Trojaner-Board - Vista-Eigenartiges Internetproblem!

Trojaner-Board (https://www.trojaner-board.de/)

- Alles rund um Windows (https://www.trojaner-board.de/alles-rund-um-windows/)

- - Vista-Eigenartiges Internetproblem! (https://www.trojaner-board.de/78430-vista-eigenartiges-internetproblem.html)

Vista-Eigenartiges Internetproblem!

Hallo an alle, ich bin der Neue :party:
ich habe wirklich ein äußerst eigenartiges Problem. Es geht um mein Internet. Nun ja, ich versuchs mal möglichst gut zu beschreiben:
Ich kann in Firefox normal surfen und alles machen, auch videos gucken usw.
Es läuft alles auch genauso gut und schnell, wie früher auch.
Nur jetzt das Komische: Ich habe Spiele auf dem PC, bei denen, sobald ich das Spiel starte (!), das internet disconnected. Nur wenn ich auf den Desktop gehe, baut sich die Verbindung wieder auf. Es handelt sich hier um die Spiele "TrackMania" und das sehr neue, sich in der Beta Phase befindende "Heroes of Newerth".
Ich habe gelesen, dass so welche Internetprobleme durch Cracks zustande kommen könnten. Aber für diese beiden Spiele braucht man gar keine CD, sprich: ein Crack wäre völlig sinnfrei.
Übrigens: Ich kenne sogar ein Spiel im Internet, welches funktioniert: Warcraft III. Warum gehen einige Spiele nicht, wohingegen andere funktonieren? :D
Ich habe nach mehrstündigen Suchen noch Keinen per Google gefunden, der das gleiche Problem hat. Ich versuche das Problem schon seit 3 Tagen zu lösen, aber ich weiß gar nicht was ich überhaupt versuchen soll. Deswegen wende ich mich an euch: Habt ihr vielleicht eine Idee, woher dieses Problem stammt oder gibt es vielleicht einen, der dieses Problem auch hat/hatte?
Es bleibt vielleicht noch zu sagen, dass früher alles funktioniert hat. Erst als ich Heroes of Newerth installiert habe, fingen die Probleme an (ich glaube so wars :P )
Ich habe übrigens schon jeweils ein Spiel deinstalliert und dann probiert, ob das andere funktioniert -> geht nicht!
Eine letzte Information; ich weiß nicht, ob sie euch hilft, denn sie ist auch sehr eingenartig :D : Ich hatte gestern das ServicePack 2 installiert. Und bis zum Neustart, konnte ich sogar die beiden Spiele ohne Probleme spielen!
Ich dachte schon das Problem, wäre jetzt gelöst und Windows wollte einfach geupdatet werden :uglyhammer: . Mir ist aufgefallen, dass die Verbindungsanzeige unten rechts falsch war. Anstatt der blauen Weltkugel, war dort ein rotes Kreuz, aber trotzdem hatte ich Internet und konnte spielen. Nach dem Neustart war die Anzeige wieder normal und das Internet spinnte wieder^^

Sehr viel Text soll nochmal zusammengefasst sagen: Ich kann nur im Internet surfen, aber sobald ich bestimmte Onlinespiele starte, disconnected das Internet (kein Crack!)

Ich benutze W-Lan per FRITZ! WLan usb stick
Mein Computer erfüllt die Systemanforderungen der Spiele (lief ja schon einmal)

Malewarebytes

Code:

Malwarebytes' Anti-Malware 1.41

Datenbank Version: 2955

Windows 6.0.6002 Service Pack 2
 

14.10.2009 12:44:16

mbam-log-2009-10-14 (12-44-16).txt
 

Scan-Methode: Vollständiger Scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|)

Durchsuchte Objekte: 327705

Laufzeit: 2 hour(s), 0 minute(s), 41 second(s)
 

Infizierte Speicherprozesse: 0

Infizierte Speichermodule: 0

Infizierte Registrierungsschlüssel: 0

Infizierte Registrierungswerte: 0

Infizierte Dateiobjekte der Registrierung: 1

Infizierte Verzeichnisse: 0

Infizierte Dateien: 1
 

Infizierte Speicherprozesse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung:

HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully.
 

Infizierte Verzeichnisse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien:

C:\Program Files\winlogo20\treiber\modulbus.dlL (Backdoor.Sdbot) -> Quarantined and deleted successfully.

RSIT-LOG.TXT TEIL 1

Code:

Logfile of random's system information tool 1.06 (written by random/random)

Run by *** at 2009-10-14 12:54:49

Microsoft® Windows Vista™ Home Premium  Service Pack 2

System drive C: has 376 GB (64%) free of 590 GB

Total RAM: 3069 MB (63% free)
 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 12:54:58, on 14.10.2009

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.18813)

Boot mode: Normal
 

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\Explorer.EXE

C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Windows\RtHDVCpl.exe

C:\Windows\System32\rundll32.exe

C:\Program Files\avmwlanstick\WLanGUI.exe

C:\Program Files\NewSoft\Smart Start UP\PnPDetect.exe

C:\Program Files\iTunesHelper.exe

C:\Program Files\Deamon Tools\DAEMON Tools Lite\daemon.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\***\Desktop\RSIT.exe

C:\Program Files\Trend Micro\HijackThis\***.exe
 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.aldi.com/

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.aldi.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 

R3 - URLSearchHook: (no name) -  - (no file)

R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll

O1 - Hosts: ::1 localhost

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\coIEPlg.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\IPSBHO.DLL

O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\coIEPlg.dll

O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [AVMWlanClient] C:\Program Files\avmwlanstick\wlangui.exe

O4 - HKLM\..\Run: [Smart Start UP] C:\Program Files\NewSoft\Smart Start UP\PnPDetect.exe /Automation 

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunesHelper.exe"

O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\Deamon Tools\DAEMON Tools Lite\daemon.exe" -autorun

O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')

O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')

O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000

O9 - Extra button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-25/4 (file missing)

O9 - Extra 'Tools' menuitem: eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-25/4 (file missing)

O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL

O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ 6\ICQ6.5\ICQ.exe

O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ 6\ICQ6.5\ICQ.exe

O9 - Extra button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-25/4 (file missing) (HKCU)

O9 - Extra 'Tools' menuitem: eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-25/4 (file missing) (HKCU)

O13 - Gopher Prefix: 

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\coIEPlg.dll

O23 - Service: Apache2.2 - Apache Software Foundation - C:\Program Files\AppServ\Apache2.2\bin\httpd.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: AVM WLAN Connection Service - AVM Berlin - C:\Program Files\avmwlanstick\WlanNetService.exe

O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Lookout Citadel Server (LkCitadelServer) - National Instruments, Inc. - C:\Windows\system32\lkcitdl.exe

O23 - Service: National Instruments PSP Server Locator (lkClassAds) - National Instruments Corporation - C:\Windows\system32\lkads.exe

O23 - Service: National Instruments Time Synchronization (lkTimeSync) - National Instruments Corporation - C:\Windows\system32\lktsrv.exe

O23 - Service: mysql - Unknown owner - C:\Program.exe (file missing)

O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

O23 - Service: National Instruments Domain Service (NIDomainService) - National Instruments Corporation - C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe

O23 - Service: NI Service Locator (niSvcLoc) - National Instruments Corp. - C:\Windows\system32\nisvcloc.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe

O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
 

--

End of file - 9034 bytes
 

======Scheduled tasks folder======
 

C:\Windows\tasks\User_Feed_Synchronization-{5D45F506-F4EF-4182-A01D-3FAE181CAEC5}.job
 

======Registry dump======
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

Symantec NCO BHO - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\coIEPlg.dll [2009-08-22 378736]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]

Symantec Intrusion Prevention - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\IPSBHO.DLL [2009-08-22 107896]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live Anmelde-Hilfsprogramm - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-25 41760]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton Internet Security\Engine\16.7.2.11\coIEPlg.dll [2009-08-22 378736]

{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-12-09 958200]
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]

"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-05-07 178712]

"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-07 6139904]

"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-06-09 13543968]

"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-06-09 92704]

"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]

"AVMWlanClient"=C:\Program Files\avmwlanstick\wlangui.exe [2009-05-07 1904640]

"Smart Start UP"=C:\Program Files\NewSoft\Smart Start UP\PnPDetect.exe [2007-04-27 104528]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]

"iTunesHelper"=C:\Program Files\iTunesHelper.exe [2009-09-21 305440]

"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Lite"=C:\Program Files\Deamon Tools\DAEMON Tools Lite\daemon.exe [2008-08-08 490952]

"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-02-04 23975720]

"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

C:\Program Files\Java\jre6\bin\jusched.exe [2009-08-25 149280]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SymEFA.sys]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"EnableLUA"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"BindDirectlyToPropertySetStorage"=
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5ab293f8-99e5-11dd-8aa0-0021853e7da2}]

shell\AutoRun\command - J:\pushinst.exe
 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a7fe9655-9eba-11dd-8974-001c4afc84a5}]

shell\AutoRun\command - I:\SETUP.EXE
 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c41103c7-b881-11dd-8d55-001c4afc84a5}]

shell\AutoRun\command - J:\Launch.exe /run
 
 

======File associations======
 

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*
 

======List of files/folders created in the last 1 months======
 

2009-10-14 12:54:49 ----D---- C:\rsit

2009-10-14 10:42:00 ----D---- C:\Users\***\AppData\Roaming\Malwarebytes

2009-10-14 10:41:54 ----D---- C:\ProgramData\Malwarebytes

2009-10-14 10:41:54 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2009-10-14 10:36:16 ----D---- C:\Program Files\CCleaner

2009-10-13 20:22:18 ----D---- C:\Program Files\Trend Micro

2009-10-13 19:39:50 ----D---- C:\Program Files\AVM_update

2009-10-13 11:32:02 ----D---- C:\Windows\system32\vi-VN

2009-10-13 11:32:02 ----D---- C:\Windows\system32\eu-ES

2009-10-13 11:32:02 ----D---- C:\Windows\system32\ca-ES

2009-10-13 10:44:07 ----D---- C:\Windows\system32\EventProviders

2009-10-11 16:11:25 ----A---- C:\Windows\system32\D3DX9_40.dll

2009-10-11 16:11:25 ----A---- C:\Windows\system32\d3dx10_40.dll

2009-10-11 16:11:25 ----A---- C:\Windows\system32\D3DCompiler_40.dll

2009-10-06 18:04:00 ----D---- C:\Program Files\WE Unlimited

2009-10-03 18:35:56 ----A---- C:\Windows\system32\PnkBstrB.exe

2009-10-03 18:35:50 ----A---- C:\Windows\system32\PnkBstrA.exe

2009-09-28 16:33:18 ----D---- C:\Program Files\Common Files\Merge Modules

2009-09-28 16:33:11 ----D---- C:\Program Files\GBX Master Light

2009-09-26 12:58:25 ----A---- C:\Windows\system32\GEARAspi.dll

2009-09-26 12:58:22 ----D---- C:\Program Files\Mozilla Plugins

2009-09-26 12:58:21 ----D---- C:\Program Files\iTunesMiniPlayer.Resources

2009-09-26 12:58:19 ----D---- C:\Program Files\iTunesHelper.Resources

2009-09-26 12:57:30 ----D---- C:\Program Files\iTunes.Resources

2009-09-26 12:57:30 ----D---- C:\Program Files\iPod

2009-09-26 12:57:21 ----D---- C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}

2009-09-26 12:57:21 ----D---- C:\Program Files\CD Configuration

2009-09-26 12:38:35 ----D---- C:\Program Files\iPhone-Konfigurationsprogramm

2009-09-24 13:59:44 ----A---- C:\Windows\system32\NlsLexicons0007.dll

2009-09-24 13:59:42 ----A---- C:\Windows\system32\SLsvc.exe

2009-09-24 13:59:42 ----A---- C:\Windows\system32\SLCExt.dll

2009-09-24 13:59:40 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll

2009-09-24 13:59:40 ----A---- C:\Windows\system32\DevicePairingWizard.exe

2009-09-24 13:59:39 ----A---- C:\Windows\system32\NlsLexicons0009.dll

2009-09-24 13:59:38 ----A---- C:\Windows\system32\mssrch.dll

2009-09-24 13:59:36 ----A---- C:\Windows\system32\tquery.dll

2009-09-24 13:59:35 ----A---- C:\Windows\system32\scavenge.dll

2009-09-24 13:59:35 ----A---- C:\Windows\system32\RMActivate_isv.exe

2009-09-24 13:59:35 ----A---- C:\Windows\system32\RMActivate.exe

2009-09-24 13:59:35 ----A---- C:\Windows\system32\PresentationNative_v0300.dll

2009-09-24 13:59:34 ----A---- C:\Windows\system32\msi.dll

2009-09-24 13:59:34 ----A---- C:\Windows\system32\imapi2fs.dll

2009-09-24 13:59:33 ----A---- C:\Windows\system32\WscEapPr.dll

2009-09-24 13:59:33 ----A---- C:\Windows\system32\wcnwiz2.dll

2009-09-24 13:59:33 ----A---- C:\Windows\system32\sysmain.dll

2009-09-24 13:59:33 ----A---- C:\Windows\system32\secproc_isv.dll

2009-09-24 13:59:32 ----A---- C:\Windows\system32\icardagt.exe

2009-09-24 13:59:31 ----A---- C:\Windows\system32\EhStorShell.dll

2009-09-24 13:59:31 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll

2009-09-24 13:59:30 ----A---- C:\Windows\system32\spreview.exe

2009-09-24 13:59:30 ----A---- C:\Windows\system32\spinstall.exe

2009-09-24 13:59:30 ----A---- C:\Windows\system32\drmv2clt.dll

2009-09-24 13:59:29 ----A---- C:\Windows\system32\spwizui.dll

2009-09-24 13:59:29 ----A---- C:\Windows\system32\shell32.dll

2009-09-24 13:59:29 ----A---- C:\Windows\system32\secproc.dll

2009-09-24 13:59:29 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll

2009-09-24 13:59:28 ----A---- C:\Windows\system32\SearchIndexer.exe

2009-09-24 13:59:28 ----A---- C:\Windows\system32\p2psvc.dll

2009-09-24 13:59:28 ----A---- C:\Windows\system32\mssvp.dll

2009-09-24 13:59:27 ----A---- C:\Windows\system32\sdohlp.dll

2009-09-24 13:59:27 ----A---- C:\Windows\system32\mssphtb.dll

2009-09-24 13:59:27 ----A---- C:\Windows\system32\mssph.dll

2009-09-24 13:59:27 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL

2009-09-24 13:59:27 ----A---- C:\Windows\system32\mscoree.dll

2009-09-24 13:59:27 ----A---- C:\Windows\system32\imapi2.dll

2009-09-24 13:59:26 ----A---- C:\Windows\system32\ntkrnlpa.exe

2009-09-24 13:59:26 ----A---- C:\Windows\system32\IMJP10K.DLL

2009-09-24 13:59:26 ----A---- C:\Windows\system32\esent.dll

2009-09-24 13:59:26 ----A---- C:\Windows\system32\DevicePairing.dll

2009-09-24 13:59:25 ----A---- C:\Windows\system32\wevtsvc.dll

2009-09-24 13:59:25 ----A---- C:\Windows\system32\sperror.dll

2009-09-24 13:59:25 ----A---- C:\Windows\system32\SLC.dll

2009-09-24 13:59:25 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe

2009-09-24 13:59:25 ----A---- C:\Windows\system32\RMActivate_ssp.exe

2009-09-24 13:59:25 ----A---- C:\Windows\system32\PresentationHostProxy.dll

2009-09-24 13:59:25 ----A---- C:\Windows\system32\msshsq.dll

2009-09-24 13:59:25 ----A---- C:\Windows\system32\korwbrkr.dll

2009-09-24 13:59:25 ----A---- C:\Windows\system32\IasMigReader.exe

2009-09-24 13:59:24 ----A---- C:\Windows\system32\msjet40.dll

2009-09-24 13:59:23 ----A---- C:\Windows\system32\Query.dll

2009-09-24 13:59:23 ----A---- C:\Windows\system32\qmgr.dll

2009-09-24 13:59:23 ----A---- C:\Windows\system32\ntoskrnl.exe

2009-09-24 13:59:23 ----A---- C:\Windows\system32\msxml6.dll

2009-09-24 13:59:23 ----A---- C:\Windows\system32\MPSSVC.dll

2009-09-24 13:59:22 ----A---- C:\Windows\system32\srchadmin.dll

RSIT-LOG.TXT TEIL 2

Code:

2009-09-24 13:59:22 ----A---- C:\Windows\system32\P2PGraph.dll

2009-09-24 13:59:22 ----A---- C:\Windows\system32\ole32.dll

2009-09-24 13:59:22 ----A---- C:\Windows\system32\ntdll.dll

2009-09-24 13:59:22 ----A---- C:\Windows\system32\msxml3.dll

2009-09-24 13:59:22 ----A---- C:\Windows\system32\msexch40.dll

2009-09-24 13:59:22 ----A---- C:\Windows\system32\diagperf.dll

2009-09-24 13:59:21 ----A---- C:\Windows\system32\winload.exe

2009-09-24 13:59:21 ----A---- C:\Windows\system32\uDWM.dll

2009-09-24 13:59:21 ----A---- C:\Windows\system32\riched20.dll

2009-09-24 13:59:21 ----A---- C:\Windows\system32\mmc.exe

2009-09-24 13:59:21 ----A---- C:\Windows\system32\mblctr.exe

2009-09-24 13:59:21 ----A---- C:\Windows\system32\IasMigPlugin.dll

2009-09-24 13:59:21 ----A---- C:\Windows\system32\EncDec.dll

2009-09-24 13:59:21 ----A---- C:\Windows\system32\dfsr.exe

2009-09-24 13:59:20 ----A---- C:\Windows\system32\RacEngn.dll

2009-09-24 13:59:20 ----A---- C:\Windows\system32\kernel32.dll

2009-09-24 13:59:20 ----A---- C:\Windows\system32\fdBth.dll

2009-09-24 13:59:19 ----A---- C:\Windows\system32\spoolss.dll

2009-09-24 13:59:19 ----A---- C:\Windows\system32\SearchProtocolHost.exe

2009-09-24 13:59:19 ----A---- C:\Windows\system32\SearchFilterHost.exe

2009-09-24 13:59:19 ----A---- C:\Windows\system32\schedsvc.dll

2009-09-24 13:59:19 ----A---- C:\Windows\system32\NaturalLanguage6.dll

2009-09-24 13:59:19 ----A---- C:\Windows\system32\milcore.dll

2009-09-24 13:59:19 ----A---- C:\Windows\system32\EhStorAPI.dll

2009-09-24 13:59:19 ----A---- C:\Windows\system32\CertEnroll.dll

2009-09-24 13:59:18 ----A---- C:\Windows\system32\msvcp60.dll

2009-09-24 13:59:18 ----A---- C:\Windows\system32\msjtes40.dll

2009-09-24 13:59:18 ----A---- C:\Windows\system32\infocardapi.dll

2009-09-24 13:59:18 ----A---- C:\Windows\system32\gpedit.dll

2009-09-24 13:59:18 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll

2009-09-24 13:59:17 ----A---- C:\Windows\system32\WinSAT.exe

2009-09-24 13:59:17 ----A---- C:\Windows\system32\es.dll

2009-09-24 13:59:16 ----A---- C:\Windows\system32\PresentationSettings.exe

2009-09-24 13:59:16 ----A---- C:\Windows\system32\mstext40.dll

2009-09-24 13:59:16 ----A---- C:\Windows\system32\Magnify.exe

2009-09-24 13:59:16 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll

2009-09-24 13:59:16 ----A---- C:\Windows\system32\advapi32.dll

2009-09-24 13:59:15 ----A---- C:\Windows\system32\WMPhoto.dll

2009-09-24 13:59:15 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll

2009-09-24 13:59:15 ----A---- C:\Windows\system32\WebClnt.dll

2009-09-24 13:59:15 ----A---- C:\Windows\system32\slwmi.dll

2009-09-24 13:59:15 ----A---- C:\Windows\system32\msxbde40.dll

2009-09-24 13:59:15 ----A---- C:\Windows\system32\msexcl40.dll

2009-09-24 13:59:15 ----A---- C:\Windows\system32\comsvcs.dll

2009-09-24 13:59:14 ----A---- C:\Windows\system32\vssapi.dll

2009-09-24 13:59:14 ----A---- C:\Windows\system32\PresentationHost.exe

2009-09-24 13:59:14 ----A---- C:\Windows\system32\NetProjW.dll

2009-09-24 13:59:14 ----A---- C:\Windows\system32\msrepl40.dll

2009-09-24 13:59:14 ----A---- C:\Windows\system32\authui.dll

2009-09-24 13:59:13 ----A---- C:\Windows\system32\propsys.dll

2009-09-24 13:59:13 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2009-09-24 13:59:13 ----A---- C:\Windows\system32\newdev.dll

2009-09-24 13:59:13 ----A---- C:\Windows\system32\iasrecst.dll

2009-09-24 13:59:13 ----A---- C:\Windows\system32\gpsvc.dll

2009-09-24 13:59:13 ----A---- C:\Windows\system32\eudcedit.exe

2009-09-24 13:59:13 ----A---- C:\Windows\system32\crypt32.dll

2009-09-24 13:59:12 ----A---- C:\Windows\system32\setupapi.dll

2009-09-24 13:59:12 ----A---- C:\Windows\system32\rpcss.dll

2009-09-24 13:59:12 ----A---- C:\Windows\system32\mspbde40.dll

2009-09-24 13:59:12 ----A---- C:\Windows\system32\d3d9.dll

2009-09-24 13:59:12 ----A---- C:\Windows\explorer.exe

2009-09-24 13:59:11 ----A---- C:\Windows\system32\wevtapi.dll

2009-09-24 13:59:11 ----A---- C:\Windows\system32\shlwapi.dll

2009-09-24 13:59:11 ----A---- C:\Windows\system32\photowiz.dll

2009-09-24 13:59:11 ----A---- C:\Windows\system32\nlhtml.dll

2009-09-24 13:59:11 ----A---- C:\Windows\system32\msrd3x40.dll

2009-09-24 13:59:11 ----A---- C:\Windows\system32\msltus40.dll

2009-09-24 13:59:11 ----A---- C:\Windows\system32\msdtctm.dll

2009-09-24 13:59:11 ----A---- C:\Windows\system32\mfc42.dll

2009-09-24 13:59:11 ----A---- C:\Windows\system32\EhStorPwdMgr.dll

2009-09-24 13:59:11 ----A---- C:\Windows\system32\EhStorAuthn.dll

2009-09-24 13:59:11 ----A---- C:\Windows\system32\davclnt.dll

2009-09-24 13:59:11 ----A---- C:\Windows\system32\browseui.dll

2009-09-24 13:59:10 ----A---- C:\Windows\system32\user32.dll

2009-09-24 13:59:10 ----A---- C:\Windows\system32\samsrv.dll

2009-09-24 13:59:10 ----A---- C:\Windows\system32\quartz.dll

2009-09-24 13:59:10 ----A---- C:\Windows\system32\ci.dll

2009-09-24 13:59:09 ----A---- C:\Windows\system32\win32spl.dll

2009-09-24 13:59:09 ----A---- C:\Windows\system32\WcnNetsh.dll

2009-09-24 13:59:09 ----A---- C:\Windows\system32\SLCommDlg.dll

2009-09-24 13:59:09 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe

2009-09-24 13:59:09 ----A---- C:\Windows\system32\oleaut32.dll

2009-09-24 13:59:09 ----A---- C:\Windows\system32\netshell.dll

2009-09-24 13:59:09 ----A---- C:\Windows\system32\IKEEXT.DLL

2009-09-24 13:59:08 ----A---- C:\Windows\system32\xmlfilter.dll

2009-09-24 13:59:08 ----A---- C:\Windows\system32\winhttp.dll

2009-09-24 13:59:08 ----A---- C:\Windows\system32\mswstr10.dll

2009-09-24 13:59:08 ----A---- C:\Windows\system32\msctf.dll

2009-09-24 13:59:08 ----A---- C:\Windows\system32\emdmgmt.dll

2009-09-24 13:59:08 ----A---- C:\Windows\system32\compcln.exe

2009-09-24 13:59:08 ----A---- C:\Windows\system32\audiosrv.dll

2009-09-24 13:59:08 ----A---- C:\Windows\system32\apds.dll

2009-09-24 13:59:07 ----A---- C:\Windows\system32\winresume.exe

2009-09-24 13:59:07 ----A---- C:\Windows\system32\VSSVC.exe

2009-09-24 13:59:07 ----A---- C:\Windows\system32\sqlsrv32.dll

2009-09-24 13:59:07 ----A---- C:\Windows\system32\SLUI.exe

2009-09-24 13:59:07 ----A---- C:\Windows\system32\QAGENTRT.DLL

2009-09-24 13:59:07 ----A---- C:\Windows\system32\propdefs.dll

2009-09-24 13:59:07 ----A---- C:\Windows\system32\odbc32.dll

2009-09-24 13:59:07 ----A---- C:\Windows\system32\msvcrt.dll

2009-09-24 13:59:07 ----A---- C:\Windows\system32\msrd2x40.dll

2009-09-24 13:59:07 ----A---- C:\Windows\system32\mfc42u.dll

2009-09-24 13:59:07 ----A---- C:\Windows\system32\iphlpsvc.dll

2009-09-24 13:59:07 ----A---- C:\Windows\system32\gdi32.dll

2009-09-24 13:59:07 ----A---- C:\Windows\system32\eapphost.dll

2009-09-24 13:59:06 ----A---- C:\Windows\system32\wevtutil.exe

2009-09-24 13:59:06 ----A---- C:\Windows\system32\shdocvw.dll

2009-09-24 13:59:06 ----A---- C:\Windows\system32\mssitlb.dll

2009-09-24 13:59:06 ----A---- C:\Windows\system32\dbgeng.dll

2009-09-24 13:59:05 ----A---- C:\Windows\system32\WsmSvc.dll

2009-09-24 13:59:05 ----A---- C:\Windows\system32\vds.exe

2009-09-24 13:59:05 ----A---- C:\Windows\system32\usp10.dll

2009-09-24 13:59:05 ----A---- C:\Windows\system32\swprv.dll

2009-09-24 13:59:05 ----A---- C:\Windows\system32\mmcndmgr.dll

2009-09-24 13:59:04 ----A---- C:\Windows\system32\netlogon.dll

2009-09-24 13:59:04 ----A---- C:\Windows\system32\msscb.dll

2009-09-24 13:59:04 ----A---- C:\Windows\system32\msctfp.dll

2009-09-24 13:59:04 ----A---- C:\Windows\system32\fdBthProxy.dll

2009-09-24 13:59:04 ----A---- C:\Windows\system32\drvinst.exe

2009-09-24 13:59:04 ----A---- C:\Windows\system32\devmgr.dll

2009-09-24 13:59:04 ----A---- C:\Windows\system32\DevicePairingProxy.dll

2009-09-24 13:59:04 ----A---- C:\Windows\system32\BFE.DLL

2009-09-24 13:59:04 ----A---- C:\Windows\system32\adsldpc.dll

2009-09-24 13:59:03 ----A---- C:\Windows\system32\WSDApi.dll

2009-09-24 13:59:03 ----A---- C:\Windows\system32\WMVSDECD.DLL

2009-09-24 13:59:03 ----A---- C:\Windows\system32\Wldap32.dll

2009-09-24 13:59:03 ----A---- C:\Windows\system32\wcnwiz.dll

2009-09-24 13:59:03 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll

2009-09-24 13:59:03 ----A---- C:\Windows\system32\evr.dll

2009-09-24 13:59:02 ----A---- C:\Windows\system32\WindowsCodecs.dll

2009-09-24 13:59:02 ----A---- C:\Windows\system32\wercon.exe

2009-09-24 13:59:02 ----A---- C:\Windows\system32\wcncsvc.dll

2009-09-24 13:59:02 ----A---- C:\Windows\system32\services.exe

2009-09-24 13:59:02 ----A---- C:\Windows\system32\PortableDeviceApi.dll

2009-09-24 13:59:02 ----A---- C:\Windows\system32\msjter40.dll

2009-09-24 13:59:02 ----A---- C:\Windows\system32\msdtcprx.dll

2009-09-24 13:59:02 ----A---- C:\Windows\system32\msdrm.dll

2009-09-24 13:59:02 ----A---- C:\Windows\system32\mimefilt.dll

2009-09-24 13:59:02 ----A---- C:\Windows\system32\ipsmsnap.dll

2009-09-24 13:59:02 ----A---- C:\Windows\system32\comdlg32.dll

2009-09-24 13:59:02 ----A---- C:\Windows\system32\certcli.dll

2009-09-24 13:59:02 ----A---- C:\Windows\system32\adtschema.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\WMNetMgr.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\w32time.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\umpnpmgr.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\taskeng.exe

2009-09-24 13:59:01 ----A---- C:\Windows\system32\rtffilt.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\rsaenh.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\reg.exe

2009-09-24 13:59:01 ----A---- C:\Windows\system32\mswdat10.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\msshooks.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\msscntrs.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\msihnd.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\IPSECSVC.DLL

2009-09-24 13:59:01 ----A---- C:\Windows\system32\dnsapi.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\certutil.exe

2009-09-24 13:59:01 ----A---- C:\Windows\system32\bthserv.dll

2009-09-24 13:59:01 ----A---- C:\Windows\system32\bcrypt.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\wmicmiplugin.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\TsWpfWrp.exe

2009-09-24 13:59:00 ----A---- C:\Windows\system32\termsrv.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\profsvc.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\netapi32.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\mtxclu.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\msstrc.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\mscories.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\MMDevAPI.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\inetpp.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\inetcomm.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\hidserv.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\fundisc.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\dhcpcsvc6.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\dfshim.dll

2009-09-24 13:59:00 ----A---- C:\Windows\system32\cryptsvc.dll

2009-09-24 13:58:59 ----A---- C:\Windows\system32\wdc.dll

2009-09-24 13:58:59 ----A---- C:\Windows\system32\shsvcs.dll

2009-09-24 13:58:59 ----A---- C:\Windows\system32\rasmans.dll

2009-09-24 13:58:59 ----A---- C:\Windows\system32\pnidui.dll

2009-09-24 13:58:59 ----A---- C:\Windows\system32\msiexec.exe

2009-09-24 13:58:59 ----A---- C:\Windows\system32\imapi.dll

2009-09-24 13:58:59 ----A---- C:\Windows\system32\icardres.dll

2009-09-24 13:58:59 ----A---- C:\Windows\system32\iassdo.dll

2009-09-24 13:58:59 ----A---- C:\Windows\system32\chsbrkr.dll

2009-09-24 13:58:58 ----A---- C:\Windows\system32\wersvc.dll

2009-09-24 13:58:58 ----A---- C:\Windows\system32\spoolsv.exe

2009-09-24 13:58:58 ----A---- C:\Windows\system32\slmgr.vbs

2009-09-24 13:58:58 ----A---- C:\Windows\system32\scrrun.dll

2009-09-24 13:58:58 ----A---- C:\Windows\system32\PSHED.DLL

2009-09-24 13:58:58 ----A---- C:\Windows\system32\pidgenx.dll

2009-09-24 13:58:58 ----A---- C:\Windows\system32\pdh.dll

2009-09-24 13:58:58 ----A---- C:\Windows\system32\dhcpcsvc.dll

2009-09-24 13:58:58 ----A---- C:\Windows\system32\CertEnrollUI.dll

2009-09-24 13:58:58 ----A---- C:\Windows\system32\azroles.dll

2009-09-24 13:58:58 ----A---- C:\Windows\system32\autofmt.exe

2009-09-24 13:58:57 ----A---- C:\Windows\system32\wmpmde.dll

2009-09-24 13:58:57 ----A---- C:\Windows\system32\winlogon.exe

2009-09-24 13:58:57 ----A---- C:\Windows\system32\SyncCenter.dll

2009-09-24 13:58:57 ----A---- C:\Windows\system32\SLUINotify.dll

2009-09-24 13:58:57 ----A---- C:\Windows\system32\msjetoledb40.dll

2009-09-24 13:58:57 ----A---- C:\Windows\system32\comuid.dll

2009-09-24 13:58:57 ----A---- C:\Windows\system32\certmgr.dll

2009-09-24 13:58:56 ----A---- C:\Windows\system32\wisptis.exe

2009-09-24 13:58:56 ----A---- C:\Windows\system32\WindowsCodecsExt.dll

2009-09-24 13:58:56 ----A---- C:\Windows\system32\untfs.dll

2009-09-24 13:58:56 ----A---- C:\Windows\system32\taskcomp.dll

2009-09-24 13:58:56 ----A---- C:\Windows\system32\spp.dll

2009-09-24 13:58:56 ----A---- C:\Windows\system32\sethc.exe

2009-09-24 13:58:56 ----A---- C:\Windows\system32\scrobj.dll

2009-09-24 13:58:56 ----A---- C:\Windows\system32\rtutils.dll

2009-09-24 13:58:56 ----A---- C:\Windows\system32\ncrypt.dll

2009-09-24 13:58:56 ----A---- C:\Windows\system32\kd1394.dll

2009-09-24 13:58:56 ----A---- C:\Windows\system32\iassam.dll

2009-09-24 13:58:56 ----A---- C:\Windows\system32\dwm.exe

2009-09-24 13:58:56 ----A---- C:\Windows\system32\autochk.exe

2009-09-24 13:58:55 ----A---- C:\Windows\system32\winsrv.dll

2009-09-24 13:58:55 ----A---- C:\Windows\system32\printui.dll

2009-09-24 13:58:55 ----A---- C:\Windows\system32\iasnap.dll

2009-09-24 13:58:55 ----A---- C:\Windows\system32\autoconv.exe

2009-09-24 13:58:54 ----A---- C:\Windows\system32\wow32.dll

2009-09-24 13:58:54 ----A---- C:\Windows\system32\userenv.dll

2009-09-24 13:58:54 ----A---- C:\Windows\system32\osk.exe

2009-09-24 13:58:54 ----A---- C:\Windows\system32\onex.dll

2009-09-24 13:58:54 ----A---- C:\Windows\system32\mswsock.dll

2009-09-24 13:58:54 ----A---- C:\Windows\system32\kdcom.dll

2009-09-24 13:58:54 ----A---- C:\Windows\system32\cscript.exe

2009-09-24 13:58:54 ----A---- C:\Windows\system32\basecsp.dll

2009-09-24 13:58:54 ----A---- C:\Windows\system32\audiodg.exe

2009-09-24 13:58:53 ----A---- C:\Windows\system32\WinSCard.dll

2009-09-24 13:58:53 ----A---- C:\Windows\system32\winmm.dll

2009-09-24 13:58:53 ----A---- C:\Windows\system32\WerFaultSecure.exe

2009-09-24 13:58:53 ----A---- C:\Windows\system32\spcmsg.dll

2009-09-24 13:58:53 ----A---- C:\Windows\system32\RelMon.dll

2009-09-24 13:58:53 ----A---- C:\Windows\system32\rdpencom.dll

2009-09-24 13:58:53 ----A---- C:\Windows\system32\msftedit.dll

2009-09-24 13:58:53 ----A---- C:\Windows\system32\kdusb.dll

2009-09-24 13:58:52 ----A---- C:\Windows\system32\wsepno.dll

2009-09-24 13:58:52 ----A---- C:\Windows\system32\WerFault.exe

2009-09-24 13:58:52 ----A---- C:\Windows\system32\Utilman.exe

2009-09-24 13:58:52 ----A---- C:\Windows\system32\stobject.dll

2009-09-24 13:58:52 ----A---- C:\Windows\system32\SndVol.exe

2009-09-24 13:58:52 ----A---- C:\Windows\system32\secproc_ssp_isv.dll

2009-09-24 13:58:52 ----A---- C:\Windows\system32\secproc_ssp.dll

2009-09-24 13:58:52 ----A---- C:\Windows\system32\offfilt.dll

2009-09-24 13:58:52 ----A---- C:\Windows\system32\mfplat.dll

2009-09-24 13:58:52 ----A---- C:\Windows\system32\mcmde.dll

2009-09-24 13:58:52 ----A---- C:\Windows\system32\dnsrslvr.dll

2009-09-24 13:58:52 ----A---- C:\Windows\system32\diskraid.exe

2009-09-24 13:58:52 ----A---- C:\Windows\system32\apphelp.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\wscript.exe

2009-09-24 13:58:51 ----A---- C:\Windows\system32\wscntfy.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\wlangpui.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\wiaservc.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\ulib.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\sysclass.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\rastapi.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\prnntfy.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\pnpsetup.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\odbccp32.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\msnetobj.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\mscms.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\ipsecsnp.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\IPHLPAPI.DLL

2009-09-24 13:58:51 ----A---- C:\Windows\system32\iasdatastore.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\gpapi.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\fdProxy.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\dsound.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\diskpart.exe

2009-09-24 13:58:51 ----A---- C:\Windows\system32\cryptui.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\brcpl.dll

2009-09-24 13:58:51 ----A---- C:\Windows\system32\adsmsext.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\zipfldr.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\wusa.exe

2009-09-24 13:58:50 ----A---- C:\Windows\system32\wshext.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\wscsvc.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\wpccpl.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\WMVENCOD.DLL

2009-09-24 13:58:50 ----A---- C:\Windows\system32\vdsdyn.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\regsvc.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\rastls.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\rasapi32.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\ntprint.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\netcenter.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\mscorier.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\logman.exe

2009-09-24 13:58:50 ----A---- C:\Windows\system32\iasrad.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\iashlpr.dll

2009-09-24 13:58:50 ----A---- C:\Windows\system32\findstr.exe

2009-09-24 13:58:49 ----A---- C:\Windows\system32\wsnmp32.dll

2009-09-24 13:58:49 ----A---- C:\Windows\system32\wer.dll

2009-09-24 13:58:49 ----A---- C:\Windows\system32\uxsms.dll

2009-09-24 13:58:49 ----A---- C:\Windows\system32\themecpl.dll

2009-09-24 13:58:49 ----A---- C:\Windows\system32\srvsvc.dll

2009-09-24 13:58:49 ----A---- C:\Windows\system32\rasdlg.dll

2009-09-24 13:58:49 ----A---- C:\Windows\system32\mssprxy.dll

2009-09-24 13:58:49 ----A---- C:\Windows\system32\iassvcs.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\tsbyuv.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\slcc.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\scansetting.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\powrprof.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\powercpl.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\PerfCenterCPL.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\ntmarta.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\networkmap.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\msutb.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\mstsc.exe

2009-09-24 13:58:48 ----A---- C:\Windows\system32\mstlsapi.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\iasads.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\iasacct.dll

2009-09-24 13:58:48 ----A---- C:\Windows\system32\authz.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\wlanpref.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\usercpl.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\themeui.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\systemcpl.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\sud.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\samlib.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\qdvd.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\pcaui.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\newdev.exe

2009-09-24 13:58:47 ----A---- C:\Windows\system32\mmci.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\dot3svc.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\connect.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\autoplay.dll

2009-09-24 13:58:47 ----A---- C:\Windows\system32\accessibilitycpl.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\wscisvif.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\wpcao.dll

RSIT-LOG.TXT TEIL 3

Code:

2009-09-24 13:58:46 ----A---- C:\Windows\system32\vdsutil.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\tapisrv.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\sdclt.exe

2009-09-24 13:58:46 ----A---- C:\Windows\system32\scksp.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\scesrv.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\rpchttp.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\rekeywiz.exe

2009-09-24 13:58:46 ----A---- C:\Windows\system32\regapi.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\psisdecd.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\oleprn.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\msinfo32.exe

2009-09-24 13:58:46 ----A---- C:\Windows\system32\mpr.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\imm32.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\iaspolcy.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\feclient.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\Faultrep.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\dpapimig.exe

2009-09-24 13:58:46 ----A---- C:\Windows\system32\dot3msm.dll

2009-09-24 13:58:46 ----A---- C:\Windows\system32\DeviceEject.exe

2009-09-24 13:58:46 ----A---- C:\Windows\system32\AudioSes.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\whealogr.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\TSTheme.exe

2009-09-24 13:58:45 ----A---- C:\Windows\system32\tcpmon.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\tcpipcfg.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\spwinsat.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\scecli.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\rasplap.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\rasgcw.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\qedit.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\PnPUnattend.exe

2009-09-24 13:58:45 ----A---- C:\Windows\system32\pnpui.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\perfdisk.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\ncryptui.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\hdwwiz.exe

2009-09-24 13:58:45 ----A---- C:\Windows\system32\FWPUCLNT.DLL

2009-09-24 13:58:45 ----A---- C:\Windows\system32\fdWSD.dll

2009-09-24 13:58:45 ----A---- C:\Windows\system32\cmmon32.exe

2009-09-24 13:58:45 ----A---- C:\Windows\system32\certreq.exe

2009-09-24 13:58:44 ----A---- C:\Windows\system32\wiaaut.dll

2009-09-24 13:58:44 ----A---- C:\Windows\system32\srcore.dll

2009-09-24 13:58:44 ----A---- C:\Windows\system32\SnippingTool.exe

2009-09-24 13:58:44 ----A---- C:\Windows\system32\SCardSvr.dll

2009-09-24 13:58:44 ----A---- C:\Windows\system32\raschap.dll

2009-09-24 13:58:44 ----A---- C:\Windows\system32\MSVidCtl.dll

2009-09-24 13:58:44 ----A---- C:\Windows\system32\fontext.dll

2009-09-24 13:58:44 ----A---- C:\Windows\system32\conime.exe

2009-09-24 13:58:44 ----A---- C:\Windows\system32\cmdial32.dll

2009-09-24 13:58:42 ----A---- C:\Windows\system32\WMVXENCD.DLL

2009-09-24 13:58:42 ----A---- C:\Windows\system32\wlanui.dll

2009-09-24 13:58:42 ----A---- C:\Windows\system32\shwebsvc.dll

2009-09-24 13:58:42 ----A---- C:\Windows\system32\shsetup.dll

2009-09-24 13:58:42 ----A---- C:\Windows\system32\rasppp.dll

2009-09-24 13:58:42 ----A---- C:\Windows\system32\PnPutil.exe

2009-09-24 13:58:42 ----A---- C:\Windows\system32\oobefldr.dll

2009-09-24 13:58:42 ----A---- C:\Windows\system32\modemui.dll

2009-09-24 13:58:42 ----A---- C:\Windows\system32\dsprop.dll

2009-09-24 13:58:42 ----A---- C:\Windows\system32\dimsroam.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\WSDMon.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\wmpeffects.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\wmdrmsdk.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\wlgpclnt.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\smss.exe

2009-09-24 13:58:41 ----A---- C:\Windows\system32\rdpwsx.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\rasmontr.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\netplwiz.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\mscandui.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\dataclen.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\credui.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\chtbrkr.dll

2009-09-24 13:58:41 ----A---- C:\Windows\system32\blackbox.dll

2009-09-24 13:58:40 ----A---- C:\Windows\system32\wscapi.dll

2009-09-24 13:58:40 ----A---- C:\Windows\system32\wpcsvc.dll

2009-09-24 13:58:40 ----A---- C:\Windows\system32\thawbrkr.dll

2009-09-24 13:58:40 ----A---- C:\Windows\system32\softkbd.dll

2009-09-24 13:58:40 ----A---- C:\Windows\system32\sendmail.dll

2009-09-24 13:58:40 ----A---- C:\Windows\system32\networkexplorer.dll

2009-09-24 13:58:40 ----A---- C:\Windows\system32\msscp.dll

2009-09-24 13:58:40 ----A---- C:\Windows\system32\msimtf.dll

2009-09-24 13:58:40 ----A---- C:\Windows\system32\logagent.exe

2009-09-24 13:58:40 ----A---- C:\Windows\system32\InkEd.dll

2009-09-24 13:58:40 ----A---- C:\Windows\system32\ifmon.dll

2009-09-24 13:58:40 ----A---- C:\Windows\system32\gpresult.exe

2009-09-24 13:58:40 ----A---- C:\Windows\system32\cipher.exe

2009-09-24 13:58:40 ----A---- C:\Windows\system32\certprop.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\wshbth.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\version.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\SLLUA.exe

2009-09-24 13:58:39 ----A---- C:\Windows\system32\puiapi.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\olepro32.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\msisip.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\msctfui.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\mprapi.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\MediaMetadataHandler.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\input.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\fc.exe

2009-09-24 13:58:39 ----A---- C:\Windows\system32\ExplorerFrame.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\drmmgrtn.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\dmsynth.dll

2009-09-24 13:58:39 ----A---- C:\Windows\system32\cdd.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\wsdchngr.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\Storprop.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\SMBHelperClass.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\rasdial.exe

2009-09-24 13:58:38 ----A---- C:\Windows\system32\rasdiag.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\PortableDeviceTypes.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\msjint40.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\MsCtfMonitor.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\l2nacp.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\ipconfig.exe

2009-09-24 13:58:38 ----A---- C:\Windows\system32\ftp.exe

2009-09-24 13:58:38 ----A---- C:\Windows\system32\fdWCN.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\fdSSDP.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\eappcfg.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\eapp3hst.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\dot3cfg.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\dmusic.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\cscdll.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\cscapi.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\CHxReadingStringIME.dll

2009-09-24 13:58:38 ----A---- C:\Windows\system32\bthudtask.exe

2009-09-24 13:58:38 ----A---- C:\Windows\system32\bthci.dll

2009-09-24 13:58:37 ----A---- C:\Windows\system32\tscupgrd.exe

2009-09-24 13:58:37 ----A---- C:\Windows\system32\slcinst.dll

2009-09-24 13:58:37 ----A---- C:\Windows\system32\PNPXAssoc.dll

2009-09-24 13:58:37 ----A---- C:\Windows\system32\ocsetup.exe

2009-09-24 13:58:37 ----A---- C:\Windows\system32\nslookup.exe

2009-09-24 13:58:37 ----A---- C:\Windows\system32\networkitemfactory.dll

2009-09-24 13:58:37 ----A---- C:\Windows\system32\mmcico.dll

2009-09-24 13:58:37 ----A---- C:\Windows\system32\hbaapi.dll

2009-09-24 13:58:37 ----A---- C:\Windows\system32\gpupdate.exe

2009-09-24 13:58:37 ----A---- C:\Windows\system32\FwRemoteSvr.dll

2009-09-24 13:58:37 ----A---- C:\Windows\system32\fdeploy.dll

2009-09-24 13:58:37 ----A---- C:\Windows\system32\eappgnui.dll

2009-09-24 13:58:36 ----A---- C:\Windows\system32\winrnr.dll

2009-09-24 13:58:36 ----A---- C:\Windows\system32\vdmdbg.dll

2009-09-24 13:58:36 ----A---- C:\Windows\system32\slwga.dll

2009-09-24 13:58:36 ----A---- C:\Windows\system32\odbcconf.dll

2009-09-24 13:58:36 ----A---- C:\Windows\system32\NcdProp.dll

2009-09-24 13:58:36 ----A---- C:\Windows\system32\midimap.dll

2009-09-24 13:58:36 ----A---- C:\Windows\system32\iscsilog.dll

2009-09-24 13:58:36 ----A---- C:\Windows\system32\inetppui.dll

2009-09-24 13:58:36 ----A---- C:\Windows\system32\csrstub.exe

2009-09-24 13:58:36 ----A---- C:\Windows\system32\cbsra.exe

2009-09-24 13:58:36 ----A---- C:\Windows\system32\bitsigd.dll

2009-09-24 13:58:34 ----A---- C:\Windows\system32\msimsg.dll

2009-09-24 13:58:34 ----A---- C:\Windows\system32\f3ahvoas.dll

2009-09-24 13:58:17 ----A---- C:\Windows\system32\SmiEngine.dll

2009-09-24 13:58:13 ----A---- C:\Windows\system32\wdscore.dll

2009-09-24 13:58:13 ----A---- C:\Windows\system32\PkgMgr.exe

2009-09-24 13:57:52 ----A---- C:\Windows\system32\drvstore.dll

2009-09-21 16:36:16 ----A---- C:\Program Files\iTunesPhotoProcessor.exe

2009-09-21 16:36:16 ----A---- C:\Program Files\iTunesOutlookAddIn.dll

2009-09-21 16:36:12 ----A---- C:\Program Files\iTunesMiniPlayer.dll

2009-09-21 16:36:12 ----A---- C:\Program Files\iTunesHelper.exe

2009-09-21 16:36:12 ----A---- C:\Program Files\iTunesAdmin.dll

2009-09-21 16:36:08 ----A---- C:\Program Files\iTunes.exe

2009-09-21 16:36:04 ----A---- C:\Program Files\iTunes.dll

2009-09-21 16:36:02 ----A---- C:\Program Files\iPodUpdaterExt.dll

2009-09-21 16:36:02 ----A---- C:\Program Files\CDDBControlApple.dll

2009-09-17 19:52:45 ----D---- C:\Program Files\JoWood

2009-09-15 21:07:44 ----A---- C:\Windows\system32\vspell32.dll

2009-09-15 21:07:44 ----A---- C:\Windows\system32\vcfiwz32.dll

2009-09-15 21:07:44 ----A---- C:\Windows\system32\vcfidl32.dll

2009-09-15 21:07:44 ----A---- C:\Windows\system32\stdvcl40.dll

2009-09-15 21:07:43 ----A---- C:\Windows\system32\stdvcl32.dll

2009-09-15 21:07:43 ----A---- C:\Windows\system32\oc30.dll

2009-09-15 21:07:43 ----A---- C:\Windows\system32\mfcans32.dll

2009-09-15 21:07:26 ----D---- C:\Program Files\Common Files\Borland Shared

2009-09-15 21:07:25 ----A---- C:\Windows\system32\IDUNINST.DLL

2009-09-15 21:07:24 ----D---- C:\Program Files\Borland

2009-09-15 21:07:24 ----A---- C:\Windows\system32\D5uninst.dll

2009-09-15 21:07:03 ----A---- C:\Windows\IsUn0407.exe
 

======List of files/folders modified in the last 1 months======
 

2009-10-14 12:54:51 ----D---- C:\Windows\Temp

2009-10-14 12:54:51 ----D---- C:\Windows\System32

2009-10-14 12:54:51 ----D---- C:\Windows\inf

2009-10-14 12:54:51 ----A---- C:\Windows\system32\PerfStringBackup.INI

2009-10-14 12:51:52 ----D---- C:\Program Files\Mozilla Firefox

2009-10-14 12:50:09 ----D---- C:\Windows

2009-10-14 12:49:59 ----D---- C:\Users\***\AppData\Roaming\Skype

2009-10-14 12:49:58 ----D---- C:\Users\***\AppData\Roaming\skypePM

2009-10-14 12:29:43 ----D---- C:\Windows\system32\catroot

2009-10-14 12:29:41 ----D---- C:\Windows\system32\catroot2

2009-10-14 12:29:39 ----D---- C:\Windows\winsxs

2009-10-14 10:41:56 ----D---- C:\Windows\system32\drivers

2009-10-14 10:41:54 ----RD---- C:\Program Files

2009-10-14 10:41:54 ----HD---- C:\ProgramData

2009-10-14 09:49:00 ----D---- C:\Windows\Prefetch

2009-10-14 09:35:22 ----SHD---- C:\System Volume Information

2009-10-14 09:33:18 ----D---- C:\Program Files\Spiele

2009-10-13 19:41:16 ----D---- C:\Program Files\avmwlanstick

2009-10-13 13:38:19 ----D---- C:\Users\***\AppData\Roaming\teamspeak2

2009-10-13 13:25:22 ----D---- C:\Windows\Microsoft.NET

2009-10-13 13:25:17 ----RSD---- C:\Windows\assembly

2009-10-13 11:51:33 ----D---- C:\Windows\rescache

2009-10-13 11:37:57 ----SHD---- C:\Boot

2009-10-13 11:32:29 ----D---- C:\Program Files\Windows Sidebar

2009-10-13 11:32:29 ----D---- C:\Program Files\Windows Media Player

2009-10-13 11:32:29 ----D---- C:\Program Files\Windows Mail

2009-10-13 11:32:29 ----D---- C:\Program Files\Windows Journal

2009-10-13 11:32:29 ----D---- C:\Program Files\Windows Collaboration

2009-10-13 11:32:29 ----D---- C:\Program Files\Windows Calendar

2009-10-13 11:32:29 ----D---- C:\Program Files\Movie Maker

2009-10-13 11:32:29 ----D---- C:\Program Files\Internet Explorer

2009-10-13 11:32:28 ----D---- C:\Program Files\Windows Photo Gallery

2009-10-13 11:32:28 ----D---- C:\Program Files\Common Files\System

2009-10-13 11:32:25 ----D---- C:\Windows\servicing

2009-10-13 11:32:25 ----D---- C:\Windows\ehome

2009-10-13 11:32:25 ----D---- C:\Program Files\Windows Defender

2009-10-13 11:32:23 ----D---- C:\Windows\IME

2009-10-13 11:32:22 ----D---- C:\Windows\system32\XPSViewer

2009-10-13 11:32:22 ----D---- C:\Windows\system32\sk-SK

2009-10-13 11:32:22 ----D---- C:\Windows\system32\lv-LV

2009-10-13 11:32:22 ----D---- C:\Windows\system32\ko-KR

2009-10-13 11:32:22 ----D---- C:\Windows\system32\hr-HR

2009-10-13 11:32:22 ----D---- C:\Windows\system32\et-EE

2009-10-13 11:32:22 ----D---- C:\Windows\system32\en-US

2009-10-13 11:32:22 ----D---- C:\Windows\system32\de-DE

2009-10-13 11:32:22 ----D---- C:\Windows\system32\da-DK

2009-10-13 11:32:21 ----D---- C:\Windows\system32\oobe

2009-10-13 11:32:21 ----D---- C:\Windows\system32\migration

2009-10-13 11:32:21 ----D---- C:\Windows\system32\it-IT

2009-10-13 11:32:21 ----D---- C:\Windows\system32\el-GR

2009-10-13 11:32:20 ----D---- C:\Windows\system32\zh-TW

2009-10-13 11:32:20 ----D---- C:\Windows\system32\zh-CN

2009-10-13 11:32:20 ----D---- C:\Windows\system32\uk-UA

2009-10-13 11:32:20 ----D---- C:\Windows\system32\th-TH

2009-10-13 11:32:20 ----D---- C:\Windows\system32\sv-SE

2009-10-13 11:32:20 ----D---- C:\Windows\system32\sr-Latn-CS

2009-10-13 11:32:20 ----D---- C:\Windows\system32\SLUI

2009-10-13 11:32:20 ----D---- C:\Windows\system32\sl-SI

2009-10-13 11:32:20 ----D---- C:\Windows\system32\setup

2009-10-13 11:32:20 ----D---- C:\Windows\system32\ru-RU

2009-10-13 11:32:20 ----D---- C:\Windows\system32\ro-RO

2009-10-13 11:32:20 ----D---- C:\Windows\system32\pt-PT

2009-10-13 11:32:20 ----D---- C:\Windows\system32\pl-PL

2009-10-13 11:32:20 ----D---- C:\Windows\system32\manifeststore

2009-10-13 11:32:20 ----D---- C:\Windows\system32\ja-JP

2009-10-13 11:32:20 ----D---- C:\Windows\system32\hu-HU

2009-10-13 11:32:20 ----D---- C:\Windows\system32\he-IL

2009-10-13 11:32:20 ----D---- C:\Windows\system32\fr-FR

2009-10-13 11:32:20 ----D---- C:\Windows\system32\fi-FI

2009-10-13 11:32:20 ----D---- C:\Windows\system32\es-ES

2009-10-13 11:32:20 ----D---- C:\Windows\system32\cs-CZ

2009-10-13 11:32:20 ----D---- C:\Windows\system32\bg-BG

2009-10-13 11:32:20 ----D---- C:\Windows\system32\AdvancedInstallers

2009-10-13 11:32:19 ----D---- C:\Windows\system32\wbem

2009-10-13 11:32:19 ----D---- C:\Windows\system32\tr-TR

2009-10-13 11:32:19 ----D---- C:\Windows\system32\pt-BR

2009-10-13 11:32:19 ----D---- C:\Windows\system32\nl-NL

2009-10-13 11:32:19 ----D---- C:\Windows\system32\nb-NO

2009-10-13 11:32:19 ----D---- C:\Windows\system32\migwiz

2009-10-13 11:32:19 ----D---- C:\Windows\system32\lt-LT

2009-10-13 11:32:19 ----D---- C:\Windows\system32\ar-SA

2009-10-13 11:32:06 ----RSD---- C:\Windows\Fonts

2009-10-13 11:32:06 ----D---- C:\Windows\AppPatch

2009-10-13 11:32:02 ----D---- C:\Windows\system32\Boot

2009-10-13 11:30:49 ----D---- C:\Windows\system32\RTCOM

2009-10-13 10:55:24 ----A---- C:\Windows\NeroDigital.ini

2009-10-12 19:13:15 ----D---- C:\Program Files\Garena

2009-09-28 16:33:44 ----SHD---- C:\Windows\Installer

2009-09-28 16:33:43 ----D---- C:\Program Files\National Instruments

2009-09-28 16:33:18 ----D---- C:\Program Files\Common Files

2009-09-26 13:08:57 ----D---- C:\Users\***\AppData\Roaming\Apple Computer

2009-09-26 12:58:24 ----DC---- C:\Windows\system32\DRVSTORE

2009-09-26 12:57:29 ----D---- C:\Program Files\Common Files\Apple

2009-09-26 12:55:37 ----D---- C:\Program Files\QuickTime

2009-09-18 18:43:34 ----D---- C:\ProgramData\Microsoft Help

2009-09-18 18:42:32 ----D---- C:\Program Files\Common Files\microsoft shared
 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R1 BHDrvx86;Symantec Heuristics Driver; C:\Windows\System32\Drivers\NIS\1007020.00B\BHDrvx86.sys [2009-08-22 259632]

R1 ccHP;Symantec Hash Provider; C:\Windows\System32\Drivers\NIS\1007020.00B\ccHPx86.sys [2009-09-11 482432]

R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2009-08-26 371248]

R1 IDSVix86;IDSVix86; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\ipsdefs\20090916.003\IDSvix86.sys [2009-09-10 342576]

R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\Windows\system32\drivers\NIS\1007020.00B\SRTSPX.SYS [2009-08-22 43696]

R1 SymIM;Symantec Network Security Intermediate Filter Driver; C:\Windows\system32\DRIVERS\SymIMv.sys [2009-08-22 25648]

R1 SYMTDI;Symantec Network Dispatch Driver; C:\Windows\System32\Drivers\NIS\1007020.00B\SYMTDI.SYS [2009-08-22 217136]

R2 cvintdrv;cvintdrv; C:\Windows\system32\drivers\cvintdrv.sys [2007-02-21 4096]

R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2009-08-26 102448]

R3 FWLANUSB;AVM FRITZ!WLAN; C:\Windows\system32\DRIVERS\fwlanusb.sys [2007-01-26 265088]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-07 2134424]

R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20091013.036\NAVENG.SYS [2009-08-25 84912]

R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20091013.036\NAVEX15.SYS [2009-08-25 1323568]

R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-06-09 7522624]

R3 SRTSP;Symantec Real Time Storage Protection; C:\Windows\System32\Drivers\NIS\1007020.00B\SRTSP.SYS [2009-08-22 308272]

R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2009-09-11 124976]

R3 SYMFW;Symantec Network Filter Driver; C:\Windows\System32\Drivers\NIS\1007020.00B\SYMFW.SYS [2009-08-22 89904]

R3 SYMNDISV;Symantec Network Filter Driver; C:\Windows\System32\Drivers\NIS\1007020.00B\SYMNDISV.SYS [2009-08-22 48688]

R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

S3 a5s6xmzl;a5s6xmzl; C:\Windows\system32\drivers\a5s6xmzl.sys []

S3 avmeject;AVM Eject; C:\Windows\system32\drivers\avmeject.sys [2009-05-07 4352]

S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]

S3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\Windows\system32\DRIVERS\e1e6032.sys [2008-02-06 218752]

S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-07-12 25280]

S3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]

S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]

S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]

S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]

S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]

S3 NPF;NetGroup Packet Filter Driver; C:\Windows\system32\drivers\npf.sys [2007-11-06 34064]

S3 SYMDNS;SYMDNS; C:\Windows\System32\Drivers\NIS\1002000.007\SYMDNS.SYS []

S3 SYMREDRV;SYMREDRV; C:\Windows\System32\Drivers\NIS\1002000.007\SYMREDRV.SYS []

S3 TVicPort;TVICPORT; \??\C:\Windows\SYSTEM32\DRIVERS\TVICPORT.SYS []

S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2009-08-28 40448]

S3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUSB.sys [2009-04-11 31616]

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]

S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]

S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-01-21 11264]
 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R2 Apache2.2;Apache2.2; C:\Program Files\AppServ\Apache2.2\bin\httpd.exe [2008-01-17 24635]

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-06-05 144712]

R2 AVM WLAN Connection Service;AVM WLAN Connection Service; C:\Program Files\avmwlanstick\WlanNetService.exe [2009-05-07 368640]

R2 Bonjour Service;Bonjour-Dienst; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]

R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-05-07 354840]

R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-10-19 222456]

R2 LkCitadelServer;Lookout Citadel Server; C:\Windows\system32\lkcitdl.exe [2007-03-21 695136]

R2 lkClassAds;National Instruments PSP Server Locator; C:\Windows\system32\lkads.exe [2007-07-16 40488]

R2 lkTimeSync;National Instruments Time Synchronization; C:\Windows\system32\lktsrv.exe [2007-07-16 50736]

R2 mysql;mysql; C:\Program Files\AppServ\MySQL\bin\mysqld-nt --defaults-file=C:\PROGRA~1\AppServ\MySQL\my.ini mysql []

R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]

R2 NIDomainService;National Instruments Domain Service; C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe [2007-07-16 213040]

R2 niSvcLoc;NI Service Locator; C:\Windows\system32\nisvcloc.exe [2007-07-19 48704]

R2 Norton Internet Security;Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\16.7.2.11\ccSvcHst.exe [2009-08-22 117640]

R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-06-09 196608]

R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [2006-12-19 81920]

R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-10-03 66872]

R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2009-10-04 202040]

R3 iPod Service;iPod-Dienst; C:\Program Files\iPod\bin\iPodService.exe [2009-09-21 545568]

S3 aspnet_state;ASP.NET-Zustandsdienst; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]

S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Program Files\WinPcap\rpcapd.exe [2007-11-06 92792]
 

-----------------EOF-----------------

RSIT-INFO.TXT

Code:

info.txt logfile of random's system information tool 1.06 2009-10-14 12:55:00
 

======Uninstall list======
 

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER

-->C:\Program Files\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL

-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL

-->C:\Windows\UNNeroMediaHome.exe /UNINSTALL

-->C:\Windows\UNNeroShowTime.exe /UNINSTALL

-->C:\Windows\UNNeroVision.exe /UNINSTALL

-->C:\Windows\UNRecode.exe /UNINSTALL

-->MsiExec.exe /I{403EF592-953B-4794-BCEF-ECAB835C2095}

4Story 1.5-->"C:\Program Files\Gameforge4D\4Story\unins000.exe"

Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE

Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe

Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe

Adobe Reader 9 - Deutsch-->MsiExec.exe /I{AC76BA86-7AD7-1031-7B44-A90000000001}

Adobe Shockwave Player 11-->C:\Windows\system32\adobe\SHOCKW~1\UNWISE.EXE C:\Windows\system32\Adobe\SHOCKW~1\Install.log

Age of Empires III-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{A8CF5C37-8EC5-4C33-BB4A-87F468B77D45} 

Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}

Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}

Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}

AppServ 2.5.10 (remove only)-->C:\Program Files\AppServ\Uninstall-AppServ2.5.10.exe

Assassin's Creed-->C:\Program Files\InstallShield Installation Information\{8CFA9151-6404-409A-AF22-4632D04582FD}\setup.exe -runfromtemp -l0x0007 -removeonly

AviSynth 2.5-->"C:\Program Files\AviSynth 2.5\Uninstall.exe"

AVM FRITZ!WLAN-->C:\Program Files\avmwlanstick\instwcli.exe -d1

Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}

Borland Delphi 5-->C:\Windows\IsUn0407.exe -f"C:\Program Files\Borland\Delphi5\Uninst.isu" -cC:\Windows\system32\D5UNINST.DLL

Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0407

CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"

Collab-->C:\Program Files\Image-Line\Collab\uninstall.exe

Command & Conquer Generals-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{06F80017-8F98-4C94-B868-52358569FC32} 

Command and Conquer(TM) Generäle Die Stunde Null -->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1} 

Compatibility Pack für 2007 Office System-->MsiExec.exe /X{90120000-0020-0407-0000-0000000FF1CE}

Crysis(R)-->MsiExec.exe /I{000E79B7-E725-4F01-870A-C12942B7F8E4}

DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC

DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER

DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER

DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN

Fraps-->"C:\Program Files\Spiele\Warcraft III\Pudge Video\uninstall.exe"

Garena-->C:\Program Files\Garena\uninst.exe

GBX Master Light-->MsiExec.exe /X{300EA162-9494-4A02-91B0-3970B99346DF}

Gothic 3-->MsiExec.exe /I{359ADF3A-F727-40F1-9D8A-6699EE355287}

GPGNet-->MsiExec.exe /I{C194D333-B84A-4BB7-B35E-060732D98DC4}

Hamachi 1.0.3.0-->C:\Program Files\Hamachi\uninstall.exe

Heroes of Newerth-->C:\Program Files\Spiele\HoN\uninstall.exe

HijackThis 2.0.2-->"C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" /uninstall

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

ICQ Toolbar-->C:\Program Files\ICQ6Toolbar\ICQUnToolbar.exe

ICQ6.5-->"C:\Program Files\InstallShield Installation Information\{60DE4033-9503-48D1-A483-7846BD217CA9}\setup.exe" -runfromtemp -l0x0009 -removeonly

Install(GE)-->C:\Program Files\InstallShield Installation Information\{F916C6DF-2601-4385-9500-C45FF398D4CB}\setup.exe -runfromtemp -l0x0007 -removeonly

Intel(R) Network Connections 13.0.42.0-->MsiExec.exe /i{2223FC2F-B862-4F83-BC9E-DDF2DADF2859} ARPREMOVE=1

Intel(R) Network Connections 13.0.42.0-->MsiExec.exe /i{2223FC2F-B862-4F83-BC9E-DDF2DADF2859} ARPREMOVE=1

Intel® Matrix Storage Manager-->C:\Windows\system32\imsmudlg.exe -uninstall

iPhone-Konfigurationsprogramm-->MsiExec.exe /I{FA54AFB1-5745-4389-B8C1-9F7509672ED1}

iTunes-->MsiExec.exe /I{DA34FE93-5DC5-48E0-ACC8-A5389E05BB51}

Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216015FF}

Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}

LEGO MINDSTORMS NXT - (Deutsch) Sprachenpaket-->MsiExec.exe /X{6C3D0F12-0C5A-480E-BBD9-424F3144F7DA}

LEGO MINDSTORMS NXT Driver-->MsiExec.exe /I{99B66D96-5BB2-42DF-BF7C-432285A1E5A5}

LEGO MINDSTORMS NXT Migration Package-->MsiExec.exe /X{6C1D47CC-682C-4673-8CA8-DEE659628599}

LEGO MINDSTORMS NXT Software v1.1-->MsiExec.exe /X{CDE4B478-F489-444D-900C-A9812569E6D2}

LetsTrade Komponenten-->C:\Windows\fpuninst.exe -uninstall:"C:\Program Files\LetsTrade\uninst\uninst.ini"

Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"

Microsoft .NET Framework 1.1 Hotfix (KB929729)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M929729\M929729Uninstall.msp"

Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - deu\setup.exe

Microsoft .NET Framework 3.5 Language Pack SP1 - deu-->MsiExec.exe /I{052FDD78-A6EA-3187-8386-C82F4CA3A929}

Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

Microsoft Age of Empires II: The Conquerors Expansion-->"C:\Program Files\Microsoft Games\Age of Empires II\UNINSTALX.EXE" /runtemp /addremove

Microsoft Age of Empires II-->"C:\Program Files\Microsoft Games\Age of Empires II\UNINSTAL.EXE" /runtemp /uninstall

Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

Microsoft Office 2000 Premium-->MsiExec.exe /I{00000407-78E1-11D2-B60F-006097C998E7}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0407-0000-0000000FF1CE} /uninstall {26454C26-D259-4543-AA60-3189E09C5F76}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}

Microsoft Office Excel MUI (German) 2007-->MsiExec.exe /X{90120000-0016-0407-0000-0000000FF1CE}

Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL

Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}

Microsoft Office OneNote MUI (German) 2007-->MsiExec.exe /X{90120000-00A1-0407-0000-0000000FF1CE}

Microsoft Office PowerPoint MUI (German) 2007-->MsiExec.exe /X{90120000-0018-0407-0000-0000000FF1CE}

Microsoft Office PowerPoint Viewer 2007 (German)-->MsiExec.exe /X{95120000-00AF-0407-0000-0000000FF1CE}

Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}

Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}

Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}

Microsoft Office Proof (Italian) 2007-->MsiExec.exe /X{90120000-001F-0410-0000-0000000FF1CE}

Microsoft Office Proofing (German) 2007-->MsiExec.exe /X{90120000-002C-0407-0000-0000000FF1CE}

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0410-0000-0000000FF1CE} /uninstall {322296D4-1EAE-4030-9FBC-D2787EB25FA2}

Microsoft Office Shared MUI (German) 2007-->MsiExec.exe /X{90120000-006E-0407-0000-0000000FF1CE}

Microsoft Office Word MUI (German) 2007-->MsiExec.exe /X{90120000-001B-0407-0000-0000000FF1CE}

Microsoft Silverlight-->MsiExec.exe /I{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}

Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}

Microsoft Works-->MsiExec.exe /I{39D0E034-1042-4905-BECB-5502909FCB7C}

MobileMe Control Panel-->MsiExec.exe /I{3AC54383-31D1-4907-961B-B12CBB1D0AE8}

Mozilla Firefox (3.5.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe

MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}

MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}

MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

National Instruments-Software-->"C:\Program Files\National Instruments\Shared\NIUninstaller\uninst.exe"

Need for Speed™ Most Wanted-->C:\Program Files\Spiele\NFS Most Wanted\EAUninstall.exe

Nero 8 Essentials-->MsiExec.exe /X{47948554-90C6-4AAC-8CFA-D23CE11C1031}

neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}

Norton Internet Security-->C:\Program Files\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS\7190B588\16.7.2.11\InstStub.exe /X

NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI

OpenOffice.org 3.0-->MsiExec.exe /I{7EC19307-7C22-47A8-922B-3FA965291260}

Presto! Mr. Photo 4-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CAF7A270-55D5-455F-B0D1-6C51EADC1C3A}\Setup.exe" -l0x7 -uninst -removeonly

QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}

Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709

Rome - Total War-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2E97F7E8-ABDE-4E0D-B0AD-B6B4BAD89E24}\setup.exe" -l0x7  -removeonly

Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}

Security Update for 2007 Microsoft Office System (KB969679)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C66E4A6C-6E07-4C63-8CCD-2493B5087C73}

Security Update for Microsoft Office Excel 2007 (KB969682)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C03803BD-745A-46F8-8557-817DED578780}

Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}

Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}

Security Update for Microsoft Office Word 2007 (KB969604)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {CF3D6499-709C-43D0-8908-BC5652656050}

Skype™ 4.0-->MsiExec.exe /X{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}

Smart Start UP-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2C9241DC-E141-4BB9-99F2-0BC54D81862F}\setup.exe" -l0x7  -removeonly

SpeechRedist-->MsiExec.exe /X{8795CBED-55E2-4693-9F14-84EC446935BE}

Spelling Dictionaries Support For Adobe Reader 9-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-900000000004}

Supreme Commander - Forged Alliance-->C:\Program Files\InstallShield Installation Information\{31D95937-B237-405D-920C-A3EF4E482395}\setup.exe -runfromtemp -l0x0007 -removeonly

Supreme Commander-->C:\Program Files\InstallShield Installation Information\{25A1E6A4-2DBD-4AC0-8650-8EA9A45B183D}\setup.exe -runfromtemp -l0x0007 -removeonly

TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"

The Movies(TM)-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{0556F885-2415-4666-B53E-33727E46AEA1} 

Thief - Deadly Shadows-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FC123EEA-330A-4685-911C-95B8F5E9DE68}\setup.exe" -l0x7 

Titan Quest Immortal Throne-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B5C5C17E-FEF6-4062-8151-A427AE8AF9D7}\setup.exe" -l0x7  -removeonly

Titan Quest-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}\setup.exe" -l0x7  -removeonly

Tom Clancy's Splinter Cell Chaos Theory-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{888DD888-82BE-4D85-BCB2-2E042CD3E844}\setup.exe" -l0x7  -removeonly

Toxic Biohazard-->C:\Program Files\Image-Line\Toxic Biohazard\uninstall.exe

TQVault 2.11-->"C:\Program Files\TQVault\unins000.exe"

Ulead PhotoImpact 12-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{11AFE21E-B193-430D-B57A-DFF7815BB962}\setup.exe" -l0x7 

Unreal Tournament 2004-->C:\Programme\Spiele\Warcraft III\Maps\Maps\Dota\UT2004\System\Setup.exe uninstall "UT2004"

Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""

Update für Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-0407-0000-0000000FF1CE} /uninstall {BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}

Update für Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-0407-0000-0000000FF1CE} /uninstall {EA160DA3-E9B5-4D03-A518-21D306665B96}

Update für Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-0407-0000-0000000FF1CE} /uninstall {38472199-D7B6-4833-A949-10E4EE6365A1}

VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}

Videora iPod touch Converter 4.04-->C:\Program Files\Red Kawa\Video Converter App\uninstaller.exe

Warcraft III-->C:\Windows\War3Unin.exe C:\Windows\War3Unin.dat

Warkeys 1.13.1.0b-->C:\Program Files\Warkeys\uninst.exe

WE Unlimited 1.20-->"C:\Program Files\WE Unlimited\unins000.exe"

Windows Live Anmelde-Assistent-->MsiExec.exe /I{52B97218-98CB-4B8B-9283-D213C85E1AA4}

Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}

Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe

Windows Live Essentials-->MsiExec.exe /I{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}

Windows Live Fotogalerie-->MsiExec.exe /X{2BA722D1-48D1-406E-9123-8AE5431D63EF}

Windows Live Movie Maker-->MsiExec.exe /X{3EFEF049-23D4-4B46-8903-4592FEA51018}

Windows Live Sync-->MsiExec.exe /X{76618402-179D-4699-A66B-D351C59436BC}

Windows Live-Uploadtool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}

WIN-LOGO 2.0-->RunDll32 ADVPACK.DLL,LaunchINFSection C:\Windows\INF\un_logo.inf,LOGOUninstall

WinPcap 4.0.2-->C:\Program Files\WinPcap\uninstall.exe

WinRAR-->C:\Program Files\WinRAR\uninstall.exe

WISO Mein Geld 2008 Professional-->MsiExec.exe /I{D8D22773-14BF-4178-A683-3DBA515C2A26}

Worms 3D-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8874FD36-7C9D-4573-8956-E368D6753D90}\setup.exe" -l0x7 

YouTube Downloader App 1.01-->C:\Program Files\Red Kawa\Downloader App\uninstaller.exe
 

======Security center information======
 

AS: Windows Defender
 

======System event log======
 

Computer Name: ***-PC

Event Code: 18

Message: Installationsbereit: Die folgenden Updates wurden heruntergeladen und können installiert werden. Diese Updates sollen laut Zeitplan am ?Sonntag, ?16. ?August ?2009 um 03:00 auf diesem Computer installiert werden: 

- Microsoft .NET Framework 3.5 Service Pack 1 (KB951847) x86-Sprachpaket

Record Number: 140870

Source Name: Microsoft-Windows-WindowsUpdateClient

Time Written: 20090815091327.646154-000

Event Type: Informationen

User: NT-AUTORITÄT\SYSTEM
 

Computer Name: ***-PC

Event Code: 7036

Message: Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" befindet sich jetzt im Status "Ausgeführt".

Record Number: 140869

Source Name: Service Control Manager

Time Written: 20090815090613.000000-000

Event Type: Informationen

User: 
 

Computer Name: ***-PC

Event Code: 7036

Message: Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" befindet sich jetzt im Status "Beendet".

Record Number: 140868

Source Name: Service Control Manager

Time Written: 20090815090250.000000-000

Event Type: Informationen

User: 
 

Computer Name: ***-PC

Event Code: 104

Message: Die Protokolldatei "TuneUp" wurde gelöscht.

Record Number: 140867

Source Name: Microsoft-Windows-Eventlog

Time Written: 20090815090109.651354-000

Event Type: Informationen

User: ***-PC\***
 

Computer Name: ***-PC

Event Code: 104

Message: Die Protokolldatei "System" wurde gelöscht.

Record Number: 140866

Source Name: Microsoft-Windows-Eventlog

Time Written: 20090815090109.651354-000

Event Type: Informationen

User: ***-PC\***
 

=====Application event log=====
 

Computer Name: ***-PC

Event Code: 9010

Message: Ein Prozess (1340) hat eine Anforderung zum Deaktivieren des Desktopfenster-Managers gestellt.

Record Number: 40349

Source Name: Desktop Window Manager

Time Written: 20090815093308.000000-000

Event Type: Informationen

User: 
 

Computer Name: ***-PC

Event Code: 3023

Message: Die Aktualisierung kann nicht gestartet werden, da alle Inhaltsquellen durch Websitepfadregeln ausgeschlossen oder aus der Indexkonfiguration entfernt wurden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Unzulässige Funktion.

 (0x00000001)
 

Record Number: 40348

Source Name: Microsoft-Windows-Search

Time Written: 20090815090130.000000-000

Event Type: Warnung

User: 
 

Computer Name: ***-PC

Event Code: 3023

Message: Die Aktualisierung kann nicht gestartet werden, da alle Inhaltsquellen durch Websitepfadregeln ausgeschlossen oder aus der Indexkonfiguration entfernt wurden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Unzulässige Funktion.

 (0x00000001)
 

Record Number: 40347

Source Name: Microsoft-Windows-Search

Time Written: 20090815090130.000000-000

Event Type: Warnung

User: 
 

Computer Name: ***-PC

Event Code: 3023

Message: Die Aktualisierung kann nicht gestartet werden, da alle Inhaltsquellen durch Websitepfadregeln ausgeschlossen oder aus der Indexkonfiguration entfernt wurden.
 

Kontext:  Anwendung, SystemIndex Katalog
 

Details:

        Unzulässige Funktion.

 (0x00000001)
 

Record Number: 40346

Source Name: Microsoft-Windows-Search

Time Written: 20090815090130.000000-000

Event Type: Warnung

User: 
 

Computer Name: ***-PC

Event Code: 1000

Message: Fehlerhafte Anwendung OUTLOOK.EXE, Version 9.0.0.2416, Zeitstempel 0x3678217f, fehlerhaftes Modul ntdll.dll, Version 6.0.6001.18000, Zeitstempel 0x4791a7a6, Ausnahmecode 0xc0000374, Fehleroffset 0x000b015d, Prozess-ID 0x6b0, Anwendungsstartzeit 01ca1d86eed71884.

Record Number: 40345

Source Name: Application Error

Time Written: 20090815090110.000000-000

Event Type: Fehler

User: 
 

=====Security event log=====
 

Computer Name: ***-PC

Event Code: 4907

Message: Die Überwachungseinstellungen für ein Objekt wurden geändert:
 

Antragsteller:

        Sicherheits-ID:                S-1-5-18

        Kontoname:                ***-PC$

        Kontodomäne:                MSHEIMNETZ

        Anmelde-ID:                0x3e7
 

Objekt:

        Objektserver:        Security

        Objekttyp:        File

        Objektname:        C:\Program Files\Windows Media Player\wmplayer.exe

        Handle-ID:        0x14
 

Prozessinformationen:

        Prozess-ID:        0x11fc

        Prozessname:        C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\poqexec.exe
 

Überwachungseinstellungen:

        Originalsicherheitsbeschreibung:        

        Neue Sicherheitsbeschreibung:                S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)

Record Number: 47362

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090815124334.958354-000

Event Type: Überwachung erfolgreich

User: 
 

Computer Name: ***-PC

Event Code: 4907

Message: Die Überwachungseinstellungen für ein Objekt wurden geändert:
 

Antragsteller:

        Sicherheits-ID:                S-1-5-18

        Kontoname:                ***-PC$

        Kontodomäne:                MSHEIMNETZ

        Anmelde-ID:                0x3e7
 

Objekt:

        Objektserver:        Security

        Objekttyp:        File

        Objektname:        C:\Program Files\Windows Media Player\wmpconfig.exe

        Handle-ID:        0x14
 

Prozessinformationen:

        Prozess-ID:        0x11fc

        Prozessname:        C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\poqexec.exe
 

Überwachungseinstellungen:

        Originalsicherheitsbeschreibung:        

        Neue Sicherheitsbeschreibung:                S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)

Record Number: 47361

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090815124334.942754-000

Event Type: Überwachung erfolgreich

User: 
 

Computer Name: ***-PC

Event Code: 4907

Message: Die Überwachungseinstellungen für ein Objekt wurden geändert:
 

Antragsteller:

        Sicherheits-ID:                S-1-5-18

        Kontoname:                ***-PC$

        Kontodomäne:                MSHEIMNETZ

        Anmelde-ID:                0x3e7
 

Objekt:

        Objektserver:        Security

        Objekttyp:        File

        Objektname:        C:\Program Files\Windows Media Player\wmpshare.exe

        Handle-ID:        0x14
 

Prozessinformationen:

        Prozess-ID:        0x11fc

        Prozessname:        C:\Windows\winsxs\x86_microsoft-windows-servicingstack_31bf3856ad364e35_6.0.6002.18005_none_0b4ada54c46c45b0\poqexec.exe
 

Überwachungseinstellungen:

        Originalsicherheitsbeschreibung:        

        Neue Sicherheitsbeschreibung:                S:ARAI(AU;SAFA;DCLCRPCRSDWDWO;;;WD)

Record Number: 47360

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090815124334.942754-000

Event Type: Überwachung erfolgreich

User: 
 

Computer Name: ***-PC

Event Code: 4647

Message: Benutzerinitiierte Abmeldung:
 

Antragsteller:

        Sicherheits-ID:                S-1-5-21-2565763190-2214084833-2015675349-1001

        Kontoname:                ***

        Kontodomäne:                ***-PC

        Anmelde-ID:                0x1fca0
 

Dieses Ereignis wird generiert, wenn eine Abmeldung initiiert wird, aber die Anzahl der Tokenreferenzen nicht Null ist und die Anmeldesitzung nicht zerstört werden kann. Es kann keiner Benutzerinitiierte Aktion erfolgen. Dieses Ereignis kann als Abmeldeereignis interpretiert werden.

Record Number: 47359

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090815124333.507554-000

Event Type: Überwachung erfolgreich

User:

RSIT-INFO.TXT REST

Computer Name: ***-PC
Event Code: 1102
Message: Das Überwachungsprotokoll wurde gelöscht.
Subjekt:
Sicherheits- ID: S-1-5-21-2565763190-2214084833-2015675349-1001
Kontoname: ***
Domänenname: ***-PC
Logon-ID: 0x1fca0
Record Number: 47358
Source Name: Microsoft-Windows-Eventlog
Time Written: 20090815090109.635754-000
Event Type: Überwachung erfolgreich
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\PROGRA~1\Borland\Delphi5\Projects\Bpl;C:\PROGRA~1\Borland\Delphi5\Bin;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Progr am Files\Intel\DMIX;C:\VXIPNP\WinNT\Bin;C:\Program Files\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=1706
"NUMBER_OF_PROCESSORS"=2
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"VXIPNPPATH"=C:\VXIPNP\
"CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip
"KMP_DUPLICATE_LIB_OK"=TRUE
"MKL_SERIAL"=YES

-----------------EOF-----------------