Log zum Auswerten (Trojanerverdacht)

WasteLchen

======List of files/folders modified in the last 2 months======

2009-09-19 21:53:39 ----D---- C:\WINDOWS\system32\drivers
2009-09-19 21:53:37 ----D---- C:\Programme
2009-09-19 21:51:52 ----D---- C:\Programme\Mozilla Firefox
2009-09-19 21:50:48 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
2009-09-19 21:50:27 ----D---- C:\WINDOWS\Temp
2009-09-19 21:50:27 ----D---- C:\WINDOWS\Debug
2009-09-19 21:50:27 ----D---- C:\WINDOWS
2009-09-19 20:15:17 ----RSD---- C:\WINDOWS\Fonts
2009-09-19 20:15:17 ----D---- C:\WINDOWS\system32
2009-09-19 20:15:17 ----D---- C:\WINDOWS\Cursors
2009-09-19 20:15:12 ----D---- C:\Programme\Windows Media Player
2009-09-19 20:15:04 ----D---- C:\WINDOWS\system32\Restore
2009-09-19 20:14:54 ----D---- C:\Programme\Movie Maker
2009-09-19 20:14:52 ----D---- C:\Programme\Windows NT
2009-09-19 20:14:52 ----D---- C:\Programme\Internet Explorer
2009-09-19 20:03:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-09-19 20:00:25 ----D---- C:\WINDOWS\system32\CatRoot2
2009-09-19 19:59:37 ----SHD---- C:\WINDOWS\CSC
2009-09-19 19:22:29 ----D---- C:\Programme\JDownloader 0.4.936
2009-09-19 14:04:01 ----N---- C:\WINDOWS\SchedLgU.Txt
2009-09-18 14:29:33 ----SHD---- C:\WINDOWS\Installer
2009-09-17 20:56:46 ----D---- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\HLSW
2009-09-17 19:30:38 ----D---- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Apple Computer
2009-09-17 18:25:13 ----HD---- C:\WINDOWS\inf
2009-09-17 18:25:12 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-09-17 18:24:32 ----D---- C:\Programme\Gemeinsame Dateien\Apple
2009-09-15 23:41:42 ----D---- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Adobe
2009-09-15 15:05:25 ----A---- C:\WINDOWS\win.ini
2009-09-09 17:52:59 ----D---- C:\Musik
2009-09-07 19:07:08 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-09-07 19:07:01 ----D---- C:\WINDOWS\WinSxS
2009-09-06 19:54:15 ----AD---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
2009-09-04 13:12:12 ----D---- C:\Programme\Safari
2009-09-04 01:40:39 ----D---- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Winamp
2009-09-04 01:36:48 ----D---- C:\Programme\Winamp
2009-09-03 22:31:25 ----D---- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\teamspeak2
2009-09-02 20:07:09 ----D---- C:\Programme\Left 4 Dead
2009-08-31 12:39:09 ----RSH---- C:\boot.ini
2009-08-31 12:39:09 ----A---- C:\WINDOWS\system.ini
2009-08-24 18:23:47 ----D---- C:\Programme\Gemeinsame Dateien
2009-08-22 22:32:05 ----D---- C:\Bilder
2009-08-22 04:26:16 ----A---- C:\WINDOWS\system32\uxtheme.dll
2009-08-18 00:08:45 ----D---- C:\WINDOWS\security
2009-08-17 16:15:47 ----D---- C:\CS
2009-08-17 15:54:14 ----D---- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\uTorrent
2009-08-17 15:47:08 ----D---- C:\Filme
2009-07-23 16:47:48 ----HD---- C:\Programme\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 36352]
R1 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [2008-05-10 25244]
R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-04-27 96104]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-06-15 28520]
R1 WmiAcpi;Microsoft Windows-Verwaltungsschnittstelle für ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-08-05 55656]
R2 NPF;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2008-12-23 50704]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-10-17 2642944]
R3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 15295]
R3 ESLvnic1;ESLvnic Virtual Network 32 Bit; C:\WINDOWS\system32\DRIVERS\ESLvnic.sys [2009-09-01 23512]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Microsoft UAA-Bustreiber für High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-04-14 5069312]
R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-05-10 12288]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-05-31 96896]
R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2-aktivierter Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Miniporttreiber für Microsoft USB Open Host-Controller; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys []
S3 aex5tg4z;aex5tg4z; C:\WINDOWS\system32\drivers\aex5tg4z.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 nm;Netzwerkmonitortreiber; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-13 40320]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-06-05 39424]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2008-05-10 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-05-10 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Programme\Avira\AntiVir Desktop\sched.exe [2009-06-15 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2009-08-05 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-06-05 144712]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-10-17 495616]
R2 Bonjour Service;Bonjour-Dienst; C:\Programme\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-03-05 152984]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET-Zustandsdienst; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-06-18 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 iPod Service;iPod-Dienst; C:\Programme\iPod\bin\iPodService.exe [2009-09-08 545568]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Programme\WinPcap\rpcapd.exe [2008-12-23 117264]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

-----------------EOF-----------------