TR/Dropper.Gen gefunden - Wie löschen ?!?!?

Logfile of random's system information tool 1.06 (written by random/random)
Run by CoolTom at 2009-04-25 22:00:03
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 1 GB (12%) free of 10 GB
Total RAM: 1023 MB (58% free)



Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\programme\gemeinsame dateien\logishrd\lvmvfm\LVPrcSrv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\gearsec.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Programme\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\System32\StkASv2K.exe
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\Gemeinsame Dateien\Ahead\lib\NMBgMonitor.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\CoolTom\Desktop\RSIT.exe
C:\Programme\Trend Micro\HijackThis\CoolTom.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CloneCDTray] "C:\Programme\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\Programme\Stardock\WinCustomize\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programme\Gemeinsame Dateien\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [updateMgr] "C:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [RocketDock] "C:\Programme\RocketDock\RocketDock.exe"
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/german/partner/de/kavwebscan_unicode.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{58AD885B-011B-45C2-93A2-CC9C2FB66DD3}: NameServer = 192.168.2.1
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - D:\-=]GAMEZ[=-\Common\Database\bin\fbserver.exe
O23 - Service: gearsec - GEAR Software - C:\WINDOWS\system32\gearsec.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\programme\gemeinsame dateien\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Programme\Gemeinsame Dateien\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Syntek STK1160 Service (StkASSrv) - Syntek America Inc. - C:\WINDOWS\System32\StkASv2K.exe

--
End of file - 5447 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18 59032]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2009-03-09 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-09 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CTHelper"=C:\WINDOWS\system32\CTHELPER.EXE [2003-10-06 24576]
"CloneCDTray"=C:\Programme\SlySoft\CloneCD\CloneCDTray.exe [2005-05-19 57344]
"BootSkin Startup Jobs"=C:\Programme\Stardock\WinCustomize\BootSkin\BootSkin.exe [2004-04-26 270336]
"LogitechCommunicationsManager"=C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe [2007-02-08 488984]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-12-26 13680640]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-12-26 86016]
"avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"UDC Integration"= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Programme\Gemeinsame Dateien\Ahead\lib\NMBgMonitor.exe [2005-12-16 94208]
"updateMgr"=C:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472]
"RocketDock"=C:\Programme\RocketDock\RocketDock.exe [2007-09-02 495616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon]
C:\Programme\Logitech\QuickCam10\QuickCam10.exe [2007-02-08 774168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Programme\QuickTime\qttask.exe -atboottime []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr]
C:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe [2006-03-30 313472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Reader - Schnellstart.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2005-09-23 29696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=B1000000
"NoDriveAutorun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\ICQ\Icq.exe"="C:\Programme\ICQ\Icq.exe:*:Enabled:ICQ"
"C:\Programme\FlashFXP\flashfxp.exe"="C:\Programme\FlashFXP\flashfxp.exe:*:Enabled:flashfxp.exe"
"C:\Programme\Serv-U\ServUAdmin.exe"="C:\Programme\Serv-U\ServUAdmin.exe:*:Enabled:Serv-U Administrator"
"C:\Programme\SmartFTP\SmartFTP.exe"="C:\Programme\SmartFTP\SmartFTP.exe:*:Enabled:SmartFTP Client"
"C:\Programme\Nero\Nero 7\Nero ShowTime\ShowTime.exe"="C:\Programme\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Disabled:Nero ShowTime"
"D:\eMule0.46c\emule.exe"="D:\eMule0.46c\emule.exe:*:Enabled:eMule"
"C:\Programme\BPFTP Server\bpftpserver.exe"="C:\Programme\BPFTP Server\bpftpserver.exe:*:Enabled:BulletProof FTP Server (http://www.bpftpserver.com)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programme\Mozilla Firefox\firefox.exe"="C:\Programme\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"D:\Azureus\Azureus.exe"="D:\Azureus\Azureus.exe:*:Enabled:Azureus"
"D:\CryptLoad0.8second\RouterRecorder.exe"="D:\CryptLoad0.8second\RouterRecorder.exe:*:Enabled:RouterRecorder"
"E:\weihnachtskeks\PWKEKS_20\PWKEKS.exe"="E:\weihnachtskeks\PWKEKS_20\PWKEKS.exe:*:Disabled:PWKEKS"
"C:\WINDOWS\system32\ftp.exe"="C:\WINDOWS\system32\ftp.exe:*:Enabled:Programm zur Dateiübertragung"
"C:\WINDOWS\system32\java.exe"="C:\WINDOWS\system32\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Programme\Java\jre1.6.0_05\launch4j-tmp\JDownloader.exe"="C:\Programme\Java\jre1.6.0_05\launch4j-tmp\JDownloader.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Programme\Java\jre1.6.0_07\launch4j-tmp\JDownloader.exe"="C:\Programme\Java\jre1.6.0_07\launch4j-tmp\JDownloader.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Programme\Java\jre1.6.0_07\bin\javaw.exe"="C:\Programme\Java\jre1.6.0_07\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Programme\Java\jre1.6.0_07\bin\java.exe"="C:\Programme\Java\jre1.6.0_07\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Dokumente und Einstellungen\CoolTom\Lokale Einstellungen\Temp\IXP000.TMP\key.exe"="C:\Dokumente und Einstellungen\CoolTom\Lokale Einstellungen\Temp\IXP000.TMP\key.exe:*:Disabled:Host Order"
"C:\Programme\TVersity\Media Server\MediaServer.exe"="C:\Programme\TVersity\Media Server\MediaServer.exe:*:Enabled:TVersity Media Server"
"C:\Programme\Java\jre6\launch4j-tmp\JDownloader.exe"="C:\Programme\Java\jre6\launch4j-tmp\JDownloader.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Programme\Internet Explorer\iexplore.exe"="C:\Programme\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{c242bdb8-1e37-11db-9206-00508d5574ca}]
shell\AutoRun\command - J:\LaunchU3.exe


======File associations======

.js - open - "D:\_PORTA~1\DREAMW~2\Files\DREAMW~1.EXE","%1"

======List of files/folders created in the last 1 months======

2009-04-25 22:00:03 ----D---- C:\rsit
2009-04-25 20:13:55 ----D---- C:\WINDOWS\system32\NtmsData
2009-04-25 15:55:15 ----D---- C:\escan
2009-04-25 13:01:52 ----A---- C:\WINDOWS\system32\msvcp80.dll
2009-04-25 13:01:51 ----A---- C:\WINDOWS\system32\eEmpty.exe
2009-04-25 13:01:49 ----A---- C:\WINDOWS\system32\TASKMGR.COM
2009-04-25 13:01:49 ----A---- C:\WINDOWS\system32\T.COM
2009-04-25 13:01:49 ----A---- C:\WINDOWS\REGEDIT.COM
2009-04-25 13:01:49 ----A---- C:\WINDOWS\R.COM
2009-04-25 13:01:48 ----D---- C:\Programme\Gemeinsame Dateien\MicroWorld
2009-04-25 13:01:47 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MicroWorld
2009-04-25 12:04:14 ----D---- C:\WINDOWS\system32\Kaspersky Lab
2009-04-25 12:04:14 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Kaspersky Lab
2009-04-25 11:09:51 ----A---- C:\WINDOWS\system32\prnet.tmp
2009-04-24 20:32:57 ----A---- C:\WINDOWS\system32\udcpm.dll
2009-04-24 20:32:55 ----RD---- C:\UDC Output Files
2009-04-24 20:32:55 ----D---- C:\Programme\Universal Document Converter
2009-04-20 23:34:12 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-04-20 19:20:32 ----D---- C:\Programme\WBFS
2009-04-19 16:15:01 ----D---- C:\WINDOWS\SxsCaPendDel
2009-04-08 17:52:21 ----A---- C:\WINDOWS\RCoUn0.exe
2009-04-01 16:56:55 ----A---- C:\WINDOWS\system32\javaws.exe
2009-04-01 16:56:55 ----A---- C:\WINDOWS\system32\javaw.exe
2009-04-01 16:56:55 ----A---- C:\WINDOWS\system32\java.exe
2009-03-31 17:17:13 ----D---- C:\Programme\Symantec

======List of files/folders modified in the last 1 months======

2009-04-25 21:44:43 ----D---- C:\WINDOWS\Temp
2009-04-25 21:39:24 ----D---- C:\Programme\Mozilla Firefox
2009-04-25 21:39:05 ----D---- C:\WINDOWS\system32
2009-04-25 21:38:38 ----D---- C:\WINDOWS\system32\CatRoot2
2009-04-25 21:37:08 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-04-25 21:29:53 ----D---- C:\Programme\FreeCommander
2009-04-25 21:21:50 ----D---- C:\Programme\CCleaner
2009-04-25 21:19:34 ----RD---- C:\Programme
2009-04-25 21:18:51 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
2009-04-25 20:32:43 ----D---- C:\WINDOWS\system32\drivers
2009-04-25 16:18:07 ----D---- C:\WINDOWS\Prefetch
2009-04-25 16:18:05 ----D---- C:\Programme\Avira
2009-04-25 15:56:43 ----AD---- C:\WINDOWS
2009-04-25 15:56:01 ----SH---- C:\boot.ini
2009-04-25 15:56:01 ----A---- C:\WINDOWS\win.ini
2009-04-25 15:56:01 ----A---- C:\WINDOWS\system.ini
2009-04-25 13:01:48 ----D---- C:\Programme\Gemeinsame Dateien
2009-04-25 12:04:14 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-04-25 12:04:14 ----HD---- C:\WINDOWS\inf
2009-04-24 20:09:14 ----AC---- C:\WINDOWS\CITP_SearchHistory.INI
2009-04-24 20:09:04 ----AC---- C:\WINDOWS\SW_Win2000X24.DLL
2009-04-24 18:21:05 ----D---- C:\Dokumente und Einstellungen\CoolTom\Anwendungsdaten\Rominator Data
2009-04-23 19:15:32 ----D---- C:\Programme\MSD 0.65
2009-04-20 23:34:27 ----D---- C:\WINDOWS\system32\CatRoot
2009-04-20 23:34:19 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-04-20 19:53:11 ----D---- C:\Programme\Wiizle_Diizle_Shiizle_v1.3
2009-04-20 19:26:39 ----D---- C:\WINDOWS\system32\LogFiles
2009-04-20 19:22:25 ----D---- C:\Programme\R4 Commander V2.0
2009-04-20 19:22:08 ----SHD---- C:\WINDOWS\Installer
2009-04-19 19:26:38 ----D---- C:\temp
2009-04-19 16:55:28 ----D---- C:\WINDOWS\Microsoft.NET
2009-04-19 16:55:26 ----RSD---- C:\WINDOWS\assembly
2009-04-19 16:17:23 ----D---- C:\WINDOWS\WinSxS
2009-04-19 16:16:23 ----D---- C:\WINDOWS\system32\XPSViewer
2009-04-19 16:16:20 ----D---- C:\WINDOWS\system32\en-us
2009-04-19 16:16:16 ----RSD---- C:\WINDOWS\Fonts
2009-04-19 16:13:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-04-17 19:18:05 ----D---- C:\WINDOWS\Minidump
2009-04-17 19:18:05 ----D---- C:\WINDOWS\Debug
2009-04-17 16:41:49 ----D---- C:\WINDOWS\system32\wbem
2009-04-17 16:41:49 ----D---- C:\WINDOWS\AppPatch
2009-04-16 23:07:20 ----D---- C:\WINDOWS\system32\de-de
2009-04-16 23:07:20 ----D---- C:\Programme\Internet Explorer
2009-04-16 23:04:59 ----HD---- C:\WINDOWS\$hf_mig$
2009-04-14 21:01:40 ----A---- C:\WINDOWS\NeroDigital.ini
2009-04-13 17:14:12 ----HD---- C:\Programme\InstallShield Installation Information
2009-04-13 17:13:08 ----D---- C:\WINDOWS\Downloaded Installations
2009-04-08 17:57:52 ----D---- C:\RouterControl
2009-04-06 16:57:24 ----A---- C:\WINDOWS\system32\MRT.exe
2009-04-03 21:24:39 ----D---- C:\Programme\RSD0.52T5
2009-04-01 17:18:39 ----D---- C:\Programme\jdownloader
2009-04-01 16:56:54 ----D---- C:\Programme\Java
2009-03-31 17:15:13 ----D---- C:\WINDOWS\SoftwareDistribution

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======