| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Worm.Autorun.B u. Adware Widgi Toolbar , Kaspersky außer KontrolleWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
16.11.2010, 03:15
| #1 |
 |  Worm.Autorun.B u. Adware Widgi Toolbar , Kaspersky außer Kontrolle nachdem wir die Suche beim letzten Mal abgebrochen haben und ich den PC komplett formatiert habe hat es mich nun nachweislich direkt, wahrscheinlich über meine mühselige Treibersuche (da keine CDs vorhanden sind) erwischt.Habe mich nach Aussagen von PC Foren "VIA Treiber wären veraltet" dazu verleiten lassen auf anderen Seiten wie www.treiberupdate und vermutlich die schlechte : "pcdriver.de" Treiber runter zu laden.Dies im LOG WinSetup.exe scheint daher zu sein. Diese S3minset.exe habe ich in 2 Varianten auf meinem PC 1x von 2006 signiert und 1x neueren Datums gleiche Beschreibung aber ohne Signatur. Widgitool habe ich gelesen installiert sich mit dem PDF Creator den ich von der PC Chip Seite habe, wie es aussieht hat der sich aber auch heimlich eingewählt und einer hat unbemerkt mein Kaspersky lahm gelegt was man aber nicht erkennen konnte, erst wie ich es manuell starten mußte. Habe auch das Gefühl das dieser download von " hxxp://www.sereby.org/index.php?cat=downloadsshow=7" von XP SP3 auch nicht ok. ist. Kaspersky warnte vor dieser selbstextrahierende CAB Datei Microsoft aber ohne Signatur , 1x mit " IPx86_1031_7.00.260.0 Self extracting Cabinet " . Bin echt verzweifelt, woher weiß ich denn vorher ob die Treiber u. Updates Downloads nicht verseucht sind oder Software wie dieser PDF Creator von einer PC Zeitschrift. Habe mbam Fund angehangen, beim 2. durchlauf wurde nichts gefunden, aber Kaspersky hat dafür was gefunden. Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 5114 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 14.11.2010 23:40:58 mbam-log-2010-11-14 (23-40-58).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|) Durchsuchte Objekte: 197767 Laufzeit: 2 Stunde(n), 43 Minute(n), 53 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 3 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: C:\RECYCLER\S-1-5-21-1060284298-2049760794-725345543-1004\Dc41\Vista\X86\WinSetup.exe (Worm.Autorun.B) -> No action taken. C:\RECYCLER\S-1-5-21-1060284298-2049760794-725345543-1004\Dc41\WinXP\X86\WinSetup.exe (Worm.Autorun.B) -> No action taken. E:\Daten Gabi\Downloads\HiJackThis\backups\backup-20101114-194835-892.dll (Adware.WidgiToolbar) -> No action taken. Ausschnitt aus Kaspersky Bericht: 14.11.2010 05:45:25 Zugriff auf geschützten Kennwortspeicher Erlaubt: KLPrivileges/KLPermissionSystem/KLPermissionStrange/KLPrtStgAccess 14.11.2010 05:45:28 Direkter Zugriff auf gemeinsamen Arbeitsspeicher Erlaubt: KLPrivileges/KLPermissionSystem/KLPermissionSysObjAccess/KLDirectMemAccess 14.11.2010 05:45:29 Zugriff auf kritische Systemobjekte Erlaubt: KLPrivileges/KLPermissionSystem/KLPermissionSysObjAccess/KLCriticalCOMAccess S3MINSET.EXE (Ereignisse: 1) 14.11.2010 06:12:42 C:\PROGRAMME\VIA\K8M800_VGA_MB\K8M800\WIN2K-XP\S3MINSET.EXE Gefunden: Suspicious driver installation S3MINSET.EXE (Ereignisse: 1) 14.11.2010 06:15:56 Herunterfahren des Systems Erlaubt: KLPrivileges/KLPermissionSystem/KLPermissionStrange/KLWindowsShutDown 14.11.2010 06:15:56 Zuweisen von Debugger-Rechten Erlaubt: KLPrivileges/KLPermissionSystem/KLPermissionPrivileges/KLSetDbgPrivilege S3MINSET.EXE (Ereignisse: 1) 14.11.2010 06:28:35 Laufwerkszugriff auf niedriger Ebene Device\Harddisk0\DR0 Erlaubt: KLPrivileges/KLPermissionSystem/KLPermissionSysObjAccess/KLLLDiskAccess S3MINSET.EXE (Ereignisse: 1) 15.11.2010 03:31:17 C:\PROGRAMME\TREIBER HARDWARE\S3\UCHROMEP\S3MINSET.EXE Gefunden: Suspicious driver installation Am 15.11. habe ich keine! Treiber mehr installiert ! Was heißt den da erlaubt- ich habe nix erlaubt! Den HijackThis Log finde ich nur nachdem ich 4 als kritisch/gefährlich eingestuften gefixt hatte. Bitte um schnellst mögliche Hilfe, brauche dringend meinen PC. Wenn ich wieder alles platt machen muß,muß ich ja wissen welches die Schädlinge waren/sind. Hoffe es klappt jetzt mit dem Erstellen, bin schon 1x rausgeflogen. OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 16.11.2010 02:09:54 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Dokumente und Einstellungen\Gabi\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 59,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 25,00 Gb Total Space | 12,27 Gb Free Space | 49,09% Space Free | Partition Type: NTFS
Drive D: | 20,00 Gb Total Space | 18,46 Gb Free Space | 92,31% Space Free | Partition Type: NTFS
Drive E: | 50,00 Gb Total Space | 49,84 Gb Free Space | 99,68% Space Free | Partition Type: NTFS
Drive F: | 54,04 Gb Total Space | 52,84 Gb Free Space | 97,78% Space Free | Partition Type: NTFS
Computer Name: XY-6F1FB02849A3 | User Name: Admin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromiumHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "D:\Programme\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "D:\Programme\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
"" =
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Programme\SiSoftware\SiSoftware Sandra Lite 2010.SP3\WNt500x86\RpcSandraSrv.exe" = D:\Programme\SiSoftware\SiSoftware Sandra Lite 2010.SP3\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service -- File not found
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{08C8666B-C502-4AB3-B4CB-D74AC42D14FE}" = Nero BackItUp 10 Help (CHM)
"{0DC86BEC-5CE3-413A-BB61-C40A3D186B24}" = Scan
"{14BEB6DF-A499-4A38-8E06-E173BCD5C087}" = ScannerCopy
"{1545207E-C6F3-31D7-9918-BDBB65075FBF}" = Microsoft .NET Framework 3.5 Language Pack - deu
"{16987E99-C95C-4513-9239-7B44A0A71DB5}" = Nero SoundTrax 10 Help (CHM)
"{17293791-C82E-476C-9997-9A0FF234A19B}" = HP Product Assistant
"{181821B7-82AA-44DA-9DAF-EF254CCB670A}" = Fax
"{1AD5F465-8282-4DAD-B957-E09C0B783D18}" = InstantShare
"{1B680FBA-E317-4E93-AF43-3B59798A4BE0}" = Copy
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}" = Nero MediaHub 10
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{20FBC0A0-3160-4F14-83ED-3A74BB6B8C31}" = TrayApp
"{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{272EC8BA-5A08-4ea1-A189-684466A06B02}" = cp_dwShrek2Albums1
"{277C1559-4CF7-44FF-8D07-98AA9C13AABD}" = Nero Multimedia Suite 10
"{2E8428AD-6CD2-4031-916A-3CF9BBF2DEC9}" = Unload
"{329411A0-19F3-4740-874F-17400B126F27}" = Nero Vision 10 Help (CHM)
"{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM)
"{342C7C88-D335-4bc2-8CF1-281857629CE2}" = HP PSC & OfficeJet 4.7
"{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3762DB2D-71BD-421F-9E55-C74DA7DF4D07}" = CueTour
"{391E18CE-7D3B-45E9-A8F0-34E77F14F47A}" = ProductContext
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{442BE28B-782B-4DC0-B490-E70A403B1C69}" = Readme
"{4F4B0D96-1803-4D35-A9B2-1F1163AB6F9B}" = Filters
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{5E8D588F-307C-4250-B622-26969027319A}" = PanoStandAlone
"{6206FD57-3E60-4A52-AD1B-7D9F7BA2777E}" = TCM Combo Set
"{63AA3EAB-23BB-48B2-9AD0-44F878075604}" = Nero 10 Menu TemplatePack Basic
"{644D04A2-C682-4FD5-977D-03B804C4B9C5}" = CreativeProjects
"{646A65DD-23FC-418E-B9F0-E0500FB42CB1}" = PhotoGallery
"{64FC0C98-B035-4530-B15D-3D30610B6DF1}" = HP Software Update
"{655CB07D-C944-40BE-B93F-55957CAC7625}" = AiO_Scan
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{66049135-9659-4AAD-9169-9CCA269EBB3E}" = Nero InfoTool 10 Help (CHM)
"{68963635-14A4-48D9-B431-DF3A74D1AAE1}" = Destinations
"{68AB6930-5BFF-4FF6-923B-516A91984FE6}" = Nero BackItUp 10
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{700A6597-3CE6-49C1-AA75-846B24CDA66D}" = BufferChm
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{724517BD-1DE1-4986-BFCA-C1DFD379E3BC}" = cp_dwShrek2Cards1
"{7A295D8F-484B-4FFB-89AB-C1FD497591FE}" = Nero WaveEditor 10 Help (CHM)
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{7AD25C9F-9957-4D1C-95EF-9BCD09F6D31B}" = HPSystemDiagnostics
"{7BF1DD4A-8DBF-48C9-8B74-E6DAE4C57B31}" = Cleanse Uninstaller Pro
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{84CDF5A8-1D57-4B69-BAB6-1F11D8923375}" = SkinsHP1
"{85CFD253-38AE-4DB1-ACB7-F0F4C791990D}" = AiOSoftware
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8BC3B99B-A6BE-4A0B-8535-B1B94BA4B1B1}" = DocProc
"{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}" = Kaspersky Security Suite CBE 09
"{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}" = Nero Recode 10
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{92E25238-61A3-4ACD-A407-3C480EEF47A7}" = Nero RescueAgent 10 Help (CHM)
"{9309DD7E-EBFE-3C95-8B47-30D3A012F606}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - DEU
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}" = Nero Vision 10
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{A1071AEB-B0EF-3F5F-BC84-83A270EBE496}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - DEU
"{A15ED800-19FF-11D5-AF7F-0050BA1191E9}" = InterVideo FilterSDK
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A5B9D22C-755A-4AC6-9904-875E80838BB6}" = CP_AtenaShokunin1Config
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.0 - Deutsch
"{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}" = REALTEK GbE & FE Ethernet PCI NIC Driver
"{AE3C9F36-6747-43E4-BC5D-769B64D83EEF}_is1" = PC-WELT-IronBrowser 6.0
"{B911B811-BA3E-46D4-90F8-6F3338359651}" = Director
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = AMD Processor Driver
"{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM)
"{C3273C55-E1E4-41FF-8D69-0158090DB8D8}" = Nero CoverDesigner 10 Help (CHM)
"{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Dolby Files 10
"{C43E4B9C-14C8-4EB0-998B-85211B6EDD61}" = Seagate*DiscWizard
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CDFCF124-115F-4976-8BF4-08C89187A146}" = WebReg
"{CE0C8CC5-E396-442B-A50E-D1D374A9E820}" = DocumentViewer
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}" = Nero Recode 10 Help (CHM)
"{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}" = Nero SoundTrax 10
"{E337E787-CF61-4B7B-B84F-509202A54023}" = Nero RescueAgent 10
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{EDCDFAD5-DF80-4600-A493-E9DAD6810230}" = Nero WaveEditor 10
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F412B4AF-388C-4FF5-9B2F-33DB1C536953}" = Nero InfoTool 10
"{F467862A-D9CA-47ED-8D81-B4B3C9399272}" = Nero MediaHub 10 Help (CHM)
"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic
"{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM)
"{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10
"{FC22D020-3005-4715-8DF9-F3EDE81DEB3D}" = CreativeProjectsTemplates
"{FCF00A6E-FB58-477A-ABE9-232907105521}" = Nero CoverDesigner 10
"7-Zip" = 7-Zip 4.65
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"HijackThis" = HijackThis 2.0.2
"HP Photo & Imaging" = HP Image Zone 4.7
"ie8" = Windows Internet Explorer 8
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager
"InstallShield_{6206FD57-3E60-4A52-AD1B-7D9F7BA2777E}" = TCM Combo Set
"InstallWIX_{8CB14A64-CEF4-4C8F-B1C8-1C3B8752CB55}" = Kaspersky Security Suite CBE 09
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.4.0 (Full)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack - deu" = Microsoft .NET Framework 3.5 Language Pack - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"nLite_is1" = nLite 1.4.9.1
"VIA Vinyl Audio Codecs Driver Setup Program" = VIA Vinyl Audio Codecs Driver Setup Program
"VIA/S3G UniChrome Family Win2K/XP/Server2003 Display" = VIA/S3G Display Driver 6.14.10.0297
"VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast-Ethernet Adapter
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 11.11.2010 17:04:13 | Computer Name = XY-6F1FB02849A3 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung sandra.exe, Version 16.67.2010.10, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 11.11.2010 21:24:02 | Computer Name = XY-6F1FB02849A3 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung JDF.exe, Version 1.71.0.0, fehlgeschlagenes
Modul JDF.exe, Version 1.71.0.0, Fehleradresse 0x0005049e.
Error - 11.11.2010 21:42:22 | Computer Name = XY-6F1FB02849A3 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung hpsysdig.exe, Version 1.6.0.0, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x00000000.
Error - 11.11.2010 22:16:10 | Computer Name = XY-6F1FB02849A3 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung ocontrol.exe, Version 1.2.0.23, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 11.11.2010 23:36:20 | Computer Name = XY-6F1FB02849A3 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung hpqgalry.exe, Version 45.4.157.0, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 13.11.2010 16:32:10 | Computer Name = XY-6F1FB02849A3 | Source = NativeWrapper | ID = 5000
Description =
Error - 13.11.2010 17:52:24 | Computer Name = XY-6F1FB02849A3 | Source = MsiInstaller | ID = 11706
Description = Produkt: Microsoft IntelliPoint 7.0 -- Fehler 1706. Ein Installationspaket
des Produkts Microsoft IntelliPoint 7.0 konnte nicht gefunden werden. Wiederholen
Sie die Installation unter Verwendung einer gültigen Kopie des Installationspakets
"ip.msi".
Error - 13.11.2010 21:34:25 | Computer Name = XY-6F1FB02849A3 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung HPZdui01.exe, Version 4.0.0.81, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 14.11.2010 14:50:42 | Computer Name = XY-6F1FB02849A3 | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 cleanse uninstaller.exe, P2 4.5.9.9, P3 48c9b981,
P4 mscorlib, P5 2.0.0.0, P6 4be90358, P7 e4, P8 10, P9 system.security.security,
P10 NIL.
Error - 14.11.2010 20:19:47 | Computer Name = XY-6F1FB02849A3 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung Cleanse Uninstaller.exe, Version 4.5.9.9,
Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
[ Application Events ]
Error - 11.11.2010 17:04:13 | Computer Name = XY-6F1FB02849A3 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung sandra.exe, Version 16.67.2010.10, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 11.11.2010 21:24:02 | Computer Name = XY-6F1FB02849A3 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung JDF.exe, Version 1.71.0.0, fehlgeschlagenes
Modul JDF.exe, Version 1.71.0.0, Fehleradresse 0x0005049e.
Error - 11.11.2010 21:42:22 | Computer Name = XY-6F1FB02849A3 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung hpsysdig.exe, Version 1.6.0.0, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x00000000.
Error - 11.11.2010 22:16:10 | Computer Name = XY-6F1FB02849A3 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung ocontrol.exe, Version 1.2.0.23, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 11.11.2010 23:36:20 | Computer Name = XY-6F1FB02849A3 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung hpqgalry.exe, Version 45.4.157.0, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 13.11.2010 16:32:10 | Computer Name = XY-6F1FB02849A3 | Source = NativeWrapper | ID = 5000
Description =
Error - 13.11.2010 17:52:24 | Computer Name = XY-6F1FB02849A3 | Source = MsiInstaller | ID = 11706
Description = Produkt: Microsoft IntelliPoint 7.0 -- Fehler 1706. Ein Installationspaket
des Produkts Microsoft IntelliPoint 7.0 konnte nicht gefunden werden. Wiederholen
Sie die Installation unter Verwendung einer gültigen Kopie des Installationspakets
"ip.msi".
Error - 13.11.2010 21:34:25 | Computer Name = XY-6F1FB02849A3 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung HPZdui01.exe, Version 4.0.0.81, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 14.11.2010 14:50:42 | Computer Name = XY-6F1FB02849A3 | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 cleanse uninstaller.exe, P2 4.5.9.9, P3 48c9b981,
P4 mscorlib, P5 2.0.0.0, P6 4be90358, P7 e4, P8 10, P9 system.security.security,
P10 NIL.
Error - 14.11.2010 20:19:47 | Computer Name = XY-6F1FB02849A3 | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung Cleanse Uninstaller.exe, Version 4.5.9.9,
Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
[ System Events ]
Error - 09.11.2010 23:34:26 | Computer Name = XY-6F1FB02849A3 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 09.11.2010 23:34:26 | Computer Name = XY-6F1FB02849A3 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 09.11.2010 23:34:26 | Computer Name = XY-6F1FB02849A3 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 09.11.2010 23:34:27 | Computer Name = XY-6F1FB02849A3 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 09.11.2010 23:34:27 | Computer Name = XY-6F1FB02849A3 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 09.11.2010 23:34:27 | Computer Name = XY-6F1FB02849A3 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 09.11.2010 23:34:27 | Computer Name = XY-6F1FB02849A3 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 09.11.2010 23:34:27 | Computer Name = XY-6F1FB02849A3 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 09.11.2010 23:34:27 | Computer Name = XY-6F1FB02849A3 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 09.11.2010 23:34:27 | Computer Name = XY-6F1FB02849A3 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
< End of report >
Wieso ist der LOG so lang,habe doch nur Betriebssystem u. Treiber u. Updates geladen.? |
|
16.11.2010, 03:20
| #2 |
| | Worm.Autorun.B u. Adware Widgi Toolbar , Kaspersky außer Kontrolle OTL Logfile:
__________________Code:
ATTFilter OTL logfile created on: 16.11.2010 02:09:54 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Dokumente und Einstellungen\Gabi\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 59,00% Memory free 3,00 Gb Paging File | 3,00 Gb Available in Paging File | 79,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 25,00 Gb Total Space | 12,27 Gb Free Space | 49,09% Space Free | Partition Type: NTFS Drive D: | 20,00 Gb Total Space | 18,46 Gb Free Space | 92,31% Space Free | Partition Type: NTFS Drive E: | 50,00 Gb Total Space | 49,84 Gb Free Space | 99,68% Space Free | Partition Type: NTFS Drive F: | 54,04 Gb Total Space | 52,84 Gb Free Space | 97,78% Space Free | Partition Type: NTFS Computer Name: XY-6F1FB02849A3 | User Name: Admin | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\Gabi\Desktop\OTL.exe (OldTimer Tools) PRC - D:\Programme\PC-WELT-IronBrowser\Profile\Default\Extensions\ghgabhipcejejjmhhchfonmamedcbeod\6.3.0.0_0\plugin\ClickClean.exe () PRC - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 09\avp.exe (Kaspersky Lab) PRC - D:\Programme\PC-WELT-IronBrowser\Iron\iron.exe (SRWare) PRC - C:\Programme\Nero\Update\NASvc.exe (Nero AG) PRC - C:\Programme\Gemeinsame Dateien\Seagate\Schedule2\schedul2.exe (Seagate) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Dokumente und Einstellungen\Gabi\Desktop\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation) MOD - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 09\kloehk.dll (Kaspersky Lab) MOD - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 09\adialhk.dll (Kaspersky Lab) ========== Win32 Services (SafeList) ========== SRV - (HidServ) -- C:\WINDOWS\System32\hidserv.dll File not found SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found SRV - (JDF) -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Temp\JDF.exe (Sysinternals - www.sysinternals.com) SRV - (AVP) -- C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 09\avp.exe (Kaspersky Lab) SRV - (NAUpdate) -- C:\Programme\Nero\Update\NASvc.exe (Nero AG) SRV - (SgtSch2Svc) -- C:\Programme\Gemeinsame Dateien\Seagate\Schedule2\schedul2.exe (Seagate) SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP) SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) ========== Driver Services (SafeList) ========== DRV - (SANDRA) -- D:\Programme\SiSoftware\SiSoftware Sandra Lite 2010.SP3\WNt500x86\Sandra.sys File not found DRV - (F-Secure Standalone Minifilter) -- C:\DOKUME~1\Admin\LOKALE~1\Temp\OnlineScanner\Anti-Virus\fsgk.sys File not found DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS File not found DRV - (s3chipid) -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Temp\s3chipid.sys (S3 Graphics Co., Ltd.) DRV - (timounter) -- C:\WINDOWS\system32\DRIVERS\timntr.sys (Acronis) DRV - (tifsfilter) -- C:\WINDOWS\system32\drivers\tifsfilt.sys (Acronis) DRV - (snapman) -- C:\WINDOWS\system32\DRIVERS\snapman.sys (Acronis) DRV - (tdrpman) -- C:\WINDOWS\system32\DRIVERS\tdrpman.sys (Acronis) DRV - (KLIF) -- C:\WINDOWS\system32\drivers\klif.sys (Kaspersky Lab) DRV - (LBeepKE) -- C:\WINDOWS\system32\drivers\LBeepKE.sys (Logitech, Inc.) DRV - (kl1) -- C:\WINDOWS\system32\drivers\kl1.sys (Kaspersky Lab) DRV - (klim5) -- C:\WINDOWS\system32\drivers\klim5.sys (Kaspersky Lab) DRV - (KLFLTDEV) -- C:\WINDOWS\system32\drivers\klfltdev.sys (Kaspersky Lab) DRV - (klbg) -- C:\WINDOWS\system32\drivers\klbg.sys (Kaspersky Lab) DRV - (Cap7134) -- C:\WINDOWS\system32\drivers\Cap7134.sys (Philips Semiconductors) DRV - (PhTVTune) -- C:\WINDOWS\system32\drivers\PhTVTune.sys (Philips Semiconductors) DRV - (xfilt) -- C:\WINDOWS\system32\DRIVERS\xfilt.sys (VIA Technologies,Inc) DRV - (videX32) -- C:\WINDOWS\system32\DRIVERS\videX32.sys (VIA Technologies, Inc.) DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices) DRV - (VIAudio) Vinyl AC'97 Audio Controller (WDM) -- C:\WINDOWS\system32\drivers\vinyl97.sys (VIA Technologies, Inc.) DRV - (SlNtHal) -- C:\WINDOWS\system32\drivers\slnthal.sys (Smart Link) DRV - (SlWdmSup) -- C:\WINDOWS\system32\drivers\slwdmsup.sys (Smart Link) DRV - (Slntamr) -- C:\WINDOWS\system32\drivers\slntamr.sys (Smart Link) DRV - (NtMtlFax) -- C:\WINDOWS\system32\drivers\ntmtlfax.sys (Smart Link) DRV - (Mtlmnt5) -- C:\WINDOWS\system32\drivers\mtlmnt5.sys (Smart Link) DRV - (RecAgent) -- C:\WINDOWS\system32\DRIVERS\RecAgent.sys (Smart Link) DRV - (Mtlstrm) -- C:\WINDOWS\system32\drivers\mtlstrm.sys (Smart Link) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\software\mozilla\Thunderbird\Extensions\\{eea12ec4-729d-4703-bc37-106ce9879ce2}: C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 09\THBExt [2010.11.09 23:00:48 | 000,000,000 | ---D | M] O1 HOSTS File: ([2006.02.28 13:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 09\ievkbd.dll (Kaspersky Lab) O4 - HKLM..\Run: [AVP] C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 09\avp.exe (Kaspersky Lab) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Image Zone Schnellstart.lnk = D:\Programme\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Nach Microsoft &Excel exportieren - D:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Statistik für den Schutz des Web-Datenverkehrs - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 09\SCIEPlgn.dll (Kaspersky Lab) O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation) O15 - HKCU\..Trusted Domains: microsoft.com ([*.update] https in Vertrauenswürdige Sites) O15 - HKCU\..Trusted Domains: microsoft.com ([update] http in Vertrauenswürdige Sites) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1289343405375 (MUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation) O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll) - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 09\mzvkbd3.dll (Kaspersky Lab) O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll) - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 09\adialhk.dll (Kaspersky Lab) O20 - AppInit_DLLs: (C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll) - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE 09\kloehk.dll (Kaspersky Lab) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\klogon: DllName - C:\WINDOWS\system32\klogon.dll - C:\WINDOWS\system32\klogon.dll (Kaspersky Lab) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O30 - LSA: Authentication Packages - (relog_ap) - C:\WINDOWS\System32\relog_ap.dll (Acronis) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010.11.09 01:11:15 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.11.16 00:14:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\logarbeitsplatz [2010.11.15 20:21:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Desktop\logarbeitsplatz [2010.11.15 00:37:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\F-Secure [2010.11.15 00:30:22 | 001,137,360 | ---- | C] (F-Secure Corporation) -- C:\Dokumente und Einstellungen\Admin\Desktop\fsbl.exe [2010.11.15 00:26:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun [2010.11.15 00:26:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Sun [2010.11.15 00:24:12 | 000,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Dokumente und Einstellungen\Admin\Desktop\HijackThis.exe [2010.11.14 06:54:53 | 000,000,000 | ---D | C] -- C:\Programme\Treiber Hardware [2010.11.14 06:09:04 | 000,179,968 | ---- | C] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\drivers\vinyl97.sys [2010.11.14 05:04:00 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2010.11.14 05:04:00 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010.11.14 05:04:00 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010.11.14 05:04:00 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010.11.14 05:04:00 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2010.11.14 05:03:36 | 000,000,000 | ---D | C] -- C:\Programme\Java [2010.11.14 05:00:46 | 000,000,000 | ---D | C] -- E:\Daten Admin\WIndows XP Dienste in nLite erklärt (mit Einstellhilfen) - nLite - How To & Support - Win-Lite Forum_files [2010.11.14 02:49:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Seagate [2010.11.14 02:49:55 | 000,441,760 | ---- | C] (Acronis) -- C:\WINDOWS\System32\drivers\timntr.sys [2010.11.14 02:49:55 | 000,044,384 | ---- | C] (Acronis) -- C:\WINDOWS\System32\drivers\tifsfilt.sys [2010.11.14 02:49:45 | 000,132,224 | ---- | C] (Acronis) -- C:\WINDOWS\System32\drivers\snapman.sys [2010.11.14 02:49:34 | 000,368,480 | ---- | C] (Acronis) -- C:\WINDOWS\System32\drivers\tdrpman.sys [2010.11.14 02:49:10 | 000,000,000 | ---D | C] -- C:\Programme\Seagate [2010.11.14 02:49:10 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Seagate [2010.11.14 01:59:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\PCHealth [2010.11.14 01:44:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\CHIP Online - XP-Blitzstart in 23 Sekunden Tipps für ein schnelleres Windows_files [2010.11.14 01:43:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\CHIP Online - Windows XP Installations-CD mit nLite_files [2010.11.14 01:41:16 | 160,848,568 | ---- | C] (Seagate) -- C:\Dokumente und Einstellungen\All Users\Dokumente\DiscWizard11Setup.de.exe [2010.11.13 21:39:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Nero [2010.11.13 21:25:49 | 000,016,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll [2010.11.13 21:19:39 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Nero [2010.11.13 21:19:24 | 000,000,000 | ---D | C] -- C:\Programme\Nero [2010.11.13 21:19:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nero [2010.11.13 21:09:59 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Silverlight [2010.11.13 21:01:54 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_42.dll [2010.11.13 21:01:44 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_42.dll [2010.11.13 21:01:30 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DX9_40.dll [2010.11.13 21:01:17 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_35.dll [2010.11.13 21:00:59 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_34.dll [2010.11.13 21:00:44 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_30.dll [2010.11.13 20:12:51 | 000,554,272 | ---- | C] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\All Users\Dokumente\Mats_Run.printing.exe [2010.11.13 19:20:26 | 000,000,000 | R--D | C] -- E:\Daten Admin\Eigene Videos [2010.11.13 19:20:26 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Videos [2010.11.13 19:15:07 | 000,000,000 | ---D | C] -- C:\Programme\Windows Media Connect 2 [2010.11.13 19:10:44 | 000,839,680 | ---- | C] (hxxp://www.mp3dev.org/) -- C:\WINDOWS\System32\lameACM.acm [2010.11.13 19:10:43 | 000,217,088 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll [2010.11.13 19:10:43 | 000,151,552 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\ac3acm.acm [2010.11.13 19:09:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF [2010.11.13 19:09:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles [2010.11.13 19:07:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Windows Genuine Advantage [2010.11.12 16:20:12 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft CAPICOM 2.1.0.2 [2010.11.12 16:08:22 | 000,000,000 | ---D | C] -- C:\Programme\MSXML 4.0 [2010.11.12 05:37:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Malwarebytes [2010.11.12 05:36:52 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.11.12 05:36:50 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.11.12 05:36:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2010.11.12 03:09:21 | 000,055,656 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys [2010.11.12 03:08:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira [2010.11.12 02:57:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\Adobe [2010.11.12 02:45:25 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbprint.sys [2010.11.12 02:45:13 | 000,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbscan.sys [2010.11.12 02:45:08 | 000,032,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbccgp.sys [2010.11.12 01:41:14 | 000,028,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mdimon.dll [2010.11.12 01:37:58 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\DESIGNER [2010.11.12 01:37:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW [2010.11.12 01:37:37 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft.NET [2010.11.12 00:01:45 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Admin\IECompatCache [2010.11.11 21:47:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe [2010.11.11 21:46:56 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Adobe [2010.11.11 20:58:53 | 000,000,000 | ---D | C] -- E:\Daten Admin\Meine Alben [2010.11.11 20:58:53 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\IsolatedStorage [2010.11.11 20:54:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\HP [2010.11.11 20:54:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\ApplicationHistory [2010.11.11 20:51:41 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\InstallShield [2010.11.11 20:48:57 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\HP [2010.11.11 20:44:16 | 000,000,000 | ---D | C] -- C:\Programme\Hewlett-Packard [2010.11.11 20:40:49 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Hewlett-Packard [2010.11.11 20:39:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\URTTEMP [2010.11.11 20:34:47 | 000,278,584 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZidr12.dll [2010.11.11 20:34:47 | 000,204,800 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZipr12.dll [2010.11.11 20:34:47 | 000,094,208 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZipt12.dll [2010.11.11 20:34:47 | 000,069,632 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZipm12.exe [2010.11.11 20:34:47 | 000,061,440 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZinw12.exe [2010.11.11 20:34:47 | 000,057,344 | ---- | C] (HP) -- C:\WINDOWS\System32\HPZisn12.dll [2010.11.11 20:34:47 | 000,000,000 | ---D | C] -- C:\Program Files [2010.11.11 20:34:46 | 000,306,688 | ---- | C] (InstallShield Software Corporation) -- C:\WINDOWS\IsUninst.exe [2010.11.11 20:31:30 | 000,000,000 | ---D | C] -- C:\Programme\HP [2010.11.11 20:30:40 | 000,000,000 | -H-D | C] -- C:\Config.Msi [2010.11.11 20:24:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Leadertech [2010.11.11 20:21:56 | 000,010,448 | ---- | C] (Logitech, Inc.) -- C:\WINDOWS\System32\drivers\LBeepKE.sys [2010.11.11 20:20:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Logishrd [2010.11.11 20:18:16 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\LogiShrd [2010.11.11 16:30:58 | 000,084,480 | ---- | C] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\drivers\ac97via.sys [2010.11.11 16:30:58 | 000,084,480 | ---- | C] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\dllcache\ac97via.sys [2010.11.11 16:29:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\New Filters [2010.11.11 16:29:15 | 000,000,000 | ---D | C] -- C:\Programme\InterVideo [2010.11.11 16:27:41 | 000,024,128 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\drivers\PhTVTune.sys [2010.11.11 16:26:06 | 000,005,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstee.sys [2010.11.11 16:26:01 | 000,010,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ndisip.sys [2010.11.11 16:26:00 | 000,015,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\streamip.sys [2010.11.11 16:25:59 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ipsink.ax [2010.11.11 16:25:59 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ipsink.ax [2010.11.11 16:25:58 | 000,011,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\slip.sys [2010.11.11 16:25:55 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wstcodec.sys [2010.11.11 16:25:52 | 000,085,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nabtsfec.sys [2010.11.11 16:25:49 | 000,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ccdecode.sys [2010.11.11 16:25:33 | 000,106,571 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\Prop7134.dll [2010.11.11 16:25:32 | 000,114,688 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\34com.dll [2010.11.11 16:25:32 | 000,069,632 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\34TvCtrl.dll [2010.11.11 16:25:31 | 000,290,816 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\34dlg2.dll [2010.11.11 16:25:30 | 000,098,304 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\34dialog.dll [2010.11.11 16:25:30 | 000,036,864 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\34ds.dll [2010.11.11 16:25:29 | 000,077,824 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\34dd.dll [2010.11.11 16:25:29 | 000,024,576 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\34i2curd.dll [2010.11.11 16:25:28 | 000,135,168 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\34api.dll [2010.11.11 16:25:28 | 000,024,576 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\34pciurd.dll [2010.11.11 16:25:27 | 000,336,128 | R--- | C] (Philips Semiconductors) -- C:\WINDOWS\System32\drivers\Cap7134.sys [2010.11.11 16:25:20 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kswdmcap.ax [2010.11.11 16:25:20 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kswdmcap.ax [2010.11.11 16:25:19 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kstvtune.ax [2010.11.11 16:25:19 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kstvtune.ax [2010.11.11 16:25:19 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vfwwdm32.dll [2010.11.11 16:25:19 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vfwwdm32.dll [2010.11.11 16:25:16 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksxbar.ax [2010.11.11 16:25:16 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksxbar.ax [2010.11.11 16:12:30 | 000,328,704 | ---- | C] (InstallShield Software Corporation ) -- C:\WINDOWS\IsUn0407.exe [2010.11.11 16:10:18 | 001,251,944 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlExUpd.dll [2010.11.11 14:28:40 | 000,000,000 | ---D | C] -- E:\Daten Admin\Downloads [2010.11.11 12:52:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\Chromium [2010.11.11 12:10:06 | 000,000,000 | ---D | C] -- C:\SysinternalsSuite [2010.11.11 10:17:17 | 013,459,344 | ---- | C] (Microsoft Corporation) -- C:\IPx86_1031_7.00.260.0.exe [2010.11.11 10:14:23 | 000,274,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll [2010.11.11 10:14:23 | 000,017,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mucltui.dll.mui [2010.11.10 11:36:12 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Admin\PrivacIE [2010.11.10 11:31:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Adobe [2010.11.10 05:18:27 | 000,003,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pciide.sys [2010.11.10 05:11:59 | 000,141,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ks.sys [2010.11.10 05:11:59 | 000,141,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ks.sys [2010.11.10 05:11:56 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys [2010.11.10 05:11:56 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\portcls.sys [2010.11.10 05:11:55 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll [2010.11.10 05:11:55 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksuser.dll [2010.11.10 05:11:54 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys [2010.11.10 05:11:54 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\drmk.sys [2010.11.10 05:11:52 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax [2010.11.10 05:11:52 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ksproxy.ax [2010.11.10 05:11:51 | 000,049,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\stream.sys [2010.11.10 05:11:51 | 000,049,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\stream.sys [2010.11.10 05:07:36 | 000,009,216 | R--- | C] (VIA Technologies, Inc.) -- C:\WINDOWS\System32\drivers\videX32.sys [2010.11.10 04:22:17 | 000,043,520 | ---- | C] (Advanced Micro Devices) -- C:\WINDOWS\System32\drivers\AmdK8.sys [2010.11.10 04:09:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Publish Data [2010.11.10 04:08:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\uninstall [2010.11.10 03:58:12 | 000,000,000 | ---D | C] -- C:\Programme\MSBuild [2010.11.10 03:58:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer [2010.11.10 03:58:01 | 000,000,000 | ---D | C] -- C:\Programme\Reference Assemblies [2010.11.10 03:58:01 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-us [2010.11.10 03:57:16 | 000,014,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg2.dll [2010.11.10 03:45:05 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Admin\IETldCache [2010.11.10 03:41:50 | 000,000,000 | ---D | C] -- C:\Programme\netFramework [2010.11.10 03:05:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates [2010.11.10 03:05:29 | 011,080,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll [2010.11.10 03:05:29 | 001,986,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll [2010.11.10 03:05:29 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedvtool.dll [2010.11.10 03:05:29 | 000,602,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll [2010.11.10 03:05:29 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll [2010.11.10 03:03:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM [2010.11.10 03:01:29 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8 [2010.11.10 01:42:46 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly [2010.11.10 01:41:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET [2010.11.09 23:58:35 | 000,273,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys [2010.11.09 23:58:19 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc42.dll [2010.11.09 23:58:19 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll [2010.11.09 23:58:06 | 000,357,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys [2010.11.09 23:57:51 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll [2010.11.09 23:57:46 | 000,455,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys [2010.11.09 23:57:36 | 000,471,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aclayers.dll [2010.11.09 23:56:40 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe [2010.11.09 23:56:36 | 002,192,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe [2010.11.09 23:56:36 | 002,148,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe [2010.11.09 23:56:35 | 002,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlpa.exe [2010.11.09 23:56:35 | 002,027,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe [2010.11.09 23:55:45 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\t2embed.dll [2010.11.09 23:55:45 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fontsub.dll [2010.11.09 23:55:05 | 000,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys [2010.11.09 23:55:01 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll [2010.11.09 23:47:32 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe [2010.11.09 23:46:53 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe [2010.11.09 23:45:33 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll [2010.11.09 23:44:19 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jscript.dll [2010.11.09 23:43:09 | 000,590,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rpcrt4.dll [2010.11.09 23:42:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall [2010.11.09 23:40:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution [2010.11.09 23:00:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Kaspersky Lab [2010.11.09 23:00:09 | 000,227,344 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys [2010.11.09 22:16:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Macromedia [2010.11.09 22:01:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs [2010.11.09 21:50:44 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2010.11.09 20:27:02 | 000,000,000 | R--D | C] -- E:\Daten Admin\Eigene Musik [2010.11.09 20:27:02 | 000,000,000 | R--D | C] -- E:\Daten Admin\Eigene Bilder [2010.11.09 14:54:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE [2010.11.09 14:40:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2010.11.09 14:07:49 | 001,307,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6.dll [2010.11.09 14:07:49 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml6r.dll [2010.11.09 14:07:49 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6r.dll [2010.11.09 14:07:46 | 000,086,016 | ---- | C] (Sipro Lab Telecom Inc.) -- C:\WINDOWS\System32\dllcache\sl_anet.acm [2010.11.09 14:07:45 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msaud32.acm [2010.11.09 14:07:45 | 000,290,816 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\WINDOWS\System32\dllcache\l3codeca.acm [2010.11.09 14:07:40 | 001,888,992 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3duag.dll [2010.11.09 14:07:40 | 000,870,784 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3d1ag.dll [2010.11.09 14:07:40 | 000,516,768 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ativvaxx.dll [2010.11.09 14:07:40 | 000,377,984 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvaa.dll [2010.11.09 14:07:40 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroles.dll [2010.11.09 14:07:40 | 000,229,376 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2cqag.dll [2010.11.09 14:07:40 | 000,201,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvag.dll [2010.11.09 14:07:40 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll [2010.11.09 14:07:40 | 000,032,768 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativtmxx.dll [2010.11.09 14:07:40 | 000,023,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativmvxx.ax [2010.11.09 14:07:40 | 000,009,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativdaxx.ax [2010.11.09 14:07:40 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll [2010.11.09 14:07:39 | 000,651,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3ui.dll [2010.11.09 14:07:39 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapp3hst.dll [2010.11.09 14:07:39 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapphost.dll [2010.11.09 14:07:39 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappcfg.dll [2010.11.09 14:07:39 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappgnui.dll [2010.11.09 14:07:39 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3cfg.dll [2010.11.09 14:07:39 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapqec.dll [2010.11.09 14:07:39 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3msm.dll [2010.11.09 14:07:39 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpqec.dll [2010.11.09 14:07:39 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappprxy.dll [2010.11.09 14:07:39 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpclnt.dll [2010.11.09 14:07:39 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsroam.dll [2010.11.09 14:07:39 | 000,032,285 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\hsfcisp2.dll [2010.11.09 14:07:39 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapolqec.dll [2010.11.09 14:07:39 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3api.dll [2010.11.09 14:07:39 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3dlg.dll [2010.11.09 14:07:38 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcex.dll [2010.11.09 14:07:38 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft.managementconsole.dll [2010.11.09 14:07:38 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssha.dll [2010.11.09 14:07:38 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcfxcommon.dll [2010.11.09 14:07:38 | 000,086,016 | ---- | C] (Conexant) -- C:\WINDOWS\System32\mdmxsdk.dll [2010.11.09 14:07:38 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msshavmsg.dll [2010.11.09 14:07:38 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2gpstore.dll [2010.11.09 14:07:38 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcperf.exe [2010.11.09 14:07:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpash.dll [2010.11.09 14:07:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnepr.dll [2010.11.09 14:07:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdiultn.dll [2010.11.09 14:07:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbhc.dll [2010.11.09 14:07:37 | 004,274,816 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nv4_disp.dll [2010.11.09 14:07:37 | 001,737,856 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\mtxparhd.dll [2010.11.09 14:07:37 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\photometadatahandler.dll [2010.11.09 14:07:37 | 000,397,056 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\s3gnb.dll [2010.11.09 14:07:37 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll [2010.11.09 14:07:37 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napmontr.dll [2010.11.09 14:07:37 | 000,177,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napstat.exe [2010.11.09 14:07:37 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qagent.dll [2010.11.09 14:07:37 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\onex.dll [2010.11.09 14:07:37 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qutil.dll [2010.11.09 14:07:37 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qcliprov.dll [2010.11.09 14:07:37 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasqec.dll [2010.11.09 14:07:37 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupn.exe [2010.11.09 14:07:37 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napipsec.dll [2010.11.09 14:07:36 | 000,712,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\windowscodecs.dll [2010.11.09 14:07:36 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\windowscodecsext.dll [2010.11.09 14:07:36 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll [2010.11.09 14:07:36 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax [2010.11.09 14:07:36 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vidcap.ax [2010.11.09 14:07:36 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\verclsid.exe [2010.11.09 14:07:35 | 000,276,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wmphoto.dll [2010.11.09 14:07:35 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanapi.dll [2010.11.09 14:07:34 | 000,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\slrundll.exe [2010.11.09 14:07:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de-de [2010.11.09 14:07:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas [2010.11.09 14:07:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de [2010.11.09 14:07:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits [2010.11.09 14:05:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles [2010.11.09 14:05:41 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dlimport.exe [2010.11.09 14:04:02 | 000,327,168 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys [2010.11.09 14:04:02 | 000,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys [2010.11.09 14:04:02 | 000,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys [2010.11.09 14:04:02 | 000,043,008 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\System32\drivers\amdagp.sys [2010.11.09 14:04:02 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys [2010.11.09 14:04:02 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys [2010.11.09 14:04:02 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys [2010.11.09 14:04:02 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys [2010.11.09 14:04:02 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys [2010.11.09 14:04:02 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys [2010.11.09 14:04:02 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys [2010.11.09 14:04:02 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys [2010.11.09 14:04:02 | 000,004,255 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv01nt5.dll [2010.11.09 14:04:02 | 000,003,967 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv02nt5.dll [2010.11.09 14:04:02 | 000,003,775 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv11nt5.dll [2010.11.09 14:04:02 | 000,003,711 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv09nt5.dll [2010.11.09 14:04:02 | 000,003,647 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv07nt5.dll [2010.11.09 14:04:02 | 000,003,615 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv05nt5.dll [2010.11.09 14:04:02 | 000,003,135 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv08nt5.dll [2010.11.09 14:04:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic [2010.11.09 14:04:01 | 000,701,952 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys [2010.11.09 14:04:01 | 000,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys [2010.11.09 14:04:01 | 000,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys [2010.11.09 14:04:01 | 000,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys [2010.11.09 14:04:01 | 000,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys [2010.11.09 14:04:01 | 000,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys [2010.11.09 14:04:01 | 000,036,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthprint.sys [2010.11.09 14:04:01 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys [2010.11.09 14:04:01 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys [2010.11.09 14:04:01 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv04nt5.dll [2010.11.09 14:04:01 | 000,021,183 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv01nt5.dll [2010.11.09 14:04:01 | 000,017,279 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv10nt5.dll [2010.11.09 14:04:01 | 000,015,423 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\ch7xxnt5.dll [2010.11.09 14:04:01 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys [2010.11.09 14:04:01 | 000,014,143 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv06nt5.dll [2010.11.09 14:04:01 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys [2010.11.09 14:04:01 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys [2010.11.09 14:04:01 | 000,011,359 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv02nt5.dll [2010.11.09 14:04:00 | 000,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys [2010.11.09 14:04:00 | 000,144,384 | ---- | C] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [2010.11.09 14:03:59 | 001,897,408 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\drivers\nv4_mini.sys [2010.11.09 14:03:59 | 000,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys [2010.11.09 14:03:59 | 000,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys [2010.11.09 14:03:59 | 000,040,960 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\drivers\sisagp.sys [2010.11.09 14:03:59 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys [2010.11.09 14:03:59 | 000,012,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mutohpen.sys [2010.11.09 14:03:59 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smbali.sys [2010.11.09 14:03:59 | 000,003,901 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\siint5.dll [2010.11.09 14:03:58 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys [2010.11.09 14:03:58 | 000,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys [2010.11.09 14:03:58 | 000,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys [2010.11.09 14:03:58 | 000,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys [2010.11.09 14:03:58 | 000,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys [2010.11.09 14:03:58 | 000,011,325 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\vchnt5.dll [2010.11.09 14:03:58 | 000,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys [2010.11.09 14:02:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups [2010.11.09 14:02:39 | 000,026,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe [2010.11.09 14:01:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\EHome [2010.11.09 12:26:54 | 000,319,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\difxapi.dll [2010.11.09 12:21:41 | 000,176,128 | ---- | C] (S3 Graphics Co., Ltd.) -- C:\WINDOWS\System32\VTTrayp.exe [2010.11.09 12:21:41 | 000,053,248 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\VTTimer.exe [2010.11.09 12:21:41 | 000,049,152 | R--- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\VTSetvga.exe [2010.11.09 12:21:40 | 000,540,672 | R--- | C] (S3 Graphics Co., Ltd.) -- C:\WINDOWS\System32\VTovrlay.dll [2010.11.09 12:21:40 | 000,327,680 | R--- | C] (S3 Graphics Co., Ltd.) -- C:\WINDOWS\System32\VTInfo2.dll [2010.11.09 12:21:39 | 001,880,064 | R--- | C] (VIA/S3 Graphics, Inc.) -- C:\WINDOWS\System32\vticd.dll [2010.11.09 12:21:39 | 000,446,464 | R--- | C] (S3 Graphics Co., Ltd.) -- C:\WINDOWS\System32\VTGamma2.dll [2010.11.09 12:21:37 | 000,614,400 | R--- | C] (S3 Graphics Co., Ltd.) -- C:\WINDOWS\System32\VTDisply.dll [2010.11.09 12:21:35 | 003,493,632 | ---- | C] (VIA/S3 Graphics Co, Ltd.) -- C:\WINDOWS\System32\vtdisp.dll [2010.11.09 12:21:35 | 000,028,672 | R--- | C] (VIA) -- C:\WINDOWS\System32\VModes.exe [2010.11.09 06:01:03 | 328,324,136 | R--- | C] (Microsoft Corporation) -- C:\WindowsXP-KB936929-SP3-x86-DEU.exe [2010.11.09 05:48:11 | 000,000,000 | -H-D | C] -- C:\Programme\InstallShield Installation Information [2010.11.09 05:47:57 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\InstallShield [2010.11.09 03:43:20 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Admin\UserData [2010.11.09 02:19:14 | 000,000,000 | ---D | C] -- C:\Programme\Kaspersky Lab [2010.11.09 02:03:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Identities [2010.11.09 02:03:28 | 000,000,000 | -H-D | C] -- C:\Programme\Uninstall Information [2010.11.09 02:03:21 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Microsoft [2010.11.09 02:03:21 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Admin\SendTo [2010.11.09 02:03:21 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Admin\Recent [2010.11.09 02:03:21 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten [2010.11.09 02:03:21 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Admin\Startmenü [2010.11.09 02:03:21 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Admin\Favoriten [2010.11.09 02:03:21 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Admin\Cookies [2010.11.09 02:03:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Admin\Vorlagen [2010.11.09 02:03:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Admin\Netzwerkumgebung [2010.11.09 02:03:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen [2010.11.09 02:03:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Admin\Druckumgebung [2010.11.09 02:03:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\Microsoft [2010.11.09 02:03:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Admin\Desktop [2010.11.09 01:40:41 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts [2010.11.09 01:40:41 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache [2010.11.09 01:40:41 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web [2010.11.09 01:40:41 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32 [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32 [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\system [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\security [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\java [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076 [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052 [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054 [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042 [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041 [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037 [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033 [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031 [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028 [2010.11.09 01:40:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025 [2010.11.09 01:24:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution [2010.11.09 01:24:26 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft [2010.11.09 01:24:25 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft [2010.11.09 01:24:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft [2010.11.09 01:14:16 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft [2010.11.09 01:14:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft [2010.11.09 01:13:18 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winzm.ime [2010.11.09 01:13:18 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winsp.ime [2010.11.09 01:13:17 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winpy.ime [2010.11.09 01:13:17 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wingb.ime [2010.11.09 01:13:17 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winime.ime [2010.11.09 01:13:16 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winar30.ime [2010.11.09 01:13:16 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll [2010.11.09 01:13:16 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys [2010.11.09 01:13:14 | 000,426,041 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicepad.dll [2010.11.09 01:13:14 | 000,086,073 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicesub.dll [2010.11.09 01:13:14 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll [2010.11.09 01:13:13 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniime.dll [2010.11.09 01:13:12 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unicdime.ime [2010.11.09 01:13:12 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe [2010.11.09 01:13:11 | 000,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime [2010.11.09 01:13:11 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe [2010.11.09 01:13:11 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe [2010.11.09 01:13:11 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll [2010.11.09 01:13:10 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll [2010.11.09 01:13:10 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys [2010.11.09 01:13:10 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys [2010.11.09 01:13:10 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys [2010.11.09 01:13:08 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll [2010.11.09 01:13:07 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll [2010.11.09 01:13:07 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll [2010.11.09 01:13:06 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll [2010.11.09 01:13:05 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll [2010.11.09 01:13:04 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll [2010.11.09 01:13:04 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll [2010.11.09 01:13:04 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll [2010.11.09 01:13:04 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll [2010.11.09 01:13:04 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll [2010.11.09 01:13:04 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll [2010.11.09 01:13:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll [2010.11.09 01:13:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll [2010.11.09 01:13:03 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll [2010.11.09 01:13:03 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll [2010.11.09 01:13:03 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll [2010.11.09 01:13:03 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll [2010.11.09 01:13:03 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll [2010.11.09 01:13:03 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll [2010.11.09 01:13:03 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll [2010.11.09 01:13:03 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll [2010.11.09 01:13:02 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll [2010.11.09 01:12:59 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll [2010.11.09 01:12:59 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll [2010.11.09 01:12:58 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll [2010.11.09 01:12:58 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll [2010.11.09 01:12:57 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\romanime.ime [2010.11.09 01:12:56 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe [2010.11.09 01:12:56 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe [2010.11.09 01:12:55 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quick.ime [2010.11.09 01:12:55 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe [2010.11.09 01:12:55 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe [2010.11.09 01:12:54 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll [2010.11.09 01:12:54 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll [2010.11.09 01:12:53 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlgnt.ime [2010.11.09 01:12:53 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlphr.exe [2010.11.09 01:12:53 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmigrate.dll [2010.11.09 01:12:53 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlcsd.dll [2010.11.09 01:12:53 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll [2010.11.09 01:12:52 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phon.ime [2010.11.09 01:12:52 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll [2010.11.09 01:12:52 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs404.dll [2010.11.09 01:12:52 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs804.dll [2010.11.09 01:12:52 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll [2010.11.09 01:12:50 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll [2010.11.09 01:12:48 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll [2010.11.09 01:12:45 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex [2010.11.09 01:12:45 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll [2010.11.09 01:12:41 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys [2010.11.09 01:12:40 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll [2010.11.09 01:12:39 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll [2010.11.09 01:12:37 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll [2010.11.09 01:12:37 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll [2010.11.09 01:12:37 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll [2010.11.09 01:12:37 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll [2010.11.09 01:12:37 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll [2010.11.09 01:12:36 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll [2010.11.09 01:12:36 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll [2010.11.09 01:12:36 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll [2010.11.09 01:12:36 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll [2010.11.09 01:12:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll [2010.11.09 01:12:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll [2010.11.09 01:12:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll [2010.11.09 01:12:36 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll [2010.11.09 01:12:35 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll [2010.11.09 01:12:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll [2010.11.09 01:12:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll [2010.11.09 01:12:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll [2010.11.09 01:12:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll [2010.11.09 01:12:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll [2010.11.09 01:12:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll [2010.11.09 01:12:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll [2010.11.09 01:12:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll [2010.11.09 01:12:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll [2010.11.09 01:12:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll [2010.11.09 01:12:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll [2010.11.09 01:12:34 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll [2010.11.09 01:12:34 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll [2010.11.09 01:12:34 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll [2010.11.09 01:12:34 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll [2010.11.09 01:12:33 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll [2010.11.09 01:12:33 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll [2010.11.09 01:12:33 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll [2010.11.09 01:12:33 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll [2010.11.09 01:12:32 | 000,315,455 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskf.dll [2010.11.09 01:12:31 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll [2010.11.09 01:12:31 | 000,274,489 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputyc.dll [2010.11.09 01:12:31 | 000,262,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputy.exe [2010.11.09 01:12:31 | 000,233,527 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjprw.exe [2010.11.09 01:12:31 | 000,102,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imlang.dll [2010.11.09 01:12:31 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe [2010.11.09 01:12:31 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe [2010.11.09 01:12:30 | 000,716,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcus.dll [2010.11.09 01:12:30 | 000,307,257 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.exe [2010.11.09 01:12:30 | 000,208,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpmig.exe [2010.11.09 01:12:30 | 000,155,705 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdsvr.exe [2010.11.09 01:12:30 | 000,081,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.dll [2010.11.09 01:12:30 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe [2010.11.09 01:12:29 | 000,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81k.dll [2010.11.09 01:12:29 | 000,368,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcic.dll [2010.11.09 01:12:29 | 000,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81.ime [2010.11.09 01:12:28 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe [2010.11.09 01:12:28 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrcic.dll [2010.11.09 01:12:28 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll [2010.11.09 01:12:28 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekr61.ime [2010.11.09 01:12:28 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmbx.dll [2010.11.09 01:12:28 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe [2010.11.09 01:12:24 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll [2010.11.09 01:12:17 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll [2010.11.09 01:12:16 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll [2010.11.09 01:12:14 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll [2010.11.09 01:12:14 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe [2010.11.09 01:12:13 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll [2010.11.09 01:12:13 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll [2010.11.09 01:12:12 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll [2010.11.09 01:12:11 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll [2010.11.09 01:12:11 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe [2010.11.09 01:12:10 | 000,045,568 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll [2010.11.09 01:12:10 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys [2010.11.09 01:12:09 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll [2010.11.09 01:12:09 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll [2010.11.09 01:12:08 | 000,514,587 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\edb500.dll [2010.11.09 01:12:05 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dayi.ime [2010.11.09 01:12:03 | 000,057,399 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cplexe.exe [2010.11.09 01:12:03 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe [2010.11.09 01:12:02 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe [2010.11.09 01:12:02 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll [2010.11.09 01:12:02 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime [2010.11.09 01:12:01 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll [2010.11.09 01:12:01 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll [2010.11.09 01:12:01 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll [2010.11.09 01:12:00 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll [2010.11.09 01:12:00 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe [2010.11.09 01:12:00 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe [2010.11.09 01:12:00 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe [2010.11.09 01:11:59 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chajei.ime [2010.11.09 01:11:59 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys [2010.11.09 01:11:59 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe [2010.11.09 01:11:58 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll [2010.11.09 01:11:58 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll [2010.11.09 01:11:50 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll [2010.11.09 01:11:49 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll [2010.11.09 01:11:45 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptsat.dll [2010.11.09 01:11:40 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmcsat.dll [2010.11.09 01:11:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom [2010.11.09 01:11:35 | 000,000,000 | ---D | C] -- C:\Programme\xerox [2010.11.09 01:11:35 | 000,000,000 | ---D | C] -- C:\Programme\microsoft frontpage [2010.11.09 01:10:51 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll [2010.11.09 01:10:14 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\All Users\DRM [2010.11.09 01:10:05 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files [2010.11.09 01:10:05 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages [2010.11.09 01:09:54 | 000,000,000 | -H-D | C] -- C:\Programme\WindowsUpdate [2010.11.09 01:09:51 | 000,000,000 | ---D | C] -- C:\Programme\Online-Dienste [2010.11.09 01:09:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX [2010.11.09 01:09:12 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helphost.exe [2010.11.09 01:09:12 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\notiflag.exe [2010.11.09 01:09:12 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\brpinfo.dll [2010.11.09 01:09:12 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atrace.dll [2010.11.09 01:09:12 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll [2010.11.09 01:09:12 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hcappres.dll [2010.11.09 01:09:03 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srdiag.exe [2010.11.09 01:09:02 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll [2010.11.09 01:09:02 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmevtmsg.dll [2010.11.09 01:09:01 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\acctres.dll [2010.11.09 01:09:01 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll [2010.11.09 01:09:01 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msinfo32.exe [2010.11.09 01:09:01 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wb32.exe [2010.11.09 01:09:01 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cb32.exe [2010.11.09 01:09:00 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Dienste [2010.11.09 01:08:57 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trialoc.dll [2010.11.09 01:08:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll [2010.11.09 01:08:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icfgnt5.dll [2010.11.09 01:08:57 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks [2010.11.09 01:08:56 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoap1.dll [2010.11.09 01:08:56 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwtutor.exe [2010.11.09 01:08:56 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwres.dll [2010.11.09 01:08:56 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wisc10.dll [2010.11.09 01:08:56 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoapr.dll [2010.11.09 01:08:56 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isignup.exe [2010.11.09 01:08:56 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\MSSoap [2010.11.09 01:08:55 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieinfo5.ocx [2010.11.09 01:08:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst [2010.11.09 01:08:51 | 001,678,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\setup_wm.exe [2010.11.09 01:08:51 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpband.dll [2010.11.09 01:08:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed [2010.11.09 01:08:50 | 000,786,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migrate.exe [2010.11.09 01:08:50 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpvis.dll [2010.11.09 01:08:50 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpns.dll [2010.11.09 01:08:50 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmplayer.exe [2010.11.09 01:08:50 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\custsat.dll [2010.11.09 01:08:49 | 000,364,544 | ---- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- C:\WINDOWS\System32\dllcache\npdsplay.dll [2010.11.09 01:08:49 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll [2010.11.09 01:08:49 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wucltui.dll [2010.11.09 01:08:49 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npdrmv2.dll [2010.11.09 01:08:49 | 000,209,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuweb.dll [2010.11.09 01:08:49 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll [2010.11.09 01:08:49 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npwmsdrm.dll [2010.11.09 01:08:49 | 000,004,639 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplayer2.exe [2010.11.09 01:08:48 | 001,929,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll [2010.11.09 01:08:48 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll [2010.11.09 01:08:48 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuapi.dll [2010.11.09 01:08:48 | 000,217,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaucpl.cpl [2010.11.09 01:08:48 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe [2010.11.09 01:08:48 | 000,053,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe [2010.11.09 01:08:48 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll [2010.11.09 01:08:48 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wups.dll [2010.11.09 01:08:48 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll [2010.11.09 01:08:48 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll [2010.11.09 01:08:47 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll [2010.11.09 01:08:43 | 000,000,000 | ---D | C] -- C:\Programme\Movie Maker [2010.11.09 01:08:39 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll [2010.11.09 01:08:39 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll [2010.11.09 01:08:39 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll [2010.11.09 01:08:38 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll [2010.11.09 01:08:36 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltmc.exe [2010.11.09 01:08:35 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll [2010.11.09 01:08:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore [2010.11.09 01:08:34 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll [2010.11.09 01:08:34 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll [2010.11.09 01:08:34 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll [2010.11.09 01:08:33 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll [2010.11.09 01:08:33 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll [2010.11.09 01:08:31 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll [2010.11.09 01:08:31 | 000,000,000 | ---D | C] -- C:\Programme\NetMeeting [2010.11.09 01:08:30 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll [2010.11.09 01:08:29 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll [2010.11.09 01:08:27 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll [2010.11.09 01:08:27 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll [2010.11.09 01:08:27 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe [2010.11.09 01:08:27 | 000,000,000 | ---D | C] -- C:\Programme\Outlook Express [2010.11.09 01:08:26 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll [2010.11.09 01:08:26 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll [2010.11.09 01:08:21 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\System [2010.11.09 01:08:16 | 000,000,000 | ---D | C] -- C:\Programme\Internet Explorer [2010.11.09 01:08:15 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Bilder [2010.11.09 01:07:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration [2010.11.09 01:07:27 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Musik [2010.11.09 01:07:27 | 000,000,000 | ---D | C] -- C:\Programme\Windows Media Player [2010.11.09 01:07:27 | 000,000,000 | ---D | C] -- C:\Programme\Online Services [2010.11.09 01:07:22 | 000,000,000 | ---D | C] -- C:\Programme\Messenger [2010.11.09 01:07:21 | 001,817,687 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgres.dll [2010.11.09 01:07:21 | 000,781,397 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrres.dll [2010.11.09 01:07:21 | 000,753,236 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvseres.dll [2010.11.09 01:07:21 | 000,082,501 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckg.dll [2010.11.09 01:07:21 | 000,048,706 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvse.dll [2010.11.09 01:07:21 | 000,042,577 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgzm.exe [2010.11.09 01:07:21 | 000,042,575 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrzm.exe [2010.11.09 01:07:21 | 000,042,574 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvsezm.exe [2010.11.09 01:07:21 | 000,040,515 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkr.dll [2010.11.09 01:07:20 | 002,178,131 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlres.dll [2010.11.09 01:07:20 | 001,175,635 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzres.dll [2010.11.09 01:07:20 | 000,066,113 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvl.dll [2010.11.09 01:07:20 | 000,057,409 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtz.dll [2010.11.09 01:07:20 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlzm.exe [2010.11.09 01:07:20 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzzm.exe [2010.11.09 01:07:20 | 000,032,339 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniansi.dll [2010.11.09 01:07:20 | 000,004,677 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zeeverm.dll [2010.11.09 01:07:19 | 001,042,515 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnresm.dll [2010.11.09 01:07:19 | 000,217,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnclim.dll [2010.11.09 01:07:19 | 000,113,222 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zoneclim.dll [2010.11.09 01:07:19 | 000,041,029 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zcorem.dll [2010.11.09 01:07:19 | 000,013,894 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zonelibm.dll [2010.11.09 01:07:18 | 000,036,937 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zclientm.exe [2010.11.09 01:07:18 | 000,029,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\znetm.dll [2010.11.09 01:07:18 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\write.exe [2010.11.09 01:07:18 | 000,000,000 | ---D | C] -- C:\Programme\MSN Gaming Zone [2010.11.09 01:07:09 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndvol32.exe [2010.11.09 01:07:08 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avtapi.dll [2010.11.09 01:07:08 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avwav.dll [2010.11.09 01:07:08 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winchat.exe [2010.11.09 01:07:08 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avmeter.dll [2010.11.09 01:07:08 | 000,013,312 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\dllcache\htrn_jis.dll [2010.11.09 01:07:00 | 000,683,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\getuname.dll [2010.11.09 01:06:59 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmine.exe [2010.11.09 01:06:59 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\calc.exe [2010.11.09 01:06:59 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\charmap.exe [2010.11.09 01:06:59 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sol.exe [2010.11.09 01:06:58 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshearts.exe [2010.11.09 01:06:58 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\freecell.exe [2010.11.09 01:06:58 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe [2010.11.09 01:06:58 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\reset.exe [2010.11.09 01:06:57 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe [2010.11.09 01:06:57 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\regini.exe [2010.11.09 01:06:57 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe [2010.11.09 01:06:57 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qwinsta.exe [2010.11.09 01:06:57 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe [2010.11.09 01:06:57 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msg.exe [2010.11.09 01:06:57 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe [2010.11.09 01:06:57 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsshutdn.exe [2010.11.09 01:06:57 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe [2010.11.09 01:06:57 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qappsrv.exe [2010.11.09 01:06:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe [2010.11.09 01:06:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tskill.exe [2010.11.09 01:06:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe [2010.11.09 01:06:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rwinsta.exe [2010.11.09 01:06:57 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe [2010.11.09 01:06:57 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logoff.exe [2010.11.09 01:06:57 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdmodem.dll [2010.11.09 01:06:57 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll [2010.11.09 01:06:57 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe [2010.11.09 01:06:57 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsdiscon.exe [2010.11.09 01:06:57 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe [2010.11.09 01:06:57 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscon.exe [2010.11.09 01:06:57 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe [2010.11.09 01:06:57 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shadow.exe [2010.11.09 01:06:57 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll [2010.11.09 01:06:57 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpcfgex.dll [2010.11.09 01:06:56 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll [2010.11.09 01:06:56 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll [2010.11.09 01:06:56 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtsadmin.tlb [2010.11.09 01:06:56 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe [2010.11.09 01:06:56 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll [2010.11.09 01:06:55 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll [2010.11.09 01:06:55 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll [2010.11.09 01:06:55 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll [2010.11.09 01:06:55 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmi2xml.dll [2010.11.09 01:06:55 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll [2010.11.09 01:06:52 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipicmp.dll [2010.11.09 01:06:52 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmitimep.dll [2010.11.09 01:06:51 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msiprov.dll [2010.11.09 01:06:51 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\updprov.dll [2010.11.09 01:06:51 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmplprov.dll [2010.11.09 01:06:51 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmimsg.dll [2010.11.09 01:06:51 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemdisp.tlb [2010.11.09 01:06:51 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trnsprov.dll [2010.11.09 01:06:51 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpcons.dll [2010.11.09 01:06:51 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.tlb [2010.11.09 01:06:51 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmtr.dll [2010.11.09 01:06:51 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unsecapp.exe [2010.11.09 01:06:51 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmt.exe [2010.11.09 01:06:51 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.dll [2010.11.09 01:06:50 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsprov.dll [2010.11.09 01:06:50 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fwdprov.dll [2010.11.09 01:06:42 | 000,000,000 | ---D | C] -- C:\Programme\MSN [2010.11.09 01:06:41 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplay32.exe [2010.11.09 01:06:41 | 000,000,000 | ---D | C] -- C:\Programme\Windows NT [2010.11.09 01:06:39 | 002,066,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstscax.dll [2010.11.09 01:06:39 | 000,412,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstsc.exe [2010.11.09 01:06:39 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll [2010.11.09 01:06:39 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll [2010.11.09 01:06:39 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe [2010.11.09 01:06:39 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe [2010.11.09 01:06:38 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll [2010.11.09 01:06:38 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe [2010.11.09 01:06:38 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe [2010.11.09 01:06:38 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscupgrd.exe [2010.11.09 01:06:38 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll [2010.11.09 01:06:38 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe [2010.11.09 01:06:38 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll [2010.11.09 01:06:38 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll [2010.11.09 01:06:37 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll [2010.11.09 01:06:37 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll [2010.11.09 01:06:37 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll [2010.11.09 01:06:37 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll [2010.11.09 01:06:37 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll [2010.11.09 01:06:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc [2010.11.09 01:06:36 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll [2010.11.09 01:06:36 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll [2010.11.09 01:06:36 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll [2010.11.09 01:06:36 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll [2010.11.09 01:06:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com [2010.11.09 01:06:35 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll [2010.11.09 01:06:35 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll [2010.11.09 01:06:35 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll [2010.11.09 01:06:35 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll [2010.11.09 01:06:29 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll [2010.11.09 01:06:29 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll [2010.11.09 01:06:29 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll [2010.11.09 01:06:29 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll [2010.11.09 00:50:27 | 000,027,165 | ---- | C] (VIA Technologies, Inc. ) -- C:\WINDOWS\System32\dllcache\fetnd5.sys [2010.11.09 00:50:24 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll [2010.11.09 00:50:12 | 001,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys [2010.11.09 00:50:12 | 000,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys [2010.11.09 00:50:12 | 000,286,792 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slextspk.dll [2010.11.09 00:50:12 | 000,188,508 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slgen.dll [2010.11.09 00:50:12 | 000,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys [2010.11.09 00:50:12 | 000,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys [2010.11.09 00:50:12 | 000,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys [2010.11.09 00:50:12 | 000,073,796 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slserv.exe [2010.11.09 00:50:12 | 000,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slrundll.exe [2010.11.09 00:50:12 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\RecAgent.sys [2010.11.09 00:50:12 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys [2010.11.09 00:50:11 | 000,073,832 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slcoinst.dll [2010.11.09 00:49:09 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer [2010.11.09 00:49:08 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\ODBC [2010.11.09 00:49:07 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcommon.dll [2010.11.09 00:49:07 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcplui.dll [2010.11.09 00:49:05 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spttseng.dll [2010.11.09 00:49:04 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapisvr.exe [2010.11.09 00:49:04 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\SpeechEngines [2010.11.09 00:49:03 | 000,000,000 | R--D | C] -- C:\Programme [2010.11.09 00:49:03 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared [2010.11.09 00:49:03 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien [2010.11.09 00:48:58 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuq.dll [2010.11.09 00:48:58 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuf.dll [2010.11.09 00:48:58 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuq.dll [2010.11.09 00:48:58 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtuf.dll [2010.11.09 00:48:58 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll [2010.11.09 00:48:58 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdazel.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll [2010.11.09 00:48:55 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycc.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbduzb.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdur.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdtat.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru1.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdru.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdmon.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkyr.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdkaz.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdbu.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdblr.dll [2010.11.09 00:48:55 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdaze.dll [2010.11.09 00:48:52 | 000,008,192 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll [2010.11.09 00:48:52 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhept.dll [2010.11.09 00:48:52 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll [2010.11.09 00:48:52 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela3.dll [2010.11.09 00:48:52 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll [2010.11.09 00:48:52 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll [2010.11.09 00:48:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhela2.dll [2010.11.09 00:48:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgkl.dll [2010.11.09 00:48:52 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll [2010.11.09 00:48:52 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll [2010.11.09 00:48:52 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll [2010.11.09 00:48:52 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe319.dll [2010.11.09 00:48:52 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe220.dll [2010.11.09 00:48:52 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhe.dll [2010.11.09 00:48:49 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll [2010.11.09 00:48:49 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll [2010.11.09 00:48:49 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll [2010.11.09 00:48:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv1.dll [2010.11.09 00:48:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlv.dll [2010.11.09 00:48:49 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdest.dll [2010.11.09 00:48:49 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll [2010.11.09 00:48:49 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll [2010.11.09 00:48:49 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt1.dll [2010.11.09 00:48:49 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlt.dll [2010.11.09 00:48:46 | 000,007,168 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll [2010.11.09 00:48:46 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz.dll [2010.11.09 00:48:46 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll [2010.11.09 00:48:46 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll [2010.11.09 00:48:46 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl.dll [2010.11.09 00:48:46 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll [2010.11.09 00:48:46 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll [2010.11.09 00:48:46 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll [2010.11.09 00:48:46 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll [2010.11.09 00:48:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl1.dll [2010.11.09 00:48:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsl.dll [2010.11.09 00:48:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl.dll [2010.11.09 00:48:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu.dll [2010.11.09 00:48:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz2.dll [2010.11.09 00:48:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcz1.dll [2010.11.09 00:48:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdcr.dll [2010.11.09 00:48:46 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll [2010.11.09 00:48:46 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl1.dll [2010.11.09 00:48:46 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll [2010.11.09 00:48:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdro.dll [2010.11.09 00:48:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdpl1.dll [2010.11.09 00:48:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdhu1.dll [2010.11.09 00:48:45 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll [2010.11.09 00:48:45 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL [2010.11.09 00:48:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdycl.dll [2010.11.09 00:48:45 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdal.dll [2010.11.09 00:48:43 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll [2010.11.09 00:48:43 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll [2010.11.09 00:48:42 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\dgrpsetu.dll [2010.11.09 00:48:42 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll [2010.11.09 00:48:42 | 000,103,936 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll [2010.11.09 00:48:42 | 000,103,936 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnclass.dll [2010.11.09 00:48:42 | 000,086,556 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dllcache\dgsetup.dll [2010.11.09 00:48:42 | 000,086,556 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dgsetup.dll [2010.11.09 00:48:42 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll [2010.11.09 00:48:42 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll [2010.11.09 00:48:42 | 000,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV [2010.11.09 00:48:41 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL [2010.11.09 00:48:41 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL [2010.11.09 00:48:41 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL [2010.11.09 00:48:41 | 000,009,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL [2010.11.09 00:48:41 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL [2010.11.09 00:48:41 | 000,004,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV [2010.11.09 00:48:41 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV [2010.11.09 00:48:41 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV [2010.11.09 00:48:41 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV [2010.11.09 00:48:40 | 000,127,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL [2010.11.09 00:48:40 | 000,073,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV [2010.11.09 00:48:40 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV [2010.11.09 00:48:40 | 000,025,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV [2010.11.09 00:48:40 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV [2010.11.09 00:48:40 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV [2010.11.09 00:48:40 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK [2010.11.09 00:48:39 | 000,109,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL [2010.11.09 00:48:39 | 000,070,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL [2010.11.09 00:48:39 | 000,033,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL [2010.11.09 00:48:39 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE [2010.11.09 00:48:39 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\taskman.exe [2010.11.09 00:48:39 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL [2010.11.09 00:48:38 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\winspool.drv [2010.11.09 00:48:38 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll [2010.11.09 00:48:37 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL [2010.11.09 00:48:36 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll [2010.11.09 00:48:29 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü [2010.11.09 00:48:29 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente [2010.11.09 00:48:29 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users\Vorlagen [2010.11.09 00:48:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Favoriten [2010.11.09 00:48:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Desktop [2010.11.09 00:48:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2 [2010.11.09 00:48:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot [2010.11.09 00:48:07 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft [2010.11.09 00:48:07 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten [2010.11.09 00:47:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen [2010.11.09 00:47:35 | 000,000,000 | -HSD | C] -- C:\System Volume Information [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [4 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.11.15 18:58:04 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.11.15 04:19:48 | 002,010,656 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.dat [2010.11.15 04:19:48 | 000,557,088 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox2.dat [2010.11.15 04:19:48 | 000,019,932 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox.idx [2010.11.15 04:19:48 | 000,006,128 | -HS- | M] () -- C:\WINDOWS\System32\drivers\fidbox2.idx [2010.11.15 01:02:51 | 000,003,501 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Online Scanner - Scanbericht - Montag, November 15, 2010 01 01 15.htm [2010.11.15 01:02:51 | 000,003,501 | ---- | M] () -- C:\Dokumente und Einstellungen\Admin\Desktop\Online Scanner - Scanbericht - Montag, November 15, 2010 01 01 15.htm [2010.11.15 00:30:30 | 001,137,360 | ---- | M] (F-Secure Corporation) -- C:\Dokumente und Einstellungen\Admin\Desktop\fsbl.exe [2010.11.14 06:12:55 | 000,000,348 | ---- | M] () -- C:\WINDOWS\UChromeP.uns [2010.11.14 05:51:42 | 000,459,484 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010.11.14 05:51:42 | 000,441,264 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010.11.14 05:51:42 | 000,085,028 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010.11.14 05:51:42 | 000,071,390 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010.11.14 05:45:25 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.11.14 05:03:44 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2010.11.14 05:03:44 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010.11.14 05:03:44 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010.11.14 05:03:44 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010.11.14 05:03:44 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2010.11.14 05:00:46 | 000,266,772 | ---- | M] () -- E:\Daten Admin\WIndows XP Dienste in nLite erklärt (mit Einstellhilfen) - nLite - How To & Support - Win-Lite Forum.htm [2010.11.14 02:49:55 | 000,441,760 | ---- | M] (Acronis) -- C:\WINDOWS\System32\drivers\timntr.sys [2010.11.14 02:49:55 | 000,044,384 | ---- | M] (Acronis) -- C:\WINDOWS\System32\drivers\tifsfilt.sys [2010.11.14 02:49:45 | 000,132,224 | ---- | M] (Acronis) -- C:\WINDOWS\System32\drivers\snapman.sys [2010.11.14 02:49:34 | 000,368,480 | ---- | M] (Acronis) -- C:\WINDOWS\System32\drivers\tdrpman.sys [2010.11.14 02:49:29 | 000,000,786 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Seagate*DiscWizard.lnk [2010.11.14 02:31:53 | 000,069,057 | ---- | M] () -- C:\WINDOWS\hpoins05.dat [2010.11.14 02:25:06 | 000,000,217 | ---- | M] () -- C:\WINDOWS\HP_IZClosingDiscErrorPatch.ini [2010.11.14 02:24:31 | 000,000,234 | ---- | M] () -- C:\WINDOWS\PrnHlpLogConfig.ini [2010.11.14 02:24:05 | 000,000,214 | ---- | M] () -- C:\WINDOWS\HP_InstantSHareJPG.ini [2010.11.14 02:13:57 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010.11.14 01:49:04 | 160,848,568 | ---- | M] (Seagate) -- C:\Dokumente und Einstellungen\All Users\Dokumente\DiscWizard11Setup.de.exe [2010.11.14 01:40:40 | 001,660,703 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\dw_ug.de.pdf [2010.11.14 01:34:40 | 000,038,648 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\CHIP Online - Windows XP Installations-CD mit nLite.htm [2010.11.14 01:17:31 | 000,000,208 | ---- | M] () -- C:\WINDOWS\HpBestModeUpdatePatchLog.ini [2010.11.13 22:49:43 | 000,000,562 | ---- | M] () -- C:\WINDOWS\tasks\Admin.job [2010.11.13 21:25:20 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2010.11.13 21:25:20 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2010.11.13 20:12:51 | 000,554,272 | ---- | M] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\All Users\Dokumente\Mats_Run.printing.exe [2010.11.13 20:04:02 | 000,164,352 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Der Windows.doc [2010.11.13 19:53:42 | 000,000,400 | ---- | M] () -- C:\WINDOWS\ODBC.INI [2010.11.13 19:10:02 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf [2010.11.12 15:36:00 | 000,066,489 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\CHIP Online - XP-Blitzstart in 23 Sekunden Tipps für ein schnelleres Windows.htm [2010.11.12 14:48:21 | 000,310,109 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Systemhygiene.pdf [2010.11.12 14:43:48 | 000,318,461 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Slipstreaming.pdf [2010.11.12 14:43:31 | 000,034,400 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Installation.pdf [2010.11.12 04:17:16 | 000,193,776 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.11.12 00:14:18 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2010.11.11 21:05:09 | 000,001,685 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\LOADSTREET Cleanse Uninstaller Pro.lnk [2010.11.11 20:54:09 | 000,000,138 | ---- | M] () -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2010.11.11 20:53:04 | 000,069,449 | ---- | M] () -- C:\WINDOWS\hpoins05.dat.temp [2010.11.11 20:51:32 | 000,000,648 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Image Zone Schnellstart.lnk [2010.11.11 10:18:40 | 013,459,344 | ---- | M] (Microsoft Corporation) -- C:\IPx86_1031_7.00.260.0.exe [2010.11.10 02:38:59 | 000,000,754 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\PC-WELT-IronBrowser.lnk [2010.11.10 01:31:57 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.bak [2010.11.10 00:10:51 | 000,113,933 | ---- | M] () -- C:\WINDOWS\System32\drivers\klin.dat [2010.11.10 00:10:51 | 000,097,549 | ---- | M] () -- C:\WINDOWS\System32\drivers\klick.dat [2010.11.09 23:00:09 | 000,227,344 | ---- | M] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\klif.sys [2010.11.09 14:52:15 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2010.11.09 14:03:43 | 000,251,712 | RHS- | M] () -- C:\ntldr [2010.11.09 01:14:19 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD [2010.11.09 01:13:27 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf [2010.11.09 01:11:15 | 000,002,951 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2010.11.09 01:11:15 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2010.11.09 01:11:15 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2010.11.09 01:11:15 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS [2010.11.09 01:11:15 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2010.11.09 01:10:51 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI [2010.11.09 01:08:14 | 000,021,740 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat [2010.11.08 12:10:39 | 328,324,136 | R--- | M] (Microsoft Corporation) -- C:\WindowsXP-KB936929-SP3-x86-DEU.exe [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [4 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.11.15 19:08:48 | 000,003,501 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Online Scanner - Scanbericht - Montag, November 15, 2010 01 01 15.htm [2010.11.15 01:02:51 | 000,003,501 | ---- | C] () -- C:\Dokumente und Einstellungen\Admin\Desktop\Online Scanner - Scanbericht - Montag, November 15, 2010 01 01 15.htm [2010.11.14 06:12:17 | 000,000,348 | ---- | C] () -- C:\WINDOWS\UChromeP.uns [2010.11.14 05:00:42 | 000,266,772 | ---- | C] () -- E:\Daten Admin\WIndows XP Dienste in nLite erklärt (mit Einstellhilfen) - nLite - How To & Support - Win-Lite Forum.htm [2010.11.14 02:49:29 | 000,000,786 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Seagate*DiscWizard.lnk [2010.11.14 02:31:52 | 000,069,057 | ---- | C] () -- C:\WINDOWS\hpoins05.dat [2010.11.14 02:31:52 | 000,019,696 | ---- | C] () -- C:\WINDOWS\hpomdl05.dat [2010.11.14 02:25:06 | 000,001,068 | ---- | C] () -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\PatchUpdate_IZClosingDiscError.log [2010.11.14 02:25:05 | 000,000,217 | ---- | C] () -- C:\WINDOWS\HP_IZClosingDiscErrorPatch.ini [2010.11.14 02:24:31 | 000,000,234 | ---- | C] () -- C:\WINDOWS\PrnHlpLogConfig.ini [2010.11.14 02:24:31 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\HelpFilesUpdatePatch_PRINTHELPWRAPPER.log [2010.11.14 02:24:05 | 000,002,272 | ---- | C] () -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\PatchUpdate_InstantShareJPG.log [2010.11.14 02:24:05 | 000,000,214 | ---- | C] () -- C:\WINDOWS\HP_InstantSHareJPG.ini [2010.11.14 01:40:40 | 001,660,703 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\dw_ug.de.pdf [2010.11.14 01:34:38 | 000,038,648 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\CHIP Online - Windows XP Installations-CD mit nLite.htm [2010.11.14 01:17:31 | 000,007,263 | ---- | C] () -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\BestModePatch_RubenMain.log [2010.11.14 01:17:31 | 000,000,208 | ---- | C] () -- C:\WINDOWS\HpBestModeUpdatePatchLog.ini [2010.11.13 22:54:24 | 000,114,832 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2010.11.13 21:42:53 | 000,000,562 | ---- | C] () -- C:\WINDOWS\tasks\Admin.job [2010.11.13 20:04:02 | 000,164,352 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Der Windows.doc [2010.11.13 19:10:46 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2010.11.13 19:10:45 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini [2010.11.13 19:10:44 | 000,000,414 | ---- | C] () -- C:\WINDOWS\System32\lame_acm.xml [2010.11.13 19:10:43 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2010.11.13 19:10:42 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010.11.13 19:10:41 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2010.11.13 19:10:02 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\UMDF\MsftWdf_user_01_00_00.Wdf [2010.11.12 15:35:59 | 000,066,489 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\CHIP Online - XP-Blitzstart in 23 Sekunden Tipps für ein schnelleres Windows.htm [2010.11.12 14:48:21 | 000,310,109 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Systemhygiene.pdf [2010.11.12 14:43:48 | 000,318,461 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Slipstreaming.pdf [2010.11.12 14:43:31 | 000,034,400 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Installation.pdf [2010.11.12 03:47:39 | 003,506,258 | ---- | C] () -- C:\Dokumente und Einstellungen\Admin\ProductContext1400.log [2010.11.12 02:42:46 | 000,069,449 | ---- | C] () -- C:\WINDOWS\hpoins05.dat.temp [2010.11.12 02:42:45 | 000,019,696 | ---- | C] () -- C:\WINDOWS\hpomdl05.dat.temp [2010.11.12 01:41:47 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2010.11.11 21:05:09 | 000,001,685 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\LOADSTREET Cleanse Uninstaller Pro.lnk [2010.11.11 20:54:09 | 000,000,138 | ---- | C] () -- C:\Dokumente und Einstellungen\Admin\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2010.11.11 20:51:32 | 000,000,648 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Image Zone Schnellstart.lnk [2010.11.11 20:22:51 | 000,001,994 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\hpzinstall.log [2010.11.11 16:40:27 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\UnAudioNT.dll [2010.11.10 04:26:28 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\vuins32.dll [2010.11.10 02:38:59 | 000,000,754 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\PC-WELT-IronBrowser.lnk [2010.11.10 01:32:00 | 000,013,646 | ---- | C] () -- C:\WINDOWS\System32\wpa.bak [2010.11.09 23:01:03 | 000,113,933 | ---- | C] () -- C:\WINDOWS\System32\drivers\klin.dat [2010.11.09 23:01:03 | 000,097,549 | ---- | C] () -- C:\WINDOWS\System32\drivers\klick.dat [2010.11.09 23:00:23 | 002,010,656 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.dat [2010.11.09 23:00:23 | 000,557,088 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox2.dat [2010.11.09 23:00:23 | 000,019,932 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox.idx [2010.11.09 23:00:23 | 000,006,128 | -HS- | C] () -- C:\WINDOWS\System32\drivers\fidbox2.idx [2010.11.09 14:07:48 | 000,010,457 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.hta [2010.11.09 14:07:48 | 000,001,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmptour.css [2010.11.09 14:07:47 | 000,660,224 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.chm [2010.11.09 14:07:47 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud7.wav [2010.11.09 14:07:47 | 000,343,204 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud6.wav [2010.11.09 14:07:47 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud9.wav [2010.11.09 14:07:47 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud8.wav [2010.11.09 14:07:47 | 000,172,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud3.wav [2010.11.09 14:07:47 | 000,086,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud5.wav [2010.11.09 14:07:47 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud4.wav [2010.11.09 14:07:47 | 000,086,180 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud2.wav [2010.11.09 14:07:47 | 000,079,196 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplayer.adm [2010.11.09 14:07:47 | 000,026,141 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmplay.chm [2010.11.09 14:07:47 | 000,001,730 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpocm.inf [2010.11.09 14:07:47 | 000,000,420 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmploc.js [2010.11.09 14:07:46 | 000,572,557 | ---- | C] () -- C:\WINDOWS\System32\dllcache\rtuner.wmv [2010.11.09 14:07:46 | 000,354,468 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmpaud1.wav [2010.11.09 14:07:46 | 000,300,969 | ---- | C] () -- C:\WINDOWS\System32\dllcache\viz.wmv [2010.11.09 14:07:46 | 000,084,531 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plyr_err.chm [2010.11.09 14:07:46 | 000,066,132 | ---- | C] () -- C:\WINDOWS\System32\dllcache\revert.wmz [2010.11.09 14:07:46 | 000,058,216 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmp.inf [2010.11.09 14:07:46 | 000,034,554 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmdm.inf [2010.11.09 14:07:46 | 000,023,829 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tourbg.gif [2010.11.09 14:07:46 | 000,017,489 | ---- | C] () -- C:\WINDOWS\System32\dllcache\videobg.gif [2010.11.09 14:07:46 | 000,013,540 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmfsdk.inf [2010.11.09 14:07:46 | 000,008,677 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm7.gif [2010.11.09 14:07:46 | 000,007,892 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm9.gif [2010.11.09 14:07:46 | 000,007,636 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm2.gif [2010.11.09 14:07:46 | 000,007,369 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm4.gif [2010.11.09 14:07:46 | 000,006,241 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm3.gif [2010.11.09 14:07:46 | 000,006,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm6.gif [2010.11.09 14:07:46 | 000,005,789 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm1.gif [2010.11.09 14:07:46 | 000,005,290 | ---- | C] () -- C:\WINDOWS\System32\dllcache\vidsamp.gif [2010.11.09 14:07:46 | 000,004,193 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm8.gif [2010.11.09 14:07:46 | 000,003,187 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tour.js [2010.11.09 14:07:46 | 000,002,477 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wm5.gif [2010.11.09 14:07:46 | 000,002,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplay.gif [2010.11.09 14:07:46 | 000,002,450 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpause.gif [2010.11.09 14:07:46 | 000,002,375 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tplayh.gif [2010.11.09 14:07:46 | 000,002,371 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tpauseh.gif [2010.11.09 14:07:46 | 000,001,810 | ---- | C] () -- C:\WINDOWS\System32\dllcache\skins.inf [2010.11.09 14:07:46 | 000,001,398 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taon.gif [2010.11.09 14:07:46 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taonh.gif [2010.11.09 14:07:46 | 000,001,380 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoff.gif [2010.11.09 14:07:46 | 000,001,367 | ---- | C] () -- C:\WINDOWS\System32\dllcache\taoffh.gif [2010.11.09 14:07:46 | 000,001,148 | ---- | C] () -- C:\WINDOWS\System32\dllcache\snd.htm [2010.11.09 14:07:45 | 000,457,607 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mdlib.wmv [2010.11.09 14:07:45 | 000,375,519 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nuskin.wmv [2010.11.09 14:07:45 | 000,036,610 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplayer2.inf [2010.11.09 14:07:45 | 000,022,060 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npds.zip [2010.11.09 14:07:45 | 000,005,971 | ---- | C] () -- C:\WINDOWS\System32\dllcache\events.js [2010.11.09 14:07:45 | 000,002,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogoh.gif [2010.11.09 14:07:45 | 000,002,545 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mplogo.gif [2010.11.09 14:07:45 | 000,001,476 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst5.wpl [2010.11.09 14:07:45 | 000,001,471 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst6.wpl [2010.11.09 14:07:45 | 000,001,471 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst12.wpl [2010.11.09 14:07:45 | 000,001,469 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst3.wpl [2010.11.09 14:07:45 | 000,001,467 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst4.wpl [2010.11.09 14:07:45 | 000,001,261 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst1.wpl [2010.11.09 14:07:45 | 000,001,055 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst2.wpl [2010.11.09 14:07:45 | 000,001,047 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst7.wpl [2010.11.09 14:07:45 | 000,001,038 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst8.wpl [2010.11.09 14:07:45 | 000,000,807 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst11.wpl [2010.11.09 14:07:45 | 000,000,800 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst10.wpl [2010.11.09 14:07:45 | 000,000,782 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst9.wpl [2010.11.09 14:07:45 | 000,000,779 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst13.wpl [2010.11.09 14:07:45 | 000,000,778 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst14.wpl [2010.11.09 14:07:45 | 000,000,725 | ---- | C] () -- C:\WINDOWS\System32\dllcache\plylst15.wpl [2010.11.09 14:07:45 | 000,000,403 | ---- | C] () -- C:\WINDOWS\System32\dllcache\npdrmv2.zip [2010.11.09 14:07:44 | 000,381,425 | ---- | C] () -- C:\WINDOWS\System32\dllcache\copycd.wmv [2010.11.09 14:07:44 | 000,184,109 | ---- | C] () -- C:\WINDOWS\System32\dllcache\compact.wmz [2010.11.09 14:07:44 | 000,009,585 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.css [2010.11.09 14:07:44 | 000,008,298 | ---- | C] () -- C:\WINDOWS\System32\dllcache\contents.htm [2010.11.09 14:07:44 | 000,006,878 | ---- | C] () -- C:\WINDOWS\System32\dllcache\controls.js [2010.11.09 14:07:44 | 000,000,999 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bktrh.gif [2010.11.09 14:07:44 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnth.gif [2010.11.09 14:07:44 | 000,000,773 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cnt.gif [2010.11.09 14:07:44 | 000,000,772 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cntd.gif [2010.11.09 14:07:44 | 000,000,760 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapph.gif [2010.11.09 14:07:44 | 000,000,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\cloapp.gif [2010.11.09 14:04:01 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty [2010.11.09 14:04:01 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod [2010.11.09 14:03:59 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img [2010.11.09 12:21:41 | 000,051,124 | R--- | C] () -- C:\WINDOWS\System32\VTTrayp.cfg [2010.11.09 12:21:41 | 000,037,162 | R--- | C] () -- C:\WINDOWS\System32\VTTrayP2.cfg [2010.11.09 12:21:41 | 000,034,375 | R--- | C] () -- C:\WINDOWS\System32\VTOvrly2.cfg [2010.11.09 12:21:40 | 000,059,327 | R--- | C] () -- C:\WINDOWS\System32\VTovrlay.cfg [2010.11.09 12:21:40 | 000,044,076 | R--- | C] () -- C:\WINDOWS\System32\VTInfo2.cfg [2010.11.09 12:21:38 | 000,050,104 | R--- | C] () -- C:\WINDOWS\System32\VTGamma2.cfg [2010.11.09 12:21:38 | 000,036,546 | R--- | C] () -- C:\WINDOWS\System32\VTGama_2.cfg [2010.11.09 12:21:37 | 000,063,489 | R--- | C] () -- C:\WINDOWS\System32\VTDisply.cfg [2010.11.09 12:21:37 | 000,056,619 | R--- | C] () -- C:\WINDOWS\System32\VTDispl2.cfg [2010.11.09 12:21:37 | 000,052,037 | R--- | C] () -- C:\WINDOWS\System32\VTDispl3.cfg [2010.11.09 12:21:35 | 000,011,146 | R--- | C] () -- C:\WINDOWS\System32\uc03i.inf [2010.11.09 01:46:39 | 000,000,211 | -HS- | C] () -- C:\boot.ini [2010.11.09 01:46:36 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf [2010.11.09 01:14:19 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD [2010.11.09 01:13:27 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010.11.09 01:12:52 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll [2010.11.09 01:12:37 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex [2010.11.09 01:12:31 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe [2010.11.09 01:12:30 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe [2010.11.09 01:12:28 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex [2010.11.09 01:12:20 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll [2010.11.09 01:12:16 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex [2010.11.09 01:12:01 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll [2010.11.09 01:11:15 | 000,002,951 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT [2010.11.09 01:11:15 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS [2010.11.09 01:11:15 | 000,000,000 | RHS- | C] () -- C:\IO.SYS [2010.11.09 01:11:15 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS [2010.11.09 01:11:15 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT [2010.11.09 01:11:01 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb [2010.11.09 01:11:01 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb [2010.11.09 01:11:00 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx [2010.11.09 01:09:42 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex [2010.11.09 01:09:10 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp [2010.11.09 01:09:10 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp [2010.11.09 01:09:02 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf [2010.11.09 01:08:14 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2010.11.09 01:06:58 | 000,001,237 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd [2010.11.09 01:06:57 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h [2010.11.09 01:06:56 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h [2010.11.09 01:06:50 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc [2010.11.09 00:49:12 | 000,001,393 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2010.11.09 00:49:08 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2010.11.09 00:49:05 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd [2010.11.09 00:49:05 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa [2010.11.09 00:49:05 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf [2010.11.09 00:49:04 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa [2010.11.09 00:48:38 | 000,001,806 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT [2010.11.09 00:48:27 | 001,014,663 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT [2010.11.09 00:48:27 | 000,817,199 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT [2010.11.09 00:48:27 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT [2010.11.09 00:48:27 | 000,041,270 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT [2010.11.09 00:48:27 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT [2010.11.09 00:48:27 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT [2010.11.09 00:48:27 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT [2010.11.09 00:48:27 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat [2010.11.09 00:47:35 | 000,193,776 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT ========== LOP Check ========== [2010.11.11 20:24:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Leadertech [2010.11.15 00:37:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\F-Secure [2010.11.10 04:09:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Publish Data [2010.11.14 02:49:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Seagate [2010.11.13 22:49:43 | 000,000,562 | ---- | M] () -- C:\WINDOWS\Tasks\Admin.job ========== Purity Check ========== < End of report > |
|
16.11.2010, 20:37
| #3 |
| | Worm.Autorun.B u. Adware Widgi Toolbar , Kaspersky außer Kontrolle Tja hat sich wohl erledigt, nach meinem Besuch auf dieser Seite streikte erst nur die Mouse und dann die Tastatur, es ging nichts mehr. Habe heute versucht Windows zu reparieren ging auch nicht, blieb mir nichts anderes übrig als wieder alles neu aufzusetzen. Jetzt hoffe ich , daßich saubere Treiber finde. Wie sieht es denn aus mit den o.g. Seiten?
__________________ |
|
17.11.2010, 09:20
| #4 | |||
| /// Helfer-Team    | Worm.Autorun.B u. Adware Widgi Toolbar , Kaspersky außer Kontrolle Hallo und Herzlich Willkommen!  Zitat:
Zitat:
- ansonsten unter "Geräte-Manager - Hardware" Wenn du keine Treiber-CD des Herstellers hast, solltest Du dir vor der Formatierung diese Treiber NUR von der Hersteller-Homepage auf eine CD brennen, damit du sie nach der Neuinstallation bereit hast Zitat:
Bei Installation darauf zu achten!: - Immer die benutzerdefinierte Installation wählen, nicht die Standardinstallation, weil dann oft Sachen mitinstalliert werden, die man nicht braucht oder nicht möchte. - bitte die Lizenzbestimmungen also lesen, und nicht sofort überall den Haken setzen, weil damit stimmt man nämlich zu, dass Adware (Werbe-Pop-ups) durch Partnerprogrammen, Sponsoren etc - mitinstalliert wird, weil sich Freeware damit finanziert. in diese Kategorie gehören noch einige, wie z.B: -> Unerwünschte Toolbars deinstallieren gruß Cf Geändert von kira (17.11.2010 um 09:44 Uhr) |
|
| Themen zu Worm.Autorun.B u. Adware Widgi Toolbar , Kaspersky außer Kontrolle |
| .dll, 7-zip, adware, adware.widgitoolbar, dateien, download, dringend, explorer, foren, harddisk, hijack, hijackthis, kaspersky, location, log, microsoft, msiinstaller, nicht gefunden, officejet, oldtimer, pdf, pdf creator, programme, saver, schädlinge, seiten, service pack 1, shell32.dll, software, sp3, starten, suche, system restore, unbemerkt, updates, vista, windows internet, winxp |
Linear-Darstellung
