Trojaner-Board - ComboFix hat schädliche Programme gefunden

Hallo,
vielen Dank für die schnelle Hilfe!

Hier schonmal die Logfiles von RSIT:

Nr. 1
[PHP]info.txtRSIT Logfile:

Code:

logfile of random's system information tool 1.08 2010-08-13 12:28:22
 

======Uninstall list======
 

-->C:\Program Files\Nero\Nero8\\nero\uninstall\UNNERO.exe /UNINSTALL

-->C:\Windows\UNNeroBackItUp.exe /UNINSTALL

-->C:\Windows\UNNeroMediaHome.exe /UNINSTALL

-->C:\Windows\UNNeroShowTime.exe /UNINSTALL

-->C:\Windows\UNNeroVision.exe /UNINSTALL

-->C:\Windows\UNRecode.exe /UNINSTALL

Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE

Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe

Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe

Adobe Reader 9.1 - Deutsch-->MsiExec.exe /I{AC76BA86-7AD7-1031-7B44-A91000000001}

Adobe Shockwave Player-->C:\Windows\System32\Macromed\SHOCKW~1\UNWISE.EXE C:\Windows\System32\Macromed\SHOCKW~1\Install.log

ALDI Foto Manager Free Nord-->C:\Program Files\ALDI Foto Service Nord\ALDI_Foto_Manager_Free\instslct.exe

ALDI Foto Service Nord-->C:\Program Files\ALDI Foto Service Nord\ALDI_Foto_Service\instslct.exe

Aldi Nord Fotoservice-->"C:\Program Files\Aldi Nord Fotoservice\unins000.exe"

ALDI Online Druck Service (Nord)-->C:\PROGRA~1\ALDION~1\ALDI_ODS\UNWISE.EXE C:\PROGRA~1\ALDION~1\ALDI_ODS\INSTALL.LOG

Apple Software Update-->MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F}

AVM FRITZ!WLAN-->C:\Program Files\avmwlanstick\instwcli.exe -d1

Bluetooth Stack for Windows by Toshiba-->MsiExec.exe /X{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}

CCleaner-->"C:\Program Files\CCleaner\uninst.exe"

Compatibility Pack für 2007 Office System-->MsiExec.exe /X{90120000-0020-0407-0000-0000000FF1CE}

CyberLink Power2Go-->"C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\Setup.exe" /z-uninstall

CyberLink YouCam-->"C:\Program Files\InstallShield Installation Information\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\Setup.exe" /z-uninstall

Diktattrainer plus 5-6-->C:\Windows\IsUn0407.exe -f"C:\CSoft\Diktattrainer plus\Diktattrainer plus 5-6\Uninst.isu"

DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN

Firebird SQL Server - MAGIX Edition-->C:\Program Files\ALDI Foto Service Nord\Common\Database\instslct.exe /p

Foto-Mosaik-Edda 5.5.0-->"C:\Program Files\Foto-Mosaik-Edda\unins000.exe"

Genesys PC Camera Device-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3FB39BED-37C8-4E60-8E02-315B8C2B07E3}\setup.exe" -l0x7  -removeonly

Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall

Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0E996B068B56FCA2.exe" /uninstall

Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}

GTA San Andreas-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}\setup.exe" -l0x7  -removeonly

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

Intel(R) Matrix Storage Manager-->C:\Windows\System32\Imsmudlg.exe

Java(TM) 6 Update 3-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}

Letstrade-->MsiExec.exe /X{E0091C29-DEE8-4B24-BF65-8C35B5940D77}

MakeDisc-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B145EC69-66F5-11D8-9D75-000129760D75}\Setup.exe"  -uninstall

Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"

Media Manager for WALKMAN 1.2-->MsiExec.exe /X{5A6ED905-D19D-4954-8499-0DAF386460F7}

MediaShow-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D5A9B7C0-8751-11D8-9D75-000129760D75}\Setup.exe"  -uninstall

MEDION Fotos auf CD Nord-->C:\Program Files\ALDI Foto Service Nord\Medion_Fotos_auf_CD_6\instslct.exe

MEDIONbox-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{27FDF949-69CE-435A-8372-339F72336AC5}\setup.exe" -l0x7  -removeonly

Microsoft .NET Framework 1.1 Security Update (KB953297)-->"C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\Windows\Microsoft.NET\Framework\v1.1.4322\Updates\M953297\M953297Uninstall.msp"

Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - deu\setup.exe

Microsoft .NET Framework 3.5 Language Pack SP1 - deu-->MsiExec.exe /I{052FDD78-A6EA-3187-8386-C82F4CA3A929}

Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

Microsoft Office 2000 Premium-->MsiExec.exe /I{00000407-78E1-11D2-B60F-006097C998E7}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0407-0000-0000000FF1CE} /uninstall {26454C26-D259-4543-AA60-3189E09C5F76}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-00A1-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}

Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}

Microsoft Office Excel MUI (German) 2007-->MsiExec.exe /X{90120000-0016-0407-0000-0000000FF1CE}

Microsoft Office Home and Student 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall HOMESTUDENTR /dll OSETUP.DLL

Microsoft Office Home and Student 2007-->MsiExec.exe /X{91120000-002F-0000-0000-0000000FF1CE}

Microsoft Office OneNote MUI (German) 2007-->MsiExec.exe /X{90120000-00A1-0407-0000-0000000FF1CE}

Microsoft Office PowerPoint MUI (German) 2007-->MsiExec.exe /X{90120000-0018-0407-0000-0000000FF1CE}

Microsoft Office PowerPoint Viewer 2007 (German)-->MsiExec.exe /X{95120000-00AF-0407-0000-0000000FF1CE}

Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}

Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}

Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}

Microsoft Office Proof (Italian) 2007-->MsiExec.exe /X{90120000-001F-0410-0000-0000000FF1CE}

Microsoft Office Proofing (German) 2007-->MsiExec.exe /X{90120000-002C-0407-0000-0000000FF1CE}

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0410-0000-0000000FF1CE} /uninstall {322296D4-1EAE-4030-9FBC-D2787EB25FA2}

Microsoft Office Shared MUI (German) 2007-->MsiExec.exe /X{90120000-006E-0407-0000-0000000FF1CE}

Microsoft Office Word MUI (German) 2007-->MsiExec.exe /X{90120000-001B-0407-0000-0000000FF1CE}

Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}

Microsoft Works-->MsiExec.exe /I{39D0E034-1042-4905-BECB-5502909FCB7C}

Mozilla Firefox (3.6)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe

MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

MSXML 4.0 SP2 (KB925672)-->MsiExec.exe /I{A9CF9052-F4A0-475D-A00F-A8388C62DD63}

MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}

MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}

MSXML 4.0 SP2 (KB941833)-->MsiExec.exe /I{C523D256-313D-4866-B36A-F3DE528246EF}

MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

Nero 8 Essentials-->MsiExec.exe /X{5BB977A4-E843-4E31-9859-745F442B1031}

neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}

Notting Hill Gate 3A-->C:\PROGRA~1\NOTTIN~1\UNWISE.EXE /U C:\PROGRA~1\NOTTIN~1\INSTALL.LOG

NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI

OpenOffice.org 3.2-->MsiExec.exe /I{2217B0B4-35CB-48C6-B640-864DF2F30F99}

PhotoNow!-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\Setup.exe"  -uninstall

PowerDirector-->"C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\Setup.exe" /z-uninstall

PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe"  -uninstall

PowerProducer-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\Setup.exe"  -uninstall

QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}

Ralink Wireless LAN-->C:\Program Files\InstallShield Installation Information\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}\setup.exe -runfromtemp -l0x0009 -removeonly

Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista-->C:\Program Files\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe -runfromtemp -l0x0007 -removeonly

Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x7  -removeonly

Realtek USB 2.0 Card Reader-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC24971E-1946-445D-8A82-CE685433FA7D}\setup.exe" -l0x9  -removeonly

Sceneo AbsolutTV-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4C73B683-B15D-4B94-AC7A-520B70C4FFE9}\Setup.exe"  -NoUpdate

Security Update for 2007 Microsoft Office System (KB2277947)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {5857EE21-03D0-482E-9620-5A30B314A2AE}

Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}

Security Update for 2007 Microsoft Office System (KB976321)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7F207DCA-3399-40CB-A968-6E5991B1421A}

Security Update for 2007 Microsoft Office System (KB982312)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {B0EC5722-241F-4CDA-83B4-AA5846B6F9F4}

Security Update for 2007 Microsoft Office System (KB982331)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {E8766951-2B6C-4022-86E8-80D2D1762B76}

Security Update for Microsoft Office Excel 2007 (KB982308)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C3F9A0DC-A5D1-4BB6-870E-2953E5A2487B}

Security Update for Microsoft Office InfoPath 2007 (KB979441)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {8CCB781A-CF6B-4FCB-B6D8-59C64DF5C6DB}

Security Update for Microsoft Office PowerPoint 2007 (KB982158)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {F5B70033-E79C-4569-90BF-BC9B4E4F3F46}

Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}

Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}

Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}

Security Update for Microsoft Office Word 2007 (KB2251419)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {7E9103DA-253F-41FF-9E83-7C83806C77DA}

Skype web features-->MsiExec.exe /I{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}

Skype™ 4.1-->MsiExec.exe /X{D103C4BA-F905-437A-8049-DB24763BBE36}

Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall

TVsweeper 3-->MsiExec.exe /I{588D9F5F-8C62-4421-BAE9-CCAA57D4E4EE}

Ulead PhotoImpact 12-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{11AFE21E-B193-430D-B57A-DFF7815BB962}\setup.exe" -l0x7 

Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""

Update for Microsoft Office OneNote 2007 (KB980729)-->msiexec /package {91120000-002F-0000-0000-0000000FF1CE} /uninstall {329050A9-EF80-40F9-B633-74508F54C1FF}

Update für Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-0407-0000-0000000FF1CE} /uninstall {BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}

Update für Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-0407-0000-0000000FF1CE} /uninstall {EA160DA3-E9B5-4D03-A518-21D306665B96}

Update für Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-0407-0000-0000000FF1CE} /uninstall {38472199-D7B6-4833-A949-10E4EE6365A1}

VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}

VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}

Windows Live Anmelde-Assistent-->MsiExec.exe /I{52B97218-98CB-4B8B-9283-D213C85E1AA4}

Windows Live Call-->MsiExec.exe /I{5FC68772-6D56-41C6-9DF1-24E868198AE6}

Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}

Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe

Windows Live Essentials-->MsiExec.exe /I{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}

Windows Live Fotogalerie-->MsiExec.exe /X{2BA722D1-48D1-406E-9123-8AE5431D63EF}

Windows Live Messenger-->MsiExec.exe /X{41E654A9-26D0-4EAC-854B-0FA824FFFABB}

Windows Live Sync-->MsiExec.exe /X{76618402-179D-4699-A66B-D351C59436BC}

Windows Live-Uploadtool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}

WISO Mein Geld 2008 Professional-->MsiExec.exe /I{D8D22773-14BF-4178-A683-3DBA515C2A26}

X10 Hardware(TM)-->C:\Windows\UNWISE.EXE C:\PROGRA~1\X10HAR~1\Install.log
 

======Security center information======
 

AS: Windows-Defender
 

======System event log======
 

Computer Name: **

Event Code: 7036

Message: Dienst "Windows Update" befindet sich jetzt im Status "Ausgeführt".

Record Number: 228753

Source Name: Service Control Manager

Time Written: 20100813100713.000000-000

Event Type: Informationen

User: 
 

Computer Name: **

Event Code: 10029

Message: DCOM hat den Dienst TrustedInstaller mit den Argumenten "" gestartet, um den Server auszuführen:

{752073A1-23F2-4396-85F0-8FDB879ED0ED}

Record Number: 228754

Source Name: Microsoft-Windows-DistributedCOM

Time Written: 20100813100857.000000-000

Event Type: Informationen

User: 
 

Computer Name: **

Event Code: 7036

Message: Dienst "Windows Modules Installer" befindet sich jetzt im Status "Ausgeführt".

Record Number: 228755

Source Name: Service Control Manager

Time Written: 20100813100857.000000-000

Event Type: Informationen

User: 
 

Computer Name: **

Event Code: 7036

Message: Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" befindet sich jetzt im Status "Beendet".

Record Number: 228756

Source Name: Service Control Manager

Time Written: 20100813102240.000000-000

Event Type: Informationen

User: 
 

Computer Name: **

Event Code: 7036

Message: Dienst "Anwendungsinformationen" befindet sich jetzt im Status "Ausgeführt".

Record Number: 228757

Source Name: Service Control Manager

Time Written: 20100813102326.000000-000

Event Type: Informationen

User: 
 

=====Application event log=====
 

Computer Name: **

Event Code: 4101

Message: Die Windows-Lizenz wurde überprüft.

Record Number: 39698

Source Name: Microsoft-Windows-Winlogon

Time Written: 20100813100448.000000-000

Event Type: Informationen

User: 
 

Computer Name: **

Event Code: 6000

Message: Der Winlogon-Benachrichtigungsabonnent <SessionEnv> war nicht verfügbar, um das Benachrichtigungsereignis zu verarbeiten.

Record Number: 39699

Source Name: Microsoft-Windows-Winlogon

Time Written: 20100813100448.000000-000

Event Type: Informationen

User: 
 

Computer Name: **

Event Code: 1

Message: Der Zertifikatdiensteclient wurde erfolgreich gestartet.

Record Number: 39700

Source Name: Microsoft-Windows-CertificateServicesClient

Time Written: 20100813100448.762620-000

Event Type: Informationen

User: **\***
 

Computer Name: **

Event Code: 0

Message: 

Record Number: 39701

Source Name: NMIndexingService

Time Written: 20100813100610.000000-000

Event Type: Informationen

User: 
 

Computer Name: **

Event Code: 1

Message: Der Windows-Sicherheitscenterdienst wurde gestartet.

Record Number: 39702

Source Name: SecurityCenter

Time Written: 20100813100703.000000-000

Event Type: Informationen

User: 
 

=====Security event log=====
 

Computer Name: **

Event Code: 4648

Message: Anmeldeversuch mit expliziten Anmeldeinformationen.
 

Antragsteller:

        Sicherheits-ID:                S-1-5-18

        Kontoname:                **$

        Kontodomäne:                WORKGROUP

        Anmelde-ID:                0x3e7

        Anmelde-GUID:                {00000000-0000-0000-0000-000000000000}
 

Konto, dessen Anmeldeinformationen verwendet wurden:

        Kontoname:                *

        Kontodomäne:                **

        Anmelde-GUID:                {00000000-0000-0000-0000-000000000000}
 

Zielserver:

        Zielservername:        localhost

        Weitere Informationen:        localhost
 

Prozessinformationen:

        Prozess-ID:                0xa30

        Prozessname:                C:\Windows\System32\consent.exe
 

Netzwerkinformationen:

        Netzwerkadresse:        ::1

        Port:                        0
 

Dieses Ereignis wird bei einem Anmeldeversuch durch einen Prozess generiert, wenn ausdrücklich die Anmeldeinformationen des Kontos angegeben werden.  Dies ist normalerweise der Fall in Batch-Konfigurationen, z. B. bei geplanten Aufgaben oder wenn der Befehl "runas" verwendet wird.

Record Number: 66807

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20100813102331.714220-000

Event Type: Überwachung erfolgreich

User: 
 

Computer Name: **

Event Code: 4624

Message: Ein Konto wurde erfolgreich angemeldet.
 

Antragsteller:

        Sicherheits-ID:                S-1-5-18

        Kontoname:                **$

        Kontodomäne:                WORKGROUP

        Anmelde-ID:                0x3e7
 

Anmeldetyp:                        2
 

Neue Anmeldung:

        Sicherheits-ID:                S-1-5-21-1710076809-763565373-1432611484-1004

        Kontoname:                *

        Kontodomäne:                **

        Anmelde-ID:                0x18fa9d

        Anmelde-GUID:                {00000000-0000-0000-0000-000000000000}
 

Prozessinformationen:

        Prozess-ID:                0xa30

        Prozessname:                C:\Windows\System32\consent.exe
 

Netzwerkinformationen:

        Arbeitsstationsname:        **

        Quellnetzwerkadresse:        ::1

        Quellport:                0
 

Detaillierte Authentifizierungsinformationen:

        Anmeldeprozess:                CredPro

        Authentifizierungspaket:        Negotiate

        Übertragene Dienste:        -

        Paketname (nur NTLM):        -

        Schlüssellänge:                0
 

Dieses Ereignis wird beim Erstellen einer Anmeldesitzung generiert. Es wird auf dem Computer generiert, auf den zugegriffen wurde.
 

Die Antragstellerfelder geben das Konto auf dem lokalen System an, von dem die Anmeldung angefordert wurde. Dies ist meistens ein Dienst wie der Serverdienst oder ein lokaler Prozess wie "Winlogon.exe" oder "Services.exe".
 

Das Anmeldetypfeld gibt den jeweiligen Anmeldetyp an. Die häufigsten Typen sind 2 (interaktiv) und 3 (Netzwerk).
 

Die Felder für die neue Anmeldung geben das Konto an, für das die Anmeldung erstellt wurde, d. h. das angemeldete Konto.
 

Die Netzwerkfelder geben die Quelle einer Remoteanmeldeanforderung an. der Arbeitsstationsname ist nicht immer verfügbar und kann in manchen Fällen leer bleiben.
 

Die Felder für die Authentifizierungsinformationen enthalten detaillierte Informationen zu dieser speziellen Anmeldeanforderung.

         - Die Anmelde-GUID ist ein eindeutiger Bezeichner, der verwendet werden kann, um dieses Ereignis mit einem KDC-Ereignis zu korrelieren.

        - Die übertragenen Dienste geben an, welche Zwischendienste an der Anmeldeanforderung beteiligt waren.

        - Der Paketname gibt das in den NTLM-Protokollen verwendete Unterprotokoll an.

        - Die Schlüssellänge gibt die Länge des generierten Sitzungsschlüssels an. Wenn kein Sitzungsschlüssel angefordert wurde, ist dieser Wert 0.

Record Number: 66808

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20100813102331.714220-000

Event Type: Überwachung erfolgreich

User: 
 

Computer Name: **

Event Code: 4624

Message: Ein Konto wurde erfolgreich angemeldet.
 

Antragsteller:

        Sicherheits-ID:                S-1-5-18

        Kontoname:                **$

        Kontodomäne:                WORKGROUP

        Anmelde-ID:                0x3e7
 

Anmeldetyp:                        2
 

Neue Anmeldung:

        Sicherheits-ID:                S-1-5-21-1710076809-763565373-1432611484-1004

        Kontoname:                *

        Kontodomäne:                **

        Anmelde-ID:                0x18fab5

        Anmelde-GUID:                {00000000-0000-0000-0000-000000000000}
 

Prozessinformationen:

        Prozess-ID:                0xa30

        Prozessname:                C:\Windows\System32\consent.exe
 

Netzwerkinformationen:

        Arbeitsstationsname:        **

        Quellnetzwerkadresse:        ::1

        Quellport:                0
 

Detaillierte Authentifizierungsinformationen:

        Anmeldeprozess:                CredPro

        Authentifizierungspaket:        Negotiate

        Übertragene Dienste:        -

        Paketname (nur NTLM):        -

        Schlüssellänge:                0
 

Dieses Ereignis wird beim Erstellen einer Anmeldesitzung generiert. Es wird auf dem Computer generiert, auf den zugegriffen wurde.
 

Die Antragstellerfelder geben das Konto auf dem lokalen System an, von dem die Anmeldung angefordert wurde. Dies ist meistens ein Dienst wie der Serverdienst oder ein lokaler Prozess wie "Winlogon.exe" oder "Services.exe".
 

Das Anmeldetypfeld gibt den jeweiligen Anmeldetyp an. Die häufigsten Typen sind 2 (interaktiv) und 3 (Netzwerk).
 

Die Felder für die neue Anmeldung geben das Konto an, für das die Anmeldung erstellt wurde, d. h. das angemeldete Konto.
 

Die Netzwerkfelder geben die Quelle einer Remoteanmeldeanforderung an. der Arbeitsstationsname ist nicht immer verfügbar und kann in manchen Fällen leer bleiben.
 

Die Felder für die Authentifizierungsinformationen enthalten detaillierte Informationen zu dieser speziellen Anmeldeanforderung.

         - Die Anmelde-GUID ist ein eindeutiger Bezeichner, der verwendet werden kann, um dieses Ereignis mit einem KDC-Ereignis zu korrelieren.

        - Die übertragenen Dienste geben an, welche Zwischendienste an der Anmeldeanforderung beteiligt waren.

        - Der Paketname gibt das in den NTLM-Protokollen verwendete Unterprotokoll an.

        - Die Schlüssellänge gibt die Länge des generierten Sitzungsschlüssels an. Wenn kein Sitzungsschlüssel angefordert wurde, ist dieser Wert 0.

Record Number: 66809

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20100813102331.729820-000

Event Type: Überwachung erfolgreich

User: 
 

Computer Name: **

Event Code: 4672

Message: Einer neuen Anmeldung wurden besondere Rechte zugewiesen.
 

Antragsteller:

        Sicherheits-ID:                S-1-5-21-1710076809-763565373-1432611484-1004

        Kontoname:                *

        Kontodomäne:       **

        Anmelde-ID:                0x18fa9d
 

Berechtigungen:                SeSecurityPrivilege

                        SeBackupPrivilege

                        SeRestorePrivilege

                        SeTakeOwnershipPrivilege

                        SeDebugPrivilege

                        SeSystemEnvironmentPrivilege

                        SeLoadDriverPrivilege

                        SeImpersonatePrivilege

Record Number: 66810

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20100813102331.729820-000

Event Type: Überwachung erfolgreich

User: 
 

Computer Name: **

Event Code: 4634

Message: Ein Konto wurde abgemeldet.
 

Antragsteller:

        Sicherheits-ID:                S-1-5-21-1710076809-763565373-1432611484-1004

        Kontoname:                *

        Kontodomäne:                **

        Anmelde-ID:                0x18fab5
 

Anmeldetyp:                        2
 

Dieses Ereignis wird generiert, wenn eine Anmeldesitzung zerstört wird. Es kann anhand des Wertes der Anmelde-ID positiv mit einem Anmeldeereignis korreliert werden. Anmelde-IDs sind nur zwischen Neustarts auf demselben Computer eindeutig.

Record Number: 66811

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20100813102331.729820-000

Event Type: Überwachung erfolgreich

User: 
 

======Environment variables======
 

"ComSpec"=%SystemRoot%\system32\cmd.exe

"FP_NO_HOST_CHECK"=NO

"OS"=Windows_NT

"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\Program Files\QuickTime\QTSystem

"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC

"PROCESSOR_ARCHITECTURE"=x86

"TEMP"=%SystemRoot%\TEMP

"TMP"=%SystemRoot%\TEMP

"USERNAME"=SYSTEM

"windir"=%SystemRoot%

"PROCESSOR_LEVEL"=6

"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel

"PROCESSOR_REVISION"=0f0d

"NUMBER_OF_PROCESSORS"=2

"CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip

"QTJAVA"=C:\Program Files\Java\jre1.6.0_03\lib\ext\QTJava.zip
 

-----------------EOF-----------------

--- --- ---

Nr.2
RSIT Logfile:

Code:

Logfile of random's system information tool 1.08 (written by random/random)

Run by * at 2010-08-13 12:24:14

Microsoft® Windows Vista™ Home Premium  

System drive C: has 134 GB (61%) free of 218 GB

Total RAM: 2046 MB (52% free)
 

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 12:28:18, on 13.08.2010

Platform: Windows Vista  (WinNT 6.00.1904)

MSIE: Internet Explorer v7.00 (7.00.6000.17037)

Boot mode: Normal
 

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Windows\System32\rundll32.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\HomeCinema\Power2Go\CLMLSvc.exe

C:\Program Files\HomeCinema\PowerDVD\PDVDServ.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

C:\Windows\System32\rundll32.exe

C:\Program Files\OpenOffice.org 3\program\soffice.exe

C:\Program Files\OpenOffice.org 3\program\soffice.bin

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe

C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Users\***\Documents\RSIT.exe

C:\Program Files\trend micro\*.exe
 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://www.aldi.com/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 

O1 - Hosts: ::1 localhost

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"

O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\HomeCinema\Power2Go\CLMLSvc.exe"

O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\HomeCinema\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\HomeCinema\PowerDVD\Language\Language.exe"

O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files\HomeCinema\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\HomeCinema\YouCam" update "Software\CyberLink\YouCam\1.0"

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [Skytel] Skytel.exe

O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\GoogleEULA\EULALauncher.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKUS\S-1-5-21-1710076809-763565373-1432611484-1003\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe (User '***')

O4 - HKUS\S-1-5-21-1710076809-763565373-1432611484-1003\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User '***')

O4 - HKUS\S-1-5-21-1710076809-763565373-1432611484-1003\..\Run: [BullGuard] "C:\Program Files\BullGuard Software\BullGuard\BullGuard.exe" (User '***')

O4 - HKUS\S-1-5-21-1710076809-763565373-1432611484-1003\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background (User '***')

O4 - HKUS\S-1-5-21-1710076809-763565373-1432611484-1003\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe (User '***')

O4 - HKUS\S-1-5-21-1710076809-763565373-1432611484-1003\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe" (User '***')

O4 - HKUS\S-1-5-21-1710076809-763565373-1432611484-1003\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" (User '***')

O4 - HKUS\S-1-5-21-1710076809-763565373-1432611484-1003\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized (User '***')

O4 - S-1-5-21-1710076809-763565373-1432611484-1003 Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User '***')

O4 - S-1-5-21-1710076809-763565373-1432611484-1003 User Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe (User '***')

O4 - Global Startup: Bluetooth Manager.lnk = ?

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4 (file missing)

O9 - Extra 'Tools' menuitem: eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4 (file missing)

O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) (HKCU)

O9 - Extra 'Tools' menuitem: eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) (HKCU)

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - h**p://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1196839374280

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: AVM WLAN Connection Service - AVM Berlin - C:\Program Files\avmwlanstick\WlanNetService.exe

O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\ALDI Foto Service Nord\Common\Database\bin\fbserver.exe

O23 - Service: GnabService - Empolis GmbH - c:\program files\common files\gnab\service\servicecontroller.exe

O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: Sceneo PVR Service (srvcPVR) - Buhl Data Service GmbH - C:\Program Files\Sceneo\AbsolutTV\Services\PVR\PVRService.exe

O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
 

--

End of file - 11088 bytes
 

======Scheduled tasks folder======
 

C:\Windows\tasks\User_Feed_Synchronization-{3E4A0502-003C-4C08-9AEE-97291B9FB00C}.job

C:\Windows\tasks\User_Feed_Synchronization-{F06281E9-CE7E-4711-993F-51419AAC1EEC}.job
 

======Registry dump======
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]

Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

SSVHelper Class - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll [2007-09-25 501136]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live Anmelde-Hilfsprogramm - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-10 263280]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-11-30 764912]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-10 263280]
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2007-12-03 1006264]

"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2007-07-12 178712]

"NvSvc"=C:\Windows\system32\nvsvc.dll [2007-10-24 86016]

"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2007-10-24 8501792]

"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2007-10-24 81920]

"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-01-05 827392]

"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]

"CLMLServer"=C:\Program Files\HomeCinema\Power2Go\CLMLSvc.exe [2007-10-17 128296]

"RemoteControl"=C:\Program Files\HomeCinema\PowerDVD\PDVDServ.exe [2007-02-09 71216]

"LanguageShortcut"=C:\Program Files\HomeCinema\PowerDVD\Language\Language.exe [2007-01-08 52256]

"UCam_Menu"=C:\Program Files\HomeCinema\YouCam\MUITransfer\MUIStartMenu.exe [2007-09-13 222504]

"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-12-05 4710400]

"Skytel"=C:\Windows\Skytel.exe [2007-11-20 1826816]

"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2010-08-01 30192]

"toolbar_eula_launcher"=C:\Program Files\GoogleEULA\EULALauncher.exe [2007-02-09 16896]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]

"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-02-04 1232896]

"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2006-11-02 125440]

"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-05-24 39408]

"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
 

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"="C:\PROGRA~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll"
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDrives"=0
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDrives"=0
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
 

======List of files/folders created in the last 1 months======
 

2010-08-13 12:24:14 ----D---- C:\rsit

2010-08-13 12:24:14 ----D---- C:\Program Files\trend micro

2010-08-13 01:24:26 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys

2010-08-13 01:24:23 ----A---- C:\Windows\system32\drivers\mbam.sys

2010-08-13 00:55:27 ----D---- C:\Program Files\CCleaner

2010-08-13 00:12:58 ----A---- C:\trojaner info.txt

2010-08-12 23:23:47 ----A---- C:\ComboFix.txt

2010-08-12 23:22:50 ----SHD---- C:\$RECYCLE.BIN

2010-08-12 23:07:11 ----A---- C:\Windows\zip.exe

2010-08-12 23:07:11 ----A---- C:\Windows\SWXCACLS.exe

2010-08-12 23:07:11 ----A---- C:\Windows\SWSC.exe

2010-08-12 23:07:11 ----A---- C:\Windows\SWREG.exe

2010-08-12 23:07:11 ----A---- C:\Windows\sed.exe

2010-08-12 23:07:11 ----A---- C:\Windows\PEV.exe

2010-08-12 23:07:11 ----A---- C:\Windows\NIRCMD.exe

2010-08-12 23:07:11 ----A---- C:\Windows\MBR.exe

2010-08-12 23:07:11 ----A---- C:\Windows\grep.exe

2010-08-12 23:07:04 ----D---- C:\Windows\ERDNT

2010-08-12 23:07:03 ----D---- C:\ComboFix

2010-08-12 23:04:22 ----D---- C:\Qoobox

2010-08-12 21:48:08 ----D---- C:\Users\*\AppData\Roaming\Malwarebytes

2010-08-12 21:47:40 ----D---- C:\ProgramData\Malwarebytes

2010-08-12 21:47:40 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
 

======List of files/folders modified in the last 1 months======
 

2010-08-13 12:24:26 ----D---- C:\Windows\Temp

2010-08-13 12:24:14 ----RD---- C:\Program Files

2010-08-13 12:04:30 ----D---- C:\Windows

2010-08-13 01:24:26 ----D---- C:\Windows\system32\drivers

2010-08-13 01:13:31 ----D---- C:\Windows\Minidump

2010-08-13 01:13:31 ----D---- C:\Windows\Debug

2010-08-12 23:20:08 ----A---- C:\Windows\system.ini

2010-08-12 23:14:17 ----D---- C:\Windows\System32

2010-08-12 23:14:17 ----D---- C:\Windows\AppPatch

2010-08-12 23:14:16 ----D---- C:\Program Files\Common Files

2010-08-12 22:19:45 ----SHD---- C:\System Volume Information

2010-08-12 22:19:41 ----SD---- C:\Users\*\AppData\Roaming\Microsoft

2010-08-12 22:19:39 ----D---- C:\ProgramData\avg8

2010-08-12 22:19:39 ----D---- C:\ProgramData

2010-08-12 22:05:54 ----D---- C:\Windows\Prefetch

2010-08-12 13:25:46 ----SHD---- C:\Windows\Installer

2010-08-12 13:25:41 ----D---- C:\Program Files\Microsoft Works

2010-08-12 13:23:23 ----D---- C:\ProgramData\Microsoft Help

2010-07-31 11:33:37 ----D---- C:\Windows\inf

2010-07-31 11:33:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-07-12 305176]

R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2007-05-24 64000]

R3 AgereSoftModem;Agere Systems-Softmodem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-02 983552]

R3 DCamUSBGene;GenesysLogic USB2.0 PC Camera; C:\Windows\system32\DRIVERS\usbgene.sys [2007-06-26 131584]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-12-05 2027032]

R3 netr28;Ralink 802.11n Wireless Driver for Windows Vista; C:\Windows\system32\DRIVERS\netr28.sys [2007-11-21 327168]

R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-10-24 7629664]

R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-03-05 76288]

R3 RTSTOR;USB Mass Storage Device; C:\Windows\system32\drivers\RTSTOR.SYS [2007-11-09 57856]

R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-01-05 181304]

R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2006-10-10 41600]

R3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2007-04-24 113920]

R3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2006-11-20 36480]

R3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2007-03-01 73728]

R3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]

R3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2007-06-11 41856]

R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]

R3 X10Hid;X10 Hid Device; C:\Windows\System32\Drivers\x10hid.sys [2006-11-17 13976]

S3 BthEnum;Bluetooth-Anforderungsblocktreiber; C:\Windows\system32\DRIVERS\BthEnum.sys [2006-11-02 19456]

S3 BthPan;Bluetooth-Gerät (PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]

S3 BTHPORT;Bluetooth-Porttreiber; C:\Windows\System32\Drivers\BTHport.sys [2006-11-02 220160]

S3 BTHUSB;USB-Treiber für Bluetooth-Funkgerät; C:\Windows\System32\Drivers\BTHUSB.sys [2006-11-02 29184]

S3 catchme;catchme; \??\C:\Users\*\AppData\Local\Temp\catchme.sys []

S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]

S3 FETNDIS;VIA Rhine-Familie--Fast-Ethernet-Adaptertreiberdienst; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]

S3 FWLANUSB;AVM FRITZ!WLAN; C:\Windows\system32\DRIVERS\fwlanusb.sys [2006-07-31 264704]

S3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]

S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\VSTDPV3.SYS [2006-11-02 987648]

S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]

S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]

S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]

S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]

S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]

S3 PhilCap;NXP service; C:\Windows\system32\DRIVERS\PhilCap.sys [2007-07-31 908896]

S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]

S3 RFCOMM;Bluetooth-Gerät (RFCOMM-Protokoll-TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]

S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys [2007-01-22 53376]

S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\VSTCNXT3.SYS [2006-11-02 654336]

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2006-11-02 39936]

S3 XUIF;X10 USB Wireless Transceiver; C:\Windows\System32\Drivers\x10ufx2.sys [2006-11-30 27416]
 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R2 AVM WLAN Connection Service;AVM WLAN Connection Service; C:\Program Files\avmwlanstick\WlanNetService.exe [2006-07-31 370756]

R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]

R2 GnabService;GnabService; c:\program files\common files\gnab\service\servicecontroller.exe [2007-04-19 36864]

R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2007-07-12 354840]

R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]

R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2007-01-09 272024]

R2 srvcPVR;Sceneo PVR Service; C:\Program Files\Sceneo\AbsolutTV\Services\PVR\PVRService.exe [2007-08-16 1681408]

R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-25 125048]

R2 x10nets;X10 Device Network Service; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [2001-11-12 20480]

R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-10-15 382248]

S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\ALDI Foto Service Nord\Common\Database\bin\fbserver.exe [2005-11-17 1527900]

S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2010-08-01 30192]

S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-24 182768]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
 

-----------------EOF-----------------

--- --- ---

Hallo,
entschuldigung, dass es so lange gedauert hat...

Hier erst mal zu deinen Fragen:
- Ich hatte AVG, habe es aber vorübergehend deinstalliert um ComboFix zu installieren. Ich werde AVG aber sobald wie möglich wieder installieren.
- Ich habe ComboFix nur ein mal laufen lassen.

So, ich habe nun auch HJTscanlist.zip öffnen Könen. Hier das Ergebnis:

PHP-Code:

    [CODE] 

                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

                        º                                    º 

                                    hjtscanlist v2.0              

                        º                                    º 

                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

 
Microsoft Windows [Version 6.0.6000]

 

 

C:

 
  15.08.2010 15:01     C:\Windows --------- 40960   

       C:\hiberfil.sys ---------    

       C:\pagefile.sys ---------    

  15.08.2010 15:00     C:\Config.Msi --------- 0   

  15.08.2010 01:56     C:\ProgramData --------- 8192   

  15.08.2010 01:54     C:\System Volume Information --------- 28672   

  15.08.2010 01:50     C:\Program Files --------- 20480   

  13.08.2010 12:28     C:\rsit --------- 0   

  13.08.2010 00:57     C:\$RECYCLE.BIN --------- 0   

  13.08.2010 00:12     C:\trojaner info.txt --------- 10614   

  12.08.2010 23:23     C:\ComboFix --------- 0   

  12.08.2010 23:23     C:\Qoobox --------- 4096   

  12.08.2010 23:23     C:\ComboFix.txt --------- 10614   

  19.08.2009 18:56     C:\InstallHelper.log --------- 533   

  09.08.2009 12:27     C:\found.000 --------- 0   

  20.04.2008 16:54     C:\CSoft --------- 0   

  04.02.2008 17:25     C:\Users --------- 4096   

  04.02.2008 15:02     C:\Programme --------- 0   

  04.02.2008 15:02     C:\Dokumente und Einstellungen --------- 0   

  07.12.2007 10:48     C:\MSDOS.SYS --------- 0   

  07.12.2007 10:48     C:\IO.SYS --------- 0   

  04.12.2007 15:18     C:\MyWorks --------- 0   

  04.12.2007 11:04     C:\MSOCache --------- 0   

  30.11.2007 17:37     C:\Intel --------- 0   

  30.11.2007 17:21     C:\BOOTSECT.BAK --------- 8192   

  30.11.2007 17:20     C:\Boot --------- 4096   

  02.11.2006 15:02     C:\Documents and Settings --------- 0   

  02.11.2006 11:53     C:\bootmgr --------- 438840   

  18.09.2006 23:43     C:\config.sys --------- 10   

  18.09.2006 23:43     C:\autoexec.bat --------- 24   

----------------------------------------

 
 

C:\Windows

 
  15.08.2010 16:10     C:\Windows\WindowsUpdate.log --------- 1326544   

  15.08.2010 15:00     C:\Windows\bootstat.dat --------- 67584   

  15.08.2010 15:00     C:\Windows\PFRO.log --------- 904   

  15.08.2010 02:35     C:\Windows\bthservsdp.dat --------- 12   

  12.08.2010 23:20     C:\Windows\system.ini --------- 215   

  26.04.2010 15:58     C:\Windows\PEV.exe --------- 256512   

  25.10.2009 06:11     C:\Windows\MBR.exe --------- 77312   

  23.08.2009 08:50     C:\Windows\ocsetup_install_NetFx3.etl --------- 53739520   

  23.08.2009 08:50     C:\Windows\ocsetup_cbs_install_NetFx3.perf --------- 196608   

  23.08.2009 08:50     C:\Windows\ocsetup_cbs_install_NetFx3.dpx --------- 65536   

  10.07.2009 13:10     C:\Windows\WLXPGSS.SCR --------- 307568   

  20.04.2009 12:56     C:\Windows\NIRCMD.exe --------- 31232   

  16.12.2008 18:15     C:\Windows\WindowsShell.Manifest --------- 749   

  29.10.2008 08:20     C:\Windows\explorer.exe --------- 2923520   

  28.05.2008 15:02     C:\Windows\ODBC.INI --------- 403   

  28.05.2008 15:02     C:\Windows\vbaddin.ini --------- 35   

  28.05.2008 15:01     C:\Windows\win.ini --------- 240   

  04.02.2008 17:29     C:\Windows\nsreg.dat --------- 0   

  12.12.2007 09:50     C:\Windows\mgxoschk.ini --------- 6768   

  12.12.2007 04:49     C:\Windows\NeroDigital.ini --------- 69   

  11.12.2007 15:34     C:\Windows\DIFxAPI.dll --------- 319456   

  07.12.2007 10:45     C:\Windows\csup.txt --------- 12   

  05.12.2007 05:31     C:\Windows\RtHDVCpl.exe --------- 4710400   

  04.12.2007 16:13     C:\Windows\WISO.INI --------- 381   

  30.11.2007 17:56     C:\Windows\HideWin.exe --------- 315392   

  20.11.2007 12:15     C:\Windows\SkyTel.exe --------- 1826816   

  14.11.2007 09:18     C:\Windows\USetup.iss --------- 553   

  07.11.2007 11:31     C:\Windows\RtlUpd.exe --------- 1191936   

  01.11.2007 12:07     C:\Windows\RTKAUDIOSERVICE.EXE --------- 94208   

  15.10.2007 10:16     C:\Windows\UNNeroMediaHome.exe --------- 972072   

  20.09.2007 09:59     C:\Windows\UNRecode.exe --------- 972072   

  10.08.2007 08:46     C:\Windows\RtDefLvl.ini --------- 1500   

  26.07.2007 11:09     C:\Windows\RtlExUpd.dll --------- 520192   

  21.03.2007 21:02     C:\Windows\UNNeroVision.exe --------- 972336   

  20.03.2007 21:22     C:\Windows\UNNeroBackItUp.exe --------- 972336   

  28.02.2007 16:41     C:\Windows\UNNeroShowTime.exe --------- 972336   

  02.11.2006 14:35     C:\Windows\WMSysPr9.prx --------- 316640   

  02.11.2006 14:34     C:\Windows\twunk_16.exe --------- 49680   

  02.11.2006 14:34     C:\Windows\twunk_32.exe --------- 31232   

  02.11.2006 14:34     C:\Windows\twain_32.dll --------- 50688   

  02.11.2006 14:34     C:\Windows\twain.dll --------- 94784   

  02.11.2006 14:34     C:\Windows\notepad.exe --------- 151040   

  02.11.2006 11:45     C:\Windows\winhlp32.exe --------- 9216   

  02.11.2006 11:45     C:\Windows\regedit.exe --------- 134656   

  02.11.2006 11:45     C:\Windows\hh.exe --------- 14848   

  02.11.2006 11:45     C:\Windows\HelpPane.exe --------- 497152   

  02.11.2006 11:45     C:\Windows\fveupdate.exe --------- 13312   

  02.11.2006 11:44     C:\Windows\bfsvc.exe --------- 50176   

  02.11.2006 09:46     C:\Windows\mib.bin --------- 43131   

  19.09.2006 13:41     C:\Windows\HomePremium.xml --------- 8328   

  18.09.2006 23:43     C:\Windows\_default.pif --------- 707   

  18.09.2006 23:43     C:\Windows\winhelp.exe --------- 256192   

  18.09.2006 23:30     C:\Windows\msdfmap.ini --------- 1405   

  31.07.2006 02:02     C:\Windows\instwcli.inf --------- 5966   

  23.02.2006 01:04     C:\Windows\instwcli.dex --------- 139264   

  15.09.2005 14:35     C:\Windows\UNNeroMediaHome.cfg --------- 50   

  30.08.2005 21:37     C:\Windows\UNNeroVision.cfg --------- 50   

  30.08.2005 21:37     C:\Windows\UNNeroShowTime.cfg --------- 50   

  30.08.2005 21:36     C:\Windows\UNRecode.cfg --------- 50   

  30.08.2005 21:33     C:\Windows\UNNeroBackItUp.cfg --------- 50   

  11.12.2002 21:11     C:\Windows\WMPrfFra.prx --------- 37916   

  11.12.2002 21:11     C:\Windows\WMPrfEsp.prx --------- 35590   

  11.12.2002 21:11     C:\Windows\WMPrfIta.prx --------- 35680   

  11.12.2002 21:11     C:\Windows\WMPrfNLd.prx --------- 32964   

  11.12.2002 21:11     C:\Windows\WMPrfDEU.prx --------- 33820   

  11.12.2002 21:11     C:\Windows\WMPrfDan.prx --------- 31712   

  11.12.2002 21:11     C:\Windows\WMPrfPtg.prx --------- 35916   

  31.08.2000 08:00     C:\Windows\zip.exe --------- 68096   

  31.08.2000 08:00     C:\Windows\sed.exe --------- 98816   

  31.08.2000 08:00     C:\Windows\SWSC.exe --------- 136704   

  31.08.2000 08:00     C:\Windows\grep.exe --------- 80412   

  31.08.2000 08:00     C:\Windows\SWXCACLS.exe --------- 212480   

  31.08.2000 08:00     C:\Windows\SWREG.exe --------- 161792   

  25.06.1999 10:56     C:\Windows\Unwise.exe --------- 127184   

  17.11.1998 12:44     C:\Windows\IsUn0407.exe --------- 328704   

----------------------------------------

 
 

C:\Windows\System

 
 27.09.2007 16:32      C:\Windows\System\ms.ico --------- 34530 

 27.09.2007 16:17      C:\Windows\System\sm.ico --------- 37041 

 27.09.2007 16:12      C:\Windows\System\sd.ico --------- 38660 

 27.09.2007 16:04      C:\Windows\System\cf.ico --------- 37300 

 02.08.2007 23:32      C:\Windows\System\DriveIcon.dll --------- 5631520 

 02.11.2006 14:34      C:\Windows\System\mciwave.drv --------- 28160 

 02.11.2006 14:34      C:\Windows\System\mciseq.drv --------- 25264 

 02.11.2006 14:34      C:\Windows\System\avicap.dll --------- 69584 

 02.11.2006 14:34      C:\Windows\System\avifile.dll --------- 109456 

 02.11.2006 14:34      C:\Windows\System\mciavi.drv --------- 73376 

 02.11.2006 14:34      C:\Windows\System\msvideo.dll --------- 126912 

 02.11.2006 09:10      C:\Windows\System\OLESVR.DLL --------- 24064 

 02.11.2006 09:10      C:\Windows\System\WFWNET.DRV --------- 12704 

 02.11.2006 09:10      C:\Windows\System\COMMDLG.DLL --------- 32816 

 02.11.2006 09:10      C:\Windows\System\TIMER.DRV --------- 4048 

 02.11.2006 09:10      C:\Windows\System\MMSYSTEM.DLL --------- 68992 

 02.11.2006 09:10      C:\Windows\System\mmtask.tsk --------- 1152 

 02.11.2006 09:10      C:\Windows\System\mouse.drv --------- 2032 

 02.11.2006 09:10      C:\Windows\System\vga.drv --------- 2176 

 02.11.2006 09:10      C:\Windows\System\sound.drv --------- 1744 

 02.11.2006 09:10      C:\Windows\System\keyboard.drv --------- 2000 

 02.11.2006 09:10      C:\Windows\System\SHELL.DLL --------- 5120 

 02.11.2006 09:10      C:\Windows\System\system.drv --------- 3360 

 18.09.2006 23:43      C:\Windows\System\ver.dll --------- 9008 

 18.09.2006 23:43      C:\Windows\System\olecli.dll --------- 82944 

 18.09.2006 23:43      C:\Windows\System\lzexpand.dll --------- 9936 

 18.09.2006 23:35      C:\Windows\System\stdole.tlb --------- 5532 

 30.06.2004 17:24      C:\Windows\System\MyMulti.ico --------- 5430 

----------------------------------------

 
 

C:\Windows\System32

 
 15.08.2010 16:12     C:\Windows\system32\hjtscanlist.txt --------- 9194  

 15.08.2010 16:00     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 --------- 3072  

 15.08.2010 16:00     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 --------- 3072  

 15.08.2010 01:55     C:\Windows\system32\javaws.exe --------- 153376  

 15.08.2010 01:55     C:\Windows\system32\javaw.exe --------- 145184  

 15.08.2010 01:55     C:\Windows\system32\java.exe --------- 145184  

 15.08.2010 01:55     C:\Windows\system32\deployJava1.dll --------- 423656  

 14.08.2010 17:34     C:\Windows\system32\perfh009.dat --------- 618470  

 14.08.2010 17:34     C:\Windows\system32\perfc009.dat --------- 107614  

 14.08.2010 17:34     C:\Windows\system32\perfh007.dat --------- 651350  

 14.08.2010 17:34     C:\Windows\system32\perfc007.dat --------- 121114  

 14.08.2010 17:34     C:\Windows\system32\PerfStringBackup.INI --------- 1488910  

 13.08.2010 12:03     C:\Windows\system32\FNTCACHE.DAT --------- 371016  

 13.08.2010 01:24     C:\Windows\system32\drivers --------- 61440  

 01.07.2010 23:08     C:\Windows\system32\catroot2 --------- 8192  

 21.05.2010 14:14     C:\Windows\system32\MpSigStub.exe --------- 221568  

 14.04.2010 21:02     C:\Windows\system32\catroot --------- 4096  

 14.04.2010 11:46     C:\Windows\system32\migration --------- 4096  

 09.03.2010 18:54     C:\Windows\system32\wininet.dll --------- 832512  

 09.03.2010 18:54     C:\Windows\system32\urlmon.dll --------- 1168384  

 09.03.2010 18:54     C:\Windows\system32\pngfilt.dll --------- 44544  

 09.03.2010 18:53     C:\Windows\system32\occache.dll --------- 102912  

 09.03.2010 18:52     C:\Windows\system32\mstime.dll --------- 671232  

 09.03.2010 18:52     C:\Windows\system32\mshtmled.dll --------- 477696  

 09.03.2010 18:52     C:\Windows\system32\mshtml.dll --------- 3599872  

 09.03.2010 18:52     C:\Windows\system32\msfeeds.dll --------- 459264  

 09.03.2010 18:51     C:\Windows\system32\jsproxy.dll --------- 27648  

 09.03.2010 18:50     C:\Windows\system32\inetcpl.cpl --------- 1830912  

 09.03.2010 18:50     C:\Windows\system32\ieui.dll --------- 180736  

 09.03.2010 18:50     C:\Windows\system32\iesetup.dll --------- 56320  

 09.03.2010 18:50     C:\Windows\system32\iertutil.dll --------- 268288  

 09.03.2010 18:50     C:\Windows\system32\iernonce.dll --------- 44544  

 09.03.2010 18:50     C:\Windows\system32\iepeers.dll --------- 192512  

 09.03.2010 18:50     C:\Windows\system32\ieframe.dll --------- 6067200  

 09.03.2010 18:50     C:\Windows\system32\ieencode.dll --------- 78336  

 09.03.2010 18:50     C:\Windows\system32\iedkcs32.dll --------- 385024  

 09.03.2010 18:50     C:\Windows\system32\ieapfltr.dll --------- 380928  

 09.03.2010 18:50     C:\Windows\system32\ieakui.dll --------- 161792  

 09.03.2010 18:50     C:\Windows\system32\ieaksie.dll --------- 230400  

 09.03.2010 18:50     C:\Windows\system32\icardie.dll --------- 63488  

 09.03.2010 18:49     C:\Windows\system32\dxtrans.dll --------- 214528  

 09.03.2010 18:49     C:\Windows\system32\dxtmsft.dll --------- 347136  

 09.03.2010 18:48     C:\Windows\system32\advpack.dll --------- 124928  

 09.03.2010 18:48     C:\Windows\system32\admparse.dll --------- 72704  

 09.03.2010 16:50     C:\Windows\system32\html.iec --------- 389120  

 09.03.2010 16:17     C:\Windows\system32\ieUnatt.exe --------- 26624  

 09.03.2010 16:17     C:\Windows\system32\ie4uinit.exe --------- 70656  

 09.03.2010 14:43     C:\Windows\system32\mshtmler.dll --------- 48128  

 09.03.2010 14:37     C:\Windows\system32\mshtml.tlb --------- 1383424  

 04.03.2010 21:24     C:\Windows\system32\vbscript.dll --------- 434176  

 27.02.2010 01:13     C:\Windows\system32\de-DE --------- 266240  

 21.02.2010 01:54     C:\Windows\system32\nshhttp.dll --------- 24064  

 21.02.2010 01:51     C:\Windows\system32\httpapi.dll --------- 31232  

 18.02.2010 16:54     C:\Windows\system32\ntkrnlpa.exe --------- 3502480  

 18.02.2010 16:54     C:\Windows\system32\ntoskrnl.exe --------- 3468168  

 18.02.2010 16:22     C:\Windows\system32\tcpipcfg.dll --------- 167424  

 18.02.2010 16:19     C:\Windows\system32\iphlpsvc.dll --------- 179712  

 18.02.2010 14:04     C:\Windows\system32\netiougc.exe --------- 22016  

 12.02.2010 12:49     C:\Windows\system32\browserchoice.exe --------- 293376  

 06.02.2010 17:49     C:\Windows\system32\wbem --------- 61440  

 06.02.2010 17:48     C:\Windows\system32\config --------- 8192  

 06.02.2010 17:47     C:\Windows\system32\Tasks --------- 4096  

 06.02.2010 17:47     C:\Windows\system32\spool --------- 4096  

 06.02.2010 17:47     C:\Windows\system32\CodeIntegrity --------- 4096  

 25.01.2010 14:58     C:\Windows\system32\secproc_ssp_isv.dll --------- 154624  

 25.01.2010 14:58     C:\Windows\system32\secproc_ssp.dll --------- 154112  

 25.01.2010 14:58     C:\Windows\system32\secproc_isv.dll --------- 473088  

 25.01.2010 14:58     C:\Windows\system32\secproc.dll --------- 472576  

 25.01.2010 14:56     C:\Windows\system32\msdrm.dll --------- 312320  

 25.01.2010 10:36     C:\Windows\system32\RMActivate_ssp.exe --------- 435712  

 25.01.2010 10:36     C:\Windows\system32\RMActivate.exe --------- 515584  

 25.01.2010 10:36     C:\Windows\system32\RMActivate_ssp_isv.exe --------- 431104  

 25.01.2010 10:35     C:\Windows\system32\RMActivate_isv.exe --------- 523776  

 23.01.2010 10:05     C:\Windows\system32\tzres.dll --------- 2048  

 21.01.2010 18:02     C:\Windows\system32\l3codecp.acm --------- 220672  

 21.01.2010 18:02     C:\Windows\system32\l3codeca.acm --------- 62464  

 13.01.2010 20:23     C:\Windows\system32\cabview.dll --------- 97792  

 28.12.2009 14:36     C:\Windows\system32\tsbyuv.dll --------- 11776  

 28.12.2009 14:35     C:\Windows\system32\quartz.dll --------- 1327616  

 28.12.2009 14:34     C:\Windows\system32\msyuv.dll --------- 22528  

 28.12.2009 14:34     C:\Windows\system32\msvidc32.dll --------- 31232  

 28.12.2009 14:34     C:\Windows\system32\msvfw32.dll --------- 123904  

 28.12.2009 14:34     C:\Windows\system32\msrle32.dll --------- 13312  

 28.12.2009 14:33     C:\Windows\system32\mciavi32.dll --------- 82944  

 28.12.2009 14:32     C:\Windows\system32\iyuv_32.dll --------- 50176  

 28.12.2009 14:30     C:\Windows\system32\avifil32.dll --------- 88576  

 28.12.2009 14:30     C:\Windows\system32\avicap32.dll --------- 65024  

 23.12.2009 14:45     C:\Windows\system32\wintrust.dll --------- 171520  

 23.10.2009 19:54     C:\Windows\system32\timedate.cpl --------- 713728  

 19.10.2009 16:42     C:\Windows\system32\t2embed.dll --------- 156672  

 19.10.2009 16:39     C:\Windows\system32\lpk.dll --------- 24064  

 19.10.2009 16:37     C:\Windows\system32\fontsub.dll --------- 72704  

 19.10.2009 16:37     C:\Windows\system32\dciman32.dll --------- 10240  

 19.10.2009 16:36     C:\Windows\system32\atmlib.dll --------- 34304  

 19.10.2009 13:45     C:\Windows\system32\atmfd.dll --------- 289792  

 07.10.2009 14:47     C:\Windows\system32\rastls.dll --------- 232960  

 07.10.2009 14:47     C:\Windows\system32\raschap.dll --------- 274432  

 10.09.2009 19:40     C:\Windows\system32\wmp.dll --------- 10622464  

 10.09.2009 19:40     C:\Windows\system32\dxmasf.dll --------- 4096  

 10.09.2009 19:40     C:\Windows\system32\msdxm.ocx --------- 4096  

----------------------------------------

 
 

C:\Windows\Prefetch

 
 15.08.2010 16:12     C:\Windows\Prefetch\CONIME.EXE-B273009A.pf --------- 14924  

 15.08.2010 16:12     C:\Windows\Prefetch\CMD.EXE-89305D47.pf --------- 7542  

 15.08.2010 16:12     C:\Windows\Prefetch\CONSENT.EXE-65F6206D.pf --------- 100356  

 15.08.2010 16:11     C:\Windows\Prefetch\MOBSYNC.EXE-D8BC6ED2.pf --------- 32492  

 15.08.2010 16:10     C:\Windows\Prefetch\WMIPRVSE.EXE-43972D0F.pf --------- 31546  

 15.08.2010 16:10     C:\Windows\Prefetch\WMPLAYER.EXE-9DE758AE.pf --------- 71444  

 15.08.2010 16:10     C:\Windows\Prefetch\UNSECAPP.EXE-CD982D99.pf --------- 15390  

 15.08.2010 16:10     C:\Windows\Prefetch\EHREC.EXE-E7BBE9AA.pf --------- 97798  

 15.08.2010 16:10     C:\Windows\Prefetch\EHMSAS.EXE-6BE9D904.pf --------- 14002  

 15.08.2010 16:10     C:\Windows\Prefetch\DLLHOST.EXE-71214090.pf --------- 34716  

 15.08.2010 16:10     C:\Windows\Prefetch\TASKENG.EXE-5BAF290C.pf --------- 50700  

 15.08.2010 16:10     C:\Windows\Prefetch\DWM.EXE-AEABE78B.pf --------- 28056  

 15.08.2010 16:10     C:\Windows\Prefetch\USERINIT.EXE-F39AB672.pf --------- 12474  

 15.08.2010 16:10     C:\Windows\Prefetch\EXPLORER.EXE-7A3328DA.pf --------- 334386  

 15.08.2010 16:10     C:\Windows\Prefetch\DLLHOST.EXE-893DDF55.pf --------- 20082  

 15.08.2010 16:10     C:\Windows\Prefetch\LOGONUI.EXE-1BEE4A84.pf --------- 38192  

 15.08.2010 16:10     C:\Windows\Prefetch\CSRSS.EXE-8C04D631.pf --------- 31142  

 15.08.2010 16:10     C:\Windows\Prefetch\WINLOGON.EXE-8163EECC.pf --------- 29044  

 15.08.2010 16:10     C:\Windows\Prefetch\ATBROKER.EXE-FF58B71D.pf --------- 10638  

 15.08.2010 16:10     C:\Windows\Prefetch\SMSS.EXE-1DCD0EB1.pf --------- 1772  

 15.08.2010 16:10     C:\Windows\Prefetch\AgCx_S2_S-1-5-21-1710076809-763565373-1432611484-1004.snp.db --------- 1653961  

 15.08.2010 16:10     C:\Windows\Prefetch\WERCON.EXE-FE5CD389.pf --------- 105082  

 15.08.2010 16:09     C:\Windows\Prefetch\WERMGR.EXE-2A1BCBC7.pf --------- 21106  

 15.08.2010 16:03     C:\Windows\Prefetch\NOTEPAD.EXE-EB1B961A.pf --------- 16724  

 15.08.2010 16:03     C:\Windows\Prefetch\TASKLIST.EXE-9811F41E.pf --------- 20394  

 15.08.2010 16:03     C:\Windows\Prefetch\VERCLSID.EXE-4D95F5A7.pf --------- 16412  

 15.08.2010 16:02     C:\Windows\Prefetch\JAVAW.EXE-C4EA16F0.pf --------- 139996  

 15.08.2010 16:02     C:\Windows\Prefetch\JAVAWS.EXE-25FD1E0F.pf --------- 21518  

 15.08.2010 16:02     C:\Windows\Prefetch\JAUCHECK.EXE-04AFF24E.pf --------- 33248  

 15.08.2010 16:01     C:\Windows\Prefetch\AgGlFgAppHistory.db --------- 872236  

 15.08.2010 16:01     C:\Windows\Prefetch\AgGlFaultHistory.db --------- 262603  

 15.08.2010 16:01     C:\Windows\Prefetch\AgGlGlobalHistory.db --------- 2869741  

 15.08.2010 16:01     C:\Windows\Prefetch\AgRobust.db --------- 431592  

 15.08.2010 15:59     C:\Windows\Prefetch\FIREFOX.EXE-E60C0AA7.pf --------- 198870  

 15.08.2010 15:57     C:\Windows\Prefetch\WUAUCLT.EXE-830BCC14.pf --------- 32024  

 15.08.2010 15:57     C:\Windows\Prefetch\PRESENTATIONSETTINGS.EXE-6F4C5E34.pf --------- 18108  

 15.08.2010 15:51     C:\Windows\Prefetch\WERFAULT.EXE-B7E27BE5.pf --------- 9472  

 15.08.2010 15:47     C:\Windows\Prefetch\SNDVOL.EXE-783DCB11.pf --------- 25678  

 15.08.2010 15:28     C:\Windows\Prefetch\NMINDEXSTORESVR.EXE-1071025B.pf --------- 54718  

 15.08.2010 15:28     C:\Windows\Prefetch\NMINDEXINGSERVICE.EXE-FBCA8F66.pf --------- 37066  

 15.08.2010 15:10     C:\Windows\Prefetch\LOGON.SCR-7C80CA1C.pf --------- 28698  

 15.08.2010 15:05     C:\Windows\Prefetch\WMIADAP.EXE-369DF1CD.pf --------- 17832  

 15.08.2010 15:04     C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-031B6478.pf --------- 34720  

 15.08.2010 15:03     C:\Windows\Prefetch\EHRECVR.EXE-CABD9D22.pf --------- 41182  

 15.08.2010 15:03     C:\Windows\Prefetch\EHSCHED.EXE-AE9154E3.pf --------- 18760  

 15.08.2010 15:02     C:\Windows\Prefetch\ReadyBoot --------- 4096  

 15.08.2010 15:02     C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf --------- 2998390  

 15.08.2010 02:35     C:\Windows\Prefetch\PfSvPerfStats.bin --------- 508  

 15.08.2010 01:56     C:\Windows\Prefetch\JAUREG.EXE-DF073ACE.pf --------- 22192  

 15.08.2010 01:56     C:\Windows\Prefetch\WMIC.EXE-B77E8CD6.pf --------- 32692  

 15.08.2010 01:56     C:\Windows\Prefetch\JAVAW.EXE-85A7DA03.pf --------- 101876  

 15.08.2010 01:55     C:\Windows\Prefetch\UNPACK200.EXE-3B408797.pf --------- 114082  

 15.08.2010 01:55     C:\Windows\Prefetch\ZIPPER.EXE-7348E61C.pf --------- 211218  

 15.08.2010 01:55     C:\Windows\Prefetch\MSIEXEC.EXE-B5AFA339.pf --------- 430820  

 15.08.2010 01:54     C:\Windows\Prefetch\DLLHOST.EXE-C5C55E89.pf --------- 33698  

 15.08.2010 01:54     C:\Windows\Prefetch\SVCHOST.EXE-8FD92526.pf --------- 18984  

 15.08.2010 01:54     C:\Windows\Prefetch\VSSVC.EXE-04D079CC.pf --------- 72754  

 15.08.2010 01:54     C:\Windows\Prefetch\MSIBB32.TMP-3CF37FD6.pf --------- 10580  

 15.08.2010 01:54     C:\Windows\Prefetch\MSI8F2B.TMP-AE6ABB7B.pf --------- 22992  

 15.08.2010 01:54     C:\Windows\Prefetch\JRE-6U21-WINDOWS-I586-IFTW-RV-6F3A1D2F.pf --------- 78416  

 15.08.2010 01:54     C:\Windows\Prefetch\JUCHECK.EXE-7FB6CA47.pf --------- 38076  

 15.08.2010 01:53     C:\Windows\Prefetch\JAVA.EXE-B2F9DBD0.pf --------- 21410  

 15.08.2010 01:53     C:\Windows\Prefetch\JAVACPL.EXE-EDA3823B.pf --------- 12446  

 15.08.2010 01:53     C:\Windows\Prefetch\RUNDLL32.EXE-EFE2C5B0.pf --------- 19282  

 15.08.2010 01:53     C:\Windows\Prefetch\CONTROL.EXE-9459D5A0.pf --------- 23656  

 15.08.2010 01:52     C:\Windows\Prefetch\ADOBEARM.EXE-ACA00A4A.pf --------- 24128  

 15.08.2010 01:52     C:\Windows\Prefetch\ACRORD32.EXE-C2658FE9.pf --------- 88164  

 15.08.2010 01:49     C:\Windows\Prefetch\ADOBE_UPDATER.EXE-4F7CC76E.pf --------- 56802  

 15.08.2010 01:49     C:\Windows\Prefetch\ADOBEUPDATERINSTALLMGR.EXE-7ED33E6C.pf --------- 16300  

 15.08.2010 01:48     C:\Windows\Prefetch\EULA.EXE-86C19FC4.pf --------- 36296  

 15.08.2010 01:45     C:\Windows\Prefetch\MSFEEDSSYNC.EXE-1F01ED17.pf --------- 47946  

 15.08.2010 01:43     C:\Windows\Prefetch\HELPER.EXE-36267E56.pf --------- 21624  

 15.08.2010 01:43     C:\Windows\Prefetch\GOOGLEUPDATERSERVICE.EXE-600E0B48.pf --------- 18480  

 15.08.2010 01:43     C:\Windows\Prefetch\GOOGLEDESKTOP.EXE-E9F40E42.pf --------- 18014  

 15.08.2010 01:43     C:\Windows\Prefetch\IE4UINIT.EXE-0BC11EF2.pf --------- 33174  

 15.08.2010 01:43     C:\Windows\Prefetch\RUNONCE.EXE-E33ED995.pf --------- 16570  

 15.08.2010 01:43     C:\Windows\Prefetch\MBAMGUI.EXE-00780130.pf --------- 9362  

 14.08.2010 17:49     C:\Windows\Prefetch\RUNDLL32.EXE-DA9F5AAA.pf --------- 242548  

 14.08.2010 17:43     C:\Windows\Prefetch\RUNDLL32.EXE-D9AD7A3B.pf --------- 19544  

 13.08.2010 23:33     C:\Windows\Prefetch\ACRORD32INFO.EXE-E3F62CBD.pf --------- 49028  

 13.08.2010 23:32     C:\Windows\Prefetch\RUNDLL32.EXE-94AD9F51.pf --------- 16568  

 13.08.2010 23:32     C:\Windows\Prefetch\RUNDLL32.EXE-99D3D278.pf --------- 16100  

 13.08.2010 23:28     C:\Windows\Prefetch\WINWORD.EXE-6A133625.pf --------- 35646  

 13.08.2010 23:28     C:\Windows\Prefetch\MSOHTMED.EXE-4B533508.pf --------- 8054  

 13.08.2010 23:26     C:\Windows\Prefetch\RUNDLL32.EXE-8B0F6201.pf --------- 37284  

 13.08.2010 23:26     C:\Windows\Prefetch\WINWORD.EXE-6AC9169C.pf --------- 80972  

 13.08.2010 23:16     C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-1710076809-763565373-1432611484-1003.db --------- 1146321  

 13.08.2010 23:16     C:\Windows\Prefetch\AgGlUAD_S-1-5-21-1710076809-763565373-1432611484-1003.db --------- 1734750  

 13.08.2010 23:03     C:\Windows\Prefetch\DFRGNTFS.EXE-4F838A89.pf --------- 29402  

 13.08.2010 23:03     C:\Windows\Prefetch\DEFRAG.EXE-738093E8.pf --------- 13790  

 13.08.2010 23:03     C:\Windows\Prefetch\Layout.ini --------- 1152092  

 13.08.2010 19:16     C:\Windows\Prefetch\MPSIGSTUB.EXE-7C60A359.pf --------- 49150  

 13.08.2010 19:16     C:\Windows\Prefetch\MPMINISIGSTUB.EXE-A76569C1.pf --------- 6280  

 13.08.2010 19:16     C:\Windows\Prefetch\MPAS-D_BD1.EXE-B82677C3.pf --------- 22450  

 13.08.2010 14:33     C:\Windows\Prefetch\RUNDLL32.EXE-F452D79D.pf --------- 4282  

 13.08.2010 12:07     C:\Windows\Prefetch\TOSBTPROC.EXE-068902F5.pf --------- 21278  

 13.08.2010 12:07     C:\Windows\Prefetch\TOSSKYPEAPL.EXE-82045FA0.pf --------- 21704  

 13.08.2010 12:06     C:\Windows\Prefetch\TOSOBEX.EXE-B7FB51D1.pf --------- 22308  

 13.08.2010 12:06     C:\Windows\Prefetch\TOSAVRC.EXE-9FB6732F.pf --------- 19714  

 12.08.2010 22:08     C:\Windows\Prefetch\AVGCMGR.EXE-556E623C.pf --------- 23518  

 12.08.2010 21:22     C:\Windows\Prefetch\AVGUPD.EXE-2AF460D4.pf --------- 85328  

 12.08.2010 21:22     C:\Windows\Prefetch\FIXCFG.EXE-67406AF4.pf --------- 20810  

 12.08.2010 21:20     C:\Windows\Prefetch\AgCx_SC2.db --------- 898973  

 25.07.2010 16:12     C:\Windows\Prefetch\AgCx_S1_S-1-5-21-1710076809-763565373-1432611484-1003.snp.db --------- 2264952  

 26.06.2010 00:28     C:\Windows\Prefetch\AgCx_SC3_2CA3C52C.db --------- 361230  

 21.06.2010 20:33     C:\Windows\Prefetch\AgCx_SC1.db --------- 794000  

 21.06.2010 20:32     C:\Windows\Prefetch\AgCx_SC1.db.trx --------- 368180  

 26.10.2009 15:32     C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-1710076809-763565373-1432611484-1004.db --------- 774331  

 26.10.2009 15:32     C:\Windows\Prefetch\AgGlUAD_S-1-5-21-1710076809-763565373-1432611484-1004.db --------- 1074796  

 04.02.2008 15:45     C:\Windows\Prefetch\AgAppLaunch.db --------- 332116  

----------------------------------------

 
 

C:\Windows\Tasks

 
 15.08.2010 15:00     C:\Windows\Tasks\SA.DAT --------- 6  

 15.08.2010 02:35     C:\Windows\Tasks\SCHEDLGU.TXT --------- 32592  

 15.08.2010 01:45     C:\Windows\Tasks\User_Feed_Synchronization-{3E4A0502-003C-4C08-9AEE-97291B9FB00C}.job --------- 424  

 15.08.2010 01:35     C:\Windows\Tasks\User_Feed_Synchronization-{F06281E9-CE7E-4711-993F-51419AAC1EEC}.job --------- 426  

----------------------------------------

 
 

C:\Windows\Temp

 
 15.08.2010 15:03     C:\Windows\Temp\ehprivjob.log --------- 0  

 15.08.2010 15:01     C:\Windows\Temp\JET4FF3.tmp --------- 0  

 15.08.2010 15:01     C:\Windows\Temp\JET3810.tmp --------- 0  

 15.08.2010 02:11     C:\Windows\Temp\MpCmdRun.log --------- 2496  

 15.08.2010 01:32     C:\Windows\Temp\lpksetup-20100815-013208-0.log --------- 624  

 15.08.2010 01:32     C:\Windows\Temp\lpksetup-20100815-013114-0.log --------- 39846  

 15.08.2010 01:19     C:\Windows\Temp\ehprivjob1.log --------- 0  

 15.08.2010 01:17     C:\Windows\Temp\JET4826.tmp --------- 0  

 14.08.2010 17:42     C:\Windows\Temp\lpksetup-20100814-174202-0.log --------- 624  

 14.08.2010 17:42     C:\Windows\Temp\lpksetup-20100814-174129-0.log --------- 39846  

 14.08.2010 17:28     C:\Windows\Temp\ehprivjob2.log --------- 0  

 13.08.2010 19:16     C:\Windows\Temp\MpSigStub.log --------- 3268  

 13.08.2010 12:19     C:\Windows\Temp\lpksetup-20100813-121923-0.log --------- 624  

 13.08.2010 12:19     C:\Windows\Temp\lpksetup-20100813-121849-0.log --------- 39846  

 13.08.2010 12:05     C:\Windows\Temp\ehprivjob3.log --------- 0  

 13.08.2010 12:04     C:\Windows\Temp\JET6306.tmp --------- 0  

 12.08.2010 22:33     C:\Windows\Temp\JET446E.tmp --------- 0  

----------------------------------------

 
 

C:\Users\adminkon\AppData\Local\Temp

 
 15.08.2010 16:10     C:\Users\adminkon\AppData\Local\Temp\adminkon.bmp --------- 31832  

 15.08.2010 16:02     C:\Users\adminkon\AppData\Local\Temp\hsperfdata_adminkon --------- 0  

 15.08.2010 16:02     C:\Users\adminkon\AppData\Local\Temp\jusched.log --------- 3128  

 15.08.2010 16:02     C:\Users\adminkon\AppData\Local\Temp\AUCHECK_PARSER.txt --------- 257  

 15.08.2010 16:02     C:\Users\adminkon\AppData\Local\Temp\AUCHECK_CORE.txt --------- 302  

 15.08.2010 15:57     C:\Users\adminkon\AppData\Local\Temp\~DFEB15.tmp --------- 16384  

 15.08.2010 15:57     C:\Users\adminkon\AppData\Local\Temp\WPDNSE --------- 0  

 15.08.2010 15:57     C:\Users\adminkon\AppData\Local\Temp\ArmUI.ini --------- 142194  

 15.08.2010 15:57     C:\Users\adminkon\AppData\Local\Temp\MUI --------- 0  

 15.08.2010 01:57     C:\Users\adminkon\AppData\Local\Temp\{aa9b5304-a238-4f06-86b4-514547863d80} --------- 0  

 15.08.2010 01:56     C:\Users\adminkon\AppData\Local\Temp\JAUReg.log --------- 255  

 15.08.2010 01:56     C:\Users\adminkon\AppData\Local\Temp\java_install_reg.log --------- 4212  

 15.08.2010 01:55     C:\Users\adminkon\AppData\Local\Temp\java_install.log --------- 28519  

 15.08.2010 01:54     C:\Users\adminkon\AppData\Local\Temp\java_install_sp.log --------- 1876  

 15.08.2010 01:54     C:\Users\adminkon\AppData\Local\Temp\jinstall.cfg --------- 1238  

 15.08.2010 01:53     C:\Users\adminkon\AppData\Local\Temp\AdobeARM.log --------- 3727  

 15.08.2010 01:43     C:\Users\adminkon\AppData\Local\Temp\tosBtExt --------- 0  

 15.08.2010 01:43     C:\Users\adminkon\AppData\Local\Temp\~DF3513.tmp --------- 16384  

----------------------------------------

 
 

C:\Program Files

 
 15.08.2010 01:55     C:\Program Files\Java --------- 4096  

 15.08.2010 01:50     C:\Program Files\Adobe --------- 0  

 13.08.2010 12:28     C:\Program Files\trend micro --------- 0  

 13.08.2010 01:24     C:\Program Files\Malwarebytes' Anti-Malware --------- 4096  

 13.08.2010 00:55     C:\Program Files\CCleaner --------- 0  

 12.08.2010 23:14     C:\Program Files\Common Files --------- 4096  

 12.08.2010 13:25     C:\Program Files\Microsoft Works --------- 24576  

 26.05.2010 16:28     C:\Program Files\OpenOffice.org 3 --------- 4096  

 14.04.2010 11:46     C:\Program Files\Windows Mail --------- 4096  

 31.03.2010 18:24     C:\Program Files\Internet Explorer --------- 4096  

 10.03.2010 23:28     C:\Program Files\Movie Maker --------- 4096  

 18.02.2010 23:45     C:\Program Files\Mozilla Firefox --------- 24576  

 06.02.2010 17:47     C:\Program Files\Skype --------- 0  

 06.02.2010 17:41     C:\Program Files\Google --------- 4096  

 08.01.2010 00:09     C:\Program Files\Foto-Mosaik-Edda --------- 4096  

 29.10.2009 12:44     C:\Program Files\Windows Media Player --------- 4096  

 03.10.2009 14:56     C:\Program Files\Windows Live --------- 4096  

 03.10.2009 14:55     C:\Program Files\Microsoft SQL Server Compact Edition --------- 0  

 03.10.2009 14:54     C:\Program Files\Microsoft --------- 0  

 03.10.2009 14:53     C:\Program Files\Windows Live SkyDrive --------- 0  

 19.08.2009 18:56     C:\Program Files\InstallShield Installation Information --------- 8192  

 19.08.2009 18:56     C:\Program Files\eBay --------- 0  

 02.06.2009 11:58     C:\Program Files\DivX --------- 4096  

 01.06.2009 14:24     C:\Program Files\AVG --------- 0  

 06.02.2009 17:19     C:\Program Files\Sony --------- 0  

 06.02.2009 17:17     C:\Program Files\QuickTime --------- 4096  

 06.02.2009 17:16     C:\Program Files\Apple Software Update --------- 4096  

 16.12.2008 18:15     C:\Program Files\desktop.ini --------- 174  

 18.11.2008 16:58     C:\Program Files\Notting Hill Gate 3A --------- 4096  

 17.11.2008 22:25     C:\Program Files\avmwlanstick --------- 4096  

 27.07.2008 13:15     C:\Program Files\Rockstar Games --------- 0  

 28.05.2008 15:01     C:\Program Files\Microsoft Visual Studio --------- 0  

 28.05.2008 15:00     C:\Program Files\Microsoft FrontPage --------- 0  

 28.05.2008 14:58     C:\Program Files\Microsoft Office --------- 4096  

 04.02.2008 18:21     C:\Program Files\Grisoft --------- 0  

 04.02.2008 16:40     C:\Program Files\Windows Sidebar --------- 4096  

 04.02.2008 15:02     C:\Program Files\Windows NT --------- 4096  

 04.02.2008 15:02     C:\Program Files\Gemeinsame Dateien --------- 0  

 15.12.2007 17:53     C:\Program Files\GoogleEULA --------- 4096  

 12.12.2007 09:49     C:\Program Files\ALDI Foto Service Nord --------- 4096  

 12.12.2007 09:49     C:\Program Files\Aldi Nord Fotoservice --------- 4096  

 12.12.2007 09:49     C:\Program Files\ALDI Online Druck Service (Nord) --------- 0  

 12.12.2007 07:05     C:\Program Files\Genesys PC Camera Device --------- 4096  

 11.12.2007 15:34     C:\Program Files\Realtek --------- 0  

 07.12.2007 14:59     C:\Program Files\HomeCinema --------- 4096  

 07.12.2007 14:50     C:\Program Files\CyberLink --------- 0  

 07.12.2007 11:52     C:\Program Files\RALINK --------- 0  

 04.12.2007 18:49     C:\Program Files\Medion --------- 0  

 04.12.2007 18:10     C:\Program Files\Sonavis --------- 0  

 04.12.2007 16:18     C:\Program Files\Sceneo --------- 0  

 04.12.2007 16:13     C:\Program Files\Buhl --------- 0  

 04.12.2007 16:06     C:\Program Files\Letstrade --------- 4096  

 04.12.2007 16:06     C:\Program Files\DataDesign --------- 0  

 04.12.2007 14:17     C:\Program Files\Nero --------- 0  

 04.12.2007 11:16     C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites --------- 8192  

 04.12.2007 11:06     C:\Program Files\Microsoft.NET --------- 0  

 04.12.2007 10:29     C:\Program Files\Ulead Systems --------- 0  

 03.12.2007 11:42     C:\Program Files\Windows Calendar --------- 0  

 03.12.2007 11:42     C:\Program Files\Windows Defender --------- 4096  

 03.12.2007 09:36     C:\Program Files\MSXML 4.0 --------- 0  

 03.12.2007 09:06     C:\Program Files\Toshiba --------- 0  

 03.12.2007 08:56     C:\Program Files\X10 Hardware --------- 4096  

 03.12.2007 08:50     C:\Program Files\Synaptics --------- 0  

 30.11.2007 17:47     C:\Program Files\Intel --------- 0  

 02.11.2006 15:01     C:\Program Files\Uninstall Information --------- 0  

 02.11.2006 14:42     C:\Program Files\Windows Collaboration --------- 4096  

 02.11.2006 14:42     C:\Program Files\Windows Photo Gallery --------- 4096  

 02.11.2006 14:42     C:\Program Files\Windows Journal --------- 4096  

 02.11.2006 14:37     C:\Program Files\MSN --------- 0  

 02.11.2006 14:37     C:\Program Files\Microsoft Games --------- 4096  

 02.11.2006 14:37     C:\Program Files\Reference Assemblies --------- 0  

 02.11.2006 14:37     C:\Program Files\MSBuild --------- 0  

----------------------------------------

 
 

C:\ProgramData\.. 

 
*** 

**   

Default    

Public    

desktop.ini    

Default User    

All Users    

----------------------------------------

 
 

C:\Windows\system32\drivers\etc\hosts

 
127.0.0.1       localhost

::1             localhost

 
----------------------------------------

 
 

 
Abbildname                     PID Sitzungsname       Sitz.-Nr. Speichernutzung

========================= ======== ================ =========== ===============

System Idle Process              0 Services                   0            28 K

System                           4 Services                   0         7.372 K

smss.exe                       524 Services                   0           616 K

csrss.exe                      644 Services                   0         4.148 K

wininit.exe                    780 Services                   0         3.080 K

services.exe                   832 Services                   0         5.920 K

lsass.exe                      844 Services                   0         3.728 K

lsm.exe                        852 Services                   0         4.112 K

svchost.exe                   1020 Services                   0         6.420 K

svchost.exe                   1072 Services                   0         6.372 K

svchost.exe                   1116 Services                   0        28.156 K

svchost.exe                   1168 Services                   0         9.192 K

svchost.exe                   1216 Services                   0        51.028 K

svchost.exe                   1232 Services                   0        46.184 K

audiodg.exe                   1356 Services                   0        15.856 K

SLsvc.exe                     1492 Services                   0         5.112 K

svchost.exe                   1536 Services                   0        10.092 K

svchost.exe                   1672 Services                   0        10.256 K

spoolsv.exe                   1860 Services                   0         9.196 K

svchost.exe                   1888 Services                   0        11.424 K

WLanNetService.exe             636 Services                   0         3.824 K

svchost.exe                   1032 Services                   0         2.888 K

ServiceController.exe         1228 Services                   0         6.640 K

IAANTmon.exe                  1880 Services                   0         4.732 K

NBService.exe                  356 Services                   0         4.860 K

GCS.exe                       1456 Services                   0        16.520 K

svchost.exe                    516 Services                   0         3.376 K

RichVideo.exe                 1472 Services                   0         3.312 K

pvrservice.exe                1604 Services                   0         6.336 K

svchost.exe                   2104 Services                   0         5.152 K

TosBtSrv.exe                  2160 Services                   0         3.328 K

svchost.exe                   2228 Services                   0         4.080 K

X10nets.exe                   2252 Services                   0         4.876 K

WUDFHost.exe                  2596 Services                   0         5.080 K

taskeng.exe                   2756 Services                   0         4.768 K

ehsched.exe                   3932 Services                   0         4.464 K

ehrecvr.exe                   4004 Services                   0         8.960 K

NMIndexingService.exe         3596 Services                   0         8.112 K

csrss.exe                     4640                            2        11.356 K

winlogon.exe                  4160                            2         5.116 K

dwm.exe                       4960                            2         2.852 K

taskeng.exe                   2808                            2         9.568 K

explorer.exe                  2864                            2        32.960 K

MSASCui.exe                   4808                            2         6.608 K

IAAnotif.exe                  5960                            2         5.768 K

rundll32.exe                  2400                            2         4.720 K

SynTPEnh.exe                  5352                            2         5.928 K

CLMLSvc.exe                   3264                            2         7.620 K

PDVDServ.exe                  3356                            2         4.880 K

rundll32.exe                  5072                            2         6.080 K

RtHDVCpl.exe                  2564                            2         6.776 K

GoogleDesktop.exe             4924                            2         2.888 K

AdobeARM.exe                   284                            2         8.124 K

jusched.exe                   5036                            2         3.340 K

sidebar.exe                   5152                            2        30.052 K

ehtray.exe                    3388                            2         1.492 K

GoogleToolbarNotifier.exe     4492                            2         2.600 K

Skype.exe                     4656                            2        25.908 K

ehmsas.exe                    2392                            2         3.668 K

sidebar.exe                   2604                            2        10.932 K

firefox.exe                   2892                            2        74.340 K

conime.exe                    5668                            2         3.416 K

cmd.exe                       4436                            2         2.516 K

notepad.exe                   4520                            2         4.944 K

csrss.exe                     2484 Console                    1         9.624 K

winlogon.exe                  4088 Console                    1         5.696 K

dwm.exe                       3896 Console                    1        49.856 K

taskeng.exe                   5340 Console                    1        11.020 K

explorer.exe                  2116 Console                    1        65.952 K

MSASCui.exe                   1548 Console                    1         9.856 K

IAAnotif.exe                  1376 Console                    1         6.104 K

rundll32.exe                  5264 Console                    1         5.472 K

SynTPEnh.exe                  5312 Console                    1         6.752 K

CLMLSvc.exe                   2812 Console                    1         9.352 K

PDVDServ.exe                  5136 Console                    1         5.220 K

rundll32.exe                  4844 Console                    1         7.064 K

RtHDVCpl.exe                  3316 Console                    1         8.220 K

GoogleDesktop.exe             5040 Console                    1         3.912 K

WmiPrvSE.exe                  2688 Services                   0         5.772 K

reader_sl.exe                 4756 Console                    1         3.728 K

AdobeARM.exe                  1340 Console                    1         9.624 K

jusched.exe                   5576 Console                    1         3.560 K

sidebar.exe                   3964 Console                    1        54.032 K

msnmsgr.exe                   4296 Console                    1        30.588 K

ehtray.exe                    2676 Console                    1           964 K

NMBgMonitor.exe               4056 Console                    1        11.084 K

GoogleToolbarNotifier.exe     5220 Console                    1         1.884 K

Skype.exe                     3260 Console                    1        51.904 K

ehmsas.exe                    2804 Console                    1         4.108 K

soffice.exe                   4720 Console                    1         3.004 K

soffice.bin                   6044 Console                    1        50.172 K

TosBtMng_D.exe                5916                            2         3.816 K

NMIndexStoreSvr.exe           3032 Console                    1        14.756 K

sidebar.exe                   5952 Console                    1        12.844 K

unsecapp.exe                  4100 Console                    1         4.400 K

TosBtMng.exe                  1416 Console                    1        10.296 K

TosA2dp.exe                   3492 Console                    1         6.172 K

TosBtHid.exe                  5684 Console                    1         3.060 K

TosBtHSP.exe                   896 Console                    1         6.592 K

WmiPrvSE.exe                  1372 Services                   0         7.552 K

TosAVRC.exe                   4208 Console                    1         5.776 K

mobsync.exe                   3080 Console                    1         7.096 K

TosOBEX.exe                   2480 Console                    1         9.152 K

TosBtProc.exe                 5048 Console                    1         6.048 K

cmd.exe                       4864 Console                    1         2.844 K

conime.exe                    3636 Console                    1         3.952 K

tasklist.exe                  6116 Console                    1         4.844 K

 
 

***** Ende des Scans 15.08.2010 um 16:12:19,22 ***  

 

 
 [/CODE]

Den rest mache ich jetzt...