Firefox, Google, Ebay, MySpace

Logfile of random's system information tool 1.06 (written by random/random)
Run by ICH at 2009-04-19 17:57:13
Microsoft Windows XP Professional Service Pack 2
System drive C: has 13 GB (63%) free of 20 GB
Total RAM: 1024 MB (53% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:57:18, on 19.04.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Canon\CAL\CALMAIN.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Programme\VIA\VIAudioi\SBADeck\ADeck.exe
C:\WINDOWS\system32\wscntfy.exe
C:\ADVANC~1\wh_exec.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe
C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexStoreSvr.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\explorer.exe
D:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\ICH\Desktop\RSIT.exe
D:\Programme\HiJackThis\ICH.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [AudioDeck] C:\Programme\VIA\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [WheelMouse] C:\ADVANC~1\wh_exec.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Programme\Adobe Reader\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] D:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O20 - Winlogon Notify: !SASWinLogon - D:\Programme\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Programme\Canon\CAL\CALMAIN.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe

--
End of file - 4862 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-08-29 61440]
"avgnt"=C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
"AudioDeck"=C:\Programme\VIA\VIAudioi\SBADeck\ADeck.exe [2009-03-09 528384]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2003-08-05 57344]
"NeroFilterCheck"=C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"QuickTime Task"=C:\Programme\QuickTime\QTTask.exe [2009-01-05 413696]
"WheelMouse"=C:\ADVANC~1\wh_exec.exe [2007-11-10 98304]
"Adobe Photo Downloader"=C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe [2007-03-15 57344]
"Adobe Reader Speed Launcher"=D:\Programme\Adobe Reader\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe [2007-06-01 153136]
"SUPERAntiSpyware"=D:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-03-23 1830128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
D:\Programme\SUPERAntiSpyware\SASWINLO.dll [2008-12-22 356352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-10-29 143360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=D:\Programme\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Programme\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe"="C:\Programme\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:*:Disabled:Sony Ericsson Media Manager 1.1"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2009-07-06 02:28:24 ----SH---- C:\boot.ini
2009-07-06 02:25:03 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-07-06 02:25:03 ----RSD---- C:\WINDOWS\Fonts
2009-07-06 02:25:03 ----RD---- C:\WINDOWS\Web
2009-07-06 02:25:03 ----HD---- C:\WINDOWS\inf
2009-07-06 02:25:03 ----D---- C:\WINDOWS\WinSxS
2009-07-06 02:25:03 ----D---- C:\WINDOWS\twain_32
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\wins
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\wbem
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\usmt
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\spool
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\ShellExt
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\Setup
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\ras
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\oobe
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\npp
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\mui
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\inetsrv
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\IME
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\icsxml
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\ias
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\export
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\drivers
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\dhcp
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\config
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\3com_dmi
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\3076
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\2052
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\1054
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\1042
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\1041
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\1037
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\1033
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\1031
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\1028
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32\1025
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system32
2009-07-06 02:25:03 ----D---- C:\WINDOWS\system
2009-07-06 02:25:03 ----D---- C:\WINDOWS\security
2009-07-06 02:25:03 ----D---- C:\WINDOWS\Resources
2009-07-06 02:25:03 ----D---- C:\WINDOWS\repair
2009-07-06 02:25:03 ----D---- C:\WINDOWS\Provisioning
2009-07-06 02:25:03 ----D---- C:\WINDOWS\PeerNet
2009-07-06 02:25:03 ----D---- C:\WINDOWS\pchealth
2009-07-06 02:25:03 ----D---- C:\WINDOWS\mui
2009-07-06 02:25:03 ----D---- C:\WINDOWS\msapps
2009-07-06 02:25:03 ----D---- C:\WINDOWS\msagent
2009-07-06 02:25:03 ----D---- C:\WINDOWS\Media
2009-07-06 02:25:03 ----D---- C:\WINDOWS\java
2009-07-06 02:25:03 ----D---- C:\WINDOWS\ime
2009-07-06 02:25:03 ----D---- C:\WINDOWS\Help
2009-07-06 02:25:03 ----D---- C:\WINDOWS\ehome
2009-07-06 02:25:03 ----D---- C:\WINDOWS\Driver Cache
2009-07-06 02:25:03 ----D---- C:\WINDOWS\Debug
2009-07-06 02:25:03 ----D---- C:\WINDOWS\Cursors
2009-07-06 02:25:03 ----D---- C:\WINDOWS\Connection Wizard
2009-07-06 02:25:03 ----D---- C:\WINDOWS\Config
2009-07-06 02:25:03 ----D---- C:\WINDOWS\AppPatch
2009-07-06 02:25:03 ----D---- C:\WINDOWS\addins
2009-07-06 02:25:03 ----D---- C:\WINDOWS
2009-07-06 01:34:02 ----A---- C:\WINDOWS\system32\h323log.txt
2009-07-06 01:31:33 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2009-07-06 01:31:33 ----A---- C:\WINDOWS\system32\ati3duag.dll
2009-07-06 01:31:33 ----A---- C:\WINDOWS\system32\ati3d1ag.dll
2009-07-06 01:31:32 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2009-07-06 01:31:32 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2009-07-06 01:31:21 ----A---- C:\WINDOWS\system32\usbui.dll
2009-07-06 01:30:11 ----SHD---- C:\WINDOWS\Installer
2009-07-06 01:30:11 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-07-06 01:30:10 ----D---- C:\Programme\Gemeinsame Dateien\ODBC
2009-07-06 01:30:10 ----A---- C:\WINDOWS\ODBCINST.INI
2009-07-06 01:30:07 ----RD---- C:\Programme
2009-07-06 01:30:07 ----D---- C:\Programme\Gemeinsame Dateien\SpeechEngines
2009-07-06 01:30:07 ----D---- C:\Programme\Gemeinsame Dateien\Microsoft Shared
2009-07-06 01:30:07 ----D---- C:\Programme\Gemeinsame Dateien
2009-07-06 01:30:04 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-07-06 01:30:04 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-07-06 01:30:04 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-07-06 01:30:03 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-07-06 01:30:01 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-07-06 01:30:01 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-07-06 01:30:01 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-07-06 01:30:01 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-07-06 01:30:01 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-07-06 01:30:01 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-07-06 01:30:01 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-07-06 01:30:00 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-07-06 01:30:00 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-07-06 01:30:00 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-07-06 01:30:00 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-07-06 01:30:00 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-07-06 01:29:59 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-07-06 01:29:57 ----A---- C:\WINDOWS\system32\irclass.dll
2009-07-06 01:29:57 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-07-06 01:29:56 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-07-06 01:29:56 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-07-06 01:29:56 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-07-06 01:29:55 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-07-06 01:29:54 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-07-06 01:29:54 ----A---- C:\WINDOWS\system32\batt.dll
2009-07-06 01:29:54 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-07-06 01:29:53 ----A---- C:\WINDOWS\system32\storprop.dll
2009-07-06 01:29:45 ----ASH---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\desktop.ini
2009-07-06 01:29:42 ----RA---- C:\WINDOWS\SET8.tmp
2009-07-06 01:29:39 ----RA---- C:\WINDOWS\SET4.tmp
2009-07-06 01:29:38 ----RA---- C:\WINDOWS\SET3.tmp
2009-07-06 01:29:33 ----D---- C:\WINDOWS\system32\CatRoot2
2009-07-06 01:29:33 ----D---- C:\WINDOWS\system32\CatRoot
2009-07-06 01:29:27 ----SD---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft
2009-07-06 01:29:08 ----SHD---- C:\System Volume Information
2009-07-06 01:29:08 ----D---- C:\Dokumente und Einstellungen
2009-04-19 17:57:13 ----D---- C:\rsit
2009-04-19 17:51:21 ----SHD---- C:\RECYCLER
2009-04-19 16:30:58 ----D---- C:\WINDOWS\temp
2009-04-19 16:30:56 ----A---- C:\ComboFix.txt
2009-04-19 16:28:32 ----D---- C:\ComboFix
2009-04-19 14:05:49 ----A---- C:\WINDOWS\zip.exe
2009-04-19 14:05:49 ----A---- C:\WINDOWS\vFind.exe
2009-04-19 14:05:49 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-04-19 14:05:49 ----A---- C:\WINDOWS\SWSC.exe
2009-04-19 14:05:49 ----A---- C:\WINDOWS\SWREG.exe
2009-04-19 14:05:49 ----A---- C:\WINDOWS\sed.exe
2009-04-19 14:05:49 ----A---- C:\WINDOWS\NIRCMD.exe
2009-04-19 14:05:49 ----A---- C:\WINDOWS\grep.exe
2009-04-19 14:05:46 ----D---- C:\WINDOWS\ERDNT
2009-04-19 14:04:51 ----D---- C:\Qoobox
2009-04-19 13:02:21 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com
2009-04-19 13:02:16 ----D---- C:\Dokumente und Einstellungen\ICH\Anwendungsdaten\SUPERAntiSpyware.com
2009-04-19 13:01:08 ----D---- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard
2009-04-19 12:57:17 ----D---- C:\Dokumente und Einstellungen\ICH\Anwendungsdaten\Malwarebytes
2009-04-19 12:57:11 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2009-04-19 12:19:31 ----D---- C:\WINDOWS\LastGood
2009-04-19 11:22:38 ----D---- C:\WINDOWS\system32\appmgmt
2009-04-01 18:30:24 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LightScribe
2009-03-29 16:27:53 ----D---- C:\Dokumente und Einstellungen\ICH\Anwendungsdaten\Leadertech
2009-03-28 04:04:12 ----D---- C:\Dokumente und Einstellungen\ICH\Anwendungsdaten\Sony
2009-03-28 04:04:12 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sony
2009-03-28 02:08:07 ----A---- C:\WINDOWS\system32\TubeFinder.exe
2009-03-28 02:08:05 ----A---- C:\WINDOWS\system32\VB6STKIT.DLL
2009-03-28 02:08:05 ----A---- C:\WINDOWS\system32\VB6FR.DLL
2009-03-28 02:08:05 ----A---- C:\WINDOWS\system32\PCCLPFR.DLL
2009-03-28 02:08:05 ----A---- C:\WINDOWS\system32\MSCMCFR.DLL
2009-03-28 02:08:04 ----A---- C:\WINDOWS\system32\CMDLGFR.DLL
2009-03-28 01:00:28 ----D---- C:\Advanced Wheel Mouse
2009-03-28 00:47:00 ----D---- C:\Dokumente und Einstellungen\ICH\Anwendungsdaten\Help
2009-03-28 00:45:09 ----A---- C:\WINDOWS\gswin32.ini
2009-03-28 00:42:25 ----D---- C:\Programme\gs
2009-03-28 00:40:23 ----D---- C:\Programme\Ghostgum
2009-03-27 23:43:09 ----D---- C:\Programme\Sony
2009-03-27 23:42:36 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-03-27 23:42:32 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2009-03-27 23:42:05 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2009-03-27 23:41:41 ----D---- C:\WINDOWS\system32\LogFiles
2009-03-27 23:41:32 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-03-27 23:41:31 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2009-03-27 23:37:49 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ZoomBrowser
2009-03-27 23:37:36 ----D---- C:\Programme\Canon
2009-03-27 23:35:55 ----D---- C:\Programme\Gemeinsame Dateien\Canon
2009-03-27 23:33:49 ----D---- C:\Programme\Gemeinsame Dateien\Adobe
2009-03-27 23:33:49 ----D---- C:\Programme\Adobe
2009-03-27 23:33:49 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe
2009-03-27 23:30:48 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2009-03-27 23:28:04 ----D---- C:\Programme\Sony Ericsson
2009-03-27 23:28:04 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sony Ericsson
2009-03-27 23:27:38 ----D---- C:\Dokumente und Einstellungen\ICH\Anwendungsdaten\InstallShield
2009-03-27 22:39:35 ----A---- C:\WINDOWS\ODBC.INI
2009-03-27 22:39:20 ----A---- C:\WINDOWS\system32\mdimon.dll
2009-03-27 22:37:45 ----D---- C:\Programme\Gemeinsame Dateien\DESIGNER
2009-03-27 22:37:25 ----D---- C:\WINDOWS\SHELLNEW
2009-03-27 22:37:03 ----D---- C:\Programme\Microsoft.NET
2009-03-27 22:37:03 ----D---- C:\Programme\Microsoft Office
2009-03-23 20:46:10 ----D---- C:\Dokumente und Einstellungen\ICH\Anwendungsdaten\Apple Computer
2009-03-23 20:45:39 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}
2009-03-23 20:44:52 ----D---- C:\Programme\QuickTime
2009-03-23 20:44:51 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Apple Computer
2009-03-23 20:44:28 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-03-23 19:39:33 ----A---- C:\WINDOWS\NeroDigital.ini
2009-03-23 19:34:50 ----D---- C:\Programme\Gemeinsame Dateien\LightScribe
2009-03-23 19:32:48 ----D---- C:\Dokumente und Einstellungen\ICH\Anwendungsdaten\Ahead
2009-03-23 19:32:31 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ahead
2009-03-23 19:29:35 ----D---- C:\Programme\Nero
2009-03-23 19:29:35 ----D---- C:\Programme\Gemeinsame Dateien\Ahead
2009-03-23 19:29:35 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nero
2009-03-23 19:27:28 ----D---- C:\WINDOWS\RegisteredPackages
2009-03-23 19:22:25 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-03-23 19:22:23 ----A---- C:\WINDOWS\system32\d3dx9_28.dll