| |
| |||||||
Log-Analyse und Auswertung: Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
06.04.2015, 20:21
| #1 |
| |  Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) Hey, Ich habe das ungute Gefühl das mein Laptop mit einem trojaner bzw mit diverser Schadsoftware infiziert ist...  Emsisoft Antivieren Scan hat die im Thread-titel angegebenen Trojaner ausgeworfen. Auch nach mehreren Durchläufen mit anschliessender Quarantäne tauchen diese immer wieder auf... hier die logfiles: (sorry falsch ich was falsch mache, in dem Fall bitte einfach sagen .... bin echt kein profi ) Defogger: Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 20:32 on 06/04/2015 (Administrator)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
Checking for services/drivers...
[CODE]Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015 Ran by Administrator (administrator) on WINDOWSPC on 06-04-2015 20:34:51 Running from D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop Loaded Profiles: Administrator (Available profiles: Administrator) Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 6 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) D:\WINDOWS.NEW\system32\smss.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\csrss.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\winlogon.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\services.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\lsass.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\svchost.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\svchost.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\svchost.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\svchost.exe (Emsisoft GmbH) D:\Programme\Emsisoft Anti-Malware\a2service.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\svchost.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\svchost.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\spoolsv.exe (Microsoft Corporation) D:\WINDOWS.NEW\explorer.exe (IBM Corporation) D:\WINDOWS.NEW\system32\tp4mon.exe (Oracle Corporation) D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Emsisoft GmbH) D:\Programme\Emsisoft Anti-Malware\a2guard.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\svchost.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\wscntfy.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\alg.exe (Microsoft Corporation) D:\WINDOWS.NEW\explorer.exe (Mozilla Corporation) D:\Programme\Mozilla Firefox\firefox.exe () D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe () D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe () D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe (Microsoft Corporation) D:\WINDOWS.NEW\system32\wbem\wmiprvse.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [TrackPointSrv] => D:\WINDOWS.NEW\system32\tp4mon.exe [82944 2008-04-14] (IBM Corporation) HKLM\...\Run: [SmartAudio] => D:\Programme\CONEXANT\SAII\SAIICpl.exe [307768 2010-04-28] () HKLM\...\Run: [Adobe ARM] => "D:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" HKLM\...\Run: [SunJavaUpdateSched] => D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [271744 2014-12-18] (Oracle Corporation) HKLM\...\Run: [emsisoft anti-malware] => d:\programme\emsisoft anti-malware\a2guard.exe [4886608 2015-03-24] (Emsisoft GmbH) HKLM\...\Winlogon: [Userinit] D:\WINDOWS.NEW\system32\userinit.exe, HKLM\...\Winlogon: [UIHost] D:\WINDOWS.NEW\system32\logonui.exe [515072 2008-04-14] (Microsoft Corporation) Winlogon\Notify\crypt32chain: D:\WINDOWS.NEW\system32\crypt32.dll (Microsoft Corporation) Winlogon\Notify\cryptnet: D:\WINDOWS.NEW\system32\cryptnet.dll (Microsoft Corporation) Winlogon\Notify\cscdll: D:\WINDOWS.NEW\system32\cscdll.dll (Microsoft Corporation) Winlogon\Notify\dimsntfy: D:\WINDOWS.NEW\System32\dimsntfy.dll (Microsoft Corporation) Winlogon\Notify\ScCertProp: D:\WINDOWS.NEW\system32\wlnotify.dll (Microsoft Corporation) Winlogon\Notify\Schedule: D:\WINDOWS.NEW\system32\wlnotify.dll (Microsoft Corporation) Winlogon\Notify\sclgntfy: D:\WINDOWS.NEW\system32\sclgntfy.dll (Microsoft Corporation) Winlogon\Notify\SensLogn: D:\WINDOWS.NEW\system32\WlNotify.dll (Microsoft Corporation) Winlogon\Notify\termsrv: D:\WINDOWS.NEW\system32\wlnotify.dll (Microsoft Corporation) Winlogon\Notify\wlballoon: D:\WINDOWS.NEW\system32\wlnotify.dll (Microsoft Corporation) HKU\S-1-5-19\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> D:\WINDOWS.NEW\System32\logon.scr [220672 2008-04-14] (Microsoft Corporation) HKU\S-1-5-20\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> D:\WINDOWS.NEW\System32\logon.scr [220672 2008-04-14] (Microsoft Corporation) HKU\S-1-5-21-1292428093-484763869-682003330-500\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-1292428093-484763869-682003330-500\Control Panel\Desktop\\SCRNSAVE.EXE -> D:\WINDOWS.NEW\System32\logon.scr [220672 2008-04-14] (Microsoft Corporation) HKU\S-1-5-18\...\Run: [CTFMON.EXE] => D:\WINDOWS.NEW\system32\CTFMON.EXE [15360 2008-04-14] (Microsoft Corporation) HKU\S-1-5-18\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> D:\WINDOWS.NEW\system32\logon.scr [220672 2008-04-14] (Microsoft Corporation) Lsa: [Authentication Packages] msv1_0 nwprovau Startup: D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Autostart\Launcher.lnk ShortcutTarget: Launcher.lnk -> D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe () Startup: D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Autostart\Launcher.lnk ShortcutTarget: Launcher.lnk -> D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-1292428093-484763869-682003330-500\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION ProxyServer: [S-1-5-21-1292428093-484763869-682003330-500] => :0 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-1292428093-484763869-682003330-500\Software\Microsoft\Internet Explorer\Main,Local Page = D:\WINDOWS.NEW\system32\blank.htm HKU\S-1-5-21-1292428093-484763869-682003330-500\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKU\S-1-5-21-1292428093-484763869-682003330-500\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-1292428093-484763869-682003330-500\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://www.microsoft.com/isapi/redir.dll?Prd=ie&Pver=5.0&Ar=ie5update&O1=b1 URLSearchHook: HKU\S-1-5-21-1292428093-484763869-682003330-500 - Microsoft Url Sucheingriff - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - D:\WINDOWS.NEW\system32\shdocvw.dll (Microsoft Corporation) HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= ATTENTION SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1424211888578 Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - D:\WINDOWS.NEW\system32\urlmon.dll [2008-04-14] (Microsoft Corporation) Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation) Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation) Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation) Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation) Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation) Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation) Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation) Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - D:\WINDOWS.NEW\system32\mshtml.dll [2008-04-14] (Microsoft Corporation) Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - D:\WINDOWS.NEW\system32\wiascr.dll [2008-04-14] (Microsoft Corporation) Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} - D:\WINDOWS.NEW\system32\urlmon.dll [2008-04-14] (Microsoft Corporation) Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} - D:\WINDOWS.NEW\system32\urlmon.dll [2008-04-14] (Microsoft Corporation) Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} - D:\WINDOWS.NEW\system32\SHELL32.dll [2008-04-14] (Microsoft Corporation) ShellExecuteHooks: URL Exec Hook - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - D:\WINDOWS.NEW\system32\shell32.dll [8502272 2008-04-14] (Microsoft Corporation) Winsock: Catalog5 01 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog5 02 D:\WINDOWS.NEW\system32\winrnr.dll [16896] (Microsoft Corporation) Winsock: Catalog5 03 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog5 04 D:\WINDOWS.NEW\system32\nwprovau.dll [146432] (Microsoft Corporation) Winsock: Catalog9 01 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 02 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 03 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 04 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 05 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 06 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 07 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 08 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 09 D:\WINDOWS.NEW\system32\rsvpsp.dll [92672] (Microsoft Corporation) Winsock: Catalog9 10 D:\WINDOWS.NEW\system32\rsvpsp.dll [92672] (Microsoft Corporation) Winsock: Catalog9 11 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 12 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 13 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 14 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 15 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 16 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 17 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 18 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 19 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 20 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 21 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 22 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 23 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 24 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 25 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 26 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 27 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 28 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 29 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 30 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 31 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Winsock: Catalog9 32 D:\WINDOWS.NEW\system32\mswsock.dll [247296] (Microsoft Corporation) Tcpip\..\Interfaces\{8A53674D-A4C3-4162-804E-815FF8F8C1FF}: [NameServer] 212.23.103.8 212.23.103.9 FireFox: ======== FF ProfilePath: D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\Mozilla\Firefox\Profiles\rpeda0m2.default-1428224047359 FF DefaultSearchEngine: Google Default FF Plugin: @microsoft.com/WPF,version=3.5 -> D:\WINDOWS.NEW\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation) FF Plugin: Adobe Reader -> D:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll No File FF SearchPlugin: D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\Mozilla\Firefox\Profiles\rpeda0m2.default-1428224047359\searchplugins\google-default.xml [2015-04-06] FF Extension: Flashblock - D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\Mozilla\Firefox\Profiles\rpeda0m2.default-1428224047359\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2015-04-05] FF Extension: Adblock Plus - D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\Mozilla\Firefox\Profiles\rpeda0m2.default-1428224047359\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-04-05] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - D:\WINDOWS.NEW\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - D:\WINDOWS.NEW\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-03-01] Chrome: ======= CHR HKLM\...\Chrome\Extension: [ocbnpbkmjpgbdcgiflkgkpnkinifpgpj] - D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\ChromeExtensions\ocbnpbkmjpgbdcgiflkgkpnkinifpgpj\amazon-icon-2.crx [Not Found] StartMenuInternet: chrome.exe - Chrome.exe ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 a2AntiMalware; D:\Programme\Emsisoft Anti-Malware\a2service.exe [5020520 2015-03-24] (Emsisoft GmbH) R2 ALDITALKVerbindungsassistent_Service; D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [358968 2015-04-06] () R2 Alerter; D:\WINDOWS.NEW\system32\alrsvc.dll [17408 2008-04-14] (Microsoft Corporation) R3 ALG; D:\WINDOWS.NEW\System32\alg.exe [44544 2008-04-14] (Microsoft Corporation) S3 AppMgmt; D:\WINDOWS.NEW\System32\appmgmts.dll [175616 2008-04-14] (Microsoft Corporation) S3 aspnet_state; D:\WINDOWS.NEW\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [35160 2010-03-18] (Microsoft Corporation) R2 AudioSrv; D:\WINDOWS.NEW\System32\audiosrv.dll [42496 2008-04-14] (Microsoft Corporation) S3 BITS; D:\WINDOWS.NEW\system32\qmgr.dll [409088 2008-04-14] (Microsoft Corporation) R2 Browser; D:\WINDOWS.NEW\System32\browser.dll [77824 2008-04-14] (Microsoft Corporation) S3 CiSvc; D:\WINDOWS.NEW\system32\cisvc.exe [5632 2008-04-14] (Microsoft Corporation) S3 ClipSrv; D:\WINDOWS.NEW\system32\clipsrv.exe [33280 2008-04-14] (Microsoft Corporation) S4 clr_optimization_v2.0.50727_32; d:\WINDOWS.NEW\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [69632 2008-07-25] (Microsoft Corporation) S2 clr_optimization_v4.0.30319_32; D:\WINDOWS.NEW\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [130384 2010-03-18] (Microsoft Corporation) R2 CryptSvc; D:\WINDOWS.NEW\System32\cryptsvc.dll [62464 2008-04-14] (Microsoft Corporation) R2 DcomLaunch; D:\WINDOWS.NEW\system32\rpcss.dll [399360 2008-04-14] (Microsoft Corporation) R2 Dhcp; D:\WINDOWS.NEW\System32\dhcpcsvc.dll [127488 2008-04-14] (Microsoft Corporation) S3 dmadmin; D:\WINDOWS.NEW\System32\dmadmin.exe [225280 2008-04-14] (Microsoft Corp., Veritas Software) S3 dmserver; D:\WINDOWS.NEW\System32\dmserver.dll [24064 2008-04-14] (Microsoft Corp.) R2 Dnscache; D:\WINDOWS.NEW\System32\dnsrslvr.dll [45568 2008-04-14] (Microsoft Corporation) S3 Dot3svc; D:\WINDOWS.NEW\System32\dot3svc.dll [133120 2008-04-14] (Microsoft Corporation) S3 EapHost; D:\WINDOWS.NEW\System32\eapsvc.dll [33792 2008-04-14] (Microsoft Corporation) R2 ERSvc; D:\WINDOWS.NEW\System32\ersvc.dll [23040 2008-04-14] (Microsoft Corporation) R2 Eventlog; D:\WINDOWS.NEW\system32\services.exe [109056 2008-04-14] (Microsoft Corporation) R3 EventSystem; D:\WINDOWS.NEW\system32\es.dll [246272 2008-04-14] (Microsoft Corporation) R3 FastUserSwitchingCompatibility; D:\WINDOWS.NEW\System32\shsvcs.dll [135168 2008-04-14] (Microsoft Corporation) S3 FontCache3.0.0.0; d:\WINDOWS.NEW\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [46104 2008-07-29] (Microsoft Corporation) R2 helpsvc; D:\WINDOWS.NEW\PCHealth\HelpCtr\Binaries\pchsvc.dll [38400 2008-04-14] (Microsoft Corporation) R2 HidServ; D:\WINDOWS.NEW\System32\hidserv.dll [21504 2008-04-14] (Microsoft Corporation) S3 hkmsvc; D:\WINDOWS.NEW\System32\kmsvc.dll [61440 2008-04-14] (Microsoft Corporation) S3 HTTPFilter; D:\WINDOWS.NEW\System32\w3ssl.dll [15872 2008-04-14] (Microsoft Corporation) S3 idsvc; d:\WINDOWS.NEW\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [881664 2008-07-29] (Microsoft Corporation) S3 ImapiService; D:\WINDOWS.NEW\system32\imapi.exe [150528 2008-04-14] (Microsoft Corporation) S2 JavaQuickStarterService; D:\Programme\Java\jre7\bin\jqs.exe [182696 2015-03-13] (Oracle Corporation) R2 lanmanserver; D:\WINDOWS.NEW\System32\srvsvc.dll [96768 2008-04-14] (Microsoft Corporation) R2 lanmanworkstation; D:\WINDOWS.NEW\System32\wkssvc.dll [132096 2008-04-14] (Microsoft Corporation) R2 LmHosts; D:\WINDOWS.NEW\System32\lmhsvc.dll [13824 2008-04-14] (Microsoft Corporation) S2 MBAMScheduler; D:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) S2 MBAMService; D:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) S4 Messenger; D:\WINDOWS.NEW\System32\msgsvc.dll [33792 2008-04-14] (Microsoft Corporation) S3 mnmsrvc; D:\WINDOWS.NEW\system32\mnmsrvc.exe [32768 2008-04-14] (Microsoft Corporation) S3 MozillaMaintenance; D:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [148080 2015-03-21] (Mozilla Foundation) S3 MSDTC; D:\WINDOWS.NEW\system32\msdtc.exe [6144 2008-04-14] (Microsoft Corporation) S2 MSIServer; D:\WINDOWS.NEW\System32\msiexec.exe [78848 2008-04-14] (Microsoft Corporation) S3 napagent; D:\WINDOWS.NEW\System32\qagentrt.dll [294400 2008-04-14] (Microsoft Corporation) S4 NetDDE; D:\WINDOWS.NEW\system32\netdde.exe [114176 2008-04-14] (Microsoft Corporation) S4 NetDDEdsdm; D:\WINDOWS.NEW\system32\netdde.exe [114176 2008-04-14] (Microsoft Corporation) S3 Netlogon; D:\WINDOWS.NEW\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation) R3 Netman; D:\WINDOWS.NEW\System32\netman.dll [198144 2008-04-14] (Microsoft Corporation) S4 NetTcpPortSharing; D:\WINDOWS.NEW\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [124240 2010-03-18] (Microsoft Corporation) R3 Nla; D:\WINDOWS.NEW\System32\mswsock.dll [247296 2008-04-14] (Microsoft Corporation) S3 NtLmSsp; D:\WINDOWS.NEW\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation) S3 NtmsSvc; D:\WINDOWS.NEW\system32\ntmssvc.dll [438272 2008-04-14] (Microsoft Corporation) R2 NWCWorkstation; D:\WINDOWS.NEW\System32\nwwks.dll [65536 2008-04-14] (Microsoft Corporation) R2 PlugPlay; D:\WINDOWS.NEW\system32\services.exe [109056 2008-04-14] (Microsoft Corporation) R2 PolicyAgent; D:\WINDOWS.NEW\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation) R2 ProtectedStorage; D:\WINDOWS.NEW\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation) S3 RasAuto; D:\WINDOWS.NEW\System32\rasauto.dll [88576 2008-04-14] (Microsoft Corporation) R3 RasMan; D:\WINDOWS.NEW\System32\rasmans.dll [186368 2008-04-14] (Microsoft Corporation) S3 RDSessMgr; D:\WINDOWS.NEW\system32\sessmgr.exe [143360 2008-04-14] (Microsoft Corporation) S4 RemoteAccess; D:\WINDOWS.NEW\System32\mprdim.dll [53248 2008-04-14] (Microsoft Corporation) R2 RemoteRegistry; D:\WINDOWS.NEW\system32\regsvc.dll [59904 2008-04-14] (Microsoft Corporation) S3 RpcLocator; D:\WINDOWS.NEW\system32\locator.exe [75264 2008-04-14] (Microsoft Corporation) R2 RpcSs; D:\WINDOWS.NEW\System32\rpcss.dll [399360 2008-04-14] (Microsoft Corporation) S3 RSVP; D:\WINDOWS.NEW\system32\rsvp.exe [132608 2004-11-11] (Microsoft Corporation) R2 SamSs; D:\WINDOWS.NEW\system32\lsass.exe [13312 2008-04-14] (Microsoft Corporation) S3 SCardSvr; D:\WINDOWS.NEW\System32\SCardSvr.exe [99840 2008-04-14] (Microsoft Corporation) S4 Schedule; D:\WINDOWS.NEW\system32\schedsvc.dll [193536 2008-04-14] (Microsoft Corporation) R2 seclogon; D:\WINDOWS.NEW\System32\seclogon.dll [18944 2008-04-14] (Microsoft Corporation) R2 SENS; D:\WINDOWS.NEW\system32\sens.dll [39424 2008-04-14] (Microsoft Corporation) R2 SharedAccess; D:\WINDOWS.NEW\System32\ipnathlp.dll [334336 2008-04-14] (Microsoft Corporation) R2 ShellHWDetection; D:\WINDOWS.NEW\System32\shsvcs.dll [135168 2008-04-14] (Microsoft Corporation) R2 Spooler; D:\WINDOWS.NEW\system32\spoolsv.exe [57856 2008-04-14] (Microsoft Corporation) R2 srservice; D:\WINDOWS.NEW\system32\srsvc.dll [171520 2008-04-14] (Microsoft Corporation) R3 SSDPSRV; D:\WINDOWS.NEW\System32\ssdpsrv.dll [71680 2008-04-14] (Microsoft Corporation) R2 stisvc; D:\WINDOWS.NEW\system32\wiaservc.dll [334336 2008-04-14] (Microsoft Corporation) S3 SysmonLog; D:\WINDOWS.NEW\system32\smlogsvc.exe [94208 2008-04-14] (Microsoft Corporation) R3 TapiSrv; D:\WINDOWS.NEW\System32\tapisrv.dll [249856 2008-04-14] (Microsoft Corporation) R3 TermService; D:\WINDOWS.NEW\System32\termsrv.dll [297472 2008-04-14] (Microsoft Corporation) R2 Themes; D:\WINDOWS.NEW\System32\shsvcs.dll [135168 2008-04-14] (Microsoft Corporation) S3 TlntSvr; D:\WINDOWS.NEW\system32\tlntsvr.exe [75264 2008-04-14] (Microsoft Corporation) R2 TrkWks; D:\WINDOWS.NEW\system32\trkwks.dll [90112 2008-04-14] (Microsoft Corporation) S3 UMWdf; D:\WINDOWS.NEW\system32\wdfmgr.exe [38912 2004-11-11] (Microsoft Corporation) [File not signed] S3 upnphost; D:\WINDOWS.NEW\System32\upnphost.dll [186880 2008-04-14] (Microsoft Corporation) S3 UPS; D:\WINDOWS.NEW\System32\ups.exe [18432 2008-04-14] (Microsoft Corporation) S3 VSS; D:\WINDOWS.NEW\System32\vssvc.exe [292864 2008-04-14] (Microsoft Corporation) S4 W32Time; D:\WINDOWS.NEW\system32\w32time.dll [177152 2008-04-14] (Microsoft Corporation) R2 WebClient; D:\WINDOWS.NEW\System32\webclnt.dll [68096 2008-04-14] (Microsoft Corporation) R2 winmgmt; D:\WINDOWS.NEW\system32\wbem\WMIsvc.dll [145408 2008-04-14] (Microsoft Corporation) S3 WmcCds; d:\programme\windows media connect\mswmccds.exe [483328 2004-08-11] (Microsoft Corporation) [File not signed] S3 WmcCdsLs; D:\Programme\Windows Media Connect\mswmcls.exe [28160 2004-08-10] (Microsoft Corporation) [File not signed] S3 WmdmPmSN; D:\WINDOWS.NEW\system32\mspmsnsv.dll [25600 2004-11-11] (Microsoft Corporation) [File not signed] S3 Wmi; D:\WINDOWS.NEW\System32\advapi32.dll [678400 2008-04-14] (Microsoft Corporation) S3 WmiApSrv; D:\WINDOWS.NEW\system32\wbem\wmiapsrv.exe [126464 2008-04-14] (Microsoft Corporation) S3 WPFFontCache_v0400; D:\WINDOWS.NEW\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [753504 2010-03-18] (Microsoft Corporation) R2 wscsvc; D:\WINDOWS.NEW\system32\wscsvc.dll [80896 2008-04-14] (Microsoft Corporation) R2 wuauserv; D:\WINDOWS.NEW\system32\wuauserv.dll [6656 2008-04-14] (Microsoft Corporation) R2 WudfSvc; D:\WINDOWS.NEW\System32\WUDFSvc.dll [64512 2009-07-13] (Microsoft Corporation) S4 WZCSVC; D:\WINDOWS.NEW\System32\wzcsvc.dll [483840 2008-04-14] (Microsoft Corporation) S3 xmlprov; D:\WINDOWS.NEW\System32\xmlprov.dll [129024 2008-04-14] (Microsoft Corporation) S3 SwPrv; D:\WINDOWS.NEW\system32\dllhost.exe /Processid:{A43FA0FD-43C8-49EE-916F-00C2A5D885B8} ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R0 ACPI; D:\WINDOWS.NEW\System32\DRIVERS\ACPI.sys [188800 2008-04-14] (Microsoft Corporation) R0 ACPIEC; D:\WINDOWS.NEW\System32\DRIVERS\ACPIEC.sys [12160 2004-11-11] (Microsoft Corporation) S3 aec; D:\WINDOWS.NEW\System32\drivers\aec.sys [142592 2008-04-13] (Microsoft Corporation) R1 AFD; D:\WINDOWS.NEW\System32\drivers\afd.sys [138112 2008-04-14] (Microsoft Corporation) R3 AsyncMac; D:\WINDOWS.NEW\System32\DRIVERS\asyncmac.sys [14336 2008-04-14] (Microsoft Corporation) R0 atapi; D:\WINDOWS.NEW\System32\DRIVERS\atapi.sys [96512 2008-04-14] (Microsoft Corporation) S3 Atmarpc; D:\WINDOWS.NEW\System32\DRIVERS\atmarpc.sys [59904 2008-04-14] (Microsoft Corporation) R3 audstub; D:\WINDOWS.NEW\System32\DRIVERS\audstub.sys [3072 2001-08-17] (Microsoft Corporation) R1 Beep; D:\WINDOWS.NEW\system32\Drivers\Beep.sys [4224 2004-11-11] (Microsoft Corporation) S4 cbidf2k; D:\WINDOWS.NEW\system32\Drivers\cbidf2k.sys [13952 2004-11-11] (Microsoft Corporation) S1 Cdaudio; D:\WINDOWS.NEW\system32\Drivers\Cdaudio.sys [18688 2004-11-11] (Microsoft Corporation) R4 Cdfs; D:\WINDOWS.NEW\system32\Drivers\Cdfs.sys [63744 2008-04-14] (Microsoft Corporation) R1 Cdrom; D:\WINDOWS.NEW\System32\DRIVERS\cdrom.sys [62976 2008-04-14] (Microsoft Corporation) R3 CmBatt; D:\WINDOWS.NEW\System32\DRIVERS\CmBatt.sys [13952 2008-04-14] (Microsoft Corporation) R0 Compbatt; D:\WINDOWS.NEW\System32\DRIVERS\compbatt.sys [10240 2008-04-14] (Microsoft Corporation) R0 Disk; D:\WINDOWS.NEW\System32\DRIVERS\disk.sys [36352 2008-04-14] (Microsoft Corporation) S4 dmboot; D:\WINDOWS.NEW\System32\drivers\dmboot.sys [800384 2008-04-14] (Microsoft Corp., Veritas Software) S4 dmio; D:\WINDOWS.NEW\System32\drivers\dmio.sys [154112 2008-04-14] (Microsoft Corp., Veritas Software) S4 dmload; D:\WINDOWS.NEW\System32\drivers\dmload.sys [5888 2004-11-11] (Microsoft Corp., Veritas Software.) S3 DMusic; D:\WINDOWS.NEW\System32\drivers\DMusic.sys [52864 2008-04-14] (Microsoft Corporation) S3 drmkaud; D:\WINDOWS.NEW\System32\drivers\drmkaud.sys [2944 2008-04-14] (Microsoft Corporation) R1 epp32; D:\PROGRAMME\EMSISOFT ANTI-MALWARE\epp32.sys [111368 2015-03-24] (Emsisoft GmbH) R3 ewusbnet; D:\WINDOWS.NEW\System32\DRIVERS\ewusbnet.sys [117504 2015-04-06] (Huawei Technologies Co., Ltd.) S3 ew_hwusbdev; D:\WINDOWS.NEW\System32\DRIVERS\ew_hwusbdev.sys [102784 2015-04-06] (Huawei Technologies Co., Ltd.) R4 Fastfat; D:\WINDOWS.NEW\system32\Drivers\Fastfat.sys [143744 2008-04-14] (Microsoft Corporation) S1 Fdc; D:\WINDOWS.NEW\system32\Drivers\Fdc.sys [27392 2008-04-14] (Microsoft Corporation) R1 Fips; D:\WINDOWS.NEW\system32\Drivers\Fips.sys [44672 2008-04-14] (Microsoft Corporation) S1 Flpydisk; D:\WINDOWS.NEW\system32\Drivers\Flpydisk.sys [20480 2008-04-14] (Microsoft Corporation) R0 FltMgr; D:\WINDOWS.NEW\System32\drivers\fltmgr.sys [129792 2008-04-14] (Microsoft Corporation) U1 Fs_Rec; D:\WINDOWS.NEW\system32\Drivers\Fs_Rec.sys [7936 2004-11-11] (Microsoft Corporation) R0 Ftdisk; D:\WINDOWS.NEW\System32\DRIVERS\ftdisk.sys [126336 2004-11-11] (Microsoft Corporation) R3 Gpc; D:\WINDOWS.NEW\System32\DRIVERS\msgpc.sys [35072 2008-04-14] (Microsoft Corporation) R3 HdAudAddService; D:\WINDOWS.NEW\System32\drivers\CHDAudN.sys [666112 2007-04-27] (Conexant Systems Inc.) R3 HDAudBus; D:\WINDOWS.NEW\System32\DRIVERS\HDAudBus.sys [144384 2008-04-13] (Windows (R) Server 2003 DDK provider) S3 HidUsb; D:\WINDOWS.NEW\System32\DRIVERS\hidusb.sys [10368 2008-04-14] (Microsoft Corporation) R3 HTTP; D:\WINDOWS.NEW\System32\Drivers\HTTP.sys [264832 2008-04-14] (Microsoft Corporation) R3 hwdatacard; D:\WINDOWS.NEW\System32\DRIVERS\ewusbmdm.sys [106496 2015-04-06] (Huawei Technologies Co., Ltd.) R1 i8042prt; D:\WINDOWS.NEW\System32\DRIVERS\i8042prt.sys [52992 2008-04-14] (Microsoft Corporation) R1 Imapi; D:\WINDOWS.NEW\System32\DRIVERS\imapi.sys [42112 2008-04-14] (Microsoft Corporation) R1 intelppm; D:\WINDOWS.NEW\System32\DRIVERS\intelppm.sys [40448 2008-04-14] (Microsoft Corporation) S3 Ip6Fw; D:\WINDOWS.NEW\System32\drivers\ip6fw.sys [36608 2008-04-14] (Microsoft Corporation) S3 IpFilterDriver; D:\WINDOWS.NEW\System32\DRIVERS\ipfltdrv.sys [32896 2004-11-11] (Microsoft Corporation) S3 IpInIp; D:\WINDOWS.NEW\System32\DRIVERS\ipinip.sys [20864 2008-04-14] (Microsoft Corporation) R3 IpNat; D:\WINDOWS.NEW\System32\DRIVERS\ipnat.sys [152832 2008-04-14] (Microsoft Corporation) R1 IPSec; D:\WINDOWS.NEW\System32\DRIVERS\ipsec.sys [75264 2008-04-14] (Microsoft Corporation) S3 IRENUM; D:\WINDOWS.NEW\System32\DRIVERS\irenum.sys [11264 2008-04-14] (Microsoft Corporation) R0 isapnp; D:\WINDOWS.NEW\System32\DRIVERS\isapnp.sys [37632 2008-04-14] (Microsoft Corporation) R1 Kbdclass; D:\WINDOWS.NEW\System32\DRIVERS\kbdclass.sys [25216 2008-04-14] (Microsoft Corporation) S1 kbdhid; D:\WINDOWS.NEW\System32\DRIVERS\kbdhid.sys [14720 2008-04-14] (Microsoft Corporation) R3 kmixer; D:\WINDOWS.NEW\System32\drivers\kmixer.sys [172416 2008-04-14] (Microsoft Corporation) R0 KSecDD; D:\WINDOWS.NEW\system32\Drivers\KSecDD.sys [92288 2008-04-14] (Microsoft Corporation) R1 mbamchameleon; D:\WINDOWS.NEW\system32\drivers\mbamchameleon.sys [54360 2014-11-21] (Malwarebytes Corporation) R1 mnmdd; D:\WINDOWS.NEW\system32\Drivers\mnmdd.sys [4224 2004-11-11] (Microsoft Corporation) R3 Modem; D:\WINDOWS.NEW\system32\Drivers\Modem.sys [30336 2008-04-14] (Microsoft Corporation) R1 Mouclass; D:\WINDOWS.NEW\System32\DRIVERS\mouclass.sys [23552 2008-04-14] (Microsoft Corporation) S3 mouhid; D:\WINDOWS.NEW\System32\DRIVERS\mouhid.sys [12288 2001-08-18] (Microsoft Corporation) R0 MountMgr; D:\WINDOWS.NEW\system32\Drivers\MountMgr.sys [42368 2008-04-14] (Microsoft Corporation) R3 MRxDAV; D:\WINDOWS.NEW\System32\DRIVERS\mrxdav.sys [180608 2008-04-14] (Microsoft Corporation) R1 MRxSmb; D:\WINDOWS.NEW\System32\DRIVERS\mrxsmb.sys [456576 2008-04-14] (Microsoft Corporation) R1 Msfs; D:\WINDOWS.NEW\system32\Drivers\Msfs.sys [19072 2008-04-14] (Microsoft Corporation) S3 MSKSSRV; D:\WINDOWS.NEW\System32\drivers\MSKSSRV.sys [7552 2008-04-14] (Microsoft Corporation) S3 MSPCLOCK; D:\WINDOWS.NEW\System32\drivers\MSPCLOCK.sys [5376 2008-04-14] (Microsoft Corporation) S3 MSPQM; D:\WINDOWS.NEW\System32\drivers\MSPQM.sys [4992 2008-04-14] (Microsoft Corporation) R3 mssmbios; D:\WINDOWS.NEW\System32\DRIVERS\mssmbios.sys [15488 2008-04-14] (Microsoft Corporation) R0 Mup; D:\WINDOWS.NEW\system32\Drivers\Mup.sys [105344 2008-04-14] (Microsoft Corporation) R0 NDIS; D:\WINDOWS.NEW\system32\Drivers\NDIS.sys [182656 2008-04-14] (Microsoft Corporation) R3 NdisTapi; D:\WINDOWS.NEW\System32\DRIVERS\ndistapi.sys [10112 2008-04-14] (Microsoft Corporation) S3 Ndisuio; D:\WINDOWS.NEW\System32\DRIVERS\ndisuio.sys [14592 2008-04-14] (Microsoft Corporation) R3 NdisWan; D:\WINDOWS.NEW\System32\DRIVERS\ndiswan.sys [91520 2008-04-14] (Microsoft Corporation) R3 NDProxy; D:\WINDOWS.NEW\system32\Drivers\NDProxy.sys [40576 2008-04-14] (Microsoft Corporation) R1 NetBIOS; D:\WINDOWS.NEW\System32\DRIVERS\netbios.sys [34688 2008-04-14] (Microsoft Corporation) R1 NetBT; D:\WINDOWS.NEW\System32\DRIVERS\netbt.sys [162816 2008-04-14] (Microsoft Corporation) R1 Npfs; D:\WINDOWS.NEW\system32\Drivers\Npfs.sys [30848 2008-04-14] (Microsoft Corporation) R4 Ntfs; D:\WINDOWS.NEW\system32\Drivers\Ntfs.sys [574976 2008-04-14] (Microsoft Corporation) R1 Null; D:\WINDOWS.NEW\system32\Drivers\Null.sys [2944 2004-11-11] (Microsoft Corporation) S3 NwlnkFlt; D:\WINDOWS.NEW\System32\DRIVERS\nwlnkflt.sys [12416 2004-11-11] (Microsoft Corporation) S3 NwlnkFwd; D:\WINDOWS.NEW\System32\DRIVERS\nwlnkfwd.sys [32512 2004-11-11] (Microsoft Corporation) R2 NwlnkIpx; D:\WINDOWS.NEW\System32\DRIVERS\nwlnkipx.sys [88320 2008-04-14] (Microsoft Corporation) R2 NwlnkNb; D:\WINDOWS.NEW\System32\DRIVERS\nwlnknb.sys [63232 2004-11-11] (Microsoft Corporation) R2 NwlnkSpx; D:\WINDOWS.NEW\System32\DRIVERS\nwlnkspx.sys [55936 2004-11-11] (Microsoft Corporation) R3 NWRDR; D:\WINDOWS.NEW\System32\DRIVERS\nwrdr.sys [163584 2008-04-14] (Microsoft Corporation) S3 Parport; D:\WINDOWS.NEW\system32\Drivers\Parport.sys [80384 2008-04-14] (Microsoft Corporation) R0 PartMgr; D:\WINDOWS.NEW\system32\Drivers\PartMgr.sys [19712 2008-04-14] (Microsoft Corporation) S2 ParVdm; D:\WINDOWS.NEW\system32\Drivers\ParVdm.sys [7040 2004-11-11] (Microsoft Corporation) R0 PCI; D:\WINDOWS.NEW\System32\DRIVERS\pci.sys [68224 2008-04-14] (Microsoft Corporation) R0 PCIIde; D:\WINDOWS.NEW\System32\DRIVERS\pciide.sys [3328 2004-11-11] (Microsoft Corporation) R0 Pcmcia; D:\WINDOWS.NEW\System32\DRIVERS\pcmcia.sys [120576 2008-04-14] (Microsoft Corporation) R3 PptpMiniport; D:\WINDOWS.NEW\System32\DRIVERS\raspptp.sys [48384 2008-04-14] (Microsoft Corporation) R3 PSched; D:\WINDOWS.NEW\System32\DRIVERS\psched.sys [69120 2008-04-14] (Microsoft Corporation) R3 Ptilink; D:\WINDOWS.NEW\System32\DRIVERS\ptilink.sys [17792 2004-11-11] (Parallel Technologies, Inc.) R1 RasAcd; D:\WINDOWS.NEW\System32\DRIVERS\rasacd.sys [8832 2004-11-11] (Microsoft Corporation) R3 Rasl2tp; D:\WINDOWS.NEW\System32\DRIVERS\rasl2tp.sys [51328 2008-04-14] (Microsoft Corporation) R3 RasPppoe; D:\WINDOWS.NEW\System32\DRIVERS\raspppoe.sys [41472 2008-04-14] (Microsoft Corporation) R3 Raspti; D:\WINDOWS.NEW\System32\DRIVERS\raspti.sys [16512 2004-11-11] (Microsoft Corporation) R1 Rdbss; D:\WINDOWS.NEW\System32\DRIVERS\rdbss.sys [175744 2008-04-14] (Microsoft Corporation) R1 RDPCDD; D:\WINDOWS.NEW\System32\DRIVERS\RDPCDD.sys [4224 2004-11-11] (Microsoft Corporation) R3 rdpdr; D:\WINDOWS.NEW\System32\DRIVERS\rdpdr.sys [196224 2008-04-14] (Microsoft Corporation) S3 RDPWD; D:\WINDOWS.NEW\system32\Drivers\RDPWD.sys [139656 2008-04-14] (Microsoft Corporation) R1 redbook; D:\WINDOWS.NEW\System32\DRIVERS\redbook.sys [57728 2008-04-14] (Microsoft Corporation) S3 Secdrv; D:\WINDOWS.NEW\System32\DRIVERS\secdrv.sys [20480 2008-04-13] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) S3 Serial; D:\WINDOWS.NEW\system32\Drivers\Serial.sys [65536 2008-04-14] (Microsoft Corporation) S1 Sfloppy; D:\WINDOWS.NEW\system32\Drivers\Sfloppy.sys [11392 2008-04-14] (Microsoft Corporation) S3 splitter; D:\WINDOWS.NEW\System32\drivers\splitter.sys [6272 2008-04-14] (Microsoft Corporation) R0 sr; D:\WINDOWS.NEW\System32\DRIVERS\sr.sys [73472 2008-04-14] (Microsoft Corporation) R3 Srv; D:\WINDOWS.NEW\System32\DRIVERS\srv.sys [334848 2008-04-14] (Microsoft Corporation) R3 swenum; D:\WINDOWS.NEW\System32\DRIVERS\swenum.sys [4352 2008-04-14] (Microsoft Corporation) S3 swmidi; D:\WINDOWS.NEW\System32\drivers\swmidi.sys [56576 2008-04-14] (Microsoft Corporation) R3 sysaudio; D:\WINDOWS.NEW\System32\drivers\sysaudio.sys [60800 2008-04-14] (Microsoft Corporation) S3 tap0901; D:\WINDOWS.NEW\System32\DRIVERS\tap0901.sys [26624 2014-06-30] (The OpenVPN Project) [File not signed] R1 Tcpip; D:\WINDOWS.NEW\System32\DRIVERS\tcpip.sys [361344 2008-04-14] (Microsoft Corporation) S3 TDPIPE; D:\WINDOWS.NEW\system32\Drivers\TDPIPE.sys [12040 2008-04-14] (Microsoft Corporation) S3 TDTCP; D:\WINDOWS.NEW\system32\Drivers\TDTCP.sys [21896 2008-04-14] (Microsoft Corporation) R1 TermDD; D:\WINDOWS.NEW\System32\DRIVERS\termdd.sys [40840 2008-04-14] (Microsoft Corporation) R3 TwoTrack; D:\WINDOWS.NEW\System32\DRIVERS\TwoTrack.sys [11520 2001-08-17] (IBM Corporation) S4 Udfs; D:\WINDOWS.NEW\system32\Drivers\Udfs.sys [66048 2008-04-14] (Microsoft Corporation) S1 UimBus; D:\WINDOWS.NEW\System32\DRIVERS\UimBus.sys [91016 2014-05-19] () S1 Uim_IM; D:\WINDOWS.NEW\System32\DRIVERS\uim_im.sys [540040 2014-05-19] () R3 Update; D:\WINDOWS.NEW\System32\DRIVERS\update.sys [384768 2008-04-14] (Microsoft Corporation) R3 usbccgp; D:\WINDOWS.NEW\System32\DRIVERS\usbccgp.sys [32128 2008-04-14] (Microsoft Corporation) R3 usbehci; D:\WINDOWS.NEW\System32\DRIVERS\usbehci.sys [30208 2008-04-14] (Microsoft Corporation) R3 usbhub; D:\WINDOWS.NEW\System32\DRIVERS\usbhub.sys [59520 2008-04-14] (Microsoft Corporation) S3 usbscan; D:\WINDOWS.NEW\System32\DRIVERS\usbscan.sys [15104 2008-04-14] (Microsoft Corporation) R3 USBSTOR; D:\WINDOWS.NEW\System32\DRIVERS\USBSTOR.SYS [26368 2008-04-14] (Microsoft Corporation) R3 usbuhci; D:\WINDOWS.NEW\System32\DRIVERS\usbuhci.sys [20608 2008-04-14] (Microsoft Corporation) S3 usb_rndisx; D:\WINDOWS.NEW\System32\DRIVERS\usb8023x.sys [12800 2008-04-14] (Microsoft Corporation) R1 VgaSave; D:\WINDOWS.NEW\System32\drivers\vga.sys [20992 2008-04-14] (Microsoft Corporation) R0 VolSnap; D:\WINDOWS.NEW\system32\Drivers\VolSnap.sys [53760 2008-04-14] (Microsoft Corporation) R3 Wanarp; D:\WINDOWS.NEW\System32\DRIVERS\wanarp.sys [34560 2008-04-14] (Microsoft Corporation) R3 wdmaud; D:\WINDOWS.NEW\System32\drivers\wdmaud.sys [83072 2008-04-14] (Microsoft Corporation) R1 WS2IFSL; D:\WINDOWS.NEW\System32\drivers\ws2ifsl.sys [12032 2004-11-11] (Microsoft Corporation) R3 WudfPf; D:\WINDOWS.NEW\System32\DRIVERS\WudfPf.sys [91904 2009-07-13] (Microsoft Corporation) S3 WudfRd; D:\WINDOWS.NEW\System32\DRIVERS\wudfrd.sys [132224 2009-07-13] (Microsoft Corporation) U4 BthServ; No ImagePath S3 catchme; \??\D:\DOKUME~1\ADMINI~1.WIN\LOKALE~1\Temp\catchme.sys [X] S3 HSPADataCardusbmdm; system32\DRIVERS\HSPADataCardusbmdm.sys [X] S3 HSPADataCardusbnmea; system32\DRIVERS\HSPADataCardusbnmea.sys [X] S3 HSPADataCardusbser; system32\DRIVERS\HSPADataCardusbser.sys [X] S4 IntelIde; No ImagePath S3 massfilter; system32\drivers\massfilter.sys [X] S3 MBAMProtector; \??\D:\WINDOWS.NEW\system32\drivers\mbam.sys [X] U4 NVSvc; No ImagePath U5 ScsiPort; D:\WINDOWS.NEW\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation) S1 Uim_DEVIM; system32\DRIVERS\uim_devim.sys [X] ========================== Drivers MD5 ======================= D:\WINDOWS.NEW\System32\DRIVERS\ACPI.sys AC407F1A62C3A300B4F2B5A9F1D55B2C D:\WINDOWS.NEW\System32\DRIVERS\ACPIEC.sys 9E1CA3160DAFB159CA14F83B1E317F75 D:\WINDOWS.NEW\System32\drivers\aec.sys 8BED39E3C35D6A489438B8141717A557 D:\WINDOWS.NEW\System32\drivers\afd.sys 322D0E36693D6E24A2398BEE62A268CD D:\WINDOWS.NEW\System32\DRIVERS\asyncmac.sys B153AFFAC761E7F5FCFA822B9C4E97BC D:\WINDOWS.NEW\System32\DRIVERS\atapi.sys 9F3A2F5AA6875C72BF062C712CFA2674 D:\WINDOWS.NEW\System32\DRIVERS\atmarpc.sys 9916C1225104BA14794209CFA8012159 D:\WINDOWS.NEW\System32\DRIVERS\audstub.sys D9F724AA26C010A217C97606B160ED68 D:\WINDOWS.NEW\system32\Drivers\Beep.sys DA1F27D85E0D1525F6621372E7B685E9 D:\WINDOWS.NEW\system32\Drivers\cbidf2k.sys 90A673FC8E12A79AFBED2576F6A7AAF9 D:\WINDOWS.NEW\system32\Drivers\Cdaudio.sys C1B486A7658353D33A10CC15211A873B D:\WINDOWS.NEW\system32\Drivers\Cdfs.sys C885B02847F5D2FD45A24E219ED93B32 D:\WINDOWS.NEW\System32\DRIVERS\cdrom.sys 1F4260CC5B42272D71F79E570A27A4FE D:\WINDOWS.NEW\System32\DRIVERS\CmBatt.sys 0F6C187D38D98F8DF904589A5F94D411 D:\WINDOWS.NEW\System32\DRIVERS\compbatt.sys 6E4C9F21F0FAE8940661144F41B13203 D:\WINDOWS.NEW\System32\DRIVERS\disk.sys 044452051F3E02E7963599FC8F4F3E25 D:\WINDOWS.NEW\System32\drivers\dmboot.sys 0DCFC8395A99FECBB1EF771CEC7FE4EA D:\WINDOWS.NEW\System32\drivers\dmio.sys 53720AB12B48719D00E327DA470A619A D:\WINDOWS.NEW\System32\drivers\dmload.sys E9317282A63CA4D188C0DF5E09C6AC5F D:\WINDOWS.NEW\System32\drivers\DMusic.sys 8A208DFCF89792A484E76C40E5F50B45 D:\WINDOWS.NEW\System32\drivers\drmkaud.sys 8F5FCFF8E8848AFAC920905FBD9D33C8 D:\PROGRAMME\EMSISOFT ANTI-MALWARE\epp32.sys 85319F7514100FCBA9A92ACA232BA2F9 D:\WINDOWS.NEW\System32\DRIVERS\ewusbnet.sys A52794C010C6DF5B4BC70C4AB5E04088 D:\WINDOWS.NEW\System32\DRIVERS\ew_hwusbdev.sys 57C171EA22F0A7F068FCB0CAEDD1E8E7 D:\WINDOWS.NEW\system32\Drivers\Fastfat.sys 38D332A6D56AF32635675F132548343E D:\WINDOWS.NEW\system32\Drivers\Fdc.sys 92CDD60B6730B9F50F6A1A0C1F8CDC81 D:\WINDOWS.NEW\system32\Drivers\Fips.sys B0678A548587C5F1967B0D70BACAD6C1 D:\WINDOWS.NEW\system32\Drivers\Flpydisk.sys 9D27E7B80BFCDF1CDD9B555862D5E7F0 D:\WINDOWS.NEW\System32\drivers\fltmgr.sys B2CF4B0786F8212CB92ED2B50C6DB6B0 D:\WINDOWS.NEW\system32\Drivers\Fs_Rec.sys 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A D:\WINDOWS.NEW\System32\DRIVERS\ftdisk.sys 8F1955CE42E1484714B542F341647778 D:\WINDOWS.NEW\System32\DRIVERS\msgpc.sys 0A02C63C8B144BD8C86B103DEE7C86A2 D:\WINDOWS.NEW\System32\drivers\CHDAudN.sys 8DC8B34992131EB4B4C71B1A47FDD21C D:\WINDOWS.NEW\System32\DRIVERS\HDAudBus.sys 573C7D0A32852B48F3058CFD8026F511 D:\WINDOWS.NEW\System32\DRIVERS\hidusb.sys CCF82C5EC8A7326C3066DE870C06DAF1 D:\WINDOWS.NEW\System32\Drivers\HTTP.sys F6AACF5BCE2893E0C1754AFEB672E5C9 D:\WINDOWS.NEW\System32\DRIVERS\ewusbmdm.sys 1F40368DC40B17DE3FA0FBE8A9D82F9E D:\WINDOWS.NEW\System32\DRIVERS\i8042prt.sys E283B97CFBEB86C1D86BAED5F7846A92 D:\WINDOWS.NEW\System32\DRIVERS\imapi.sys 083A052659F5310DD8B6A6CB05EDCF8E D:\WINDOWS.NEW\System32\DRIVERS\intelppm.sys 4C7D2750158ED6E7AD642D97BFFAE351 D:\WINDOWS.NEW\System32\drivers\ip6fw.sys 3BB22519A194418D5FEC05D800A19AD0 D:\WINDOWS.NEW\System32\DRIVERS\ipfltdrv.sys 731F22BA402EE4B62748ADAF6363C182 D:\WINDOWS.NEW\System32\DRIVERS\ipinip.sys B87AB476DCF76E72010632B5550955F5 D:\WINDOWS.NEW\System32\DRIVERS\ipnat.sys CC748EA12C6EFFDE940EE98098BF96BB D:\WINDOWS.NEW\System32\DRIVERS\ipsec.sys 23C74D75E36E7158768DD63D92789A91 D:\WINDOWS.NEW\System32\DRIVERS\irenum.sys C93C9FF7B04D772627A3646D89F7BF89 D:\WINDOWS.NEW\System32\DRIVERS\isapnp.sys 6DFB88F64135C525433E87648BDA30DE D:\WINDOWS.NEW\System32\DRIVERS\kbdclass.sys 1704D8C4C8807B889E43C649B478A452 D:\WINDOWS.NEW\System32\DRIVERS\kbdhid.sys B6D6C117D771C98130497265F26D1882 D:\WINDOWS.NEW\System32\drivers\kmixer.sys 692BCF44383D056AED41B045A323D378 D:\WINDOWS.NEW\system32\Drivers\KSecDD.sys 1705745D900DABF2D89F90EBADDC7517 D:\WINDOWS.NEW\system32\drivers\mbamchameleon.sys FFB32E70D735146F5630DC7A96B6E1A8 D:\WINDOWS.NEW\system32\Drivers\mnmdd.sys 4AE068242760A1FB6E1A44BF4E16AFA6 D:\WINDOWS.NEW\system32\Drivers\Modem.sys 6FB74EBD4EC57A6F1781DE3852CC3362 D:\WINDOWS.NEW\System32\DRIVERS\mouclass.sys B24CE8005DEAB254C0251E15CB71D802 D:\WINDOWS.NEW\System32\DRIVERS\mouhid.sys 66A6F73C74E1791464160A7065CE711A D:\WINDOWS.NEW\system32\Drivers\MountMgr.sys A80B9A0BAD1B73637DBCBBA7DF72D3FD D:\WINDOWS.NEW\System32\DRIVERS\mrxdav.sys 11D42BB6206F33FBB3BA0288D3EF81BD D:\WINDOWS.NEW\System32\DRIVERS\mrxsmb.sys 68755F0FF16070178B54674FE5B847B0 D:\WINDOWS.NEW\system32\Drivers\Msfs.sys C941EA2454BA8350021D774DAF0F1027 D:\WINDOWS.NEW\System32\drivers\MSKSSRV.sys D1575E71568F4D9E14CA56B7B0453BF1 D:\WINDOWS.NEW\System32\drivers\MSPCLOCK.sys 325BB26842FC7CCC1FCCE2C457317F3E D:\WINDOWS.NEW\System32\drivers\MSPQM.sys BAD59648BA099DA4A17680B39730CB3D D:\WINDOWS.NEW\System32\DRIVERS\mssmbios.sys AF5F4F3F14A8EA2C26DE30F7A1E17136 D:\WINDOWS.NEW\system32\Drivers\Mup.sys 2F625D11385B1A94360BFC70AAEFDEE1 D:\WINDOWS.NEW\system32\Drivers\NDIS.sys 1DF7F42665C94B825322FAE71721130D D:\WINDOWS.NEW\System32\DRIVERS\ndistapi.sys 1AB3D00C991AB086E69DB84B6C0ED78F D:\WINDOWS.NEW\System32\DRIVERS\ndisuio.sys F927A4434C5028758A842943EF1A3849 D:\WINDOWS.NEW\System32\DRIVERS\ndiswan.sys EDC1531A49C80614B2CFDA43CA8659AB D:\WINDOWS.NEW\system32\Drivers\NDProxy.sys 6215023940CFD3702B46ABC304E1D45A D:\WINDOWS.NEW\System32\DRIVERS\netbios.sys 5D81CF9A2F1A3A756B66CF684911CDF0 D:\WINDOWS.NEW\System32\DRIVERS\netbt.sys 74B2B2F5BEA5E9A3DC021D685551BD3D D:\WINDOWS.NEW\system32\Drivers\Npfs.sys 3182D64AE053D6FB034F44B6DEF8034A D:\WINDOWS.NEW\system32\Drivers\Ntfs.sys 78A08DD6A8D65E697C18E1DB01C5CDCA D:\WINDOWS.NEW\system32\Drivers\Null.sys 73C1E1F395918BC2C6DD67AF7591A3AD D:\WINDOWS.NEW\System32\DRIVERS\nwlnkflt.sys B305F3FAD35083837EF46A0BBCE2FC57 D:\WINDOWS.NEW\System32\DRIVERS\nwlnkfwd.sys C99B3415198D1AAB7227F2C88FD664B9 D:\WINDOWS.NEW\System32\DRIVERS\nwlnkipx.sys 8B8B1BE2DBA4025DA6786C645F77F123 D:\WINDOWS.NEW\System32\DRIVERS\nwlnknb.sys 56D34A67C05E94E16377C60609741FF8 D:\WINDOWS.NEW\System32\DRIVERS\nwlnkspx.sys C0BB7D1615E1ACBDC99757F6CEAF8CF0 D:\WINDOWS.NEW\System32\DRIVERS\nwrdr.sys 36B9B950E3D2E100970A48D8BAD86740 D:\WINDOWS.NEW\system32\Drivers\Parport.sys F84785660305B9B903FB3BCA8BA29837 D:\WINDOWS.NEW\system32\Drivers\PartMgr.sys BEB3BA25197665D82EC7065B724171C6 D:\WINDOWS.NEW\system32\Drivers\ParVdm.sys C2BF987829099A3EAA2CA6A0A90ECB4F D:\WINDOWS.NEW\System32\DRIVERS\pci.sys 387E8DEDC343AA2D1EFBC30580273ACD D:\WINDOWS.NEW\System32\DRIVERS\pciide.sys 59BA86D9A61CBCF4DF8E598C331F5B82 D:\WINDOWS.NEW\System32\DRIVERS\pcmcia.sys A2A966B77D61847D61A3051DF87C8C97 D:\WINDOWS.NEW\System32\DRIVERS\raspptp.sys EFEEC01B1D3CF84F16DDD24D9D9D8F99 D:\WINDOWS.NEW\System32\DRIVERS\psched.sys 09298EC810B07E5D582CB3A3F9255424 D:\WINDOWS.NEW\System32\DRIVERS\ptilink.sys 80D317BD1C3DBC5D4FE7B1678C60CADD D:\WINDOWS.NEW\System32\DRIVERS\rasacd.sys FE0D99D6F31E4FAD8159F690D68DED9C D:\WINDOWS.NEW\System32\DRIVERS\rasl2tp.sys 11B4A627BC9614B885C4969BFA5FF8A6 D:\WINDOWS.NEW\System32\DRIVERS\raspppoe.sys 5BC962F2654137C9909C3D4603587DEE D:\WINDOWS.NEW\System32\DRIVERS\raspti.sys FDBB1D60066FCFBB7452FD8F9829B242 D:\WINDOWS.NEW\System32\DRIVERS\rdbss.sys 7AD224AD1A1437FE28D89CF22B17780A D:\WINDOWS.NEW\System32\DRIVERS\RDPCDD.sys 4912D5B403614CE99C28420F75353332 D:\WINDOWS.NEW\System32\DRIVERS\rdpdr.sys 15CABD0F7C00C47C70124907916AF3F1 D:\WINDOWS.NEW\system32\Drivers\RDPWD.sys 6728E45B66F93C08F11DE2E316FC70DD D:\WINDOWS.NEW\System32\DRIVERS\redbook.sys ED761D453856F795A7FE056E42C36365 D:\WINDOWS.NEW\System32\DRIVERS\secdrv.sys ==> MD5 is legit D:\WINDOWS.NEW\system32\Drivers\Serial.sys CF24EB4F0412C82BCD1F4F35A025E31D D:\WINDOWS.NEW\system32\Drivers\Sfloppy.sys 8E6B8C671615D126FDC553D1E2DE5562 D:\WINDOWS.NEW\System32\drivers\splitter.sys AB8B92451ECB048A4D1DE7C3FFCB4A9F D:\WINDOWS.NEW\System32\DRIVERS\sr.sys 50FA898F8C032796D3B1B9951BB5A90F D:\WINDOWS.NEW\System32\DRIVERS\srv.sys 5252605079810904E31C332E241CD59B D:\WINDOWS.NEW\System32\DRIVERS\swenum.sys 3941D127AEF12E93ADDF6FE6EE027E0F D:\WINDOWS.NEW\System32\drivers\swmidi.sys 8CE882BCC6CF8A62F2B2323D95CB3D01 D:\WINDOWS.NEW\System32\drivers\sysaudio.sys 8B83F3ED0F1688B4958F77CD6D2BF290 D:\WINDOWS.NEW\System32\DRIVERS\tap0901.sys 8CF6E2AE1707D82E904ECCA68CEF8B87 D:\WINDOWS.NEW\System32\DRIVERS\tcpip.sys 93EA8D04EC73A85DB02EB8805988F733 D:\WINDOWS.NEW\system32\Drivers\TDPIPE.sys 6471A66807F5E104E4885F5B67349397 D:\WINDOWS.NEW\system32\Drivers\TDTCP.sys C56B6D0402371CF3700EB322EF3AAF61 D:\WINDOWS.NEW\System32\DRIVERS\termdd.sys 88155247177638048422893737429D9E D:\WINDOWS.NEW\System32\DRIVERS\TwoTrack.sys 17687545F77A648AF7F9F1064EB61191 D:\WINDOWS.NEW\system32\Drivers\Udfs.sys 5787B80C2E3C5E2F56C2A233D91FA2C9 D:\WINDOWS.NEW\System32\DRIVERS\UimBus.sys 9F643D4C0F88ABFE8023236A69E52A76 D:\WINDOWS.NEW\System32\DRIVERS\uim_im.sys DCE5E9644069981C7646D1CC83A938A2 D:\WINDOWS.NEW\System32\DRIVERS\update.sys 402DDC88356B1BAC0EE3DD1580C76A31 D:\WINDOWS.NEW\System32\DRIVERS\usbccgp.sys 173F317CE0DB8E21322E71B7E60A27E8 D:\WINDOWS.NEW\System32\DRIVERS\usbehci.sys 65DCF09D0E37D4C6B11B5B0B76D470A7 D:\WINDOWS.NEW\System32\DRIVERS\usbhub.sys 1AB3CDDE553B6E064D2E754EFE20285C D:\WINDOWS.NEW\System32\DRIVERS\usbscan.sys A0B8CF9DEB1184FBDD20784A58FA75D4 D:\WINDOWS.NEW\System32\DRIVERS\USBSTOR.SYS A32426D9B14A089EAA1D922E0C5801A9 D:\WINDOWS.NEW\System32\DRIVERS\usbuhci.sys 26496F9DEE2D787FC3E61AD54821FFE6 D:\WINDOWS.NEW\System32\DRIVERS\usb8023x.sys B6CC50279D6CD28E090A5D33244ADC9A D:\WINDOWS.NEW\System32\drivers\vga.sys 0D3A8FAFCEACD8B7625CD549757A7DF1 D:\WINDOWS.NEW\system32\Drivers\VolSnap.sys A5A712F4E880874A477AF790B5186E1D D:\WINDOWS.NEW\System32\DRIVERS\wanarp.sys E20B95BAEDB550F32DD489265C1DA1F6 D:\WINDOWS.NEW\System32\drivers\wdmaud.sys 6768ACF64B18196494413695F0C3A00F D:\WINDOWS.NEW\System32\drivers\ws2ifsl.sys 6ABE6E225ADB5A751622A9CC3BC19CE8 D:\WINDOWS.NEW\System32\DRIVERS\WudfPf.sys EAA6324F51214D2F6718977EC9CE0DEF D:\WINDOWS.NEW\System32\DRIVERS\wudfrd.sys F91FF1E51FCA30B3C3981DB7D5924252 ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== Three Months Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-06 20:34 - 2015-04-06 20:35 - 00049616 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\FRST.txt 2015-04-06 20:31 - 2015-04-06 20:32 - 00000462 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\defogger_disable.log 2015-04-06 20:31 - 2015-04-06 20:31 - 00000000 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\defogger_reenable 2015-04-06 20:23 - 2015-04-06 20:23 - 00380416 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe 2015-04-06 20:23 - 2015-04-06 20:23 - 00050477 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\Defogger.exe 2015-04-06 20:13 - 2015-04-06 20:13 - 01135104 _____ (Farbar) D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\FRST.exe 2015-04-06 20:08 - 2015-04-06 20:08 - 00001868 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Desktop\ALDI TALK Verbindungsassistent.lnk 2015-04-06 20:08 - 2015-04-06 20:08 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\ALDI TALK Verbindungsassistent 2015-04-06 20:08 - 2015-04-06 20:08 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\ALDI TALK Verbindungsassistent 2015-04-06 20:07 - 2015-04-06 20:16 - 00000000 ____D () D:\Programme\ALDITALKVerbindungsassistent 2015-04-06 19:59 - 2015-03-31 01:44 - 00000708 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\Mozilla Firefox.lnk 2015-04-06 14:43 - 2015-04-06 14:43 - 00000000 ____D () D:\Neuer Ordner 2015-04-05 10:06 - 2015-04-06 01:25 - 00000000 ____D () D:\Programme\IPVanish 2015-04-05 10:06 - 2015-04-05 10:06 - 00000667 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Desktop\IPVanish.lnk 2015-04-05 10:06 - 2015-04-05 10:06 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\IPVanish 2015-04-05 10:06 - 2015-04-05 10:06 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\IPVanish 2015-04-05 09:51 - 2015-04-06 20:09 - 00052684 _____ () D:\WINDOWS.NEW\setupapi.log 2015-04-04 19:55 - 2015-04-04 19:55 - 00000991 _____ () D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\WtgInstaller.txt 2015-04-04 17:50 - 2015-04-04 17:50 - 00122928 _____ () D:\WINDOWS.NEW\system32\FNTCACHE.DAT 2015-04-04 17:41 - 2015-04-06 20:35 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp 2015-04-04 17:41 - 2015-04-04 19:55 - 00000000 ____D () D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\temp 2015-04-04 17:41 - 2015-04-04 17:41 - 00010204 _____ () D:\ComboFix.txt 2015-04-04 17:41 - 2015-04-04 17:41 - 00000000 ____D () D:\Dokumente und Einstellungen\NetworkService.NT-AUTORITÄT\Lokale Einstellungen\temp 2015-04-04 17:41 - 2015-04-04 17:41 - 00000000 ____D () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\temp 2015-04-04 17:41 - 2015-04-04 17:41 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\temp 2015-04-04 16:52 - 2015-04-04 16:52 - 00000895 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\Revo Uninstaller.lnk 2015-04-04 16:52 - 2015-04-04 16:52 - 00000000 ____D () D:\Programme\VS Revo Group 2015-04-04 15:31 - 2015-04-04 15:31 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Emsisoft Anti-Malware 2015-04-04 15:31 - 2015-04-04 15:31 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Emsisoft Anti-Malware 2015-04-04 15:24 - 2015-04-06 20:23 - 00000000 ____D () D:\WINDOWS.NEW\temp 2015-04-03 04:09 - 2015-04-03 04:09 - 00010932 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Eigene Dateien\customer drop-service.ods 2015-04-02 02:27 - 2015-04-02 02:27 - 00000000 ____D () D:\RegBackup 2015-04-02 02:26 - 2015-04-02 02:26 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Windows Genuine Advantage 2015-04-02 02:26 - 2015-04-02 02:26 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Windows Genuine Advantage 2015-04-01 18:55 - 2015-04-04 14:40 - 00000000 ____D () D:\WINDOWS.NEW\Minidump 2015-04-01 04:28 - 2015-04-06 03:02 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\IPVanish 2015-04-01 04:28 - 2015-04-01 04:28 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\IPVanish.com 2015-04-01 03:47 - 2015-04-01 03:47 - 00000000 ____D () D:\6a9023bc2b1bc7cac61397 2015-04-01 03:46 - 2015-04-05 14:49 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Package Cache 2015-04-01 03:46 - 2015-04-05 14:49 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Package Cache 2015-04-01 00:39 - 2015-04-01 00:45 - 00011751 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Eigene Dateien\Website.odt 2015-04-01 00:39 - 2015-04-01 00:39 - 00011413 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Eigene Dateien\Ablauf Franchise Antrag.odt 2015-03-31 22:26 - 2015-03-31 22:26 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Emsisoft 2015-03-31 22:26 - 2015-03-31 22:26 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Emsisoft 2015-03-31 22:10 - 2015-04-06 20:28 - 00000000 ____D () D:\Programme\Emsisoft Anti-Malware 2015-03-31 03:03 - 2011-06-26 08:45 - 00256000 _____ () D:\WINDOWS.NEW\PEV.exe 2015-03-31 03:03 - 2010-11-07 19:20 - 00208896 _____ () D:\WINDOWS.NEW\MBR.exe 2015-03-31 03:03 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) D:\WINDOWS.NEW\NIRCMD.exe 2015-03-31 03:03 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) D:\WINDOWS.NEW\SWREG.exe 2015-03-31 03:03 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) D:\WINDOWS.NEW\SWSC.exe 2015-03-31 03:03 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) D:\WINDOWS.NEW\SWXCACLS.exe 2015-03-31 03:03 - 2000-08-31 02:00 - 00098816 _____ () D:\WINDOWS.NEW\sed.exe 2015-03-31 03:03 - 2000-08-31 02:00 - 00080412 _____ () D:\WINDOWS.NEW\grep.exe 2015-03-31 03:03 - 2000-08-31 02:00 - 00068096 _____ () D:\WINDOWS.NEW\zip.exe 2015-03-31 02:18 - 2015-03-31 03:02 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Malwarebytes' Anti-Malware (portable) 2015-03-31 02:18 - 2015-03-31 03:02 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Malwarebytes' Anti-Malware (portable) 2015-03-31 01:44 - 2015-03-31 01:44 - 00000708 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Mozilla Firefox.lnk 2015-03-31 01:44 - 2015-03-31 01:44 - 00000708 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Mozilla Firefox.lnk 2015-03-31 01:44 - 2015-03-31 01:44 - 00000000 ____D () D:\Programme\Mozilla Maintenance Service 2015-03-31 01:44 - 2015-03-31 01:44 - 00000000 ____D () D:\Programme\Mozilla Firefox 2015-03-31 00:24 - 2015-04-02 04:22 - 00000000 ____D () D:\AdwCleaner 2015-03-31 00:15 - 2008-04-14 07:52 - 00021504 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\hidserv.dll 2015-03-31 00:15 - 2008-04-14 07:52 - 00021504 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\hidserv.dll 2015-03-31 00:14 - 2008-04-14 07:28 - 00014720 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdhid.sys 2015-03-31 00:14 - 2008-04-14 07:28 - 00014720 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\kbdhid.sys 2015-03-31 00:14 - 2008-04-14 00:15 - 00010368 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\hidusb.sys 2015-03-31 00:14 - 2008-04-14 00:15 - 00010368 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\hidusb.sys 2015-03-31 00:14 - 2001-08-18 04:22 - 00012288 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mouhid.sys 2015-03-31 00:14 - 2001-08-18 04:22 - 00012288 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\mouhid.sys 2015-03-31 00:07 - 2015-04-06 20:34 - 00000000 ____D () D:\FRST 2015-03-30 17:29 - 2015-04-06 20:13 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\ALDITALKVerbindungsassistent 2015-03-30 17:29 - 2015-04-06 20:08 - 01112288 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\WdfCoInstaller01007.dll 2015-03-30 17:29 - 2015-04-06 20:08 - 01112288 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\WdfCoInstaller01007.dll 2015-03-30 17:29 - 2015-04-06 20:08 - 00860928 _____ (DiBcom SA) D:\WINDOWS.NEW\system32\Drivers\mod7700.sys 2015-03-30 17:29 - 2015-04-06 20:08 - 00117504 _____ (Huawei Technologies Co., Ltd.) D:\WINDOWS.NEW\system32\Drivers\ewusbnet.sys 2015-03-30 17:29 - 2015-04-06 20:08 - 00106496 _____ (Huawei Technologies Co., Ltd.) D:\WINDOWS.NEW\system32\Drivers\ewusbmdm.sys 2015-03-30 17:29 - 2015-04-06 20:08 - 00102784 _____ (Huawei Technologies Co., Ltd.) D:\WINDOWS.NEW\system32\Drivers\ew_hwusbdev.sys 2015-03-30 17:29 - 2015-04-06 20:08 - 00082816 _____ (Huawei Technologies Co., Ltd.) D:\WINDOWS.NEW\system32\Drivers\ew_jucdcacm.sys 2015-03-30 17:29 - 2015-04-06 20:08 - 00072576 _____ (Huawei Technologies Co., Ltd.) D:\WINDOWS.NEW\system32\Drivers\ew_jubusenum.sys 2015-03-30 17:29 - 2015-04-06 20:08 - 00051456 _____ (Huawei Technologies Co., Ltd.) D:\WINDOWS.NEW\system32\Drivers\ew_jucdcecm.sys 2015-03-30 17:29 - 2015-04-06 20:08 - 00028672 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\usbccid.sys 2015-03-30 17:29 - 2015-04-06 20:08 - 00026496 _____ (Huawei Technologies Co., Ltd.) D:\WINDOWS.NEW\system32\Drivers\ew_juextctrl.sys 2015-03-30 17:29 - 2015-04-06 20:08 - 00024448 _____ (Huawei Tech. Co., Ltd.) D:\WINDOWS.NEW\system32\Drivers\ewdcsc.sys 2015-03-30 17:29 - 2015-04-06 20:08 - 00011136 _____ (Huawei Technologies Co., Ltd.) D:\WINDOWS.NEW\system32\Drivers\ew_usbenumfilter.sys 2015-03-30 17:29 - 2015-04-06 20:08 - 00001868 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\ALDI TALK Verbindungsassistent.lnk 2015-03-30 17:29 - 2015-04-06 20:08 - 00001868 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\ALDI TALK Verbindungsassistent.lnk 2015-03-30 17:28 - 2015-03-30 17:28 - 00000000 ____D () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Anwendungsdaten\ALDITALKVerbindungsassistent 2015-03-30 16:11 - 2015-03-30 16:11 - 00000000 ____D () D:\Programme\avmwlanstick 2015-03-30 16:11 - 2015-03-30 16:11 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\FRITZ!WLAN 2015-03-30 16:10 - 2015-03-30 16:10 - 00000000 ____D () D:\Dokumente und Einstellungen\Besitzer\AVM_Driver 2015-03-30 00:18 - 2015-04-04 19:54 - 00000000 ____D () D:\WINDOWS.0 2015-03-29 23:27 - 2015-03-29 23:27 - 00000104 _____ () D:\Dokumente und Einstellungen\Besitzer\Desktop\Arbeitsplatz.lnk 2015-03-29 23:25 - 2015-03-30 16:11 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme 2015-03-29 23:25 - 2015-03-30 00:03 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Autostart 2015-03-29 23:25 - 2015-03-29 23:25 - 00000000 ___SD () D:\Dokumente und Einstellungen\Default User.WINDOWS.0\Lokale Einstellungen\Verlauf 2015-03-29 23:25 - 2015-03-29 23:25 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User.WINDOWS.0\Startmenü\Programme\Autostart 2015-03-29 23:25 - 2015-03-29 23:25 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User.WINDOWS.0\Startmenü 2015-03-29 23:25 - 2015-03-29 23:25 - 00000000 ___HD () D:\Dokumente und Einstellungen\Default User.WINDOWS.0\Netzwerkumgebung 2015-03-29 23:25 - 2015-03-29 23:25 - 00000000 ___HD () D:\Dokumente und Einstellungen\Default User.WINDOWS.0\Druckumgebung 2015-03-29 23:25 - 2015-03-29 23:25 - 00000000 ____D () D:\Dokumente und Einstellungen\Default User.WINDOWS.0\Lokale Einstellungen\Temp 2015-03-29 23:25 - 2015-03-29 22:37 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User.WINDOWS.0\Startmenü\Programme 2015-03-29 23:25 - 2015-03-29 22:37 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü 2015-03-29 23:25 - 2015-03-29 22:34 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Dokumente 2015-03-29 23:24 - 2015-03-29 22:37 - 00000000 ___HD () D:\Dokumente und Einstellungen\Default User.WINDOWS.0 2015-03-29 23:24 - 2015-03-29 22:36 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.0 2015-03-29 22:48 - 2015-03-29 22:48 - 00000000 ____D () D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Internet-Manager 2015-03-29 22:41 - 2015-04-04 19:55 - 00000190 ___SH () D:\Dokumente und Einstellungen\Besitzer\ntuser.ini 2015-03-29 22:41 - 2015-03-30 16:10 - 00000000 ____D () D:\Dokumente und Einstellungen\Besitzer 2015-03-29 22:41 - 2015-03-29 23:25 - 00000000 ___SD () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT.000\Lokale Einstellungen\Verlauf 2015-03-29 22:41 - 2015-03-29 23:25 - 00000000 ___RD () D:\Dokumente und Einstellungen\Besitzer\Startmenü\Programme\Autostart 2015-03-29 22:41 - 2015-03-29 23:25 - 00000000 ___RD () D:\Dokumente und Einstellungen\Besitzer\Startmenü 2015-03-29 22:41 - 2015-03-29 23:25 - 00000000 ___HD () D:\Dokumente und Einstellungen\NetworkService.NT-AUTORITÄT.000\Lokale Einstellungen\Verlauf 2015-03-29 22:41 - 2015-03-29 23:25 - 00000000 ___HD () D:\Dokumente und Einstellungen\Besitzer\Netzwerkumgebung 2015-03-29 22:41 - 2015-03-29 23:25 - 00000000 ___HD () D:\Dokumente und Einstellungen\Besitzer\Druckumgebung 2015-03-29 22:41 - 2015-03-29 22:41 - 00000778 _____ () D:\Dokumente und Einstellungen\Besitzer\Startmenü\Programme\Windows Media Player.lnk 2015-03-29 22:41 - 2015-03-29 22:41 - 00000753 _____ () D:\Dokumente und Einstellungen\Besitzer\Startmenü\Programme\Internet Explorer.lnk 2015-03-29 22:41 - 2015-03-29 22:41 - 00000724 _____ () D:\Dokumente und Einstellungen\Besitzer\Startmenü\Programme\Outlook Express.lnk 2015-03-29 22:41 - 2015-03-29 22:41 - 00000020 ___SH () D:\Dokumente und Einstellungen\NetworkService.NT-AUTORITÄT.000\ntuser.ini 2015-03-29 22:41 - 2015-03-29 22:41 - 00000020 ___SH () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT.000\ntuser.ini 2015-03-29 22:41 - 2015-03-29 22:41 - 00000000 __SHD () D:\Dokumente und Einstellungen\NetworkService.NT-AUTORITÄT.000 2015-03-29 22:41 - 2015-03-29 22:41 - 00000000 __SHD () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT.000 2015-03-29 22:41 - 2015-03-29 22:41 - 00000000 ___SD () D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Verlauf 2015-03-29 22:41 - 2015-03-29 22:41 - 00000000 ___RD () D:\Dokumente und Einstellungen\Besitzer\Startmenü\Programme\Zubehör 2015-03-29 22:41 - 2015-03-29 22:41 - 00000000 ___RD () D:\Dokumente und Einstellungen\Besitzer\Startmenü\Programme 2015-03-29 22:41 - 2015-03-29 22:41 - 00000000 ___RD () D:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Eigene Musik 2015-03-29 22:41 - 2015-03-29 22:41 - 00000000 ___RD () D:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Eigene Bilder 2015-03-29 22:41 - 2015-03-29 22:41 - 00000000 ____D () D:\Dokumente und Einstellungen\NetworkService.NT-AUTORITÄT.000\Lokale Einstellungen\Temp 2015-03-29 22:41 - 2015-03-29 22:41 - 00000000 ____D () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT.000\Lokale Einstellungen\Temp 2015-03-29 22:41 - 2015-03-29 22:37 - 00001617 _____ () D:\Dokumente und Einstellungen\Besitzer\Startmenü\Programme\Remoteunterstützung.lnk 2015-03-29 22:37 - 2015-03-29 22:37 - 00001625 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programmzugriff und -standards.lnk 2015-03-29 22:37 - 2015-03-29 22:37 - 00001617 _____ () D:\Dokumente und Einstellungen\Default User.WINDOWS.0\Startmenü\Programme\Remoteunterstützung.lnk 2015-03-29 22:37 - 2015-03-29 22:37 - 00001599 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Windows aktivieren.lnk 2015-03-29 22:37 - 2015-03-29 22:37 - 00001525 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Windows Update.lnk 2015-03-29 22:37 - 2015-03-29 22:37 - 00000398 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Windows-Katalog.lnk 2015-03-29 22:36 - 2015-03-29 22:36 - 00000000 __SHD () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\DRM 2015-03-29 22:35 - 2015-03-29 22:37 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User.WINDOWS.0\Startmenü\Programme\Zubehör 2015-03-29 22:35 - 2015-03-29 22:35 - 00000764 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Windows Movie Maker.lnk 2015-03-29 22:33 - 2015-03-29 22:37 - 00000778 _____ () D:\Dokumente und Einstellungen\Default User.WINDOWS.0\Startmenü\Programme\Windows Media Player.lnk 2015-03-29 22:33 - 2015-03-29 22:37 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Verwaltung 2015-03-29 22:33 - 2015-03-29 22:33 - 00002010 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\MSN.lnk 2015-03-29 22:33 - 2015-03-29 22:33 - 00000621 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Windows Messenger.lnk 2015-03-29 22:33 - 2015-03-29 22:33 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Spiele 2015-03-29 22:33 - 2015-03-29 22:33 - 00000000 ____D () D:\Programme\Online Services 2015-03-29 22:33 - 2015-03-29 22:33 - 00000000 ____D () D:\Programme\ComPlus Applications 2015-03-29 22:31 - 2015-03-29 22:33 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Zubehör 2015-03-29 22:07 - 2015-04-06 20:04 - 00000000 ____D () D:\Programme\Gemeinsame Dateien\Adobe 2015-03-29 22:07 - 2015-03-29 22:07 - 00000000 ____D () D:\Programme\Java 2015-03-29 22:07 - 2015-03-29 22:07 - 00000000 ____D () D:\Programme\Gemeinsame Dateien\Java 2015-03-29 21:18 - 2015-03-29 21:18 - 00000000 ____D () D:\Programme\ Malwarebytes Anti-Malware 2015-03-29 21:15 - 2015-03-29 21:15 - 00000000 ____D () D:\Programme\Mozilla Firefox(2) 2015-03-29 21:15 - 2015-03-29 21:15 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Mozilla 2015-03-29 21:15 - 2015-03-29 21:15 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Mozilla 2015-03-29 21:15 - 2015-03-29 21:15 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\Mozilla 2015-03-29 21:15 - 2015-03-29 21:15 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\Mozilla 2015-03-29 21:14 - 2015-03-29 21:14 - 00000000 ____D () D:\Programme\CONEXANT 2015-03-29 21:14 - 2015-03-29 21:14 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\Sun 2015-03-29 21:14 - 2015-03-29 21:14 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\tor 2015-03-29 21:14 - 2015-03-29 21:14 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\Internet-Manager 2015-03-29 21:05 - 2015-03-29 21:05 - 00000079 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\NdisNetworkCfg.xml 2015-03-25 22:37 - 2015-03-25 22:37 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\Mozilla(2) 2015-03-24 22:54 - 2015-03-29 21:15 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\Mozilla(2) 2015-03-24 22:53 - 2015-03-24 22:53 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Mozilla(2) 2015-03-24 22:53 - 2015-03-24 22:53 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Mozilla(2) 2015-03-13 08:21 - 2015-03-19 23:12 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\Tor Browser 2015-03-13 04:00 - 2015-04-04 17:49 - 00065536 _____ () D:\WINDOWS.NEW\system32\config\Kaspersk.evt 2015-03-13 04:00 - 2015-03-13 04:00 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Sun 2015-03-13 04:00 - 2015-03-13 04:00 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Sun 2015-03-13 03:51 - 2015-03-13 03:51 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\Sun 2015-03-13 02:47 - 2015-03-29 22:07 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Adobe 2015-03-13 02:47 - 2015-03-29 22:07 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Adobe 2015-03-09 22:51 - 2015-03-09 22:51 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\OpenOffice 2015-03-09 22:44 - 2015-04-01 02:43 - 00000000 ____D () D:\WINDOWS.NEW\system32\SupportAppPBHostless Modem 2015-03-09 22:44 - 2015-04-01 02:43 - 00000000 ____D () D:\Programme\Hostless Modem 2015-03-09 22:26 - 2015-03-09 22:27 - 00000000 ___SD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\OpenOffice 4.0.1 2015-03-09 22:26 - 2015-03-09 22:27 - 00000000 ___SD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\OpenOffice 4.0.1 2015-03-09 22:26 - 2015-03-09 22:26 - 00000853 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\OpenOffice 4.0.1.lnk 2015-03-09 22:25 - 2015-03-09 22:26 - 00000000 ____D () D:\Programme\OpenOffice 4 2015-03-07 20:06 - 2015-03-07 20:06 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\WinRAR 2015-03-07 20:05 - 2015-03-13 02:08 - 00000000 ____D () D:\Programme\WinRAR 2015-03-07 06:19 - 2015-04-01 01:40 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\Adobe 2015-03-07 03:40 - 2015-03-07 03:40 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\voip 2015-03-03 01:49 - 2015-03-03 01:49 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\IsolatedStorage 2015-03-01 23:11 - 2015-03-01 23:11 - 00000000 __HDC () D:\WINDOWS.NEW\$NtUninstallXPSEPSCLP$ 2015-03-01 23:11 - 2006-06-29 14:07 - 00014048 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\spmsg2.dll 2015-03-01 23:09 - 2015-04-01 02:48 - 00567056 _____ () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat 2015-03-01 23:09 - 2015-03-01 23:11 - 00000000 ____D () D:\WINDOWS.NEW\system32\XPSViewer 2015-03-01 23:09 - 2015-03-01 23:09 - 00000000 ____D () D:\Programme\Reference Assemblies 2015-03-01 23:09 - 2015-03-01 23:09 - 00000000 ____D () D:\Programme\MSBuild 2015-03-01 23:08 - 2015-03-01 23:08 - 00000000 ____D () D:\14d577ca306f72b0058e2319e1 2015-03-01 23:08 - 2008-07-06 14:06 - 01676288 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\xpssvcs.dll 2015-03-01 23:08 - 2008-07-06 14:06 - 01676288 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\xpssvcs.dll 2015-03-01 23:08 - 2008-07-06 14:06 - 00575488 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\xpsshhdr.dll 2015-03-01 23:08 - 2008-07-06 14:06 - 00575488 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\xpsshhdr.dll 2015-03-01 23:08 - 2008-07-06 14:06 - 00117760 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\prntvpt.dll 2015-03-01 23:08 - 2008-07-06 14:06 - 00089088 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\filterpipelineprintproc.dll 2015-03-01 23:08 - 2008-07-06 12:50 - 00597504 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\printfilterpipelinesvc.exe 2015-03-01 15:54 - 2015-04-06 03:02 - 01007835 _____ () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-1292428093-484763869-682003330-500-0.dat 2015-03-01 15:54 - 2015-04-06 03:02 - 00135490 _____ () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat 2015-03-01 15:40 - 2015-04-01 12:16 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\PDFCreator 2015-03-01 15:39 - 2015-03-01 23:20 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\pdf-watermark-remover-wm 2015-03-01 15:39 - 2015-03-01 23:20 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\pdf-watermark-remover-wm 2015-03-01 15:33 - 2015-03-01 15:33 - 00098488 _____ (pdfforge GmbH) D:\WINDOWS.NEW\system32\pdfcmon.dll 2015-03-01 15:33 - 2015-03-01 15:33 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\PDF Architect 2 2015-03-01 15:33 - 2015-03-01 15:33 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\PDF Architect 2 2015-03-01 15:20 - 2015-03-01 15:20 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Tempbb8f0ffd22a25f17ad7b564a99dd2e59 2015-03-01 15:17 - 2015-03-01 15:17 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Tempd9541c72a287f00b752111d74161f6c8_ 2015-03-01 15:17 - 2015-03-01 15:17 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Tempd9541c72a287f00b752111d74161f6c8 2015-02-23 04:06 - 2015-04-06 15:15 - 00000664 _____ () D:\WINDOWS.NEW\system32\d3d9caps.dat 2015-02-23 03:02 - 2015-03-29 22:07 - 00000000 ____D () D:\WINDOWS.NEW\system32\SupportAppZXH 2015-02-22 07:37 - 2015-02-22 07:37 - 00000000 ____D () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Anwendungsdaten\ESET 2015-02-22 06:06 - 2015-04-04 17:42 - 00000000 ____D () D:\Qoobox 2015-02-22 06:06 - 2015-02-22 06:06 - 00000000 ___RD () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Startmenü\Programme\Verwaltung 2015-02-22 06:05 - 2015-02-22 06:18 - 00000000 ____D () D:\WINDOWS.NEW\erdnt 2015-02-22 05:33 - 2015-02-22 05:33 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Malwarebytes 2015-02-22 05:33 - 2015-02-22 05:33 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Malwarebytes 2015-02-22 05:33 - 2014-11-21 07:14 - 00054360 _____ (Malwarebytes Corporation) D:\WINDOWS.NEW\system32\Drivers\mbamchameleon.sys 2015-02-22 04:52 - 2015-03-13 01:16 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Eigene Dateien\quotes 2015-02-22 03:02 - 2015-02-22 03:02 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\globalUpdate 2015-02-22 02:52 - 2015-02-22 02:52 - 00000000 ____D () D:\Programme\SAMSUNG 2015-02-22 02:52 - 2015-02-22 02:52 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Samsung 2015-02-22 02:52 - 2015-02-22 02:52 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\Samsung 2015-02-20 08:36 - 2015-02-20 08:36 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\Macroplant,_LLC 2015-02-20 08:25 - 2015-02-20 08:25 - 00000000 ____D () D:\Programme\Microsoft.NET 2015-02-20 07:43 - 2008-04-14 08:52 - 00159232 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\ptpusd.dll 2015-02-20 07:43 - 2008-04-14 01:15 - 00015104 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\usbscan.sys 2015-02-20 07:43 - 2008-04-14 01:15 - 00015104 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\usbscan.sys 2015-02-20 07:43 - 2001-08-18 05:54 - 00005632 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\ptpusb.dll 2015-02-20 07:36 - 2015-02-20 07:38 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\WindSolutions 2015-02-20 07:36 - 2015-02-20 07:38 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\WindSolutions 2015-02-18 22:38 - 2015-02-18 22:38 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\Help 2015-02-18 22:38 - 2015-02-18 22:38 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\Help 2015-02-18 00:27 - 2015-02-18 00:27 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\launcher 2015-02-18 00:27 - 2015-02-18 00:27 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\launcher 2015-02-18 00:25 - 2012-06-02 16:19 - 00045080 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wups2.dll 2015-02-18 00:25 - 2012-06-02 16:19 - 00023576 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wucltui.dll.mui 2015-02-18 00:25 - 2012-06-02 16:19 - 00018456 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wuaueng.dll.mui 2015-02-18 00:25 - 2012-06-02 16:19 - 00015896 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wuaucpl.cpl.mui 2015-02-18 00:25 - 2012-06-02 16:19 - 00015896 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wuapi.dll.mui 2015-02-18 00:24 - 2015-02-18 00:24 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\Temp 2015-02-18 00:22 - 2015-03-13 00:51 - 00106468 _____ () D:\Dokumente und Einstellungen\LocalService\objsrv.log 2015-02-18 00:22 - 2015-02-18 00:22 - 00000000 ____H () D:\WINDOWS.NEW\system32\Drivers\MsftWdf_user_01_09_00.Wdf 2015-02-18 00:22 - 2015-02-18 00:22 - 00000000 ____H () D:\WINDOWS.NEW\system32\Drivers\Msft_User_blockmounter_01_09_00.Wdf 2015-02-18 00:22 - 2015-02-18 00:22 - 00000000 ____D () D:\WINDOWS.NEW\system32\LogFiles 2015-02-18 00:21 - 2015-03-07 05:52 - 00000000 __HDC () D:\WINDOWS.NEW\$NtUninstallWudf01009$ 2015-02-18 00:21 - 2015-02-18 00:21 - 00000000 ____D () D:\Programme\Paragon Software 2015-02-18 00:20 - 2015-02-18 00:20 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\Downloaded Installations 2015-02-18 00:19 - 2015-02-18 00:19 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\explauncher 2015-02-18 00:19 - 2015-02-18 00:19 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\explauncher 2015-02-18 00:18 - 2015-02-18 00:18 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\Secunia PSI 2015-02-18 00:17 - 2015-02-18 00:17 - 00000000 ____D () D:\Programme\Secunia 2015-02-18 00:01 - 2015-02-20 20:41 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\AVAST Software 2015-02-18 00:01 - 2015-02-20 20:41 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Anwendungsdaten\AVAST Software 2015-02-17 23:49 - 2015-04-04 16:01 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\security tools 2015-02-17 06:20 - 2015-02-17 06:20 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\Macromedia 2015-02-17 03:49 - 2015-02-17 03:49 - 00000000 ___SD () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\UserData 2015-02-17 03:35 - 2015-02-17 03:35 - 00671744 _____ () D:\WINDOWS.NEW\system32\config\software.sav 2015-02-17 03:35 - 2015-02-17 03:35 - 00442368 _____ () D:\WINDOWS.NEW\system32\config\system.sav 2015-02-17 03:35 - 2015-02-17 03:35 - 00262144 _____ () D:\WINDOWS.NEW\system32\config\userdiff 2015-02-17 03:35 - 2015-02-17 03:35 - 00094208 _____ () D:\WINDOWS.NEW\system32\config\default.sav 2015-02-17 03:35 - 2015-02-17 03:35 - 00001024 ____H () D:\WINDOWS.NEW\system32\config\userdiff.LOG 2015-02-17 03:35 - 2015-02-17 03:35 - 00001024 ____H () D:\WINDOWS.NEW\system32\config\TempKey.LOG 2015-02-17 03:35 - 2008-04-14 08:53 - 00129536 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\ksproxy.ax 2015-02-17 03:35 - 2008-04-14 08:53 - 00129536 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\ksproxy.ax 2015-02-17 03:35 - 2008-04-14 08:52 - 00004096 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\ksuser.dll 2015-02-17 03:35 - 2008-04-14 08:52 - 00004096 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\ksuser.dll 2015-02-17 03:35 - 2008-04-14 01:49 - 00146048 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\portcls.sys 2015-02-17 03:35 - 2008-04-14 01:49 - 00146048 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\portcls.sys 2015-02-17 03:35 - 2008-04-14 01:47 - 00083072 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wdmaud.sys 2015-02-17 03:35 - 2008-04-14 01:47 - 00083072 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\wdmaud.sys 2015-02-17 03:35 - 2008-04-14 01:45 - 00060800 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sysaudio.sys 2015-02-17 03:35 - 2008-04-14 01:45 - 00060800 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\sysaudio.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00172416 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kmixer.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00172416 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\kmixer.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00060160 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\drmk.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00060160 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\drmk.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00056576 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\swmidi.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00056576 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\swmidi.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00052864 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\dmusic.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00052864 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\DMusic.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00006272 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\splitter.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00006272 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\splitter.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00002944 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\drmkaud.sys 2015-02-17 03:35 - 2008-04-14 01:15 - 00002944 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\drmkaud.sys 2015-02-17 03:35 - 2008-04-14 01:09 - 00007552 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mskssrv.sys 2015-02-17 03:35 - 2008-04-14 01:09 - 00007552 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\MSKSSRV.sys 2015-02-17 03:35 - 2008-04-14 01:09 - 00005376 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mspclock.sys 2015-02-17 03:35 - 2008-04-14 01:09 - 00005376 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\MSPCLOCK.sys 2015-02-17 03:35 - 2008-04-14 01:09 - 00004992 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mspqm.sys 2015-02-17 03:35 - 2008-04-14 01:09 - 00004992 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\MSPQM.sys 2015-02-17 03:35 - 2008-04-13 23:09 - 00142592 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\aec.sys 2015-02-17 03:35 - 2008-04-13 23:09 - 00142592 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\aec.sys 2015-02-17 03:33 - 2015-02-23 03:01 - 00000000 ____D () D:\WINDOWS.NEW\system32\NtmsData 2015-02-17 03:27 - 2008-04-14 01:15 - 00032128 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\usbccgp.sys 2015-02-17 03:27 - 2008-04-14 01:15 - 00032128 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\usbccgp.sys 2015-02-17 03:26 - 2015-04-06 20:10 - 00000000 ____D () D:\WINDOWS.NEW 2015-02-17 03:26 - 2015-03-13 01:52 - 00000000 ___RD () D:\WINDOWS.NEW\Web 2015-02-17 03:26 - 2015-03-01 23:08 - 00000000 ____D () D:\WINDOWS.NEW\system32\spool 2015-02-17 03:26 - 2015-03-01 23:07 - 00000000 ____D () D:\WINDOWS.NEW\pchealth 2015-02-17 03:26 - 2015-02-18 22:38 - 00000000 ____D () D:\WINDOWS.NEW\Help 2015-02-17 03:26 - 2015-02-17 03:31 - 00000000 ____D () D:\WINDOWS.NEW\system32\inetsrv 2015-02-17 03:26 - 2015-02-17 03:31 - 00000000 ____D () D:\WINDOWS.NEW\system32\1031 2015-02-17 03:26 - 2015-02-17 03:28 - 00000000 ____D () D:\WINDOWS.NEW\twain_32 2015-02-17 03:26 - 2015-02-17 03:28 - 00000000 ____D () D:\WINDOWS.NEW\system32\ras 2015-02-17 03:26 - 2015-02-17 03:27 - 00000000 ____D () D:\WINDOWS.NEW\system32\icsxml 2015-02-17 03:26 - 2015-02-17 03:27 - 00000000 ____D () D:\WINDOWS.NEW\system32\ias 2015-02-17 03:26 - 2015-02-17 03:27 - 00000000 ____D () D:\WINDOWS.NEW\system32\1033 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\wins 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\ShellExt 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\mui 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\IME 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\export 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\Drivers\disdn 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\dhcp 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\3com_dmi 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\3076 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\2052 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\1054 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\1042 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\1041 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\1037 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\1028 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\system32\1025 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\Resources 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\repair 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\Provisioning 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\mui 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\java 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\Driver Cache 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\Connection Wizard 2015-02-17 03:26 - 2015-02-17 03:26 - 00000000 ____D () D:\WINDOWS.NEW\addins 2015-02-17 03:26 - 2015-02-17 03:11 - 00000000 ____D () D:\WINDOWS.NEW\security 2015-02-17 03:26 - 2015-02-17 03:09 - 00000000 ____D () D:\WINDOWS.NEW\system32\usmt 2015-02-17 03:26 - 2015-02-17 03:09 - 00000000 ____D () D:\WINDOWS.NEW\PeerNet 2015-02-17 03:26 - 2015-02-17 03:09 - 00000000 ____D () D:\WINDOWS.NEW\ime 2015-02-17 03:26 - 2015-02-17 03:08 - 00000000 ____D () D:\WINDOWS.NEW\system32\npp 2015-02-17 03:26 - 2015-02-17 03:07 - 00000000 ____D () D:\WINDOWS.NEW\system 2015-02-17 03:26 - 2015-02-17 03:07 - 00000000 ____D () D:\WINDOWS.NEW\msagent 2015-02-17 03:26 - 2015-02-17 02:42 - 00000000 ____D () D:\WINDOWS.NEW\Cursors 2015-02-17 03:26 - 2015-02-17 02:36 - 00000000 ____D () D:\WINDOWS.NEW\Media 2015-02-17 03:26 - 2008-04-14 01:15 - 00026368 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\usbstor.sys 2015-02-17 03:26 - 2008-04-14 01:15 - 00026368 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\USBSTOR.SYS 2015-02-17 03:13 - 2015-02-17 03:13 - 00000090 _____ () D:\WINDOWS.NEW\system32\spupdwxp.log 2015-02-17 03:09 - 2015-03-01 23:11 - 00000000 ____D () D:\WINDOWS.NEW\system32\de-de 2015-02-17 03:09 - 2015-02-17 03:09 - 00000000 ____D () D:\WINDOWS.NEW\system32\de 2015-02-17 03:09 - 2015-02-17 03:09 - 00000000 ____D () D:\WINDOWS.NEW\system32\bits 2015-02-17 03:09 - 2015-02-17 03:09 - 00000000 ____D () D:\WINDOWS.NEW\l2schemas 2015-02-17 03:09 - 2008-04-14 08:53 - 00073796 ____N (Smart Link) D:\WINDOWS.NEW\system32\slserv.exe 2015-02-17 03:09 - 2008-04-14 08:53 - 00060416 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\tzchange.exe 2015-02-17 03:09 - 2008-04-14 08:53 - 00032866 ____N (Smart Link) D:\WINDOWS.NEW\system32\slrundll.exe 2015-02-17 03:09 - 2008-04-14 08:53 - 00032866 ____N (Smart Link) D:\WINDOWS.NEW\slrundll.exe 2015-02-17 03:09 - 2008-04-14 08:53 - 00032768 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\setupn.exe 2015-02-17 03:09 - 2008-04-14 08:53 - 00028672 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\vidcap.ax 2015-02-17 03:09 - 2008-04-14 08:53 - 00028672 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\verclsid.exe 2015-02-17 03:09 - 2008-04-14 08:53 - 00023040 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\ativmvxx.ax 2015-02-17 03:09 - 2008-04-14 08:53 - 00009728 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\ativdaxx.ax 2015-02-17 03:09 - 2008-04-14 08:52 - 04274816 ____N (NVIDIA Corporation) D:\WINDOWS.NEW\system32\nv4_disp.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 01888992 ____N (ATI Technologies Inc. ) D:\WINDOWS.NEW\system32\ati3duag.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 01737856 ____N (Matrox Graphics Inc.) D:\WINDOWS.NEW\system32\mtxparhd.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 01306624 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\msxml6.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 01306624 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\msxml6.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00870784 ____N (ATI Technologies Inc. ) D:\WINDOWS.NEW\system32\ati3d1ag.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00712704 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\windowscodecs.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00651264 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\dot3ui.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00516768 ____N (ATI Technologies Inc. ) D:\WINDOWS.NEW\system32\ativvaxx.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00412160 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\photometadatahandler.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00397312 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\mmcex.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00397056 ____N (S3 Graphics, Inc.) D:\WINDOWS.NEW\system32\s3gnb.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00377984 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\ati2dvaa.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00346112 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\windowscodecsext.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00294400 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\qagentrt.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00290304 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\rhttpaa.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00286792 ____N (Smart Link) D:\WINDOWS.NEW\system32\slextspk.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00276992 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\wmphoto.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00233472 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\azroles.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00229376 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\ati2cqag.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00201728 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\ati2dvag.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00198656 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\napmontr.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00188508 ____N (Smart Link) D:\WINDOWS.NEW\system32\slgen.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00184832 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\eapp3hst.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00184320 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\microsoft.managementconsole.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00182272 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\eapphost.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00177664 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\napstat.exe 2015-02-17 03:09 - 2008-04-14 08:52 - 00155136 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\mssha.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00151040 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\qagent.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00145408 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\onex.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00136192 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\aaclient.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00133120 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\dot3svc.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00126976 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\eappcfg.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00121856 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\xmllite.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00106496 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\mmcfxcommon.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00095232 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\eappgnui.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00086016 ____N (Conexant) D:\WINDOWS.NEW\system32\mdmxsdk.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00076800 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\qutil.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00073832 ____N (Smart Link) D:\WINDOWS.NEW\system32\slcoinst.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00069120 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\wlanapi.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00062976 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\dot3cfg.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00062464 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\qcliprov.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00061952 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\rasqec.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00061440 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\kmsvc.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00059392 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\eapqec.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00056832 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\dot3msm.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00053248 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\tsgqec.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00050688 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\tspkg.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00048640 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\dhcpqec.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00040960 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\eappprxy.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00039936 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\dot3gpclnt.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00039936 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\dimsroam.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00037376 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\l2gpstore.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00033792 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\mmcperf.exe 2015-02-17 03:09 - 2008-04-14 08:52 - 00033792 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\eapsvc.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00032768 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\ativtmxx.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00032285 ____N (Conexant Systems, Inc.) D:\WINDOWS.NEW\system32\hsfcisp2.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00030720 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\eapolqec.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00030208 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\napipsec.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00026112 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\dot3api.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00019456 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\dimsntfy.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00012800 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\credssp.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00009216 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\dot3dlg.dll 2015-02-17 03:09 - 2008-04-14 08:52 - 00007168 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\bitsprx4.dll 2015-02-17 03:09 - 2008-04-14 08:51 - 00102912 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\dpcdll.dll 2015-02-17 03:09 - 2008-04-14 08:50 - 00006144 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdpash.dll 2015-02-17 03:09 - 2008-04-14 08:50 - 00006144 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdnepr.dll 2015-02-17 03:09 - 2008-04-14 08:50 - 00006144 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdiultn.dll 2015-02-17 03:09 - 2008-04-14 08:50 - 00006144 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdbhc.dll 2015-02-17 03:09 - 2008-04-14 08:27 - 00093184 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\msxml6r.dll 2015-02-17 03:09 - 2008-04-14 08:27 - 00093184 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\msxml6r.dll 2015-02-17 03:09 - 2008-04-14 08:26 - 00081408 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\msshavmsg.dll 2015-02-17 03:09 - 2008-04-14 01:15 - 00046592 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\irbus.sys 2015-02-17 03:09 - 2008-04-14 01:13 - 00009728 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\comsdupd.exe 2015-02-17 03:09 - 2008-04-14 01:09 - 00779776 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\xpsp3res.dll 2015-02-17 03:08 - 2015-02-17 03:08 - 00000000 ____D () D:\WINDOWS.NEW\ServicePackFiles 2015-02-17 03:06 - 2008-04-14 08:52 - 00025471 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\atv04nt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00021183 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\atv01nt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00017279 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\atv10nt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00015423 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\ch7xxnt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00014143 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\atv06nt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00011359 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\atv02nt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00011325 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\vchnt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00004255 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\adv01nt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00003967 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\adv02nt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00003901 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\siint5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00003775 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\adv11nt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00003711 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\adv09nt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00003647 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\adv07nt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00003615 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\adv05nt5.dll 2015-02-17 03:06 - 2008-04-14 08:52 - 00003135 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\adv08nt5.dll 2015-02-17 03:06 - 2008-04-14 08:24 - 00025856 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\hidbth.sys 2015-02-17 03:06 - 2008-04-14 08:22 - 00273920 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\bthport.sys 2015-02-17 03:06 - 2008-04-14 08:21 - 00701952 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati2mtag.sys 2015-02-17 03:06 - 2008-04-14 08:21 - 00327168 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati2mtaa.sys 2015-02-17 03:06 - 2008-04-14 01:26 - 00030592 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\rndismpx.sys 2015-02-17 03:06 - 2008-04-14 01:26 - 00012800 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\usb8023x.sys 2015-02-17 03:06 - 2008-04-14 01:21 - 00101120 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\bthpan.sys 2015-02-17 03:06 - 2008-04-14 01:16 - 00121984 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\usbvideo.sys 2015-02-17 03:06 - 2008-04-14 01:16 - 00059136 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\rfcomm.sys 2015-02-17 03:06 - 2008-04-14 01:16 - 00037888 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\bthmodem.sys 2015-02-17 03:06 - 2008-04-14 01:16 - 00036480 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\bthprint.sys 2015-02-17 03:06 - 2008-04-14 01:16 - 00018944 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\bthusb.sys 2015-02-17 03:06 - 2008-04-14 01:16 - 00017024 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\bthenum.sys 2015-02-17 03:06 - 2008-04-14 01:15 - 00019200 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\hidir.sys 2015-02-17 03:06 - 2008-04-14 01:13 - 00014208 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\wacompen.sys 2015-02-17 03:06 - 2008-04-14 01:13 - 00012672 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\mutohpen.sys 2015-02-17 03:06 - 2008-04-14 01:10 - 00010240 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\sffp_mmc.sys 2015-02-17 03:06 - 2008-04-14 01:06 - 00046464 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\gagp30kx.sys 2015-02-17 03:06 - 2008-04-14 01:06 - 00044928 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\agpcpq.sys 2015-02-17 03:06 - 2008-04-14 01:06 - 00044672 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\uagp35.sys 2015-02-17 03:06 - 2008-04-14 01:06 - 00043008 ____N (Advanced Micro Devices, Inc.) D:\WINDOWS.NEW\system32\Drivers\amdagp.sys 2015-02-17 03:06 - 2008-04-14 01:06 - 00042752 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\alim1541.sys 2015-02-17 03:06 - 2008-04-14 01:06 - 00042368 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\agp440.sys 2015-02-17 03:06 - 2008-04-14 01:06 - 00042240 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\viaagp.sys 2015-02-17 03:06 - 2008-04-14 01:06 - 00040960 ____N (Silicon Integrated Systems Corporation) D:\WINDOWS.NEW\system32\Drivers\sisagp.sys 2015-02-17 03:06 - 2008-04-14 01:06 - 00005888 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\smbali.sys 2015-02-17 03:06 - 2008-04-14 00:53 - 01309184 ____N (Smart Link) D:\WINDOWS.NEW\system32\Drivers\mtlstrm.sys 2015-02-17 03:06 - 2008-04-14 00:53 - 01041536 ____N (Conexant Systems, Inc.) D:\WINDOWS.NEW\system32\Drivers\hsfdpsp2.sys 2015-02-17 03:06 - 2008-04-14 00:53 - 00685056 ____N (Conexant Systems, Inc.) D:\WINDOWS.NEW\system32\Drivers\hsfcxts2.sys 2015-02-17 03:06 - 2008-04-14 00:53 - 00404990 ____N (Smart Link) D:\WINDOWS.NEW\system32\Drivers\slntamr.sys 2015-02-17 03:06 - 2008-04-14 00:53 - 00220032 ____N (Conexant Systems, Inc.) D:\WINDOWS.NEW\system32\Drivers\hsfbs2s2.sys |
|
06.04.2015, 20:21
| #2 |
| /// the machine /// TB-Ausbilder    | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) HI,
__________________Logfile von EAM? Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
 So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
06.04.2015, 20:22
| #3 |
| | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) 2015-02-17 03:06 - 2008-04-14 00:53 - 00180360 ____N (Smart Link) D:\WINDOWS.NEW\system32\Drivers\ntmtlfax.sys
__________________2015-02-17 03:06 - 2008-04-14 00:53 - 00129535 ____N (Smart Link) D:\WINDOWS.NEW\system32\Drivers\slnt7554.sys 2015-02-17 03:06 - 2008-04-14 00:53 - 00126686 ____N (Smart Link) D:\WINDOWS.NEW\system32\Drivers\mtlmnt5.sys 2015-02-17 03:06 - 2008-04-14 00:53 - 00095424 ____N (Smart Link) D:\WINDOWS.NEW\system32\Drivers\slnthal.sys 2015-02-17 03:06 - 2008-04-14 00:53 - 00013776 ____N (Smart Link) D:\WINDOWS.NEW\system32\Drivers\recagent.sys 2015-02-17 03:06 - 2008-04-14 00:53 - 00013240 ____N (Smart Link) D:\WINDOWS.NEW\system32\Drivers\slwdmsup.sys 2015-02-17 03:06 - 2008-04-14 00:53 - 00011868 ____N (Conexant) D:\WINDOWS.NEW\system32\Drivers\mdmxsdk.sys 2015-02-17 03:06 - 2008-04-13 23:06 - 00144384 ____N (Windows (R) Server 2003 DDK provider) D:\WINDOWS.NEW\system32\Drivers\hdaudbus.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 01897408 ____N (NVIDIA Corporation) D:\WINDOWS.NEW\system32\Drivers\nv4_mini.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00452736 ____N (Matrox Graphics Inc.) D:\WINDOWS.NEW\system32\Drivers\mtxparhm.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00166912 ____N (S3 Graphics, Inc.) D:\WINDOWS.NEW\system32\Drivers\s3gnbm.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00104960 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\atinrvxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00073216 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\atintuxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00063663 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati1rvxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00063488 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\atinxsxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00057856 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\atinbtxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00056623 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati1btxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00052224 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\atinraxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00036463 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati1tuxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00034735 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati1xsxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00031744 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\atinxbxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00030671 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati1raxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00029455 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati1xbxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00028672 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\atinsnxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00026367 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati1snxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00025471 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\watv10nt.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00022271 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\watv06nt.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00021343 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati1ttxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00014336 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\atinpdxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00013824 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\atinttxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00013824 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\atinmdxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00012047 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati1pdxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00011935 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\wadv11nt.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00011871 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\wadv09nt.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00011807 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\wadv07nt.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00011615 ____N (ATI Technologies Inc.) D:\WINDOWS.NEW\system32\Drivers\ati1mdxx.sys 2015-02-17 03:06 - 2008-04-13 23:04 - 00011295 ____N (Intel(R) Corporation) D:\WINDOWS.NEW\system32\Drivers\wadv08nt.sys 2015-02-17 03:06 - 2007-04-02 22:36 - 00129045 ____N () D:\WINDOWS.NEW\system32\Drivers\cxthsfs2.cty 2015-02-17 03:06 - 2006-12-29 21:21 - 00064352 ____N () D:\WINDOWS.NEW\system32\Drivers\ativmc20.cod 2015-02-17 03:06 - 2006-12-29 21:02 - 00067866 ____N () D:\WINDOWS.NEW\system32\Drivers\netwlan5.img 2015-02-17 03:04 - 2015-04-05 09:51 - 00000000 ____D () D:\WINDOWS.NEW\system32\ReinstallBackups 2015-02-17 03:04 - 2008-11-07 19:55 - 00026144 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\spupdsvc.exe 2015-02-17 03:02 - 2015-03-31 03:21 - 00000000 __HDC () D:\WINDOWS.NEW\$NtServicePackUninstall$ 2015-02-17 02:57 - 2015-02-20 19:46 - 00000000 ____D () D:\WINDOWS.NEW\system32\appmgmt 2015-02-17 02:53 - 2015-04-06 20:31 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC 2015-02-17 02:53 - 2015-04-06 19:48 - 00000190 ___SH () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\ntuser.ini 2015-02-17 02:53 - 2015-04-04 16:52 - 00000000 ___RD () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Startmenü\Programme 2015-02-17 02:53 - 2015-04-03 01:50 - 00000000 ___RD () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Eigene Dateien\Eigene Bilder 2015-02-17 02:53 - 2015-03-29 21:20 - 00000000 __SHD () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT 2015-02-17 02:53 - 2015-03-29 13:45 - 00000000 ___RD () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Eigene Dateien\Eigene Musik 2015-02-17 02:53 - 2015-03-13 01:27 - 00000000 ___RD () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Startmenü 2015-02-17 02:53 - 2015-03-13 00:04 - 00000000 ___RD () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Startmenü\Programme\Autostart 2015-02-17 02:53 - 2015-02-17 03:38 - 00000778 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Startmenü\Programme\Windows Media Player.lnk 2015-02-17 02:53 - 2015-02-17 03:13 - 00000724 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Startmenü\Programme\Outlook Express.lnk 2015-02-17 02:53 - 2015-02-17 03:13 - 00000000 ___SD () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Verlauf 2015-02-17 02:53 - 2015-02-17 02:53 - 00000156 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat 2015-02-17 02:53 - 2015-02-17 02:53 - 00000020 ___SH () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\ntuser.ini 2015-02-17 02:53 - 2015-02-17 02:53 - 00000000 ___RD () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Startmenü\Programme\Zubehör 2015-02-17 02:53 - 2015-02-17 02:46 - 00001629 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Startmenü\Programme\Remoteunterstützung.lnk 2015-02-17 02:53 - 2015-02-17 02:37 - 00000000 ___SD () D:\Dokumente und Einstellungen\LocalService.NT-AUTORITÄT\Lokale Einstellungen\Verlauf 2015-02-17 02:53 - 2015-02-17 02:37 - 00000000 ___HD () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Netzwerkumgebung 2015-02-17 02:53 - 2015-02-17 02:37 - 00000000 ___HD () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Druckumgebung 2015-02-17 02:52 - 2015-03-29 21:20 - 00000000 __SHD () D:\Dokumente und Einstellungen\NetworkService.NT-AUTORITÄT 2015-02-17 02:52 - 2015-02-17 02:52 - 00000020 ___SH () D:\Dokumente und Einstellungen\NetworkService.NT-AUTORITÄT\ntuser.ini 2015-02-17 02:52 - 2015-02-17 02:37 - 00000000 ___HD () D:\Dokumente und Einstellungen\NetworkService.NT-AUTORITÄT\Lokale Einstellungen\Verlauf 2015-02-17 02:51 - 2008-04-14 08:53 - 00226816 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\npdrmv2.dll 2015-02-17 02:51 - 2008-04-14 08:52 - 00065024 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\unicdime.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00571392 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tintlgnt.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00482304 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\pintlgnt.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00426041 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\voicepad.dll 2015-02-17 02:51 - 2008-04-14 08:51 - 00175104 ____C () D:\WINDOWS.NEW\system32\dllcache\pintlcsa.dll 2015-02-17 02:51 - 2008-04-14 08:51 - 00156672 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\winzm.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00156672 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\winsp.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00156672 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\winpy.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00086073 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\voicesub.dll 2015-02-17 02:51 - 2008-04-14 08:51 - 00079360 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\winar30.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00079360 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\phon.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00077824 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\quick.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00076288 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\uniime.dll 2015-02-17 02:51 - 2008-04-14 08:51 - 00072704 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wingb.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00067584 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\pmigrate.dll 2015-02-17 02:51 - 2008-04-14 08:51 - 00065536 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\winime.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00053760 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\pintlcsd.dll 2015-02-17 02:51 - 2008-04-14 08:51 - 00026112 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\romanime.ime 2015-02-17 02:51 - 2008-04-14 08:51 - 00015872 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\padrs404.dll 2015-02-17 02:51 - 2008-04-14 08:51 - 00015360 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\padrs804.dll 2015-02-17 02:51 - 2008-04-14 08:51 - 00010240 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tmigrate.dll 2015-02-17 02:51 - 2008-04-13 23:13 - 00070144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\pintlphr.exe 2015-02-17 02:51 - 2004-11-11 14:00 - 02178131 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\shvlres.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 01875968 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\msir3jp.lex 2015-02-17 02:51 - 2004-11-11 14:00 - 00753236 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\rvseres.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00455168 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tintsetp.exe 2015-02-17 02:51 - 2004-11-11 14:00 - 00229439 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\multibox.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00221184 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wmpns.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00185344 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\thawbrkr.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00143422 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\softkey.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00131584 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\pmxviceo.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00113222 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\zoneclim.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00101376 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\srusbusd.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00098304 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\msir3jp.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00083748 ____C () D:\WINDOWS.NEW\system32\dllcache\prcp.nls 2015-02-17 02:51 - 2004-11-11 14:00 - 00083748 ____C () D:\WINDOWS.NEW\system32\dllcache\prc.nls 2015-02-17 02:51 - 2004-11-11 14:00 - 00081408 ____C (Ricoh Co., Ltd.) D:\WINDOWS.NEW\system32\dllcache\rwia330.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00081408 ____C (Ricoh Co., Ltd.) D:\WINDOWS.NEW\system32\dllcache\rwia001.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00074240 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\w3ext.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00066113 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\shvl.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00053248 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\nextlink.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00048706 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\rvse.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00048256 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\w32.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00044032 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tintlphr.exe 2015-02-17 02:51 - 2004-11-11 14:00 - 00042574 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\rvsezm.exe 2015-02-17 02:51 - 2004-11-11 14:00 - 00042573 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\shvlzm.exe 2015-02-17 02:51 - 2004-11-11 14:00 - 00041600 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\weitekp9.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00041029 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\zcorem.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00038912 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sm9aw.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00036937 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\zclientm.exe 2015-02-17 02:51 - 2004-11-11 14:00 - 00036927 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\padrs411.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00032339 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\uniansi.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00031744 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\smb6w.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00031744 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sma3w.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00031744 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\pagecnt.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00031360 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\weitekp9.sys 2015-02-17 02:51 - 2004-11-11 14:00 - 00030208 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sm87w.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00030208 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sm81w.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00029760 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\znetm.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00029184 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sm8cw.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00028288 ____C () D:\WINDOWS.NEW\system32\dllcache\xjis.nls 2015-02-17 02:51 - 2004-11-11 14:00 - 00026624 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sm93w.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00026624 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sm92w.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00026112 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sm90w.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00026112 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sm8dw.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00026112 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sm8aw.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00026112 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sm89w.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00025088 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sm59w.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00021896 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tdipx.sys 2015-02-17 02:51 - 2004-11-11 14:00 - 00020992 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\permchk.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00019464 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tdspx.sys 2015-02-17 02:51 - 2004-11-11 14:00 - 00019456 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\simptcp.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00016896 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\status.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00016896 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\quser.exe 2015-02-17 02:51 - 2004-11-11 14:00 - 00015872 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\smierrsm.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00014848 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\register.exe 2015-02-17 02:51 - 2004-11-11 14:00 - 00014336 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tsprof.exe 2015-02-17 02:51 - 2004-11-11 14:00 - 00014336 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\padrs412.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00013894 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\zonelibm.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00013192 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tdasync.sys 2015-02-17 02:51 - 2004-11-11 14:00 - 00011264 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\pmxmcro.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00010240 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\snmpstup.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00010240 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\query.exe 2015-02-17 02:51 - 2004-11-11 14:00 - 00009216 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wamps51.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\pmxgl.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\w3svapi.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\smimsgif.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\smierrsy.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00004677 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\zeeverm.dll 2015-02-17 02:51 - 2004-11-11 14:00 - 00004608 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\w3ctrs51.dll 2015-02-17 02:51 - 2001-08-18 05:55 - 00023040 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\EXCH_regtrace.exe 2015-02-17 02:51 - 2001-08-18 05:54 - 00057856 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\EXCH_scripto.dll 2015-02-17 02:51 - 2001-08-18 05:54 - 00038912 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\EXCH_ntfsdrv.dll 2015-02-17 02:51 - 2001-08-18 05:54 - 00026112 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\EXCH_seos.dll 2015-02-17 02:51 - 2001-08-18 05:54 - 00012288 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\EXCH_smtpctrs.dll 2015-02-17 02:51 - 2001-08-18 05:54 - 00007168 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\EXCH_snprfdll.dll 2015-02-17 02:50 - 2008-04-14 08:51 - 00078848 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\dayi.ime 2015-02-17 02:50 - 2008-04-14 08:51 - 00078336 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\chajei.ime 2015-02-17 02:50 - 2008-04-14 08:51 - 00021504 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\cintlgnt.ime 2015-02-17 02:50 - 2008-04-14 08:50 - 13463552 ____C () D:\WINDOWS.NEW\system32\dllcache\hwxjpn.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00811064 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjp81k.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00716856 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjpcus.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00368696 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjpcic.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00340023 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjp81.ime 2015-02-17 02:50 - 2008-04-14 08:50 - 00315455 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imskf.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00274489 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjputyc.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00198656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\cintime.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00173568 ____C () D:\WINDOWS.NEW\system32\dllcache\chtskf.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00106496 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imekrcic.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00102456 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imlang.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00097792 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\chtmbx.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00094720 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imekr61.ime 2015-02-17 02:50 - 2008-04-14 08:50 - 00086016 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imekrmbx.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00081976 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjpdct.dll 2015-02-17 02:50 - 2008-04-14 08:50 - 00056320 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\chtskdic.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 10129408 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\hwxkor.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 10096640 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\hwxcht.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 01817687 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\bckgres.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 01677824 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\chsbrkr.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 01175635 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\hrtzres.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 01158818 ____C () D:\WINDOWS.NEW\system32\dllcache\korwbrkr.lex 2015-02-17 02:50 - 2004-11-11 14:00 - 01042515 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\cmnresm.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00838144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\chtbrkr.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00781397 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\chkrres.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00514587 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\edb500.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00480256 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\cintsetp.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00471102 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imskdic.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00311359 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imepadsv.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00307257 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjpdct.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00262200 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjputy.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00233527 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjprw.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00217160 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\cmnclim.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00208952 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjpmig.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00196665 ____C () D:\WINDOWS.NEW\system32\dllcache\imjpinst.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00195618 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10002.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00189986 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1361.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00187938 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20005.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00186402 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20001.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00185378 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20003.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00180770 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20932.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00180258 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20004.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00180258 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20000.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00177698 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20949.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00177698 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10003.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00173602 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20936.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00173602 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20002.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00173602 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10008.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00162850 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10001.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00155705 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjpdsvr.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00139264 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\fxsclntr.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00134339 ____C () D:\WINDOWS.NEW\system32\dllcache\imekr.lex 2015-02-17 02:50 - 2004-11-11 14:00 - 00112640 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\fxscfgwz.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00108827 ____C () D:\WINDOWS.NEW\system32\dllcache\hanja.lex 2015-02-17 02:50 - 2004-11-11 14:00 - 00102463 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imepadsm.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00092416 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mga.sys 2015-02-17 02:50 - 2004-11-11 14:00 - 00092032 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mga.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00082501 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\bckg.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00082172 ____C () D:\WINDOWS.NEW\system32\dllcache\bopomofo.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00070656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\korwbrkr.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00066728 ____C () D:\WINDOWS.NEW\system32\dllcache\big5.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066594 ____C () D:\WINDOWS.NEW\system32\dllcache\c_864.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066594 ____C () D:\WINDOWS.NEW\system32\dllcache\c_862.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066594 ____C () D:\WINDOWS.NEW\system32\dllcache\c_858.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066594 ____C () D:\WINDOWS.NEW\system32\dllcache\c_720.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_870.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_708.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_28596.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_21027.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_21025.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20924.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20880.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20871.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20838.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20833.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20424.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20423.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20420.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20297.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20290.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20285.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20284.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20280.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20278.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20277.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20273.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20269.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20108.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20107.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20106.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20105.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1149.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1148.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1147.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1146.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1145.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1144.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1143.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1142.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1141.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1140.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_1047.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10021.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10005.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10004.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00061440 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\iisclex4.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00059904 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imkrinst.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00059392 ____C () D:\WINDOWS.NEW\system32\dllcache\imscinst.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00057856 ____C (SEIKO EPSON CORP.) D:\WINDOWS.NEW\system32\dllcache\esuimgd.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00057409 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\hrtz.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00057399 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\cplexe.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00057398 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjpdadm.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00056832 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\convlog.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00054528 ____C (Philips Semiconductors GmbH) D:\WINDOWS.NEW\system32\dllcache\cap7146.sys 2015-02-17 02:50 - 2004-11-11 14:00 - 00047066 ____C () D:\WINDOWS.NEW\system32\dllcache\ksc.nls 2015-02-17 02:50 - 2004-11-11 14:00 - 00045568 ____C (SEIKO EPSON CORP.) D:\WINDOWS.NEW\system32\dllcache\esunid.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00045568 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\browscap.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00045109 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imjpuex.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00044032 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\imekrmig.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00042577 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\bckgzm.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00042575 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\chkrzm.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00042573 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\hrtzzm.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00040515 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\chkr.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00036864 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\hanjadic.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00033792 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\controt.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00031744 ____C (SEIKO EPSON CORP.) D:\WINDOWS.NEW\system32\dllcache\esucmd.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00031744 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\fxsroute.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00029184 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\asptxn.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00026624 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mdsync.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00025856 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\et4000.sys 2015-02-17 02:50 - 2004-11-11 14:00 - 00022016 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\logscrpt.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00020480 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\counters.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00019968 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\cprofile.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00019456 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\iiscrmap.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00018432 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\jupiw.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00016384 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\chgport.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00014848 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\flattemp.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00014848 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\chgusr.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00013824 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\chglogon.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00011264 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\fxssend.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00010752 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\c_iscii.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00010240 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\change.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00010240 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\aspperf.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00009216 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdnecat.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00009216 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\iwrps.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00009216 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\authfilt.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00008704 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\infoctrs.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00007680 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdnecnt.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00007680 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\ftpctrs2.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00007168 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdnec95.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00007168 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\isapips.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\iissync.exe 2015-02-17 02:50 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\c_is2022.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdth3.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdth2.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdinpun.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbd101a.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\ftlx041e.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdvntc.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdusa.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdurdu.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdth1.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdth0.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdsyr2.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdsyr1.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdintel.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdintam.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdinmar.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdinkan.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdinhin.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdinguj.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdindev.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdheb.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdfa.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbddiv2.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbddiv1.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbda3.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbda2.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbda1.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005120 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdgeo.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005120 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdarmw.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00005120 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdarme.dll 2015-02-17 02:50 - 2004-11-11 14:00 - 00003584 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\iismui.dll 2015-02-17 02:50 - 2001-08-18 05:53 - 00065536 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\EXCH_mailmsg.dll 2015-02-17 02:50 - 2001-08-18 05:53 - 00046592 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\EXCH_aqadmin.dll 2015-02-17 02:50 - 2001-08-18 05:53 - 00043520 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\EXCH_fcachdll.dll 2015-02-17 02:49 - 2015-03-31 01:11 - 00020216 _____ () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT 2015-02-17 02:49 - 2015-02-17 02:49 - 00002000 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Windows-Journal-Viewer.lnk 2015-02-17 02:49 - 2015-02-17 02:49 - 00002000 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Windows-Journal-Viewer.lnk 2015-02-17 02:49 - 2015-02-17 02:49 - 00000910 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Windows Media Connect.lnk 2015-02-17 02:49 - 2015-02-17 02:49 - 00000910 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Windows Media Connect.lnk 2015-02-17 02:49 - 2015-02-17 02:49 - 00000634 _____ () D:\WINDOWS.NEW\system32\InstallUtil.InstallLog 2015-02-17 02:49 - 2015-02-17 02:49 - 00000000 ____D () D:\WINDOWS.NEW\system32\xircom 2015-02-17 02:49 - 2015-02-17 02:49 - 00000000 ____D () D:\WINDOWS.NEW\Downloaded Installations 2015-02-17 02:49 - 2015-02-17 02:49 - 00000000 ____D () D:\Programme\msn gaming zone 2015-02-17 02:49 - 2008-04-14 08:52 - 00364544 ____C (Microsoft Corporation (written by Digital Renaissance Inc.)) D:\WINDOWS.NEW\system32\dllcache\npdsplay.dll 2015-02-17 02:49 - 2008-04-14 08:52 - 00010240 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\npwmsdrm.dll 2015-02-17 02:49 - 2004-11-11 14:00 - 00172032 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\iisui.dll 2015-02-17 02:49 - 2004-11-11 14:00 - 00096768 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\certmap.ocx 2015-02-17 02:49 - 2004-11-11 14:00 - 00050176 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\adrot.dll 2015-02-17 02:49 - 2004-11-11 14:00 - 00019968 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\inetsloc.dll 2015-02-17 02:49 - 2004-11-11 14:00 - 00015360 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\iisreset.exe 2015-02-17 02:49 - 2004-11-11 14:00 - 00007680 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\inetmgr.exe 2015-02-17 02:49 - 2004-11-11 14:00 - 00007168 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wamregps.dll 2015-02-17 02:49 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\ftpsapi2.dll 2015-02-17 02:49 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\admxprox.dll 2015-02-17 02:49 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\iisrstap.dll 2015-02-17 02:49 - 2003-03-24 17:52 - 00217088 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\fpmmcsat.dll 2015-02-17 02:49 - 2003-03-24 17:52 - 00016384 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tcptsat.dll 2015-02-17 02:49 - 2001-08-18 05:52 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\EXCH_adsiisex.dll 2015-02-17 02:47 - 2015-04-01 05:54 - 00000000 ____D () D:\WINDOWS.NEW\Microsoft.NET 2015-02-17 02:47 - 2015-03-13 02:03 - 00000000 ____D () D:\WINDOWS.NEW\system32\URTTemp 2015-02-17 02:47 - 2015-02-17 02:47 - 00000506 _____ () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\msiutil(1).log 2015-02-17 02:47 - 2015-02-17 02:47 - 00000000 ___HD () D:\WINDOWS.NEW\$hf_mig$ 2015-02-17 02:47 - 2008-11-07 19:55 - 00016928 ____N (Microsoft Corporation) D:\WINDOWS.NEW\system32\spmsg.dll 2015-02-17 02:46 - 2015-02-17 03:13 - 00316640 _____ () D:\WINDOWS.NEW\WMSysPr9.prx 2015-02-17 02:46 - 2015-02-17 03:10 - 00001593 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programmzugriff und -standards.lnk 2015-02-17 02:46 - 2015-02-17 03:10 - 00001593 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programmzugriff und -standards.lnk 2015-02-17 02:46 - 2015-02-17 02:46 - 00023392 _____ () D:\WINDOWS.NEW\system32\nscompat.tlb 2015-02-17 02:46 - 2015-02-17 02:46 - 00016832 _____ () D:\WINDOWS.NEW\system32\amcompat.tlb 2015-02-17 02:46 - 2015-02-17 02:46 - 00002951 _____ () D:\WINDOWS.NEW\system32\CONFIG.NT 2015-02-17 02:46 - 2015-02-17 02:46 - 00001629 _____ () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\Startmenü\Programme\Remoteunterstützung.lnk 2015-02-17 02:46 - 2015-02-17 02:46 - 00001537 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Windows Update.lnk 2015-02-17 02:46 - 2015-02-17 02:46 - 00001537 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Windows Update.lnk 2015-02-17 02:46 - 2015-02-17 02:46 - 00000398 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Windows-Katalog.lnk 2015-02-17 02:46 - 2015-02-17 02:46 - 00000398 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Windows-Katalog.lnk 2015-02-17 02:46 - 2015-02-17 02:46 - 00000000 _____ () D:\WINDOWS.NEW\control.ini 2015-02-17 02:46 - 2004-11-11 14:00 - 00112128 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mapi32.dll 2015-02-17 02:45 - 2015-04-06 19:51 - 00978440 _____ () D:\WINDOWS.NEW\WindowsUpdate.log 2015-02-17 02:45 - 2015-02-17 02:46 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\Startmenü\Programme\Zubehör 2015-02-17 02:45 - 2015-02-17 02:45 - 00000764 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Windows Movie Maker.lnk 2015-02-17 02:45 - 2015-02-17 02:45 - 00000764 _____ () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Windows Movie Maker.lnk 2015-02-17 02:45 - 2015-02-17 02:45 - 00000749 ___RH () D:\WINDOWS.NEW\WindowsShell.Manifest 2015-02-17 02:45 - 2015-02-17 02:45 - 00000749 ___RH () D:\WINDOWS.NEW\system32\wuaucpl.cpl.manifest 2015-02-17 02:45 - 2015-02-17 02:45 - 00000749 ___RH () D:\WINDOWS.NEW\system32\sapi.cpl.manifest 2015-02-17 02:45 - 2015-02-17 02:45 - 00000749 ___RH () D:\WINDOWS.NEW\system32\nwc.cpl.manifest 2015-02-17 02:45 - 2015-02-17 02:45 - 00000749 ___RH () D:\WINDOWS.NEW\system32\ncpa.cpl.manifest 2015-02-17 02:45 - 2015-02-17 02:45 - 00000749 ___RH () D:\WINDOWS.NEW\system32\cdplayer.exe.manifest 2015-02-17 02:45 - 2015-02-17 02:45 - 00000488 ___RH () D:\WINDOWS.NEW\system32\WindowsLogon.manifest 2015-02-17 02:45 - 2015-02-17 02:45 - 00000488 ___RH () D:\WINDOWS.NEW\system32\logonui.exe.manifest 2015-02-17 02:45 - 2015-02-17 02:45 - 00000000 __SHD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\DRM 2015-02-17 02:45 - 2015-02-17 02:45 - 00000000 ___RD () D:\WINDOWS.NEW\Offline Web Pages 2015-02-17 02:45 - 2004-11-11 14:00 - 04399505 ____C () D:\WINDOWS.NEW\system32\dllcache\nls302en.lex 2015-02-17 02:44 - 2015-03-13 08:01 - 00000000 ____D () D:\WINDOWS.NEW\system32\Restore 2015-02-17 02:44 - 2015-02-17 03:07 - 00000000 ____D () D:\WINDOWS.NEW\srchasst 2015-02-17 02:44 - 2015-02-17 02:44 - 00000000 ____D () D:\WINDOWS.NEW\system32\Macromed 2015-02-17 02:44 - 2015-02-17 02:44 - 00000000 ____D () D:\WINDOWS.NEW\system32\DirectX 2015-02-17 02:44 - 2012-06-04 18:35 - 00210968 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wuweb.dll 2015-02-17 02:44 - 2012-06-04 18:35 - 00210968 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wuweb.dll 2015-02-17 02:44 - 2012-06-02 16:19 - 01933848 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wuaueng.dll 2015-02-17 02:44 - 2012-06-02 16:19 - 01933848 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wuaueng.dll 2015-02-17 02:44 - 2012-06-02 16:19 - 00577048 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wuapi.dll 2015-02-17 02:44 - 2012-06-02 16:19 - 00577048 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wuapi.dll 2015-02-17 02:44 - 2012-06-02 16:19 - 00329240 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wucltui.dll 2015-02-17 02:44 - 2012-06-02 16:19 - 00329240 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wucltui.dll 2015-02-17 02:44 - 2012-06-02 16:19 - 00219160 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wuaucpl.cpl 2015-02-17 02:44 - 2012-06-02 16:19 - 00219160 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wuaucpl.cpl 2015-02-17 02:44 - 2012-06-02 16:19 - 00053784 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wuauclt.exe 2015-02-17 02:44 - 2012-06-02 16:19 - 00053784 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wuauclt.exe 2015-02-17 02:44 - 2012-06-02 16:19 - 00035864 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wups.dll 2015-02-17 02:44 - 2012-06-02 16:19 - 00035864 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wups.dll 2015-02-17 02:44 - 2008-04-14 08:53 - 00192512 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\msh261.drv 2015-02-17 02:44 - 2008-04-14 08:53 - 00168448 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wuauclt1.exe 2015-02-17 02:44 - 2008-04-14 08:52 - 00691712 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\inetcomm.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00409088 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\qmgr.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00282624 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\inetcfg.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00280064 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mstask.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00252928 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\msoeacct.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00242176 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\srrstr.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00193536 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\schedsvc.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00183808 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wuaueng1.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00171520 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\srsvc.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00105984 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\msoert2.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00086016 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\isign32.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00081920 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\ils.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00073728 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\icwdial.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00069632 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\msconf.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00067584 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\srclient.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00065536 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\icwphbk.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00045568 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\safrslv.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00043520 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\safrcdlg.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00043520 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\racpldlg.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00034560 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mnmdd.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00032768 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mnmsrvc.exe 2015-02-17 02:44 - 2008-04-14 08:52 - 00032768 _____ (Intel Corporation) D:\WINDOWS.NEW\system32\isrdbg32.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00029696 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\safrdm.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00028672 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\nmmkcert.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00023040 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\fltmc.exe 2015-02-17 02:44 - 2008-04-14 08:52 - 00018944 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\qmgrprxy.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00016896 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\fltlib.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00012288 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mstinit.exe 2015-02-17 02:44 - 2008-04-14 08:52 - 00008192 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\bitsprx2.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00007168 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\bitsprx3.dll 2015-02-17 02:44 - 2008-04-14 08:52 - 00006656 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\wuauserv.dll 2015-02-17 02:44 - 2008-04-14 08:32 - 00073472 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\sr.sys 2015-02-17 02:44 - 2008-04-14 08:26 - 00051712 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\inetres.dll 2015-02-17 02:44 - 2008-04-14 01:03 - 00129792 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\fltmgr.sys 2015-02-17 02:44 - 2004-11-11 14:00 - 00118784 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\msg723.acm 2015-02-17 02:44 - 2004-11-11 14:00 - 00099840 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\helphost.exe 2015-02-17 02:44 - 2004-11-11 14:00 - 00070144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\acctres.dll 2015-02-17 02:44 - 2004-11-11 14:00 - 00070144 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\acctres.dll 2015-02-17 02:44 - 2004-11-11 14:00 - 00048680 ___SH () D:\WINDOWS.NEW\winnt256.bmp 2015-02-17 02:44 - 2004-11-11 14:00 - 00048680 ___SH () D:\WINDOWS.NEW\winnt.bmp 2015-02-17 02:44 - 2004-11-11 14:00 - 00047104 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\srdiag.exe 2015-02-17 02:44 - 2004-11-11 14:00 - 00035328 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\notiflag.exe 2015-02-17 02:44 - 2004-11-11 14:00 - 00021504 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\brpinfo.dll 2015-02-17 02:44 - 2004-11-11 14:00 - 00016384 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\isignup.exe 2015-02-17 02:44 - 2004-11-11 14:00 - 00016384 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\icfgnt5.dll 2015-02-17 02:44 - 2004-11-11 14:00 - 00016384 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\icfgnt5.dll 2015-02-17 02:44 - 2004-11-11 14:00 - 00012288 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\nmevtmsg.dll 2015-02-17 02:44 - 2004-11-11 14:00 - 00012288 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\nmevtmsg.dll 2015-02-17 02:44 - 2004-11-11 14:00 - 00011264 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\atrace.dll 2015-02-17 02:44 - 2004-11-11 14:00 - 00011264 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\atrace.dll 2015-02-17 02:44 - 2004-11-11 14:00 - 00007680 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\hcappres.dll 2015-02-17 02:44 - 2004-11-11 14:00 - 00000984 ____C () D:\WINDOWS.NEW\system32\dllcache\srframe.mmf 2015-02-17 02:43 - 2015-03-29 21:20 - 00000000 ____D () D:\WINDOWS.NEW\Registration 2015-02-17 02:43 - 2015-03-13 02:05 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Verwaltung 2015-02-17 02:43 - 2015-03-13 02:05 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Verwaltung 2015-02-17 02:43 - 2015-02-17 02:43 - 00021740 _____ () D:\WINDOWS.NEW\system32\emptyregdb.dat 2015-02-17 02:43 - 2015-02-17 02:43 - 00000037 _____ () D:\WINDOWS.NEW\vbaddin.ini 2015-02-17 02:43 - 2015-02-17 02:43 - 00000036 _____ () D:\WINDOWS.NEW\vb.ini 2015-02-17 02:43 - 2015-02-17 02:43 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Spiele 2015-02-17 02:43 - 2015-02-17 02:43 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Spiele 2015-02-17 02:42 - 2015-02-17 03:07 - 00000000 ____D () D:\WINDOWS.NEW\system32\Com 2015-02-17 02:42 - 2015-02-17 02:46 - 00000778 _____ () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\Startmenü\Programme\Windows Media Player.lnk 2015-02-17 02:42 - 2015-02-17 02:43 - 00000000 ____D () D:\WINDOWS.NEW\system32\MsDtc 2015-02-17 02:42 - 2008-04-14 08:53 - 00539136 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\spider.exe 2015-02-17 02:42 - 2008-04-14 08:53 - 00143360 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\sessmgr.exe 2015-02-17 02:42 - 2008-04-14 08:53 - 00139656 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\rdpwd.sys 2015-02-17 02:42 - 2008-04-14 08:53 - 00133120 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\sndrec32.exe 2015-02-17 02:42 - 2008-04-14 08:53 - 00087176 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\rdpwsx.dll 2015-02-17 02:42 - 2008-04-14 08:53 - 00070656 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\access.cpl 2015-02-17 02:42 - 2008-04-14 08:53 - 00067072 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\rdshost.exe 2015-02-17 02:42 - 2008-04-14 08:53 - 00062976 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\rdpclip.exe 2015-02-17 02:42 - 2008-04-14 08:53 - 00040840 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\termdd.sys 2015-02-17 02:42 - 2008-04-14 08:53 - 00021896 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\tdtcp.sys 2015-02-17 02:42 - 2008-04-14 08:53 - 00013824 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\rdsaddin.exe 2015-02-17 02:42 - 2008-04-14 08:53 - 00012040 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\tdpipe.sys 2015-02-17 02:42 - 2008-04-14 08:52 - 02061824 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mstscax.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 01267200 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\comsvcs.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00956928 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\msdtctm.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00677888 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mstsc.exe 2015-02-17 02:42 - 2008-04-14 08:52 - 00625664 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\catsrvut.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00498688 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\clbcatq.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00427008 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\msdtcprx.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00356352 _____ (Hilgraeve, Inc.) D:\WINDOWS.NEW\system32\hypertrm.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00346624 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mspaint.exe 2015-02-17 02:42 - 2008-04-14 08:52 - 00297472 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\termsrv.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00226304 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\catsrv.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00189440 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\cmprops.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00188928 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\accwiz.exe 2015-02-17 02:42 - 2008-04-14 08:52 - 00167424 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\comsnap.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00161792 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\msdtcuiu.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00147968 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\rdchost.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00124928 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mplay32.exe 2015-02-17 02:42 - 2008-04-14 08:52 - 00124928 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mplay32.exe 2015-02-17 02:42 - 2008-04-14 08:52 - 00110592 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\clbcatex.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00104448 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\clipbrd.exe 2015-02-17 02:42 - 2008-04-14 08:52 - 00097792 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\comrepl.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00094720 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\tscfgwmi.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00091648 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mtxoci.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00085504 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\catsrvps.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00061440 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\remotepg.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00060416 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\colbact.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00059392 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\stclient.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00058880 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\msdtclog.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00058880 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\licwmi.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00056320 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\servdeps.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00039424 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\cfgbkend.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00034304 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mtxlegih.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00030720 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mtxdm.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00028160 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\comaddin.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00020480 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\qprocess.exe 2015-02-17 02:42 - 2008-04-14 08:52 - 00019968 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\rdpsnd.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00017920 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mmfutil.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00011776 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\xolehlp.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00011264 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\icaapi.dll 2015-02-17 02:42 - 2008-04-14 08:52 - 00006144 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\msdtc.exe 2015-02-17 02:42 - 2008-04-14 08:52 - 00006144 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\dcomcnfg.exe 2015-02-17 02:42 - 2008-04-14 08:52 - 00004096 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mtxex.dll 2015-02-17 02:42 - 2008-04-14 08:50 - 00539648 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\comuid.dll 2015-02-17 02:42 - 2008-04-14 01:02 - 00196224 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\rdpdr.sys 2015-02-17 02:42 - 2004-11-11 14:00 - 00683520 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\getuname.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00683520 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\getuname.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00655360 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mstscax.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00412672 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mstsc.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00273920 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\msiprov.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00232960 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\avtapi.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00232960 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\avtapi.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00139776 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sndvol32.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00139776 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\sndvol32.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00128000 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mshearts.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00128000 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\mshearts.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00120320 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\winmine.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00120320 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\dsprov.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00120320 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\winmine.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00116224 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\updprov.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00114688 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\calc.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00114688 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\calc.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00093702 _____ () D:\WINDOWS.NEW\system32\subrange.uce 2015-02-17 02:42 - 2004-11-11 14:00 - 00080896 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\charmap.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00080896 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\charmap.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00076800 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wmipicmp.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00073216 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\avwav.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00073216 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\avwav.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00065978 _____ () D:\WINDOWS.NEW\Seifenblase.bmp 2015-02-17 02:42 - 2004-11-11 14:00 - 00065954 _____ () D:\WINDOWS.NEW\Präriewind.bmp 2015-02-17 02:42 - 2004-11-11 14:00 - 00065832 _____ () D:\WINDOWS.NEW\Santa Fe-Stuck.bmp 2015-02-17 02:42 - 2004-11-11 14:00 - 00063488 _____ () D:\WINDOWS.NEW\system32\wmimgmt.msc 2015-02-17 02:42 - 2004-11-11 14:00 - 00061952 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tmplprov.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00061440 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wmimsg.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00060458 _____ () D:\WINDOWS.NEW\system32\ideograf.uce 2015-02-17 02:42 - 2004-11-11 14:00 - 00059904 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wbemdisp.tlb 2015-02-17 02:42 - 2004-11-11 14:00 - 00059904 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\trnsprov.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00057344 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sol.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00057344 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\sol.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00055808 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\freecell.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00055808 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\freecell.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00053248 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\fwdprov.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00052224 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wmitimep.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00045568 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wmi2xml.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00044544 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tscupgrd.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00044544 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\tscupgrd.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00044544 _____ (Hilgraeve, Inc.) D:\WINDOWS.NEW\system32\hticons.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00040960 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\smtpcons.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00035840 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\winchat.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00035840 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\winchat.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00033792 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\regini.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00033792 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\regini.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00031232 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wbemads.tlb 2015-02-17 02:42 - 2004-11-11 14:00 - 00027055 _____ () D:\WINDOWS.NEW\system32\tslabels.ini 2015-02-17 02:42 - 2004-11-11 14:00 - 00026680 _____ () D:\WINDOWS.NEW\Fächer.bmp 2015-02-17 02:42 - 2004-11-11 14:00 - 00026582 _____ () D:\WINDOWS.NEW\Granit.bmp 2015-02-17 02:42 - 2004-11-11 14:00 - 00024006 _____ () D:\WINDOWS.NEW\system32\gb2312.uce 2015-02-17 02:42 - 2004-11-11 14:00 - 00022984 _____ () D:\WINDOWS.NEW\system32\bopomofo.uce 2015-02-17 02:42 - 2004-11-11 14:00 - 00022528 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\qwinsta.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00022528 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\msg.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00022528 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\qwinsta.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00022528 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\msg.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00019456 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mtsadmin.tlb 2015-02-17 02:42 - 2004-11-11 14:00 - 00017920 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\winmgmtr.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00017920 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tsshutdn.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00017920 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\tsshutdn.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00017408 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\qappsrv.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00017408 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\qappsrv.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00017362 _____ () D:\WINDOWS.NEW\Rhododendron.bmp 2015-02-17 02:42 - 2004-11-11 14:00 - 00017336 _____ () D:\WINDOWS.NEW\Angler.bmp 2015-02-17 02:42 - 2004-11-11 14:00 - 00017062 _____ () D:\WINDOWS.NEW\Kaffeetasse.bmp 2015-02-17 02:42 - 2004-11-11 14:00 - 00016896 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\unsecapp.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00016740 _____ () D:\WINDOWS.NEW\system32\shiftjis.uce 2015-02-17 02:42 - 2004-11-11 14:00 - 00016730 _____ () D:\WINDOWS.NEW\Feder.bmp 2015-02-17 02:42 - 2004-11-11 14:00 - 00016384 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tskill.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00016384 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\rwinsta.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00016384 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\avmeter.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00016384 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\tskill.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00016384 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\rwinsta.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00016384 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\avmeter.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00015872 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\logoff.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00015872 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\cdmodem.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00015872 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\logoff.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00015872 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\cdmodem.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00015360 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tsdiscon.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00015360 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\tscon.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00015360 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\shadow.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00015360 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\tsdiscon.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00015360 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\tscon.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00015360 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\shadow.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00013824 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\winmgmt.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00012876 _____ () D:\WINDOWS.NEW\system32\korean.uce 2015-02-17 02:42 - 2004-11-11 14:00 - 00012288 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wbemads.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00010240 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\reset.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00010240 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\reset.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00009522 _____ () D:\WINDOWS.NEW\Zapotek.bmp 2015-02-17 02:42 - 2004-11-11 14:00 - 00008484 _____ () D:\WINDOWS.NEW\system32\kanji_2.uce 2015-02-17 02:42 - 2004-11-11 14:00 - 00006948 _____ () D:\WINDOWS.NEW\system32\kanji_1.uce 2015-02-17 02:42 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\write.exe 2015-02-17 02:42 - 2004-11-11 14:00 - 00005632 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\write.exe |
|
06.04.2015, 20:23
| #4 |
| | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) 2015-02-17 02:42 - 2004-11-11 14:00 - 00004608 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\rdpcfgex.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00004608 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\rdpcfgex.dll 2015-02-17 02:42 - 2004-11-11 14:00 - 00003999 _____ () D:\WINDOWS.NEW\system32\msdtcprf.ini 2015-02-17 02:42 - 2004-11-11 14:00 - 00003286 _____ () D:\WINDOWS.NEW\system32\tslabels.h 2015-02-17 02:42 - 2004-11-11 14:00 - 00001272 _____ () D:\WINDOWS.NEW\Blaue Spitzen 16.bmp 2015-02-17 02:42 - 2004-11-11 14:00 - 00001237 _____ () D:\WINDOWS.NEW\system32\usrlogon.cmd 2015-02-17 02:42 - 2004-11-11 14:00 - 00000768 _____ () D:\WINDOWS.NEW\system32\msdtcprf.h 2015-02-17 02:41 - 2015-04-06 19:50 - 00000159 _____ () D:\WINDOWS.NEW\wiadebug.log 2015-02-17 02:41 - 2015-04-06 19:50 - 00000050 _____ () D:\WINDOWS.NEW\wiaservc.log 2015-02-17 02:41 - 2015-02-20 07:43 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Zubehör 2015-02-17 02:41 - 2015-02-20 07:43 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Zubehör 2015-02-17 02:41 - 2015-02-17 02:41 - 00000000 ____N () D:\WINDOWS.NEW\Sti_Trace.log 2015-02-17 02:41 - 2001-08-17 14:59 - 00003072 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\audstub.sys 2015-02-17 02:40 - 2008-04-14 08:53 - 00082944 _____ (IBM Corporation) D:\WINDOWS.NEW\system32\tp4mon.exe 2015-02-17 02:40 - 2008-04-14 08:22 - 00057728 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\redbook.sys 2015-02-17 02:40 - 2008-04-14 08:22 - 00016384 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\battc.sys 2015-02-17 02:40 - 2008-04-14 01:06 - 00013952 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\cmbatt.sys 2015-02-17 02:40 - 2008-04-14 01:06 - 00010240 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\compbatt.sys 2015-02-17 02:40 - 2001-08-18 05:54 - 00031744 _____ (IBM Corporation) D:\WINDOWS.NEW\system32\tp4.dll 2015-02-17 02:40 - 2001-08-18 05:52 - 00043520 _____ (IBM Corporation) D:\WINDOWS.NEW\system32\tp4res.dll 2015-02-17 02:40 - 2001-08-17 14:48 - 00011520 _____ (IBM Corporation) D:\WINDOWS.NEW\system32\Drivers\TwoTrack.sys 2015-02-17 02:40 - 2001-07-28 16:07 - 00017488 _____ () D:\WINDOWS.NEW\system32\tp4.hlp 2015-02-17 02:39 - 2008-04-14 08:52 - 00077312 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\usbui.dll 2015-02-17 02:37 - 2015-04-06 20:08 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme 2015-02-17 02:37 - 2015-04-06 20:08 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme 2015-02-17 02:37 - 2015-04-06 14:23 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Autostart 2015-02-17 02:37 - 2015-04-06 14:23 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü\Programme\Autostart 2015-02-17 02:37 - 2015-04-01 04:10 - 01224286 _____ () D:\WINDOWS.NEW\system32\PerfStringBackup.INI 2015-02-17 02:37 - 2015-03-31 00:44 - 00001919 _____ () D:\WINDOWS.NEW\system32\AUTOEXEC.NT 2015-02-17 02:37 - 2015-03-30 17:29 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Startmenü 2015-02-17 02:37 - 2015-02-17 03:38 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW\Dokumente 2015-02-17 02:37 - 2015-02-17 02:46 - 00004337 _____ () D:\WINDOWS.NEW\ODBCINST.INI 2015-02-17 02:37 - 2015-02-17 02:46 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\Startmenü\Programme 2015-02-17 02:37 - 2015-02-17 02:37 - 00000000 ___SD () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\Lokale Einstellungen\Verlauf 2015-02-17 02:37 - 2015-02-17 02:37 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\Startmenü\Programme\Autostart 2015-02-17 02:37 - 2015-02-17 02:37 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\Startmenü 2015-02-17 02:37 - 2015-02-17 02:37 - 00000000 ___HD () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\Netzwerkumgebung 2015-02-17 02:37 - 2015-02-17 02:37 - 00000000 ___HD () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\Druckumgebung 2015-02-17 02:37 - 2015-02-17 02:37 - 00000000 ____D () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW\Lokale Einstellungen\Temp 2015-02-17 02:37 - 2008-04-14 08:53 - 00146944 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\winspool.drv 2015-02-17 02:37 - 2008-04-14 08:52 - 00076288 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\storprop.dll 2015-02-17 02:37 - 2008-04-14 08:52 - 00070144 _____ (Microsoft Corporation) D:\WINDOWS.NEW\notepad.exe 2015-02-17 02:37 - 2008-04-14 08:52 - 00008704 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\batt.dll 2015-02-17 02:37 - 2008-04-14 01:24 - 00011264 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\Drivers\irenum.sys 2015-02-17 02:37 - 2004-11-11 14:00 - 00817199 ____C () D:\WINDOWS.NEW\system32\dllcache\NT5IIS.CAT 2015-02-17 02:37 - 2004-11-11 14:00 - 00399645 ____C () D:\WINDOWS.NEW\system32\dllcache\MAPIMIG.CAT 2015-02-17 02:37 - 2004-11-11 14:00 - 00176157 ____C (Digi International, Inc.) D:\WINDOWS.NEW\system32\dllcache\dgrpsetu.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00176157 _____ (Digi International, Inc.) D:\WINDOWS.NEW\system32\dgrpsetu.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00127104 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\MSVIDEO.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00109504 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\AVIFILE.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00106147 ____C () D:\WINDOWS.NEW\system32\dllcache\SP2.CAT 2015-02-17 02:37 - 2004-11-11 14:00 - 00103936 ____C (Equinox Systems Inc.) D:\WINDOWS.NEW\system32\dllcache\eqnclass.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00103936 _____ (Equinox Systems Inc.) D:\WINDOWS.NEW\system32\EqnClass.Dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00086556 ____C (Digi International) D:\WINDOWS.NEW\system32\dllcache\dgsetup.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00086556 _____ (Digi International) D:\WINDOWS.NEW\system32\dgsetup.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00082944 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\OLECLI.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00077881 ____C () D:\WINDOWS.NEW\system32\dllcache\plus.cat 2015-02-17 02:37 - 2004-11-11 14:00 - 00073760 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\MCIAVI.DRV 2015-02-17 02:37 - 2004-11-11 14:00 - 00070368 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\AVICAP.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00069632 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\MMSYSTEM.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 ____C () D:\WINDOWS.NEW\system32\dllcache\c_869.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 ____C () D:\WINDOWS.NEW\system32\dllcache\c_866.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 ____C () D:\WINDOWS.NEW\system32\dllcache\c_857.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 ____C () D:\WINDOWS.NEW\system32\dllcache\c_855.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 ____C () D:\WINDOWS.NEW\system32\dllcache\c_852.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 ____C () D:\WINDOWS.NEW\system32\dllcache\c_737.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 _____ () D:\WINDOWS.NEW\system32\c_869.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 _____ () D:\WINDOWS.NEW\system32\c_866.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 _____ () D:\WINDOWS.NEW\system32\c_857.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 _____ () D:\WINDOWS.NEW\system32\c_855.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 _____ () D:\WINDOWS.NEW\system32\c_852.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066594 _____ () D:\WINDOWS.NEW\system32\c_737.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_875.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_28603.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_28599.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_28597.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_28595.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_28594.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_20127.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10082.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10081.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10029.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10017.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10010.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10007.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 ____C () D:\WINDOWS.NEW\system32\dllcache\c_10006.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\c_875.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\c_28603.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\c_28599.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\C_28597.NLS 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\C_28595.NLS 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\C_28594.NLS 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\c_20127.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\c_10082.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\c_10081.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\c_10029.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\c_10017.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\c_10010.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\c_10007.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00066082 _____ () D:\WINDOWS.NEW\system32\c_10006.nls 2015-02-17 02:37 - 2004-11-11 14:00 - 00041270 ____C () D:\WINDOWS.NEW\system32\dllcache\MW770.CAT 2015-02-17 02:37 - 2004-11-11 14:00 - 00033744 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\COMMDLG.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00028160 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\MCIWAVE.DRV 2015-02-17 02:37 - 2004-11-11 14:00 - 00025296 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\MCISEQ.DRV 2015-02-17 02:37 - 2004-11-11 14:00 - 00024661 ____C (Perle Systems Ltd.) D:\WINDOWS.NEW\system32\dllcache\spxcoins.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00024661 _____ (Perle Systems Ltd.) D:\WINDOWS.NEW\system32\spxcoins.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00024064 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\OLESVR.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00019200 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\TAPI.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00017916 ____C () D:\WINDOWS.NEW\system32\dllcache\sonic.cat 2015-02-17 02:37 - 2004-11-11 14:00 - 00015872 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\taskman.exe 2015-02-17 02:37 - 2004-11-11 14:00 - 00015872 _____ (Microsoft Corporation) D:\WINDOWS.NEW\TASKMAN.EXE 2015-02-17 02:37 - 2004-11-11 14:00 - 00013824 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\irclass.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00013824 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system32\irclass.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00013600 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\WFWNET.DRV 2015-02-17 02:37 - 2004-11-11 14:00 - 00013472 ____C () D:\WINDOWS.NEW\system32\dllcache\HPCRDP.CAT 2015-02-17 02:37 - 2004-11-11 14:00 - 00009936 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\LZEXPAND.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00009200 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\VER.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00008574 ____C () D:\WINDOWS.NEW\system32\dllcache\IASNT4.CAT 2015-02-17 02:37 - 2004-11-11 14:00 - 00008192 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdhept.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00008192 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdhept.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00007382 ____C () D:\WINDOWS.NEW\system32\dllcache\OEMBIOS.CAT 2015-02-17 02:37 - 2004-11-11 14:00 - 00007334 ____C () D:\WINDOWS.NEW\system32\dllcache\wmerrenu.cat 2015-02-17 02:37 - 2004-11-11 14:00 - 00007168 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdcz.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00007168 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdcz.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdycl.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdsl1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdsl.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdpl.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdhu.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdhela3.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdcz2.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdcz1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdcr.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\KBDAL.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdycl.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdsl1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdsl.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdpl.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdhu.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdhela3.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdcz2.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdcz1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdcr.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006656 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdal.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdtuq.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdtuf.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdlv1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdlv.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdhela2.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdgkl.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdest.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdtuq.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdtuf.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdlv1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdlv.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdhela2.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdgkl.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00006144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdest.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdycc.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbduzb.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdur.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdtat.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdru1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdru.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdro.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdpl1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdmon.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdlt1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdlt.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdkyr.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdkaz.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdhu1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdhe319.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdhe220.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdhe.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdbu.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdblr.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdazel.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____R (Microsoft Corporation) D:\WINDOWS.NEW\system32\kbdaze.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdycc.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbduzb.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdur.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdtat.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdru1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdru.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdro.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdpl1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdmon.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdlt1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdlt.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdkyr.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdkaz.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdhu1.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdhe319.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdhe220.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdhe.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdbu.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdblr.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdazel.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005632 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\kbdaze.dll 2015-02-17 02:37 - 2004-11-11 14:00 - 00005120 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\SHELL.DLL 2015-02-17 02:37 - 2004-11-11 14:00 - 00004048 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\TIMER.DRV 2015-02-17 02:37 - 2004-11-11 14:00 - 00003360 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\SYSTEM.DRV 2015-02-17 02:37 - 2004-11-11 14:00 - 00002176 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\VGA.DRV 2015-02-17 02:37 - 2004-11-11 14:00 - 00002032 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\MOUSE.DRV 2015-02-17 02:37 - 2004-11-11 14:00 - 00002000 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\KEYBOARD.DRV 2015-02-17 02:37 - 2004-11-11 14:00 - 00001744 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\SOUND.DRV 2015-02-17 02:37 - 2004-11-11 14:00 - 00001152 _____ (Microsoft Corporation) D:\WINDOWS.NEW\system\MMTASK.TSK 2015-02-17 02:36 - 2015-03-13 03:57 - 00000000 ____D () D:\Dokumente und Einstellungen\All Users.WINDOWS.NEW 2015-02-17 02:36 - 2015-02-17 03:13 - 00000000 ___HD () D:\Dokumente und Einstellungen\Default User.WINDOWS.NEW 2015-02-17 02:15 - 2015-02-17 02:15 - 00003584 _____ () D:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-02-17 01:56 - 2015-02-17 01:56 - 00000755 _____ () D:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk 2015-02-16 08:33 - 2015-02-16 08:33 - 00000000 ____D () D:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Apple Computer 2015-02-16 08:17 - 2015-03-29 22:33 - 00000000 ____D () D:\Programme\Messenger 2015-02-16 08:16 - 2015-02-16 08:16 - 00000000 ____D () D:\Programme\msn 2015-02-16 07:58 - 2015-02-16 07:58 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\et 2015-02-16 07:26 - 2015-04-04 16:24 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\812BAA2C-1424067982-CB11-9CA6-8F3F309B25F9 2015-02-16 07:25 - 2015-04-04 17:26 - 00000000 ____D () D:\Programme\msrtn32 2015-02-16 07:23 - 2015-03-13 05:45 - 00000000 ____D () D:\Programme\data_up 2015-02-16 07:23 - 2015-02-16 07:23 - 00000000 ____D () D:\Programme\dataup 2015-02-16 07:23 - 2015-02-16 07:23 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Temp 2015-02-16 07:23 - 2015-02-16 07:23 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Bypass 2015-02-15 22:04 - 2015-02-16 22:16 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\vlc 2015-02-15 22:04 - 2015-02-15 22:04 - 00000000 ____D () D:\Programme\VideoLAN 2015-02-15 16:43 - 2015-04-06 20:02 - 00000000 ____D () D:\Programme\Fotor 2015-02-14 19:30 - 2015-02-14 19:30 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Macromedia 2015-02-14 19:29 - 2015-02-14 19:30 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Adobe 2015-02-14 18:33 - 2015-02-14 18:33 - 00000000 ____D () D:\Programme\Lenovo 2015-02-14 18:33 - 2015-02-14 18:33 - 00000000 ____D () D:\Programme\Gemeinsame Dateien\InstallShield 2015-02-14 18:10 - 2015-02-14 18:10 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Internet-Manager 2015-02-14 18:09 - 2015-02-14 18:33 - 00000000 ___HD () D:\Programme\InstallShield Installation Information 2015-02-14 17:58 - 2015-02-17 02:19 - 00000190 ___SH () D:\Dokumente und Einstellungen\Administrator\ntuser.ini 2015-02-14 17:58 - 2015-02-17 02:18 - 00000000 ___RD () D:\Dokumente und Einstellungen\Administrator\Eigene Dateien\Eigene Musik 2015-02-14 17:58 - 2015-02-16 08:46 - 00000000 ___RD () D:\Dokumente und Einstellungen\Administrator\Eigene Dateien\Eigene Bilder 2015-02-14 17:58 - 2015-02-14 17:58 - 00000146 _____ () D:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat 2015-02-14 17:57 - 2015-03-13 01:12 - 00000000 ____D () D:\Dokumente und Einstellungen\Administrator 2015-02-14 17:57 - 2015-02-18 00:22 - 00000000 __SHD () D:\Dokumente und Einstellungen\LocalService 2015-02-14 17:57 - 2015-02-16 20:07 - 00000190 ___SH () D:\Dokumente und Einstellungen\LocalService\ntuser.ini 2015-02-14 17:57 - 2015-02-16 08:31 - 00000000 ___SD () D:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Verlauf 2015-02-14 17:57 - 2015-02-14 17:57 - 00000020 ___SH () D:\Dokumente und Einstellungen\NetworkService\ntuser.ini 2015-02-14 17:57 - 2015-02-14 17:57 - 00000000 __SHD () D:\Dokumente und Einstellungen\NetworkService 2015-02-14 17:57 - 2015-02-14 17:57 - 00000000 ____D () D:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Temp 2015-02-14 17:57 - 2015-02-14 17:57 - 00000000 ____D () D:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Temp 2015-02-14 17:57 - 2015-02-14 17:43 - 00000000 ___SD () D:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Verlauf 2015-02-14 17:57 - 2015-02-14 17:43 - 00000000 ___HD () D:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Verlauf 2015-02-14 17:57 - 2015-02-14 17:43 - 00000000 ___HD () D:\Dokumente und Einstellungen\Administrator\Netzwerkumgebung 2015-02-14 17:57 - 2015-02-14 17:43 - 00000000 ___HD () D:\Dokumente und Einstellungen\Administrator\Druckumgebung 2015-02-14 17:54 - 2015-02-14 17:54 - 00000000 ____D () D:\Programme\xerox 2015-02-14 17:54 - 2015-02-14 17:54 - 00000000 ____D () D:\Programme\Windows Journal Viewer 2015-02-14 17:54 - 2015-02-14 17:54 - 00000000 ____D () D:\Programme\microsoft frontpage 2015-02-14 17:54 - 2015-02-14 17:54 - 00000000 ____D () D:\Programme\HighMAT CD Writing Wizard 2015-02-14 17:53 - 2015-02-17 02:49 - 00000000 ____D () D:\Programme\Windows Media Connect 2015-02-14 17:53 - 2015-02-16 08:35 - 00013912 _____ () D:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT 2015-02-14 17:53 - 2008-04-14 08:52 - 00004639 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mplayer2.exe 2015-02-14 17:52 - 2015-02-14 17:52 - 00000506 _____ () D:\Dokumente und Einstellungen\Default User\msiutil(1).log 2015-02-14 17:51 - 2015-02-14 17:51 - 00001605 _____ () D:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Remoteunterstützung.lnk 2015-02-14 17:51 - 2015-02-14 17:51 - 00000778 _____ () D:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Windows Media Player.lnk 2015-02-14 17:50 - 2015-02-14 17:51 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Zubehör 2015-02-14 17:50 - 2015-02-14 17:50 - 00000000 __SHD () D:\Dokumente und Einstellungen\All Users\DRM 2015-02-14 17:50 - 2015-02-14 17:50 - 00000000 ___HD () D:\Programme\WindowsUpdate 2015-02-14 17:50 - 2015-02-14 17:50 - 00000000 ____D () D:\Programme\Online-Dienste 2015-02-14 17:49 - 2015-03-29 22:34 - 00000000 ____D () D:\Programme\Outlook Express 2015-02-14 17:49 - 2015-03-29 22:34 - 00000000 ____D () D:\Programme\NetMeeting 2015-02-14 17:49 - 2015-03-29 22:34 - 00000000 ____D () D:\Programme\Movie Maker 2015-02-14 17:49 - 2015-03-29 22:34 - 00000000 ____D () D:\Programme\Gemeinsame Dateien\System 2015-02-14 17:49 - 2015-02-14 17:49 - 00000000 ____D () D:\Programme\Gemeinsame Dateien\MSSoap 2015-02-14 17:49 - 2015-02-14 17:49 - 00000000 ____D () D:\Programme\Gemeinsame Dateien\Dienste 2015-02-14 17:49 - 2008-04-14 08:52 - 00033792 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\custsat.dll 2015-02-14 17:49 - 2004-11-11 14:00 - 00991232 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\migrate.exe 2015-02-14 17:49 - 2004-11-11 14:00 - 00827392 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\setup_wm.exe 2015-02-14 17:49 - 2004-11-11 14:00 - 00356352 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mpvis.dll 2015-02-14 17:49 - 2004-11-11 14:00 - 00235520 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mssoap1.dll 2015-02-14 17:49 - 2004-11-11 14:00 - 00094208 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\ieinfo5.ocx 2015-02-14 17:49 - 2004-11-11 14:00 - 00077824 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wmpband.dll 2015-02-14 17:49 - 2004-11-11 14:00 - 00073728 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wmplayer.exe 2015-02-14 17:49 - 2004-11-11 14:00 - 00073728 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\icwtutor.exe 2015-02-14 17:49 - 2004-11-11 14:00 - 00065536 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\icwres.dll 2015-02-14 17:49 - 2004-11-11 14:00 - 00040960 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\trialoc.dll 2015-02-14 17:49 - 2004-11-11 14:00 - 00040448 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\msinfo32.exe 2015-02-14 17:49 - 2004-11-11 14:00 - 00025088 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wisc10.dll 2015-02-14 17:49 - 2004-11-11 14:00 - 00023552 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\mssoapr.dll 2015-02-14 17:49 - 2004-11-11 14:00 - 00012288 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\wb32.exe 2015-02-14 17:49 - 2004-11-11 14:00 - 00012288 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\cb32.exe 2015-02-14 17:48 - 2004-11-11 14:00 - 00013312 ____C (Hilgraeve, Inc.) D:\WINDOWS.NEW\system32\dllcache\htrn_jis.dll 2015-02-14 17:47 - 2015-03-29 22:32 - 00000000 ____D () D:\Programme\Windows NT 2015-02-14 17:44 - 2015-02-14 17:44 - 00000000 ____D () D:\Programme\Gemeinsame Dateien\ODBC 2015-02-14 17:43 - 2015-04-06 20:07 - 00000000 ___RD () D:\Programme 2015-02-14 17:43 - 2015-03-01 23:07 - 00000000 ____D () D:\Programme\Gemeinsame Dateien\Microsoft Shared 2015-02-14 17:43 - 2015-02-17 02:04 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users\Startmenü 2015-02-14 17:43 - 2015-02-14 18:42 - 00000000 ___RD () D:\Dokumente und Einstellungen\All Users\Dokumente 2015-02-14 17:43 - 2015-02-14 17:51 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User\Startmenü\Programme 2015-02-14 17:43 - 2015-02-14 17:43 - 00000000 ___SD () D:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Verlauf 2015-02-14 17:43 - 2015-02-14 17:43 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User\Startmenü\Programme\Autostart 2015-02-14 17:43 - 2015-02-14 17:43 - 00000000 ___RD () D:\Dokumente und Einstellungen\Default User\Startmenü 2015-02-14 17:43 - 2015-02-14 17:43 - 00000000 ___HD () D:\Dokumente und Einstellungen\Default User\Netzwerkumgebung 2015-02-14 17:43 - 2015-02-14 17:43 - 00000000 ___HD () D:\Dokumente und Einstellungen\Default User\Druckumgebung 2015-02-14 17:43 - 2015-02-14 17:43 - 00000000 ____D () D:\Programme\Gemeinsame Dateien\SpeechEngines 2015-02-14 17:43 - 2015-02-14 17:43 - 00000000 ____D () D:\Dokumente und Einstellungen\Default User\Lokale Einstellungen\Temp 2015-02-14 17:43 - 2004-11-11 14:00 - 01685606 ____C () D:\WINDOWS.NEW\system32\dllcache\sam.spd 2015-02-14 17:43 - 2004-11-11 14:00 - 00774144 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\spttseng.dll 2015-02-14 17:43 - 2004-11-11 14:00 - 00643717 ____C () D:\WINDOWS.NEW\system32\dllcache\ltts1033.lxa 2015-02-14 17:43 - 2004-11-11 14:00 - 00605050 ____C () D:\WINDOWS.NEW\system32\dllcache\r1033tts.lxa 2015-02-14 17:43 - 2004-11-11 14:00 - 00077824 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\spcommon.dll 2015-02-14 17:43 - 2004-11-11 14:00 - 00065536 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\spcplui.dll 2015-02-14 17:43 - 2004-11-11 14:00 - 00036864 ____C (Microsoft Corporation) D:\WINDOWS.NEW\system32\dllcache\sapisvr.exe 2015-02-14 17:43 - 2004-11-11 14:00 - 00000888 ____C () D:\WINDOWS.NEW\system32\dllcache\sam.sdf ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-04-04 17:50 - 2004-11-11 14:00 - 00002278 _____ () D:\WINDOWS.NEW\system32\wpa.dbl 2015-04-04 17:39 - 2004-11-11 14:00 - 00000246 _____ () D:\WINDOWS.NEW\system.ini ==================== Files in the root of some directories ======= 2015-02-17 02:53 - 2015-02-17 02:53 - 0000156 _____ () D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat Some content of TEMP: ==================== D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\mfc80.dll D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\mfc80u.dll D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\mfcm80.dll D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\mfcm80u.dll D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\msvcm80.dll D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\msvcp80.dll D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\msvcr80.dll D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\OSU.exe D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\Uninstaller.exe D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\VersionUpdater.exe D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\WtgDriverInstallX.dll D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\WTGXMLUtil.dll D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\temp\WtgZip.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) D:\WINDOWS.NEW\explorer.exe => File is digitally signed D:\WINDOWS.NEW\system32\winlogon.exe => File is digitally signed D:\WINDOWS.NEW\system32\svchost.exe => File is digitally signed D:\WINDOWS.NEW\system32\services.exe => File is digitally signed D:\WINDOWS.NEW\system32\User32.dll => File is digitally signed D:\WINDOWS.NEW\system32\userinit.exe => File is digitally signed D:\WINDOWS.NEW\system32\rpcss.dll => File is digitally signed D:\WINDOWS.NEW\system32\Drivers\volsnap.sys => File is digitally signed ==================== End Of Log ============================[/CODE] FRST ADDITION: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015
Ran by Administrator at 2015-04-06 20:35:57
Running from D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Emsisoft Anti-Malware (Enabled - Up to date) {0F8591BB-342B-4493-91C3-4E948ED21255}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ALDI TALK Verbindungsassistent (HKLM\...\ALDITALKVerbindungsassistent) (Version: ALDI TALK 4.0 - ALDI TALK Verbindungsassistent)
Conexant HD Audio (HKLM\...\CNXT_HDAUDIO) (Version: 3.38.0.52 - Conexant)
Emsisoft Anti-Malware (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 9.0 - Emsisoft Ltd.)
IPVanish (Version: 2.0.5507.29332 - IPVanish.com) Hidden
IPVanish VPN (HKLM\...\{072f0988-e40d-45d9-b85b-9c68bb7c31fe}) (Version: 2.0.5507.29332 - IPVanish.com)
Java 7 Update 75 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217075FF}) (Version: 7.0.750 - Oracle)
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU (HKLM\...\{C314CE45-3392-3B73-B4E1-139CD41CA933}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU (HKLM\...\{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft User-Mode Driver Framework Feature Pack 1.9 (HKLM\...\Wudf01009) (Version: - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Windows-Journal-Viewer (HKLM\...\{43DCF766-6838-4F9A-8C91-D92DA586DFA7}) (Version: 1.5.2315.3 - Microsoft)
Mozilla Firefox 36.0.4 (x86 de) (HKLM\...\Mozilla Firefox 36.0.4 (x86 de)) (Version: 36.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 36.0.4 - Mozilla)
OpenOffice 4.0.1 (HKLM\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
Windows Media Connect (HKLM\...\Windows Media Connect) (Version: - )
Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031514 - Microsoft Corporation)
XML Paper Specification Shared Components Language Pack 1.0 (Version: - Microsoft Corporation) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
==================== Restore Points =========================
29-03-2015 20:59:29 Installiert congstar Internet-Manager
29-03-2015 21:11:13 Wiederherstellungsvorgang
29-03-2015 21:24:22 Installiert congstar Internet-Manager
29-03-2015 21:52:34 Entfernt congstar Internet-Manager
29-03-2015 22:09:43 Wiederherstellungsvorgang
31-03-2015 03:03:57 ComboFix created restore point
01-04-2015 03:46:41 IPVanish VPN
01-04-2015 04:27:47 IPVanish VPN
04-04-2015 15:17:54 ComboFix created restore point
04-04-2015 16:56:33 Revo Uninstaller's restore point - Malwarebytes Anti-Malware Version 2.0.4.1028
04-04-2015 17:06:27 Revo Uninstaller's restore point - CCleaner
04-04-2015 17:09:24 Revo Uninstaller's restore point - Java 7 Update 75
04-04-2015 17:10:28 Java 7 Update 75 wird entfernt
05-04-2015 09:59:04 IPVanish VPN
05-04-2015 10:02:58 Revo Uninstaller's restore point - IPVanish VPN
05-04-2015 10:03:29 IPVanish VPN
05-04-2015 10:06:30 IPVanish VPN
06-04-2015 14:15:23 Revo Uninstaller's restore point - ALDI TALK Verbindungsassistent
06-04-2015 14:19:21 Revo Uninstaller's restore point - ALDI TALK Verbindungsassistent
06-04-2015 19:52:37 Revo Uninstaller's restore point - ALDI TALK Verbindungsassistent
06-04-2015 19:54:51 Revo Uninstaller's restore point - Adobe Reader XI (11.0.08) - Deutsch
06-04-2015 19:57:17 Revo Uninstaller's restore point - Adobe Reader XI (11.0.08) - Deutsch
06-04-2015 19:58:34 Revo Uninstaller's restore point - Adobe Flash Player 16 NPAPI
06-04-2015 19:59:09 Revo Uninstaller's restore point - Adobe Flash Player 16 NPAPI
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2004-11-11 14:00 - 2015-03-31 03:37 - 00000027 ____A D:\WINDOWS.NEW\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Loaded Modules (whitelisted) ==============
2015-04-06 20:08 - 2015-04-06 20:12 - 00358968 _____ () D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe
2015-04-06 20:08 - 2015-04-06 20:12 - 00510520 _____ () D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
2015-04-06 20:08 - 2015-04-06 20:12 - 01792568 _____ () D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe
2015-04-06 20:08 - 2015-04-06 20:12 - 00102400 _____ () D:\Programme\ALDITALKVerbindungsassistent\WtgDatabase.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00106496 _____ () D:\Programme\ALDITALKVerbindungsassistent\WtgUtil.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00090112 _____ () D:\Programme\ALDITALKVerbindungsassistent\WtgPorts.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00200704 _____ () D:\Programme\ALDITALKVerbindungsassistent\WtgDetection.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00086016 _____ () D:\Programme\ALDITALKVerbindungsassistent\WtgDialup.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00012288 _____ () D:\Programme\ALDITALKVerbindungsassistent\WTGDebugs.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00073728 _____ () D:\Programme\ALDITALKVerbindungsassistent\WtgDriverInstall.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00569344 _____ () D:\Programme\ALDITALKVerbindungsassistent\WtgCore.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00139264 _____ () D:\Programme\ALDITALKVerbindungsassistent\WtgBluetooth.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00204800 _____ () D:\Programme\ALDITALKVerbindungsassistent\LiveBoxCM.dll
2015-04-06 20:08 - 2007-02-27 19:44 - 00823296 ____N () D:\Programme\ALDITALKVerbindungsassistent\LIBEAY32.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00126976 _____ () D:\Programme\ALDITALKVerbindungsassistent\WtgWiFi.dll
2015-04-06 20:08 - 2010-12-02 08:33 - 01097728 ____N () D:\Programme\ALDITALKVerbindungsassistent\NDISAPI.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00614400 _____ () D:\Programme\ALDITALKVerbindungsassistent\WTGXMLUtil.dll
2015-04-06 20:08 - 2015-04-06 20:12 - 00303104 _____ () D:\Programme\ALDITALKVerbindungsassistent\WTGSMSPCClient.Dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1292428093-484763869-682003330-500\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 212.23.103.8 - 212.23.103.9
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-1292428093-484763869-682003330-500 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Administrator.WINDOWSPC
ASPNET (S-1-5-21-1292428093-484763869-682003330-1003 - Limited - Enabled)
Gast (S-1-5-21-1292428093-484763869-682003330-501 - Limited - Disabled)
Hilfeassistent (S-1-5-21-1292428093-484763869-682003330-1000 - Limited - Disabled)
SUPPORT_388945a0 (S-1-5-21-1292428093-484763869-682003330-1002 - Limited - Disabled)
==================== Faulty Device Manager Devices =============
Name: Videocontroller (VGA-kompatibel)
Description: Videocontroller (VGA-kompatibel)
Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Videocontroller
Description: Videocontroller
Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Modemgerät auf High Definition Audio-Bus
Description: Modemgerät auf High Definition Audio-Bus
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name:
Description:
Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: TAP-Win32 Adapter V9
Description: TAP-Win32 Adapter V9
Class Guid: {4D36E972-E325-11CE-BFC1-08002BE10318}
Manufacturer: TAP-Win32 Provider V9
Service: tap0901
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (04/06/2015 08:15:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung frst.exe, Version 11.3.2015.0, fehlgeschlagenes Modul frst.exe, Version 11.3.2015.0, Fehleradresse 0x0001f09e.
Das medienspezifische Ereignis für [frst.exe!ws!] wird verarbeitet.
Error: (04/06/2015 07:49:55 PM) (Source: JavaQuickStarterService) (EventID: 1) (User: )
Description: Unable to open D:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf: No such file or directory
Error: (04/06/2015 02:56:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung alditalkverbindungsassistent.exe, Version 0.0.0.0, fehlgeschlagenes Modul ntdll.dll, Version 5.1.2600.5512, Fehleradresse 0x0001b1fa.
Das medienspezifische Ereignis für [alditalkverbindungsassistent.exe!ws!] wird verarbeitet.
Error: (04/06/2015 00:34:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung alditalkverbindungsassistent.exe, Version 0.0.0.0, fehlgeschlagenes Modul wtgsmspcclient.dll, Version 1.0.0.1, Fehleradresse 0x0001bcee.
Das medienspezifische Ereignis für [alditalkverbindungsassistent.exe!ws!] wird verarbeitet.
Error: (04/06/2015 00:03:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung drwtsn32.exe, Version 5.1.2600.0, fehlgeschlagenes Modul dbghelp.dll, Version 5.1.2600.5512, Fehleradresse 0x0001295d.
Das medienspezifische Ereignis für [drwtsn32.exe!ws!] wird verarbeitet.
Error: (04/06/2015 00:03:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung alditalkverbindungsassistent.exe, Version 0.0.0.0, fehlgeschlagenes Modul alditalkverbindungsassistent.exe, Version 0.0.0.0, Fehleradresse 0x00117277.
Das medienspezifische Ereignis für [alditalkverbindungsassistent.exe!ws!] wird verarbeitet.
Error: (04/06/2015 11:52:07 AM) (Source: JavaQuickStarterService) (EventID: 1) (User: )
Description: Unable to open D:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf: No such file or directory
Error: (04/06/2015 01:14:56 AM) (Source: JavaQuickStarterService) (EventID: 1) (User: )
Description: Unable to open D:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf: No such file or directory
Error: (04/05/2015 05:12:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlgeschlagene Anwendung alditalkverbindungsassistent.exe, Version 0.0.0.0, fehlgeschlagenes Modul alditalkverbindungsassistent.exe, Version 0.0.0.0, Fehleradresse 0x00117277.
Das medienspezifische Ereignis für [alditalkverbindungsassistent.exe!ws!] wird verarbeitet.
Error: (04/05/2015 02:49:56 PM) (Source: JavaQuickStarterService) (EventID: 1) (User: )
Description: Unable to open D:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf: No such file or directory
System errors:
=============
Error: (04/06/2015 08:16:49 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generate Activation Context ist für D:\Programme\ALDITALKVerbindungsassistent\MFC80U.DLL fehlgeschlagen.
Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet.
.
Error: (04/06/2015 08:16:49 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung: Die referenzierte Assemblierung ist nicht auf dem Computer installiert.
.
Error: (04/06/2015 08:16:49 PM) (Source: SideBySide) (EventID: 32) (User: )
Description: Abhängige Assemblierung "Microsoft.VC80.MFCLOC" konnte nicht gefunden werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer installiert.
Error: (04/06/2015 08:16:30 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generate Activation Context ist für D:\Programme\ALDITALKVerbindungsassistent\MFC80U.DLL fehlgeschlagen.
Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet.
.
Error: (04/06/2015 08:16:30 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung: Die referenzierte Assemblierung ist nicht auf dem Computer installiert.
.
Error: (04/06/2015 08:16:30 PM) (Source: SideBySide) (EventID: 32) (User: )
Description: Abhängige Assemblierung "Microsoft.VC80.MFCLOC" konnte nicht gefunden werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer installiert.
Error: (04/06/2015 08:16:30 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generate Activation Context ist für D:\Programme\ALDITALKVerbindungsassistent\MFC80U.DLL fehlgeschlagen.
Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet.
.
Error: (04/06/2015 08:16:30 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Resolve Partial Assembly ist für Microsoft.VC80.MFCLOC fehlgeschlagen.
Referenzfehlermeldung: Die referenzierte Assemblierung ist nicht auf dem Computer installiert.
.
Error: (04/06/2015 08:16:30 PM) (Source: SideBySide) (EventID: 32) (User: )
Description: Abhängige Assemblierung "Microsoft.VC80.MFCLOC" konnte nicht gefunden werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer installiert.
Error: (04/06/2015 08:16:30 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Generate Activation Context ist für D:\Programme\ALDITALKVerbindungsassistent\MFC80U.DLL fehlgeschlagen.
Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet.
.
Microsoft Office Sessions:
=========================
Error: (04/06/2015 08:15:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: frst.exe11.3.2015.0frst.exe11.3.2015.00001f09e
Error: (04/06/2015 07:49:55 PM) (Source: JavaQuickStarterService) (EventID: 1) (User: )
Description: Unable to open D:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf: No such file or directory
Error: (04/06/2015 02:56:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: alditalkverbindungsassistent.exe0.0.0.0ntdll.dll5.1.2600.55120001b1fa
Error: (04/06/2015 00:34:24 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: alditalkverbindungsassistent.exe0.0.0.0wtgsmspcclient.dll1.0.0.10001bcee
Error: (04/06/2015 00:03:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: drwtsn32.exe5.1.2600.0dbghelp.dll5.1.2600.55120001295d
Error: (04/06/2015 00:03:31 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: alditalkverbindungsassistent.exe0.0.0.0alditalkverbindungsassistent.exe0.0.0.000117277
Error: (04/06/2015 11:52:07 AM) (Source: JavaQuickStarterService) (EventID: 1) (User: )
Description: Unable to open D:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf: No such file or directory
Error: (04/06/2015 01:14:56 AM) (Source: JavaQuickStarterService) (EventID: 1) (User: )
Description: Unable to open D:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf: No such file or directory
Error: (04/05/2015 05:12:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: alditalkverbindungsassistent.exe0.0.0.0alditalkverbindungsassistent.exe0.0.0.000117277
Error: (04/05/2015 02:49:56 PM) (Source: JavaQuickStarterService) (EventID: 1) (User: )
Description: Unable to open D:\Programme\Java\jre7\lib\deploy\jqs\jqs.conf: No such file or directory
==================== Memory info ===========================
Processor: Intel(R) Celeron(R) CPU 540 @ 1.86GHz
Percentage of memory in use: 39%
Total physical RAM: 2038.35 MB
Available physical RAM: 1240.91 MB
Total Pagefile: 3931.47 MB
Available Pagefile: 2979.86 MB
Total Virtual: 2047.88 MB
Available Virtual: 1939.38 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:4.87 GB) (Free:4.81 GB) FAT32 ==>[Drive with boot components (Windows XP)]
Drive d: (Volume) (Fixed) (Total:24.41 GB) (Free:10.71 GB) NTFS
Drive f: (Disk) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS
Drive g: () (Removable) (Total:3.73 GB) (Free:3.09 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 74.5 GB) (Disk ID: B7E61057)
Partition 1: (Active) - (Size=4.9 GB) - (Type=0B)
Partition 2: (Not Active) - (Size=24.4 GB) - (Type=06)
========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 00000000)
Partition: GPT Partition Type.
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-04-06 21:02:23
Windows 5.1.2600 Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 HITACHI_HTS541680J9SA00 rev.SB2IC7UP 74,53GB
Running: bt4ldpb2.exe; Driver: D:\DOKUME~1\ADMINI~1.WIN\LOKALE~1\Temp\fgryqpob.sys
---- System - GMER 2.1 ----
SSDT \??\D:\WINDOWS.NEW\system32\drivers\mbamchameleon.sys (Malwarebytes Chameleon Protection Driver/Malwarebytes Corporation) ZwOpenProcess [0xBAA3BDBE]
SSDT \??\D:\WINDOWS.NEW\system32\drivers\mbamchameleon.sys (Malwarebytes Chameleon Protection Driver/Malwarebytes Corporation) ZwOpenThread [0xBAA3BF4A]
Code \??\D:\WINDOWS.NEW\system32\drivers\mbamchameleon.sys (Malwarebytes Chameleon Protection Driver/Malwarebytes Corporation) KeInsertQueueApc
---- Kernel code sections - GMER 2.1 ----
.text ntkrnlpa.exe!KeInsertQueueApc 804FAAA8 5 Bytes JMP BAA3D008 \??\D:\WINDOWS.NEW\system32\drivers\mbamchameleon.sys (Malwarebytes Chameleon Protection Driver/Malwarebytes Corporation)
---- User code sections - GMER 2.1 ----
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtCreateFile 7C91D090 1 Byte [FF]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtCreateFile 7C91D090 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtCreateFile + 4 7C91D094 2 Bytes [86, 71]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtDeleteValueKey 7C91D250 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtDeleteValueKey + 4 7C91D254 2 Bytes [8C, 71]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtOpenFile 7C91D580 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtOpenFile + 4 7C91D584 2 Bytes [83, 71]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtOpenProcess 7C91D5E0 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtOpenProcess + 4 7C91D5E4 2 Bytes [89, 71]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtSetContextThread 7C91DB90 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtSetContextThread + 4 7C91DB94 2 Bytes [7D, 71] {JGE 0x73}
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtSetInformationFile 7C91DC40 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtSetInformationFile + 4 7C91DC44 2 Bytes [80, 71]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtSetValueKey 7C91DDB0 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ntdll.dll!NtSetValueKey + 4 7C91DDB4 2 Bytes [8F, 71]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 71AF0001
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] kernel32.dll!CreateProcessInternalW 7C81979C 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] kernel32.dll!CreateProcessInternalW + 4 7C8197A0 2 Bytes [7A, 71] {JP 0x73}
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] USER32.dll!PostMessageW 7E368CCB 6 Bytes JMP 7199000A
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] USER32.dll!SendMessageW 7E37929A 6 Bytes JMP 719F000A
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] USER32.dll!PostMessageA 7E37AAFD 6 Bytes JMP 719C000A
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] USER32.dll!SendInput 7E37F140 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] USER32.dll!SendInput + 4 7E37F144 2 Bytes [A4, 71]
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] USER32.dll!SendMessageA 7E37F3C2 6 Bytes JMP 71A2000A
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] USER32.dll!mouse_event 7E3B673F 6 Bytes JMP 71AB000A
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] USER32.dll!keybd_event 7E3B6783 6 Bytes JMP 71A8000A
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ADVAPI32.dll!CreateServiceA 77E071E9 6 Bytes JMP 7196000A
.text D:\WINDOWS.NEW\system32\wscntfy.exe[196] ADVAPI32.dll!CreateServiceW 77E07381 6 Bytes JMP 7193000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtCreateFile 7C91D090 1 Byte [FF]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtCreateFile 7C91D090 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtCreateFile + 4 7C91D094 2 Bytes [86, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtDeleteValueKey 7C91D250 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtDeleteValueKey + 4 7C91D254 2 Bytes [8C, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtOpenFile 7C91D580 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtOpenFile + 4 7C91D584 2 Bytes [83, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtOpenProcess 7C91D5E0 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtOpenProcess + 4 7C91D5E4 2 Bytes [89, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtSetContextThread 7C91DB90 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtSetContextThread + 4 7C91DB94 2 Bytes [7D, 71] {JGE 0x73}
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtSetInformationFile 7C91DC40 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtSetInformationFile + 4 7C91DC44 2 Bytes [80, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtSetValueKey 7C91DDB0 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[268] ntdll.dll!NtSetValueKey + 4 7C91DDB4 2 Bytes [8F, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[268] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 71AF0001
.text D:\WINDOWS.NEW\Explorer.EXE[268] kernel32.dll!CreateProcessInternalW 7C81979C 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[268] kernel32.dll!CreateProcessInternalW + 4 7C8197A0 2 Bytes [7A, 71] {JP 0x73}
.text D:\WINDOWS.NEW\Explorer.EXE[268] ADVAPI32.dll!CreateServiceA 77E071E9 6 Bytes JMP 7196000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] ADVAPI32.dll!CreateServiceW 77E07381 6 Bytes JMP 7193000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] USER32.dll!PostMessageW 7E368CCB 6 Bytes JMP 7199000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] USER32.dll!SendMessageW 7E37929A 6 Bytes JMP 719F000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] USER32.dll!PostMessageA 7E37AAFD 6 Bytes JMP 719C000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] USER32.dll!SendInput 7E37F140 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[268] USER32.dll!SendInput + 4 7E37F144 2 Bytes [A4, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[268] USER32.dll!SendMessageA 7E37F3C2 6 Bytes JMP 71A2000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] USER32.dll!mouse_event 7E3B673F 6 Bytes JMP 71AB000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] USER32.dll!keybd_event 7E3B6783 6 Bytes JMP 71A8000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] WS2_32.dll!WSALookupServiceBeginW 01B835EF 6 Bytes JMP 7164000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] WS2_32.dll!connect 01B84A07 6 Bytes JMP 716D000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] WS2_32.dll!listen 01B88CD3 6 Bytes JMP 7167000A
.text D:\WINDOWS.NEW\Explorer.EXE[268] WS2_32.dll!WSAConnect 01B90C81 6 Bytes JMP 716A000A
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtCreateFile 7C91D090 1 Byte [FF]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtCreateFile 7C91D090 3 Bytes [FF, 25, 1E]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtCreateFile + 4 7C91D094 2 Bytes [86, 71]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtDeleteValueKey 7C91D250 3 Bytes [FF, 25, 1E]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtDeleteValueKey + 4 7C91D254 2 Bytes [8C, 71]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtOpenFile 7C91D580 3 Bytes [FF, 25, 1E]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtOpenFile + 4 7C91D584 2 Bytes [83, 71]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtOpenProcess 7C91D5E0 3 Bytes [FF, 25, 1E]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtOpenProcess + 4 7C91D5E4 2 Bytes [89, 71]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtSetContextThread 7C91DB90 3 Bytes [FF, 25, 1E]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtSetContextThread + 4 7C91DB94 2 Bytes [7D, 71] {JGE 0x73}
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtSetInformationFile 7C91DC40 3 Bytes [FF, 25, 1E]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtSetInformationFile + 4 7C91DC44 2 Bytes [80, 71]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtSetValueKey 7C91DDB0 3 Bytes [FF, 25, 1E]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ntdll.dll!NtSetValueKey + 4 7C91DDB4 2 Bytes [8F, 71]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 71AF0001
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] kernel32.dll!CreateProcessInternalW 7C81979C 3 Bytes [FF, 25, 1E]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] kernel32.dll!CreateProcessInternalW + 4 7C8197A0 2 Bytes [7A, 71] {JP 0x73}
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] USER32.dll!PostMessageW 7E368CCB 6 Bytes JMP 7199000A
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] USER32.dll!SendMessageW 7E37929A 6 Bytes JMP 719F000A
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] USER32.dll!PostMessageA 7E37AAFD 6 Bytes JMP 719C000A
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] USER32.dll!SendInput 7E37F140 3 Bytes [FF, 25, 1E]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] USER32.dll!SendInput + 4 7E37F144 2 Bytes [A4, 71]
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] USER32.dll!SendMessageA 7E37F3C2 6 Bytes JMP 71A2000A
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] USER32.dll!mouse_event 7E3B673F 6 Bytes JMP 71AB000A
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] USER32.dll!keybd_event 7E3B6783 6 Bytes JMP 71A8000A
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ADVAPI32.dll!CreateServiceA 77E071E9 6 Bytes JMP 7196000A
.text D:\Dokumente und Einstellungen\Administrator.WINDOWSPC\Desktop\bt4ldpb2.exe[528] ADVAPI32.dll!CreateServiceW 77E07381 6 Bytes JMP 7193000A
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtCreateFile 7C91D090 1 Byte [FF]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtCreateFile 7C91D090 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtCreateFile + 4 7C91D094 2 Bytes [86, 71]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtDeleteValueKey 7C91D250 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtDeleteValueKey + 4 7C91D254 2 Bytes [8C, 71]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtOpenFile 7C91D580 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtOpenFile + 4 7C91D584 2 Bytes [83, 71]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtOpenProcess 7C91D5E0 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtOpenProcess + 4 7C91D5E4 2 Bytes [89, 71]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtSetContextThread 7C91DB90 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtSetContextThread + 4 7C91DB94 2 Bytes [7D, 71] {JGE 0x73}
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtSetInformationFile 7C91DC40 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtSetInformationFile + 4 7C91DC44 2 Bytes [80, 71]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtSetValueKey 7C91DDB0 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ntdll.dll!NtSetValueKey + 4 7C91DDB4 2 Bytes [8F, 71]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 71AF0001
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] kernel32.dll!CreateProcessInternalW 7C81979C 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] kernel32.dll!CreateProcessInternalW + 4 7C8197A0 2 Bytes [7A, 71] {JP 0x73}
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ADVAPI32.dll!CreateServiceA 77E071E9 6 Bytes JMP 7196000A
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] ADVAPI32.dll!CreateServiceW 77E07381 6 Bytes JMP 7193000A
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] USER32.dll!PostMessageW 7E368CCB 6 Bytes JMP 7199000A
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] USER32.dll!SendMessageW 7E37929A 6 Bytes JMP 719F000A
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] USER32.dll!PostMessageA 7E37AAFD 6 Bytes JMP 719C000A
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] USER32.dll!SendInput 7E37F140 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] USER32.dll!SendInput + 4 7E37F144 2 Bytes [A4, 71]
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] USER32.dll!SendMessageA 7E37F3C2 6 Bytes JMP 71A2000A
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] USER32.dll!mouse_event 7E3B673F 6 Bytes JMP 71AB000A
.text D:\WINDOWS.NEW\system32\tp4mon.exe[612] USER32.dll!keybd_event 7E3B6783 6 Bytes JMP 71A8000A
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtCreateFile 7C91D090 1 Byte [FF]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtCreateFile 7C91D090 3 Bytes [FF, 25, 1E]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtCreateFile + 4 7C91D094 2 Bytes [86, 71]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtDeleteValueKey 7C91D250 3 Bytes [FF, 25, 1E]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtDeleteValueKey + 4 7C91D254 2 Bytes [8C, 71]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtOpenFile 7C91D580 3 Bytes [FF, 25, 1E]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtOpenFile + 4 7C91D584 2 Bytes [83, 71]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtOpenProcess 7C91D5E0 3 Bytes [FF, 25, 1E]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtOpenProcess + 4 7C91D5E4 2 Bytes [89, 71]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtSetContextThread 7C91DB90 3 Bytes [FF, 25, 1E]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtSetContextThread + 4 7C91DB94 2 Bytes [7D, 71] {JGE 0x73}
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtSetInformationFile 7C91DC40 3 Bytes [FF, 25, 1E]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtSetInformationFile + 4 7C91DC44 2 Bytes [80, 71]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtSetValueKey 7C91DDB0 3 Bytes [FF, 25, 1E]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ntdll.dll!NtSetValueKey + 4 7C91DDB4 2 Bytes [8F, 71]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 71AF0001
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] kernel32.dll!CreateProcessInternalW 7C81979C 3 Bytes [FF, 25, 1E]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] kernel32.dll!CreateProcessInternalW + 4 7C8197A0 2 Bytes [7A, 71] {JP 0x73}
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ADVAPI32.dll!CreateServiceA 77E071E9 6 Bytes JMP 7196000A
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] ADVAPI32.dll!CreateServiceW 77E07381 6 Bytes JMP 7193000A
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] USER32.dll!PostMessageW 7E368CCB 6 Bytes JMP 7199000A
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] USER32.dll!SendMessageW 7E37929A 6 Bytes JMP 719F000A
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] USER32.dll!PostMessageA 7E37AAFD 6 Bytes JMP 719C000A
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] USER32.dll!SendInput 7E37F140 3 Bytes [FF, 25, 1E]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] USER32.dll!SendInput + 4 7E37F144 2 Bytes [A4, 71]
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] USER32.dll!SendMessageA 7E37F3C2 6 Bytes JMP 71A2000A
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] USER32.dll!mouse_event 7E3B673F 6 Bytes JMP 71AB000A
.text D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe[664] USER32.dll!keybd_event 7E3B6783 6 Bytes JMP 71A8000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtCreateFile 7C91D090 1 Byte [FF]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtCreateFile 7C91D090 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtCreateFile + 4 7C91D094 2 Bytes [73, 71] {JAE 0x73}
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtDeleteValueKey 7C91D250 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtDeleteValueKey + 4 7C91D254 2 Bytes [79, 71] {JNS 0x73}
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtOpenFile 7C91D580 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtOpenFile + 4 7C91D584 2 Bytes [70, 71] {JO 0x73}
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtOpenProcess 7C91D5E0 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtOpenProcess + 4 7C91D5E4 2 Bytes [76, 71] {JBE 0x73}
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtSetContextThread 7C91DB90 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtSetContextThread + 4 7C91DB94 2 Bytes [6A, 71] {PUSH 0x71}
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtSetInformationFile 7C91DC40 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtSetInformationFile + 4 7C91DC44 2 Bytes [6D, 71]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtSetValueKey 7C91DDB0 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ntdll.dll!NtSetValueKey + 4 7C91DDB4 2 Bytes [7C, 71] {JL 0x73}
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 71AF0001
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] kernel32.dll!CreateProcessInternalW 7C81979C 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] kernel32.dll!CreateProcessInternalW + 4 7C8197A0 2 Bytes [67, 71]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] USER32.dll!PostMessageW 7E368CCB 6 Bytes JMP 7189000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] USER32.dll!SendMessageW 7E37929A 6 Bytes JMP 718F000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] USER32.dll!PostMessageA 7E37AAFD 6 Bytes JMP 718C000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] USER32.dll!SendInput 7E37F140 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] USER32.dll!SendInput + 4 7E37F144 2 Bytes [94, 71]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] USER32.dll!SendMessageA 7E37F3C2 6 Bytes JMP 7192000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] USER32.dll!mouse_event 7E3B673F 6 Bytes JMP 719B000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] USER32.dll!keybd_event 7E3B6783 6 Bytes JMP 7198000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ADVAPI32.dll!CreateServiceA 77E071E9 6 Bytes JMP 7183000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] ADVAPI32.dll!CreateServiceW 77E07381 6 Bytes JMP 7180000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] WS2_32.dll!WSALookupServiceBeginW 71A135EF 6 Bytes JMP 719E000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] WS2_32.dll!connect 71A14A07 6 Bytes JMP 71AB000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] WS2_32.dll!listen 71A18CD3 6 Bytes JMP 71A5000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe[864] WS2_32.dll!WSAConnect 71A20C81 6 Bytes JMP 71A8000A
.text D:\Programme\Emsisoft Anti-Malware\a2service.exe[1220] kernel32.dll!ReadFile + 211 7C801A23 7 Bytes JMP 061881B4 D:\Programme\Emsisoft Anti-Malware\a2update.dll (Updater Module/Emsisoft GmbH)
.text D:\Programme\Emsisoft Anti-Malware\a2service.exe[1220] kernel32.dll!ExitThread 7C80C0E8 7 Bytes JMP 004F97FC D:\Programme\Emsisoft Anti-Malware\a2service.exe (Emsisoft Protection Service/Emsisoft GmbH)
.text D:\Programme\Emsisoft Anti-Malware\a2service.exe[1220] kernel32.dll!CreateRemoteThread + 206 7C8106C2 7 Bytes JMP 061D866C D:\Programme\Emsisoft Anti-Malware\a2update.dll (Updater Module/Emsisoft GmbH)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtCreateFile 7C91D090 1 Byte [FF]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtCreateFile 7C91D090 3 Bytes [FF, 25, 1E]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtCreateFile + 4 7C91D094 2 Bytes [86, 71]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtDeleteValueKey 7C91D250 3 Bytes [FF, 25, 1E]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtDeleteValueKey + 4 7C91D254 2 Bytes [8C, 71]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtFlushBuffersFile 7C91D310 5 Bytes JMP 0139F0A2 D:\Programme\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtOpenFile 7C91D580 3 Bytes [FF, 25, 1E]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtOpenFile + 4 7C91D584 2 Bytes [83, 71]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtOpenProcess 7C91D5E0 3 Bytes [FF, 25, 1E]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtOpenProcess + 4 7C91D5E4 2 Bytes [89, 71]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtQueryFullAttributesFile 7C91D790 5 Bytes JMP 0139F157 D:\Programme\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtReadFile 7C91D9B0 5 Bytes JMP 0139F2DF D:\Programme\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtReadFileScatter 7C91D9C0 5 Bytes JMP 01829BC8 D:\Programme\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtSetContextThread 7C91DB90 3 Bytes [FF, 25, 1E]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtSetContextThread + 4 7C91DB94 2 Bytes [7D, 71] {JGE 0x73}
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtSetInformationFile 7C91DC40 3 Bytes [FF, 25, 1E]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtSetInformationFile + 4 7C91DC44 2 Bytes [80, 71]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtSetValueKey 7C91DDB0 3 Bytes [FF, 25, 1E]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtSetValueKey + 4 7C91DDB4 2 Bytes [8F, 71]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtWriteFile 7C91DF60 5 Bytes JMP 0139F53E D:\Programme\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!NtWriteFileGather 7C91DF70 5 Bytes JMP 01829C18 D:\Programme\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ntdll.dll!LdrLoadDll 7C9263A3 5 Bytes JMP 009998D2 D:\Programme\Mozilla Firefox\mozglue.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 71AF0001
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] kernel32.dll!lstrlenW + 43 7C809ADC 1 Byte [E9]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] kernel32.dll!lstrlenW + 43 7C809ADC 7 Bytes JMP 01816171 D:\Programme\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] kernel32.dll!MapViewOfFileEx + 6A 7C80B990 7 Bytes JMP 01814446 D:\Programme\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] kernel32.dll!CreateProcessInternalW 7C81979C 3 Bytes [FF, 25, 1E]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] kernel32.dll!CreateProcessInternalW + 4 7C8197A0 2 Bytes [7A, 71] {JP 0x73}
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] kernel32.dll!ValidateLocale + B1E8 7C8449F8 7 Bytes JMP 015BEECB D:\Programme\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] USER32.dll!PostMessageW 7E368CCB 6 Bytes JMP 7199000A
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] USER32.dll!SendMessageW 7E37929A 6 Bytes JMP 719F000A
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] USER32.dll!PostMessageA 7E37AAFD 6 Bytes JMP 719C000A
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] USER32.dll!GetWindowInfo 7E37C49C 5 Bytes JMP 0232A419 D:\Programme\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] USER32.dll!SendInput 7E37F140 3 Bytes [FF, 25, 1E]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] USER32.dll!SendInput + 4 7E37F144 2 Bytes [A4, 71]
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] USER32.dll!SendMessageA 7E37F3C2 6 Bytes JMP 71A2000A
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] USER32.dll!mouse_event 7E3B673F 6 Bytes JMP 71AB000A
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] USER32.dll!keybd_event 7E3B6783 6 Bytes JMP 71A8000A
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] GDI32.dll!SetDIBitsToDevice + 209 77EF9E04 7 Bytes JMP 018129F1 D:\Programme\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ADVAPI32.dll!CreateServiceA 77E071E9 6 Bytes JMP 7196000A
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] ADVAPI32.dll!CreateServiceW 77E07381 6 Bytes JMP 7193000A
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] WS2_32.dll!WSALookupServiceBeginW 00B435EF 6 Bytes JMP 716F000A
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] WS2_32.dll!connect 00B44A07 6 Bytes JMP 7178000A
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] WS2_32.dll!listen 00B48CD3 6 Bytes JMP 7172000A
.text D:\Programme\Mozilla Firefox\firefox.exe[1388] WS2_32.dll!WSAConnect 00B50C81 6 Bytes JMP 7175000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtCreateFile 7C91D090 1 Byte [FF]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtCreateFile 7C91D090 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtCreateFile + 4 7C91D094 2 Bytes [6E, 71]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtDeleteValueKey 7C91D250 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtDeleteValueKey + 4 7C91D254 2 Bytes [74, 71] {JZ 0x73}
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtOpenFile 7C91D580 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtOpenFile + 4 7C91D584 2 Bytes [6B, 71]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtOpenProcess 7C91D5E0 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtOpenProcess + 4 7C91D5E4 2 Bytes [71, 71] {JNO 0x73}
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtSetContextThread 7C91DB90 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtSetContextThread + 4 7C91DB94 2 Bytes [65, 71]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtSetInformationFile 7C91DC40 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtSetInformationFile + 4 7C91DC44 2 Bytes [68, 71]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtSetValueKey 7C91DDB0 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ntdll.dll!NtSetValueKey + 4 7C91DDB4 2 Bytes [77, 71] {JA 0x73}
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 71AF0001
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] kernel32.dll!CreateProcessInternalW 7C81979C 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] kernel32.dll!CreateProcessInternalW + 4 7C8197A0 2 Bytes [62, 71]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ADVAPI32.dll!CreateServiceA 77E071E9 6 Bytes JMP 717E000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] ADVAPI32.dll!CreateServiceW 77E07381 6 Bytes JMP 717B000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] USER32.dll!PostMessageW 7E368CCB 6 Bytes JMP 7184000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] USER32.dll!SendMessageW 7E37929A 6 Bytes JMP 718A000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] USER32.dll!PostMessageA 7E37AAFD 6 Bytes JMP 7187000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] USER32.dll!SendInput 7E37F140 3 Bytes [FF, 25, 1E]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] USER32.dll!SendInput + 4 7E37F144 2 Bytes [8F, 71]
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] USER32.dll!SendMessageA 7E37F3C2 6 Bytes JMP 718D000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] USER32.dll!mouse_event 7E3B673F 6 Bytes JMP 7196000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] USER32.dll!keybd_event 7E3B6783 6 Bytes JMP 7193000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] WS2_32.dll!WSALookupServiceBeginW 71A135EF 6 Bytes JMP 7199000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] WS2_32.dll!connect 71A14A07 6 Bytes JMP 71A5000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] WS2_32.dll!listen 71A18CD3 6 Bytes JMP 719C000A
.text D:\Programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe[2944] WS2_32.dll!WSAConnect 71A20C81 6 Bytes JMP 719F000A
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtCreateFile 7C91D090 1 Byte [FF]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtCreateFile 7C91D090 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtCreateFile + 4 7C91D094 2 Bytes [86, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtDeleteValueKey 7C91D250 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtDeleteValueKey + 4 7C91D254 2 Bytes [8C, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtOpenFile 7C91D580 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtOpenFile + 4 7C91D584 2 Bytes [83, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtOpenProcess 7C91D5E0 3 Bytesbv [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtOpenProcess + 4 7C91D5E4 2 Bytes [89, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtSetContextThread 7C91DB90 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtSetContextThread + 4 7C91DB94 2 Bytes [7D, 71] {JGE 0x73}
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtSetInformationFile 7C91DC40 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtSetInformationFile + 4 7C91DC44 2 Bytes [80, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtSetValueKey 7C91DDB0 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ntdll.dll!NtSetValueKey + 4 7C91DDB4 2 Bytes [8F, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] kernel32.dll!LoadLibraryExW + C4 7C801BB9 4 Bytes CALL 71AF0001
.text D:\WINDOWS.NEW\Explorer.EXE[3616] kernel32.dll!CreateProcessInternalW 7C81979C 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] kernel32.dll!CreateProcessInternalW + 4 7C8197A0 2 Bytes [7A, 71] {JP 0x73}
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ADVAPI32.dll!CreateServiceA 77E071E9 6 Bytes JMP 7196000A
.text D:\WINDOWS.NEW\Explorer.EXE[3616] ADVAPI32.dll!CreateServiceW 77E07381 6 Bytes JMP 7193000A
.text D:\WINDOWS.NEW\Explorer.EXE[3616] USER32.dll!PostMessageW 7E368CCB 6 Bytes JMP 7199000A
.text D:\WINDOWS.NEW\Explorer.EXE[3616] USER32.dll!SendMessageW 7E37929A 6 Bytes JMP 719F000A
.text D:\WINDOWS.NEW\Explorer.EXE[3616] USER32.dll!PostMessageA 7E37AAFD 6 Bytes JMP 719C000A
.text D:\WINDOWS.NEW\Explorer.EXE[3616] USER32.dll!SendInput 7E37F140 3 Bytes [FF, 25, 1E]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] USER32.dll!SendInput + 4 7E37F144 2 Bytes [A4, 71]
.text D:\WINDOWS.NEW\Explorer.EXE[3616] USER32.dll!SendMessageA 7E37F3C2 6 Bytes JMP 71A2000A
.text D:\WINDOWS.NEW\Explorer.EXE[3616] USER32.dll!mouse_event 7E3B673F 6 Bytes JMP 71AB000A
.text D:\WINDOWS.NEW\Explorer.EXE[3616] USER32.dll!keybd_event 7E3B6783 6 Bytes JMP 71A8000A
---- User IAT/EAT - GMER 2.1 ----
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\Explorer.EXE [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\ole32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[268] @ D:\WINDOWS.NEW\system32\WS2HELP.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\Explorer.EXE [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\ole32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
IAT D:\WINDOWS.NEW\Explorer.EXE[3616] @ D:\WINDOWS.NEW\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [5CF07774] D:\WINDOWS.NEW\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
---- Devices - GMER 2.1 ----
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
---- EOF - GMER 2.1 ----
|
|
06.04.2015, 20:23
| #5 |
| /// the machine /// TB-Ausbilder | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) Log von Emsisoft bitte noch 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
06.04.2015, 20:53
| #6 |
| | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) Hi Schrauber, sorry....hat aufgrund der länge der logs und dem damit verbundenen splitting ein wenig länger gedauert :-) Emsi Log folgt sofort... Nr.1 Code:
ATTFilter Emsisoft Anti-Malware - Version 9.0
Letztes Update: N/A
Benutzerkonto: WINDOWSPC\Administrator
Scan-Einstellungen:
Scan Methode: Detail-Scan
Objekte: Rootkits, Speicher, Traces, C:\, D:\
PUPs-Erkennung: An
Archiv-Scan: An
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus
Scan-Beginn: 04.04.2015 15:42:01
Value: HKEY_USERS\S-1-5-21-1292428093-484763869-682003330-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR gefunden: Setting.DisableTaskMgr (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS gefunden: Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-1292428093-484763869-682003330-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS gefunden: Setting.DisableRegistryTools (A)
D:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\812BAA2C-1424067982-CB11-9CA6-8F3F309B25F9\runasu.exe gefunden: Trojan.Generic.12905642 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP55\A0042651.exe gefunden: Trojan.Generic.13051484 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP55\A0042689.exe gefunden: Trojan.Generic.13051484 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP55\A0042740.exe gefunden: Trojan.Generic.13051484 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP64\A0046612.exe gefunden: Trojan.Generic.13051484 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP64\A0046614.exe gefunden: Trojan.Generic.13051484 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP64\A0046669.exe gefunden: Trojan.Generic.13051484 (B)
Gescannt 120465
Gefunden 10
Scan-Ende: 04.04.2015 16:23:41
Scan-Zeit: 0:41:40
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP64\A0046669.exe Quarantäne Trojan.Generic.13051484 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP64\A0046614.exe Quarantäne Trojan.Generic.13051484 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP64\A0046612.exe Quarantäne Trojan.Generic.13051484 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP55\A0042740.exe Quarantäne Trojan.Generic.13051484 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP55\A0042689.exe Quarantäne Trojan.Generic.13051484 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP55\A0042651.exe Quarantäne Trojan.Generic.13051484 (B)
D:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\812BAA2C-1424067982-CB11-9CA6-8F3F309B25F9\runasu.exe Quarantäne Trojan.Generic.12905642 (B)
Value: HKEY_USERS\S-1-5-21-1292428093-484763869-682003330-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Quarantäne Setting.DisableRegistryTools (A)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Quarantäne Setting.DisableRegistryTools (A)
Value: HKEY_USERS\S-1-5-21-1292428093-484763869-682003330-500\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLETASKMGR Quarantäne Setting.DisableTaskMgr (A)
Quarantäne 10
Code:
ATTFilter Emsisoft Anti-Malware - Version 9.0
Letztes Update: 04.04.2015 16:34:19
Benutzerkonto: WINDOWSPC\Administrator
Scan-Einstellungen:
Scan Methode: Detail-Scan
Objekte: Rootkits, Speicher, Traces, C:\, D:\
PUPs-Erkennung: An
Archiv-Scan: An
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus
Scan-Beginn: 04.04.2015 16:34:46
D:\Programme\msrtn32\cdhtr.exe gefunden: Trojan.GenericKD.2269178 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP54\A0041299.exe gefunden: Trojan.Generic.13097671 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP71\A0052610.exe gefunden: Trojan.Generic.12905642 (B)
Gescannt 120499
Gefunden 3
Scan-Ende: 04.04.2015 17:25:50
Scan-Zeit: 0:51:04
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP71\A0052610.exe Quarantäne Trojan.Generic.12905642 (B)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP54\A0041299.exe Quarantäne Trojan.Generic.13097671 (B)
D:\Programme\msrtn32\cdhtr.exe Quarantäne Trojan.GenericKD.2269178 (B)
Quarantäne 3
Code:
ATTFilter Emsisoft Anti-Malware - Version 9.0
Letztes Update: 06.04.2015 02:01:24
Benutzerkonto: WINDOWSPC\Administrator
Scan-Einstellungen:
Scan Methode: Detail-Scan
Objekte: Rootkits, Speicher, Traces, C:\, D:\
PUPs-Erkennung: An
Archiv-Scan: An
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus
Scan-Beginn: 06.04.2015 12:35:49
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS gefunden: Setting.DisableRegistryTools (A)
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP75\A0052707.exe gefunden: Trojan.GenericKD.2269178 (B)
Gescannt 120618
Gefunden 2
Scan-Ende: 06.04.2015 13:19:04
Scan-Zeit: 0:43:15
D:\System Volume Information\_restore{E7A34D74-45F3-4B0C-BBBA-E2F0C97233E1}\RP75\A0052707.exe Quarantäne Trojan.GenericKD.2269178 (B)
Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS Quarantäne Setting.DisableRegistryTools (A)
Quarantäne 2
sorry für das posten ohne codierung....wiegesagt, aufgrund der länge hat´s mich ein wenig aus dem konzept geworfen ;-) |
|
07.04.2015, 12:49
| #7 |
| /// the machine /// TB-Ausbilder | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) Warum noch Windows XP?? Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.04.2015, 03:16
| #8 |
| | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) Nabend Schrauber, hier erstmal das combofix logfile Code:
ATTFilter ComboFix 15-04-01.01 - Besitzer 07.04.2015 23:37:25.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.49.1031.18.2038.1546 [GMT 2:00]
ausgeführt von:: d:\dokumente und einstellungen\Besitzer\Desktop\ComboFix.exe
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((( Dateien erstellt von 2015-03-07 bis 2015-04-07 ))))))))))))))))))))))))))))))
.
.
2015-04-06 23:58 . 2015-04-07 01:51 -------- d-----w- d:\programme\Google
2015-04-06 23:58 . 2015-04-07 00:12 -------- d-----w- d:\dokumente und einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\Google
2015-04-06 23:58 . 2015-04-07 00:09 6103040 ----a-w- d:\programme\GUT54E.tmp
2015-04-06 23:58 . 2015-04-06 23:58 -------- d-----w- d:\programme\GUM54D.tmp
2015-04-06 18:07 . 2015-04-07 01:18 -------- d-----w- d:\programme\ALDITALKVerbindungsassistent
2015-04-06 12:43 . 2015-04-06 12:43 -------- d-----w- D:\Neuer Ordner
2015-04-05 08:06 . 2015-04-05 23:25 -------- d-----w- d:\programme\IPVanish
2015-04-04 14:52 . 2015-04-04 14:52 -------- d-----w- d:\programme\VS Revo Group
2015-04-02 00:27 . 2015-04-02 00:27 -------- d-----w- D:\RegBackup
2015-04-01 02:28 . 2015-04-06 22:17 -------- d-----w- d:\dokumente und einstellungen\Administrator.WINDOWSPC\Lokale Einstellungen\Anwendungsdaten\IPVanish
2015-04-01 01:47 . 2015-04-01 01:47 -------- d-----w- D:\6a9023bc2b1bc7cac61397
2015-03-31 20:10 . 2015-04-07 21:28 -------- d-----w- d:\programme\Emsisoft Anti-Malware
2015-03-30 22:24 . 2015-04-02 02:22 -------- d-----w- D:\AdwCleaner
2015-03-30 22:07 . 2015-04-06 18:36 -------- d-----w- D:\FRST
2015-03-30 15:29 . 2015-04-07 01:05 -------- d-----w- d:\dokumente und einstellungen\Administrator.WINDOWSPC\Anwendungsdaten\ALDITALKVerbindungsassistent
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2004-11-11 . 09EB23A4567BDD56D9580A059E616E23 . 359040 . . [5.1.2600.2505] . . d:\windows.0\system32\drivers\tcpip.sys
.
[-] 2004-11-11 . DB37D307003055ED09711CB3417814C7 . 507392 . . [5.1.2600.2180] . . d:\windows.0\system32\winlogon.exe
.
.
d:\windows.0\System32\ksuser.dll ... Fehlt !!
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TrackPointSrv"="tp4mon.exe" [2004-08-03 82432]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="d:\windows.0\system32\CTFMON.EXE" [2004-11-11 15360]
.
d:\dokumente und einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Autostart\
Launcher.lnk - d:\programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe [2015-4-6 510520]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Programme\\Mozilla Firefox\\firefox.exe"=
"d:\\Programme\\Google\\Chrome\\Application\\chrome.exe"=
.
R2 ALDITALKVerbindungsassistent_Service;ALDITALKVerbindungsassistent_Service;d:\programme\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [06.04.2015 20:08 358968]
S3 avmeject;AVM Eject;d:\windows.0\system32\drivers\avmeject.sys [30.03.2015 16:11 4352]
S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;d:\windows.0\system32\drivers\ew_hwusbdev.sys [07.04.2015 03:14 102784]
S3 ewusbnet;HUAWEI USB-NDIS miniport;d:\windows.0\system32\drivers\ewusbnet.sys [07.04.2015 03:14 117504]
S3 fwlanusb5;FRITZ!WLAN N v2;d:\windows.0\system32\drivers\fwlanusb5.sys [30.03.2015 16:11 1244160]
S3 HSPADataCardusbmdm;HSPADataCard Proprietary USB Driver;d:\windows.0\system32\DRIVERS\HSPADataCardusbmdm.sys --> d:\windows.0\system32\DRIVERS\HSPADataCardusbmdm.sys [?]
S3 HSPADataCardusbnmea;HSPADataCard NMEA Port;d:\windows.0\system32\DRIVERS\HSPADataCardusbnmea.sys --> d:\windows.0\system32\DRIVERS\HSPADataCardusbnmea.sys [?]
S3 HSPADataCardusbser;HSPADataCard Diagnostic Port;d:\windows.0\system32\DRIVERS\HSPADataCardusbser.sys --> d:\windows.0\system32\DRIVERS\HSPADataCardusbser.sys [?]
S3 massfilter;Mass Storage Filter Driver;d:\windows.0\system32\drivers\massfilter.sys --> d:\windows.0\system32\drivers\massfilter.sys [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-04-07 02:05 1061704 ----a-w- d:\programme\Google\Chrome\Application\41.0.2272.118\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-04-07 d:\windows.0\Tasks\GoogleUpdateTaskMachineCore.job
- d:\programme\Google\Update\GoogleUpdate.exe [2015-04-07 01:50]
.
2015-04-07 d:\windows.0\Tasks\GoogleUpdateTaskMachineUA.job
- d:\programme\Google\Update\GoogleUpdate.exe [2015-04-07 01:50]
.
.
------- Zusätzlicher Suchlauf -------
.
FF - ProfilePath - d:\dokumente und einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\7syp43ya.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2015-04-07 23:41
Windows 5.1.2600 Service Pack 2 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(444)
d:\windows.0\system32\sfc_os.dll
.
Zeit der Fertigstellung: 2015-04-07 23:42:37
ComboFix-quarantined-files.txt 2015-04-07 21:42
ComboFix2.txt 2015-04-04 15:41
ComboFix3.txt 2015-04-04 13:24
ComboFix4.txt 2015-04-01 02:25
ComboFix5.txt 2015-04-07 21:35
.
Vor Suchlauf: 14 Verzeichnis(se), 11.494.301.696 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 11.574.837.248 Bytes frei
.
- - End Of File - - 4360CE74147265DCAEF6FF4471638CBC
72B8CE41AF0DE751C946802B3ED844B4
Naja, Ich sag einfach mal aus Mangel an Alternativen ... ?! Hättest du evtl ein gutes (vlt kostenloses) OS das du nach der bereinigung empfehlen koenntest? Hatte evtl an Linux gedacht ... wäre aber für Vorschläge offen ;-) Meine XP Proffessional Version lässt mich übrigens seid gestern abend nicht mehr auf trojaner-board.de  Eigentlich läuft das i-net auf der Proff. Variante sogut wie gar nicht mehr... (combofix und diese aktuelle online sitzung von der Ich schreibe laufen jetzt auf einer paralellen xp home variante Die WinSoftware hab Ich von nem bekannten per CD bekommen ... da ist u.a auch noch linux drauf (nur als erklärung , evtl verstehst du dann besser was ich mit Proffessional Version und home variante meine... ^^) Mir sind ausserdem seit ca 3 Tagen erhebliche Probleme mit den Netzwerkverbindungen (eigenständiges Schliessen , frage nach "Problembericht senden" etc...) aufgefallen... gruss, stupiduser ps. gibt es eigentlich eine Möglichkeit die KOMPLETTE Festplsatte zu löschen ? Ich meine hiermit dass ALLES aber auch wirklich ALLES (inkl Viren Malware und haste nicht gesehen...) gelöscht ist? Hintergrund der Frage ist der dass auf dem PC nichts wirklich wichtiges gespeichert ist... das habe Ich soweit alles auf USB. Wenn Ich jetzt den USB checken koennte und die Festplatte absolut sicher löschen könnte , dann würde Ich einfach im Anschluss Linux oder erneut xp aufspielen und wäre glücklich    was meinst du ? wär das´n Plan ? Hey Schrauber, ...nach endloslangem rumgezicke hat mein laptop es nun doch geschafft mich dazu zu bringen ihn komplett platt zumachen (wobei das aber auch mehr oder weniger ungewollt während dem versuch linux zu installieren passiert ist) anschliessend hab ich jetzt wieder xp home aufgespielt . Jetzt zuu den programmen die danach folgten: Aldi talk (über stick installations software) -Update Aldi (nach aufforderung) Firefox (von filepony) Adblocker Soweit sollte doch erstmal noch alles passen , oder ? Kannst du vielleicht trotzdem nochmal einen Blick drüber werfen ? Welches Programm ist denn für einen generellen check am besten geeignet bzw welchen log magst du haben ? Was denkst du ? Sollt Ich mir wieder emsisoft holen oder gibt es hier was besseres (zur not auch preisgünstig kostenpflichtig) gruss Stupid |
|
08.04.2015, 15:42
| #9 |
| /// the machine /// TB-Ausbilder | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) Sorry, aber da passt nix, weil das Grundgerüst nit passt: XP Du darfst auf der Kiste keine Passwörter benutzen, keine Geldgeschäfte machen, nix. Am Besten einfach das LAN Kabel ziehen, solange bis irgendwas Linux-mäßiges oder Vista aufwärts drauf ist
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
08.04.2015, 20:32
| #10 |
| | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) Servus Schrauber, ..... somit haetten wir dann Linux Mint 17.1 XFCE installiert . Das ganze stammt aus der aktuellen Linux Welt 3/2015 Ich hoff jetzt sollt vorerst erstmal das groebste geschafft sein oder ? Viren/Malwaretechnisch mein Ich, also das nichts mehr zurueckgeblieben ist ... gibts da irgendeine moeglichkeit das zu pruefen? Ausserdem verunsichert mich dein letzter post ein wenig... was waere denn wenn ich mit bereits infiziertem system zb mein online banking geoeffnet haette ...natuerlich inkl passworteingabe etc ? Sollte ich lieber kontakt zu meiner bank aufnehmen??  Danke schonmal und Gruss stupid |
|
09.04.2015, 12:07
| #11 |
| /// the machine /// TB-Ausbilder | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) Da brauchste nix zu prüfen. Beim Formatieren bleibt nix über, und selbst wenn, der Kram läuft nicht unter Linux Was Banking angeht: Alle Passwörter erneuern, auch Banking. Wenn da aber was passiert wäre hättest du es schon bemerkt
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
09.04.2015, 21:52
| #12 |
| | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) Hey Schrauber, sehr schoen , das klingt doch schonmal gut Fuehl mich jetzt schon um einiges besser hab da aber trotzdem nochń klitze kleines Problem  mein laptop zeigt mir jetzt beim booten immernoch eine (alte?) windows installation zum laden (habś dann vorhin mal versucht weil ich die irgendwie löschen wollte, bekomm dann aber nach ca einer minute eine fehlermeldung... )Gibt es eine Möglichkeit die windreck installation endgültig zu entfernen ? Ich haett gerne das nur noch linux auf der festplatte ist ... sonst nichts ^^ Ich werd in der zwischenzeit mal anfangen die passwörter upzudaten gruss stupid |
|
10.04.2015, 15:27
| #13 |
| /// the machine /// TB-Ausbilder | Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) Das fragste besser im Linux-Bereich unseres Forums
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Trojan.GenericKD.2269178 (B) + Trojan.Generic.13051484 (B) + Trojan.Generic.12905642 (B) |
| besitzer, diverser, dllhost.exe, einfach, falsch, immer wieder, infiziert, laptop, logfiles, mehreren, profi, quara, quarantäne, scan, schadsoftware, tauchen, troja, trojan.generic., trojaner |
Linear-Darstellung
