Bundespolizei-Trojaner noch an Bord?

horst f

Hallo,
ich habe mir neulich den Bundespolizei-Trojaner eingefangen. Ich habe das System über Computer reparieren zurückgesetzt (aber nur ein paar Stunden).

Ich habe in der registry (im ...\run-ordner) nach auffälligen exe-datein gesucht, aber keine gefunden.

Danach habe ich mit Antivir einen Scan durchgeführt und folgenden Trojaner gefunden:

Beginne mit der Suche in 'C:\'
C:\Users\horst freund\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\431c852c-56de00b2
[FUND] Ist das Trojanische Pferd TR/Crypt.EPACK.Gen2
[HINWEIS] Eine Sicherungskopie wurde unter dem Namen 4833e143.qua erstellt ( QUARANTÄNE )

Danach habe ich einen Suchlauf mit Malewarebytes Antimaleware durchgeführt und

Trojan.Agent.CK

gefunden und in Quarantäne verschoben (leider habe ich die Logfile zu dem Suchlauf nicht mehr.)

Danach habe ich Antivir deinstalliert und Kaspersky installiert. Auch damit habe ich einen Suchlauf durchgeführt, der folgendes Ergebnis brachte:

Trojan-Dropper.Win32.Pakes.oz
Objekt: c:\documents and settings\horst freund\appdata\locallow\sun\java\deployment\cache\6.0\44\431c852c-56de00b2

Ich habe alle alten Java-Versionen gelöscht und den aktuellen installiert.

Ich habe auch mit CCleaner die registry gereinigt und den rechner.

Nach einem weiteren Malwarebytes Suchlauf heute gab es keine Funde mehr.

Meine Frage ist jetzt, ob mein Rechner schon wieder als sicher gilt, oder nicht. Ich verwende derzeit natürlich kein online-banking usw.

Ich würde den Rechner auch Formatieren und neu bespielen habe aber keine Windows 7 Cd erstellt.

Ich wäre euch total für Hilfe dankbar!!!

Zum System:
Sony Vaio Laptop mit Windows 7 64bit
(der benutzername ist erfunden, deshalb habe ich ihn gelassen)

Hier meine logfiles:

DDS:
.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by horst freund at 21:17:11 on 2012-03-18
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8108.5983 [GMT 1:00]
.
AV: Kaspersky Anti-Virus *Enabled/Updated* {2EAA32A5-1EE1-1B22-95DA-337730C6E984}
SP: Kaspersky Anti-Virus *Enabled/Updated* {95CBD341-38DB-14AC-AF6A-08054B41A339}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files\TrueSuite\TrueSuite.Service.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\SysWOW64\brsvc01a.exe
C:\Windows\SysWOW64\brss01a.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Huawei\Gobi\GobiQDLService\GobiQDLService.exe
C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files (x86)\OneClickInternet\WTGService.exe
C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\TrueSuite\TrueSuite.ClientAppLogonExe.exe
C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
C:\Program Files\TrueSuite\x86\TrueSuite.ClientAppLogonExe.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files\Apoint\ApMsgFwd.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Sony\VAIO Control Center\VESGfxMgr.exe
C:\Windows\system32\igfxext.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Apoint\Apvfb.exe
C:\Windows\system32\conhost.exe
C:\Program Files\TrueSuite\TrueSuite.TouchControl.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Sony\VAIO Care\VCPerfService.exe
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Program Files\Sony\VAIO Care\listener.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
C:\Program Files\Sony\VAIO Power Management\SPMService.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
C:\Program Files\Sony\VAIO Care\VCService.exe
C:\Program Files\Sony\VAIO Care\VCAgent.exe
C:\Windows\System32\vds.exe
C:\Program Files\Sony\VAIO Update Common\VUAgent.exe
C:\Program Files\Sony\VAIO Care\VCAdmin.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://vaioportal.sony.eu
uDefault_Page_URL = hxxp://vaioportal.sony.eu
uInternet Settings,ProxyOverride = <local>
mWinlogon: Userinit=userinit.exe,
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll
BHO: TrueSuite WebStore: {5cb2b77d-c8ca-44db-af20-a7a4df462a12} - mscoree.dll
BHO: TrueSuite Website Log On: {8590886e-ec8c-43c1-a32c-e4c2b0b6395b} - C:\Program Files\TrueSuite\x86\TrueSuite.IEBHO.dll
BHO: Windows Live ID-Anmelde-Hilfsprogramm: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
BHO: {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll
BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll"
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun: [<NO NAME>]
mRun: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
mRun: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
mRun: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
mRun: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
mRun: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
mRun: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe"
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\ievkbd.dll
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\klwtbbho.dll
TCP: DhcpNameServer = 213.191.92.86 192.168.0.1
TCP: Interfaces\{84ABC250-0B90-4D59-9A94-D28829DDCA91} : DhcpNameServer = 213.191.92.86 192.168.0.1
TCP: Interfaces\{FEE51053-B74A-4586-9C9F-622ACF8B89E3} : DhcpNameServer = 10.100.70.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
{18DF081C-E8AD-4283-A596-FA578C2EBDC3}
{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}
{5cb2b77d-c8ca-44db-af20-a7a4df462a12}
{8590886E-EC8C-43C1-A32C-E4C2B0B6395B}
{9030D464-4C02-4ABF-8ECC-5164760863C6}
{AE7CD045-E861-484f-8273-0445EE161910}
{d2ce3e00-f94a-4740-988e-03dc2f38c34f}
BHO-X64: {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File
{E33CF602-D945-461A-83F0-819F76A199F8}
{F4971EE7-DAA0-4053-9964-665D8EE6A077}
{8dcb7100-df86-4384-8842-8fa844297b3f}
{47833539-D0C5-4125-9FA8-0819E2EAAC93}
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
mRun-x64: [(Standard)]
mRun-x64: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
mRun-x64: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"
mRun-x64: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
mRun-x64: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
mRun-x64: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
mRun-x64: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
mRun-x64: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
mRun-x64: [BrStsMon00] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
mRun-x64: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe"
IE-X64: {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\horst freund\AppData\Roaming\Mozilla\Firefox\Profiles\vdkoxmap.default\
FF - plugin: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
FF - plugin: C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\Sony\Media Go\npmediago.dll
FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
============= SERVICES / DRIVERS ===============
.
R1 kl2;kl2;C:\Windows\system32\DRIVERS\kl2.sys --> C:\Windows\system32\DRIVERS\kl2.sys [?]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\Windows\system32\DRIVERS\klim6.sys --> C:\Windows\system32\DRIVERS\klim6.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]
R2 AMPPALR3;Intel® Centrino® Bluetooth 3.0 + High Speed Service;C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2011-4-21 1136640]
R2 AVP;Kaspersky Anti-Virus Service;C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2012\avp.exe [2011-4-24 202296]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor;C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2011-7-12 923984]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service;C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2011-7-12 1001808]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2011-4-21 134928]
R2 FPLService;TrueSuiteService;C:\Program Files\TrueSuite\TrueSuite.Service.exe [2011-4-26 294216]
R2 GobiQDLService;Qualcomm Gobi Anywhere Download Service;C:\Program Files (x86)\Huawei\Gobi\GobiQDLService\GobiQDLService.exe [2012-2-8 318464]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-2-8 13592]
R2 IconMan_R;IconMan_R;C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-2-8 2375168]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-3-16 652360]
R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2011-3-15 428384]
R2 SampleCollector;VAIO Care Performance Service;C:\Program Files\Sony\VAIO Care\VCPerfService.exe [2011-8-26 260768]
R2 uCamMonitor;CamMonitor;C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2011-2-23 105024]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-2-8 2656536]
R2 VAIO Power Management;VAIO Power Management;C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2012-2-8 552584]
R2 VSNService;VSNService;C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [2012-2-8 969352]
R2 WTGService;WTGService;C:\Program Files (x86)\OneClickInternet\WTGService.exe [2012-2-8 342984]
R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
R3 AMPPAL;Intel(R) Centrino(R) Bluetooth 3.0 + High Speed - Virtueller Adapter;C:\Windows\system32\DRIVERS\AMPPAL.sys --> C:\Windows\system32\DRIVERS\AMPPAL.sys [?]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys --> C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [?]
R3 ATSwpWDF;AuthenTec TruePrint WBF Driver;C:\Windows\system32\DRIVERS\ATSwpWDF.sys --> C:\Windows\system32\DRIVERS\ATSwpWDF.sys [?]
R3 Bluetooth Media Service;Bluetooth Media Service;C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2011-7-12 1321296]
R3 IntcDAud;Intel(R) Display-Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
R3 intelkmd;intelkmd;C:\Windows\system32\DRIVERS\igdpmd64.sys --> C:\Windows\system32\DRIVERS\igdpmd64.sys [?]
R3 iwdbus;IWD Bus Enumerator;C:\Windows\system32\DRIVERS\iwdbus.sys --> C:\Windows\system32\DRIVERS\iwdbus.sys [?]
R3 klmouflt;Kaspersky Lab KLMOUFLT;C:\Windows\system32\DRIVERS\klmouflt.sys --> C:\Windows\system32\DRIVERS\klmouflt.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 MEIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 NETwNs64;___ Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 7 64-Bit;C:\Windows\system32\DRIVERS\NETwNs64.sys --> C:\Windows\system32\DRIVERS\NETwNs64.sys [?]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 SFEP;Sony Firmware Extension Parser;C:\Windows\system32\DRIVERS\SFEP.sys --> C:\Windows\system32\DRIVERS\SFEP.sys [?]
R3 VCService;VCService;C:\Program Files\Sony\VAIO Care\VCService.exe [2011-10-29 54432]
R3 VUAgent;VUAgent;C:\Program Files\Sony\VAIO Update Common\VUAgent.exe [2011-10-27 1245800]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?]
R3 wdkmd;Intel WiDi KMD;C:\Windows\system32\DRIVERS\WDKMD.sys --> C:\Windows\system32\DRIVERS\WDKMD.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 AMPPALP;Intel(R) Centrino(R) Bluetooth 3.0 + High Speed Protokoll;C:\Windows\system32\DRIVERS\amppal.sys --> C:\Windows\system32\DRIVERS\amppal.sys [?]
S3 BBSvc;Bing Bar Update Service;C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-3-1 183560]
S3 BrYNSvc;BrYNSvc;C:\Program Files (x86)\Browny02\BrYNSvc.exe [2012-3-12 245760]
S3 btmaux;Intel Bluetooth Auxiliary Service;C:\Windows\system32\DRIVERS\btmaux.sys --> C:\Windows\system32\DRIVERS\btmaux.sys [?]
S3 btmhsf;btmhsf;C:\Windows\system32\DRIVERS\btmhsf.sys --> C:\Windows\system32\DRIVERS\btmhsf.sys [?]
S3 e1yexpress;Intel(R) Gigabit Network Connections Driver;C:\Windows\system32\DRIVERS\e1y60x64.sys --> C:\Windows\system32\DRIVERS\e1y60x64.sys [?]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-2-19 1038088]
S3 gobi3kfilter;Qualcomm Gobi 3000 USB Composite Device Filter Driver;C:\Windows\system32\DRIVERS\gobi3kfilter.sys --> C:\Windows\system32\DRIVERS\gobi3kfilter.sys [?]
S3 gobi3kmbb;Qualcomm Gobi 3000 USB-NDIS 6.20 miniport;C:\Windows\system32\DRIVERS\gobi3kmbb.sys --> C:\Windows\system32\DRIVERS\gobi3kmbb.sys [?]
S3 gobi3kserial;Qualcomm Gobi 3000 USB Device for Legacy Serial Communication;C:\Windows\system32\DRIVERS\gobi3kserial.sys --> C:\Windows\system32\DRIVERS\gobi3kserial.sys [?]
S3 iBtFltCoex;iBtFltCoex;C:\Windows\system32\DRIVERS\iBtFltCoex.sys --> C:\Windows\system32\DRIVERS\iBtFltCoex.sys [?]
S3 intaud_WaveExtensible;Intel WiDi Audio Device;C:\Windows\system32\drivers\intelaud.sys --> C:\Windows\system32\drivers\intelaud.sys [?]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2011-5-2 340240]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;C:\Windows\system32\DRIVERS\RtsPStor.sys --> C:\Windows\system32\DRIVERS\RtsPStor.sys [?]
S3 SOHCImp;VAIO Content Importer;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2011-2-21 113824]
S3 SOHDs;VAIO Device Searcher;C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2011-2-21 67232]
S3 SpfService;VAIO Entertainment Common Service;C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2011-1-20 286936]
S3 SynasUSB;SynasUSB;C:\Windows\system32\drivers\SynUSB64.sys --> C:\Windows\system32\drivers\SynUSB64.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]
S3 VCFw;VAIO Content Folder Watcher;C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2011-1-20 887000]
S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2011-5-19 549616]
S3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2011-2-18 385336]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2011-2-18 99104]
S3 WatAdminSvc;Windows-Aktivierungstechnologieservice;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?]
S3 ZMHHPAudioSrv;ZOOM H Series High Performance Audio Driver Service;C:\Windows\system32\drivers\zmhhpau.sys --> C:\Windows\system32\drivers\zmhhpau.sys [?]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2012-03-18 19:46:22 125440 ----a-w- C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon_toolbar@truesuite.com\components\TrueSuite.WLOXPCOM.dll
2012-03-18 15:55:55 69000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{CF5ED83B-D4B0-49CB-B78E-59B26E65A351}\offreg.dll
2012-03-16 18:11:01 5559152 ----a-w- C:\Windows\System32\ntoskrnl.exe
2012-03-16 18:11:00 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2012-03-16 18:11:00 3913584 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2012-03-16 16:19:01 147856 ----a-w- C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2\components\kavlinkfilter.dll
2012-03-16 16:17:42 -------- d-----w- C:\ProgramData\Kaspersky Lab
2012-03-16 16:17:42 -------- d-----w- C:\Program Files (x86)\Kaspersky Lab
2012-03-16 15:07:51 -------- d-----w- C:\Users\horst freund\AppData\Roaming\Malwarebytes
2012-03-16 15:07:44 23152 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-03-16 15:07:44 -------- d-----w- C:\ProgramData\Malwarebytes
2012-03-16 15:07:43 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-03-16 14:13:12 750488 ----a-w- C:\Windows\System32\npdeployJava1.dll
2012-03-16 13:27:05 3145728 ----a-w- C:\Windows\System32\win32k.sys
2012-03-16 13:26:55 1544192 ----a-w- C:\Windows\System32\DWrite.dll
2012-03-16 13:26:55 1077248 ----a-w- C:\Windows\SysWow64\DWrite.dll
2012-03-16 13:26:52 8643640 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{CF5ED83B-D4B0-49CB-B78E-59B26E65A351}\mpengine.dll
2012-03-16 13:26:48 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe
2012-03-16 13:26:48 77312 ----a-w- C:\Windows\System32\rdpwsx.dll
2012-03-16 13:26:48 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll
2012-03-16 13:26:23 1031680 ----a-w- C:\Windows\System32\rdpcore.dll
2012-03-16 13:26:22 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll
2012-03-16 13:26:22 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys
2012-03-16 13:26:22 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-03-16 12:38:30 -------- d-----w- C:\Users\horst freund\AppData\Roaming\kodak
2012-03-16 12:38:14 -------- d-----w- C:\Users\horst freund\AppData\Roaming\xmldm
2012-03-16 12:38:13 -------- d-----w- C:\Users\horst freund\AppData\Roaming\kock
2012-03-16 11:16:40 -------- d-----w- C:\Program Files (x86)\VideoLAN
2012-03-16 10:55:21 -------- d-----w- C:\Program Files (x86)\DVDStyler
2012-03-16 10:52:23 -------- d-----w- C:\Program Files (x86)\DVD Shrink DE
2012-03-16 10:40:26 -------- d-----w- C:\Users\horst freund\AppData\Local\{A789DE92-888A-4556-B010-F42B7674FCB4}
2012-03-16 10:40:25 -------- d-----w- C:\Users\horst freund\AppData\Local\{03F19205-476C-44CA-84A9-04355E894E96}
2012-03-12 11:28:28 -------- d-----w- C:\Brother
2012-03-12 11:28:24 -------- d-----w- C:\Program Files (x86)\Browny02
2012-03-12 11:28:10 73728 ------w- C:\Windows\SysWow64\BrDctF2.dll
2012-03-12 11:28:10 5632 ------w- C:\Windows\SysWow64\BrDctF2L.dll
2012-03-12 11:28:10 3072 ------w- C:\Windows\SysWow64\BrDctF2S.dll
2012-03-12 11:28:10 217088 ------w- C:\Windows\SysWow64\NSSearch.dll
2012-03-12 11:28:10 -------- d-----w- C:\Program Files (x86)\Brother
2012-03-12 11:28:08 180224 ------w- C:\Windows\SysWow64\BroSNMP.dll
2012-03-12 11:20:37 -------- d-----w- C:\Users\horst freund\AppData\Local\Diagnostics
2012-03-12 09:55:14 -------- d-----w- C:\Users\horst freund\AppData\Local\Apple Computer
2012-03-11 14:09:03 57344 ----a-w- C:\Windows\SysWow64\BRSVC01A.EXE
2012-03-11 14:09:03 45056 ----a-w- C:\Windows\SysWow64\BRSS01A.EXE
2012-03-10 12:37:08 -------- d-----w- C:\Windows\SysWow64\Wat
2012-03-10 12:37:07 -------- d-----w- C:\Windows\System32\Wat
2012-03-06 10:33:22 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin7.dll
2012-03-06 10:33:22 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin6.dll
2012-03-06 10:33:22 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin5.dll
2012-03-06 10:33:22 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin4.dll
2012-03-06 10:33:22 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin3.dll
2012-03-06 10:33:22 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin2.dll
2012-03-06 10:33:22 159744 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\npqtplugin.dll
2012-03-06 10:32:21 -------- d-----w- C:\Users\horst freund\AppData\Local\Apple
2012-03-05 10:51:28 -------- d-----w- C:\Users\horst freund\AppData\Roaming\iolo
2012-03-05 10:41:14 83968 ----a-w- C:\Windows\System32\BrNetSti.dll
2012-03-05 10:23:12 -------- d-----w- C:\Users\horst freund\AppData\Local\ElevatedDiagnostics
2012-03-05 10:20:08 -------- d-----r- C:\Users\horst freund\AppData\Roaming\Brother
2012-03-04 14:04:42 -------- d-----w- C:\Program Files\Common Files\ATI Technologies
2012-03-04 14:04:42 -------- d-----w- C:\Program Files (x86)\Common Files\ATI Technologies
2012-03-04 14:01:59 9360896 ----a-w- C:\Windows\System32\drivers\atikmdag.sys
2012-03-04 13:41:24 -------- d-----w- C:\Users\horst freund\AppData\Roaming\Free Mp3 Wma Ogg Converter
2012-03-04 13:41:21 458752 ----a-w- C:\Windows\SysWow64\NCTAudioRecord2.dll
2012-03-04 13:41:21 458752 ----a-w- C:\Windows\SysWow64\NCTAudioPlayer2.dll
2012-03-04 13:41:21 348160 ----a-w- C:\Windows\SysWow64\NCTWMAFile2.dll
2012-03-04 13:41:21 1986560 ----a-w- C:\Windows\SysWow64\NCTAudioFile2.dll
2012-03-04 13:41:21 1212416 ----a-w- C:\Windows\SysWow64\NCTAudioInformation2.dll
2012-03-04 13:41:20 -------- d-----w- C:\Program Files (x86)\Free Mp3 Wma Ogg Converter
2012-02-29 18:57:34 -------- d-----w- C:\ProgramData\Test Drive Unlimited
2012-02-29 18:53:20 49152 ----a-r- C:\Users\horst freund\AppData\Roaming\Microsoft\Installer\{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}\ARPPRODUCTICON.exe
2012-02-29 18:43:39 -------- d-----w- C:\Program Files (x86)\Atari
2012-02-23 17:48:25 -------- d-----w- C:\Program Files (x86)\audiograbber
2012-02-23 17:48:18 -------- d-----w- C:\Windows\uninstall
2012-02-23 11:40:07 -------- d-----w- C:\Users\horst freund\AppData\Roaming\AccurateRip
2012-02-21 21:19:55 -------- d-----w- C:\Users\horst freund\AppData\Local\eLicenser
2012-02-21 21:18:19 -------- d-----w- C:\Program Files (x86)\Syncrosoft
2012-02-21 21:17:58 -------- d-----w- C:\ProgramData\eLicenser
2012-02-21 21:17:58 -------- d-----w- C:\Program Files (x86)\eLicenser
2012-02-21 12:34:54 -------- d-----w- C:\ProgramData\AVS4YOU
2012-02-21 12:34:50 -------- d-----w- C:\Users\horst freund\AppData\Roaming\AVS4YOU
2012-02-21 12:33:30 11137024 ----a-w- C:\Windows\SysWow64\libmfxsw32.dll
2012-02-21 12:33:27 -------- d-----w- C:\Program Files (x86)\Common Files\AVSMedia
2012-02-21 12:33:24 24576 ----a-w- C:\Windows\SysWow64\msxml3a.dll
2012-02-21 12:33:24 1700352 ----a-w- C:\Windows\SysWow64\GdiPlus.dll
2012-02-21 12:33:24 -------- d-----w- C:\Program Files (x86)\AVS4YOU
2012-02-21 11:55:15 -------- d-----w- C:\Windows\SysWow64\syncdb
2012-02-21 09:28:48 80384 ----a-w- C:\Windows\System32\drivers\BTHUSB.SYS
2012-02-21 09:28:48 552960 ----a-w- C:\Windows\System32\drivers\bthport.sys
2012-02-19 18:21:51 -------- d-----w- C:\Program Files\ZOOM
2012-02-19 18:21:51 -------- d-----w- C:\Program Files (x86)\ZOOM
2012-02-19 18:06:22 -------- d-----w- C:\Users\horst freund\cubase-songs
2012-02-19 17:54:34 -------- d-----w- C:\Users\horst freund\Images
2012-02-19 17:51:23 -------- d-----w- C:\Users\horst freund\Audio
2012-02-19 17:10:21 -------- d-----w- C:\Users\horst freund\AppData\Roaming\uTorrent
2012-02-19 15:47:29 -------- d-----w- C:\Users\horst freund\AppData\Roaming\OpenOffice.org
2012-02-19 15:39:44 -------- d-----w- C:\Program Files (x86)\OpenOffice.org 3
2012-02-19 15:33:04 -------- d-----w- C:\Program Files\CCleaner
2012-02-19 15:15:46 -------- d-----w- C:\Users\horst freund\AppData\Local\Windows Live
2012-02-19 15:15:13 -------- d-----w- C:\Users\horst freund\AppData\Local\{A6870E4E-41CD-46B1-9BCE-B4B036C6E0DF}
2012-02-19 14:44:47 -------- d-----w- C:\Users\horst freund\AppData\Local\CANON_INC
2012-02-19 13:38:03 -------- d-----w- C:\Users\horst freund\AppData\Roaming\ZoomBrowser EX
2012-02-19 13:30:43 14604 ----a-w- C:\Windows\SysWow64\drivers\pfc.sys
2012-02-19 13:16:20 861696 ----a-w- C:\Windows\System32\oleaut32.dll
2012-02-19 13:16:20 571904 ----a-w- C:\Windows\SysWow64\oleaut32.dll
2012-02-19 13:16:20 331776 ----a-w- C:\Windows\System32\oleacc.dll
2012-02-19 13:16:20 233472 ----a-w- C:\Windows\SysWow64\oleacc.dll
2012-02-19 13:16:18 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-02-19 13:16:18 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-02-19 13:14:56 514560 ----a-w- C:\Windows\SysWow64\qdvd.dll
2012-02-19 13:13:52 870912 ----a-w- C:\Windows\SysWow64\XpsPrint.dll
2012-02-19 13:13:52 1465344 ----a-w- C:\Windows\System32\XpsPrint.dll
2012-02-19 13:13:42 27520 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2012-02-19 13:13:41 467456 ----a-w- C:\Windows\System32\drivers\srv.sys
2012-02-19 13:13:41 410112 ----a-w- C:\Windows\System32\drivers\srv2.sys
2012-02-19 13:13:41 168448 ----a-w- C:\Windows\System32\drivers\srvnet.sys
2012-02-19 13:13:34 75776 ----a-w- C:\Windows\SysWow64\psisrndr.ax
2012-02-19 13:13:34 613888 ----a-w- C:\Windows\System32\psisdecd.dll
2012-02-19 13:13:34 465408 ----a-w- C:\Windows\SysWow64\psisdecd.dll
2012-02-19 13:13:34 108032 ----a-w- C:\Windows\System32\psisrndr.ax
2012-02-19 13:13:33 498688 ----a-w- C:\Windows\System32\drivers\afd.sys
2012-02-19 13:07:48 64512 ----a-w- C:\Windows\SysWow64\devobj.dll
2012-02-19 13:07:48 44544 ----a-w- C:\Windows\SysWow64\devrtl.dll
2012-02-19 13:07:48 404480 ----a-w- C:\Windows\System32\umpnpmgr.dll
2012-02-19 13:07:48 252928 ----a-w- C:\Windows\SysWow64\drvinst.exe
2012-02-19 13:07:48 145920 ----a-w- C:\Windows\SysWow64\cfgmgr32.dll
2012-02-19 13:07:46 976896 ----a-w- C:\Windows\System32\inetcomm.dll
2012-02-19 13:07:46 741376 ----a-w- C:\Windows\SysWow64\inetcomm.dll
2012-02-19 13:07:43 690688 ----a-w- C:\Windows\SysWow64\msvcrt.dll
2012-02-19 13:07:43 634880 ----a-w- C:\Windows\System32\msvcrt.dll
2012-02-19 13:02:34 723456 ----a-w- C:\Windows\System32\EncDec.dll
2012-02-19 13:02:34 534528 ----a-w- C:\Windows\SysWow64\EncDec.dll
2012-02-19 13:02:11 -------- d-----w- C:\Windows\SysWow64\spool
2012-02-19 13:00:15 1731920 ----a-w- C:\Windows\System32\ntdll.dll
2012-02-19 13:00:15 1292080 ----a-w- C:\Windows\SysWow64\ntdll.dll
2012-02-19 12:59:25 -------- d-----w- C:\Program Files\Common Files\Macrovision Shared
2012-02-19 12:59:16 -------- d-----w- C:\Program Files (x86)\Common Files\Macrovision Shared
2012-02-19 12:53:25 -------- d-----w- C:\Users\horst freund\AppData\Local\GHISLER
2012-02-19 12:52:44 545 ----a-w- C:\Windows\UC.PIF
2012-02-19 12:52:44 545 ----a-w- C:\Windows\RAR.PIF
2012-02-19 12:52:44 545 ----a-w- C:\Windows\PKZIP.PIF
2012-02-19 12:52:44 545 ----a-w- C:\Windows\PKUNZIP.PIF
2012-02-19 12:52:44 545 ----a-w- C:\Windows\NOCLOSE.PIF
2012-02-19 12:52:44 545 ----a-w- C:\Windows\LHA.PIF
2012-02-19 12:52:44 545 ----a-w- C:\Windows\ARJ.PIF
2012-02-19 12:52:44 -------- d-----w- C:\Users\horst freund\AppData\Roaming\GHISLER
2012-02-19 12:52:44 -------- d-----w- C:\totalcmd
2012-02-19 12:52:22 8643640 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2012-02-19 12:44:44 -------- d-----w- C:\Users\horst freund\AppData\Roaming\Steinberg
2012-02-19 12:44:44 -------- d-----w- C:\Program Files (x86)\Steinberg
2012-02-19 12:44:25 2892 ----a-w- C:\Windows\SysWow64\audcon.sys
2012-02-19 12:44:25 -------- d-----w- C:\ProgramData\Syncrosoft
2012-02-19 12:44:24 1711104 ----a-w- C:\Windows\System32\synsoacc.dll
2012-02-19 12:44:16 31248 ----a-w- C:\Windows\System32\drivers\synUSB64.sys
2012-02-19 12:43:54 86016 ----a-w- C:\Windows\SysWow64\SYNSOPOS.exe
2012-02-19 12:43:52 401462 ----a-w- C:\Windows\SysWow64\temp.000
2012-02-19 12:43:50 1277952 ----a-w- C:\Windows\SysWow64\SYNSOACC.dll
2012-02-19 12:29:48 -------- d-----w- C:\ProgramData\regid.1986-12.com.adobe
2012-02-19 12:24:50 -------- d-----w- C:\ProgramData\ZoomBrowser
2012-02-19 12:23:54 -------- d-----w- C:\Program Files (x86)\Canon
2012-02-19 12:22:26 -------- d-----w- C:\Program Files (x86)\Common Files\Canon
2012-02-19 12:20:07 -------- d-----w- C:\Users\horst freund\AppData\Local\Ahead
2012-02-19 12:19:01 -------- d-----w- C:\ProgramData\Nero
2012-02-19 12:19:01 -------- d-----w- C:\Program Files (x86)\Nero
2012-02-19 12:10:38 77312 ----a-w- C:\Windows\System32\packager.dll
2012-02-19 12:10:38 67072 ----a-w- C:\Windows\SysWow64\packager.dll
2012-02-19 12:05:08 59392 ------r- C:\Windows\System32\BrWiaNCp.dll
2012-02-19 12:05:08 48640 ------r- C:\Windows\System32\Brnsplg.dll
2012-02-19 12:05:08 255488 ----a-w- C:\Windows\System32\NSSRH64.dll
2012-02-19 12:05:08 143360 ------r- C:\Windows\System32\BrSNMP64.dll
2012-02-19 12:05:03 1560576 ----a-w- C:\Windows\System32\BrWi209c.dll
2012-02-19 12:04:57 61440 ----a-w- C:\Windows\SysWow64\brprtink.dll
2012-02-19 12:03:29 -------- d-----w- C:\ProgramData\Brother
2012-02-18 14:18:45 -------- d-----w- C:\Users\horst freund\AppData\Local\Sony Corporation
2012-02-18 13:40:24 -------- d-----w- C:\Users\horst freund\AppData\Local\ArcSoft
2012-02-18 13:15:01 -------- d-----w- C:\Users\horst freund\AppData\Local\Thunderbird
2012-02-18 13:11:04 -------- d-----w- C:\Users\horst freund\AppData\Local\Mozilla
2012-02-18 13:11:00 836800 ----a-w- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
2012-02-18 13:11:00 16116696 ----a-w- C:\Program Files (x86)\Mozilla Firefox\xul.dll
2012-02-18 13:11:00 134104 ----a-w- C:\Program Files (x86)\Mozilla Firefox\components\browsercomps.dll
2012-02-18 13:03:19 -------- d-----w- C:\Update
2012-02-18 13:02:54 -------- d-----w- C:\Users\horst freund\AppData\Local\ATI
2012-02-18 13:02:04 -------- d-----w- C:\Users\horst freund\AppData\Roaming\Intel Corporation
2012-02-18 13:01:51 -------- d-----w- C:\Users\horst freund\AppData\Local\Adobe
2012-02-18 13:01:21 -------- d-----w- C:\Users\horst freund\AppData\Local\VirtualStore
2012-02-18 13:00:43 -------- d-----w- C:\Windows\SysWow64\VAIO Startup Setting Tool
2012-02-18 13:00:41 -------- d-----w- C:\Windows\pss
2012-02-18 13:00:22 -------- d--h--w- C:\Windows\msdownld.tmp
.
==================== Find3M ====================
.
2012-03-16 14:13:02 660368 ----a-w- C:\Windows\System32\deployJava1.dll
2012-02-23 08:18:36 279656 ------w- C:\Windows\System32\MpSigStub.exe
2012-02-18 16:55:50 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-02-08 16:04:01 951680 ----a-w- C:\Windows\System32\drivers\ndis.sys
2012-02-08 16:00:57 2560 ----a-w- C:\Windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui
2012-02-08 16:00:32 2560 ----a-w- C:\Windows\SysWow64\drivers\de-DE\scfilter.sys.mui
2012-02-08 16:00:31 5632 ----a-w- C:\Windows\SysWow64\drivers\de-DE\ndiscap.sys.mui
2012-02-08 16:00:25 51712 ----a-w- C:\Windows\SysWow64\drivers\de-DE\tcpip.sys.mui
2012-02-08 16:00:20 29696 ----a-w- C:\Windows\SysWow64\drivers\de-DE\bfe.dll.mui
2012-02-08 16:00:20 16896 ----a-w- C:\Windows\SysWow64\drivers\de-DE\pacer.sys.mui
2012-02-08 08:15:40 88851008 ----a-w- C:\Windows\System32\VAIO Hero Screensaver - Fall 2011 - DE.scr
2012-02-08 07:26:03 472808 ----a-w- C:\Windows\SysWow64\deployJava1.dll
2012-02-08 07:24:18 0 ----a-w- C:\Windows\ativpsrm.bin
2012-01-04 10:44:20 509952 ----a-w- C:\Windows\System32\ntshrui.dll
2012-01-04 08:58:41 442880 ----a-w- C:\Windows\SysWow64\ntshrui.dll
2012-01-03 13:10:52 53656 ----a-w- C:\Windows\System32\AdobePDF.dll
2012-01-03 13:10:48 24984 ----a-w- C:\Windows\System32\AdobePDFUI.dll
2011-12-30 06:26:08 515584 ----a-w- C:\Windows\System32\timedate.cpl
2011-12-30 05:27:56 478720 ----a-w- C:\Windows\SysWow64\timedate.cpl
.
============= FINISH: 21:18:05,46 ===============