Trojaner-Board - TR/URSNIF.18.34 in C:\WINDOWS\SYSTEM32\clipgers.dll => Ebay & Bank Konto betroffen

Hallo Coverflow,
hallo Zusammen,

erst einmal Danke für Eure Hilfe:-). So jetzt komme ich heute einmal wieder dazu das PC-Problem anzugehen.

Sorry aber die Scanliste von W*W.Virustotal.C*M nicht gespeichert.

Die DLL habe ich über FileASSASIN von Malwarebyte / Anti Mailware entfernt (nach Neustart war die Datei gelöscht).

zu 1. Malwarebytes Anti-Malware

Code:

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org
 

Datenbank Version: 4894
 

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702
 

22.10.2010 06:53:06

mbam-log-2010-10-22 (06-53-06).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)

Durchsuchte Objekte: 459237

Laufzeit: 13 Stunde(n), 3 Minute(n), 54 Sekunde(n)
 

Infizierte Speicherprozesse: 0

Infizierte Speichermodule: 0

Infizierte Registrierungsschlüssel: 0

Infizierte Registrierungswerte: 0

Infizierte Dateiobjekte der Registrierung: 0

Infizierte Verzeichnisse: 0

Infizierte Dateien: 7
 

Infizierte Speicherprozesse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung:

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien:

C:\Programme\SlySoft\CloneDVDmobile\Patch.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.

C:\Programme\CryptLoad\ocr\netload.in\asmCaptcha\test.exe (Malware.Packer) -> Quarantined and deleted successfully.

C:\Programme\CryptLoad\ocr\rapidshare.com\asmCaptcha\test.exe (Malware.Packer) -> Quarantined and deleted successfully.

C:\Programme\CryptLoad\router\FRITZ!Box\nc.exe (PUP.KeyLogger) -> Quarantined and deleted successfully.

C:\Dokumente und Einstellungen\XXX\Favoriten\Error Cleaner.url (Rogue.Link) -> Quarantined and deleted successfully.

C:\Dokumente und Einstellungen\XXX\Favoriten\Privacy Protector.url (Rogue.Link) -> Quarantined and deleted successfully.

C:\Dokumente und Einstellungen\XXX\Favoriten\Spyware&Malware Protection.url (Rogue.Link) -> Quarantined and deleted successfully.

zu 2. C:\rsit\log.txt
[code]
RSIT Logfile:

Code:

Logfile of random's system information tool 1.08 (written by random/random)

Run by XXX at 2010-10-22 06:55:20

Microsoft Windows XP Professional Service Pack 3

System drive C: has 22 GB (14%) free of 153 GB

Total RAM: 2815 MB (67% free)
 

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 06:55:38, on 22.10.2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal
 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\Programme\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programme\Avira\AntiVir Desktop\sched.exe

C:\Programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe

C:\Programme\Avira\AntiVir Desktop\avguard.exe

C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Programme\Gemeinsame Dateien\Autodata Limited Shared\Service\ADCDLicSvc.exe

C:\Programme\Seagate\Basics\Service\SyncServicesBasics.exe

C:\Programme\Java\jre6\bin\jqs.exe

C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\SOUNDMAN.EXE

C:\Programme\Windows Defender\MSASCui.exe

C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Programme\Avira\AntiVir Desktop\avgnt.exe

C:\Programme\FreePDF_XP\fpassist.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programme\Microsoft ActiveSync\wcescomm.exe

C:\PROGRA~1\MI3AA1~1\rapimgr.exe

C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\Programme\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe

C:\Programme\Internet Explorer\iexplore.exe

C:\Programme\Internet Explorer\iexplore.exe

C:\Programme\Malwarebytes' Anti-Malware\mbam.exe

C:\Programme\JAM Software\TreeSize Professional\tsizepro.exe

C:\WINDOWS\system32\taskmgr.exe

C:\Programme\Internet Explorer\iexplore.exe

C:\@@\RSIT.exe

C:\Programme\trend micro\XXX.exe
 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [Windows Defender] "C:\Programme\Windows Defender\MSASCui.exe" -hide

O4 - HKLM\..\Run: [PSQLLauncher] "C:\Programme\ThinkVantage Fingerprint Software\launcher.exe" /startup

O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\wcescomm.exe"

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: p6_19_erinnerung.lnk = C:\Programme\phase6\phase6_19\WinStart\p6erinnerung.exe

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - hxxp://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1261488279718

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: AAV UpdateService - Unknown owner - C:\Programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe

O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Autodata Limited License Service - Autodata Limited - C:\Programme\Gemeinsame Dateien\Autodata Limited Shared\Service\ADCDLicSvc.exe

O23 - Service: Basics Service - Seagate Technology LLC - C:\Programme\Seagate\Basics\Service\SyncServicesBasics.exe

O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Programme\Bonjour\mDNSResponder.exe

O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe

O23 - Service: ServiceLayer - Nokia - C:\Programme\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
 

--

End of file - 6299 bytes
 

======Scheduled tasks folder======
 

C:\WINDOWS\tasks\Google Software Updater.job

C:\WINDOWS\tasks\MP Scheduled Scan.job
 

======Registry dump======
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2009-08-23 41760]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]

JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-08-23 73728]
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-11-15 77824]

"StartCCC"=C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]

"Windows Defender"=C:\Programme\Windows Defender\MSASCui.exe [2006-11-03 866584]

"PSQLLauncher"=C:\Programme\ThinkVantage Fingerprint Software\launcher.exe [2006-04-25 31232]

"avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

"FreePDF Assistant"=C:\Programme\FreePDF_XP\fpassist.exe [2008-07-22 357376]

"QuickTime Task"=C:\Programme\QuickTime\qttask.exe [2009-09-05 417792]

"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

"H/PC Connection Agent"=C:\Programme\Microsoft ActiveSync\wcescomm.exe [2006-11-13 1289000]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]

C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe [2007-08-31 140568]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]

C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe [2007-08-31 907040]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]

C:\Programme\SlySoft\AnyDVD\AnyDVDtray.exe [2009-03-08 2542528]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\basicsmssmenu]

C:\Programme\Seagate\Basics\Basics Status\MaxMenuMgrBasics.exe [2007-10-09 169328]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ClipIncSrvTray]

C:\Programme\Tobit ClipInc\Player\ClipIncTray.exe [2009-03-16 668424]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreePDF Assistant]

C:\Programme\FreePDF_XP\fpassist.exe [2008-07-22 357376]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H/PC Connection Agent]

C:\Programme\Microsoft ActiveSync\wcescomm.exe [2006-11-13 1289000]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]

C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe [2006-09-11 218032]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

C:\Programme\iTunes\iTunesHelper.exe [2009-09-21 305440]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OSSelectorReinstall]

C:\Programme\Gemeinsame Dateien\Acronis\Acronis Disk Director\oss_reinstall.exe [2007-03-09 2224104]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]

C:\Programme\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]

C:\WINDOWS\system32\\PSDrvCheck.exe [2004-03-11 406016]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

C:\Programme\QuickTime\qttask.exe [2009-09-05 417792]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]

C:\Programme\Gemeinsame Dateien\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe []
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

C:\Programme\Java\jre6\bin\jusched.exe [2009-08-23 149280]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]

C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe [2007-08-31 2622232]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead AutoDetector v2]

C:\Programme\Gemeinsame Dateien\Ulead Systems\AutoDetector\monitor.exe [2005-05-23 90112]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS12 Preload]

C:\Programme\Corel\Corel VideoStudio 12\uvPL.exe [2008-06-09 397456]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]

C:\Programme\Winamp\winampa.exe []
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]

C:\Programme\Windows Media Player\WMPNSCFG.exe [2006-11-03 204288]
 

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"WMPNetworkSvc"=2

"UleadBurningHelper"=2

"TVersityMediaServer"=2

"TryAndDecideService"=2

"SQLAgent$PINNACLESYS"=3

"PnkBstrA"=2

"PinnacleSys.MediaServer"=2

"ose"=3

"MSSQLServerADHelper"=3

"MSSQL$PINNACLESYS"=2

"JavaQuickStarterService"=2

"idsvc"=3

"IDriverT"=3

"AcrSch2Svc"=2

"Transbase"=2

"RoxWatch9"=2

"RoxMediaDB9"=3

"RoxLiveShare9"=2

"Roxio Upnp Server 9"=2

"Roxio UPnP Renderer 9"=3

"ClipInc001"=2
 

C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart

p6_19_erinnerung.lnk - C:\Programme\phase6\phase6_19\WinStart\p6erinnerung.exe
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

C:\WINDOWS\system32\Ati2evxx.dll [2008-07-04 139264]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]

C:\WINDOWS\system32\psqlpwd.dll [2006-04-25 40448]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WINDOW~4\MpShHook.dll [2006-11-03 83224]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"authentication packages"=msv1_0

relog_ap

"notification packages"=scecli

psqlpwd
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"HonorAutoRunSetting"=1
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Programme\TVersity\Media Server\MediaServer.exe"="C:\Programme\TVersity\Media Server\MediaServer.exe:*:Enabled:TVersity Media Server"

"C:\Programme\devolo\easyshare\easyshare.exe"="C:\Programme\devolo\easyshare\easyshare.exe:*:Enabled:devolo EasyShare"

"C:\Programme\Pinnacle\Studio 10\programs\RM.exe"="C:\Programme\Pinnacle\Studio 10\programs\RM.exe:*:Enabled:Render Manager"

"C:\Programme\Pinnacle\Studio 10\programs\Studio.exe"="C:\Programme\Pinnacle\Studio 10\programs\Studio.exe:*:Enabled:Studio"

"C:\Programme\Pinnacle\Studio 10\programs\PMSRegisterFile.exe"="C:\Programme\Pinnacle\Studio 10\programs\PMSRegisterFile.exe:*:Enabled:PMSRegisterFile"

"C:\Programme\Pinnacle\Studio 10\programs\umi.exe"="C:\Programme\Pinnacle\Studio 10\programs\umi.exe:*:Enabled:umi"

"C:\Programme\Pinnacle\Studio 12\Programs\RM.exe"="C:\Programme\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"

"C:\Programme\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Programme\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"

"C:\Programme\Pinnacle\Studio 12\Programs\umi.exe"="C:\Programme\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"

"C:\Programme\Pinnacle\Shared Files\Programs\MediaManager\PMSManager.exe"="C:\Programme\Pinnacle\Shared Files\Programs\MediaManager\PMSManager.exe:*:Enabled:Pinnacle VideoSpin"

"C:\Programme\ExtendView\Extendview.exe"="C:\Programme\ExtendView\Extendview.exe:*:Enabled:silex ExtendView"

"C:\Programme\games\flatout2 GER DVD\FlatOut2.exe"="C:\Programme\games\flatout2 GER DVD\FlatOut2.exe:*:Enabled:FlatOut2"

"C:\Programme\Java\jre1.6.0_07\launch4j-tmp\JDownloader.exe"="C:\Programme\Java\jre1.6.0_07\launch4j-tmp\JDownloader.exe:*:Enabled:Java(TM) Platform SE binary"

"C:\WINDOWS\system32\java.exe"="C:\WINDOWS\system32\java.exe:*:Enabled:Java(TM) Platform SE binary"

"C:\Programme\Rocrail\rocrail.exe"="C:\Programme\Rocrail\rocrail.exe:*:Enabled:rocrail"

"C:\Programme\Java\jre6\launch4j-tmp\JDownloader.exe"="C:\Programme\Java\jre6\launch4j-tmp\JDownloader.exe:*:Enabled:Java(TM) Platform SE binary"

"C:\Dokumente und Einstellungen\XXX\temp\TeamViewer\Version4\TeamViewer.exe"="C:\Dokumente und Einstellungen\XXX\temp\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application"

"C:\Programme\Microsoft ActiveSync\wcescomm.exe"="C:\Programme\Microsoft ActiveSync\wcescomm.exe:*:Enabled:ActiveSync Connection Manager"

"C:\Programme\Microsoft ActiveSync\rapimgr.exe"="C:\Programme\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"

"C:\Programme\Microsoft ActiveSync\WCESMgr.exe"="C:\Programme\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

"C:\BMWgroup\ETKLokal\javaclient\jre1.5.0_11\bin\java.exe"="C:\BMWgroup\ETKLokal\javaclient\jre1.5.0_11\bin\java.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"

"C:\BMWgroup\ETKLokal\javaclient\ETK.exe"="C:\BMWgroup\ETKLokal\javaclient\ETK.exe:*:Enabled:ETK"

"C:\Programme\Codemasters\Race Driver 2\RD2.exe"="C:\Programme\Codemasters\Race Driver 2\RD2.exe:*:Enabled:RaceDriver 2 Application"

"C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe"="C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe:*:Enabled:ClipInc Server"

"C:\Programme\Tobit ClipInc\Player\ClipInc-Player.exe"="C:\Programme\Tobit ClipInc\Player\ClipInc-Player.exe:*:Enabled:ClipInc Player"

"C:\Programme\Java\jre6\bin\javaw.exe"="C:\Programme\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"

"C:\Programme\Java\jre6\bin\java.exe"="C:\Programme\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"

"C:\Programme\FlightGear\bin\win32\fgfs.exe"="C:\Programme\FlightGear\bin\win32\fgfs.exe:*:Enabled:fgfs"

"C:\Programme\TmNationsForever\TmForever.exe"="C:\Programme\TmNationsForever\TmForever.exe:*:Enabled:TmForever"

"C:\Programme\Bonjour\mDNSResponder.exe"="C:\Programme\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"

"C:\Programme\iTunes\iTunes.exe"="C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes"

"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"

"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Eine DLL-Datei als Anwendung ausführen"

"C:\Programme\devolo\informer\devinf.exe"="C:\Programme\devolo\informer\devinf.exe:*:Enabled:devolo Informer"

"H:\Daten\Install\Computer\TeamViewer\Portable\TeamViewer.exe"="H:\Daten\Install\Computer\TeamViewer\Portable\TeamViewer.exe:*:Enabled:TeamViewer"

"C:\Programme\Teamviewer\TeamViewer.exe"="C:\Programme\Teamviewer\TeamViewer.exe:*:Enabled:TeamViewer"

"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Disabled:Windows Explorer"

"C:\Programme\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe"="C:\Programme\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7"
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Programme\Microsoft ActiveSync\rapimgr.exe"="C:\Programme\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"

"C:\Programme\Microsoft ActiveSync\wcescomm.exe"="C:\Programme\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"

"C:\Programme\Microsoft ActiveSync\WCESMgr.exe"="C:\Programme\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

"C:\Programme\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe"="C:\Programme\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7"
 
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options]

"Debugger="
 

======List of files/folders created in the last 1 months======
 

2010-10-22 06:55:20 ----D---- C:\rsit

2010-10-22 06:54:25 ----D---- C:\@@

2010-10-19 20:20:00 ----SHD---- C:\found.000

2010-10-18 20:04:55 ----D---- C:\Dokumente und Einstellungen\XXX\Anwendungsdaten\Malwarebytes

2010-10-18 20:04:46 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys

2010-10-18 20:04:44 ----D---- C:\Programme\Malwarebytes' Anti-Malware

2010-10-18 20:04:44 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

2010-10-18 20:04:44 ----A---- C:\WINDOWS\system32\drivers\mbam.sys

2010-10-17 13:37:37 ----A---- C:\WINDOWS\ntbtlog.txt

2010-10-14 14:17:04 ----D---- C:\Programme\Gemeinsame Dateien\Remote Control Software Common

2010-10-14 14:16:57 ----D---- C:\Programme\Logitech

2010-10-14 14:16:40 ----D---- C:\Programme\Gemeinsame Dateien\Remote Control USB Driver

2010-10-14 14:15:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$

2010-10-14 14:15:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2279986$

2010-10-14 14:15:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$

2010-10-14 14:15:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$

2010-10-14 14:14:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$

2010-10-14 14:14:42 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$

2010-10-14 14:14:18 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$

2010-10-14 14:07:34 ----HDC---- C:\WINDOWS\$NtUninstallKB981957$

2010-10-14 14:07:25 ----A---- C:\WINDOWS\imsins.BAK

2010-10-14 14:07:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$

2010-10-02 10:30:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2158563$

2010-09-30 21:17:46 ----HDC---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{E7965846-0136-477D-BE8C-0988038003A4}

2010-09-30 21:17:23 ----D---- C:\Programme\ArConOpen
 

======List of files/folders modified in the last 1 months======
 

2010-10-22 06:55:37 ----D---- C:\Programme\Trend Micro

2010-10-22 06:55:28 ----D---- C:\WINDOWS\Temp

2010-10-22 06:55:12 ----D---- C:\WINDOWS\Prefetch

2010-10-20 20:30:15 ----D---- C:\Daten

2010-10-20 18:03:30 ----HD---- C:\WINDOWS\inf

2010-10-20 17:58:14 ----SD---- C:\WINDOWS\Tasks

2010-10-20 17:57:36 ----D---- C:\WINDOWS\system32\CatRoot2

2010-10-20 17:54:16 ----SHD---- C:\WINDOWS\CSC

2010-10-19 20:07:33 ----A---- C:\WINDOWS\SchedLgU.Txt

2010-10-19 17:36:55 ----D---- C:\Dokumente und Einstellungen\XXX\Anwendungsdaten\vlc

2010-10-19 17:17:25 ----D---- C:\Programme\Mozilla Firefox

2010-10-18 22:31:16 ----D---- C:\WINDOWS\system32

2010-10-18 22:24:50 ----D---- C:\@

2010-10-18 20:04:46 ----D---- C:\WINDOWS\system32\drivers

2010-10-18 20:04:44 ----RD---- C:\Programme

2010-10-17 13:37:37 ----AD---- C:\WINDOWS

2010-10-14 14:17:50 ----SHD---- C:\WINDOWS\Installer

2010-10-14 14:17:50 ----SHD---- C:\Config.Msi

2010-10-14 14:17:04 ----D---- C:\Programme\Gemeinsame Dateien

2010-10-14 14:16:56 ----HD---- C:\Programme\InstallShield Installation Information

2010-10-14 14:16:43 ----DC---- C:\WINDOWS\system32\DRVSTORE

2010-10-14 14:15:37 ----RSHDC---- C:\WINDOWS\system32\dllcache

2010-10-14 14:15:32 ----HD---- C:\WINDOWS\$hf_mig$

2010-10-14 14:15:07 ----D---- C:\WINDOWS\WinSxS

2010-10-14 14:14:02 ----D---- C:\Programme\Internet Explorer

2010-10-14 14:13:49 ----D---- C:\WINDOWS\ie8updates

2010-10-14 14:07:53 ----D---- C:\WINDOWS\Debug

2010-10-14 14:07:45 ----A---- C:\WINDOWS\system32\MRT.exe

2010-10-09 16:25:05 ----D---- C:\Dokumente und Einstellungen\XXX\Anwendungsdaten\Winamp

2010-10-09 16:25:05 ----D---- C:\Dokumente und Einstellungen\XXX\Anwendungsdaten\Media Player Classic

2010-10-09 16:25:00 ----D---- C:\WINDOWS\Minidump

2010-10-09 16:21:02 ----D---- C:\Programme\CCleaner

2010-10-09 11:35:05 ----SD---- C:\WINDOWS\Downloaded Program Files

2010-10-08 19:45:57 ----D---- C:\Programme\Bonjour

2010-10-08 19:28:23 ----D---- C:\WINDOWS\Microsoft.NET

2010-10-08 19:28:22 ----RSD---- C:\WINDOWS\assembly

2010-10-08 18:59:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

2010-10-06 20:29:41 ----D---- C:\Dokumente und Einstellungen\XXX\Anwendungsdaten\Seivyp

2010-10-02 16:43:19 ----D---- C:\Download

2010-09-30 21:06:24 ----D---- C:\Programme\JDownloader
 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R0 ohci1394;Texas Instruments OHCI-konformer IEEE 1394-Hostcontroller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]

R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-04-08 70400]

R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2003-09-06 6944]

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-23 43528]

R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]

R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2008-08-07 129248]

R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-05-23 685816]

R0 tdrpman;Acronis Try&Decide and Restore Points filter; C:\WINDOWS\system32\DRIVERS\tdrpman.sys [2008-08-07 368736]

R0 timounter;Acronis True Image Backup Archive Explorer; C:\WINDOWS\system32\DRIVERS\timntr.sys [2008-08-07 441760]

R0 Vax347b;Vax347b; C:\WINDOWS\system32\DRIVERS\Vax347b.sys [2005-04-25 159616]

R0 Vax347s;Vax347s; C:\WINDOWS\System32\Drivers\Vax347s.sys [2004-04-30 5248]

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-01-18 77696]

R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2005-12-22 5685]

R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys []

R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-04-29 96104]

R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-01-30 23976]

R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\C:\Programme\UltraISO\drivers\ISODrive.sys []

R1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]

R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys []

R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-04-08 54272]

R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-06-10 28520]

R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]

R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-07 56816]

R2 NPF_devolo;NetGroup Packet Filter Driver (devolo); C:\WINDOWS\system32\drivers\npf_devolo.sys [2008-11-28 35840]

R2 ROB_A;Pinnacle WDM PCTV Audio Capture; C:\WINDOWS\system32\DRIVERS\rob_a.sys [2003-02-10 17664]

R2 ROB_V;Pinnacle WDM PCTV Video Capture; C:\WINDOWS\system32\drivers\rob_v.sys [2003-04-11 125568]

R2 smihlp;SMI helper driver; \??\C:\Programme\ThinkVantage Fingerprint Software\smihlp.sys []

R2 tifsfilter;Acronis True Image FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2008-08-07 44416]

R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-11-17 2297664]

R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2009-01-30 103488]

R3 Arp1394;1394-ARP-Clientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]

R3 ASAPIW2K;ASAPIW2K; C:\WINDOWS\System32\Drivers\ASAPIW2K.sys [2005-02-23 11264]

R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-07-04 3230720]

R3 ATIAVAIW;ATI T200 Unified AVStream service; C:\WINDOWS\system32\DRIVERS\atinavt2.sys [2008-05-15 171520]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]

R3 hidusb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]

R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]

R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []

R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12288]

R3 ms_mpu401;Microsoft MPU-401 MIDI UART-Treiber; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]

R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-14 5810]

R3 NIC1394;1394-Netzwerktreiber; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]

R3 pctvvbi;PCTVVBI; C:\WINDOWS\system32\DRIVERS\pctvvbi.sys [2002-11-11 6400]

R3 Pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2002-06-17 14604]

R3 RimVSerPort;RIM Virtual Serial Port v2; C:\WINDOWS\system32\DRIVERS\RimSerial.sys [2007-01-18 26496]

R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2008-04-14 5888]

R3 TcUsb;TC USB Kernel Driver; C:\WINDOWS\System32\Drivers\tcusb.sys [2006-04-25 28800]

R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]

R3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2004-08-19 189568]

S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]

S3 drhard;DRHARD; \??\C:\WINDOWS\system32\DRIVERS\DRHARD.SYS []

S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []

S3 FTDIBUS;USB Serial Converter Driver; C:\WINDOWS\system32\drivers\ftdibus.sys [2008-03-13 57536]

S3 MPE;BDA MPE-Filter; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]

S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]

S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]

S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]

S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2009-10-06 17664]

S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-10-06 22016]

S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]

S3 PLCMPR5;PLCMPR5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PLCMPR5.SYS []

S3 PLCNDIS5;PLCNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PLCNDIS5.SYS []

S3 RimUsb;BlackBerry-Gerät; C:\WINDOWS\System32\Drivers\RimUsb.sys [2006-11-07 22272]

S3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\rt2870.sys [2009-03-04 709248]

S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]

S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2005-12-22 80272]

S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2005-12-22 10864]

S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2005-12-22 137884]

S3 streamip;BDA-IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]

S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-10-06 7936]

S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-08-28 40448]

S3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]

S3 usbscan;USB-Scannertreiber; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]

S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-14 26112]

S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2006-11-06 28672]

S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]

S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]

S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]
 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R2 AAV UpdateService;AAV UpdateService; C:\Programme\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [2008-10-24 128296]

R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Programme\Avira\AntiVir Desktop\sched.exe [2009-06-10 108289]

R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2009-08-05 185089]

R2 Apple Mobile Device;Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-07-04 561152]

R2 Autodata Limited License Service;Autodata Limited License Service; C:\Programme\Gemeinsame Dateien\Autodata Limited Shared\Service\ADCDLicSvc.exe [2008-12-06 72704]

R2 Basics Service;Basics Service; C:\Programme\Seagate\Basics\Service\SyncServicesBasics.exe [2007-10-09 124280]

R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-08-23 153376]

R2 StarWindService;StarWind iSCSI Service; C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [2005-04-02 217600]

R2 WinDefend;Windows Defender; C:\Programme\Windows Defender\MsMpEng.exe [2006-11-03 13592]

R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-07-03 593920]

S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]

S3 Bonjour Service;Bonjour-Dienst; C:\Programme\Bonjour\mDNSResponder.exe [2008-12-12 238888]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]

S3 iPod Service;iPod-Dienst; C:\Programme\iPod\bin\iPodService.exe [2009-09-21 545568]

S3 ServiceLayer;ServiceLayer; C:\Programme\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]

S4 AcrSch2Svc;Acronis Scheduler2 Service; C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe [2007-08-31 427288]

S4 ClipInc001;ClipInc 001; C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe [2009-05-27 2230024]

S4 HotKey Service;HotKey Service; C:\WINDOWS\HKeySer.exe []

S4 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]

S4 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

S4 MSSQL$PINNACLESYS;MSSQL$PINNACLESYS; C:\Programme\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [2005-05-04 9150464]

S4 MSSQLServerADHelper;MSSQLServerADHelper; C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2005-05-03 73728]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

S4 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

S4 PinnacleSys.MediaServer;Pinnacle Systems Media Service; C:\Programme\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe [2006-01-19 49152]

S4 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2008-12-14 66872]

S4 Roxio UPnP Renderer 9;Roxio UPnP Renderer 9; C:\Programme\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe [2007-04-22 88824]

S4 Roxio Upnp Server 9;Roxio Upnp Server 9; C:\Programme\Roxio\Digital Home 9\RoxioUpnpService9.exe [2007-04-22 359160]

S4 RoxLiveShare9;LiveShare P2P Server 9; C:\Programme\Gemeinsame Dateien\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe []

S4 RoxMediaDB9;RoxMediaDB9; C:\Programme\Gemeinsame Dateien\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe []

S4 RoxWatch9;Roxio Hard Drive Watcher 9; C:\Programme\Gemeinsame Dateien\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe []

S4 SQLAgent$PINNACLESYS;SQLAgent$PINNACLESYS; C:\Programme\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [2005-05-03 323584]

S4 Transbase;Transbase; C:\BMWgroup\ETKLokal\transbase\tbmux32.exe [2004-08-05 385024]

S4 TryAndDecideService;Acronis Try And Decide Service; C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe [2007-08-31 498872]

S4 TVersityMediaServer;TVersityMediaServer; C:\Programme\TVersity\Media Server\MediaServer.exe [2008-07-22 794624]

S4 UleadBurningHelper;Ulead Burning Helper; C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe [2008-06-09 53392]

S4 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576]
 

-----------------EOF-----------------

--- --- ---

C:\rsit\info.txt
[code]
info.txtRSIT Logfile:

Code:

logfile of random's system information tool 1.08 2010-10-22 06:55:41
 

======Uninstall list======
 

            -->MsiExec.exe /X{E9F81423-211E-46B6-9AE0-38568BC5CF6F}

-->"C:\Programme\InstallShield Installation Information\{BB8AE808-F003-4C7F-B56B-8C80EEAFFE23}\setup.exe" --u:{BB8AE808-F003-4C7F-B56B-8C80EEAFFE23}

-->MsiExec.exe /I{07159635-9DFE-4105-BFC0-2817DB540C68}

-->MsiExec.exe /I{0D397393-9B50-4C52-84D5-77E344289F87}

-->MsiExec.exe /I{619CDD8A-14B6-43A1-AB6C-0F4EE48CE048}

-->MsiExec.exe /I{83FFCFC7-88C6-41C6-8752-958A45325C82}

-->MsiExec.exe /I{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}

-->MsiExec.exe /X{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

3DMark03-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{FF35F637-72B9-43BE-A281-06EB2854393A}\Setup.exe" 
 

-l0x9 

AAVUpdateManager-->MsiExec.exe /X{DF6FE172-006A-4324-AF7F-ACFE4BA290FE}

ACDSee Pro 2.5-->MsiExec.exe /I{2D95950E-6D76-43E7-94A5-D9DBA2FD29E4}

AcGasSynchro-->"C:\Programme\AcGasSynchro\unins000.exe"

Acronis*Disk Director Suite-->MsiExec.exe /X{2300EE96-0A41-4FAB-BD03-989EC44577A0}

Acronis*True*Image*Home-->MsiExec.exe /X{E5343B27-55DF-40BD-9FCF-A643C1331E8A}

Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe

Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_Plugin.exe -maintain plugin

Adobe Reader 9 - Deutsch-->MsiExec.exe /I{AC76BA86-7AD7-1031-7B44-A90000000001}

Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"

Adobe SVG Viewer 3.0-->C:\Programme\Gemeinsame Dateien\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Programme\Gemeinsame Dateien\Adobe\SVG Viewer 3.0\Uninstall\Install.log

Advanced IP Scanner v1.5-->C:\Programme\Advanced IP Scanner\uninstal.exe

AeroFly Professional Deluxe-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation 
 

Information\{8B3E5A90-1F6E-4FAF-B84F-C306C8A80809}\setup.exe" -l0x7 

AIMP2-->C:\Programme\AIMP2\UnInstall.exe

Any Video Converter 2.6.2-->"C:\Programme\Any Video Converter\unins000.exe"

Apple Application Support-->MsiExec.exe /I{0C34B801-6AEC-4667-B053-03A67E2D0415}

Apple Mobile Device Support-->MsiExec.exe /I{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}

Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}

ArCon-->C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{E7965846-0136-477D-BE8C-0988038003A4}\ArConOpen.exe

ArConOpen-->"C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{E7965846-0136-477D-BE8C-0988038003A4}\ArConOpen.exe" REMOVE=TRUE MODIFY=FALSE

ATI - Software Uninstall Utility-->C:\Programme\ATI Technologies\UninstallAll\AtiCimUn.exe

ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation 
 

Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0 

ATI Display Driver-->rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

Avira AntiVir Personal - Free Antivirus-->C:\Programme\Avira\AntiVir Desktop\setup.exe /REMOVE

Biet-O-Matic v2.10.1-->C:\PROGRA~1\BIET-O~1\UNWISE.EXE C:\PROGRA~1\BIET-O~1\install.log

BlackBerry Desktop Software 4.2.2-->MsiExec.exe /I{98605CAA-5F52-44EC-8AF7-2EC1A4C35F2D}

BlackBerry Desktop Software 4.2.2-->MsiExec.exe /i{98605CAA-5F52-44EC-8AF7-2EC1A4C35F2D}

BMW EBA-->C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{21000000-0000-0000-0000-000000000000} /l1031 AddRemove

BMW Standard Tools-->C:\WINDOWS\unins000.exe

Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}

Boris Graffiti-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation 
 

Information\{262BF2CD-601D-4F43-919C-4B00B1D1F338}\setup.exe" -l0x7  -removeonly

CARSOFT BMW V6.5-->C:\WINDOWS\IsUninst.exe -fC:\Programme\CARSOFT\BMW\Uninst.isu

Catalyst Control Center - Branding-->MsiExec.exe /I{FA3A247D-437A-455E-A88F-7EB6E5F9E799}

CCleaner-->"C:\Programme\CCleaner\uninst.exe"

CloneDVDmobile-->"C:\Programme\SlySoft\CloneDVDmobile\CloneDVDmobile-uninst.exe" /D="C:\Programme\SlySoft\CloneDVDmobile"

Corel VideoStudio 12-->C:\Programme\InstallShield Installation Information\{F0FDF9C9-1DDC-401F-B638-36F1CAE8A875}\setup.exe -runfromtemp -l0x0407

devolo dLAN-Konfigurationsassistent-->C:\Programme\devolo\setup.exe /remove:dlanconf

devolo EasyClean-->C:\Programme\devolo\setup.exe /remove:easyclean

devolo EasyShare-->C:\Programme\devolo\setup.exe /remove:easyshare

devolo Informer-->C:\Programme\devolo\setup.exe /remove:dslmon

DiscAPI (Studio 10)-->MsiExec.exe /X{A77F3C2D-50CC-4A29-A1FB-1E018BE4DCA2}

DivX-->C:\Programme\DivX\DivXCodecUninstall.exe /CODEC

dm Fotowelt-->"C:\Programme\dm\dm Fotowelt\uninstall.exe"

Dr. Hardware 2010 10.1d-->"C:\Programme\Dr. Hardware 2010\unins000.exe"

Drive Manager-->"C:\Programme\InstallShield Installation Information\{48B0F38D-1913-44F3-99AA-D4C55A2B038E}\setup.exe" -runfromtemp -l0x0407 -removeonly

Drive Manager-->MsiExec.exe /I{48B0F38D-1913-44F3-99AA-D4C55A2B038E}

DVBViewer Pro-->"C:\Programme\DVBViewer\unins000.exe"

DVR-Studio Pro 2-->"C:\Programme\DVR-Studio Pro 2\Uninstall.exe" "C:\Programme\DVR-Studio Pro 2\install.log"

EPSON Scan-->C:\Programme\epson\escndv\setup\setup.exe /r

ETK (Lokal)-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{EC17C160-E2F0-47CC-86D4-140AE22EC38E}\setup.exe" 
 

-l0x7 

Femitec Gas-->"C:\Programme\Femitec Gas\unins000.exe"

ffdshow [rev 1723] [2007-12-24]-->"C:\Programme\K-Lite Codec Pack\ffdshow\unins000.exe"

FlightGear v0.9.10-->"C:\Programme\FlightGear\unins000.exe"

FMS-->C:\Programme\FMS\Uninstall.exe

FreePDF XP (Remove only)-->C:\Programme\FreePDF_XP\fpsetup.exe /r

Gleisrechner 3.3-->"C:\Programme\Gleisrechner 3.3\unins000.exe"

Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}

Google Updater-->"C:\Programme\Google\Google Updater\GoogleUpdater.exe" -uninstall

GPL Ghostscript 8.62-->C:\Programme\gs\uninstgs.exe "C:\Programme\gs\gs8.62\uninstal.txt"

GPL Ghostscript 8.64-->C:\Programme\gs\uninstgs.exe "C:\Programme\gs\gs8.64\uninstal.txt"

GPL Ghostscript Fonts-->C:\Programme\gs\uninstgs.exe "C:\Programme\gs\fonts\uninstal.txt"

Green Line 1 Sprachtrainer-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation 
 

Information\{BC1ECCD7-EE86-4231-AF1B-6E52B49A4532}\setup.exe" -l0x7  -removeonly

HiJackThis-->MsiExec.exe /X{45A66726-69BC-466B-A7A4-12FCBA4883D7}

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"

Hotfix für Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"

Hotfix für Windows XP (KB2158563)-->"C:\WINDOWS\$NtUninstallKB2158563$\spuninst\spuninst.exe"

Hotfix für Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"

Hotfix für Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"

Hotfix für Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"

IrfanView (remove only)-->C:\Programme\IrfanView\iv_uninstall.exe

iTunes-->MsiExec.exe /I{DA34FE93-5DC5-48E0-ACC8-A5389E05BB51}

Java(TM) 6 Update 16-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216016FF}

Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}

K-Lite Mega Codec Pack 4.1.7-->"C:\Programme\K-Lite Codec Pack\unins000.exe"

Logitech Harmony Remote Software 7-->C:\Programme\InstallShield Installation Information\{5C6F884D-680C-448B-B4C9-22296EE1B206}\setup.exe -runfromtemp -l0x0007 -removeonly

Magic Bullet Looks Studio-->C:\WINDOWS\unvise32.exe C:\Programme\Pinnacle\Studio 12\Plugins\RTFx\mblooksstudio.log

Malwarebytes' Anti-Malware-->"C:\Programme\Malwarebytes' Anti-Malware\unins000.exe"

Marvell Miniport Driver-->MsiExec.exe /X{C950420B-4182-49EA-850A-A6A2ABF06C6B}

Mediaport-->C:\PROGRA~1\TECHNI~1\MEDIAP~1\UNWISE.EXE C:\PROGRA~1\TECHNI~1\MEDIAP~1\INSTALL.LOG

Microsoft .NET Framework 1.1 German Language Pack-->MsiExec.exe /X{E78BFA60-5393-4C38-82AB-E8019E464EB4}

Microsoft .NET Framework 1.1 Security Update (KB2416447)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" 
 

"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp"

Microsoft .NET Framework 1.1 Security Update (KB979906)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp"

Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

Microsoft ActiveSync-->MsiExec.exe /I{99052DB7-9592-4522-A558-5417BBAD48EE}

Microsoft AutoRoute 2007-->MsiExec.exe /I{C82185E8-C27B-4EF4-2007-3333BC2C2B6D}

Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"

Microsoft Kernel-Mode Driver Framework Feature Pack 1.7-->"C:\WINDOWS\$NtUninstallWdf01007$\spuninst\spuninst.exe"

Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110407-6000-11D3-8CFE-0150048383C9}

Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}

Microsoft SQL Server Desktop Engine (PINNACLESYS)-->MsiExec.exe /X{E09B48B5-E141-427A-AB0C-D3605127224A}

Microsoft User-Mode Driver Framework Feature Pack 1.7-->"C:\WINDOWS\$NtUninstallWudf01007$\spuninst\spuninst.exe"

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}

Modelleisenbahn 2008-->"C:\Programme\Modelleisenbahn 2008\unins000.exe"

Mozilla Firefox (3.5.13)-->C:\Programme\Mozilla Firefox\uninstall\helper.exe

Mp3tag v2.44-->C:\Programme\Mp3tag\Mp3tagUninstall.EXE

MSVC80_x86_v2-->MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}

MSVC80_x86-->MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}

MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}

MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

MSXML 6.0 Parser (KB925673)-->MsiExec.exe /I{FE9126DB-5F84-495A-BB46-3C724F1C2D08}

Native Instruments Service Center-->"C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D7CFB71A-972A-44FF-AE44-8780EB53ABB2}\Service Center Setup.exe" REMOVE=TRUE MODIFY=FALSE

Native Instruments Service Center-->C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D7CFB71A-972A-44FF-AE44-8780EB53ABB2}\Service Center Setup.exe

Native Instruments Traktor-->"C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{BC13C66E-D01E-4443-A1D1-35EEDF3A964A}\Traktor Setup.exe" REMOVE=TRUE MODIFY=FALSE

Native Instruments Traktor-->C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{BC13C66E-D01E-4443-A1D1-35EEDF3A964A}\Traktor Setup.exe

Need for Speed Underground 2-->C:\Programme\EA GAMES\Need for Speed Underground 2\EAUninstall.exe

Need for Speed™ Undercover-->MsiExec.exe /X{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}

New Coding Database 1.2-->C:\Programme\NewCodingDatabase\uninst.exe

Nokia Connectivity Cable Driver-->MsiExec.exe /I{6869591A-7DD8-46D2-837F-57CBF7358955}

Nokia PC Suite-->C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Installations\{9249D7E7-33E7-4CC8-BB0B-3DF3C3CB2568}\Nokia_PC_Suite_7_1_40_1_ger.exe

Nokia PC Suite-->MsiExec.exe /I{9249D7E7-33E7-4CC8-BB0B-3DF3C3CB2568}

Norton Security Scan-->C:\Programme\NortonInstaller\{397E31AA-0D78-4649-A01C-339D73A2ED35}\NSS\LicenseType\2.3.0.44\InstStub.exe /X

PC Connectivity Solution-->MsiExec.exe /I{6E0352EE-6F0D-4FBC-B1B8-4FF032C78BE0}

PC Probe II-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{F7338FA3-DAB5-49B2-900D-0AFB5760C166}\Setup.exe" -l0x7 

Pestering Birds-->"C:\Programme\games\Pestering Birds\unins000.exe"

phase6_19-->MsiExec.exe /X{65D70656-D248-4C83-B594-E3029C43B37A}

Pinnacle Instant DVD Recorder-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation 
 

Information\{EF781A5C-58F5-4BFD-87F9-E4F14D382F25}\setup.exe" -l0x7 UNINSTALL

Pinnacle MediaServer-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation 
 

Information\{460CE8B9-6EC2-458A-90D4-691631ECE9D9}\setup.exe" -l0x7 UNINSTALL

Pinnacle PCTV-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{3C02ED4F-46B0-4E9E-87F7-47AEBA4031C8}\Setup.exe" -l0x7 
 

-L0x7 UNINSTALL

Pinnacle Studio 12 Ultimate Plugins-->MsiExec.exe /I{D1860E6E-520E-4380-8433-E58E8F88B473}

Pinnacle Studio 12-->MsiExec.exe /I{D041EB9E-890A-4098-8F94-51DA194AC72A}

Pinnacle Video Treiber-->MsiExec.exe /X{5EB90C06-964F-4195-B83E-BD7E55C88415}

Pistonsoft MP3 Tags Editor-->"C:\Programme\Pistonsoft MP3 Tags Editor\Uninstall.exe" "C:\Programme\Pistonsoft MP3 Tags Editor\install.log"

PowerDVD-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe"  -uninstall

proDAD Vitascene 1.0-->"C:\Programme\proDAD\Vitascene-1.0\uninstall.exe" uninstall spcp PATHVERSION 1.0 MAINNAME Vitascene

QuickTime-->MsiExec.exe /I{A429C2AE-EBF1-4F81-A221-1C115CAADDAD}

Race Driver 2-->C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{D474A0E8-4421-43C0-BE8E-F454F91E2E2A} /l1031 

Radmin Viewer 3.4-->MsiExec.exe /X{9B8A821E-1FCE-45D1-8BEC-738F5AAB20D8}

Railroad & Co. Version 5.8-->C:\Programme\Rocomotion 5.8\Uninstall.exe

Railroad Professional 0.8.8-->C:\WINDOWS\st6unst.exe -n "C:\Programme\Railroad Professional 0.8.8\ST6UNST.000"  

Ralink RT2870 Wireless LAN Card-->C:\Programme\InstallShield Installation Information\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}\setup.exe -runfromtemp -l0x0009 -removeonly

RAPID (Studio 10)-->MsiExec.exe /X{EEECE229-49F6-4851-A73A-99B058221F8C}

Real Alternative 1.9.0-->"C:\Programme\Real Alternative\unins000.exe"

RealSpeak Solo fur Deutsch - Steffi-->MsiExec.exe /I{BFBB91DB-9F0F-4A9C-9669-A97DA3512CF2}

Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" 
 

REMOVE

Recuva (remove only)-->"C:\Programme\Recuva\uninst.exe"

RedMon - Redirection Port Monitor-->C:\WINDOWS\system32\unredmon.exe

Remote Control USB Driver-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation 
 

Information\{8471021C-F529-43DE-84DF-3612E10F58C4}\setup.exe" -l0x9  -removeonly

Rocrail 1.2.999 snapshot-svn3933-unicode-->"C:\Programme\Rocrail\unins000.exe"

Roxio Media Manager-->MsiExec.exe /X{66D171AA-670F-4309-9C74-5BA7F7DBA0B3}

SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe

SAMSUNG Mobile Composite Device Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe

Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe

SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe

SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe

Samsung PC Studio 3-->"C:\Programme\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -runfromtemp -l0x0007 -removeonly

SDFormatter-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{5A347920-4AFC-11D5-9FB0-800649886934}\setup.exe" 

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8894F19-59C8-38D2-8A75-36C0CCE56A5B} /qb+ 
 

REBOOTPROMPT=""

Sicherheitsupdate für Windows Internet Explorer 8 (KB2183461)-->"C:\WINDOWS\ie8updates\KB2183461-IE8\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Internet Explorer 8 (KB2360131)-->"C:\WINDOWS\ie8updates\KB2360131-IE8\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Internet Explorer 8 (KB978207)-->"C:\WINDOWS\ie8updates\KB978207-IE8\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Internet Explorer 8 (KB981332)-->"C:\WINDOWS\ie8updates\KB981332-IE8\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Media Player (KB2378111)-->"C:\WINDOWS\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Media Player (KB975558)-->"C:\WINDOWS\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Media Player (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows Media Player 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2079403)-->"C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2115168)-->"C:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2121546)-->"C:\WINDOWS\$NtUninstallKB2121546$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2160329)-->"C:\WINDOWS\$NtUninstallKB2160329$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2229593)-->"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2259922)-->"C:\WINDOWS\$NtUninstallKB2259922$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2279986)-->"C:\WINDOWS\$NtUninstallKB2279986$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2286198)-->"C:\WINDOWS\$NtUninstallKB2286198$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2296011)-->"C:\WINDOWS\$NtUninstallKB2296011$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2347290)-->"C:\WINDOWS\$NtUninstallKB2347290$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2360937)-->"C:\WINDOWS\$NtUninstallKB2360937$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB2387149)-->"C:\WINDOWS\$NtUninstallKB2387149$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB923689)-->"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB969897)-->"C:\WINDOWS\$NtUninstallKB969897$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB979687)-->"C:\WINDOWS\$NtUninstallKB979687$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB980436)-->"C:\WINDOWS\$NtUninstallKB980436$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB981322)-->"C:\WINDOWS\$NtUninstallKB981322$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB981852)-->"C:\WINDOWS\$NtUninstallKB981852$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB981957)-->"C:\WINDOWS\$NtUninstallKB981957$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB981997)-->"C:\WINDOWS\$NtUninstallKB981997$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB982132)-->"C:\WINDOWS\$NtUninstallKB982132$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB982214)-->"C:\WINDOWS\$NtUninstallKB982214$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB982665)-->"C:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe"

Sicherheitsupdate für Windows XP (KB982802)-->"C:\WINDOWS\$NtUninstallKB982802$\spuninst\spuninst.exe"

silex ExtendView-->C:\Programme\Gemeinsame Dateien\InstallShield\Driver\8\Intel 32\IDriver.exe /M{54BDB9A2-521D-499F-B735-929730AC83E1} 

SmartSound Quicktracks Plugin-->C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E} 

Speedpassion USB Link V1.31-->C:\Programme\Speedpassion USB Link V1.31\uninstall.exe

Sprachtrainer Fonts-->MsiExec.exe /X{FBCF2ED3-AFB5-475E-BF9A-30BEAD366FBC}

Steuer-Spar-Erklärung 2008-->MsiExec.exe /I{BBE67B86-FCD7-4D3C-8B00-063DEAD8E30C}

Steuer-Spar-Erklärung 2009-->MsiExec.exe /X{32E00E5E-22B1-4D5A-9DC2-CD75E087A5E6}

Studio 10.5.2 Patch-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation 
 

Information\{ED775CE1-E9F7-41C4-BE91-C925E6D5F513}\setup.exe" -l0x7  UNINSTALL -removeonly

Studio 10-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{3CB05291-F546-458E-A796-B5BCF5A3CDC4}\Setup2.exe" 
 

-l0x7  UNINSTALL

SyncToy 2.0 Beta-->MsiExec.exe /I{F3666943-0411-41D1-8015-8B572B6E91A7}

Sysadm-->C:\WINDOWS\unin0407.exe -fC:\BMW95\sysadm\uninst\DeIsL1.isu

Tis-->C:\WINDOWS\unin0407.exe -fC:\BMW95\tis\uninst\DeIsL1.isu

TmNationsForever-->"C:\Programme\TmNationsForever\unins000.exe"

Tobit.Software clipinc.fx-->C:\WINDOWS\CISUnins.exe "C:\Programme\Tobit ClipInc\Server\CISUnins.inf"

Trackplanner 1.1.9-->"C:\Programme\Trackplanner\unins000.exe"

TreeSize Professional 4.0.2-->"C:\Programme\JAM Software\TreeSize Professional\unins000.exe"

Turbo Lister 2-->C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{69640730-B830-4C24-BB5C-222DA1260548} 

TVersity Codec Pack 1.2-->C:\Programme\TVersity Codec Pack\uninst.exe

TVersity Media Server  1.0.0.3 RC2-->C:\Programme\TVersity\Media Server\uninst.exe

Ulead PhotoImpact 11-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation 
 

Information\{C8550C86-A712-4219-AD4C-038C9FD1D149}\Setup.exe" -l0x7 

UltraISO Premium V9.33-->"C:\Programme\UltraISO\unins000.exe"

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""

Update für Windows Internet Explorer 8 (KB976662)-->"C:\WINDOWS\ie8updates\KB976662-IE8\spuninst\spuninst.exe"

Update für Windows Internet Explorer 8 (KB978506)-->"C:\WINDOWS\ie8updates\KB978506-IE8\spuninst\spuninst.exe"

Update für Windows XP (KB2141007)-->"C:\WINDOWS\$NtUninstallKB2141007$\spuninst\spuninst.exe"

Update für Windows XP (KB2345886)-->"C:\WINDOWS\$NtUninstallKB2345886$\spuninst\spuninst.exe"

Update für Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"

Update für Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"

Update für Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"

Update für Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"

Update für Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"

Update für Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"

Update für Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"

Update für Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"

Update für Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"

USB Keyboard with Fingerprint Reader Hotkey Driver-->UninstIt.exe KUF0452.ini

VAG-COM Release 704.1-->C:\Ross-Tech\VAG-COM\UnInstall.exe

VCRedistSetup-->MsiExec.exe /I{3921A67A-5AB1-4E48-9444-C71814CF3027}

Virtual DJ - Atomix Productions-->C:\PROGRA~1\VIRTUA~1\UNWISE.EXE C:\PROGRA~1\VIRTUA~1\INSTALL.LOG

VLC media player 1.0.3-->C:\Programme\VLC\uninstall.exe

Wichtiges Update für Windows Media Player 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"

Winamp-->"C:\Programme\Winamp\UninstWA.exe"

Windows Defender-->MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}

Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"

Windows Media Connect-->"C:\WINDOWS\$NtUninstallWMCSetup$\spuninst\spuninst.exe"

Windows Media Format 11 runtime-->"C:\Programme\Windows Media Player\wmsetsdk.exe" /UninstallAll

Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"

Windows Media Player 11-->"C:\Programme\Windows Media Player\Setup_wm.exe" /Uninstall

Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"

Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}

Windows-Treiberpaket - Nokia Modem  (06/01/2009 7.01.0.4)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_0777326F40B753DD4E385F058ADB286B70A301FE\nokbtmdm.inf

Windows-Treiberpaket - Nokia Modem  (10/05/2009 4.2)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_AAB746D5658CCF4CAE7A35CED5F0ADA3C447A973\nokia_bluetooth.inf

Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0)-->C:\PROGRA~1\DIFX\B4723E9A0713E5B1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.inf

WinRail 7.0 Demo-->C:\PROGRA~1\WINRAI~1.0DE\UNWISE.EXE C:\PROGRA~1\WINRAI~1.0DE\INSTALL.LOG

WinRAR archiver-->C:\Programme\WinRAR\uninstall.exe

WinTrack V9.0 3D-->"C:\Programme\WinTrack9\unins000.exe"

World of Warcraft FREE Trial-->MsiExec.exe /X{02EBDBB9-4600-41D3-B566-40CB861511D2}
 

======Security center information======
 

AV: AntiVir Desktop
 

======System event log======
 

Computer Name: ARBEITSZIMMER

Event Code: 117

Message: Downshift detected
 

Record Number: 1311

Source Name: yukonwxp

Time Written: 20100804182702.000000+120

Event Type: Informationen

User: 
 

Computer Name: ARBEITSZIMMER

Event Code: 7036

Message: Dienst "Windows-Bilderfassung (WIA)" befindet sich jetzt im Status "Ausgeführt".
 

Record Number: 1310

Source Name: Service Control Manager

Time Written: 20100804182701.000000+120

Event Type: Informationen

User: 
 

Computer Name: ARBEITSZIMMER

Event Code: 51

Message: Bei einem Auslagerungsvorgang wurde ein Fehler festgestellt. Betroffen ist Gerät \Device\Harddisk3\D.
 

Record Number: 1309

Source Name: Disk

Time Written: 20100804182659.000000+120

Event Type: Warnung

User: 
 

Computer Name: ARBEITSZIMMER

Event Code: 51

Message: Bei einem Auslagerungsvorgang wurde ein Fehler festgestellt. Betroffen ist Gerät \Device\Harddisk3\D.
 

Record Number: 1308

Source Name: Disk

Time Written: 20100803213033.000000+120

Event Type: Warnung

User: 
 

Computer Name: ARBEITSZIMMER

Event Code: 51

Message: Bei einem Auslagerungsvorgang wurde ein Fehler festgestellt. Betroffen ist Gerät \Device\Harddisk3\D.
 

Record Number: 1307

Source Name: Disk

Time Written: 20100803204903.000000+120

Event Type: Warnung

User: 
 

=====Application event log=====
 

Computer Name: ARBEITSZIMMER

Event Code: 105

Message: 

Record Number: 3513

Source Name: HotKey Service

Time Written: 20090601113316.000000+120

Event Type: Informationen

User: 
 

Computer Name: ARBEITSZIMMER

Event Code: 105

Message: The service was started.
 

Record Number: 3512

Source Name: ATI Smart

Time Written: 20090601113309.000000+120

Event Type: Informationen

User: 
 

Computer Name: ARBEITSZIMMER

Event Code: 1517

Message: Die Registrierung des Benutzers "ARBEITSZIMMER\XXX" wurde gespeichert, obwohl  eine Anwendung oder ein Dienst auf die Registrierung während der Abmeldung zugegriffen hat. Der von der Registrierung 
 

des Benutzers verwendete Speicher wurde nicht freigegeben. Der Upload der Registrierung wird durchgeführt, wenn diese nicht mehr verwendet wird. 
 
 

Dies wird oft durch Dienste verursacht, die unter einem Benutzerkonto ausgeführt werden. Versuchen Sie diese so zu Konfigurieren, dass sie unter den Konten "Lokaler Dienst" oder "Netzwerkdienst" ausgeführt 
 

werden.
 

Record Number: 3511

Source Name: Userenv

Time Written: 20090531232947.000000+120

Event Type: Warnung

User: NT-AUTORITÄT\SYSTEM
 

Computer Name: ARBEITSZIMMER

Event Code: 1524

Message: Die Klassenregistrierungsdatei kann nicht entladen werden, da sie weiterhin von anderen Anwendungen bzw. Diensten verwendet wird. Die Datei wird entladen, wenn sie nicht mehr verwendet wird. 
 
 
 

Record Number: 3510

Source Name: Userenv

Time Written: 20090531232941.000000+120

Event Type: Warnung

User: ARBEITSZIMMER\XXX
 

Computer Name: ARBEITSZIMMER

Event Code: 11014

Message: 

Record Number: 3509

Source Name: RouteService

Time Written: 20090531133513.000000+120

Event Type: Warnung

User: 
 

======Environment variables======
 

"ComSpec"=%SystemRoot%\system32\cmd.exe

"Path"=C:\Programme\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Programme\ATI Technologies\ATI.ACE\Core-Static;C:\Programme\Microsoft SQL 
 

Server\80\Tools\Binn\;C:\Programme\Gemeinsame Dateien\Ulead Systems\MPEG;C:\Programme\Pinnacle\Shared Files\;c:\ediabas\bin;C:\Programme\Gemeinsame Dateien\Roxio Shared\DLLShared\;C:\Programme\Gemeinsame 
 

Dateien\Roxio Shared\DLLShared\;C:\Programme\Gemeinsame Dateien\Roxio Shared\9.0\DLLShared\;C:\Programme\QuickTime\QTSystem\;C:\Programme\Samsung\Samsung PC Studio 3\

"windir"=%SystemRoot%

"FP_NO_HOST_CHECK"=NO

"OS"=Windows_NT

"PROCESSOR_ARCHITECTURE"=x86

"PROCESSOR_LEVEL"=15

"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 7 Stepping 10, AuthenticAMD

"PROCESSOR_REVISION"=070a

"NUMBER_OF_PROCESSORS"=1

"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

"TEMP"=%SystemRoot%\TEMP

"TMP"=%SystemRoot%\TEMP

"ediabas_config_dir"=c:\ediabas\bin

"RoxioCentral"=C:\Programme\Gemeinsame Dateien\Roxio Shared\9.0\Roxio Central33\

"CLASSPATH"=.;C:\Programme\Java\jre6\lib\ext\QTJava.zip

"QTJAVA"=C:\Programme\Java\jre6\lib\ext\QTJava.zip
 

-----------------EOF-----------------

--- --- ---

zu 3. Versteckte Dateien sind bei mir sowieso sichtbar (=> durchgeführt)

zu 4. hjtscanlist.txt

Code:

                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

                        º                                    º 

                                    hjtscanlist v2.0              

                        º                                    º 

                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
 

Microsoft Windows XP [Version 5.1.2600]

 

 

C:
 

  22.10.2010 06:57      C:\@@ --------- 0 

  22.10.2010 06:55      C:\rsit --------- 0 

  20.10.2010 20:30      C:\Daten --------- 0 

        C:\pagefile.sys ---------  

  19.10.2010 20:20      C:\found.000 --------- 0 

  18.10.2010 22:24      C:\@ --------- 0 

  18.10.2010 20:04      C:\Programme --------- 0 

  17.10.2010 13:37      C:\WINDOWS --------- 0 

  14.10.2010 14:17      C:\Config.Msi --------- 0 

  02.10.2010 16:43      C:\Download --------- 0 

  13.09.2010 22:28      C:\Program Files --------- 0 

  04.08.2010 19:32      C:\Dokumente und Einstellungen --------- 0 

  17.06.2010 20:05      C:\Video_Technisat --------- 0 

  05.05.2010 22:11      C:\temp --------- 0 

  21.04.2010 22:07      C:\Haushaltsbuch.xls --------- 600576 

  27.02.2010 12:55      C:\windiag.iso --------- 305152 

  31.01.2010 13:48      C:\Seagate temp --------- 0 

  07.11.2009 20:37      C:\fpRedmon.log --------- 8296 

  23.09.2009 19:38      C:\ErrLog.txt --------- 0 

  12.09.2009 11:30      C:\msxml3.msi --------- 1078272 

  15.08.2009 14:06      C:\boot.ini --------- 211 

  04.03.2009 21:14      C:\InstallHelper.log --------- 422 

  02.03.2009 23:47      C:\fat32format.exe --------- 49233 

  08.02.2009 15:30      C:\Setup.log --------- 90 

  08.02.2009 15:29      C:\ibmugcd.bat --------- 333 

  08.02.2009 15:28      C:\ver.txt --------- 43 

  08.02.2009 15:28      C:\cdlttr.txt --------- 5  

  12.01.2009 23:51      C:\EC-APPS --------- 0 

  12.01.2009 23:51      C:\Entwicklungsdaten --------- 0 

  12.01.2009 23:51      C:\NFS-Backup --------- 0 

  11.01.2009 19:34      C:\cm75f --------- 0 

  29.11.2008 23:59      C:\System Volume Information --------- 0 

  24.10.2008 21:52      C:\Temp.bbl --------- 19868 

  14.09.2008 11:52      C:\MSDELog.log --------- 211900 

  14.09.2008 11:47      C:\AUTOEXEC.BAT --------- 87 

  07.09.2008 13:35      C:\MSOCache --------- 0 

  07.09.2008 10:57      C:\Install --------- 0 

  07.09.2008 10:44      C:\RECYCLER --------- 0 

  07.08.2008 16:41      C:\Treiber --------- 0 

  07.08.2008 13:42      C:\ATI --------- 0 

  07.08.2008 11:25      C:\MSDOS.SYS --------- 0 

  07.08.2008 11:25      C:\IO.SYS --------- 0 

  07.08.2008 11:25      C:\CONFIG.SYS --------- 0 

  14.04.2008 14:00      C:\ntldr --------- 251712 

  14.04.2008 14:00      C:\NTDETECT.COM --------- 47564 

  14.04.2008 14:00      C:\bootfont.bin --------- 4952 

  16.01.2008 22:51      C:\ADCDA2 --------- 0 

  06.01.2003 13:13      C:\h2format.exe --------- 57344 

----------------------------------------
 

 

C:\WINDOWS
 

  22.10.2010 02:01     C:\WINDOWS\WindowsUpdate.log --------- 2023450 

  20.10.2010 18:03     C:\WINDOWS\setupapi.log --------- 15690 

  20.10.2010 17:57     C:\WINDOWS\0.log --------- 0 

  20.10.2010 17:55     C:\WINDOWS\wiadebug.log --------- 157 

  20.10.2010 17:55     C:\WINDOWS\wiaservc.log --------- 50 

  20.10.2010 17:53     C:\WINDOWS\bootstat.dat --------- 2048 

  19.10.2010 20:07     C:\WINDOWS\SchedLgU.Txt --------- 32634 

  18.10.2010 07:10     C:\WINDOWS\ntbtlog.txt --------- 196210 

  16.10.2010 15:23     C:\WINDOWS\spupdsvc.log --------- 1084 

  14.10.2010 14:16     C:\WINDOWS\DPINST.LOG --------- 5832 

  14.10.2010 14:15     C:\WINDOWS\iis6.log --------- 67850 

  14.10.2010 14:15     C:\WINDOWS\ntdtcsetup.log --------- 12413 

  14.10.2010 14:15     C:\WINDOWS\comsetup.log --------- 20528 

  14.10.2010 14:15     C:\WINDOWS\imsins.log --------- 1393 

  14.10.2010 14:15     C:\WINDOWS\ocmsn.log --------- 3420 

  14.10.2010 14:15     C:\WINDOWS\tsoc.log --------- 28215 

  14.10.2010 14:15     C:\WINDOWS\tabletoc.log --------- 3110 

  14.10.2010 14:15     C:\WINDOWS\KB2387149.log --------- 18929 

  14.10.2010 14:15     C:\WINDOWS\MedCtrOC.log --------- 4250 

  14.10.2010 14:15     C:\WINDOWS\ocgen.log --------- 29560 

  14.10.2010 14:15     C:\WINDOWS\netfxocm.log --------- 10830 

  14.10.2010 14:15     C:\WINDOWS\msgsocm.log --------- 3090 

  14.10.2010 14:15     C:\WINDOWS\FaxSetup.log --------- 61827 

  14.10.2010 14:15     C:\WINDOWS\msmqinst.log --------- 19196 

  14.10.2010 14:15     C:\WINDOWS\updspapi.log --------- 5238 

  14.10.2010 14:15     C:\WINDOWS\imsins.BAK --------- 1393 

  14.10.2010 14:15     C:\WINDOWS\KB2279986.log --------- 25636 

  14.10.2010 14:15     C:\WINDOWS\KB2345886.log --------- 26122 

  14.10.2010 14:15     C:\WINDOWS\KB2296011.log --------- 14743 

  14.10.2010 14:15     C:\WINDOWS\KB2378111.log --------- 15953 

  14.10.2010 14:15     C:\WINDOWS\wmsetup.log --------- 618 

  14.10.2010 14:14     C:\WINDOWS\KB982132.log --------- 24386 

  14.10.2010 14:14     C:\WINDOWS\KB979687.log --------- 24171 

  14.10.2010 14:14     C:\WINDOWS\KB2360131-IE8.log --------- 19261 

  14.10.2010 14:07     C:\WINDOWS\KB981957.log --------- 19330 

  14.10.2010 14:07     C:\WINDOWS\KB2360937.log --------- 11575 

  14.10.2010 14:07     C:\WINDOWS\setuperr.log --------- 0 

  14.10.2010 14:07     C:\WINDOWS\setupact.log --------- 0 

  13.09.2010 20:58     C:\WINDOWS\~GLC0001.TMP --------- 96704 

  25.08.2010 20:26     C:\WINDOWS\Menu.INI --------- 32 

  01.04.2010 10:13     C:\WINDOWS\ALCFDRTM.VER --------- 60416 

  05.03.2010 16:23     C:\WINDOWS\RtlRack.ini --------- 169 

  20.12.2009 23:37     C:\WINDOWS\avisplitter.ini --------- 38 

  15.08.2009 14:06     C:\WINDOWS\system.ini --------- 260 

  15.08.2009 14:06     C:\WINDOWS\win.ini --------- 837 

  23.05.2009 21:54     C:\WINDOWS\awshkwv.ini --------- 1191 

  15.05.2009 17:45     C:\WINDOWS\CICUnins.exe --------- 1680648 

  15.05.2009 17:45     C:\WINDOWS\CISUnins.exe --------- 1680648 

  16.02.2009 20:14     C:\WINDOWS\ODBC.INI --------- 502 

  07.02.2009 20:14     C:\WINDOWS\Microsoft.MIF --------- 2510 

  13.01.2009 01:02     C:\WINDOWS\inpa_ist.ini --------- 247 

  12.01.2009 23:51     C:\WINDOWS\unins000.dat --------- 63372 

  12.01.2009 23:49     C:\WINDOWS\unins000.exe --------- 632357 

  06.12.2008 12:46     C:\WINDOWS\PCGWIN32.LI4 --------- 528 

  27.10.2008 22:42     C:\WINDOWS\WMSysPr9.prx --------- 316640 

  24.10.2008 21:28     C:\WINDOWS\ST6UNST.EXE --------- 74752 

  17.09.2008 21:20     C:\WINDOWS\Extendview --------- 0 

  14.09.2008 12:31     C:\WINDOWS\VFO.INI --------- 1208 

  14.09.2008 12:12     C:\WINDOWS\VFO.VST --------- 455 

  13.09.2008 12:48     C:\WINDOWS\ALCFDRTM.EXE --------- 60416 

  06.09.2008 22:42     C:\WINDOWS\nsreg.dat --------- 0 

  07.08.2008 13:44     C:\WINDOWS\ativpsrm.bin --------- 0 

  07.08.2008 12:19     C:\WINDOWS\Sti_Trace.log --------- 0 

  07.08.2008 11:28     C:\WINDOWS\REGLOCS.OLD --------- 8192 

  07.08.2008 11:25     C:\WINDOWS\control.ini --------- 0 

  07.08.2008 11:25     C:\WINDOWS\ODBCINST.INI --------- 4161 

  07.08.2008 11:24     C:\WINDOWS\WindowsShell.Manifest --------- 749 

  07.08.2008 11:23     C:\WINDOWS\vbaddin.ini --------- 37 

  07.08.2008 11:23     C:\WINDOWS\vb.ini --------- 36 

  13.05.2008 14:10     C:\WINDOWS\atiogl.xml --------- 13052 

  14.04.2008 14:00     C:\WINDOWS\NOTEPAD.EXE --------- 70144 

  14.04.2008 14:00     C:\WINDOWS\clock.avi --------- 82944 

  14.04.2008 14:00     C:\WINDOWS\twunk_32.exe --------- 25600 

  14.04.2008 14:00     C:\WINDOWS\msdfmap.ini --------- 1405 

  14.04.2008 14:00     C:\WINDOWS\desktop.ini --------- 2 

  14.04.2008 14:00     C:\WINDOWS\explorer.exe --------- 1036800 

  14.04.2008 14:00     C:\WINDOWS\Pr„riewind.bmp --------- 65954 

  14.04.2008 14:00     C:\WINDOWS\regedit.exe --------- 153600 

  14.04.2008 14:00     C:\WINDOWS\explorer.scf --------- 80 

  14.04.2008 14:00     C:\WINDOWS\Rhododendron.bmp --------- 17362 

  14.04.2008 14:00     C:\WINDOWS\TASKMAN.EXE --------- 15872 

  14.04.2008 14:00     C:\WINDOWS\Feder.bmp --------- 16730 

  14.04.2008 14:00     C:\WINDOWS\Santa Fe-Stuck.bmp --------- 65832 

  14.04.2008 14:00     C:\WINDOWS\twain_32.dll --------- 50688 

  14.04.2008 14:00     C:\WINDOWS\Blaue Spitzen 16.bmp --------- 1272 

  14.04.2008 14:00     C:\WINDOWS\Seifenblase.bmp --------- 65978 

  14.04.2008 14:00     C:\WINDOWS\SET3.tmp --------- 1246537 

  14.04.2008 14:00     C:\WINDOWS\SET4.tmp --------- 1088840 

  14.04.2008 14:00     C:\WINDOWS\SET8.tmp --------- 16825 

  14.04.2008 14:00     C:\WINDOWS\winhelp.exe --------- 257568 

  14.04.2008 14:00     C:\WINDOWS\F„cher.bmp --------- 26680 

  14.04.2008 14:00     C:\WINDOWS\winnt256.bmp --------- 48680 

  14.04.2008 14:00     C:\WINDOWS\Granit.bmp --------- 26582 

  14.04.2008 14:00     C:\WINDOWS\winnt.bmp --------- 48680 

  14.04.2008 14:00     C:\WINDOWS\hh.exe --------- 10752 

  14.04.2008 14:00     C:\WINDOWS\Kaffeetasse.bmp --------- 17062 

  14.04.2008 14:00     C:\WINDOWS\winhlp32.exe --------- 288768 

  14.04.2008 14:00     C:\WINDOWS\Zapotek.bmp --------- 9522 

  14.04.2008 14:00     C:\WINDOWS\_default.pif --------- 707 

  14.04.2008 14:00     C:\WINDOWS\twunk_16.exe --------- 49680 

  14.04.2008 14:00     C:\WINDOWS\twain.dll --------- 94800 

  14.04.2008 14:00     C:\WINDOWS\Angler.bmp --------- 17336 

  14.04.2008 14:00     C:\WINDOWS\vmmreg32.dll --------- 18944 

  12.12.2007 19:02     C:\WINDOWS\Graffiti5.2Pin.ini --------- 0 

  06.11.2007 17:59     C:\WINDOWS\DBREG.dll --------- 661568 

  04.06.2007 12:29     C:\WINDOWS\German2.ini --------- 16098 

  19.04.2007 11:19     C:\WINDOWS\DBReg.exe --------- 174144 

  27.03.2007 14:16     C:\WINDOWS\WMPrfDeu.prx --------- 33820 

  19.01.2007 11:29     C:\WINDOWS\scenelib24.ini --------- 3273 

  03.07.2006 15:31     C:\WINDOWS\tm.ini --------- 74 

  02.03.2006 02:53     C:\WINDOWS\kuf0452.cat --------- 11635 

  20.02.2006 15:50     C:\WINDOWS\AccessL.exe_old --------- 40960 

  18.02.2006 14:09     C:\WINDOWS\KUFAPP.CAB --------- 387617 

  18.02.2006 14:09     C:\WINDOWS\CopyAp.exe --------- 178176 

  13.05.2005 15:51     C:\WINDOWS\KUFSNR.INI --------- 1125 

  13.05.2005 15:51     C:\WINDOWS\KUFS.INI --------- 1135 

  13.05.2005 15:51     C:\WINDOWS\KUF0452.INI --------- 1135 

  13.05.2005 15:12     C:\WINDOWS\DelOemFile.exe --------- 245248 

  28.04.2005 16:37     C:\WINDOWS\start.bat --------- 46 

  21.04.2005 15:12     C:\WINDOWS\HKeySer.exe_old --------- 90162 

  21.04.2005 15:12     C:\WINDOWS\Uninst.ini --------- 33 

  21.04.2005 15:12     C:\WINDOWS\UNINSTIT.EXE --------- 147456 

  15.04.2005 17:31     C:\WINDOWS\HIDUSB.dll --------- 49152 

  03.12.2004 11:26     C:\WINDOWS\eSellerateEngine.dll --------- 356352 

  15.11.2004 18:20     C:\WINDOWS\SOUNDMAN.EXE --------- 77824 

  05.11.2004 16:29     C:\WINDOWS\alcupd.exe --------- 208896 

  01.09.2004 20:04     C:\WINDOWS\alcrmv.exe --------- 139264 

  29.03.2004 16:23     C:\WINDOWS\unvise32.exe --------- 90112 

  24.02.2004 12:04     C:\WINDOWS\RSETPATH.exe --------- 41219 

  17.03.2002 02:00     C:\WINDOWS\UA000106.DLL --------- 7420 

  17.03.2002 02:00     C:\WINDOWS\UA000023.DLL --------- 7420 

  06.07.2001 00:19     C:\WINDOWS\avrack.ini --------- 164 

  16.05.2001 00:49     C:\WINDOWS\WMPrfAra.prx --------- 33336 

  16.05.2001 00:49     C:\WINDOWS\WMPrfKor.prx --------- 22338 

  16.05.2001 00:49     C:\WINDOWS\wmprftrk.prx --------- 32022 

  16.05.2001 00:49     C:\WINDOWS\wmprfsve.prx --------- 33314 

  16.05.2001 00:49     C:\WINDOWS\wmprfslv.prx --------- 33580 

  16.05.2001 00:49     C:\WINDOWS\wmprfrus.prx --------- 804 

  16.05.2001 00:49     C:\WINDOWS\wmprfesp.prx --------- 35590 

  16.05.2001 00:49     C:\WINDOWS\wmprffin.prx --------- 31764 

  16.05.2001 00:49     C:\WINDOWS\wmprffra.prx --------- 37916 

  16.05.2001 00:49     C:\WINDOWS\wmprfptg.prx --------- 35916 

  16.05.2001 00:49     C:\WINDOWS\wmprfhun.prx --------- 37014 

  16.05.2001 00:49     C:\WINDOWS\wmprfita.prx --------- 35680 

  16.05.2001 00:49     C:\WINDOWS\WMPrfJpn.prx --------- 23304 

  16.05.2001 00:49     C:\WINDOWS\wmprfheb.prx --------- 28718 

  16.05.2001 00:49     C:\WINDOWS\wmprfnld.prx --------- 32964 

  16.05.2001 00:49     C:\WINDOWS\wmprfnor.prx --------- 32852 

  16.05.2001 00:49     C:\WINDOWS\wmprfplk.prx --------- 35822 

  16.05.2001 00:49     C:\WINDOWS\wmprfptb.prx --------- 33694 

  16.05.2001 00:48     C:\WINDOWS\wmprfcsy.prx --------- 35474 

  16.05.2001 00:48     C:\WINDOWS\wmprfell.prx --------- 36594 

  16.05.2001 00:48     C:\WINDOWS\wmprfsky.prx --------- 38232 

  16.05.2001 00:48     C:\WINDOWS\WMPrfCHT.prx --------- 132 

  16.05.2001 00:48     C:\WINDOWS\wmprfdan.prx --------- 31712 

  16.05.2001 00:48     C:\WINDOWS\WMPrfCHS.prx --------- 136 

  17.11.1998 14:44     C:\WINDOWS\IsUn0407.exe --------- 328704 

  29.10.1998 17:45     C:\WINDOWS\IsUninst.exe --------- 306688 

  08.08.1997 11:38     C:\WINDOWS\SETUP1.EXE --------- 29574 

  11.06.1997 08:02     C:\WINDOWS\TWAINCAP.SRC --------- 5526 

  05.05.1995 10:50     C:\WINDOWS\TWAINCAP.INI --------- 14025 

----------------------------------------
 

 

C:\WINDOWS\System
 

 14.04.2008 14:00    C:\WINDOWS\System\AVICAP.DLL --------- 70368 

 14.04.2008 14:00    C:\WINDOWS\System\AVIFILE.DLL --------- 109504 

 14.04.2008 14:00    C:\WINDOWS\System\WFWNET.DRV --------- 13600 

 14.04.2008 14:00    C:\WINDOWS\System\commdlg.dll --------- 33744 

 14.04.2008 14:00    C:\WINDOWS\System\VGA.DRV --------- 2176 

 14.04.2008 14:00    C:\WINDOWS\System\VER.DLL --------- 9200 

 14.04.2008 14:00    C:\WINDOWS\System\KEYBOARD.DRV --------- 2000 

 14.04.2008 14:00    C:\WINDOWS\System\LZEXPAND.DLL --------- 9936 

 14.04.2008 14:00    C:\WINDOWS\System\MCIAVI.DRV --------- 73760 

 14.04.2008 14:00    C:\WINDOWS\System\MCISEQ.DRV --------- 25296 

 14.04.2008 14:00    C:\WINDOWS\System\MCIWAVE.DRV --------- 28160 

 14.04.2008 14:00    C:\WINDOWS\System\TIMER.DRV --------- 4048 

 14.04.2008 14:00    C:\WINDOWS\System\MMSYSTEM.DLL --------- 69632 

 14.04.2008 14:00    C:\WINDOWS\System\MMTASK.TSK --------- 1152 

 14.04.2008 14:00    C:\WINDOWS\System\MOUSE.DRV --------- 2032 

 14.04.2008 14:00    C:\WINDOWS\System\TAPI.DLL --------- 19200 

 14.04.2008 14:00    C:\WINDOWS\System\SYSTEM.DRV --------- 3360 

 14.04.2008 14:00    C:\WINDOWS\System\MSVIDEO.DLL --------- 127104 

 14.04.2008 14:00    C:\WINDOWS\System\OLECLI.DLL --------- 82944 

 14.04.2008 14:00    C:\WINDOWS\System\OLESVR.DLL --------- 24064 

 14.04.2008 14:00    C:\WINDOWS\System\stdole.tlb --------- 5532 

 14.04.2008 14:00    C:\WINDOWS\System\setup.inf --------- 59167 

 14.04.2008 14:00    C:\WINDOWS\System\SOUND.DRV --------- 1744 

 14.04.2008 14:00    C:\WINDOWS\System\SHELL.DLL --------- 5120 

 14.04.2008 14:00    C:\WINDOWS\System\WINSPOOL.DRV --------- 146944 

 26.03.2001 14:51    C:\WINDOWS\System\MFC40.DLL --------- 921872 

 26.03.2001 14:51    C:\WINDOWS\System\Msvcrt40.dll --------- 326656 

 25.04.1995 10:37    C:\WINDOWS\System\HITIME1.VBX --------- 10000 

 01.11.1993 04:11    C:\WINDOWS\System\DDEML.DLL --------- 38912 

 12.05.1993 13:21    C:\WINDOWS\System\MSCOMM.VBX --------- 34816 

 12.05.1993 01:00    C:\WINDOWS\System\VBRUN300.DLL --------- 398416 

 28.04.1993 01:00    C:\WINDOWS\System\SETUPKIT.DLL --------- 7008 

 28.04.1993 01:00    C:\WINDOWS\System\SPIN.VBX --------- 22528 

 28.04.1993 01:00    C:\WINDOWS\System\THREED.VBX --------- 64544 

 28.04.1993 01:00    C:\WINDOWS\System\CMDIALOG.VBX --------- 18688 

 29.11.1991 18:31    C:\WINDOWS\System\QPRO.DLL --------- 162464 

----------------------------------------
 

 

C:\WINDOWS\System32
 

 20.10.2010 17:57     C:\WINDOWS\system32\CatRoot2 --------- 0 

 20.10.2010 17:56     C:\WINDOWS\system32\wpa.dbl --------- 2206 

 18.10.2010 20:04     C:\WINDOWS\system32\drivers --------- 0 

 17.10.2010 13:37     C:\WINDOWS\system32\FNTCACHE.DAT --------- 352976 

 14.10.2010 14:16     C:\WINDOWS\system32\DRVSTORE --------- 0 

 14.10.2010 14:15     C:\WINDOWS\system32\dllcache --------- 0 

 14.10.2010 14:07     C:\WINDOWS\system32\MRT.exe --------- 35385288 

 08.10.2010 18:59     C:\WINDOWS\system32\perfh009.dat --------- 461554 

 08.10.2010 18:59     C:\WINDOWS\system32\perfc009.dat --------- 79598 

 08.10.2010 18:59     C:\WINDOWS\system32\perfh007.dat --------- 480136 

 08.10.2010 18:59     C:\WINDOWS\system32\perfc007.dat --------- 93150 

 08.10.2010 18:59     C:\WINDOWS\system32\PerfStringBackup.INI --------- 1130030 

 02.10.2010 10:30     C:\WINDOWS\system32\TZLog.log --------- 443224 

 18.09.2010 12:22     C:\WINDOWS\system32\mfc42u.dll --------- 974848 

 18.09.2010 08:52     C:\WINDOWS\system32\mfc40.dll --------- 954368 

 18.09.2010 08:52     C:\WINDOWS\system32\mfc40u.dll --------- 953856 

 18.09.2010 08:52     C:\WINDOWS\system32\mfc42.dll --------- 974848 

 10.09.2010 07:47     C:\WINDOWS\system32\wininet.dll --------- 916480 

 10.09.2010 07:47     C:\WINDOWS\system32\urlmon.dll --------- 1210880 

 10.09.2010 07:47     C:\WINDOWS\system32\occache.dll --------- 206848 

 10.09.2010 07:47     C:\WINDOWS\system32\mstime.dll --------- 611840 

 10.09.2010 07:47     C:\WINDOWS\system32\mshtmled.dll --------- 66560 

 10.09.2010 07:47     C:\WINDOWS\system32\mshtml.dll --------- 5957120 

 10.09.2010 07:47     C:\WINDOWS\system32\licmgr10.dll --------- 43520 

 10.09.2010 07:47     C:\WINDOWS\system32\inetcpl.cpl --------- 1469440 

 10.09.2010 07:47     C:\WINDOWS\system32\jsproxy.dll --------- 25600 

 10.09.2010 07:47     C:\WINDOWS\system32\msfeeds.dll --------- 602112 

 10.09.2010 07:47     C:\WINDOWS\system32\msfeedsbs.dll --------- 55296 

 10.09.2010 07:47     C:\WINDOWS\system32\iertutil.dll --------- 1986560 

 10.09.2010 07:47     C:\WINDOWS\system32\iepeers.dll --------- 184320 

 10.09.2010 07:47     C:\WINDOWS\system32\ieframe.dll --------- 11080192 

 10.09.2010 07:47     C:\WINDOWS\system32\iedkcs32.dll --------- 387584 

 01.09.2010 13:50     C:\WINDOWS\system32\atmfd.dll --------- 285824 

 01.09.2010 09:54     C:\WINDOWS\system32\win32k.sys --------- 1852928 

 27.08.2010 10:01     C:\WINDOWS\system32\t2embed.dll --------- 119808 

 27.08.2010 07:57     C:\WINDOWS\system32\srvsvc.dll --------- 99840 

 27.08.2010 03:43     C:\WINDOWS\system32\xpsp4res.dll --------- 5632 

 26.08.2010 17:32     C:\WINDOWS\system32\CatRoot --------- 0 

 26.08.2010 14:22     C:\WINDOWS\system32\ie4uinit.exe --------- 173056 

 25.08.2010 23:36     C:\WINDOWS\system32\wmp.dll --------- 10841088 

 25.08.2010 22:17     C:\WINDOWS\system32\NtmsData --------- 0 

 23.08.2010 18:11     C:\WINDOWS\system32\comctl32.dll --------- 617472 

 19.08.2010 17:01     C:\WINDOWS\system32\config --------- 0 

 17.08.2010 15:17     C:\WINDOWS\system32\spoolsv.exe --------- 58880 

 16.08.2010 10:44     C:\WINDOWS\system32\rpcrt4.dll --------- 590848 

 27.07.2010 08:29     C:\WINDOWS\system32\shell32.dll --------- 8503296 

 16.07.2010 14:05     C:\WINDOWS\system32\ole32.dll --------- 1288192 

 15.07.2010 13:51     C:\WINDOWS\system32\Samsung_USB_Drivers --------- 0 

 30.06.2010 14:28     C:\WINDOWS\system32\schannel.dll --------- 149504 

 21.06.2010 16:46     C:\WINDOWS\system32\tzchange.exe --------- 46080 

 18.06.2010 19:44     C:\WINDOWS\system32\winsrv.dll --------- 293888 

 17.06.2010 16:03     C:\WINDOWS\system32\iccvid.dll --------- 80384 

 15.06.2010 18:16     C:\WINDOWS\system32\l3codecx.ax --------- 143422 

 14.06.2010 09:41     C:\WINDOWS\system32\msxml3.dll --------- 1172480 

 09.06.2010 09:43     C:\WINDOWS\system32\inetcomm.dll --------- 692736 

 21.05.2010 14:14     C:\WINDOWS\system32\MpSigStub.exe --------- 221568 

 28.04.2010 20:11     C:\WINDOWS\system32\ntoskrnl.exe --------- 2192256 

 28.04.2010 07:41     C:\WINDOWS\system32\ntkrnlpa.exe --------- 2069120 

 16.04.2010 17:36     C:\WINDOWS\system32\usp10.dll --------- 406016 

 06.04.2010 04:52     C:\WINDOWS\system32\WMVCore.dll --------- 2462720 

 31.03.2010 00:16     C:\WINDOWS\system32\PresentationHostProxy.dll --------- 99176 

 31.03.2010 00:10     C:\WINDOWS\system32\PresentationHost.exe --------- 295264 

 30.03.2010 12:24     C:\WINDOWS\system32\mp4sdecd.dll --------- 317440 

 30.03.2010 00:52     C:\WINDOWS\system32\mpg4ds32.ax --------- 262416 

 10.03.2010 08:15     C:\WINDOWS\system32\vbscript.dll --------- 420352 

 05.03.2010 16:37     C:\WINDOWS\system32\asycfilt.dll --------- 65536 

 23.02.2010 00:12     C:\WINDOWS\system32\ieuinit.inf --------- 57667 

 20.02.2010 14:53     C:\WINDOWS\system32\d3d8caps.dat --------- 552 

 12.02.2010 12:03     C:\WINDOWS\system32\browserchoice.exe --------- 293376 

 12.02.2010 06:33     C:\WINDOWS\system32\6to4svc.dll --------- 100864 

 08.02.2010 20:27     C:\WINDOWS\system32\de-de --------- 0 

 07.02.2010 22:59     C:\WINDOWS\system32\Adobe --------- 0 

 05.02.2010 20:25     C:\WINDOWS\system32\quartz.dll --------- 1297408 

 29.01.2010 16:43     C:\WINDOWS\system32\l3codeca.acm --------- 307260 

 13.01.2010 16:00     C:\WINDOWS\system32\cabview.dll --------- 86528 

 24.12.2009 08:59     C:\WINDOWS\system32\wintrust.dll --------- 177664 

 22.12.2009 15:53     C:\WINDOWS\system32\XPSViewer --------- 0 

 22.12.2009 15:53     C:\WINDOWS\system32\en-us --------- 0 

 17.12.2009 09:40     C:\WINDOWS\system32\mspaint.exe --------- 346624 

 14.12.2009 09:08     C:\WINDOWS\system32\csrsrv.dll --------- 33280 

 09.12.2009 07:53     C:\WINDOWS\system32\jscript.dll --------- 726528 

 08.12.2009 11:23     C:\WINDOWS\system32\shlwapi.dll --------- 474624 

 27.11.2009 19:11     C:\WINDOWS\system32\msyuv.dll --------- 17920 

 27.11.2009 18:08     C:\WINDOWS\system32\msrle32.dll --------- 11264 

 27.11.2009 18:08     C:\WINDOWS\system32\iyuv_32.dll --------- 48128 

 27.11.2009 18:08     C:\WINDOWS\system32\tsbyuv.dll --------- 8704 

 27.11.2009 18:08     C:\WINDOWS\system32\avifil32.dll --------- 85504 

 27.11.2009 18:08     C:\WINDOWS\system32\msvidc32.dll --------- 28672 

 07.11.2009 01:07     C:\WINDOWS\system32\netfxperf.dll --------- 49488 

 07.11.2009 01:07     C:\WINDOWS\system32\mscoree.dll --------- 297808 

 07.11.2009 01:06     C:\WINDOWS\system32\dfshim.dll --------- 1130824 

 21.10.2009 07:38     C:\WINDOWS\system32\strmfilt.dll --------- 75776 

 21.10.2009 07:38     C:\WINDOWS\system32\httpapi.dll --------- 25088 

 19.10.2009 19:29     C:\WINDOWS\system32\d3d9caps.dat --------- 664 

 15.10.2009 18:28     C:\WINDOWS\system32\fontsub.dll --------- 81920 

 13.10.2009 12:32     C:\WINDOWS\system32\oakley.dll --------- 271360 

 12.10.2009 15:38     C:\WINDOWS\system32\rastls.dll --------- 150528 

 12.10.2009 15:38     C:\WINDOWS\system32\raschap.dll --------- 79872 

 06.10.2009 12:55     C:\WINDOWS\system32\wdfcoinstaller01007.dll --------- 1112288 

 06.10.2009 12:52     C:\WINDOWS\system32\nmwcdcocls.dll --------- 660480 

----------------------------------------
 

 

C:\WINDOWS\Prefetch
 

 22.10.2010 06:57     C:\WINDOWS\Prefetch\CMD.EXE-137A0D53.pf --------- 15878 

 22.10.2010 06:56     C:\WINDOWS\Prefetch\WINRAR.EXE-1F2395DA.pf --------- 163474 

 22.10.2010 06:56     C:\WINDOWS\Prefetch\VERCLSID.EXE-3B227142.pf --------- 18130 

 22.10.2010 06:55     C:\WINDOWS\Prefetch\NOTEPAD.EXE-08F3A979.pf --------- 21140 

 22.10.2010 06:55     C:\WINDOWS\Prefetch\XXX.EXE-04563BBF.pf --------- 53884 

 22.10.2010 06:55     C:\WINDOWS\Prefetch\WMIPRVSE.EXE-0E69CB0B.pf --------- 101660 

 22.10.2010 06:55     C:\WINDOWS\Prefetch\RSIT.EXE-0BD924AF.pf --------- 17772 

 22.10.2010 06:54     C:\WINDOWS\Prefetch\IEXPLORE.EXE-03D33524.pf --------- 120782 

 22.10.2010 06:52     C:\WINDOWS\Prefetch\RUNDLL32.EXE-5C5FFFE7.pf --------- 14462 

 22.10.2010 06:49     C:\WINDOWS\Prefetch\AVWSC.EXE-0770069F.pf --------- 34576 

 22.10.2010 03:26     C:\WINDOWS\Prefetch\Layout.ini --------- 271292 

 22.10.2010 02:01     C:\WINDOWS\Prefetch\WUAUCLT.EXE-12D8E25E.pf --------- 33342 

 22.10.2010 02:01     C:\WINDOWS\Prefetch\MPCMDRUN.EXE-2454F9B7.pf --------- 50984 

 21.10.2010 21:34     C:\WINDOWS\Prefetch\TASKMGR.EXE-20E19D70.pf --------- 19106 

 21.10.2010 21:23     C:\WINDOWS\Prefetch\HELPSVC.EXE-281F45D0.pf --------- 90454 

 21.10.2010 19:37     C:\WINDOWS\Prefetch\AVNOTIFY.EXE-114DB648.pf --------- 44628 

 21.10.2010 19:37     C:\WINDOWS\Prefetch\UPDATE.EXE-28CFAE8D.pf --------- 56748 

 21.10.2010 10:13     C:\WINDOWS\Prefetch\GOOGLEUPDATERSERVICE.EXE-0E046D53.pf --------- 11856 

 21.10.2010 06:57     C:\WINDOWS\Prefetch\LOGON.SCR-075DDDCD.pf --------- 7492 

 21.10.2010 06:57     C:\WINDOWS\Prefetch\GUARDGUI.EXE-3507B382.pf --------- 17018 

 20.10.2010 21:52     C:\WINDOWS\Prefetch\EXPLORER.EXE-05416907.pf --------- 29658 

 20.10.2010 20:31     C:\WINDOWS\Prefetch\TSIZEPRO.EXE-34E271E6.pf --------- 113668 

 20.10.2010 20:29     C:\WINDOWS\Prefetch\ACRORD32INFO.EXE-0B3D0F81.pf --------- 58554 

 20.10.2010 20:06     C:\WINDOWS\Prefetch\ADBCD.EXE-0626F042.pf --------- 13106 

 20.10.2010 18:00     C:\WINDOWS\Prefetch\WMIAPSRV.EXE-193A5C0F.pf --------- 84608 

 20.10.2010 17:59     C:\WINDOWS\Prefetch\CCC.EXE-2C3F86EF.pf --------- 85926 

 20.10.2010 17:58     C:\WINDOWS\Prefetch\RAPIMGR.EXE-25905031.pf --------- 39202 

 20.10.2010 17:58     C:\WINDOWS\Prefetch\ALG.EXE-2226CE17.pf --------- 34958 

 20.10.2010 17:58     C:\WINDOWS\Prefetch\DWTRIG20.EXE-1F3BE0C8.pf --------- 18234 

 20.10.2010 17:58     C:\WINDOWS\Prefetch\DUMPREP.EXE-1C032A1C.pf --------- 89234 

 20.10.2010 17:57     C:\WINDOWS\Prefetch\QTTASK.EXE-072D8A2B.pf --------- 12976 

 20.10.2010 17:57     C:\WINDOWS\Prefetch\WCESCOMM.EXE-195637F9.pf --------- 21268 

 20.10.2010 17:56     C:\WINDOWS\Prefetch\MOM.EXE-0ACF7DB1.pf --------- 15384 

 19.10.2010 21:13     C:\WINDOWS\Prefetch\DFRGNTFS.EXE-0F55FCE5.pf --------- 47676 

 19.10.2010 21:13     C:\WINDOWS\Prefetch\DEFRAG.EXE-10D9C910.pf --------- 16412 

 19.10.2010 18:54     C:\WINDOWS\Prefetch\WMPLAYER.EXE-06A827E3.pf --------- 93660 

 19.10.2010 17:37     C:\WINDOWS\Prefetch\WMPLAYER.EXE-06A827E4.pf --------- 132552 

 19.10.2010 17:17     C:\WINDOWS\Prefetch\FIREFOX.EXE-3425AEB8.pf --------- 107402 

 18.10.2010 22:34     C:\WINDOWS\Prefetch\IMAPI.EXE-10859813.pf --------- 20622 

 19.08.2010 10:55     C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf --------- 1473376 

----------------------------------------
 

 

C:\WINDOWS\Tasks
 

 22.10.2010 02:01     C:\WINDOWS\Tasks\MP Scheduled Scan.job --------- 322 

 21.10.2010 10:13     C:\WINDOWS\Tasks\Google Software Updater.job --------- 860 

 20.10.2010 17:54     C:\WINDOWS\Tasks\SA.DAT --------- 6 

 14.04.2008 14:00     C:\WINDOWS\Tasks\desktop.ini --------- 65 

----------------------------------------
 

 

C:\WINDOWS\Temp
 

 22.10.2010 02:01     C:\WINDOWS\Temp\MpCmdRun.log --------- 797404 

 21.10.2010 06:57     C:\WINDOWS\Temp\WGAErrLog.txt --------- 483 

 19.10.2010 20:44     C:\WINDOWS\Temp\MpSigStub.log --------- 85472 

 19.10.2010 20:22     C:\WINDOWS\Temp\Perflib_Perfdata_388.dat --------- 16384 

 18.10.2010 19:58     C:\WINDOWS\Temp\Cookies --------- 0 

 09.10.2010 02:24     C:\WINDOWS\Temp\dw.log --------- 693 

 06.10.2010 20:55     C:\WINDOWS\Temp\dd_clwireg.txt --------- 96811 

 06.10.2010 20:54     C:\WINDOWS\Temp\ASPNETSetup_00005.log --------- 5158 

 06.10.2010 20:51     C:\WINDOWS\Temp\NetFxUpdate_v1.1.4322.log --------- 20352 

 06.10.2010 20:49     C:\WINDOWS\Temp\NDP1.1sp1-KB2416447-X86 --------- 0 

 13.09.2010 20:58     C:\WINDOWS\Temp\~GLG1817.TMP --------- 75 

 13.09.2010 20:58     C:\WINDOWS\Temp\~GLE1E5B.TMP --------- 26000 

 26.08.2010 17:34     C:\WINDOWS\Temp\NDP1.1sp1-KB979906-X86 --------- 0 

 26.08.2010 17:31     C:\WINDOWS\Temp\dd_wcf_retCA1C4.txt --------- 4242 

 26.08.2010 17:30     C:\WINDOWS\Temp\ASPNETSetup_00004.log --------- 5158 

 26.08.2010 17:26     C:\WINDOWS\Temp\dd_wcf_retCA4CDE.txt --------- 4242 

 26.08.2010 17:25     C:\WINDOWS\Temp\ASPNETSetup_00003.log --------- 5158 

 26.08.2010 17:21     C:\WINDOWS\Temp\ASPNETSetup_00002.log --------- 5158 

 26.08.2010 17:06     C:\WINDOWS\Temp\dd_wcf_retCA3820.txt --------- 4242 

 26.08.2010 17:05     C:\WINDOWS\Temp\ASPNETSetup_00001.log --------- 5158 

 26.08.2010 16:58     C:\WINDOWS\Temp\ASPNETSetup_00000.log --------- 5158 

 22.08.2010 11:17     C:\WINDOWS\Temp\History --------- 0 

 07.08.2010 07:24     C:\WINDOWS\Temp\Perflib_Perfdata_79c.dat --------- 16384 

 26.07.2010 18:54     C:\WINDOWS\Temp\Perflib_Perfdata_790.dat --------- 16384 

 03.07.2010 18:33     C:\WINDOWS\Temp\Perflib_Perfdata_59c.dat --------- 16384 

 30.06.2010 07:53     C:\WINDOWS\Temp\Perflib_Perfdata_23c.dat --------- 16384 

 17.06.2010 17:34     C:\WINDOWS\Temp\Perflib_Perfdata_610.dat --------- 16384 

 01.04.2010 09:51     C:\WINDOWS\Temp\Perflib_Perfdata_29c.dat --------- 16384 

 18.03.2010 22:04     C:\WINDOWS\Temp\IXP002.TMP --------- 0 

 18.03.2010 22:02     C:\WINDOWS\Temp\Perflib_Perfdata_188.dat --------- 16384 

 18.03.2010 21:59     C:\WINDOWS\Temp\Perflib_Perfdata_16c.dat --------- 16384 

 06.03.2010 17:11     C:\WINDOWS\Temp\Perflib_Perfdata_190.dat --------- 16384 

 31.01.2010 00:17     C:\WINDOWS\Temp\IXP001.TMP --------- 0 

 06.12.2009 12:44     C:\WINDOWS\Temp\WDF54.tmp --------- 0 

 07.11.2009 19:37     C:\WINDOWS\Temp\TMP0000006717356270AAB647B2 --------- 524288 

 09.04.2009 13:25     C:\WINDOWS\Temp\Verlauf --------- 0 

 09.04.2009 13:25     C:\WINDOWS\Temp\Temporary Internet Files --------- 0 

 24.03.2009 19:11     C:\WINDOWS\Temp\CompiledAdapter.dll --------- 49152 

 22.03.2009 21:19     C:\WINDOWS\Temp\gis1e1a0 --------- 0 

 20.02.2009 19:17     C:\WINDOWS\Temp\gis8dc5f --------- 0 

 08.02.2009 15:30     C:\WINDOWS\Temp\IXP000.TMP --------- 0 

 24.01.2009 13:08     C:\WINDOWS\Temp\Perflib_Perfdata_2d0.dat --------- 16384 

 26.10.2008 19:33     C:\WINDOWS\Temp\gis97aa2 --------- 0 

 15.05.2008 04:57     C:\WINDOWS\Temp\atirt2xp.inf --------- 14711 

 15.05.2008 03:25     C:\WINDOWS\Temp\atinppt2.ax --------- 106496 

 15.05.2008 03:24     C:\WINDOWS\Temp\atinavt2.sys --------- 171520 

 14.04.2008 14:00     C:\WINDOWS\Temp\newdev.dll --------- 250880 

 23.11.2004 09:31     C:\WINDOWS\Temp\alcxwdm.inf --------- 26058 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm15.inf --------- 27225 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm20.inf --------- 26976 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm2.inf --------- 62412 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm19.inf --------- 24238 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm17.inf --------- 24438 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm9.inf --------- 28208 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm0.inf --------- 61568 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm8.inf --------- 29632 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm14.inf --------- 27030 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm13.inf --------- 43506 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm12.inf --------- 37944 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm18.inf --------- 22378 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm7.inf --------- 23102 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm6.inf --------- 30282 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm5.inf --------- 24610 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm4.inf --------- 47573 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm3.inf --------- 26472 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm1.inf --------- 60860 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm11.inf --------- 25106 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm24.inf --------- 28042 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm23.inf --------- 27039 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm22.inf --------- 34297 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm21.inf --------- 24362 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm16.inf --------- 27296 

 17.11.2004 19:14     C:\WINDOWS\Temp\alcxwdm10.inf --------- 38314 

 17.11.2004 19:05     C:\WINDOWS\Temp\alcxwdm.sys --------- 2297664 

 17.11.2004 16:11     C:\WINDOWS\Temp\RTLCPL.exe --------- 9319936 

 17.11.2004 16:08     C:\WINDOWS\Temp\alsndmgr.cpl --------- 16162816 

 15.11.2004 18:20     C:\WINDOWS\Temp\soundman.exe --------- 77824 

 05.11.2004 16:29     C:\WINDOWS\Temp\alcupd.exe --------- 208896 

 27.10.2004 15:47     C:\WINDOWS\Temp\ChCfg.exe --------- 40960 

 07.09.2004 14:23     C:\WINDOWS\Temp\RtlCPAPI.dll --------- 156672 

 16.09.1996 16:01     C:\WINDOWS\Temp\inst32.DLL --------- 48640 

 10.08.1996 00:30     C:\WINDOWS\Temp\~GLBS915.EXE --------- 3584 

 11.08.1995 12:29     C:\WINDOWS\Temp\~GLBS914.EXE --------- 10059 

----------------------------------------
 

 

C:\DOKUME~1\XXX\LOKALE~1\Temp
 

 22.10.2010 06:52      C:\DOKUME~1\XXX\LOKALE~1\Temp\WCESCOMM.LOG --------- 3134 

 20.10.2010 19:02      C:\DOKUME~1\XXX\LOKALE~1\Temp\~DFCA3E.tmp --------- 65536 

 20.10.2010 18:13      C:\DOKUME~1\XXX\LOKALE~1\Temp\~DFC221.tmp --------- 28672 

 20.10.2010 18:13      C:\DOKUME~1\XXX\LOKALE~1\Temp\~DF4112.tmp --------- 512 

 20.10.2010 18:13      C:\DOKUME~1\XXX\LOKALE~1\Temp\~DF40D0.tmp --------- 32768 

 20.10.2010 18:13      C:\DOKUME~1\XXX\LOKALE~1\Temp\~DF3F66.tmp --------- 512 

 20.10.2010 18:13      C:\DOKUME~1\XXX\LOKALE~1\Temp\~DF3F49.tmp --------- 16384 

 20.10.2010 18:13      C:\DOKUME~1\XXX\LOKALE~1\Temp\~DF3DE5.tmp --------- 512 

 20.10.2010 18:13      C:\DOKUME~1\XXX\LOKALE~1\Temp\~DF3CD5.tmp --------- 32768 

 20.10.2010 18:13      C:\DOKUME~1\XXX\LOKALE~1\Temp\~DFB8D7.tmp --------- 16384 

 20.10.2010 18:04      C:\DOKUME~1\XXX\LOKALE~1\Temp\1011110110000001010001001111110 --------- 0 

 20.10.2010 18:03      C:\DOKUME~1\XXX\LOKALE~1\Temp\hsperfdata_XXX --------- 0 

 20.10.2010 17:58      C:\DOKUME~1\XXX\LOKALE~1\Temp\WCESLog.log --------- 717473 

 20.10.2010 17:57      C:\DOKUME~1\XXX\LOKALE~1\Temp\~DFD7C4.tmp --------- 16384 

 20.10.2010 17:56      C:\DOKUME~1\XXX\LOKALE~1\Temp\WPDNSE --------- 0 

 14.10.2010 14:18      C:\DOKUME~1\XXX\LOKALE~1\Temp\{E098D6DA-9226-43CC-BC05-B4A9EA214EA8} --------- 0 

 14.10.2010 14:18      C:\DOKUME~1\XXX\LOKALE~1\Temp\{46F366DF-A4EC-4778-895F-E47DCF50270F} --------- 0 

 14.10.2010 14:16      C:\DOKUME~1\XXX\LOKALE~1\Temp\bye195.tmp --------- 0 

 14.10.2010 14:13      C:\DOKUME~1\XXX\LOKALE~1\Temp\IMT12C.xml --------- 798234 

 14.10.2010 14:13      C:\DOKUME~1\XXX\LOKALE~1\Temp\IMT12B.xml --------- 426 

 14.10.2010 14:13      C:\DOKUME~1\XXX\LOKALE~1\Temp\IMT12A.xml --------- 2036 

 14.10.2010 13:50      C:\DOKUME~1\XXX\LOKALE~1\Temp\VBE --------- 0 

 11.10.2010 21:05      C:\DOKUME~1\XXX\LOKALE~1\Temp\Ultra$ISO --------- 0 

 10.10.2010 20:08      C:\DOKUME~1\XXX\LOKALE~1\Temp\KAV Updater update files --------- 0 

 10.10.2010 20:07      C:\DOKUME~1\XXX\LOKALE~1\Temp\java_install_reg.log --------- 2079 

 09.10.2010 16:45      C:\DOKUME~1\XXX\LOKALE~1\Temp\jkos-XXX --------- 0 

 09.10.2010 16:29      C:\DOKUME~1\XXX\LOKALE~1\Temp\WcesView.log --------- 0 

 23.05.2007 12:15      C:\DOKUME~1\XXX\LOKALE~1\Temp\drw00000.tmp --------- 0 

----------------------------------------
 

 

C:\Programme
 

 22.10.2010 06:55     C:\Programme\Trend Micro --------- 0 

 19.10.2010 17:17     C:\Programme\Mozilla Firefox --------- 0 

 18.10.2010 20:04     C:\Programme\Malwarebytes' Anti-Malware --------- 0 

 14.10.2010 14:17     C:\Programme\Gemeinsame Dateien --------- 0 

 14.10.2010 14:16     C:\Programme\Logitech --------- 0 

 14.10.2010 14:16     C:\Programme\InstallShield Installation Information --------- 0 

 14.10.2010 14:14     C:\Programme\Internet Explorer --------- 0 

 09.10.2010 16:21     C:\Programme\CCleaner --------- 0 

 08.10.2010 19:45     C:\Programme\Bonjour --------- 0 

 30.09.2010 21:20     C:\Programme\ArConOpen --------- 0 

 30.09.2010 21:06     C:\Programme\JDownloader --------- 0 

 11.09.2010 14:16     C:\Programme\NeRo_8.2.8.0-Portable Suite --------- 0 

 06.09.2010 21:31     C:\Programme\Radmin Viewer 3 --------- 0 

 26.08.2010 17:08     C:\Programme\Outlook Express --------- 0 

 26.08.2010 17:07     C:\Programme\Movie Maker --------- 0 

 22.08.2010 12:30     C:\Programme\Xenocode --------- 0 

 15.07.2010 13:46     C:\Programme\Samsung --------- 0 

 17.06.2010 18:44     C:\Programme\SharePod --------- 0 

 15.05.2010 21:47     C:\Programme\CryptLoad --------- 0 

 05.03.2010 16:25     C:\Programme\Everest_portable_5.00.1686 --------- 0 

 27.02.2010 12:51     C:\Programme\Dr. Hardware 2010 --------- 0 

 21.02.2010 20:54     C:\Programme\IPACS --------- 0 

 21.02.2010 17:50     C:\Programme\FMS_8.5 --------- 0 

 21.02.2010 17:12     C:\Programme\FMS --------- 0 

 08.02.2010 20:34     C:\Programme\Norton Security Scan --------- 0 

 08.02.2010 20:34     C:\Programme\NortonInstaller --------- 0 

 31.01.2010 13:49     C:\Programme\Seagate --------- 0 

 31.01.2010 00:10     C:\Programme\WinRAR --------- 0 

 23.01.2010 23:50     C:\Programme\WinTrack9 --------- 0 

 16.01.2010 13:29     C:\Programme\7-Zip --------- 0 

 14.01.2010 22:00     C:\Programme\Teamviewer --------- 0 

 23.12.2009 00:59     C:\Programme\Advanced IP Scanner --------- 0 

 22.12.2009 19:43     C:\Programme\Akademische Arbeitsgemeinschaft --------- 0 

 06.12.2009 12:47     C:\Programme\PC Connectivity Solution --------- 0 

 06.12.2009 12:46     C:\Programme\Nokia --------- 0 

 06.12.2009 12:39     C:\Programme\DIFX --------- 0 

 05.12.2009 18:57     C:\Programme\devolo --------- 0 

 28.11.2009 18:32     C:\Programme\VLC --------- 0 

 01.11.2009 22:12     C:\Programme\phase6 --------- 0 

 25.10.2009 20:37     C:\Programme\Klett --------- 0 

 25.10.2009 18:58     C:\Programme\iTunes --------- 0 

 25.10.2009 18:57     C:\Programme\iPod --------- 0 

 25.10.2009 18:56     C:\Programme\QuickTime --------- 0 

 25.10.2009 18:55     C:\Programme\Apple Software Update --------- 0 

 10.10.2009 14:57     C:\Programme\Mp3tag --------- 0 

 05.10.2009 22:11     C:\Programme\TmNationsForever --------- 0 

 23.09.2009 19:53     C:\Programme\VirtualDJ --------- 0 

 30.08.2009 13:38     C:\Programme\Biet-O-Matic --------- 0 

 23.08.2009 13:24     C:\Programme\FlightGear --------- 0 

 24.06.2009 19:30     C:\Programme\Recuva --------- 0 

 20.06.2009 14:34     C:\Programme\FreePDF_XP --------- 0 

 03.05.2009 19:20     C:\Programme\Real Alternative --------- 0 

 02.05.2009 20:49     C:\Programme\Speedpassion USB Link V1.31 --------- 0 

 01.05.2009 12:18     C:\Programme\Pistonsoft MP3 Tags Editor --------- 0 

 25.04.2009 19:41     C:\Programme\Roxio --------- 0 

 25.04.2009 19:35     C:\Programme\Research In Motion --------- 0 

 15.04.2009 22:44     C:\Programme\NewCodingDatabase --------- 0 

 04.04.2009 23:07     C:\Programme\BMW --------- 0 

 04.04.2009 23:06     C:\Programme\Dnote Software --------- 0 

 30.03.2009 19:52     C:\Programme\Tobit ClipInc --------- 0 

 30.03.2009 18:18     C:\Programme\JAM Software --------- 0 

 28.03.2009 19:56     C:\Programme\gs --------- 0 

 22.03.2009 15:19     C:\Programme\DVBViewer --------- 0 

 22.03.2009 14:32     C:\Programme\Avira --------- 0 

 08.03.2009 19:20     C:\Programme\SlySoft --------- 0 

 07.03.2009 23:59     C:\Programme\MKV_Konverter --------- 0 

 04.03.2009 21:13     C:\Programme\eBay --------- 0 

 01.03.2009 15:38     C:\Programme\DVR-Studio Pro 2 --------- 0 

 01.03.2009 15:37     C:\Programme\DVR-Compress --------- 0 

 20.02.2009 19:02     C:\Programme\Codemasters --------- 0 

 14.02.2009 18:40     C:\Programme\UltraISO --------- 0 

 08.02.2009 15:29     C:\Programme\ThinkVantage Fingerprint Software --------- 0 

 08.02.2009 12:35     C:\Programme\ACD Systems --------- 0 

 08.02.2009 12:30     C:\Programme\IrfanView --------- 0 

 07.02.2009 20:31     C:\Programme\Microsoft ActiveSync --------- 0 

 07.02.2009 20:14     C:\Programme\Common Files --------- 0 

 07.02.2009 19:56     C:\Programme\Panasonic --------- 0 

 24.01.2009 20:06     C:\Programme\VAG-COM --------- 0 

 23.01.2009 20:44     C:\Programme\Java --------- 0 

 11.01.2009 19:30     C:\Programme\CARSOFT --------- 0 

 27.12.2008 14:22     C:\Programme\Railroad Professional 0.8.8 --------- 0 

 14.12.2008 21:36     C:\Programme\EA GAMES --------- 0 

 02.12.2008 21:25     C:\Programme\Femitec Gas --------- 0 

 02.12.2008 21:17     C:\Programme\AcGasSynchro --------- 0 

 30.11.2008 00:07     C:\Programme\Acronis --------- 0 

 22.11.2008 00:28     C:\Programme\Windows Media Connect 2 --------- 0 

 18.11.2008 21:59     C:\Programme\Rocrail --------- 0 

 15.11.2008 19:33     C:\Programme\ScanSoft --------- 0 

 15.11.2008 19:32     C:\Programme\Microsoft AutoRoute --------- 0 

 13.11.2008 21:32     C:\Programme\games --------- 0 

 10.11.2008 22:32     C:\Programme\Rocomotion 5.8 --------- 0 

 09.11.2008 18:33     C:\Programme\Ulead Systems --------- 0 

 09.11.2008 13:59     C:\Programme\Modelleisenbahn 2008 --------- 0 

 08.11.2008 19:15     C:\Programme\dm --------- 0 

 30.10.2008 23:09     C:\Programme\MSBuild --------- 0 

 30.10.2008 23:06     C:\Programme\Reference Assemblies --------- 0 

 27.10.2008 22:43     C:\Programme\Windows Media Player --------- 0 

 24.10.2008 22:09     C:\Programme\WinRail 7.0 Demo --------- 0 

 24.10.2008 21:29     C:\Programme\Gleisrechner 3.3 --------- 0 

 19.10.2008 15:43     C:\Programme\Trackplanner --------- 0 

 17.09.2008 21:31     C:\Programme\ExtendView --------- 0 

 15.09.2008 22:11     C:\Programme\MSXML 4.0 --------- 0 

 14.09.2008 23:22     C:\Programme\Messenger --------- 0 

 14.09.2008 14:00     C:\Programme\proDAD --------- 0 

 14.09.2008 14:00     C:\Programme\LooksBuilderSE --------- 0 

 14.09.2008 14:00     C:\Programme\Boris FX, Inc --------- 0 

 14.09.2008 13:59     C:\Programme\Pinnacle --------- 0 

 14.09.2008 12:52     C:\Programme\Windows Media Components --------- 0 

 14.09.2008 12:51     C:\Programme\Corel --------- 0 

 14.09.2008 11:51     C:\Programme\Microsoft SQL Server --------- 0 

 14.09.2008 11:47     C:\Programme\SmartSound Software --------- 0 

 14.09.2008 11:44     C:\Programme\DivX --------- 0 

 13.09.2008 17:52     C:\Programme\TVersity Codec Pack --------- 0 

 13.09.2008 17:49     C:\Programme\TVersity --------- 0 

 13.09.2008 15:24     C:\Programme\Google --------- 0 

 13.09.2008 13:33     C:\Programme\Any Video Converter --------- 0 

 13.09.2008 13:28     C:\Programme\CyberLink --------- 0 

 13.09.2008 12:27     C:\Programme\GSpot --------- 0 

 13.09.2008 12:01     C:\Programme\Technisat --------- 0 

 12.09.2008 22:11     C:\Programme\Uninstall Information --------- 0 

 08.09.2008 23:12     C:\Programme\epson --------- 0 

 07.09.2008 14:39     C:\Programme\Everest Ultimate Edition 4.10.1128 USB --------- 0 

 07.09.2008 13:37     C:\Programme\Microsoft Office --------- 0 

 07.09.2008 13:37     C:\Programme\Microsoft.NET --------- 0 

 07.09.2008 13:21     C:\Programme\Winamp --------- 0 

 07.09.2008 10:43     C:\Programme\SyncToy --------- 0 

 07.09.2008 10:43     C:\Programme\Microsoft SQL Server Compact Edition --------- 0 

 06.09.2008 22:41     C:\Programme\K-Lite Codec Pack --------- 0 

 07.08.2008 17:36     C:\Programme\Alcohol Soft --------- 0 

 07.08.2008 17:34     C:\Programme\ASUS --------- 0 

 07.08.2008 17:10     C:\Programme\Adobe --------- 0 

 07.08.2008 16:37     C:\Programme\Windows Defender --------- 0 

 07.08.2008 16:21     C:\Programme\Futuremark --------- 0 

 07.08.2008 13:52     C:\Programme\ATI --------- 0 

 07.08.2008 13:43     C:\Programme\ATI Technologies --------- 0 

 07.08.2008 13:28     C:\Programme\Realtek Sound Manager --------- 0 

 07.08.2008 13:28     C:\Programme\AvRack --------- 0 

 07.08.2008 13:22     C:\Programme\Marvell --------- 0 

 07.08.2008 11:25     C:\Programme\xerox --------- 0 

 07.08.2008 11:25     C:\Programme\microsoft frontpage --------- 0 

 07.08.2008 11:24     C:\Programme\WindowsUpdate --------- 0 

 07.08.2008 11:24     C:\Programme\Online-Dienste --------- 0 

 07.08.2008 11:24     C:\Programme\NetMeeting --------- 0 

 07.08.2008 11:23     C:\Programme\ComPlus Applications --------- 0 

 07.08.2008 11:22     C:\Programme\Online Services --------- 0 

 07.08.2008 11:22     C:\Programme\MSN Gaming Zone --------- 0 

 07.08.2008 11:22     C:\Programme\Windows NT --------- 0 

 07.08.2008 11:22     C:\Programme\MSN --------- 0 

 01.01.2003 01:22     C:\Programme\AIMP2 --------- 0 

----------------------------------------
 

 

C:\Dokumente und Einstellungen\All Users\.. 
 

XXX

LocalService    

YYY

Internet    

NetworkService    

All Users    

ZZZ

Default User    

----------------------------------------
 

 

C:\WINDOWS\system32\drivers\etc\hosts
 

127.0.0.1       localhost
 

----------------------------------------
 

 
 

Abbildname                  PID Sitzungsname      Sitz.-Nr. Speichernutzung

========================= ===== ================ ========== ===============

System Idle Process           0 Console                   0            28 K

System                        4 Console                   0           260 K

smss.exe                    868 Console                   0           428 K

csrss.exe                   928 Console                   0         4.876 K

winlogon.exe                976 Console                   0         3.916 K

services.exe               1032 Console                   0         6.488 K

lsass.exe                  1044 Console                   0         2.512 K

ati2evxx.exe               1216 Console                   0         3.792 K

svchost.exe                1264 Console                   0         5.360 K

svchost.exe                1352 Console                   0         4.560 K

MsMpEng.exe                1448 Console                   0        53.816 K

svchost.exe                1488 Console                   0        33.112 K

svchost.exe                1544 Console                   0         3.460 K

ati2evxx.exe               1568 Console                   0         4.296 K

svchost.exe                1680 Console                   0         3.644 K

svchost.exe                1824 Console                   0         4.188 K

spoolsv.exe                 388 Console                   0         7.200 K

sched.exe                   428 Console                   0           912 K

svchost.exe                 572 Console                   0         5.224 K

aavus.exe                   668 Console                   0         1.984 K

avguard.exe                 684 Console                   0        15.536 K

AppleMobileDeviceService.   700 Console                   0         3.304 K

ADCDLicSvc.exe              748 Console                   0         1.296 K

SyncServicesBasics.exe      600 Console                   0         3.724 K

jqs.exe                    1436 Console                   0         1.384 K

StarWindService.exe        1844 Console                   0         2.420 K

svchost.exe                1892 Console                   0         4.480 K

explorer.exe               1536 Console                   0        31.384 K

SOUNDMAN.EXE               2584 Console                   0         2.984 K

MSASCui.exe                2636 Console                   0         8.948 K

MOM.exe                    2672 Console                   0         4.644 K

avgnt.exe                  2904 Console                   0         1.560 K

fpassist.exe               3160 Console                   0         3.968 K

ctfmon.exe                 3228 Console                   0         3.424 K

wcescomm.exe               3240 Console                   0         5.188 K

rapimgr.exe                3544 Console                   0         5.336 K

alg.exe                    3712 Console                   0         3.636 K

CCC.exe                    4004 Console                   0        10.632 K

wmiapsrv.exe               3448 Console                   0         4.592 K

HarmonyRemote.exe          3068 Console                   0        62.012 K

iexplore.exe               3816 Console                   0        19.536 K

iexplore.exe               3580 Console                   0       233.088 K

mbam.exe                   2236 Console                   0        12.524 K

tsizepro.exe               4584 Console                   0        22.424 K

taskmgr.exe                4384 Console                   0         2.468 K

cmd.exe                    5484 Console                   0         2.344 K

tasklist.exe                448 Console                   0         4.640 K

wmiprvse.exe               2996 Console                   0         5.852 K
 

 

***** Ende des Scans 22.10.2010 um  6:57:46,54 ***

Alles weitere im nächsten Tread.