TR/Crypt.ZPACK.Gen

Tsuji

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-09-11 15:12:55 ----D---- C:\rsit
2009-09-11 11:18:49 ----D---- C:\Users\***\AppData\Roaming\Malwarebytes
2009-09-11 11:18:44 ----D---- C:\ProgramData\Malwarebytes
2009-09-11 11:18:43 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-09-11 10:32:36 ----D---- C:\Program Files\CCleaner
2009-09-10 11:56:19 ----A---- C:\Windows\system32\LicProtectorEasyGo251.dll
2009-09-10 11:56:02 ----D---- C:\Program Files\Linguatec GmbH
2009-09-09 07:47:02 ----A---- C:\Windows\system32\jscript.dll
2009-09-09 07:46:32 ----A---- C:\Windows\system32\TCPSVCS.EXE
2009-09-09 07:46:32 ----A---- C:\Windows\system32\ROUTE.EXE
2009-09-09 07:46:32 ----A---- C:\Windows\system32\NETSTAT.EXE
2009-09-09 07:46:32 ----A---- C:\Windows\system32\netiohlp.dll
2009-09-09 07:46:32 ----A---- C:\Windows\system32\MRINFO.EXE
2009-09-09 07:46:32 ----A---- C:\Windows\system32\HOSTNAME.EXE
2009-09-09 07:46:32 ----A---- C:\Windows\system32\finger.exe
2009-09-09 07:46:32 ----A---- C:\Windows\system32\ARP.EXE
2009-09-09 07:46:31 ----A---- C:\Windows\system32\netevent.dll
2009-09-09 07:46:13 ----A---- C:\Windows\system32\wlansec.dll
2009-09-09 07:46:13 ----A---- C:\Windows\system32\wlanmsm.dll
2009-09-09 07:46:13 ----A---- C:\Windows\system32\L2SecHC.dll
2009-09-09 07:46:12 ----A---- C:\Windows\system32\wlansvc.dll
2009-09-09 07:46:10 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-09-09 07:46:10 ----A---- C:\Windows\system32\mf.dll
2009-09-03 18:20:11 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-09-03 18:20:11 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-08-27 19:38:05 ----A---- C:\Windows\system32\imageres.dll
2009-08-26 14:29:27 ----A---- C:\Windows\system32\tzres.dll
2009-08-14 23:30:22 ----D---- C:\Program Files\D-Link
2009-08-13 19:13:39 ----D---- C:\ProgramData\InstallShield
2009-08-12 20:57:44 ----D---- C:\Program Files\CamStudio
2009-08-12 16:11:16 ----A---- C:\Windows\system32\wdigest.dll
2009-08-12 16:11:16 ----A---- C:\Windows\system32\msv1_0.dll
2009-08-12 16:11:16 ----A---- C:\Windows\system32\lsasrv.dll
2009-08-12 16:11:16 ----A---- C:\Windows\system32\kerberos.dll
2009-08-12 16:11:15 ----A---- C:\Windows\system32\schannel.dll
2009-08-12 16:11:14 ----A---- C:\Windows\system32\secur32.dll
2009-08-12 16:11:14 ----A---- C:\Windows\system32\lsass.exe
2009-08-12 12:53:56 ----A---- C:\Windows\system32\atl.dll
2009-08-12 12:53:53 ----A---- C:\Windows\system32\wkssvc.dll
2009-08-12 12:53:52 ----A---- C:\Windows\system32\mstscax.dll
2009-08-12 12:53:49 ----A---- C:\Windows\system32\avifil32.dll
2009-08-12 12:53:45 ----A---- C:\Windows\system32\wmp.dll
2009-08-12 12:53:44 ----A---- C:\Windows\system32\wmpdxm.dll
2009-08-12 12:53:44 ----A---- C:\Windows\system32\spwmp.dll
2009-08-12 12:53:43 ----A---- C:\Windows\system32\wmploc.DLL
2009-08-12 12:53:43 ----A---- C:\Windows\system32\dxmasf.dll

======List of files/folders modified in the last 1 months======

2009-09-11 15:12:49 ----D---- C:\Windows\Temp
2009-09-11 14:53:32 ----D---- C:\Windows\Tasks
2009-09-11 14:53:32 ----D---- C:\Windows\system32\Tasks
2009-09-11 14:53:26 ----D---- C:\ProgramData\Google Updater
2009-09-11 13:45:08 ----D---- C:\Windows
2009-09-11 13:31:08 ----RD---- C:\Program Files
2009-09-11 11:19:37 ----D---- C:\Windows\system32\drivers
2009-09-11 11:18:44 ----HD---- C:\ProgramData
2009-09-11 10:37:53 ----D---- C:\Windows\Debug
2009-09-11 10:21:57 ----D---- C:\Windows\System32
2009-09-11 10:21:56 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-09-11 10:21:53 ----D---- C:\Windows\inf
2009-09-11 10:21:36 ----D---- C:\Program Files\Boris FX, Inc
2009-09-11 10:14:43 ----D---- C:\Program Files\Mozilla Firefox
2009-09-11 09:37:05 ----SHD---- C:\System Volume Information
2009-09-11 08:05:45 ----SHD---- C:\Windows\Installer
2009-09-11 08:02:02 ----RSD---- C:\Windows\assembly
2009-09-11 07:54:49 ----D---- C:\Windows\system32\WDI
2009-09-11 07:54:45 ----A---- C:\Windows\NeroDigital.ini
2009-09-10 21:24:01 ----D---- C:\Windows\Minidump
2009-09-10 21:23:49 ----SD---- C:\Windows\Downloaded Program Files
2009-09-10 19:48:53 ----D---- C:\Windows\rescache
2009-09-10 19:29:48 ----A---- C:\Windows\system32\acovcnt.exe
2009-09-10 19:29:22 ----D---- C:\Windows\system32\Msdtc
2009-09-10 19:29:18 ----D---- C:\Windows\system32\wbem
2009-09-10 19:28:30 ----D---- C:\Windows\system32\config
2009-09-10 19:28:20 ----D---- C:\Windows\system32\spool
2009-09-10 19:28:20 ----D---- C:\Windows\system32\catroot2
2009-09-10 19:28:19 ----D---- C:\Windows\registration
2009-09-10 19:28:19 ----D---- C:\ProgramData\P4G
2009-09-10 19:19:26 ----D---- C:\Windows\system32\LogFiles
2009-09-10 15:22:59 ----HD---- C:\Program Files\InstallShield Installation Information
2009-09-10 12:58:45 ----D---- C:\Windows\winsxs
2009-09-10 11:59:08 ----D---- C:\Program Files\Microsoft Silverlight
2009-09-10 11:58:03 ----D---- C:\Windows\system32\de-DE
2009-09-10 11:34:28 ----D---- C:\Windows\Prefetch
2009-09-10 11:34:18 ----D---- C:\Windows\system32\catroot
2009-09-10 11:34:12 ----D---- C:\Program Files\Windows Mail
2009-09-10 11:33:32 ----D---- C:\Windows\ehome
2009-09-09 23:51:47 ----D---- C:\Users\***\AppData\Roaming\BitTorrent
2009-09-08 23:49:46 ----D---- C:\Users\***\AppData\Roaming\Skype
2009-09-08 22:46:27 ----D---- C:\Users\***\AppData\Roaming\skypePM
2009-09-08 07:38:48 ----D---- C:\Program Files\Google
2009-09-08 07:35:55 ----D---- C:\ProgramData\Adobe
2009-09-08 07:34:59 ----D---- C:\Program Files\Common Files\Adobe
2009-09-08 07:34:52 ----D---- C:\Program Files\Adobe
2009-09-08 07:33:39 ----D---- C:\ProgramData\Google
2009-09-07 19:03:44 ----D---- C:\Users\***\AppData\Roaming\Adobe
2009-09-04 14:48:52 ----D---- C:\Users\***\AppData\Roaming\Audacity
2009-09-04 14:48:48 ----SHD---- C:\$RECYCLE.BIN
2009-09-04 01:38:16 ----D---- C:\Windows\AppPatch
2009-09-02 22:07:28 ----D---- C:\Users\***\AppData\Roaming\phonostar-Player
2009-08-28 23:38:20 ----A---- C:\Windows\system32\mrt.exe
2009-08-27 19:28:28 ----D---- C:\Program Files\Stardock
2009-08-26 14:28:48 ----D---- C:\Program Files\Internet Explorer
2009-08-15 20:20:17 ----D---- C:\Users\***\AppData\Roaming\teamspeak2
2009-08-14 23:44:22 ----D---- C:\Users\***\AppData\Roaming\Hamachi
2009-08-14 23:24:48 ----RSD---- C:\Windows\Fonts
2009-08-13 19:10:23 ----D---- C:\Program Files\Common Files\InstallShield
2009-08-13 09:19:53 ----D---- C:\Windows\Microsoft.NET
2009-08-12 21:46:07 ----D---- C:\ProgramData\NVIDIA
2009-08-12 21:41:31 ----D---- C:\Program Files\Windows Media Player
2009-08-12 21:22:29 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2009-08-12 21:22:11 ----D---- C:\Program Files\DVDVideoSoft
2009-08-12 19:29:41 ----D---- C:\Program Files\Common Files\microsoft shared

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-04-27 96104]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2008-07-21 24392]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-06-10 28520]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; \??\C:\Program Files\ASUS\AI TouchMedia\PlayMovie\000.fcl [2008-05-20 61424]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 Aspi32;Aspi32; C:\Windows\system32\drivers\Aspi32.sys [1999-09-10 25244]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-08-05 55656]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2008-02-16 46592]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R2 RMCAST;RMCAST (Pgm)-Protokolltreiber; C:\Windows\system32\DRIVERS\RMCAST.sys [2008-05-10 113664]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-03-21 1203776]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-06-17 146824]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 DCamUSBET;USB2.0 1.3M UVC WebCam; C:\Windows\system32\DRIVERS\etDevice.sys [2007-09-06 474624]
R3 FiltUSBET;ET USB Device Lower Filter; C:\Windows\system32\DRIVERS\etFilter.sys [2007-10-15 206336]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2008-12-15 25280]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-06-13 2152344]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2007-12-19 54784]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2008-06-03 15928]
R3 MarvinBus;Pinnacle Marvin Bus; C:\Windows\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\Windows\system32\drivers\MODEMCSA.sys [2008-01-21 18432]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2008-12-24 14392]
R3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-04-28 3658752]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2009-06-26 66080]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-01-30 7544832]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-02-14 118784]
R3 ScanUSBET;ET USB Still Image Capture Device; C:\Windows\system32\DRIVERS\etScan.sys [2007-09-06 6656]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-07-03 200112]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys [2008-09-24 29184]
S1 kbdqokh;kbdqokh; \??\C:\Windows\system32\drivers\kbdqokh.sys []
S3 61883;61883-Einheitsgerät; C:\Windows\system32\DRIVERS\61883.sys [2008-01-21 45696]
S3 afu7lcry;afu7lcry; C:\Windows\system32\drivers\afu7lcry.sys []
S3 Avc;AVC-Gerät; C:\Windows\system32\DRIVERS\avc.sys [2008-01-21 40448]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-04-17 23040]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2008-04-17 507904]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-17 30208]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-03-17 81960]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2008-03-17 100392]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2008-01-29 29736]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2008-03-17 17320]
S3 Dot4;MS IEEE-1284.4-Treiber; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-21 131584]
S3 Dot4Print;Druckerklassentreiber für IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-21 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-21 36864]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2008-01-21 52608]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 netr73;Linksys Compact Wireless-G USB Adapter Driver for Vista; C:\Windows\system32\DRIVERS\WUSB54GCx86.sys []
S3 ovt519;D-Link VGA Webcam; C:\Windows\System32\Drivers\ov519vid.sys [2003-10-15 174530]
S3 PsSdk41;PsSdk41; \??\C:\Windows\system32\Drivers\pssdk41.sys [2009-08-12 36928]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-04-17 149504]
S3 RT73;D-Link USB Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\Dr71WU.sys [2008-01-16 489984]
S3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
S3 usbaudio;USB-Audiotreiber (WDM); C:\Windows\system32\drivers\usbaudio.sys [2008-01-21 73088]
S3 usbscan;USB-Scannertreiber; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2008-03-18 13312]
R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-06-10 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-05 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-05-29 144712]
R2 ASBroker;Logon Session Broker; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 ASChannel;Local Communication Channel; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2007-10-03 94208]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 Bonjour Service;Bonjour-Dienst; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-05-18 73728]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-01-30 203296]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-09-08 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-26 183280]
S2 WindowBlinds;Stardock WindowBlinds; C:\Program Files\Stardock\MyColors\VistaSrv.exe []
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-12-15 654848]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 iPod Service;iPod-Dienst; C:\Program Files\iPod\bin\iPodService.exe [2009-07-13 542496]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-02-07 316664]
S4 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S4 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-04-10 518696]

-----------------EOF-----------------

ich hoffe das reicht fürs erste ich bitte euch, ich hab da nicht so einen Plan