| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: TR/Alureon.19456U.3Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
21.09.2009, 17:42
| #16 |
 |  TR/Alureon.19456U.3Code:
ATTFilter ======List of files/folders created in the last 1 months======
2009-09-21 18:13:58 ----D---- C:\Avenger
2009-09-21 18:13:58 ----A---- C:\avenger.txt
2009-09-21 11:13:07 ----A---- C:\Windows\system32\jscript.dll
2009-09-20 17:41:23 ----D---- C:\Windows\temp
2009-09-20 17:41:21 ----A---- C:\ComboFix.txt
2009-09-20 17:40:29 ----SHD---- C:\$RECYCLE.BIN
2009-09-20 17:09:01 ----A---- C:\Windows\system32\occache.dll
2009-09-20 17:09:01 ----A---- C:\Windows\system32\jsproxy.dll
2009-09-20 17:09:00 ----A---- C:\Windows\system32\wininet.dll
2009-09-20 17:09:00 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-09-20 17:09:00 ----A---- C:\Windows\system32\msfeeds.dll
2009-09-20 17:09:00 ----A---- C:\Windows\system32\ieui.dll
2009-09-20 17:09:00 ----A---- C:\Windows\system32\iesetup.dll
2009-09-20 17:09:00 ----A---- C:\Windows\system32\iernonce.dll
2009-09-20 17:09:00 ----A---- C:\Windows\system32\iepeers.dll
2009-09-20 17:08:59 ----A---- C:\Windows\system32\urlmon.dll
2009-09-20 17:08:59 ----A---- C:\Windows\system32\msfeedssync.exe
2009-09-20 17:08:59 ----A---- C:\Windows\system32\ieUnatt.exe
2009-09-20 17:08:59 ----A---- C:\Windows\system32\iesysprep.dll
2009-09-20 17:08:59 ----A---- C:\Windows\system32\iertutil.dll
2009-09-20 17:08:59 ----A---- C:\Windows\system32\iedkcs32.dll
2009-09-20 17:08:59 ----A---- C:\Windows\system32\ie4uinit.exe
2009-09-20 17:08:57 ----A---- C:\Windows\system32\mshtml.dll
2009-09-20 17:08:57 ----A---- C:\Windows\system32\ieframe.dll
2009-09-20 17:07:24 ----A---- C:\Windows\system32\mshtmled.dll
2009-09-20 17:07:24 ----A---- C:\Windows\system32\icardie.dll
2009-09-20 17:07:23 ----A---- C:\Windows\system32\msls31.dll
2009-09-20 17:07:23 ----A---- C:\Windows\system32\mshtmler.dll
2009-09-20 17:07:23 ----A---- C:\Windows\system32\admparse.dll
2009-09-20 17:07:22 ----A---- C:\Windows\system32\imgutil.dll
2009-09-20 17:07:22 ----A---- C:\Windows\system32\ieakeng.dll
2009-09-20 17:07:22 ----A---- C:\Windows\system32\dxtrans.dll
2009-09-20 17:07:22 ----A---- C:\Windows\system32\dxtmsft.dll
2009-09-20 17:07:22 ----A---- C:\Windows\system32\corpol.dll
2009-09-20 17:07:21 ----A---- C:\Windows\system32\webcheck.dll
2009-09-20 17:07:21 ----A---- C:\Windows\system32\msrating.dll
2009-09-20 17:07:21 ----A---- C:\Windows\system32\licmgr10.dll
2009-09-20 17:07:21 ----A---- C:\Windows\system32\inseng.dll
2009-09-20 17:07:21 ----A---- C:\Windows\system32\ieakui.dll
2009-09-20 17:07:21 ----A---- C:\Windows\system32\ieaksie.dll
2009-09-20 17:07:20 ----A---- C:\Windows\system32\WinFXDocObj.exe
2009-09-20 17:07:20 ----A---- C:\Windows\system32\wextract.exe
2009-09-20 17:07:20 ----A---- C:\Windows\system32\pngfilt.dll
2009-09-20 17:07:20 ----A---- C:\Windows\system32\mstime.dll
2009-09-20 17:07:20 ----A---- C:\Windows\system32\ieapfltr.dll
2009-09-20 17:07:20 ----A---- C:\Windows\system32\advpack.dll
2009-09-20 17:07:19 ----A---- C:\Windows\system32\vbscript.dll
2009-09-20 17:07:19 ----A---- C:\Windows\system32\url.dll
2009-09-20 17:07:18 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2009-09-20 17:07:18 ----A---- C:\Windows\system32\SetDepNx.exe
2009-09-20 17:07:18 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2009-09-20 17:07:18 ----A---- C:\Windows\system32\PDMSetup.exe
2009-09-20 17:07:18 ----A---- C:\Windows\system32\mshta.exe
2009-09-20 17:07:18 ----A---- C:\Windows\system32\iexpress.exe
2009-09-19 19:22:33 ----D---- C:\Windows\system32\eu-ES
2009-09-19 19:22:33 ----D---- C:\Windows\system32\ca-ES
2009-09-19 19:22:31 ----D---- C:\Windows\system32\vi-VN
2009-09-19 19:07:23 ----D---- C:\Windows\system32\EventProviders
2009-09-19 19:06:25 ----A---- C:\Windows\system32\NlsLexicons0007.dll
2009-09-19 19:06:23 ----A---- C:\Windows\system32\SLCExt.dll
2009-09-19 19:06:22 ----A---- C:\Windows\system32\SLsvc.exe
2009-09-19 19:06:21 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll
2009-09-19 19:06:21 ----A---- C:\Windows\system32\DevicePairingWizard.exe
2009-09-19 19:06:20 ----A---- C:\Windows\system32\NlsLexicons0009.dll
2009-09-19 19:06:18 ----A---- C:\Windows\system32\mssrch.dll
2009-09-19 19:06:16 ----A---- C:\Windows\system32\tquery.dll
2009-09-19 19:06:15 ----A---- C:\Windows\system32\PresentationNative_v0300.dll
2009-09-19 19:06:14 ----A---- C:\Windows\system32\scavenge.dll
2009-09-19 19:06:14 ----A---- C:\Windows\system32\RMActivate_isv.exe
2009-09-19 19:06:14 ----A---- C:\Windows\system32\RMActivate.exe
2009-09-19 19:06:13 ----A---- C:\Windows\system32\msi.dll
2009-09-19 19:06:13 ----A---- C:\Windows\system32\imapi2fs.dll
2009-09-19 19:06:12 ----A---- C:\Windows\system32\WscEapPr.dll
2009-09-19 19:06:12 ----A---- C:\Windows\system32\wcnwiz2.dll
2009-09-19 19:06:12 ----A---- C:\Windows\system32\sysmain.dll
2009-09-19 19:06:12 ----A---- C:\Windows\system32\secproc_isv.dll
2009-09-19 19:06:11 ----A---- C:\Windows\system32\icardagt.exe
2009-09-19 19:06:11 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll
2009-09-19 19:06:10 ----A---- C:\Windows\system32\spreview.exe
2009-09-19 19:06:10 ----A---- C:\Windows\system32\spinstall.exe
2009-09-19 19:06:10 ----A---- C:\Windows\system32\EhStorShell.dll
2009-09-19 19:06:09 ----A---- C:\Windows\system32\spwizui.dll
2009-09-19 19:06:09 ----A---- C:\Windows\system32\drmv2clt.dll
2009-09-19 19:06:08 ----A---- C:\Windows\system32\shell32.dll
2009-09-19 19:06:08 ----A---- C:\Windows\system32\secproc.dll
2009-09-19 19:06:08 ----A---- C:\Windows\system32\p2psvc.dll
2009-09-19 19:06:08 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll
2009-09-19 19:06:07 ----A---- C:\Windows\system32\SearchIndexer.exe
2009-09-19 19:06:07 ----A---- C:\Windows\system32\mssvp.dll
2009-09-19 19:06:07 ----A---- C:\Windows\system32\mssphtb.dll
2009-09-19 19:06:07 ----A---- C:\Windows\system32\mssph.dll
2009-09-19 19:06:07 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL
2009-09-19 19:06:07 ----A---- C:\Windows\system32\mscoree.dll
2009-09-19 19:06:06 ----A---- C:\Windows\system32\sdohlp.dll
2009-09-19 19:06:06 ----A---- C:\Windows\system32\imapi2.dll
2009-09-19 19:06:05 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-09-19 19:06:05 ----A---- C:\Windows\system32\IMJP10K.DLL
2009-09-19 19:06:05 ----A---- C:\Windows\system32\esent.dll
2009-09-19 19:06:05 ----A---- C:\Windows\system32\DevicePairing.dll
2009-09-19 19:06:04 ----A---- C:\Windows\system32\wevtsvc.dll
2009-09-19 19:06:04 ----A---- C:\Windows\system32\sperror.dll
2009-09-19 19:06:04 ----A---- C:\Windows\system32\SLC.dll
2009-09-19 19:06:04 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2009-09-19 19:06:04 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2009-09-19 19:06:04 ----A---- C:\Windows\system32\korwbrkr.dll
2009-09-19 19:06:04 ----A---- C:\Windows\system32\IasMigReader.exe
2009-09-19 19:06:03 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2009-09-19 19:06:03 ----A---- C:\Windows\system32\msshsq.dll
2009-09-19 19:06:02 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-09-19 19:06:02 ----A---- C:\Windows\system32\msxml6.dll
2009-09-19 19:06:02 ----A---- C:\Windows\system32\msjet40.dll
2009-09-19 19:06:02 ----A---- C:\Windows\system32\MPSSVC.dll
2009-09-19 19:06:01 ----A---- C:\Windows\system32\Query.dll
2009-09-19 19:06:01 ----A---- C:\Windows\system32\qmgr.dll
2009-09-19 19:06:01 ----A---- C:\Windows\system32\P2PGraph.dll
2009-09-19 19:06:01 ----A---- C:\Windows\system32\msexch40.dll
2009-09-19 19:06:01 ----A---- C:\Windows\system32\diagperf.dll
2009-09-19 19:06:00 ----A---- C:\Windows\system32\winload.exe
2009-09-19 19:06:00 ----A---- C:\Windows\system32\uDWM.dll
2009-09-19 19:06:00 ----A---- C:\Windows\system32\srchadmin.dll
2009-09-19 19:06:00 ----A---- C:\Windows\system32\ole32.dll
2009-09-19 19:06:00 ----A---- C:\Windows\system32\ntdll.dll
2009-09-19 19:06:00 ----A---- C:\Windows\system32\msxml3.dll
2009-09-19 19:06:00 ----A---- C:\Windows\system32\mmc.exe
2009-09-19 19:06:00 ----A---- C:\Windows\system32\mblctr.exe
2009-09-19 19:06:00 ----A---- C:\Windows\system32\EncDec.dll
2009-09-19 19:05:59 ----A---- C:\Windows\system32\riched20.dll
2009-09-19 19:05:59 ----A---- C:\Windows\system32\RacEngn.dll
2009-09-19 19:05:59 ----A---- C:\Windows\system32\IasMigPlugin.dll
2009-09-19 19:05:59 ----A---- C:\Windows\system32\fdBth.dll
2009-09-19 19:05:59 ----A---- C:\Windows\system32\dfsr.exe
2009-09-19 19:05:58 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2009-09-19 19:05:58 ----A---- C:\Windows\system32\SearchFilterHost.exe
2009-09-19 19:05:58 ----A---- C:\Windows\system32\milcore.dll
2009-09-19 19:05:58 ----A---- C:\Windows\system32\kernel32.dll
2009-09-19 19:05:58 ----A---- C:\Windows\system32\EhStorAPI.dll
2009-09-19 19:05:57 ----A---- C:\Windows\system32\spoolss.dll
2009-09-19 19:05:57 ----A---- C:\Windows\system32\schedsvc.dll
2009-09-19 19:05:57 ----A---- C:\Windows\system32\NaturalLanguage6.dll
2009-09-19 19:05:57 ----A---- C:\Windows\system32\CertEnroll.dll
2009-09-19 19:05:57 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2009-09-19 19:05:56 ----A---- C:\Windows\system32\WinSAT.exe
2009-09-19 19:05:56 ----A---- C:\Windows\system32\msvcp60.dll
2009-09-19 19:05:56 ----A---- C:\Windows\system32\msjtes40.dll
2009-09-19 19:05:56 ----A---- C:\Windows\system32\infocardapi.dll
2009-09-19 19:05:56 ----A---- C:\Windows\system32\gpedit.dll
2009-09-19 19:05:55 ----A---- C:\Windows\system32\PresentationSettings.exe
2009-09-19 19:05:55 ----A---- C:\Windows\system32\Magnify.exe
2009-09-19 19:05:55 ----A---- C:\Windows\system32\es.dll
2009-09-19 19:05:54 ----A---- C:\Windows\system32\mstext40.dll
2009-09-19 19:05:54 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll
2009-09-19 19:05:54 ----A---- C:\Windows\system32\advapi32.dll
2009-09-19 19:05:53 ----A---- C:\Windows\system32\WMPhoto.dll
2009-09-19 19:05:53 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll
2009-09-19 19:05:53 ----A---- C:\Windows\system32\WebClnt.dll
2009-09-19 19:05:53 ----A---- C:\Windows\system32\vssapi.dll
2009-09-19 19:05:53 ----A---- C:\Windows\system32\slwmi.dll
2009-09-19 19:05:53 ----A---- C:\Windows\system32\msxbde40.dll
2009-09-19 19:05:53 ----A---- C:\Windows\system32\msexcl40.dll
2009-09-19 19:05:53 ----A---- C:\Windows\system32\comsvcs.dll
2009-09-19 19:05:53 ----A---- C:\Windows\system32\authui.dll
2009-09-19 19:05:52 ----A---- C:\Windows\system32\propsys.dll
2009-09-19 19:05:52 ----A---- C:\Windows\system32\PresentationHost.exe
2009-09-19 19:05:52 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-09-19 19:05:52 ----A---- C:\Windows\system32\newdev.dll
2009-09-19 19:05:52 ----A---- C:\Windows\system32\NetProjW.dll
2009-09-19 19:05:52 ----A---- C:\Windows\system32\msrepl40.dll
2009-09-19 19:05:52 ----A---- C:\Windows\system32\iasrecst.dll
2009-09-19 19:05:52 ----A---- C:\Windows\system32\gpsvc.dll
2009-09-19 19:05:52 ----A---- C:\Windows\system32\eudcedit.exe
2009-09-19 19:05:52 ----A---- C:\Windows\system32\crypt32.dll
2009-09-19 19:05:51 ----A---- C:\Windows\system32\setupapi.dll
2009-09-19 19:05:51 ----A---- C:\Windows\system32\rpcss.dll
2009-09-19 19:05:51 ----A---- C:\Windows\system32\mspbde40.dll
2009-09-19 19:05:51 ----A---- C:\Windows\system32\d3d9.dll
2009-09-19 19:05:51 ----A---- C:\Windows\explorer.exe
2009-09-19 19:05:50 ----A---- C:\Windows\system32\wevtapi.dll
2009-09-19 19:05:50 ----A---- C:\Windows\system32\shlwapi.dll
2009-09-19 19:05:50 ----A---- C:\Windows\system32\photowiz.dll
2009-09-19 19:05:50 ----A---- C:\Windows\system32\nlhtml.dll
2009-09-19 19:05:50 ----A---- C:\Windows\system32\msrd3x40.dll
2009-09-19 19:05:50 ----A---- C:\Windows\system32\msltus40.dll
2009-09-19 19:05:50 ----A---- C:\Windows\system32\msdtctm.dll
2009-09-19 19:05:50 ----A---- C:\Windows\system32\mfc42.dll
2009-09-19 19:05:50 ----A---- C:\Windows\system32\EhStorPwdMgr.dll
2009-09-19 19:05:50 ----A---- C:\Windows\system32\EhStorAuthn.dll
2009-09-19 19:05:50 ----A---- C:\Windows\system32\davclnt.dll
2009-09-19 19:05:50 ----A---- C:\Windows\system32\browseui.dll
2009-09-19 19:05:49 ----A---- C:\Windows\system32\user32.dll
2009-09-19 19:05:49 ----A---- C:\Windows\system32\samsrv.dll
2009-09-19 19:05:49 ----A---- C:\Windows\system32\ci.dll
2009-09-19 19:05:48 ----A---- C:\Windows\system32\win32spl.dll
2009-09-19 19:05:48 ----A---- C:\Windows\system32\WcnNetsh.dll
2009-09-19 19:05:48 ----A---- C:\Windows\system32\SLCommDlg.dll
2009-09-19 19:05:48 ----A---- C:\Windows\system32\quartz.dll
2009-09-19 19:05:48 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-09-19 19:05:48 ----A---- C:\Windows\system32\oleaut32.dll
2009-09-19 19:05:48 ----A---- C:\Windows\system32\netshell.dll
2009-09-19 19:05:48 ----A---- C:\Windows\system32\IKEEXT.DLL
2009-09-19 19:05:48 ----A---- C:\Windows\system32\compcln.exe
2009-09-19 19:05:47 ----A---- C:\Windows\system32\xmlfilter.dll
2009-09-19 19:05:47 ----A---- C:\Windows\system32\winhttp.dll
2009-09-19 19:05:47 ----A---- C:\Windows\system32\QAGENTRT.DLL
2009-09-19 19:05:47 ----A---- C:\Windows\system32\mswstr10.dll
2009-09-19 19:05:47 ----A---- C:\Windows\system32\msvcrt.dll
2009-09-19 19:05:47 ----A---- C:\Windows\system32\msctf.dll
2009-09-19 19:05:47 ----A---- C:\Windows\system32\gdi32.dll
2009-09-19 19:05:47 ----A---- C:\Windows\system32\emdmgmt.dll
2009-09-19 19:05:47 ----A---- C:\Windows\system32\audiosrv.dll
2009-09-19 19:05:47 ----A---- C:\Windows\system32\apds.dll
2009-09-19 19:05:46 ----A---- C:\Windows\system32\winresume.exe
2009-09-19 19:05:46 ----A---- C:\Windows\system32\VSSVC.exe
2009-09-19 19:05:46 ----A---- C:\Windows\system32\sqlsrv32.dll
2009-09-19 19:05:46 ----A---- C:\Windows\system32\SLUI.exe
2009-09-19 19:05:46 ----A---- C:\Windows\system32\propdefs.dll
2009-09-19 19:05:46 ----A---- C:\Windows\system32\odbc32.dll
2009-09-19 19:05:46 ----A---- C:\Windows\system32\msrd2x40.dll
2009-09-19 19:05:46 ----A---- C:\Windows\system32\mfc42u.dll
2009-09-19 19:05:46 ----A---- C:\Windows\system32\iphlpsvc.dll
2009-09-19 19:05:46 ----A---- C:\Windows\system32\eapphost.dll
2009-09-19 19:05:45 ----A---- C:\Windows\system32\wevtutil.exe
2009-09-19 19:05:45 ----A---- C:\Windows\system32\shdocvw.dll
2009-09-19 19:05:45 ----A---- C:\Windows\system32\mssitlb.dll
2009-09-19 19:05:45 ----A---- C:\Windows\system32\dbgeng.dll
2009-09-19 19:05:44 ----A---- C:\Windows\system32\WsmSvc.dll
2009-09-19 19:05:44 ----A---- C:\Windows\system32\vds.exe
2009-09-19 19:05:44 ----A---- C:\Windows\system32\usp10.dll
2009-09-19 19:05:44 ----A---- C:\Windows\system32\swprv.dll
|
|
21.09.2009, 17:45
| #17 |
| | TR/Alureon.19456U.3Code:
ATTFilter 2009-09-19 19:05:44 ----A---- C:\Windows\system32\mmcndmgr.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\WSDApi.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\Wldap32.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\wcnwiz.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\netlogon.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\msscb.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\msctfp.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\fdBthProxy.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\evr.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\drvinst.exe
2009-09-19 19:05:43 ----A---- C:\Windows\system32\devmgr.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\DevicePairingProxy.dll
2009-09-19 19:05:43 ----A---- C:\Windows\system32\BFE.DLL
2009-09-19 19:05:43 ----A---- C:\Windows\system32\adsldpc.dll
2009-09-19 19:05:42 ----A---- C:\Windows\system32\WMVSDECD.DLL
2009-09-19 19:05:42 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-09-19 19:05:42 ----A---- C:\Windows\system32\wercon.exe
2009-09-19 19:05:42 ----A---- C:\Windows\system32\services.exe
2009-09-19 19:05:42 ----A---- C:\Windows\system32\comdlg32.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\wcncsvc.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\umpnpmgr.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\taskeng.exe
2009-09-19 19:05:41 ----A---- C:\Windows\system32\rtffilt.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\reg.exe
2009-09-19 19:05:41 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\mswdat10.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\msjter40.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\msdtcprx.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\msdrm.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\mimefilt.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\ipsmsnap.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\dnsapi.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\certutil.exe
2009-09-19 19:05:41 ----A---- C:\Windows\system32\certcli.dll
2009-09-19 19:05:41 ----A---- C:\Windows\system32\adtschema.dll
2009-09-19 19:05:40 ----A---- C:\Windows\system32\WMNetMgr.dll
2009-09-19 19:05:40 ----A---- C:\Windows\system32\w32time.dll
2009-09-19 19:05:40 ----A---- C:\Windows\system32\rsaenh.dll
2009-09-19 19:05:40 ----A---- C:\Windows\system32\msshooks.dll
2009-09-19 19:05:40 ----A---- C:\Windows\system32\msscntrs.dll
2009-09-19 19:05:40 ----A---- C:\Windows\system32\msihnd.dll
2009-09-19 19:05:40 ----A---- C:\Windows\system32\IPSECSVC.DLL
2009-09-19 19:05:40 ----A---- C:\Windows\system32\bthserv.dll
2009-09-19 19:05:40 ----A---- C:\Windows\system32\bcrypt.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\wmicmiplugin.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\TsWpfWrp.exe
2009-09-19 19:05:39 ----A---- C:\Windows\system32\termsrv.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\profsvc.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\netapi32.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\mtxclu.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\msstrc.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\mscories.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\MMDevAPI.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\inetpp.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\inetcomm.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\hidserv.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\fundisc.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\dhcpcsvc6.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\dfshim.dll
2009-09-19 19:05:39 ----A---- C:\Windows\system32\cryptsvc.dll
2009-09-19 19:05:38 ----A---- C:\Windows\system32\wdc.dll
2009-09-19 19:05:38 ----A---- C:\Windows\system32\spoolsv.exe
2009-09-19 19:05:38 ----A---- C:\Windows\system32\shsvcs.dll
2009-09-19 19:05:38 ----A---- C:\Windows\system32\rasmans.dll
2009-09-19 19:05:38 ----A---- C:\Windows\system32\pnidui.dll
2009-09-19 19:05:38 ----A---- C:\Windows\system32\msiexec.exe
2009-09-19 19:05:38 ----A---- C:\Windows\system32\imapi.dll
2009-09-19 19:05:38 ----A---- C:\Windows\system32\icardres.dll
2009-09-19 19:05:38 ----A---- C:\Windows\system32\iassdo.dll
2009-09-19 19:05:38 ----A---- C:\Windows\system32\chsbrkr.dll
2009-09-19 19:05:38 ----A---- C:\Windows\system32\autofmt.exe
2009-09-19 19:05:37 ----A---- C:\Windows\system32\wersvc.dll
2009-09-19 19:05:37 ----A---- C:\Windows\system32\slmgr.vbs
2009-09-19 19:05:37 ----A---- C:\Windows\system32\scrrun.dll
2009-09-19 19:05:37 ----A---- C:\Windows\system32\PSHED.DLL
2009-09-19 19:05:37 ----A---- C:\Windows\system32\pidgenx.dll
2009-09-19 19:05:37 ----A---- C:\Windows\system32\pdh.dll
2009-09-19 19:05:37 ----A---- C:\Windows\system32\dhcpcsvc.dll
2009-09-19 19:05:37 ----A---- C:\Windows\system32\CertEnrollUI.dll
2009-09-19 19:05:37 ----A---- C:\Windows\system32\azroles.dll
2009-09-19 19:05:36 ----A---- C:\Windows\system32\wmpmde.dll
2009-09-19 19:05:36 ----A---- C:\Windows\system32\winlogon.exe
2009-09-19 19:05:36 ----A---- C:\Windows\system32\SyncCenter.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\wisptis.exe
2009-09-19 19:05:35 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\untfs.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\spp.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\SLUINotify.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\sethc.exe
2009-09-19 19:05:35 ----A---- C:\Windows\system32\scrobj.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\rtutils.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\ncrypt.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\msjetoledb40.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\kd1394.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\iassam.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\comuid.dll
2009-09-19 19:05:35 ----A---- C:\Windows\system32\certmgr.dll
2009-09-19 19:05:34 ----A---- C:\Windows\system32\winsrv.dll
2009-09-19 19:05:34 ----A---- C:\Windows\system32\taskcomp.dll
2009-09-19 19:05:34 ----A---- C:\Windows\system32\printui.dll
2009-09-19 19:05:34 ----A---- C:\Windows\system32\iasnap.dll
2009-09-19 19:05:34 ----A---- C:\Windows\system32\dwm.exe
2009-09-19 19:05:34 ----A---- C:\Windows\system32\autoconv.exe
2009-09-19 19:05:34 ----A---- C:\Windows\system32\autochk.exe
2009-09-19 19:05:33 ----A---- C:\Windows\system32\wow32.dll
2009-09-19 19:05:33 ----A---- C:\Windows\system32\userenv.dll
2009-09-19 19:05:33 ----A---- C:\Windows\system32\spcmsg.dll
2009-09-19 19:05:33 ----A---- C:\Windows\system32\RelMon.dll
2009-09-19 19:05:33 ----A---- C:\Windows\system32\osk.exe
2009-09-19 19:05:33 ----A---- C:\Windows\system32\onex.dll
2009-09-19 19:05:33 ----A---- C:\Windows\system32\mswsock.dll
2009-09-19 19:05:33 ----A---- C:\Windows\system32\kdusb.dll
2009-09-19 19:05:33 ----A---- C:\Windows\system32\kdcom.dll
2009-09-19 19:05:33 ----A---- C:\Windows\system32\cscript.exe
2009-09-19 19:05:33 ----A---- C:\Windows\system32\basecsp.dll
2009-09-19 19:05:33 ----A---- C:\Windows\system32\audiodg.exe
2009-09-19 19:05:32 ----A---- C:\Windows\system32\wsepno.dll
2009-09-19 19:05:32 ----A---- C:\Windows\system32\WinSCard.dll
2009-09-19 19:05:32 ----A---- C:\Windows\system32\winmm.dll
2009-09-19 19:05:32 ----A---- C:\Windows\system32\WerFaultSecure.exe
2009-09-19 19:05:32 ----A---- C:\Windows\system32\WerFault.exe
2009-09-19 19:05:32 ----A---- C:\Windows\system32\Utilman.exe
2009-09-19 19:05:32 ----A---- C:\Windows\system32\stobject.dll
2009-09-19 19:05:32 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2009-09-19 19:05:32 ----A---- C:\Windows\system32\secproc_ssp.dll
2009-09-19 19:05:32 ----A---- C:\Windows\system32\rdpencom.dll
2009-09-19 19:05:32 ----A---- C:\Windows\system32\offfilt.dll
2009-09-19 19:05:32 ----A---- C:\Windows\system32\msftedit.dll
2009-09-19 19:05:32 ----A---- C:\Windows\system32\mfplat.dll
2009-09-19 19:05:32 ----A---- C:\Windows\system32\dnsrslvr.dll
2009-09-19 19:05:32 ----A---- C:\Windows\system32\diskraid.exe
2009-09-19 19:05:31 ----A---- C:\Windows\system32\wscript.exe
2009-09-19 19:05:31 ----A---- C:\Windows\system32\wscntfy.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\wiaservc.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\ulib.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\sysclass.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\SndVol.exe
2009-09-19 19:05:31 ----A---- C:\Windows\system32\rastapi.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\prnntfy.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\odbccp32.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\msnetobj.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\mscms.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\mcmde.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\IPHLPAPI.DLL
2009-09-19 19:05:31 ----A---- C:\Windows\system32\iasdatastore.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\dsound.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\cryptui.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\apphelp.dll
2009-09-19 19:05:31 ----A---- C:\Windows\system32\adsmsext.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\wusa.exe
2009-09-19 19:05:30 ----A---- C:\Windows\system32\wscsvc.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\WMVENCOD.DLL
2009-09-19 19:05:30 ----A---- C:\Windows\system32\wlangpui.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\vdsdyn.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\regsvc.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\rastls.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\rasapi32.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\pnpsetup.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\ntprint.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\mscorier.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\logman.exe
2009-09-19 19:05:30 ----A---- C:\Windows\system32\ipsecsnp.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\iashlpr.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\gpapi.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\fdProxy.dll
2009-09-19 19:05:30 ----A---- C:\Windows\system32\diskpart.exe
2009-09-19 19:05:30 ----A---- C:\Windows\system32\brcpl.dll
2009-09-19 19:05:29 ----A---- C:\Windows\system32\zipfldr.dll
2009-09-19 19:05:29 ----A---- C:\Windows\system32\wsnmp32.dll
2009-09-19 19:05:29 ----A---- C:\Windows\system32\wshext.dll
2009-09-19 19:05:29 ----A---- C:\Windows\system32\wpccpl.dll
2009-09-19 19:05:29 ----A---- C:\Windows\system32\wer.dll
2009-09-19 19:05:29 ----A---- C:\Windows\system32\themecpl.dll
2009-09-19 19:05:29 ----A---- C:\Windows\system32\rasdlg.dll
2009-09-19 19:05:29 ----A---- C:\Windows\system32\netcenter.dll
2009-09-19 19:05:29 ----A---- C:\Windows\system32\iassvcs.dll
2009-09-19 19:05:29 ----A---- C:\Windows\system32\iasrad.dll
2009-09-19 19:05:29 ----A---- C:\Windows\system32\findstr.exe
2009-09-19 19:05:28 ----A---- C:\Windows\system32\uxsms.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\tsbyuv.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\srvsvc.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\slcc.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\scansetting.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\powrprof.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\ntmarta.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\networkmap.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\msutb.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\mstsc.exe
2009-09-19 19:05:28 ----A---- C:\Windows\system32\mstlsapi.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\mssprxy.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\iasads.dll
2009-09-19 19:05:28 ----A---- C:\Windows\system32\iasacct.dll
2009-09-19 19:05:27 ----A---- C:\Windows\system32\themeui.dll
2009-09-19 19:05:27 ----A---- C:\Windows\system32\systemcpl.dll
2009-09-19 19:05:27 ----A---- C:\Windows\system32\sud.dll
2009-09-19 19:05:27 ----A---- C:\Windows\system32\samlib.dll
2009-09-19 19:05:27 ----A---- C:\Windows\system32\powercpl.dll
2009-09-19 19:05:27 ----A---- C:\Windows\system32\PerfCenterCPL.dll
2009-09-19 19:05:27 ----A---- C:\Windows\system32\pcaui.dll
2009-09-19 19:05:27 ----A---- C:\Windows\system32\newdev.exe
2009-09-19 19:05:27 ----A---- C:\Windows\system32\dot3svc.dll
2009-09-19 19:05:27 ----A---- C:\Windows\system32\connect.dll
2009-09-19 19:05:27 ----A---- C:\Windows\system32\authz.dll
2009-09-19 19:05:27 ----A---- C:\Windows\system32\accessibilitycpl.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\wpcao.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\wlanpref.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\vdsutil.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\usercpl.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\tapisrv.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\scksp.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\scesrv.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\rpchttp.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\regapi.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\qdvd.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\psisdecd.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\oleprn.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\msinfo32.exe
2009-09-19 19:05:26 ----A---- C:\Windows\system32\mpr.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\mmci.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\imm32.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\feclient.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\autoplay.dll
2009-09-19 19:05:26 ----A---- C:\Windows\system32\AudioSes.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\wscisvif.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\TSTheme.exe
2009-09-19 19:05:25 ----A---- C:\Windows\system32\spwinsat.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\sdclt.exe
2009-09-19 19:05:25 ----A---- C:\Windows\system32\scecli.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\rekeywiz.exe
2009-09-19 19:05:25 ----A---- C:\Windows\system32\rasplap.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\rasgcw.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\qedit.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\pnpui.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\perfdisk.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\ncryptui.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\iaspolcy.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\hdwwiz.exe
2009-09-19 19:05:25 ----A---- C:\Windows\system32\FWPUCLNT.DLL
2009-09-19 19:05:25 ----A---- C:\Windows\system32\Faultrep.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\dpapimig.exe
2009-09-19 19:05:25 ----A---- C:\Windows\system32\dot3msm.dll
2009-09-19 19:05:25 ----A---- C:\Windows\system32\DeviceEject.exe
2009-09-19 19:05:25 ----A---- C:\Windows\system32\certreq.exe
2009-09-19 19:05:24 ----A---- C:\Windows\system32\WMVXENCD.DLL
2009-09-19 19:05:24 ----A---- C:\Windows\system32\wlanui.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\wiaaut.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\whealogr.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\tcpmon.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\tcpipcfg.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\srcore.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\SnippingTool.exe
2009-09-19 19:05:24 ----A---- C:\Windows\system32\shwebsvc.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\SCardSvr.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\rasppp.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\raschap.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\PnPutil.exe
2009-09-19 19:05:24 ----A---- C:\Windows\system32\PnPUnattend.exe
2009-09-19 19:05:24 ----A---- C:\Windows\system32\MSVidCtl.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\fontext.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\fdWSD.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\dsprop.dll
2009-09-19 19:05:24 ----A---- C:\Windows\system32\conime.exe
2009-09-19 19:05:24 ----A---- C:\Windows\system32\cmmon32.exe
2009-09-19 19:05:24 ----A---- C:\Windows\system32\cmdial32.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\wmdrmsdk.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\wlgpclnt.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\shsetup.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\rdpwsx.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\rasmontr.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\oobefldr.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\mscandui.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\modemui.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\dimsroam.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\dataclen.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\chtbrkr.dll
2009-09-19 19:05:23 ----A---- C:\Windows\system32\blackbox.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\WSDMon.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\wscapi.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\wpcsvc.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\wmpeffects.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\thawbrkr.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\softkbd.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\smss.exe
2009-09-19 19:05:22 ----A---- C:\Windows\system32\sendmail.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\networkexplorer.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\netplwiz.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\msscp.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\msimtf.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\logagent.exe
2009-09-19 19:05:22 ----A---- C:\Windows\system32\InkEd.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\ifmon.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\gpresult.exe
2009-09-19 19:05:22 ----A---- C:\Windows\system32\credui.dll
2009-09-19 19:05:22 ----A---- C:\Windows\system32\cipher.exe
2009-09-19 19:05:22 ----A---- C:\Windows\system32\certprop.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\wshbth.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\version.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\SLLUA.exe
2009-09-19 19:05:21 ----A---- C:\Windows\system32\puiapi.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\olepro32.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\msisip.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\msctfui.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\mprapi.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\MediaMetadataHandler.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\input.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\fdSSDP.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\fc.exe
2009-09-19 19:05:21 ----A---- C:\Windows\system32\ExplorerFrame.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\drmmgrtn.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\dmsynth.dll
2009-09-19 19:05:21 ----A---- C:\Windows\system32\cdd.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\wsdchngr.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\tscupgrd.exe
2009-09-19 19:05:20 ----A---- C:\Windows\system32\Storprop.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\SMBHelperClass.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\slcinst.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\rasdial.exe
2009-09-19 19:05:20 ----A---- C:\Windows\system32\rasdiag.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\nslookup.exe
2009-09-19 19:05:20 ----A---- C:\Windows\system32\networkitemfactory.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\msjint40.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\MsCtfMonitor.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\l2nacp.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\ipconfig.exe
2009-09-19 19:05:20 ----A---- C:\Windows\system32\ftp.exe
2009-09-19 19:05:20 ----A---- C:\Windows\system32\fdWCN.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\eappcfg.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\eapp3hst.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\dot3cfg.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\dmusic.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\cscdll.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\cscapi.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\CHxReadingStringIME.dll
2009-09-19 19:05:20 ----A---- C:\Windows\system32\bthudtask.exe
2009-09-19 19:05:20 ----A---- C:\Windows\system32\bthci.dll
2009-09-19 19:05:19 ----A---- C:\Windows\system32\PNPXAssoc.dll
2009-09-19 19:05:19 ----A---- C:\Windows\system32\ocsetup.exe
2009-09-19 19:05:19 ----A---- C:\Windows\system32\mmcico.dll
2009-09-19 19:05:19 ----A---- C:\Windows\system32\hbaapi.dll
2009-09-19 19:05:19 ----A---- C:\Windows\system32\gpupdate.exe
2009-09-19 19:05:19 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2009-09-19 19:05:19 ----A---- C:\Windows\system32\fdeploy.dll
2009-09-19 19:05:19 ----A---- C:\Windows\system32\eappgnui.dll
2009-09-19 19:05:19 ----A---- C:\Windows\system32\csrstub.exe
2009-09-19 19:05:19 ----A---- C:\Windows\system32\cbsra.exe
2009-09-19 19:05:18 ----A---- C:\Windows\system32\winrnr.dll
2009-09-19 19:05:18 ----A---- C:\Windows\system32\vdmdbg.dll
2009-09-19 19:05:18 ----A---- C:\Windows\system32\slwga.dll
2009-09-19 19:05:18 ----A---- C:\Windows\system32\odbcconf.dll
2009-09-19 19:05:18 ----A---- C:\Windows\system32\NcdProp.dll
2009-09-19 19:05:18 ----A---- C:\Windows\system32\iscsilog.dll
2009-09-19 19:05:18 ----A---- C:\Windows\system32\inetppui.dll
2009-09-19 19:05:18 ----A---- C:\Windows\system32\bitsigd.dll
2009-09-19 19:05:17 ----A---- C:\Windows\system32\midimap.dll
2009-09-19 19:05:15 ----A---- C:\Windows\system32\msimsg.dll
2009-09-19 19:05:15 ----A---- C:\Windows\system32\f3ahvoas.dll
2009-09-19 19:04:59 ----A---- C:\Windows\system32\SmiEngine.dll
2009-09-19 19:04:57 ----A---- C:\Windows\system32\wdscore.dll
2009-09-19 19:04:57 ----A---- C:\Windows\system32\PkgMgr.exe
2009-09-19 19:04:51 ----A---- C:\Windows\system32\drvstore.dll
|
|
21.09.2009, 17:46
| #18 |
| | TR/Alureon.19456U.3Code:
ATTFilter 2009-09-17 01:51:57 ----D---- C:\found.000
2009-09-15 17:01:31 ----D---- C:\rsit
2009-09-12 19:07:14 ----D---- C:\Windows\CheckSur
2009-09-12 18:47:05 ----D---- C:\ProgramData\KONAMI
2009-09-12 18:25:40 ----D---- C:\Program Files\KONAMI
2009-09-10 01:11:49 ----A---- C:\Windows\system32\lsasrv.dll
2009-09-10 01:11:48 ----A---- C:\Windows\system32\wdigest.dll
2009-09-10 01:11:48 ----A---- C:\Windows\system32\msv1_0.dll
2009-09-10 01:11:48 ----A---- C:\Windows\system32\kerberos.dll
2009-09-10 01:11:47 ----A---- C:\Windows\system32\secur32.dll
2009-09-10 01:11:47 ----A---- C:\Windows\system32\schannel.dll
2009-09-10 01:11:47 ----A---- C:\Windows\system32\lsass.exe
2009-09-09 19:41:07 ----A---- C:\Windows\system32\TCPSVCS.EXE
2009-09-09 19:41:07 ----A---- C:\Windows\system32\ROUTE.EXE
2009-09-09 19:41:07 ----A---- C:\Windows\system32\NETSTAT.EXE
2009-09-09 19:41:07 ----A---- C:\Windows\system32\netiohlp.dll
2009-09-09 19:41:07 ----A---- C:\Windows\system32\MRINFO.EXE
2009-09-09 19:41:07 ----A---- C:\Windows\system32\HOSTNAME.EXE
2009-09-09 19:41:07 ----A---- C:\Windows\system32\finger.exe
2009-09-09 19:41:07 ----A---- C:\Windows\system32\ARP.EXE
2009-09-09 19:40:51 ----A---- C:\Windows\system32\netevent.dll
2009-09-09 19:38:49 ----A---- C:\Windows\system32\wlansvc.dll
2009-09-09 19:38:49 ----A---- C:\Windows\system32\wlansec.dll
2009-09-09 19:38:49 ----A---- C:\Windows\system32\wlanmsm.dll
2009-09-09 19:38:49 ----A---- C:\Windows\system32\wlanhlp.dll
2009-09-09 19:38:48 ----A---- C:\Windows\system32\wlanapi.dll
2009-09-09 19:38:39 ----A---- C:\Windows\system32\L2SecHC.dll
2009-09-09 19:37:52 ----A---- C:\Windows\system32\WMVCORE.DLL
2009-09-09 19:37:46 ----A---- C:\Windows\system32\rrinstaller.exe
2009-09-09 19:37:46 ----A---- C:\Windows\system32\mfps.dll
2009-09-09 19:37:46 ----A---- C:\Windows\system32\mfpmp.exe
2009-09-09 19:37:46 ----A---- C:\Windows\system32\mferror.dll
2009-09-09 19:37:45 ----A---- C:\Windows\system32\mf.dll
2009-09-03 10:56:31 ----A---- C:\Windows\system32\Apphlpdm.dll
2009-09-03 10:56:30 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2009-08-26 12:23:00 ----A---- C:\Windows\system32\tzres.dll
2009-08-26 11:00:32 ----A---- C:\Windows\system32\gameux.dll
======List of files/folders modified in the last 1 months======
2009-09-21 18:19:46 ----D---- C:\Windows\System32
2009-09-21 18:19:46 ----D---- C:\Windows\inf
2009-09-21 18:19:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-09-21 18:16:42 ----D---- C:\Windows\Tasks
2009-09-21 18:14:11 ----D---- C:\Windows\Internet Logs
2009-09-21 18:13:58 ----D---- C:\Windows\system32\drivers
2009-09-21 17:49:08 ----RD---- C:\Program Files
2009-09-21 17:49:06 ----D---- C:\Windows\system32\catroot
2009-09-21 12:26:19 ----D---- C:\ProgramData\Google Updater
2009-09-21 11:14:37 ----D---- C:\Windows\winsxs
2009-09-21 11:14:30 ----SHD---- C:\System Volume Information
2009-09-20 17:44:31 ----D---- C:\Windows
2009-09-20 17:41:24 ----D---- C:\Windows\system32\de-DE
2009-09-20 17:41:24 ----D---- C:\Qoobox
2009-09-20 17:40:08 ----D---- C:\Windows\ERDNT
2009-09-20 17:39:36 ----A---- C:\Windows\system.ini
2009-09-20 17:36:24 ----D---- C:\Windows\AppPatch
2009-09-20 17:36:23 ----D---- C:\Program Files\Common Files
2009-09-20 17:29:20 ----D---- C:\Windows\rescache
2009-09-20 17:10:55 ----D---- C:\Windows\system32\migration
2009-09-20 17:10:55 ----D---- C:\Program Files\Internet Explorer
2009-09-20 17:10:50 ----D---- C:\Windows\system32\en-US
2009-09-20 17:10:50 ----D---- C:\Windows\PolicyDefinitions
2009-09-20 17:09:22 ----D---- C:\Windows\system32\catroot2
2009-09-20 15:40:32 ----SHD---- C:\Windows\Installer
2009-09-20 15:40:32 ----RSD---- C:\Windows\assembly
2009-09-20 12:26:38 ----SD---- C:\ProgramData\Microsoft
2009-09-20 12:06:36 ----D---- C:\Windows\Microsoft.NET
2009-09-19 19:33:41 ----D---- C:\Program Files\SUPERAntiSpyware
2009-09-19 19:30:50 ----D---- C:\Boot
2009-09-19 19:30:46 ----D---- C:\Windows\Prefetch
2009-09-19 19:23:30 ----D---- C:\Program Files\Windows Calendar
2009-09-19 19:23:29 ----D---- C:\Program Files\Windows Sidebar
2009-09-19 19:23:29 ----D---- C:\Program Files\Windows Media Player
2009-09-19 19:23:29 ----D---- C:\Program Files\Windows Mail
2009-09-19 19:23:29 ----D---- C:\Program Files\Movie Maker
2009-09-19 19:23:28 ----D---- C:\Program Files\Windows Journal
2009-09-19 19:23:28 ----D---- C:\Program Files\Windows Collaboration
2009-09-19 19:23:27 ----D---- C:\Program Files\Windows Photo Gallery
2009-09-19 19:23:27 ----D---- C:\Program Files\Common Files\System
2009-09-19 19:23:24 ----D---- C:\Windows\servicing
2009-09-19 19:23:24 ----D---- C:\Windows\ehome
2009-09-19 19:23:24 ----D---- C:\Program Files\Windows Defender
2009-09-19 19:23:12 ----D---- C:\Windows\IME
2009-09-19 19:23:11 ----D---- C:\Windows\system32\XPSViewer
2009-09-19 19:23:11 ----D---- C:\Windows\system32\sk-SK
2009-09-19 19:23:11 ----D---- C:\Windows\system32\lv-LV
2009-09-19 19:23:11 ----D---- C:\Windows\system32\ko-KR
2009-09-19 19:23:11 ----D---- C:\Windows\system32\hr-HR
2009-09-19 19:23:11 ----D---- C:\Windows\system32\et-EE
2009-09-19 19:23:11 ----D---- C:\Windows\system32\da-DK
2009-09-19 19:23:08 ----D---- C:\Windows\system32\oobe
2009-09-19 19:23:08 ----D---- C:\Windows\system32\it-IT
2009-09-19 19:23:08 ----D---- C:\Windows\system32\el-GR
2009-09-19 19:23:03 ----D---- C:\Windows\system32\sv-SE
2009-09-19 19:23:03 ----D---- C:\Windows\system32\SLUI
2009-09-19 19:23:03 ----D---- C:\Windows\system32\setup
2009-09-19 19:23:03 ----D---- C:\Windows\system32\ru-RU
2009-09-19 19:23:03 ----D---- C:\Windows\system32\pt-PT
2009-09-19 19:23:03 ----D---- C:\Windows\system32\hu-HU
2009-09-19 19:23:03 ----D---- C:\Windows\system32\he-IL
2009-09-19 19:23:03 ----D---- C:\Windows\system32\fr-FR
2009-09-19 19:23:03 ----D---- C:\Windows\system32\fi-FI
2009-09-19 19:23:03 ----D---- C:\Windows\system32\cs-CZ
2009-09-19 19:23:03 ----D---- C:\Windows\system32\AdvancedInstallers
2009-09-19 19:23:02 ----D---- C:\Windows\system32\zh-TW
2009-09-19 19:23:02 ----D---- C:\Windows\system32\zh-CN
2009-09-19 19:23:02 ----D---- C:\Windows\system32\uk-UA
2009-09-19 19:23:02 ----D---- C:\Windows\system32\sr-Latn-CS
2009-09-19 19:23:02 ----D---- C:\Windows\system32\sl-SI
2009-09-19 19:23:02 ----D---- C:\Windows\system32\pl-PL
2009-09-19 19:23:02 ----D---- C:\Windows\system32\manifeststore
2009-09-19 19:23:02 ----D---- C:\Windows\system32\es-ES
2009-09-19 19:23:01 ----D---- C:\Windows\system32\th-TH
2009-09-19 19:23:01 ----D---- C:\Windows\system32\ro-RO
2009-09-19 19:23:01 ----D---- C:\Windows\system32\ja-JP
2009-09-19 19:23:01 ----D---- C:\Windows\system32\bg-BG
2009-09-19 19:23:00 ----D---- C:\Windows\system32\wbem
2009-09-19 19:23:00 ----D---- C:\Windows\system32\tr-TR
2009-09-19 19:22:59 ----D---- C:\Windows\system32\pt-BR
2009-09-19 19:22:59 ----D---- C:\Windows\system32\nl-NL
2009-09-19 19:22:59 ----D---- C:\Windows\system32\nb-NO
2009-09-19 19:22:59 ----D---- C:\Windows\system32\migwiz
2009-09-19 19:22:59 ----D---- C:\Windows\system32\lt-LT
2009-09-19 19:22:59 ----D---- C:\Windows\system32\ar-SA
2009-09-19 19:22:40 ----RSD---- C:\Windows\Fonts
2009-09-19 19:22:31 ----D---- C:\Windows\system32\Boot
2009-09-19 13:03:14 ----D---- C:\Users\PDvaS\AppData\Roaming\vlc
2009-09-17 01:43:27 ----D---- C:\Windows\security
2009-09-16 18:12:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-09-15 16:04:22 ----D---- C:\Windows\Debug
2009-09-14 02:12:36 ----A---- C:\Windows\PEV.exe
2009-09-13 21:41:24 ----D---- C:\Windows\system32\Tasks
2009-09-13 11:46:49 ----D---- C:\Program Files\Mozilla Firefox
2009-09-12 18:47:05 ----D---- C:\ProgramData
2009-09-10 13:14:34 ----HD---- C:\Program Files\InstallShield Installation Information
2009-09-10 05:04:20 ----D---- C:\Windows\system32\config
2009-09-10 05:04:10 ----D---- C:\Windows\VMC302
2009-09-10 05:04:10 ----D---- C:\Windows\system32\Msdtc
2009-09-10 05:04:07 ----D---- C:\Windows\registration
2009-09-10 01:24:52 ----D---- C:\Users\PDvaS\AppData\Roaming\dvdcss
2009-09-03 12:49:43 ----D---- C:\Windows\Minidump
2009-08-31 10:11:10 ----D---- C:\Program Files\Java
2009-08-28 23:38:20 ----A---- C:\Windows\system32\mrt.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ASPI32;ASPI32; C:\Windows\system32\drivers\ASPI32.sys [1999-09-10 25244]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-04-27 96104]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2009-05-14 9968]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys [2009-08-07 74480]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-06-10 28520]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-08-05 55656]
R2 KMDFMEMIO;SAMSUNG Kernel Driver; C:\Windows\system32\DRIVERS\kmdfmemio.sys [2008-09-01 13312]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-13 954368]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-08-08 3895808]
R3 CmBatt;Treiber für Microsoft-ACPI-Kontrollmethodenkompatible Batterie; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-07-07 2152088]
R3 KMWDFILTER;HIDUASDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [2009-05-14 7408]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-10-26 193456]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2008-05-28 22072]
R3 VMC302;Vimicro Camera Service VMC302; C:\Windows\System32\Drivers\VMC302.sys [2008-08-28 241664]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2008-06-27 303616]
S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-03-21 1203776]
S3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\Windows\system32\DRIVERS\bcm4sbxp.sys [2006-11-02 45056]
S3 BthEnum;Bluetooth-Anforderungsblocktreiber; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-01-21 19456]
S3 BthPan;Bluetooth-Gerät (PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Bluetooth-Porttreiber; C:\Windows\System32\Drivers\BTHport.sys [2008-04-29 220160]
S3 BTHUSB;USB-Treiber für Bluetooth-Funkgerät; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-29 29184]
S3 btwaudio;Bluetooth-Audiogerät; C:\Windows\system32\drivers\btwaudio.sys [2008-02-14 80424]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2007-07-16 80936]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-07-16 16168]
S3 catchme;catchme; \??\C:\Users\PDvaS\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-10-19 1380864]
S3 mbr;mbr; \??\C:\Users\PDvaS\AppData\Local\Temp\mbr.sys []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2008-01-21 2225664]
S3 RFCOMM;Bluetooth-Gerät (RFCOMM-Protokoll-TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-02-21 50688]
S3 SynasUSB;SynasUSB; C:\Windows\system32\drivers\SynasUSB.sys [2006-11-23 18432]
S3 tapvpn;TAP VPN Adapter; C:\Windows\system32\DRIVERS\tapvpn.sys [2008-01-23 27136]
S3 TASCAM_US122144;TASCAM USB 2.0 Audio Device driver; C:\Windows\System32\Drivers\tascusb2.sys [2007-12-18 360448]
S3 TASCAM_US122L_MIDI;TASCAM US-122L WDM MIDI Device; C:\Windows\system32\drivers\tscusb2m.sys [2007-12-18 18944]
S3 TASCAM_US122L_WDM;TASCAM US-122L WDM; C:\Windows\system32\drivers\tscusb2a.sys [2007-12-18 33792]
S3 usbaudio;USB-Audiotreiber (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
S3 usbvideo;USB-Videogerät (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-01-21 11264]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-06-10 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-05 185089]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-08-08 700416]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-03-17 73728]
R2 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2006-04-14 28933976]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2006-12-19 272024]
R2 TuneUp.ProgramStatisticsSvc;@%SystemRoot%\System32\TUProgSt.exe,-1; C:\Windows\System32\TUProgSt.exe [2009-06-01 603904]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-21 21504]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-20 182768]
S2 Samsung Update Plus;Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [2008-05-13 77480]
S3 HssTrayService;Hotspot Shield Tray Service; C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE []
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2006-04-14 87840]
S3 TuneUp.Defrag;@%SystemRoot%\System32\TuneUpDefragService.exe,-1; C:\Windows\System32\TuneUpDefragService.exe [2009-06-01 362240]
S4 MSSQLServerADHelper;Hilfsdienst von SQL Server für Active Directory; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2005-10-13 45272]
S4 SQLBrowser;SQL Server-Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2006-04-14 240416]
-----------------EOF-----------------
|
|
21.09.2009, 17:47
| #19 |
| | TR/Alureon.19456U.3Code:
ATTFilter info.txt logfile of random's system information tool 1.06 2009-09-15 17:01:38
======Uninstall list======
2007 Microsoft Office system-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROHYBRIDR /dll OSETUP.DLL
Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Reader 8.1.0 - Deutsch-->MsiExec.exe /I{AC76BA86-7AD7-1031-7B44-A81000000003}
Agere Systems HDA Modem-->agrsmdel
ALUpdate-->"C:\Program Files\ESTsoft\ALUpdate\unins000.exe"
AMD USB Audio Driver Filter-->MsiExec.exe /X{A3AB35FA-943E-4799-99DC-46EFD59E998F}
Atheros WLAN Client-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04983D37-2202-4295-94A2-8B547C66133F}\setup.exe" -l0x9
ATI PCI Express (3GIO) Filter Driver-->C:\Program Files\InstallShield Installation Information\{E713653C-8312-4BC6-AFC9-ADE1F2F04AB9}\setup.exe -runfromtemp -l0x0009 -removeonly
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
AVS Update Manager 1.0-->"C:\Program Files\AVS4YOU\AVSUpdateManger\unins000.exe"
Business Contact Manager für Outlook 2007-->"C:\Program Files\Microsoft Small Business\Business Contact Manager\SetupBootstrap\Setup.exe" /remove {4cb9f93c-9edc-4be9-ae61-af128ddbecfa}
Business Contact Manager für Outlook 2007-->MsiExec.exe /X{4cb9f93c-9edc-4be9-ae61-af128ddbecfa}
Catalyst Control Center - Branding-->MsiExec.exe /I{2433BAD7-453F-473D-BE81-455E68940DEB}
CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
CorelDRAW Graphics Suite 12-->MsiExec.exe /I{505AFDC0-5E72-4928-8368-5DEA385E3647}
CyberLink DVD Suite-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall
CyberLink Power2Go-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\setup.exe" -uninstall
DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Easy Battery Manager-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6F730513-8688-4C3C-90A3-6B9792CE2EF3}\setup.exe" -l0x9 Remove
Easy Display Manager-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17283B95-21A8-4996-97DA-547A48DB266F}\setup.exe" -l0x9 -removeonly
Easy Network Manager 4.0-->C:\Program Files\InstallShield Installation Information\{308BD058-411C-4AF2-8BF6-A6C7CFD0270D}\setup.exe -runfromtemp -l0x0407
Easy SpeedUp Manager-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EF367AA4-070B-493C-9575-85BE59D789C9}\setup.exe" -l0x9 Remove
FIFA 09-->MsiExec.exe /X{2315B23D-3E21-4920-837D-AE6460934ECB}
Free FLV Converter V 6.23.0-->"C:\Program Files\Free FLV Converter\unins000.exe"
GeoGebra-->"C:\Program Files\GeoGebra\UninstallerData\Uninstaller.exe"
Google Updater-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
imagine digital freedom - Samsung-->MsiExec.exe /X{00AF10C1-44BD-4862-9D7F-24E6BA3E87FD}
Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF}
LabelPrint-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\setup.exe" -uninstall
LightScribe System Software 1.12.37.1-->MsiExec.exe /X{004C5DA2-2051-4D25-94BA-51CF810C91EB}
MAGIX Music Maker Hip Hop Edition 2 4.0.0.10 (D)-->C:\Program Files\MAGIX\MusicMakerHipHopEdition2\instslct.exe
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Marvell Miniport Driver-->C:\Program Files\Marvell\Miniport Driver\Uninst.exe
Medieval CUE Splitter-->MsiExec.exe /I{B96D2269-568B-4CBF-9332-12FAE8B158F7}
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office 2003 Web Components-->MsiExec.exe /I{90A40407-6000-11D3-8CFE-0150048383C9}
Microsoft Office 2007 Primary Interop Assemblies-->MsiExec.exe /X{50120000-1105-0000-0000-0000000FF1CE}
Microsoft Office Access MUI (German) 2007-->MsiExec.exe /X{90120000-0015-0407-0000-0000000FF1CE}
Microsoft Office Excel MUI (German) 2007-->MsiExec.exe /X{90120000-0016-0407-0000-0000000FF1CE}
Microsoft Office Outlook MUI (German) 2007-->MsiExec.exe /X{90120000-001A-0407-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (German) 2007-->MsiExec.exe /X{90120000-0018-0407-0000-0000000FF1CE}
Microsoft Office Professional Hybrid 2007-->MsiExec.exe /X{91120000-0031-0000-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Italian) 2007-->MsiExec.exe /X{90120000-001F-0410-0000-0000000FF1CE}
Microsoft Office Proofing (German) 2007-->MsiExec.exe /X{90120000-002C-0407-0000-0000000FF1CE}
Microsoft Office Publisher MUI (German) 2007-->MsiExec.exe /X{90120000-0019-0407-0000-0000000FF1CE}
Microsoft Office Shared MUI (German) 2007-->MsiExec.exe /X{90120000-006E-0407-0000-0000000FF1CE}
Microsoft Office Small Business Connectivity Components-->MsiExec.exe /X{A939D341-5A04-4E0A-BB55-3E65B386432D}
Microsoft Office Word MUI (German) 2007-->MsiExec.exe /X{90120000-001B-0407-0000-0000000FF1CE}
Microsoft Picture It! Foto Premium 10-->"C:\Program Files\Common Files\Microsoft Shared\Picture It!\RmvSuite.exe" ADDREMOVE=1 SKU=PREM
Microsoft SOAP Toolkit 2.0 SP2-->MsiExec.exe /I{36BEAD11-8577-49AD-9250-E06A50AE87B0}
Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)-->MsiExec.exe /I{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}
Microsoft SQL Server 2005-->"C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\ARPWrapper.exe" /Remove
Microsoft SQL Server Native Client-->MsiExec.exe /I{547DCEC7-DD2A-47E9-82C7-5CF1EAB526DA}
Microsoft SQL Server VSS Writer-->MsiExec.exe /I{2DFB5485-A3EF-4298-9280-4AF80C9F4BE9}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Mozilla Firefox (3.5.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Oxin's Style! 3D Sexvilla 2.058 MOD 300-->"C:\Program Files\Oxin's Style!\3D SexVilla 2\Save\unins000.exe"
PlayCamera-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{804F1285-8CBF-408D-8CDC-D4D40003B2E4}\setup.exe" -l0x7
PowerDirector-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" -uninstall
PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
PowerProducer-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\Setup.exe" -uninstall
Pro Evolution Soccer 2009-->MsiExec.exe /X{A8DB611A-D80E-450D-85F6-3ACDD164BE31}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe" -removeonly
Samsung Magic Doctor-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{32D6A58F-9659-446C-BBFC-E6F2B41F24DC}\Setup.exe" -l0x9 Remove
Samsung Recovery Solution III-->"C:\Program Files\InstallShield Installation Information\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}\setup.exe" -runfromtemp -l0x0007 -removeonly
Samsung Update Plus-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{685707A4-911C-468D-BFC4-64A50E5E3A0C} /l1031
Stronghold 2 Deluxe-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{16D2C649-CBA8-44EE-B730-12584667D487}\setup.exe" -l0x7 -removeonly
SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Syncrosoft Lizenz Kontrolle-->C:\PROGRA~1\SYNCRO~1\UNWISE.EXE C:\PROGRA~1\SYNCRO~1\INSTALL.LOG
Techno4ever Player-->C:\Program Files\T4E\Player\T4E_Uninstaller.exe
Tom Clancy's Splinter Cell Chaos Theory-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{888DD888-82BE-4D85-BCB2-2E042CD3E844}\setup.exe" -l0x7 -removeonly
Tsunami-Filter-Pack-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DCFF9230-22DC-40ED-BBCC-0F260B85734C}\setup.exe" -l0x9
TuneUp Utilities 2009-->MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}
Ultra AVI Converter 4.4.0529-->"C:\Program Files\Ultra AVI Converter\unins000.exe"
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)-->MsiExec.exe /X{07629207-FAA0-4F1A-8092-BF5085BE511F}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Office 2007 (KB934528)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {2B939677-2FFD-48F6-9075-7BF48CB87C80}
Update for Office System 2007 Setup (KB929722)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {D8E9BEBD-655F-467D-8176-CA9959C140A3}
US-122L / US-144 driver-->C:\Windows\usb-audio.deTascam\Setup.exe /l0
User Guide-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}\setup.exe" -l0x9 Remove
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Vimicro UVC Camera-->C:\Program Files\InstallShield Installation Information\{71A51B09-E7D3-11DB-A386-005056C00008}\setup.exe -runfromtemp -l0x0009 -removeonly
Virtual DJ - Atomix Productions-->C:\PROGRA~1\VIRTUA~1\UNWISE.EXE C:\PROGRA~1\VIRTUA~1\INSTALL.LOG
Vista Codec Package-->MsiExec.exe /I{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}
VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe
WIDCOMM Bluetooth Software 6.0.1.6300-->MsiExec.exe /X{03D1988F-469F-4843-8E6E-E5FE9D17889D}
Windows Live Anmelde-Assistent-->MsiExec.exe /I{52B97218-98CB-4B8B-9283-D213C85E1AA4}
Windows Live Call-->MsiExec.exe /I{5FC68772-6D56-41C6-9DF1-24E868198AE6}
Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe
Windows Live Essentials-->MsiExec.exe /I{91E04CA7-0B13-4F8C-AA4D-2A573AC96D19}
Windows Live Messenger-->MsiExec.exe /X{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}
Windows Live OneCare safety scanner-->"C:\Program Files\Windows Live Safety Center\UnInstall.exe"
Windows Live OneCare safety scanner-->MsiExec.exe /X{FE0646A7-19D0-41B4-A2BB-2C35D644270D}
Windows Live-Uploadtool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Zattoo 3.3.3 Beta-->C:\Program Files\Zattoo\uninst.exe
ZoneAlarm-->C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe
======Security center information======
FW: ZoneAlarm Firewall
AS: Windows Defender
AS: SUPERAntiSpyware
======System event log======
Computer Name: PDvaS-PC
Event Code: 7030
Message: Der Dienst "Anwendungserfahrung AeLookupSvcALG" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Record Number: 91354
Source Name: Service Control Manager
Time Written: 20090915140802.000000-000
Event Type: Fehler
User:
Computer Name: PDvaS-PC
Event Code: 7036
Message: Dienst "Windows Modules Installer" befindet sich jetzt im Status "Beendet".
Record Number: 91355
Source Name: Service Control Manager
Time Written: 20090915140835.000000-000
Event Type: Informationen
User:
Computer Name: PDvaS-PC
Event Code: 7036
Message: Dienst "Unterstützung in der Systemsteuerung unter Lösungen für Probleme" befindet sich jetzt im Status "Ausgeführt".
Record Number: 91356
Source Name: Service Control Manager
Time Written: 20090915141115.000000-000
Event Type: Informationen
User:
Computer Name: PDvaS-PC
Event Code: 7036
Message: Dienst "Unterstützung in der Systemsteuerung unter Lösungen für Probleme" befindet sich jetzt im Status "Beendet".
Record Number: 91357
Source Name: Service Control Manager
Time Written: 20090915141115.000000-000
Event Type: Informationen
User:
Computer Name: PDvaS-PC
Event Code: 7036
Message: Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" befindet sich jetzt im Status "Beendet".
Record Number: 91358
Source Name: Service Control Manager
Time Written: 20090915141745.000000-000
Event Type: Informationen
User:
=====Application event log=====
Computer Name: PDvaS-PC
Event Code: 4113
Message: AntiVir erkannte in der Datei C:\Windows\System32\gasfkydfrximfi.dll verdächtigen Code mit der Bezeichnung 'TR/Alureon.19456U.3'!
Record Number: 34681
Source Name: Avira AntiVir
Time Written: 20090915150119.000000-000
Event Type: Warnung
User: NT-AUTORITÄT\SYSTEM
Computer Name: PDvaS-PC
Event Code: 4113
Message: AntiVir erkannte in der Datei C:\Windows\System32\gasfkydfrximfi.dll verdächtigen Code mit der Bezeichnung 'TR/Alureon.19456U.3'!
Record Number: 34682
Source Name: Avira AntiVir
Time Written: 20090915150124.000000-000
Event Type: Warnung
User: NT-AUTORITÄT\SYSTEM
Computer Name: PDvaS-PC
Event Code: 4113
Message: AntiVir erkannte in der Datei C:\Windows\System32\gasfkydfrximfi.dll verdächtigen Code mit der Bezeichnung 'TR/Alureon.19456U.3'!
Record Number: 34683
Source Name: Avira AntiVir
Time Written: 20090915150133.000000-000
Event Type: Warnung
User: NT-AUTORITÄT\SYSTEM
Computer Name: PDvaS-PC
Event Code: 5
Message: Unsupported service control request (see data below)
Record Number: 34684
Source Name: LightScribeService
Time Written: 20090915150137.000000-000
Event Type: Informationen
User:
Computer Name: PDvaS-PC
Event Code: 4113
Message: AntiVir erkannte in der Datei C:\Windows\System32\gasfkydfrximfi.dll verdächtigen Code mit der Bezeichnung 'TR/Alureon.19456U.3'!
Record Number: 34685
Source Name: Avira AntiVir
Time Written: 20090915150217.000000-000
Event Type: Warnung
User: NT-AUTORITÄT\SYSTEM
=====Security event log=====
Computer Name: PDvaS-PC
Event Code: 5038
Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.
Dateiname: \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 23953
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090915150136.151398-000
Event Type: Überwachung gescheitert
User:
Computer Name: PDvaS-PC
Event Code: 5038
Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.
Dateiname: \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 23954
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090915150136.198198-000
Event Type: Überwachung gescheitert
User:
Computer Name: PDvaS-PC
Event Code: 5038
Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.
Dateiname: \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 23955
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090915150136.260598-000
Event Type: Überwachung gescheitert
User:
Computer Name: PDvaS-PC
Event Code: 5038
Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.
Dateiname: \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 23956
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090915150136.322998-000
Event Type: Überwachung gescheitert
User:
Computer Name: PDvaS-PC
Event Code: 5038
Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.
Dateiname: \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys
Record Number: 23957
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090915150136.385398-000
Event Type: Überwachung gescheitert
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Microsoft SQL Server\90\Tools\binn
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=17
"PROCESSOR_IDENTIFIER"=x86 Family 17 Model 3 Stepping 1, AuthenticAMD
"PROCESSOR_REVISION"=0301
"NUMBER_OF_PROCESSORS"=2
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"tvdumpflags"=8
-----------------EOF-----------------
|
|
21.09.2009, 18:06
| #20 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | TR/Alureon.19456U.3 Das sieht unauffällig aus. Noch weitere Probleme?
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
21.09.2009, 20:09
| #21 |
| | TR/Alureon.19456U.3 Hab keine weiteren Probleme mehr. War mir halt nicht wirklich sicher ob der Trojaner wirklich entfernt wurde. Also kann ich jetzt wieder sorglos abends ins Bett gehen? |
|
21.09.2009, 20:38
| #22 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | TR/Alureon.19456U.3 Naja, was heißt sorglos. Die Logfiles sind lediglich unauffällig und das Problem ist auch behoben. Ein Restrisiko bleibt bei einer Bereinigung immer. Wenn man wirklich eine garantierte restlose Schädlingsentfernung will, hilft nur ein Neuaufsetzen des Systems inkl. Formatierung.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
21.09.2009, 20:56
| #23 |
| | TR/Alureon.19456U.3 hmm...naja Neuaufsetzen wollte ich jetzt eigentlich nich. Ich denke wir belassen es hierbei und ich gehe dieses Restrisiko ein. Also vielen Dank für deine Hilfe!  Mfg PDvaS |
|
| Themen zu TR/Alureon.19456U.3 |
| 32 bit, agere systems, antivir, antivir guard, avgntflt.sys, avira, bho, browser, c:\windows\temp, desktop, device driver, diagnostics, error, google, hdaudio.sys, hijack, hijackthis, home, home premium, hotspot, hotspot shield, installation, liveupdate.exe, local\temp, mozilla, mssql, nodrives, pc läuft, plug-in, programdata, programm, proxy, realtek, registry, secur, server, software, start menu, svchost.exe, system, tuneup.defrag, tuprogst.exe, usb 2.0, usbvideo.sys, virus, vista, vista 32, vista 32 bit, windows, windows\temp, wireless lan, zone alarm |
Linear-Darstellung
