17 22:49:37 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10007.nls [2009.08.17 22:49:37 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll [2009.08.17 22:49:37 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll [2009.08.17 22:49:37 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll [2009.08.17 22:49:37 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll [2009.08.17 22:49:37 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll [2009.08.17 22:49:37 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll [2009.08.17 22:49:37 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll [2009.08.17 22:49:37 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll [2009.08.17 22:49:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycc.dll [2009.08.17 22:49:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbduzb.dll [2009.08.17 22:49:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdur.dll [2009.08.17 22:49:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru1.dll [2009.08.17 22:49:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru.dll [2009.08.17 22:49:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkaz.dll [2009.08.17 22:49:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdbu.dll [2009.08.17 22:49:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdblr.dll [2009.08.17 22:49:36 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_869.nls [2009.08.17 22:49:36 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_737.nls [2009.08.17 22:49:36 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_869.nls [2009.08.17 22:49:36 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_737.nls [2009.08.17 22:49:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_875.nls [2009.08.17 22:49:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls [2009.08.17 22:49:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10006.nls [2009.08.17 22:49:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_875.nls [2009.08.17 22:49:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS [2009.08.17 22:49:36 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10006.nls [2009.08.17 22:49:36 | 00,008,192 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll [2009.08.17 22:49:36 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhept.dll [2009.08.17 22:49:36 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll [2009.08.17 22:49:36 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela3.dll [2009.08.17 22:49:36 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll [2009.08.17 22:49:36 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll [2009.08.17 22:49:36 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela2.dll [2009.08.17 22:49:36 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgkl.dll [2009.08.17 22:49:36 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll [2009.08.17 22:49:36 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll [2009.08.17 22:49:36 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll [2009.08.17 22:49:36 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe319.dll [2009.08.17 22:49:36 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe220.dll [2009.08.17 22:49:36 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe.dll [2009.08.17 22:49:35 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_866.nls [2009.08.17 22:49:35 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_855.nls [2009.08.17 22:49:35 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_866.nls [2009.08.17 22:49:35 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_855.nls [2009.08.17 22:49:35 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls [2009.08.17 22:49:35 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS [2009.08.17 22:49:35 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll [2009.08.17 22:49:35 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll [2009.08.17 22:49:35 | 00,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll [2009.08.17 22:49:35 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv1.dll [2009.08.17 22:49:35 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv.dll [2009.08.17 22:49:35 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdest.dll [2009.08.17 22:49:35 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll [2009.08.17 22:49:35 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll [2009.08.17 22:49:35 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt1.dll [2009.08.17 22:49:35 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt.dll [2009.08.17 22:49:34 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll [2009.08.17 22:49:34 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll [2009.08.17 22:49:34 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl.dll [2009.08.17 22:49:34 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll [2009.08.17 22:49:34 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll [2009.08.17 22:49:34 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll [2009.08.17 22:49:34 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl1.dll [2009.08.17 22:49:34 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl.dll [2009.08.17 22:49:34 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl.dll [2009.08.17 22:49:34 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu.dll [2009.08.17 22:49:34 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz2.dll [2009.08.17 22:49:34 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz1.dll [2009.08.17 22:49:34 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll [2009.08.17 22:49:34 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl1.dll [2009.08.17 22:49:34 | 00,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll [2009.08.17 22:49:34 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdro.dll [2009.08.17 22:49:34 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl1.dll [2009.08.17 22:49:34 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu1.dll [2009.08.17 22:49:33 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_852.nls [2009.08.17 22:49:33 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\c_852.nls [2009.08.17 22:49:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10082.nls [2009.08.17 22:49:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10029.nls [2009.08.17 22:49:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10010.nls [2009.08.17 22:49:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10082.nls [2009.08.17 22:49:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10029.nls [2009.08.17 22:49:33 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_10010.nls [2009.08.17 22:49:33 | 00,036,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dosapp.fon [2009.08.17 22:49:33 | 00,007,168 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll [2009.08.17 22:49:33 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz.dll [2009.08.17 22:49:33 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll [2009.08.17 22:49:33 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll [2009.08.17 22:49:33 | 00,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL [2009.08.17 22:49:33 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycl.dll [2009.08.17 22:49:33 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcr.dll [2009.08.17 22:49:33 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdal.dll [2009.08.17 22:49:29 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls [2009.08.17 22:49:29 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls [2009.08.17 22:49:28 | 00,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\dgrpsetu.dll [2009.08.17 22:49:28 | 00,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll [2009.08.17 22:49:28 | 00,086,556 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dllcache\dgsetup.dll [2009.08.17 22:49:28 | 00,086,556 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dgsetup.dll [2009.08.17 22:49:28 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll [2009.08.17 22:49:28 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll [2009.08.17 22:49:27 | 00,103,936 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll [2009.08.17 22:49:27 | 00,103,936 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnclass.dll [2009.08.17 22:49:27 | 00,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll [2009.08.17 22:49:27 | 00,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll |
31.08.2009, 13:30 | #13 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht [2009.08.17 22:49:27 | 00,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL [2009.08.17 22:49:27 | 00,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV [2009.08.17 22:49:27 | 00,009,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL [2009.08.17 22:49:27 | 00,004,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV [2009.08.17 22:49:27 | 00,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV [2009.08.17 22:49:27 | 00,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV [2009.08.17 22:49:27 | 00,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV [2009.08.17 22:49:26 | 00,127,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL [2009.08.17 22:49:26 | 00,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL [2009.08.17 22:49:26 | 00,073,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV [2009.08.17 22:49:26 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV [2009.08.17 22:49:26 | 00,025,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV [2009.08.17 22:49:26 | 00,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL [2009.08.17 22:49:26 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL [2009.08.17 22:49:26 | 00,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV [2009.08.17 22:49:26 | 00,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV [2009.08.17 22:49:26 | 00,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK [2009.08.17 22:49:25 | 00,109,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL [2009.08.17 22:49:25 | 00,070,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL [2009.08.17 22:49:25 | 00,033,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL [2009.08.17 22:49:25 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE [2009.08.17 22:49:25 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\taskman.exe [2009.08.17 22:49:25 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irenum.sys [2009.08.17 22:49:25 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irenum.sys [2009.08.17 22:49:25 | 00,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL [2009.08.17 22:49:25 | 00,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\batt.dll [2009.08.17 22:49:25 | 00,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll [2009.08.17 22:49:25 | 00,001,806 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT [2009.08.17 22:49:24 | 00,146,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WINSPOOL.DRV [2009.08.17 22:49:24 | 00,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll [2009.08.17 22:49:24 | 00,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\NOTEPAD.EXE [2009.08.17 22:49:24 | 00,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL [2009.08.17 22:47:29 | 00,817,199 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT [2009.08.17 22:47:29 | 00,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT [2009.08.17 22:47:29 | 00,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat [2009.08.17 22:47:29 | 00,105,926 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat [2009.08.17 22:47:29 | 00,041,270 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT [2009.08.17 22:47:29 | 00,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat [2009.08.17 22:47:29 | 00,033,765 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT [2009.08.17 22:47:29 | 00,021,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat [2009.08.17 22:47:29 | 00,016,825 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT [2009.08.17 22:47:29 | 00,014,433 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat [2009.08.17 22:47:29 | 00,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT [2009.08.17 22:47:29 | 00,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT [2009.08.17 22:47:29 | 00,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT [2009.08.17 22:47:29 | 00,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT [2009.08.17 22:47:29 | 00,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT [2009.08.17 22:47:29 | 00,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat [2009.08.17 22:47:28 | 02,039,179 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT [2009.08.17 22:47:28 | 01,246,537 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT [2009.08.17 22:47:28 | 01,088,840 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NTPRINT.CAT [2009.08.17 22:47:28 | 00,631,338 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT [2009.08.17 22:47:11 | 00,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Microsoft [2009.08.17 22:44:33 | 00,095,072 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2009.08.17 22:19:30 | 00,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat [2009.08.17 22:18:38 | 00,007,680 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009.08.17 22:16:33 | 00,013,104 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT [2009.08.17 22:15:58 | 00,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmpns.dll [2009.08.17 22:15:45 | 00,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Eigene Dateien\Eigene Musik [2009.08.17 22:15:44 | 00,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Eigene Dateien\Eigene Bilder [2009.08.17 22:11:57 | 00,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Lokale Einstellungen\Anwendungsdaten\Microsoft [2009.08.17 22:11:57 | 00,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator.-MTDVD-\Anwendungsdaten\Microsoft [2009.08.17 22:11:39 | 00,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD [2009.08.17 22:10:19 | 00,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2009.08.17 22:10:09 | 00,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls [2009.08.17 22:09:59 | 00,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winzm.ime [2009.08.17 22:09:59 | 00,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winsp.ime [2009.08.17 22:09:59 | 00,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winpy.ime [2009.08.17 22:09:57 | 00,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winime.ime [2009.08.17 22:09:56 | 00,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winar30.ime [2009.08.17 22:09:56 | 00,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wingb.ime [2009.08.17 22:09:55 | 00,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys [2009.08.17 22:09:54 | 00,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll [2009.08.17 22:09:53 | 00,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll [2009.08.17 22:09:52 | 00,426,041 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicepad.dll [2009.08.17 22:09:52 | 00,086,073 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicesub.dll [2009.08.17 22:09:49 | 00,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniime.dll [2009.08.17 22:09:48 | 00,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unicdime.ime [2009.08.17 22:09:48 | 00,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe [2009.08.17 22:09:47 | 00,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime [2009.08.17 22:09:47 | 00,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe [2009.08.17 22:09:47 | 00,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe [2009.08.17 22:09:47 | 00,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll [2009.08.17 22:09:46 | 00,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll [2009.08.17 22:09:46 | 00,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys [2009.08.17 22:09:46 | 00,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys [2009.08.17 22:09:46 | 00,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys [2009.08.17 22:09:42 | 00,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll [2009.08.17 22:09:41 | 00,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll [2009.08.17 22:09:41 | 00,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmptrap.exe [2009.08.17 22:09:40 | 00,358,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpincl.dll [2009.08.17 22:09:40 | 00,259,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpcl.dll [2009.08.17 22:09:40 | 00,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpsmir.dll [2009.08.17 22:09:40 | 00,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpthrd.dll [2009.08.17 22:09:40 | 00,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmp.exe [2009.08.17 22:09:40 | 00,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll [2009.08.17 22:09:40 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpmib.dll [2009.08.17 22:09:40 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll [2009.08.17 22:09:40 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll [2009.08.17 22:09:39 | 00,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smi2smir.exe [2009.08.17 22:09:39 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll [2009.08.17 22:09:39 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll [2009.08.17 22:09:33 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\romanime.ime [2009.08.17 22:09:32 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe [2009.08.17 22:09:31 | 00,020,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ramdisk.sys [2009.08.17 22:09:30 | 00,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quick.ime [2009.08.17 22:09:30 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe [2009.08.17 22:09:30 | 00,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe [2009.08.17 22:09:28 | 00,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls [2009.08.17 22:09:28 | 00,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls [2009.08.17 22:09:28 | 00,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlphr.exe [2009.08.17 22:09:28 | 00,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmigrate.dll [2009.08.17 22:09:27 | 00,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlgnt.ime [2009.08.17 22:09:27 | 00,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll [2009.08.17 22:09:27 | 00,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phon.ime [2009.08.17 22:09:27 | 00,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlcsd.dll [2009.08.17 22:09:26 | 00,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll [2009.08.17 22:09:26 | 00,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs404.dll [2009.08.17 22:09:26 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs804.dll [2009.08.17 22:09:26 | 00,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll [2009.08.17 22:09:22 | 04,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex [2009.08.17 22:09:19 | 00,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll [2009.08.17 22:09:19 | 00,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtstocom.exe [2009.08.17 22:09:15 | 01,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex [2009.08.17 22:09:15 | 00,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll [2009.08.17 22:09:15 | 00,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msiregmv.exe [2009.08.17 22:09:07 | 00,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys [2009.08.17 22:09:07 | 00,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migregdb.exe [2009.08.17 22:09:06 | 00,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll [2009.08.17 22:09:04 | 00,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lpdsvc.dll [2009.08.17 22:09:04 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lprmon.dll [2009.08.17 22:09:02 | 01,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex [2009.08.17 22:09:02 | 00,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll [2009.08.17 22:09:02 | 00,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls [2009.08.17 22:09:02 | 00,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lmmib2.dll [2009.08.17 22:09:01 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll [2009.08.17 22:09:01 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll [2009.08.17 22:09:01 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll [2009.08.17 22:09:01 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll [2009.08.17 22:09:00 | 00,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll [2009.08.17 22:09:00 | 00,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll [2009.08.17 22:09:00 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll [2009.08.17 22:09:00 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll [2009.08.17 22:09:00 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41j.dll [2009.08.17 22:09:00 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll [2009.08.17 22:09:00 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll [2009.08.17 22:09:00 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll [2009.08.17 22:09:00 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll [2009.08.17 22:08:59 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdibm02.dll [2009.08.17 22:08:59 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41a.dll [2009.08.17 22:08:59 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll [2009.08.17 22:08:59 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll [2009.08.17 22:08:59 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll [2009.08.17 22:08:59 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll [2009.08.17 22:08:59 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll [2009.08.17 22:08:59 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll [2009.08.17 22:08:59 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll [2009.08.17 22:08:59 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll [2009.08.17 22:08:58 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll [2009.08.17 22:08:58 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll [2009.08.17 22:08:58 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll [2009.08.17 22:08:58 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll [2009.08.17 22:08:58 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll [2009.08.17 22:08:57 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdax2.dll [2009.08.17 22:08:57 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll [2009.08.17 22:08:57 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll [2009.08.17 22:08:57 | 00,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll [2009.08.17 22:08:56 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd106n.dll [2009.08.17 22:08:56 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll [2009.08.17 22:08:56 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101.dll [2009.08.17 22:08:56 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll [2009.08.17 22:08:56 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll [2009.08.17 22:08:55 | 00,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iprip.dll [2009.08.17 22:08:53 | 00,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll [2009.08.17 22:08:53 | 00,315,455 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskf.dll [2009.08.17 22:08:53 | 00,102,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imlang.dll [2009.08.17 22:08:53 | 00,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe [2009.08.17 22:08:52 | 00,716,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcus.dll [2009.08.17 22:08:52 | 00,307,257 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.exe [2009.08.17 22:08:52 | 00,274,489 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputyc.dll [2009.08.17 22:08:52 | 00,262,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputy.exe [2009.08.17 22:08:52 | 00,233,527 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjprw.exe [2009.08.17 22:08:52 | 00,208,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpmig.exe [2009.08.17 22:08:52 | 00,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe [2009.08.17 22:08:52 | 00,155,705 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdsvr.exe [2009.08.17 22:08:52 | 00,081,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.dll [2009.08.17 22:08:52 | 00,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe [2009.08.17 22:08:52 | 00,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe [2009.08.17 22:08:52 | 00,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe [2009.08.17 22:08:51 | 00,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81k.dll [2009.08.17 22:08:51 | 00,368,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcic.dll [2009.08.17 22:08:51 | 00,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81.ime [2009.08.17 22:08:51 | 00,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe [2009.08.17 22:08:51 | 00,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex [2009.08.17 22:08:51 | 00,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrcic.dll [2009.08.17 22:08:51 | 00,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll [2009.08.17 22:08:51 | 00,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekr61.ime [2009.08.17 22:08:51 | 00,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmbx.dll [2009.08.17 22:08:51 | 00,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe [2009.08.17 22:08:47 | 10,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll [2009.08.17 22:08:44 | 13,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll [2009.08.17 22:08:41 | 10,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll [2009.08.17 22:08:41 | 00,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hostmib.dll [2009.08.17 22:08:40 | 00,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex |
31.08.2009, 13:31 | #14 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht [2009.08.17 22:08:40 | 00,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll [2009.08.17 22:08:38 | 00,563,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsst.dll [2009.08.17 22:08:38 | 00,400,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsxp32.dll [2009.08.17 22:08:38 | 00,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxstiff.dll [2009.08.17 22:08:38 | 00,268,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssvc.exe [2009.08.17 22:08:38 | 00,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxst30.dll [2009.08.17 22:08:38 | 00,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxswzrd.dll [2009.08.17 22:08:38 | 00,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsui.dll [2009.08.17 22:08:38 | 00,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll [2009.08.17 22:08:38 | 00,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsmon.dll [2009.08.17 22:08:38 | 00,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsext32.dll [2009.08.17 22:08:38 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe [2009.08.17 22:08:38 | 00,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsperf.dll [2009.08.17 22:08:38 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsres.dll [2009.08.17 22:08:37 | 00,451,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsapi.dll [2009.08.17 22:08:37 | 00,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscomex.dll [2009.08.17 22:08:37 | 00,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscover.exe [2009.08.17 22:08:37 | 00,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclnt.exe [2009.08.17 22:08:37 | 00,139,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll [2009.08.17 22:08:37 | 00,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll [2009.08.17 22:08:37 | 00,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscom.dll [2009.08.17 22:08:37 | 00,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsevent.dll [2009.08.17 22:08:37 | 00,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsdrv.dll [2009.08.17 22:08:37 | 00,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll [2009.08.17 22:08:35 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe [2009.08.17 22:08:35 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\f3ahvoas.dll [2009.08.17 22:08:34 | 00,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntagnt.dll [2009.08.17 22:08:34 | 00,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntwin.exe [2009.08.17 22:08:34 | 00,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntcmd.exe [2009.08.17 22:08:34 | 00,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys [2009.08.17 22:08:33 | 00,514,587 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\edb500.dll [2009.08.17 22:08:27 | 00,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dayi.ime [2009.08.17 22:08:25 | 00,057,399 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cplexe.exe [2009.08.17 22:08:25 | 00,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe [2009.08.17 22:08:22 | 00,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll [2009.08.17 22:08:22 | 00,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe [2009.08.17 22:08:22 | 00,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll [2009.08.17 22:08:22 | 00,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll [2009.08.17 22:08:22 | 00,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll [2009.08.17 22:08:22 | 00,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll [2009.08.17 22:08:22 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime [2009.08.17 22:08:21 | 01,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll [2009.08.17 22:08:21 | 00,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chajei.ime [2009.08.17 22:08:21 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe [2009.08.17 22:08:21 | 00,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe [2009.08.17 22:08:21 | 00,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe [2009.08.17 22:08:21 | 00,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe [2009.08.17 22:08:20 | 00,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys [2009.08.17 22:08:19 | 00,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_g18030.dll [2009.08.17 22:08:19 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls [2009.08.17 22:08:19 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls [2009.08.17 22:08:19 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls [2009.08.17 22:08:19 | 00,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll [2009.08.17 22:08:19 | 00,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll [2009.08.17 22:08:18 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls [2009.08.17 22:08:18 | 00,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls [2009.08.17 22:08:18 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls [2009.08.17 22:08:18 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls [2009.08.17 22:08:17 | 00,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls [2009.08.17 22:08:17 | 00,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls [2009.08.17 22:08:17 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls [2009.08.17 22:08:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls [2009.08.17 22:08:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls [2009.08.17 22:08:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls [2009.08.17 22:08:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls [2009.08.17 22:08:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls [2009.08.17 22:08:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls [2009.08.17 22:08:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls [2009.08.17 22:08:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls [2009.08.17 22:08:17 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls [2009.08.17 22:08:16 | 00,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls [2009.08.17 22:08:16 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls [2009.08.17 22:08:15 | 00,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls [2009.08.17 22:08:15 | 00,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls [2009.08.17 22:08:15 | 00,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls [2009.08.17 22:08:15 | 00,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls [2009.08.17 22:08:15 | 00,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls [2009.08.17 22:08:15 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls [2009.08.17 22:08:15 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls [2009.08.17 22:08:14 | 00,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls [2009.08.17 22:08:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls [2009.08.17 22:08:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls [2009.08.17 22:08:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls [2009.08.17 22:08:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls [2009.08.17 22:08:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls [2009.08.17 22:08:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls [2009.08.17 22:08:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls [2009.08.17 22:08:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls [2009.08.17 22:08:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls [2009.08.17 22:08:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls [2009.08.17 22:08:14 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls [2009.08.17 22:08:13 | 00,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls [2009.08.17 22:08:13 | 00,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls [2009.08.17 22:08:13 | 00,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls [2009.08.17 22:08:13 | 00,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls [2009.08.17 22:08:13 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls [2009.08.17 22:08:13 | 00,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls [2009.08.17 22:08:12 | 00,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls [2009.08.17 22:08:10 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0804.dll [2009.08.17 22:08:10 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0412.dll [2009.08.17 22:08:10 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0411.dll [2009.08.17 22:08:10 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040d.dll [2009.08.17 22:08:10 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0404.dll [2009.08.17 22:08:10 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0401.dll [2009.08.17 22:08:05 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptsat.dll [2009.08.17 22:07:59 | 00,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmcsat.dll [2009.08.17 22:07:54 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv [2009.08.17 22:07:19 | 00,018,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll [2009.08.17 22:07:11 | 01,351,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.ocx [2009.08.17 22:07:11 | 01,071,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mscomctl.ocx [2009.08.17 22:07:11 | 01,066,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mscomctl32.ocx [2009.08.17 22:07:11 | 00,722,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vb40032.dll [2009.08.17 22:07:11 | 00,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mscomct2.ocx [2009.08.17 22:07:11 | 00,416,528 | ---- | C] (Microsoft Corporation ) -- C:\WINDOWS\System32\dllcache\comct332.ocx [2009.08.17 22:07:11 | 00,413,696 | ---- | C] (Creative Labs) -- C:\WINDOWS\System32\dllcache\wrap_oal.dll [2009.08.17 22:07:11 | 00,344,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msvcr71.dll [2009.08.17 22:07:11 | 00,339,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msvcr70.dll [2009.08.17 22:07:11 | 00,275,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdatgrd.ocx [2009.08.17 22:07:11 | 00,260,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msflxgrd.ocx [2009.08.17 22:07:11 | 00,232,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdatlst.ocx [2009.08.17 22:07:11 | 00,224,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tabctl32.ocx [2009.08.17 22:07:11 | 00,212,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\richtx32.ocx [2009.08.17 22:07:11 | 00,200,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dblist32.ocx [2009.08.17 22:07:11 | 00,198,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mci32.ocx [2009.08.17 22:07:11 | 00,196,608 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\dllcache\ssleay32.dll [2009.08.17 22:07:11 | 00,166,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msmask32.ocx [2009.08.17 22:07:11 | 00,164,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comct232.ocx [2009.08.17 22:07:11 | 00,152,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comdlg32.ocx [2009.08.17 22:07:11 | 00,132,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msinet.ocx [2009.08.17 22:07:11 | 00,124,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mswinsck.ocx [2009.08.17 22:07:11 | 00,103,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mscomm32.ocx [2009.08.17 22:07:11 | 00,083,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\picclp32.ocx [2009.08.17 22:07:11 | 00,067,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sysinfo.ocx [2009.08.17 22:07:11 | 00,059,904 | ---- | C] () -- C:\WINDOWS\System32\zlib1.dll [2009.08.17 22:07:11 | 00,021,504 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\dllcache\openal32.dll [2009.08.17 22:07:10 | 02,887,680 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\libmmd.dll [2009.08.17 22:07:10 | 01,872,666 | ---- | C] (Red Hat) -- C:\WINDOWS\System32\dllcache\cygwin1.dll [2009.08.17 22:07:10 | 01,060,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc71.dll [2009.08.17 22:07:10 | 01,053,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc71u.dll [2009.08.17 22:07:10 | 01,024,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc70.dll [2009.08.17 22:07:10 | 01,017,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc70u.dll [2009.08.17 22:07:10 | 01,015,808 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\dllcache\libeay32.dll [2009.08.17 22:07:10 | 00,898,048 | ---- | C] (GNU <www.gnu.org>) -- C:\WINDOWS\System32\dllcache\libiconv2.dll [2009.08.17 22:07:10 | 00,503,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msvcp71.dll [2009.08.17 22:07:10 | 00,487,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msvcp70.dll [2009.08.17 22:07:10 | 00,394,752 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cygwinb19.dll [2009.08.17 22:07:10 | 00,294,920 | ---- | C] (AutoIt Team) -- C:\WINDOWS\System32\dllcache\autoitx3.dll [2009.08.17 22:07:10 | 00,196,608 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\dllcache\libssl32.dll [2009.08.17 22:07:10 | 00,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msstdfmt.dll [2009.08.17 22:07:10 | 00,101,888 | ---- | C] (GNU <www.gnu.org>) -- C:\WINDOWS\System32\dllcache\libintl3.dll [2009.08.17 22:07:10 | 00,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msstkprp.dll [2009.08.17 22:07:10 | 00,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atl71.dll [2009.08.17 22:07:10 | 00,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atl70.dll [2009.08.17 22:07:10 | 00,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msvci70.dll [2009.08.17 22:07:04 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\Adobe [2009.08.17 22:06:55 | 00,139,264 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2009.08.17 22:06:55 | 00,135,168 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2009.08.17 22:06:55 | 00,135,168 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2009.08.17 22:06:55 | 00,069,632 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2009.08.17 22:02:57 | 00,014,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg2.dll [2009.08.17 22:02:53 | 01,683,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XpsSvcs.dll [2009.08.17 22:02:53 | 01,683,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\XpsSvcs.dll [2009.08.17 22:02:53 | 00,677,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\PrintFilterPipelineSvc.exe [2009.08.17 22:02:53 | 00,583,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XPSSHHDR.dll [2009.08.17 22:02:53 | 00,583,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\XPSSHHDR.dll [2009.08.17 22:02:53 | 00,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prntvpt.dll [2009.08.17 22:02:53 | 00,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\FilterPipelinePrintProc.dll [2009.08.17 21:59:54 | 00,002,951 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT [2009.08.17 21:59:46 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Windows Genuine Advantage [2009.08.17 21:58:37 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest [2009.08.17 21:58:37 | 00,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest [2009.08.17 21:58:31 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest [2009.08.17 21:58:31 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest [2009.08.17 21:58:31 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest [2009.08.17 21:58:31 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest [2009.08.17 21:58:31 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest [2009.08.17 21:58:31 | 00,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2009.08.17 21:58:31 | 00,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Dokumente\Eigene Bilder [2009.08.17 21:58:20 | 00,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\notiflag.exe [2009.08.17 21:58:20 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atrace.dll [2009.08.17 21:58:20 | 00,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll [2009.08.17 21:58:19 | 00,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helphost.exe [2009.08.17 21:58:19 | 00,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\brpinfo.dll [2009.08.17 21:58:19 | 00,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hcappres.dll [2009.08.17 21:58:17 | 00,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srdiag.exe [2009.08.17 21:58:17 | 00,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf [2009.08.17 21:58:16 | 00,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg723.acm [2009.08.17 21:58:16 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll [2009.08.17 21:58:16 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmevtmsg.dll [2009.08.17 21:58:15 | 00,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\acctres.dll [2009.08.17 21:58:15 | 00,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll [2009.08.17 21:58:12 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll [2009.08.17 21:58:12 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isignup.exe [2009.08.17 21:58:12 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icfgnt5.dll [2009.08.17 21:58:09 | 03,166,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msgr3en.dll [2009.08.17 21:58:09 | 00,727,614 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srchui.dll [2009.08.17 21:58:09 | 00,058,434 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srchctls.dll [2009.08.17 21:58:06 | 01,743,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng.dll |
31.08.2009, 13:33 | #15 |
| Trojaner (Virus) löscht alles wenn Internetverbindung besteht [2009.08.17 21:58:06 | 01,743,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll [2009.08.17 21:58:06 | 00,556,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll [2009.08.17 21:58:06 | 00,556,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuapi.dll [2009.08.17 21:58:06 | 00,325,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll [2009.08.17 21:58:06 | 00,325,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wucltui.dll [2009.08.17 21:58:06 | 00,215,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaucpl.cpl [2009.08.17 21:58:06 | 00,215,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaucpl.cpl [2009.08.17 21:58:06 | 00,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll [2009.08.17 21:58:06 | 00,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng1.dll [2009.08.17 21:58:06 | 00,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe [2009.08.17 21:58:06 | 00,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt1.exe [2009.08.17 21:58:06 | 00,053,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt.exe [2009.08.17 21:58:06 | 00,053,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe [2009.08.17 21:58:06 | 00,036,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll [2009.08.17 21:58:06 | 00,036,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wups.dll [2009.08.17 21:58:06 | 00,025,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauserv.dll [2009.08.17 21:58:06 | 00,025,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauserv.dll [2009.08.17 21:58:05 | 00,409,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgr.dll [2009.08.17 21:58:05 | 00,409,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qmgr.dll [2009.08.17 21:58:05 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll [2009.08.17 21:58:05 | 00,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qmgrprxy.dll [2009.08.17 21:58:05 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bitsprx2.dll [2009.08.17 21:58:05 | 00,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll [2009.08.17 21:58:05 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bitsprx4.dll [2009.08.17 21:58:05 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bitsprx3.dll [2009.08.17 21:58:05 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll [2009.08.17 21:58:05 | 00,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll [2009.08.17 21:57:50 | 00,565,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobmain.dll [2009.08.17 21:57:50 | 00,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobcomm.dll [2009.08.17 21:57:50 | 00,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oobebaln.exe [2009.08.17 21:57:50 | 00,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobshel.dll [2009.08.17 21:57:50 | 00,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoobe.exe [2009.08.17 21:57:50 | 00,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobweb.dll [2009.08.17 21:57:50 | 00,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobdl.dll [2009.08.17 21:57:48 | 00,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uploadm.exe [2009.08.17 21:57:47 | 00,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pchshell.dll [2009.08.17 21:57:47 | 00,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll [2009.08.17 21:57:47 | 00,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrslv.dll [2009.08.17 21:57:47 | 00,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll [2009.08.17 21:57:47 | 00,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll [2009.08.17 21:57:47 | 00,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrcdlg.dll [2009.08.17 21:57:47 | 00,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\racpldlg.dll [2009.08.17 21:57:47 | 00,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pchsvc.dll [2009.08.17 21:57:47 | 00,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll [2009.08.17 21:57:47 | 00,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrdm.dll [2009.08.17 21:57:46 | 00,380,416 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll [2009.08.17 21:57:46 | 00,172,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msconfig.exe [2009.08.17 21:57:45 | 00,769,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpctr.exe [2009.08.17 21:57:45 | 00,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe [2009.08.17 21:57:45 | 00,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hscupd.exe [2009.08.17 21:57:44 | 00,385,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rstrui.exe [2009.08.17 21:57:44 | 00,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll [2009.08.17 21:57:44 | 00,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srrstr.dll [2009.08.17 21:57:44 | 00,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srsvc.dll [2009.08.17 21:57:44 | 00,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srsvc.dll [2009.08.17 21:57:44 | 00,129,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fltMgr.sys [2009.08.17 21:57:44 | 00,129,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fltmgr.sys [2009.08.17 21:57:44 | 00,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srclient.dll [2009.08.17 21:57:44 | 00,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srclient.dll [2009.08.17 21:57:44 | 00,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltMc.exe [2009.08.17 21:57:44 | 00,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fltmc.exe [2009.08.17 21:57:44 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltlib.dll [2009.08.17 21:57:44 | 00,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fltlib.dll [2009.08.17 21:57:43 | 00,192,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msh261.drv [2009.08.17 21:57:43 | 00,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll [2009.08.17 21:57:43 | 00,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ils.dll [2009.08.17 21:57:43 | 00,073,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sr.sys [2009.08.17 21:57:43 | 00,073,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sr.sys [2009.08.17 21:57:43 | 00,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll [2009.08.17 21:57:43 | 00,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msconf.dll [2009.08.17 21:57:43 | 00,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll [2009.08.17 21:57:43 | 00,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mnmdd.dll [2009.08.17 21:57:43 | 00,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmsrvc.exe [2009.08.17 21:57:43 | 00,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mnmsrvc.exe [2009.08.17 21:57:43 | 00,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll [2009.08.17 21:57:43 | 00,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\isrdbg32.dll [2009.08.17 21:57:43 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll [2009.08.17 21:57:43 | 00,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmmkcert.dll [2009.08.17 21:57:40 | 00,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll [2009.08.17 21:57:40 | 00,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoeacct.dll [2009.08.17 21:57:40 | 00,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll [2009.08.17 21:57:40 | 00,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoert2.dll [2009.08.17 21:57:39 | 00,691,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcomm.dll [2009.08.17 21:57:39 | 00,691,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcomm.dll [2009.08.17 21:57:39 | 00,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll [2009.08.17 21:57:39 | 00,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetres.dll [2009.08.17 21:57:38 | 00,280,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstask.dll [2009.08.17 21:57:38 | 00,280,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstask.dll [2009.08.17 21:57:38 | 00,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\schedsvc.dll [2009.08.17 21:57:38 | 00,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\schedsvc.dll [2009.08.17 21:57:38 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe [2009.08.17 21:57:38 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstinit.exe [2009.08.17 21:57:37 | 00,282,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll [2009.08.17 21:57:37 | 00,282,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcfg.dll [2009.08.17 21:57:37 | 00,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll [2009.08.17 21:57:37 | 00,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isign32.dll [2009.08.17 21:57:37 | 00,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll [2009.08.17 21:57:37 | 00,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwdial.dll [2009.08.17 21:57:37 | 00,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll [2009.08.17 21:57:37 | 00,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwphbk.dll [2009.08.17 21:57:17 | 00,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2009.08.17 21:57:07 | 00,000,000 | ---D | C] -- C:\Programme\ComPlus Applications [2009.08.17 21:56:08 | 00,000,000 | ---D | C] -- C:\Programme\Windows Media Connect 2 [2009.08.17 21:56:07 | 00,413,696 | ---- | C] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll [2009.08.17 21:56:07 | 00,398,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\vbrun300.dll [2009.08.17 21:56:07 | 00,356,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\vbrun200.dll [2009.08.17 21:56:06 | 00,935,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\vb40016.dll [2009.08.17 21:56:06 | 00,722,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vb40032.dll [2009.08.17 21:56:06 | 00,271,264 | ---- | C] () -- C:\WINDOWS\System\vbrun100.dll [2009.08.17 21:56:06 | 00,224,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tabctl32.ocx [2009.08.17 21:56:06 | 00,196,608 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\ssleay32.dll [2009.08.17 21:56:06 | 00,067,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sysinfo.ocx [2009.08.17 21:56:05 | 00,339,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcr70.dll [2009.08.17 21:56:05 | 00,212,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\richtx32.ocx [2009.08.17 21:56:05 | 00,210,944 | ---- | C] () -- C:\WINDOWS\System\MSVCRT10.DLL [2009.08.17 21:56:05 | 00,124,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mswinsck.ocx [2009.08.17 21:56:05 | 00,083,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\picclp32.ocx [2009.08.17 21:56:05 | 00,032,768 | ---- | C] (Adobe Systems, Inc.) -- C:\WINDOWS\System\PLUGIN.DLL [2009.08.17 21:56:05 | 00,021,504 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\openal32.dll [2009.08.17 21:56:04 | 00,487,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvcp70.dll [2009.08.17 21:56:04 | 00,260,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msflxgrd.ocx [2009.08.17 21:56:04 | 00,166,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msmask32.ocx [2009.08.17 21:56:04 | 00,132,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msinet.ocx [2009.08.17 21:56:04 | 00,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msstdfmt.dll [2009.08.17 21:56:04 | 00,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msstkprp.dll [2009.08.17 21:56:04 | 00,054,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msvci70.dll [2009.08.17 21:56:03 | 01,071,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscomctl.ocx [2009.08.17 21:56:03 | 01,066,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscomctl32.ocx [2009.08.17 21:56:03 | 00,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscomct2.ocx [2009.08.17 21:56:03 | 00,275,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdatgrd.ocx [2009.08.17 21:56:03 | 00,232,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdatlst.ocx [2009.08.17 21:56:03 | 00,103,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mscomm32.ocx [2009.08.17 21:56:02 | 01,060,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc71.dll [2009.08.17 21:56:02 | 01,053,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc71u.dll [2009.08.17 21:56:02 | 01,024,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc70.dll [2009.08.17 21:56:02 | 01,017,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mfc70u.dll [2009.08.17 21:56:02 | 00,198,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mci32.ocx [2009.08.17 21:56:02 | 00,196,608 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\libssl32.dll [2009.08.17 21:56:01 | 02,887,680 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\libmmd.dll [2009.08.17 21:56:01 | 00,898,048 | ---- | C] (GNU <www.gnu.org>) -- C:\WINDOWS\System32\libiconv2.dll [2009.08.17 21:56:01 | 00,101,888 | ---- | C] (GNU <www.gnu.org>) -- C:\WINDOWS\System32\libintl3.dll [2009.08.17 21:56:00 | 01,872,666 | ---- | C] (Red Hat) -- C:\WINDOWS\System32\cygwin1.dll [2009.08.17 21:56:00 | 01,015,808 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\WINDOWS\System32\libeay32.dll [2009.08.17 21:56:00 | 00,394,752 | ---- | C] () -- C:\WINDOWS\System32\cygwinb19.dll [2009.08.17 21:56:00 | 00,200,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dblist32.ocx [2009.08.17 21:56:00 | 00,152,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comdlg32.ocx [2009.08.17 21:55:59 | 01,351,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comctl32.ocx [2009.08.17 21:55:59 | 00,416,528 | ---- | C] (Microsoft Corporation ) -- C:\WINDOWS\System32\comct332.ocx [2009.08.17 21:55:59 | 00,294,920 | ---- | C] (AutoIt Team) -- C:\WINDOWS\System32\autoitx3.dll [2009.08.17 21:55:59 | 00,164,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comct232.ocx [2009.08.17 21:55:59 | 00,089,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atl71.dll [2009.08.17 21:55:59 | 00,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atl70.dll [2009.08.17 21:55:58 | 00,206,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winfxdocobj.exe [2009.08.17 21:55:57 | 00,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedsbs.dll [2009.08.17 21:55:57 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msfeedssync.exe [2009.08.17 21:55:54 | 00,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\advpack.dll.mui [2009.08.17 21:55:53 | 00,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_3.dll [2009.08.17 21:55:53 | 00,061,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput9_1_0.dll [2009.08.17 21:55:52 | 00,507,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_1.dll [2009.08.17 21:55:52 | 00,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAudio2_0.dll [2009.08.17 21:55:52 | 00,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_9.dll [2009.08.17 21:55:52 | 00,266,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_8.dll [2009.08.17 21:55:52 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_1.dll [2009.08.17 21:55:52 | 00,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine3_0.dll [2009.08.17 21:55:52 | 00,065,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\XAPOFX1_0.dll [2009.08.17 21:55:52 | 00,062,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_2.dll [2009.08.17 21:55:52 | 00,062,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_1.dll [2009.08.17 21:55:51 | 00,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_10.dll [2009.08.17 21:55:51 | 00,261,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_7.dll [2009.08.17 21:55:51 | 00,255,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_6.dll [2009.08.17 21:55:51 | 00,251,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_5.dll [2009.08.17 21:55:51 | 00,237,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_4.dll [2009.08.17 21:55:51 | 00,236,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_3.dll [2009.08.17 21:55:51 | 00,230,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_2.dll [2009.08.17 21:55:51 | 00,229,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_1.dll [2009.08.17 21:55:50 | 00,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_0.dll [2009.08.17 21:55:50 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_4.dll [2009.08.17 21:55:50 | 00,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_3.dll [2009.08.17 21:55:50 | 00,017,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_2.dll [2009.08.17 21:55:50 | 00,015,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_1.dll [2009.08.17 21:55:50 | 00,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_0.dll [2009.08.17 21:55:49 | 03,850,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_38.dll [2009.08.17 21:55:48 | 03,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_37.dll [2009.08.17 21:55:48 | 03,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_36.dll [2009.08.17 21:55:47 | 03,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_35.dll [2009.08.17 21:55:46 | 03,497,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_34.dll [2009.08.17 21:55:46 | 03,495,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_33.dll [2009.08.17 21:55:45 | 03,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_32.dll [2009.08.17 21:55:45 | 02,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_31.dll [2009.08.17 21:55:44 | 02,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_30.dll [2009.08.17 21:55:43 | 02,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_29.dll [2009.08.17 21:55:43 | 02,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_28.dll [2009.08.17 21:55:43 | 02,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_27.dll [2009.08.17 21:55:42 | 02,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_25.dll [2009.08.17 21:55:42 | 02,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_26.dll [2009.08.17 21:55:41 | 02,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_24.dll [2009.08.17 21:55:41 | 00,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_38.dll [2009.08.17 21:55:41 | 00,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_37.dll [2009.08.17 21:55:41 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_36.dll [2009.08.17 21:55:41 | 00,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_35.dll [2009.08.17 21:55:41 | 00,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_34.dll [2009.08.17 21:55:41 | 00,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_33.dll [2009.08.17 21:55:41 | 00,440,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10.dll [2009.08.17 21:55:40 | 01,491,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_38.dll [2009.08.17 21:55:40 | 01,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_37.dll [2009.08.17 21:55:40 | 01,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dcompiler_36.dll [2009.08.17 21:55:39 | 01,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dcompiler_35.dll [2009.08.17 21:55:39 | 01,124,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dcompiler_34.dll [2009.08.17 21:55:39 | 01,123,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dcompiler_33.dll [2009.08.17 21:55:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe [2009.08.17 21:55:37 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\write.exe [2009.08.17 21:55:34 | 00,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe [2009.08.17 21:55:34 | 00,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndvol32.exe [2009.08.17 21:55:34 | 00,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll |
Themen zu Trojaner (Virus) löscht alles wenn Internetverbindung besteht |
anmelden, auf einmal, betriebssystem, bitte um hilfe, datei, dateien, dateien gelöscht, dateien retten, gelöscht, gelöscht worden, hilfe!, hilfe!!, hilfe!!!, internet, internetverbindung, laufwerk, laufwerk c, leute, löschen, löscht, neuste, nicht mehr, nichts, retten, starten., strg, strg alt entf, suche, taskmanager, trojaner, verbindung, virus, virusscan, windows |