Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Sophos Meldung:Virus Mal/Iframe-A (https://www.trojaner-board.de/81492-sophos-meldung-virus-mal-iframe-a.html)

ffm 10.01.2010 00:32
Sophos Meldung:Virus Mal/Iframe-A
 
Hallo
ich hab mein windows neu installiert und nach paar Tagen bekamm ich immer wieder diese meldung von Sophos und wenn ich die löschen lasse,dann kommt nach 5 Minuten wieder die gleiche Meldung(besonders wenn ich Ccleaner ausführe oder in irgend eine Seite gehe,die Java nutzt),der Virus befindet sich in C:\Users\USER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\...
ich hab schon mit den Programmen:a-squared Free,Combofix, Dr.Web CureIt versucht,ihn zu entfernen aber es ging leider nicht:(
bin für jede Hilfe sehr dankbar
mfG
Seyed

ffm 10.01.2010 14:37
Sophos Meldung:Virus Mal/Iframe-A
 
und hier sind meine dataien:
Code:
Malwarebytes' Anti-Malware 1.44
Datenbank Version: 3533
Windows 6.0.6000
Internet Explorer 8.0.6001.18865

10.01.2010 14:12:44
mbam-log-2010-01-10 (14-12-44).txt

Scan-Methode: Vollständiger Scan (C:\|D:\|E:\|)
Durchsuchte Objekte: 173901
Laufzeit: 31 minute(s), 8 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
Code:
Logfile of random's system information tool 1.06 (written by random/random)
Run by USER at 2010-01-10 14:19:49
Microsoft® Windows Vista™ Home Basic 
System drive C: has 43 GB (62%) free of 69 GB
Total RAM: 894 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:20:00, on 10.01.2010
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\OSD.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Launch Manager\WButton.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Sophos\AutoUpdate\ALMon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\USER\Desktop\RSIT.exe
C:\Program Files\trend micro\USER.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [LMgrVolOSD] C:\Program Files\Launch Manager\OSD.exe
O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSDCtrl.exe
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - Startup: CCC.lnk = ?
O4 - Global Startup: AutoUpdate Monitor.lnk = C:\Program Files\Sophos\AutoUpdate\ALMon.exe
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Sophos Anti-Virus Statusreporter (SAVAdminService) - Sophos Plc - C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe
O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Plc - C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe
O23 - Service: Sophos AutoUpdate Service - Sophos Plc - C:\Program Files\Sophos\AutoUpdate\ALsvc.exe
O23 - Service: WisLMSvc - Wistron Corp. - C:\Program Files\Launch Manager\WisLMSvc.exe

--
End of file - 3983 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID-Anmelde-Hilfsprogramm - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-05 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2009-12-28 1006264]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2006-12-29 4317184]
"LaunchAp"=C:\Program Files\Launch Manager\LaunchAp.exe [2005-07-25 32768]
"HotkeyApp"=C:\Program Files\Launch Manager\HotkeyApp.exe [2006-12-14 192512]
"LMgrVolOSD"=C:\Program Files\Launch Manager\OSD.exe [2006-12-26 180224]
"LMgrOSD"=C:\Program Files\Launch Manager\OSDCtrl.exe [2006-08-29 241664]
"Wbutton"=C:\Program Files\Launch Manager\Wbutton.exe [2006-11-09 86016]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-01-05 149280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-01-07 429392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883840]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AutoUpdate Monitor.lnk - C:\Program Files\Sophos\AutoUpdate\ALMon.exe

C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
CCC.lnk - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SAVService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-01-10 14:19:49 ----D---- C:\rsit
2010-01-10 13:40:34 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-01-07 01:21:21 ----D---- C:\Windows\temp
2010-01-07 01:20:19 ----SHD---- C:\$RECYCLE.BIN
2010-01-06 16:18:19 ----A---- C:\Windows\zip.exe
2010-01-06 16:18:19 ----A---- C:\Windows\SWXCACLS.exe
2010-01-06 16:18:19 ----A---- C:\Windows\SWSC.exe
2010-01-06 16:18:19 ----A---- C:\Windows\SWREG.exe
2010-01-06 16:18:19 ----A---- C:\Windows\sed.exe
2010-01-06 16:18:19 ----A---- C:\Windows\PEV.exe
2010-01-06 16:18:19 ----A---- C:\Windows\NIRCMD.exe
2010-01-06 16:18:19 ----A---- C:\Windows\grep.exe
2010-01-06 16:18:13 ----D---- C:\Windows\ERDNT
2010-01-06 00:47:56 ----D---- C:\Program Files\a-squared Free
2010-01-05 16:08:37 ----D---- C:\Program Files\Trend Micro
2010-01-05 15:50:28 ----D---- C:\Users\USER\AppData\Roaming\Malwarebytes
2010-01-05 15:50:21 ----D---- C:\ProgramData\Malwarebytes
2010-01-05 15:21:36 ----A---- C:\Windows\system32\javaws.exe
2010-01-05 15:21:36 ----A---- C:\Windows\system32\javaw.exe
2010-01-05 15:21:36 ----A---- C:\Windows\system32\java.exe
2010-01-05 15:21:36 ----A---- C:\Windows\system32\deploytk.dll
2010-01-05 15:21:16 ----D---- C:\Program Files\Java
2010-01-04 20:37:59 ----A---- C:\Windows\system32\jscript.dll
2010-01-04 20:37:45 ----A---- C:\Windows\system32\winhttp.dll
2010-01-04 20:36:54 ----A---- C:\Windows\system32\nshhttp.dll
2010-01-04 20:36:54 ----A---- C:\Windows\system32\httpapi.dll
2010-01-03 19:28:31 ----D---- C:\Program Files\CCleaner
2010-01-03 18:35:41 ----D---- C:\Program Files\Microsoft Silverlight
2010-01-03 18:33:28 ----A---- C:\Windows\system32\kerberos.dll
2010-01-03 18:33:26 ----A---- C:\Windows\system32\schannel.dll
2010-01-03 18:33:20 ----A---- C:\Windows\system32\msshsq.dll
2010-01-03 16:11:00 ----A---- C:\Windows\system32\occache.dll
2010-01-03 16:11:00 ----A---- C:\Windows\system32\jsproxy.dll
2010-01-03 16:10:59 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-01-03 16:10:59 ----A---- C:\Windows\system32\msfeeds.dll
2010-01-03 16:10:59 ----A---- C:\Windows\system32\ieui.dll
2010-01-03 16:10:59 ----A---- C:\Windows\system32\iepeers.dll
2010-01-03 16:10:58 ----A---- C:\Windows\system32\iesetup.dll
2010-01-03 16:10:58 ----A---- C:\Windows\system32\iernonce.dll
2010-01-03 16:10:57 ----A---- C:\Windows\system32\wininet.dll
2010-01-03 16:10:57 ----A---- C:\Windows\system32\msfeedssync.exe
2010-01-03 16:10:57 ----A---- C:\Windows\system32\ieUnatt.exe
2010-01-03 16:10:57 ----A---- C:\Windows\system32\iesysprep.dll
2010-01-03 16:10:57 ----A---- C:\Windows\system32\iertutil.dll
2010-01-03 16:10:57 ----A---- C:\Windows\system32\iedkcs32.dll
2010-01-03 16:10:57 ----A---- C:\Windows\system32\ie4uinit.exe
2010-01-03 16:10:56 ----A---- C:\Windows\system32\urlmon.dll
2010-01-03 16:10:54 ----A---- C:\Windows\system32\mshtml.dll
2010-01-03 16:10:54 ----A---- C:\Windows\system32\ieframe.dll
2010-01-03 16:08:58 ----A---- C:\Windows\system32\mshtmler.dll
2010-01-03 16:08:58 ----A---- C:\Windows\system32\mshtmled.dll
2010-01-03 16:08:58 ----A---- C:\Windows\system32\icardie.dll
2010-01-03 16:08:58 ----A---- C:\Windows\system32\admparse.dll
2010-01-03 16:08:57 ----A---- C:\Windows\system32\msls31.dll
2010-01-03 16:08:57 ----A---- C:\Windows\system32\corpol.dll
2010-01-03 16:08:56 ----A---- C:\Windows\system32\imgutil.dll
2010-01-03 16:08:56 ----A---- C:\Windows\system32\ieakeng.dll
2010-01-03 16:08:56 ----A---- C:\Windows\system32\dxtrans.dll
2010-01-03 16:08:56 ----A---- C:\Windows\system32\dxtmsft.dll
2010-01-03 16:08:55 ----A---- C:\Windows\system32\webcheck.dll
2010-01-03 16:08:55 ----A---- C:\Windows\system32\msrating.dll
2010-01-03 16:08:55 ----A---- C:\Windows\system32\licmgr10.dll
2010-01-03 16:08:55 ----A---- C:\Windows\system32\inseng.dll
2010-01-03 16:08:55 ----A---- C:\Windows\system32\ieaksie.dll
2010-01-03 16:08:54 ----A---- C:\Windows\system32\WinFXDocObj.exe
2010-01-03 16:08:54 ----A---- C:\Windows\system32\wextract.exe
2010-01-03 16:08:54 ----A---- C:\Windows\system32\mstime.dll
2010-01-03 16:08:54 ----A---- C:\Windows\system32\ieakui.dll
2010-01-03 16:08:53 ----A---- C:\Windows\system32\pngfilt.dll
2010-01-03 16:08:53 ----A---- C:\Windows\system32\advpack.dll
2010-01-03 16:08:52 ----A---- C:\Windows\system32\vbscript.dll
2010-01-03 16:08:52 ----A---- C:\Windows\system32\ieapfltr.dll
2010-01-03 16:08:51 ----A---- C:\Windows\system32\url.dll
2010-01-03 16:08:49 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2010-01-03 16:08:49 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2010-01-03 16:08:49 ----A---- C:\Windows\system32\PDMSetup.exe
2010-01-03 16:08:49 ----A---- C:\Windows\system32\mshta.exe
2010-01-03 16:08:49 ----A---- C:\Windows\system32\iexpress.exe
2009-12-29 00:46:56 ----A---- C:\Windows\system32\winipsec.dll
2009-12-29 00:46:56 ----A---- C:\Windows\system32\polstore.dll
2009-12-29 00:46:56 ----A---- C:\Windows\system32\IPSECSVC.DLL
2009-12-29 00:46:56 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2009-12-29 00:46:00 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-12-29 00:46:00 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-12-29 00:46:00 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-12-29 00:41:10 ----A---- C:\Windows\system32\es.dll
2009-12-29 00:40:45 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2009-12-29 00:40:09 ----A---- C:\Windows\system32\DWWIN.EXE
2009-12-29 00:39:51 ----A---- C:\Windows\explorer.exe
2009-12-29 00:39:16 ----A---- C:\Windows\system32\netcfg.exe
2009-12-29 00:38:38 ----A---- C:\Windows\system32\rpcss.dll
2009-12-29 00:38:36 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-12-29 00:38:36 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-12-29 00:38:35 ----A---- C:\Windows\system32\iasads.dll
2009-12-29 00:38:34 ----A---- C:\Windows\system32\sdohlp.dll
2009-12-29 00:38:34 ----A---- C:\Windows\system32\iasrecst.dll
2009-12-29 00:38:34 ----A---- C:\Windows\system32\iasdatastore.dll
2009-12-29 00:37:42 ----A---- C:\Windows\system32\WMASF.DLL
2009-12-29 00:37:42 ----A---- C:\Windows\system32\LAPRXY.DLL
2009-12-29 00:37:42 ----A---- C:\Windows\system32\asferror.dll
2009-12-29 00:37:18 ----A---- C:\Windows\system32\SLC.dll
2009-12-29 00:37:18 ----A---- C:\Windows\system32\mcbuilder.exe
2009-12-29 00:37:17 ----A---- C:\Windows\system32\slwmi.dll
2009-12-29 00:37:17 ----A---- C:\Windows\system32\SLCommDlg.dll
2009-12-29 00:37:16 ----A---- C:\Windows\system32\SLUINotify.dll
2009-12-29 00:37:16 ----A---- C:\Windows\system32\SLUI.exe
2009-12-29 00:37:16 ----A---- C:\Windows\system32\SLsvc.exe
2009-12-29 00:37:16 ----A---- C:\Windows\system32\SLLUA.exe
2009-12-29 00:37:15 ----A---- C:\Windows\system32\slcinst.dll
2009-12-29 00:36:47 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-12-29 00:36:46 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-12-29 00:36:45 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-12-29 00:36:16 ----A---- C:\Windows\system32\printcom.dll
2009-12-29 00:36:15 ----A---- C:\Windows\system32\win32spl.dll
2009-12-29 00:35:51 ----A---- C:\Windows\system32\wshrm.dll
2009-12-29 00:32:54 ----A---- C:\Windows\system32\dnsrslvr.dll
2009-12-29 00:32:54 ----A---- C:\Windows\system32\dnscacheugc.exe
2009-12-29 00:32:54 ----A---- C:\Windows\system32\dnsapi.dll
2009-12-29 00:31:15 ----A---- C:\Windows\system32\user32.dll
2009-12-29 00:30:46 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2009-12-29 00:30:00 ----A---- C:\Windows\system32\wmploc.DLL
2009-12-29 00:29:59 ----A---- C:\Windows\system32\wmp.dll
2009-12-29 00:29:58 ----A---- C:\Windows\system32\spwmp.dll
2009-12-29 00:29:58 ----A---- C:\Windows\system32\dxmasf.dll
2009-12-29 00:29:53 ----A---- C:\Windows\system32\unregmp2.exe
2009-12-28 23:38:01 ----D---- C:\Users\USER\AppData\Roaming\Macromedia
2009-12-28 23:38:00 ----D---- C:\Users\USER\AppData\Roaming\Adobe
2009-12-28 23:37:31 ----D---- C:\Windows\system32\Macromed
2009-12-28 23:34:36 ----D---- C:\Program Files\Microsoft
2009-12-28 23:34:18 ----D---- C:\Program Files\Windows Live SkyDrive
2009-12-28 23:33:58 ----D---- C:\Program Files\Windows Live
2009-12-28 23:32:49 ----D---- C:\Program Files\Common Files\Windows Live
2009-12-28 22:58:13 ----A---- C:\Windows\system32\riched32.dll
2009-12-28 22:58:13 ----A---- C:\Windows\system32\riched20.dll
2009-12-28 22:58:09 ----A---- C:\Windows\system32\rasser.dll
2009-12-28 22:58:09 ----A---- C:\Windows\system32\rasdiag.dll
2009-12-28 22:58:09 ----A---- C:\Windows\system32\rascfg.dll
2009-12-28 22:58:08 ----A---- C:\Windows\system32\rasmxs.dll
2009-12-28 22:58:07 ----A---- C:\Windows\system32\netcfgx.dll
2009-12-28 22:58:07 ----A---- C:\Windows\system32\msftedit.dll
2009-12-28 22:58:06 ----A---- C:\Windows\system32\ipnathlp.dll
2009-12-28 22:58:06 ----A---- C:\Windows\system32\icsunattend.exe
2009-12-28 22:58:05 ----A---- C:\Windows\system32\wshqos.dll
2009-12-28 22:58:04 ----A---- C:\Windows\system32\traffic.dll
2009-12-28 22:58:04 ----A---- C:\Windows\system32\pacerprf.dll
2009-12-28 22:58:03 ----A---- C:\Windows\system32\dps.dll
2009-12-28 22:55:59 ----A---- C:\Windows\system32\msoert2.dll
2009-12-28 22:55:59 ----A---- C:\Windows\system32\msoeacct.dll
2009-12-28 22:55:59 ----A---- C:\Windows\system32\ACCTRES.dll
2009-12-28 22:53:31 ----A---- C:\Windows\system32\TCPSVCS.EXE
2009-12-28 22:53:31 ----A---- C:\Windows\system32\NETSTAT.EXE
2009-12-28 22:53:31 ----A---- C:\Windows\system32\netiohlp.dll
2009-12-28 22:53:31 ----A---- C:\Windows\system32\netevent.dll
2009-12-28 22:53:31 ----A---- C:\Windows\system32\MRINFO.EXE
2009-12-28 22:53:31 ----A---- C:\Windows\system32\HOSTNAME.EXE
2009-12-28 22:53:31 ----A---- C:\Windows\system32\finger.exe
2009-12-28 22:53:30 ----A---- C:\Windows\system32\ROUTE.EXE
2009-12-28 22:53:30 ----A---- C:\Windows\system32\ARP.EXE
2009-12-28 22:53:27 ----A---- C:\Windows\system32\tcpipcfg.dll
2009-12-28 22:53:27 ----A---- C:\Windows\system32\netiougc.exe
2009-12-28 22:50:42 ----A---- C:\Windows\system32\wtsapi32.dll
2009-12-28 22:50:38 ----A---- C:\Windows\system32\sysmain.dll
2009-12-28 22:49:06 ----A---- C:\Windows\system32\WebClnt.dll
2009-12-28 22:47:09 ----A---- C:\Windows\system32\L2SecHC.dll
2009-12-28 22:47:08 ----A---- C:\Windows\system32\wlanhlp.dll
2009-12-28 22:47:08 ----A---- C:\Windows\system32\wlanapi.dll
2009-12-28 22:47:07 ----A---- C:\Windows\system32\wlansvc.dll
2009-12-28 22:47:07 ----A---- C:\Windows\system32\wlansec.dll
2009-12-28 22:47:07 ----A---- C:\Windows\system32\wlanmsm.dll
2009-12-28 22:44:58 ----A---- C:\Windows\system32\msxml3r.dll
2009-12-28 22:44:58 ----A---- C:\Windows\system32\msxml3.dll
2009-12-28 22:44:57 ----A---- C:\Windows\system32\msxml6r.dll
2009-12-28 22:44:57 ----A---- C:\Windows\system32\msxml6.dll
2009-12-28 22:42:53 ----A---- C:\Windows\system32\t2embed.dll
2009-12-28 22:42:52 ----A---- C:\Windows\system32\lpk.dll
2009-12-28 22:42:52 ----A---- C:\Windows\system32\fontsub.dll
2009-12-28 22:42:52 ----A---- C:\Windows\system32\dciman32.dll
2009-12-28 22:42:52 ----A---- C:\Windows\system32\atmlib.dll
2009-12-28 22:42:52 ----A---- C:\Windows\system32\atmfd.dll
2009-12-28 22:40:45 ----A---- C:\Windows\system32\wdigest.dll
2009-12-28 22:40:45 ----A---- C:\Windows\system32\secur32.dll
2009-12-28 22:40:45 ----A---- C:\Windows\system32\msv1_0.dll
2009-12-28 22:40:44 ----A---- C:\Windows\system32\lsass.exe
2009-12-28 22:40:44 ----A---- C:\Windows\system32\lsasrv.dll
2009-12-28 22:39:18 ----A---- C:\Windows\system32\winsrv.dll
2009-12-28 22:39:18 ----A---- C:\Windows\system32\csrsrv.dll
2009-12-28 22:36:58 ----A---- C:\Windows\system32\rrinstaller.exe
2009-12-28 22:36:58 ----A---- C:\Windows\system32\mfps.dll
2009-12-28 22:36:58 ----A---- C:\Windows\system32\mferror.dll
2009-12-28 22:36:58 ----A---- C:\Windows\system32\mf.dll
2009-12-28 22:36:57 ----A---- C:\Windows\system32\mfpmp.exe
2009-12-28 22:36:56 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-12-28 22:34:37 ----A---- C:\Windows\system32\tzres.dll
2009-12-28 22:25:26 ----A---- C:\Windows\system32\atl.dll
2009-12-28 22:22:35 ----A---- C:\Windows\system32\gdi32.dll
2009-12-28 22:15:35 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-12-28 22:15:34 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-12-28 22:12:19 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2009-12-28 22:10:49 ----A---- C:\Windows\system32\xolehlp.dll
2009-12-28 22:10:49 ----A---- C:\Windows\system32\msdtcprx.dll
2009-12-28 22:09:03 ----A---- C:\Windows\system32\wkssvc.dll
2009-12-28 22:06:45 ----A---- C:\Windows\system32\aaclient.dll
2009-12-28 22:06:44 ----A---- C:\Windows\system32\tsgqec.dll
2009-12-28 22:06:44 ----A---- C:\Windows\system32\mstscax.dll
2009-12-28 22:04:52 ----A---- C:\Windows\system32\wmpeffects.dll
2009-12-28 22:00:52 ----A---- C:\Windows\system32\msscp.dll
2009-12-28 21:56:41 ----A---- C:\Windows\system32\FirewallAPI.dll
2009-12-28 21:56:40 ----A---- C:\Windows\system32\wfapigp.dll
2009-12-28 21:56:40 ----A---- C:\Windows\system32\MPSSVC.dll
2009-12-28 21:56:40 ----A---- C:\Windows\system32\icfupgd.dll
2009-12-28 21:56:40 ----A---- C:\Windows\system32\cmifw.dll
2009-12-28 21:56:39 ----A---- C:\Windows\system32\iphlpsvc.dll
2009-12-28 21:54:57 ----A---- C:\Windows\system32\netapi32.dll
2009-12-28 21:49:55 ----A---- C:\Windows\system32\shell32.dll
2009-12-28 21:48:17 ----A---- C:\Windows\system32\localspl.dll
2009-12-28 21:46:42 ----A---- C:\Windows\system32\avicap32.dll
2009-12-28 21:46:41 ----A---- C:\Windows\system32\msvidc32.dll
2009-12-28 21:46:41 ----A---- C:\Windows\system32\msvfw32.dll
2009-12-28 21:46:41 ----A---- C:\Windows\system32\msrle32.dll
2009-12-28 21:46:41 ----A---- C:\Windows\system32\mciavi32.dll
2009-12-28 21:46:41 ----A---- C:\Windows\system32\avifil32.dll
2009-12-28 21:42:20 ----A---- C:\Windows\system32\NlsLexicons0047.dll
2009-12-28 21:42:20 ----A---- C:\Windows\system32\NlsLexicons0046.dll
2009-12-28 21:42:20 ----A---- C:\Windows\system32\NlsLexicons0045.dll
2009-12-28 21:42:19 ----A---- C:\Windows\system32\NlsLexicons0049.dll
2009-12-28 21:42:19 ----A---- C:\Windows\system32\NlsLexicons0039.dll
2009-12-28 21:42:19 ----A---- C:\Windows\system32\NlsLexicons0021.dll
2009-12-28 21:42:19 ----A---- C:\Windows\system32\NlsLexicons0020.dll
2009-12-28 21:42:18 ----A---- C:\Windows\system32\NlsLexicons0022.dll
2009-12-28 21:42:17 ----A---- C:\Windows\system32\NlsLexicons0026.dll
2009-12-28 21:42:17 ----A---- C:\Windows\system32\NlsLexicons0024.dll
2009-12-28 21:42:16 ----A---- C:\Windows\system32\NlsLexicons0027.dll
2009-12-28 21:42:16 ----A---- C:\Windows\system32\NlsLexicons0010.dll
2009-12-28 21:42:15 ----A---- C:\Windows\system32\NlsLexicons0018.dll
2009-12-28 21:42:15 ----A---- C:\Windows\system32\NlsLexicons0013.dll
2009-12-28 21:42:15 ----A---- C:\Windows\system32\NlsLexicons0011.dll
2009-12-28 21:42:14 ----A---- C:\Windows\system32\NlsLexicons0019.dll
2009-12-28 21:42:13 ----A---- C:\Windows\system32\NlsLexicons0003.dll
2009-12-28 21:42:13 ----A---- C:\Windows\system32\NlsLexicons0002.dll
2009-12-28 21:42:13 ----A---- C:\Windows\system32\NlsLexicons0001.dll
2009-12-28 21:42:12 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-12-28 21:42:12 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-12-28 21:42:11 ----A---- C:\Windows\system32\NlsLexicons004c.dll
2009-12-28 21:42:11 ----A---- C:\Windows\system32\NlsLexicons004b.dll
2009-12-28 21:42:11 ----A---- C:\Windows\system32\NlsLexicons004a.dll
2009-12-28 21:42:10 ----A---- C:\Windows\system32\NlsLexicons004e.dll
2009-12-28 21:42:09 ----A---- C:\Windows\system32\NlsLexicons003e.dll
2009-12-28 21:42:09 ----A---- C:\Windows\system32\NlsLexicons002a.dll
2009-12-28 21:42:09 ----A---- C:\Windows\system32\NlsLexicons001a.dll
2009-12-28 21:42:08 ----A---- C:\Windows\system32\NlsLexicons001d.dll
2009-12-28 21:42:08 ----A---- C:\Windows\system32\NlsLexicons001b.dll
2009-12-28 21:42:07 ----A---- C:\Windows\system32\NlsLexicons000a.dll
2009-12-28 21:42:06 ----A---- C:\Windows\system32\NlsLexicons000f.dll
2009-12-28 21:42:06 ----A---- C:\Windows\system32\NlsLexicons000d.dll
2009-12-28 21:42:06 ----A---- C:\Windows\system32\NlsLexicons000c.dll
2009-12-28 21:42:05 ----A---- C:\Windows\system32\NlsLexicons0414.dll
2009-12-28 21:42:04 ----A---- C:\Windows\system32\NlsLexicons0816.dll
2009-12-28 21:42:04 ----A---- C:\Windows\system32\NlsLexicons0416.dll
2009-12-28 21:42:03 ----A---- C:\Windows\system32\NlsModels0011.dll
2009-12-28 21:42:03 ----A---- C:\Windows\system32\NlsLexicons081a.dll
2009-12-28 21:42:03 ----A---- C:\Windows\system32\NlsData0045.dll
2009-12-28 21:42:02 ----A---- C:\Windows\system32\NlsData0049.dll
2009-12-28 21:42:02 ----A---- C:\Windows\system32\NlsData0047.dll
2009-12-28 21:42:02 ----A---- C:\Windows\system32\NlsData0046.dll
2009-12-28 21:42:01 ----A---- C:\Windows\system32\NlsData0039.dll
2009-12-28 21:42:01 ----A---- C:\Windows\system32\NlsData0022.dll
2009-12-28 21:42:01 ----A---- C:\Windows\system32\NlsData0021.dll
2009-12-28 21:42:01 ----A---- C:\Windows\system32\NlsData0020.dll
2009-12-28 21:42:00 ----A---- C:\Windows\system32\NlsData0026.dll
2009-12-28 21:42:00 ----A---- C:\Windows\system32\NlsData0024.dll
2009-12-28 21:41:59 ----A---- C:\Windows\system32\NlsData0027.dll
2009-12-28 21:41:59 ----A---- C:\Windows\system32\NlsData0011.dll
2009-12-28 21:41:59 ----A---- C:\Windows\system32\NlsData0010.dll
2009-12-28 21:41:58 ----A---- C:\Windows\system32\NlsData0018.dll
2009-12-28 21:41:58 ----A---- C:\Windows\system32\NlsData0013.dll
2009-12-28 21:41:58 ----A---- C:\Windows\system32\NlsData0000.dll
2009-12-28 21:41:57 ----A---- C:\Windows\system32\NlsData0019.dll
2009-12-28 21:41:57 ----A---- C:\Windows\system32\NlsData0001.dll
2009-12-28 21:41:56 ----A---- C:\Windows\system32\NlsData0007.dll
2009-12-28 21:41:56 ----A---- C:\Windows\system32\NlsData0003.dll
2009-12-28 21:41:56 ----A---- C:\Windows\system32\NlsData0002.dll
2009-12-28 21:41:55 ----A---- C:\Windows\system32\NlsData004b.dll
2009-12-28 21:41:55 ----A---- C:\Windows\system32\NlsData004a.dll
2009-12-28 21:41:55 ----A---- C:\Windows\system32\NlsData0009.dll
2009-12-28 21:41:54 ----A---- C:\Windows\system32\NlsData004e.dll
2009-12-28 21:41:54 ----A---- C:\Windows\system32\NlsData004c.dll
2009-12-28 21:41:53 ----A---- C:\Windows\system32\NlsData003e.dll
2009-12-28 21:41:53 ----A---- C:\Windows\system32\NlsData002a.dll
2009-12-28 21:41:53 ----A---- C:\Windows\system32\NlsData001b.dll
2009-12-28 21:41:53 ----A---- C:\Windows\system32\NlsData001a.dll
2009-12-28 21:41:52 ----A---- C:\Windows\system32\NlsData001d.dll
2009-12-28 21:41:51 ----A---- C:\Windows\system32\NlsData000a.dll
2009-12-28 21:41:50 ----A---- C:\Windows\system32\NlsData000f.dll
2009-12-28 21:41:50 ----A---- C:\Windows\system32\NlsData000d.dll
2009-12-28 21:41:50 ----A---- C:\Windows\system32\NlsData000c.dll
2009-12-28 21:41:49 ----A---- C:\Windows\system32\NlsData0416.dll
2009-12-28 21:41:49 ----A---- C:\Windows\system32\NlsData0414.dll
2009-12-28 21:41:49 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-12-28 21:41:47 ----A---- C:\Windows\system32\NlsData081a.dll
2009-12-28 21:41:47 ----A---- C:\Windows\system32\NlsData0816.dll
2009-12-28 21:41:46 ----A---- C:\Windows\system32\NlsLexicons0c1a.dll
2009-12-28 21:41:46 ----A---- C:\Windows\system32\NlsData0c1a.dll
2009-12-28 21:36:56 ----A---- C:\Windows\system32\setupapi.dll
2009-12-28 21:35:58 ----A---- C:\Windows\system32\srdelayed.exe
2009-12-28 21:35:58 ----A---- C:\Windows\system32\srcore.dll
2009-12-28 21:35:58 ----A---- C:\Windows\system32\srclient.dll
2009-12-28 21:35:58 ----A---- C:\Windows\system32\rstrui.exe
2009-12-28 21:35:57 ----A---- C:\Windows\system32\wpd_ci.dll
2009-12-28 21:35:57 ----A---- C:\Windows\system32\winresume.exe
2009-12-28 21:35:57 ----A---- C:\Windows\system32\winload.exe
2009-12-28 21:35:57 ----A---- C:\Windows\system32\kd1394.dll
2009-12-28 21:35:56 ----A---- C:\Windows\system32\ci.dll
2009-12-28 21:35:55 ----A---- C:\Windows\system32\umpnpmgr.dll
2009-12-28 21:35:55 ----A---- C:\Windows\system32\drvinst.exe
2009-12-28 21:35:55 ----A---- C:\Windows\system32\cfgmgr32.dll
2009-12-28 21:35:54 ----A---- C:\Windows\system32\oleaut32.dll
2009-12-28 21:35:54 ----A---- C:\Windows\system32\kbd106n.dll
2009-12-28 21:35:54 ----A---- C:\Windows\system32\dpx.dll
2009-12-28 21:35:53 ----A---- C:\Windows\system32\unlodctr.exe
2009-12-28 21:35:53 ----A---- C:\Windows\system32\prflbmsg.dll
2009-12-28 21:35:53 ----A---- C:\Windows\system32\lodctr.exe
2009-12-28 21:35:53 ----A---- C:\Windows\system32\loadperf.dll
2009-12-28 21:35:51 ----A---- C:\Windows\system32\schedsvc.dll
2009-12-28 21:35:50 ----A---- C:\Windows\system32\f3ahvoas.dll
2009-12-28 21:35:50 ----A---- C:\Windows\system32\dispci.dll
2009-12-28 21:35:50 ----A---- C:\Windows\system32\batt.dll
2009-12-28 21:30:37 ----A---- C:\Windows\system32\kernel32.dll
2009-12-28 21:30:35 ----A---- C:\Windows\system32\apilogen.dll
2009-12-28 21:30:35 ----A---- C:\Windows\system32\amxread.dll
2009-12-28 21:27:08 ----A---- C:\Windows\system32\ntprint.exe
2009-12-28 21:27:07 ----A---- C:\Windows\system32\ntprint.dll
2009-12-28 21:27:05 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2009-12-28 21:27:05 ----A---- C:\Windows\system32\dhcpcsvc.dll
2009-12-28 21:27:05 ----A---- C:\Windows\system32\dhcpcmonitor.dll
2009-12-28 21:27:05 ----A---- C:\Windows\system32\authui.dll
2009-12-28 21:27:02 ----A---- C:\Windows\system32\sendmail.dll
2009-12-28 21:22:11 ----A---- C:\Windows\system32\wmpdxm.dll
2009-12-28 21:19:44 ----A---- C:\Windows\system32\sbunattend.exe
2009-12-28 21:18:32 ----N---- C:\Windows\system32\MpSigStub.exe
2009-12-28 21:03:44 ----A---- C:\Windows\system32\infocardapi.dll
2009-12-28 21:03:44 ----A---- C:\Windows\system32\icardres.dll
2009-12-28 21:03:44 ----A---- C:\Windows\system32\icardagt.exe
2009-12-28 21:03:36 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-12-28 21:03:34 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-12-28 21:03:34 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-12-28 21:03:34 ----A---- C:\Windows\system32\PresentationHost.exe
2009-12-28 20:46:26 ----A---- C:\Windows\system32\dfshim.dll
2009-12-28 20:46:25 ----A---- C:\Windows\system32\netfxperf.dll
2009-12-28 20:46:23 ----A---- C:\Windows\system32\mscoree.dll
2009-12-28 20:46:22 ----A---- C:\Windows\system32\mscories.dll
2009-12-28 20:46:22 ----A---- C:\Windows\system32\mscorier.dll
2009-12-28 20:32:59 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-12-28 20:32:55 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-12-28 20:32:55 ----A---- C:\Windows\system32\gameux.dll
2009-12-28 20:32:17 ----A---- C:\Windows\system32\WMNetMgr.dll
2009-12-28 20:32:17 ----A---- C:\Windows\system32\logagent.exe
2009-12-28 20:31:34 ----A---- C:\Windows\system32\INETRES.dll
2009-12-28 20:31:33 ----A---- C:\Windows\system32\inetcomm.dll
2009-12-28 20:31:14 ----A---- C:\Windows\system32\msasn1.dll
2009-12-28 20:30:57 ----A---- C:\Windows\system32\connect.dll
2009-12-28 20:30:38 ----A---- C:\Windows\system32\wmi.dll
2009-12-28 20:30:38 ----A---- C:\Windows\system32\imagehlp.dll
2009-12-28 20:29:50 ----A---- C:\Windows\system32\rpcrt4.dll
2009-12-28 20:29:31 ----A---- C:\Windows\system32\quartz.dll
2009-12-28 20:26:29 ----A---- C:\Windows\system32\rastls.dll
2009-12-28 20:26:29 ----A---- C:\Windows\system32\raschap.dll
2009-12-28 20:26:09 ----A---- C:\Windows\system32\WSDApi.dll
2009-12-28 20:25:32 ----D---- C:\Program Files\MSXML 4.0
2009-12-28 19:57:15 ----D---- C:\Users\USER\AppData\Roaming\Mozilla
2009-12-28 17:33:28 ----D---- C:\ATI
2009-12-28 15:54:16 ----A---- C:\Windows\system32\wups2.dll
2009-12-28 15:54:16 ----A---- C:\Windows\system32\wucltux.dll
2009-12-28 15:54:16 ----A---- C:\Windows\system32\wuaueng.dll
2009-12-28 15:54:16 ----A---- C:\Windows\system32\wuauclt.exe
2009-12-28 15:53:37 ----A---- C:\Windows\system32\wups.dll
2009-12-28 15:53:37 ----A---- C:\Windows\system32\wudriver.dll
2009-12-28 15:53:37 ----A---- C:\Windows\system32\wuapi.dll
2009-12-28 15:53:02 ----A---- C:\Windows\system32\wuwebv.dll
2009-12-28 15:53:02 ----A---- C:\Windows\system32\wuapp.exe
2009-12-28 15:44:47 ----D---- C:\Program Files\Mozilla Firefox
2009-12-28 15:43:48 ----D---- C:\Program Files\WinRAR
2009-12-28 15:42:42 ----D---- C:\Users\USER\AppData\Roaming\Leadertech
2009-12-28 15:39:09 ----A---- C:\Windows\ODBC.INI
2009-12-28 15:39:02 ----A---- C:\Windows\system32\mdimon.dll
2009-12-28 15:35:55 ----D---- C:\Program Files\Common Files\DESIGNER
2009-12-28 15:35:33 ----D---- C:\Windows\SHELLNEW
2009-12-28 15:35:28 ----D---- C:\Windows\PCHEALTH
2009-12-28 15:35:28 ----D---- C:\Program Files\Microsoft.NET
2009-12-28 15:35:28 ----D---- C:\Program Files\Microsoft Office
2009-12-28 15:18:00 ----D---- C:\Program Files\Common Files\Cisco Systems
2009-12-28 15:17:57 ----A---- C:\Windows\system32\sophosboottasks.exe
2009-12-28 15:17:13 ----D---- C:\savxpsa
2009-12-28 15:15:02 ----D---- C:\ProgramData\Sophos
2009-12-28 15:15:02 ----D---- C:\Program Files\Sophos
2009-12-23 16:25:19 ----RAS---- C:\BOOTSECT.BAK
2009-12-23 16:25:17 ----D---- C:\Boot
2009-12-23 16:24:38 ----D---- C:\Windows\system32\OEM
2009-12-23 16:24:38 ----D---- C:\Windows\PANTHER
2009-12-23 16:22:55 ----D---- C:\Windows\de-DE
2009-12-23 16:22:53 ----D---- C:\Windows\system32\de
2009-12-23 16:22:53 ----D---- C:\Windows\system32\0407
2009-12-23 08:29:36 ----D---- C:\Users\USER\AppData\Roaming\ATI
2009-12-23 08:10:19 ----D---- C:\Program Files\Launch Manager
2009-12-23 08:09:02 ----D---- C:\Users\USER\AppData\Roaming\InstallShield
2009-12-23 08:08:38 ----A---- C:\Windows\RtDefLvl.ini
2009-12-23 08:08:23 ----D---- C:\Windows\system32\RTCOM
2009-12-23 08:07:58 ----A---- C:\Windows\DIFxAPI.dll
2009-12-23 08:07:57 ----A---- C:\Windows\system32\SRSWOW.dll
2009-12-23 08:07:57 ----A---- C:\Windows\system32\SRSTSXT.dll
2009-12-23 08:07:56 ----A---- C:\Windows\system32\RtkPgExt.dll
2009-12-23 08:07:56 ----A---- C:\Windows\system32\RtkCoInst.dll
2009-12-23 08:07:56 ----A---- C:\Windows\system32\RtkAPO.dll
2009-12-23 08:07:56 ----A---- C:\Windows\RtlUpd.exe
2009-12-23 08:07:56 ----A---- C:\Windows\RtHDVCpl.exe
2009-12-23 08:07:55 ----D---- C:\Program Files\Realtek
2009-12-23 08:07:54 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-23 08:07:40 ----A---- C:\Windows\RtlExUpd.dll
2009-12-23 08:07:36 ----D---- C:\Program Files\Common Files\InstallShield
2009-12-23 08:06:24 ----D---- C:\Program Files\ATI
2009-12-23 08:05:40 ----SHD---- C:\Windows\Installer
2009-12-23 08:04:44 ----D---- C:\Program Files\ATI Technologies
2009-12-23 08:04:25 ----A---- C:\Windows\system32\Oemdspif.dll
2009-12-23 08:04:24 ----A---- C:\Windows\system32\atipdlxx.dll
2009-12-23 08:04:24 ----A---- C:\Windows\system32\atioglxx.dll
2009-12-23 08:04:24 ----A---- C:\Windows\system32\Ati2evxx.exe
2009-12-23 08:04:24 ----A---- C:\Windows\system32\Ati2evxx.dll
2009-12-23 08:04:24 ----A---- C:\Windows\system32\ati2edxx.dll
2009-12-23 08:03:30 ----A---- C:\Windows\system32\streamci.dll
2009-12-23 08:01:35 ----A---- C:\Windows\system32\dxgi.dll
2009-12-23 08:01:35 ----A---- C:\Windows\system32\d3d10core.dll
2009-12-23 08:01:35 ----A---- C:\Windows\system32\d3d10.dll
2009-12-23 07:59:19 ----A---- C:\Windows\system32\qmgr.dll
2009-12-23 07:57:44 ----A---- C:\Windows\system32\cdd.dll
2009-12-23 07:56:14 ----A---- C:\Windows\system32\hcrstco.dll
2009-12-23 07:56:14 ----A---- C:\Windows\system32\hccoin.dll
2009-12-23 07:55:45 ----D---- C:\fsc.tmp
2009-12-23 07:46:03 ----D---- C:\Users\USER\AppData\Roaming\Identities
2009-12-23 07:45:52 ----SD---- C:\Users\USER\AppData\Roaming\Microsoft
2009-12-23 07:45:48 ----RA---- C:\Windows\system32\XceedCry.dll
2009-12-23 07:44:28 ----SHD---- C:\Programme
2009-12-23 07:44:28 ----SHD---- C:\ProgramData\Vorlagen
2009-12-23 07:44:28 ----SHD---- C:\ProgramData\Startmenü
2009-12-23 07:44:28 ----SHD---- C:\ProgramData\Favoriten
2009-12-23 07:44:28 ----SHD---- C:\ProgramData\Dokumente
2009-12-23 07:44:28 ----SHD---- C:\ProgramData\Anwendungsdaten
2009-12-23 07:44:28 ----SHD---- C:\Program Files\Gemeinsame Dateien
2009-12-23 07:44:28 ----SHD---- C:\Dokumente und Einstellungen
2009-12-23 07:31:10 ----D---- C:\Windows\SoftwareDistribution
2009-12-23 07:28:33 ----D---- C:\Windows\Debug
2009-12-23 07:26:52 ----D---- C:\Windows\Prefetch
2009-12-23 07:26:42 ----SHD---- C:\System Volume Information

======List of files/folders modified in the last 1 months======

2010-01-10 13:40:36 ----D---- C:\Windows\system32\drivers
2010-01-10 13:40:34 ----RD---- C:\Program Files
2010-01-10 13:38:08 ----D---- C:\Windows
2010-01-10 09:04:56 ----D---- C:\Windows\System32
2010-01-10 09:04:56 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-01-10 09:04:55 ----D---- C:\Windows\inf
2010-01-07 01:17:48 ----A---- C:\Windows\system.ini
2010-01-07 01:14:30 ----D---- C:\Windows\AppPatch
2010-01-07 01:14:29 ----D---- C:\Program Files\Common Files
2010-01-05 15:50:21 ----D---- C:\ProgramData
2010-01-05 10:54:09 ----D---- C:\Windows\system32\de-DE
2010-01-05 10:50:30 ----D---- C:\Windows\winsxs
2010-01-05 10:46:57 ----D---- C:\Windows\system32\catroot2
2010-01-04 20:34:47 ----D---- C:\Windows\system32\catroot
2010-01-03 18:35:17 ----D---- C:\Program Files\Common Files\microsoft shared
2010-01-03 16:25:13 ----D---- C:\Program Files\Internet Explorer
2010-01-03 16:25:12 ----D---- C:\Windows\system32\migration
2010-01-03 16:25:11 ----D---- C:\Windows\system32\en-US
2010-01-03 16:25:11 ----D---- C:\Windows\PolicyDefinitions
2009-12-30 16:19:36 ----D---- C:\Windows\system32\WDI
2009-12-30 13:06:39 ----D---- C:\Windows\servicing
2009-12-30 12:38:08 ----A---- C:\Windows\win.ini
2009-12-29 01:25:34 ----D---- C:\Windows\Microsoft.NET
2009-12-29 01:25:26 ----RSD---- C:\Windows\assembly
2009-12-29 00:56:50 ----SD---- C:\Windows\Downloaded Program Files
2009-12-29 00:56:09 ----D---- C:\Windows\rescache
2009-12-29 00:51:35 ----D---- C:\Windows\system32\wbem
2009-12-29 00:51:34 ----D---- C:\Windows\system32\SLUI
2009-12-29 00:34:28 ----RSD---- C:\Windows\Fonts
2009-12-29 00:30:12 ----D---- C:\Program Files\Windows Media Player
2009-12-28 23:32:47 ----SD---- C:\ProgramData\Microsoft
2009-12-28 23:17:15 ----ASH---- C:\Program Files\desktop.ini
2009-12-28 23:10:19 ----D---- C:\Program Files\Windows Calendar
2009-12-28 23:10:18 ----D---- C:\Windows\system32\ras
2009-12-28 23:10:18 ----D---- C:\Windows\system32\icsxml
2009-12-28 23:10:18 ----D---- C:\Program Files\Windows Mail
2009-12-28 23:10:18 ----D---- C:\Program Files\Common Files\System
2009-12-28 23:10:16 ----D---- C:\Program Files\Windows Defender
2009-12-28 23:10:09 ----D---- C:\Windows\system32\manifeststore
2009-12-28 23:10:08 ----D---- C:\Program Files\Windows Sidebar
2009-12-28 23:10:06 ----D---- C:\Windows\system32\XPSViewer
2009-12-28 15:46:36 ----D---- C:\Windows\system32\NDF
2009-12-28 15:41:09 ----D---- C:\Windows\system32\Tasks
2009-12-28 15:31:33 ----D---- C:\Program Files\MSN
2009-12-23 16:22:55 ----D---- C:\Program Files\Windows Photo Gallery
2009-12-23 16:22:55 ----D---- C:\Program Files\Windows Collaboration
2009-12-23 16:22:55 ----D---- C:\Program Files\Movie Maker
2009-12-23 16:22:54 ----D---- C:\Windows\WindowsMobile
2009-12-23 16:22:54 ----D---- C:\Windows\system32\winrm
2009-12-23 16:22:54 ----D---- C:\Windows\system32\oobe
2009-12-23 16:22:54 ----D---- C:\Windows\system32\migwiz
2009-12-23 16:22:54 ----D---- C:\Windows\system32\Branding
2009-12-23 16:22:54 ----D---- C:\Windows\MSAgent
2009-12-23 16:22:54 ----D---- C:\Windows\IME
2009-12-23 16:22:54 ----D---- C:\Windows\DigitalLocker
2009-12-23 16:22:53 ----D---- C:\Windows\system32\WCN
2009-12-23 16:22:53 ----D---- C:\Windows\system32\sysprep
2009-12-23 16:22:53 ----D---- C:\Windows\system32\slmgr
2009-12-23 16:22:53 ----D---- C:\Windows\system32\setup
2009-12-23 16:22:53 ----D---- C:\Windows\system32\Printing_Admin_Scripts
2009-12-23 16:22:53 ----D---- C:\Windows\system32\MUI
2009-12-23 16:22:53 ----D---- C:\Windows\system32\DriverStore
2009-12-23 16:22:53 ----D---- C:\Windows\system32\com
2009-12-23 16:22:53 ----D---- C:\Windows\system32\Boot
2009-12-23 07:55:45 ----D---- C:\Windows\Logs
2009-12-23 07:55:19 ----D---- C:\Windows\system32\restore
2009-12-23 07:45:51 ----RD---- C:\Users
2009-12-23 07:44:28 ----D---- C:\Program Files\Windows NT
2009-12-23 07:44:09 ----D---- C:\Windows\system32\CodeIntegrity

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Hotkey;Hotkey; C:\Windows\system32\drivers\Hotkey.sys [2003-04-28 9867]
R1 SAVOnAccess;SAVOnAccess; C:\Windows\system32\DRIVERS\savonaccess.sys [2006-11-03 61760]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-09-05 1183744]
R3 CmBatt;Treiber für Microsoft-ACPI-Kontrollmethodenkompatible Batterie; C:\Windows\system32\DRIVERS\CmBatt.sys [2009-12-28 14208]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-01-02 1668456]
R3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2007-01-08 2313216]
R3 RTL8023xp;NDIS-x86-Treiber für Realtek 10/100-Netzwerkkartenfamilie; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2006-11-02 47104]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2009-12-28 11264]
S1 mailKmd;mailKmd; C:\Windows\system32\drivers\mailKmd.sys []
S3 catchme;catchme; \??\C:\Users\USER\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
S4 JRAID;JRAID; C:\Windows\system32\drivers\jraid.sys [2007-05-09 48640]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2007-01-08 557056]
R2 SAVAdminService;Sophos Anti-Virus Statusreporter; C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe [2006-10-04 69632]
R2 SAVService;Sophos Anti-Virus; C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe [2006-10-04 86016]
R2 Sophos AutoUpdate Service;Sophos AutoUpdate Service; C:\Program Files\Sophos\AutoUpdate\ALsvc.exe [2007-01-31 167936]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R3 WisLMSvc;WisLMSvc; C:\Program Files\Launch Manager\WisLMSvc.exe [2006-11-17 118784]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------
Code:
info.txt logfile of random's system information tool 1.06 2010-01-10 14:20:03

======Uninstall list======

Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Java(TM) 6 Update 17-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216017FF}
Launch Manager V1.4.4-->C:\Program Files\InstallShield Installation Information\{D0846526-66DD-4DC9-A02C-98F9A2806812}\setup.exe -runfromtemp -l0x0007 -removeonly
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - deu\setup.exe
Microsoft .NET Framework 3.5 Language Pack SP1 - deu-->MsiExec.exe /I{052FDD78-A6EA-3187-8386-C82F4CA3A929}
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office Live Add-in 1.4-->MsiExec.exe /I{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110407-6000-11D3-8CFE-0150048383C9}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Mozilla Firefox (3.0.11)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -l0x7  -removeonly
Sophos Anti-Virus-->MsiExec.exe /X{09C6BF52-6DBA-4A97-9939-B6C24E4738BF}
Sophos AutoUpdate-->MsiExec.exe /X{15C418EB-7675-42BE-B2B3-281952DA014D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Windows Live Call-->MsiExec.exe /I{5FC68772-6D56-41C6-9DF1-24E868198AE6}
Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe
Windows Live Essentials-->MsiExec.exe /I{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}
Windows Live ID-Anmelde-Assistent-->MsiExec.exe /X{10A44844-4465-456E-8C97-80BDD4F68845}
Windows Live Messenger-->MsiExec.exe /X{41E654A9-26D0-4EAC-854B-0FA824FFFABB}
Windows Live-Uploadtool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
WinRAR archiver-->C:\Program Files\WinRAR\uninstall.exe
Wireless LAN Driver-->C:\Program Files\InstallShield Installation Information\{8842825B-C865-40D3-89FD-A48A942195B4}\setup.exe -runfromtemp -l0x0009 -removeonly

======Security center information======

AV: Sophos Anti-Virus (disabled) (outdated)
AS: Windows-Defender
AS: Sophos Anti-Virus (disabled) (outdated)

======System event log======

Computer Name: USER-PC
Event Code: 7036
Message: Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" befindet sich jetzt im Status "Ausgeführt".
Record Number: 38601
Source Name: Service Control Manager
Time Written: 20100110111907.000000-000
Event Type: Informationen
User:

Computer Name: USER-PC
Event Code: 7036
Message: Dienst "Windows Modules Installer" befindet sich jetzt im Status "Ausgeführt".
Record Number: 38602
Source Name: Service Control Manager
Time Written: 20100110111910.000000-000
Event Type: Informationen
User:

Computer Name: USER-PC
Event Code: 7036
Message: Dienst "Windows Modules Installer" befindet sich jetzt im Status "Beendet".
Record Number: 38603
Source Name: Service Control Manager
Time Written: 20100110112910.000000-000
Event Type: Informationen
User:

Computer Name: USER-PC
Event Code: 7036
Message: Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" befindet sich jetzt im Status "Beendet".
Record Number: 38604
Source Name: Service Control Manager
Time Written: 20100110113537.000000-000
Event Type: Informationen
User:

Computer Name: USER-PC
Event Code: 7036
Message: Dienst "Anwendungsinformationen" befindet sich jetzt im Status "Ausgeführt".
Record Number: 38605
Source Name: Service Control Manager
Time Written: 20100110123228.000000-000
Event Type: Informationen
User:

=====Application event log=====

Computer Name: USER-PC
Event Code: 6
Message: Virus 'Mal/Iframe-A' wurde erkannt in "C:\Users\USER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\1KBEGK2N\view[1].asp"

Record Number: 1925
Source Name: Sophos Anti-Virus
Time Written: 20100110123746.000000-000
Event Type: Warnung
User: NT-AUTORITÄT\LOKALER DIENST

Computer Name: USER-PC
Event Code: 6
Message: Virus 'Mal/Iframe-A' wurde erkannt in "C:\Users\USER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\DNCQRN6O\view[1].asp"

Record Number: 1926
Source Name: Sophos Anti-Virus
Time Written: 20100110123748.000000-000
Event Type: Warnung
User: NT-AUTORITÄT\LOKALER DIENST

Computer Name: USER-PC
Event Code: 6
Message: Virus 'Mal/Iframe-A' wurde erkannt in "C:\Users\USER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\M050ZNUR\view[2].asp"

Record Number: 1927
Source Name: Sophos Anti-Virus
Time Written: 20100110123750.000000-000
Event Type: Warnung
User: NT-AUTORITÄT\LOKALER DIENST

Computer Name: USER-PC
Event Code: 6
Message: Virus 'Mal/Iframe-A' wurde erkannt in "C:\Users\USER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PMW15O73\view[1].asp"

Record Number: 1928
Source Name: Sophos Anti-Virus
Time Written: 20100110123754.000000-000
Event Type: Warnung
User: NT-AUTORITÄT\LOKALER DIENST

Computer Name: USER-PC
Event Code: 6
Message: Virus 'Mal/Iframe-A' wurde erkannt in "C:\Users\USER\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PMW15O73\view[2].asp"

Record Number: 1929
Source Name: Sophos Anti-Virus
Time Written: 20100110123754.000000-000
Event Type: Warnung
User: NT-AUTORITÄT\LOKALER DIENST

=====Security event log=====

Computer Name: USER-PC
Event Code: 5038
Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.

Dateiname:        \Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys       
Record Number: 3160
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100110130719.159634-000
Event Type: Überwachung gescheitert
User:

Computer Name: USER-PC
Event Code: 5038
Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.

Dateiname:        \Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys       
Record Number: 3161
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100110130719.190884-000
Event Type: Überwachung gescheitert
User:

Computer Name: USER-PC
Event Code: 5038
Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.

Dateiname:        \Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys       
Record Number: 3162
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100110130719.237759-000
Event Type: Überwachung gescheitert
User:

Computer Name: USER-PC
Event Code: 5038
Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.

Dateiname:        \Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys       
Record Number: 3163
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100110130719.315884-000
Event Type: Überwachung gescheitert
User:

Computer Name: USER-PC
Event Code: 5038
Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.

Dateiname:        \Device\HarddiskVolume2\Windows\winsxs\x86_microsoft-windows-tcpip-binaries_31bf3856ad364e35_6.0.6001.22497_none_b34d67897fc6850f\tcpip.sys       
Record Number: 3164
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20100110130719.362759-000
Event Type: Überwachung gescheitert
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;%CommonProgramFiles%\Microsoft Shared\Windows Live;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=1

-----------------EOF-----------------


Alle Zeitangaben in WEZ +1. Es ist jetzt 20:59 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19