antivir findet JAVA/Agent.M.1 in c:/ und ccleaner und mbytes verhalten sich komisch

Logfile of random's system information tool 1.08 (written by random/random)
Run by admoin at 2010-07-25 07:43:06
Microsoft Windows 7 Professional  
System drive C: has 178 GB (78%) free of 227 GB
Total RAM: 2013 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 07:43:17, on 25.07.2010
Platform: Windows 7  (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\System32\TpShocks.exe
C:\Program Files\Lenovo\HOTKEY\LVOSDSVC.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\***\Desktop\RSIT.exe
C:\Program Files\trend micro\admoin.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [TpShocks] TpShocks.exe
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\LVOSDSVC.exe
O4 - HKLM\..\Run: [PWMTRV] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [AcWin7Hlpr] C:\Program Files\Lenovo\Access Connections\AcTBenabler.exe
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CTCheck] C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [InstallShieldSetup] C:\PROGRA~1\INSTAL~1\{F61F2~1\Setup.exe -rebootC:\PROGRA~1\INSTAL~1\{F61F2~1\reboot.ini 
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKLM\..\RunOnce: [*WerKernelReporting] %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-21-1434163971-3200211884-4080888033-1001\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe" (User '***')
O4 - S-1-5-21-1434163971-3200211884-4080888033-1001 Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User '***')
O4 - S-1-5-21-1434163971-3200211884-4080888033-1001 User Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User '***')
O17 - HKLM\System\CCS\Services\Tcpip\..\{96BF598A-BA6D-4424-859B-CC6F10F972EC}: NameServer = 213.191.74.18 62.109.123.197
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AcPrfMgrSvc - Lenovo - C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe
O23 - Service: AcSvc - Lenovo - C:\Program Files\Lenovo\Access Connections\AcSvc.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\Lenovo\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\Lenovo\ATK Hotkey\GFNEXSrv.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: ThinkPad PM Service for SL Series (IBMPMSVC) - Lenovo - C:\Windows\system32\ibmpmsvc.exe
O23 - Service: Service of LFKA (LFKAS) - Unknown owner - C:\Program Files\Lenovo\ATK Hotkey\LFKAS.exe
O23 - Service: Power Manager DBC Service - Lenovo - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - C:\Program Files\Lenovo\System Update\SUService.exe
O23 - Service: ThinkPad HDD APS Logging Service (TPHDEXLGSVC) - Lenovo. - C:\Windows\System32\TPHDEXLG.exe
O23 - Service: Anzeige am Bildschirm (TPHKSVC) - Lenovo Group Limited - C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

--
End of file - 6479 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-04 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-03-02 282792]
""= []
"TpShocks"=C:\Windows\system32\TpShocks.exe [2009-12-11 337256]
"TPHOTKEY"=C:\Program Files\Lenovo\HOTKEY\LVOSDSVC.exe [2008-03-24 64368]
"PWMTRV"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWMTR32V.DLL,PwrMgrBkGndMonitor []
"AcWin7Hlpr"=C:\Program Files\Lenovo\Access Connections\AcTBenabler.exe [2009-10-13 36864]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-06-25 1537320]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"CTCheck"=C:\Program Files\Creative\Creative ZEN\ZEN Media Explorer\CTCheck.exe [2007-11-06 397312]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"InstallShieldSetup"=C:\PROGRA~1\INSTAL~1\{F61F2~1\Setup.exe [2002-11-16 179712]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]
"*WerKernelReporting"=C:\Windows\SYSTEM32\WerFault.exe [2009-07-14 360448]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-05-13 26192168]
"CTSyncU.exe"=C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe [2007-07-17 868352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ACGina

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-07-25 07:43:06 ----D---- C:\rsit
2010-07-25 07:43:06 ----D---- C:\Program Files\trend micro
2010-07-24 22:40:30 ----D---- C:\Windows\Minidump
2010-07-19 22:21:54 ----A---- C:\Windows\ODBC.INI
2010-07-19 22:21:33 ----D---- C:\Windows\system32\js
2010-07-19 22:21:33 ----D---- C:\Windows\system32\images
2010-07-19 22:21:33 ----D---- C:\Windows\system32\html
2010-07-19 22:21:33 ----D---- C:\Windows\system32\css
2010-07-19 22:21:33 ----D---- C:\Program Files\Business Objects
2010-07-19 22:18:08 ----D---- C:\Windows\PCHEALTH
2010-07-19 22:18:01 ----D---- C:\Program Files\Microsoft SQL Server
2010-07-19 22:17:22 ----D---- C:\Program Files\Microsoft Device Emulator
2010-07-19 22:16:19 ----D---- C:\Program Files\Windows Mobile 5.0 SDK R2
2010-07-19 22:15:26 ----D---- C:\Program Files\Microsoft Synchronization Services
2010-07-19 22:15:25 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2010-07-19 22:08:53 ----D---- C:\ProgramData\PreEmptive Solutions
2010-07-19 22:04:03 ----D---- C:\Program Files\Microsoft Office
2010-07-19 21:53:24 ----D---- C:\Windows\symbols
2010-07-19 21:17:36 ----D---- C:\Program Files\Common Files\Designer
2010-07-19 21:16:59 ----D---- C:\Windows\system32\1031
2010-07-19 21:14:23 ----D---- C:\Program Files\Microsoft.NET
2010-07-19 21:14:23 ----D---- C:\Program Files\Microsoft SDKs
2010-07-19 21:14:23 ----D---- C:\Program Files\HTML Help Workshop
2010-07-19 21:14:23 ----D---- C:\Program Files\Common Files\Merge Modules
2010-07-19 21:14:23 ----D---- C:\Program Files\CE Remote Tools
2010-07-19 21:14:22 ----D---- C:\Program Files\Microsoft Visual Studio 9.0
2010-07-19 21:13:08 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-07-19 21:12:58 ----D---- C:\Program Files\Microsoft Web Designer Tools
2010-07-19 21:12:37 ----RHD---- C:\MSOCache
2010-07-19 21:11:19 ----D---- C:\ProgramData\Microsoft Help
2010-07-13 08:51:06 ----A---- C:\Windows\system32\kernel32.dll
2010-07-13 08:51:05 ----A---- C:\Windows\system32\apphelp.dll
2010-07-07 00:09:38 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-07-07 00:09:38 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-07-07 00:09:29 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-07-07 00:09:29 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-07-07 00:09:28 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-07-07 00:09:28 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-07-07 00:09:28 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-07-07 00:09:27 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-07-06 16:10:01 ----D---- C:\Program Files\Catan
2010-07-06 14:50:58 ----D---- C:\Program Files\Catan GmbH
2010-07-04 20:15:12 ----N---- C:\Windows\system32\isutil.dll
2010-07-04 20:15:10 ----N---- C:\Windows\system32\ZShp1005.dll
2010-07-04 20:15:10 ----N---- C:\Windows\system32\zpppcl.dll
2010-07-04 20:15:10 ----N---- C:\Windows\system32\vs1005.dll
2010-07-04 20:15:10 ----N---- C:\Windows\apptune5.exe
2010-07-04 20:15:10 ----N---- C:\Windows\apptune.ini
2010-07-04 20:15:08 ----N---- C:\Windows\system32\ZUNINST.EXE
2010-07-04 20:15:08 ----N---- C:\Windows\system32\pcldll6l.dll
2010-07-04 20:15:08 ----N---- C:\Windows\system32\hpflash1.exe
2010-07-04 20:15:07 ----N---- C:\Windows\system32\ZTAG32.DLL
2010-07-04 20:15:07 ----N---- C:\Windows\system32\zpp.dll
2010-07-04 20:15:07 ----N---- C:\Windows\system32\Zlang.dll
2010-07-04 20:15:07 ----N---- C:\Windows\system32\ZGDI32.DLL
2010-07-04 20:15:07 ----N---- C:\Windows\system32\SDhp1000.DLL
2010-07-04 20:15:07 ----N---- C:\Windows\system32\IMF32.DLL
2010-07-04 20:15:07 ----A---- C:\Windows\system32\ZSPOOL.DLL
2010-07-04 20:15:07 ----A---- C:\Windows\system32\zPJL.dll
2010-07-04 20:15:07 ----A---- C:\Windows\system32\zlmhp1.dll
2010-07-04 20:15:07 ----A---- C:\Windows\system32\zlm.dll
2010-07-04 20:15:06 ----N---- C:\Windows\system32\zstatus.exe
2010-07-04 20:15:03 ----D---- C:\Program Files\hp Laserjet 1005
2010-07-04 17:13:27 ----D---- C:\Program Files\VideoLAN
2010-07-04 16:21:39 ----HD---- C:\Program Files\Avago-HP
2010-07-04 16:20:54 ----D---- C:\hp_P1000_P1500_Full_Solution
2010-07-04 15:59:17 ----N---- C:\Windows\system32\Sd32.dll
2010-07-04 15:51:36 ----D---- C:\ProgramData\Sun
2010-07-04 15:51:35 ----D---- C:\Program Files\Common Files\Java
2010-07-04 15:51:15 ----A---- C:\Windows\system32\javaws.exe
2010-07-04 15:51:15 ----A---- C:\Windows\system32\deployJava1.dll
2010-07-04 15:51:14 ----A---- C:\Windows\system32\javaw.exe
2010-07-04 15:51:14 ----A---- C:\Windows\system32\java.exe
2010-07-04 15:51:01 ----D---- C:\Program Files\Java
2010-07-04 15:35:32 ----D---- C:\ProgramData\Creative
2010-07-04 15:28:51 ----D---- C:\lj1005hb-ge
2010-07-04 15:18:35 ----D---- C:\Program Files\OpenOffice.org 3
2010-07-04 13:47:29 ----N---- C:\Windows\Ctregrun.exe
2010-07-04 13:45:47 ----D---- C:\Program Files\Common Files\Creative
2010-07-04 13:45:45 ----HD---- C:\Program Files\Creative Installation Information
2010-07-04 13:45:43 ----D---- C:\Program Files\Creative
2010-07-04 12:37:53 ----D---- C:\ProgramData\Adobe
2010-07-04 12:37:47 ----D---- C:\Program Files\Common Files\Adobe
2010-07-04 12:37:47 ----D---- C:\Program Files\Adobe
2010-07-04 09:50:17 ----D---- C:\Users\admoin\AppData\Roaming\Malwarebytes
2010-07-04 09:50:11 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-07-04 09:50:09 ----D---- C:\ProgramData\Malwarebytes
2010-07-04 09:50:09 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-07-04 09:50:09 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-07-04 09:49:31 ----D---- C:\Program Files\CCleaner
2010-07-04 08:53:14 ----D---- C:\Users\admoin\AppData\Roaming\Avira
2010-07-04 08:40:24 ----D---- C:\Users\admoin\AppData\Roaming\Macromedia
2010-07-04 08:40:24 ----D---- C:\Users\admoin\AppData\Roaming\Adobe
2010-07-03 20:12:41 ----D---- C:\Program Files\Common Files\Skype
2010-07-03 19:45:35 ----RD---- C:\Program Files\Skype
2010-07-03 19:45:33 ----D---- C:\ProgramData\Skype
2010-07-03 19:33:26 ----D---- C:\Users\admoin\AppData\Roaming\Thunderbird
2010-07-03 19:26:44 ----A---- C:\Windows\system32\snymsico.dll
2010-07-03 19:26:44 ----A---- C:\Windows\system32\drivers\rimsptsk.sys
2010-07-03 19:26:44 ----A---- C:\Windows\system32\drivers\rimmptsk.sys
2010-07-03 19:26:13 ----A---- C:\Windows\system32\ExplorerFrame.dll
2010-07-03 19:25:53 ----D---- C:\Program Files\Synaptics
2010-07-03 19:24:52 ----D---- C:\Users\admoin\AppData\Roaming\Mozilla
2010-07-03 18:57:23 ----A---- C:\Windows\system32\WdfCoInstaller01009.dll
2010-07-03 18:57:22 ----A---- C:\Windows\system32\SynTPCo4.dll
2010-07-03 18:57:22 ----A---- C:\Windows\system32\SynTPAPI.dll
2010-07-03 18:57:22 ----A---- C:\Windows\system32\drivers\SynTP.sys
2010-07-03 18:57:21 ----A---- C:\Windows\system32\SynCtrl.dll
2010-07-03 18:57:21 ----A---- C:\Windows\system32\SynCOM.dll
2010-07-03 18:56:34 ----D---- C:\Windows\Downloaded Installations
2010-07-03 18:54:51 ----N---- C:\Windows\system32\drivers\TPPWR32V.SYS
2010-07-03 18:54:51 ----N---- C:\Windows\PWMBTHLV.EXE
2010-07-03 18:54:25 ----A---- C:\Windows\system32\drivers\smiif32.sys
2010-07-03 18:54:07 ----D---- C:\Program Files\Common Files\InstallShield
2010-07-03 18:43:10 ----A---- C:\Windows\system32\drivers\PuAcpi32.sys
2010-07-03 18:43:09 ----R---- C:\Windows\system32\AABATT.dll
2010-07-03 18:43:09 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-03 18:41:38 ----A---- C:\Windows\qfeECBE.tmp
2010-07-03 18:41:24 ----D---- C:\Program Files\ThinkPad
2010-07-03 18:39:09 ----D---- C:\Program Files\Cisco
2010-07-03 18:39:07 ----D---- C:\ProgramData\Intel
2010-07-03 18:39:07 ----D---- C:\Program Files\Intel
2010-07-03 18:39:07 ----D---- C:\Program Files\Common Files\Intel
2010-07-03 18:38:26 ----D---- C:\ProgramData\Lenovo
2010-07-03 18:30:54 ----D---- C:\Windows\system32\Macromed
2010-07-03 15:05:33 ----D---- C:\Windows\Panther
2010-07-03 15:00:26 ----D---- C:\Program Files\WinRAR
2010-07-03 14:57:40 ----D---- C:\Program Files\7-Zip
2010-07-03 14:53:51 ----D---- C:\Program Files\Mozilla Thunderbird
2010-07-03 14:44:25 ----A---- C:\Windows\system32\msv1_0.dll
2010-07-03 14:44:11 ----N---- C:\Windows\system32\MpSigStub.exe
2010-07-03 14:43:44 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-07-03 14:43:44 ----A---- C:\Windows\system32\PresentationHost.exe
2010-07-03 14:43:44 ----A---- C:\Windows\system32\netfxperf.dll
2010-07-03 14:43:44 ----A---- C:\Windows\system32\mscoree.dll
2010-07-03 14:43:44 ----A---- C:\Windows\system32\dfshim.dll
2010-07-03 14:41:07 ----D---- C:\Program Files\Mozilla Firefox
2010-07-03 14:40:51 ----A---- C:\Windows\system32\MRT.exe
2010-07-03 14:40:42 ----A---- C:\Windows\system32\browserchoice.exe
2010-07-03 14:39:49 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-07-03 14:39:49 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-07-03 14:39:49 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-07-03 14:39:48 ----A---- C:\Windows\system32\vbscript.dll
2010-07-03 14:39:47 ----A---- C:\Windows\system32\ntdll.dll
2010-07-03 14:39:46 ----A---- C:\Windows\system32\wmp.dll
2010-07-03 14:39:45 ----A---- C:\Windows\system32\winresume.exe
2010-07-03 14:39:45 ----A---- C:\Windows\system32\winload.exe
2010-07-03 14:39:45 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2010-07-03 14:39:45 ----A---- C:\Windows\system32\CertEnroll.dll
2010-07-03 14:39:44 ----A---- C:\Windows\system32\wmploc.DLL
2010-07-03 14:39:43 ----A---- C:\Windows\system32\shell32.dll
2010-07-03 14:39:42 ----A---- C:\Windows\system32\lsasrv.dll
2010-07-03 14:39:42 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-07-03 14:39:41 ----A---- C:\Windows\system32\mshtml.dll
2010-07-03 14:39:40 ----A---- C:\Windows\system32\urlmon.dll
2010-07-03 14:39:40 ----A---- C:\Windows\system32\mstime.dll
2010-07-03 14:39:40 ----A---- C:\Windows\system32\ieframe.dll
2010-07-03 14:39:39 ----A---- C:\Windows\system32\wininet.dll
2010-07-03 14:39:39 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-07-03 14:39:39 ----A---- C:\Windows\system32\jsproxy.dll
2010-07-03 14:39:39 ----A---- C:\Windows\system32\iedkcs32.dll
2010-07-03 14:39:38 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-07-03 14:39:38 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-07-03 14:39:38 ----A---- C:\Windows\system32\secproc_isv.dll
2010-07-03 14:39:38 ----A---- C:\Windows\system32\secproc.dll
2010-07-03 14:39:38 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-07-03 14:39:38 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-07-03 14:39:38 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-07-03 14:39:38 ----A---- C:\Windows\system32\RMActivate.exe
2010-07-03 14:39:37 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-07-03 14:39:37 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-07-03 14:39:36 ----A---- C:\Windows\system32\drivers\srv.sys
2010-07-03 14:39:35 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-07-03 14:39:31 ----A---- C:\Windows\system32\msdri.dll
2010-07-03 14:39:31 ----A---- C:\Windows\system32\CPFilters.dll
2010-07-03 14:39:30 ----A---- C:\Windows\system32\psisdecd.dll
2010-07-03 14:39:29 ----A---- C:\Windows\system32\winlogon.exe
2010-07-03 14:39:29 ----A---- C:\Windows\system32\t2embed.dll
2010-07-03 14:39:29 ----A---- C:\Windows\explorer.exe
2010-07-03 14:39:28 ----A---- C:\Windows\system32\inetcomm.dll
2010-07-03 14:39:27 ----A---- C:\Windows\system32\win32k.sys
2010-07-03 14:39:27 ----A---- C:\Windows\system32\quartz.dll
2010-07-03 14:39:27 ----A---- C:\Windows\system32\msvidc32.dll
2010-07-03 14:39:27 ----A---- C:\Windows\system32\mciavi32.dll
2010-07-03 14:39:27 ----A---- C:\Windows\system32\iyuv_32.dll
2010-07-03 14:39:27 ----A---- C:\Windows\system32\avifil32.dll
2010-07-03 14:39:26 ----A---- C:\Windows\system32\tsbyuv.dll
2010-07-03 14:39:26 ----A---- C:\Windows\system32\msyuv.dll
2010-07-03 14:39:26 ----A---- C:\Windows\system32\msrle32.dll
2010-07-03 14:39:26 ----A---- C:\Windows\system32\jscript.dll
2010-07-03 14:39:26 ----A---- C:\Windows\system32\asycfilt.dll
2010-07-03 14:39:25 ----A---- C:\Windows\system32\msasn1.dll
2010-07-03 14:39:24 ----A---- C:\Windows\system32\tzres.dll
2010-07-03 14:39:23 ----A---- C:\Windows\system32\drivers\fvevol.sys
2010-07-03 14:37:08 ----A---- C:\Windows\system32\fontsub.dll
2010-07-03 14:37:08 ----A---- C:\Windows\system32\atmlib.dll
2010-07-03 14:37:08 ----A---- C:\Windows\system32\atmfd.dll
2010-07-03 14:32:48 ----A---- C:\Windows\system32\drivers\ssmdrv.sys
2010-07-03 14:32:47 ----D---- C:\ProgramData\Avira
2010-07-03 14:32:47 ----D---- C:\Program Files\Avira
2010-07-03 14:32:47 ----A---- C:\Windows\system32\drivers\avipbb.sys
2010-07-03 14:32:47 ----A---- C:\Windows\system32\drivers\avgntmgr.sys
2010-07-03 14:32:47 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2010-07-03 14:32:47 ----A---- C:\Windows\system32\drivers\avgntdd.sys
2010-07-03 14:27:36 ----A---- C:\Windows\system32\wintrust.dll
2010-07-03 14:27:32 ----A---- C:\Windows\system32\cabview.dll
2010-07-03 14:17:16 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-07-03 14:15:38 ----D---- C:\Program Files\Lenovo
2010-07-03 14:15:27 ----A---- C:\Windows\system32\drivers\psadd.sys
2010-07-03 14:14:59 ----SHD---- C:\Windows\Installer
2010-07-03 14:13:11 ----D---- C:\Users\admoin\AppData\Roaming\Identities
2010-07-03 14:12:58 ----SD---- C:\Users\admoin\AppData\Roaming\Microsoft
2010-07-03 14:12:58 ----D---- C:\Users\admoin\AppData\Roaming\Media Center Programs
2010-07-03 14:12:44 ----SHD---- C:\Recovery
2010-07-03 14:12:43 ----SHD---- C:\Programme
2010-07-03 14:12:43 ----SHD---- C:\ProgramData\Vorlagen
2010-07-03 14:12:43 ----SHD---- C:\ProgramData\Startmenü
2010-07-03 14:12:43 ----SHD---- C:\ProgramData\Favoriten
2010-07-03 14:12:43 ----SHD---- C:\ProgramData\Dokumente
2010-07-03 14:12:43 ----SHD---- C:\ProgramData\Anwendungsdaten
2010-07-03 14:12:43 ----SHD---- C:\Program Files\Gemeinsame Dateien
2010-07-03 14:12:43 ----SHD---- C:\Dokumente und Einstellungen
2010-07-03 14:09:03 ----D---- C:\Windows\SoftwareDistribution
2010-07-03 14:06:27 ----D---- C:\Windows\Prefetch
2010-07-03 14:06:10 ----ASH---- C:\pagefile.sys
2010-07-03 14:06:09 ----SHD---- C:\System Volume Information
2010-07-03 14:06:09 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 months======

2010-07-25 07:43:07 ----D---- C:\Windows\Temp
2010-07-25 07:43:06 ----RD---- C:\Program Files
2010-07-25 01:45:44 ----D---- C:\Windows\system32\config
2010-07-25 01:12:15 ----D---- C:\Windows\system32\drivers
2010-07-25 01:11:29 ----D---- C:\Windows\System32
2010-07-25 01:11:29 ----D---- C:\Windows\inf
2010-07-25 01:10:38 ----D---- C:\Windows
2010-07-24 23:37:22 ----D---- C:\Windows\debug
2010-07-22 10:36:57 ----D---- C:\Windows\system32\LogFiles
2010-07-20 09:46:22 ----RSD---- C:\Windows\assembly
2010-07-20 09:46:22 ----D---- C:\Windows\Microsoft.NET
2010-07-19 22:19:09 ----D---- C:\Program Files\Common Files\microsoft shared
2010-07-19 22:18:30 ----D---- C:\Windows\Registration
2010-07-19 22:17:10 ----RD---- C:\Windows\Fonts
2010-07-19 22:12:49 ----SD---- C:\ProgramData\Microsoft
2010-07-19 22:11:06 ----D---- C:\Windows\winsxs
2010-07-19 22:08:53 ----HD---- C:\ProgramData
2010-07-19 22:03:34 ----D---- C:\Program Files\MSBuild
2010-07-19 21:17:36 ----D---- C:\Program Files\Common Files
2010-07-18 13:33:09 ----D---- C:\Windows\system32\FxsTmp
2010-07-17 23:12:01 ----D---- C:\Windows\system32\drivers\UMDF
2010-07-16 23:56:00 ----D---- C:\Windows\system32\catroot2
2010-07-13 08:50:23 ----D---- C:\Windows\system32\catroot
2010-07-10 14:18:23 ----D---- C:\Windows\Logs
2010-07-06 16:34:50 ----D---- C:\Windows\system32\DriverStore
2010-07-06 14:13:57 ----D---- C:\Windows\system32\Tasks
2010-07-04 10:41:38 ----D---- C:\Windows\rescache
2010-07-04 09:26:27 ----SHD---- C:\$Recycle.Bin
2010-07-04 09:26:19 ----RD---- C:\Users
2010-07-04 08:33:53 ----D---- C:\Windows\system32\wdi
2010-07-03 18:54:51 ----RSD---- C:\Windows\Media
2010-07-03 18:48:53 ----D---- C:\Program Files\Windows Media Player
2010-07-03 14:45:05 ----D---- C:\Program Files\Internet Explorer
2010-07-03 14:45:03 ----D---- C:\Windows\system32\Boot
2010-07-03 14:45:03 ----D---- C:\Program Files\Windows Mail
2010-07-03 14:45:02 ----D---- C:\Windows\ehome
2010-07-03 14:45:01 ----D---- C:\Windows\system32\migration
2010-07-03 14:45:00 ----D---- C:\Windows\system32\de-DE
2010-07-03 14:45:00 ----D---- C:\Windows\AppPatch
2010-07-03 14:20:22 ----D---- C:\Windows\system32\CodeIntegrity
2010-07-03 14:17:06 ----D---- C:\Windows\system32\wbem
2010-07-03 14:15:14 ----D---- C:\Windows\system32\restore
2010-07-03 14:12:43 ----D---- C:\Program Files\Windows NT
2010-07-03 14:09:10 ----D---- C:\Windows\system32\sysprep
2010-07-03 14:06:54 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 Shockprf;Shockprf; C:\Windows\System32\DRIVERS\Apsx86.sys [2009-10-09 120360]
R0 TPDIGIMN;TPDIGIMN; C:\Windows\System32\DRIVERS\ApsHM86.sys [2009-10-09 20520]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-03-01 124784]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 lenovo.smi;Lenovo System Interface Driver; C:\Windows\system32\DRIVERS\smiif32.sys [2008-05-12 13480]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R1 TPPWRIF;TPPWRIF; C:\Windows\System32\drivers\Tppwr32v.sys [2010-05-12 11552]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\Lenovo\ATK Hotkey\ASMMAP.sys [2007-07-24 13880]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-02-16 60936]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-14 37376]
R3 IBMPMDRV;IBMPMDRV; C:\Windows\system32\DRIVERS\ibmpmdrv.sys [2008-05-14 22312]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
R3 MTsensor32;PU ACPI UTILITY; C:\Windows\system32\DRIVERS\PuAcpi32.sys [2009-06-04 14344]
R3 NETw5s32;Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 7 32-Bit; C:\Windows\system32\DRIVERS\NETw5s32.sys [2010-03-17 6758912]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\Windows\system32\DRIVERS\psadd.sys [2007-02-19 21376]
R3 RTL8167;Realtek 8167 NT-Treiber; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-14 139776]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-07-14 84992]
R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-14 207360]
R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-14 980992]
R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-14 661504]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-06-25 212912]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2009-09-07 48128]
S2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2009-09-15 44544]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcPrfMgrSvc;AcPrfMgrSvc; C:\Program Files\Lenovo\Access Connections\AcPrfMgrSvc.exe [2010-04-22 124264]
R2 AcSvc;AcSvc; C:\Program Files\Lenovo\Access Connections\AcSvc.exe [2010-04-22 259432]
R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-07-03 267432]
R2 ASLDRService;ASLDR Service; C:\Program Files\Lenovo\ATK Hotkey\ASLDRSrv.exe [2009-02-13 94208]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\Lenovo\ATK Hotkey\GFNEXSrv.exe [2009-02-13 94208]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2010-03-05 862480]
R2 IBMPMSVC;ThinkPad PM Service for SL Series; C:\Windows\system32\ibmpmsvc.exe [2008-05-14 36128]
R2 LFKAS;Service of LFKA; C:\Program Files\Lenovo\ATK Hotkey\LFKAS.exe [2009-04-15 208896]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2007-02-10 29178224]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2010-03-05 473360]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2007-02-10 89968]
R2 SUService;System Update; C:\Program Files\Lenovo\System Update\SUService.exe [2009-10-19 28672]
R2 TPHKSVC;Anzeige am Bildschirm; C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe [2010-04-07 63928]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [2010-05-12 75112]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\Windows\System32\TPHDEXLG.exe [2009-10-09 39976]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 MSSQLServerADHelper;Hilfsdienst von SQL Server für Active Directory; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2005-10-14 45272]
S4 msvsmon90;Visual Studio 2008 Remote Debugger; C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2007-11-08 3004416]
S4 SQLBrowser;SQL Server-Browser; c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2007-02-10 242544]

-----------------EOF-----------------