zufällige .exe dateien

basti51

-sorry irgendwas lief hier extrem schief-

LOG:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Admin at 2009-09-29 19:31:50
Microsoft Windows XP Professional Service Pack 3
System drive C: has 8 GB (55%) free of 15 GB
Total RAM: 3327 MB (84% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:31:56, on 29.09.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Comodo\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programme\Mozilla Firefox\firefox.exe
C:\Programme\Winamp\winampa.exe
C:\Programme\Comodo\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Miranda IM\miranda32.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Basti\RSIT.exe
C:\Programme\HijackThis\Admin.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=C:\WINDOWS\SYSTEM32\Userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Programme\Comodo\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [ Malwarebytes Anti-Malware (reboot)] "C:\Programme\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Miranda32.lnk = C:\Programme\Miranda IM\miranda32.exe
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Programme\Comodo\COMODO Internet Security\cmdagent.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe

--
End of file - 4080 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-09-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-09-11 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-08-14 18702336]
"WinampAgent"=C:\Programme\Winamp\winampa.exe [2009-07-01 37888]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-08-13 98304]
"COMODO Internet Security"=C:\Programme\Comodo\COMODO Internet Security\cfp.exe [2009-09-18 1799952]
" Malwarebytes Anti-Malware (reboot)"=C:\Programme\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON Stylus D92 Series]
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBZE.EXE [2006-09-27 139264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-09-11 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"WMPNetworkSvc"=3
"JavaQuickStarterService"=2
"TuneUp.ProgramStatisticsSvc"=2

C:\Documents and Settings\Admin\Start Menu\Programs\Startup
Miranda32.lnk - C:\Programme\Miranda IM\miranda32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-08-14 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2009-08-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\Miranda IM\miranda32.exe"="C:\Programme\Miranda IM\miranda32.exe:*:Enabled:Miranda IM"
"D:\Programme\Steam\SteamApps\common\left 4 dead\left4dead.exe"="D:\Programme\Steam\SteamApps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead"
"D:\Programme\uTorrent\uTorrent.exe"="D:\Programme\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\Programme\Dead Space\Dead Space.exe"="D:\Programme\Dead Space\Dead Space.exe:*:Enabledead Space ™"
"D:\Programme\Steam\SteamApps\szeppe\team fortress 2\hl2.exe"="D:\Programme\Steam\SteamApps\szeppe\team fortress 2\hl2.exe:*:Enabled:hl2"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Programme\Mozilla Firefox\firefox.exe"="C:\Programme\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"D:\Programme\RESIDENT EVIL 5\RE5DX9.EXE"="D:\Programme\RESIDENT EVIL 5\RE5DX9.EXE:*:Enabled:RESIDENT EVIL 5 (DX9)"
"D:\Programme\RESIDENT EVIL 5\RE5DX10.EXE"="D:\Programme\RESIDENT EVIL 5\RE5DX10.EXE:*:Enabled:RESIDENT EVIL 5 (DX10)"
"D:\Programme\Steam\steam.exe"="D:\Programme\Steam\steam.exe:*:Enabled:Steam"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2009-09-29 19:20:19 ----D---- C:\rsit
2009-09-29 19:00:53 ----D---- C:\Documents and Settings\Admin\Application Data\Malwarebytes
2009-09-29 19:00:46 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-09-29 16:37:15 ----D---- C:\WINDOWS\ERUNT
2009-09-29 16:36:07 ----A---- C:\WINDOWS\ntbtlog.txt
2009-09-27 17:57:24 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2009-09-18 15:13:52 ----D---- C:\WINDOWS\system32\appmgmt
2009-09-16 12:51:41 ----A---- C:\WINDOWS\system32\E_DCINST.DLL
2009-09-16 12:51:40 ----A---- C:\WINDOWS\system32\E_FLBBZE.DLL
2009-09-16 12:51:40 ----A---- C:\WINDOWS\system32\E_FD4BBZE.DLL
2009-09-16 12:51:10 ----D---- C:\Program Files\EPSON
2009-09-16 12:51:08 ----D---- C:\Documents and Settings\All Users\Application Data\EPSON
2009-09-12 14:58:06 ----D---- C:\Documents and Settings\All Users\Application Data\ATI
2009-09-12 14:55:32 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2009-09-12 14:49:13 ----A---- C:\WINDOWS\WININIT.INI
2009-09-11 23:21:36 ----D---- C:\WINDOWS\system32\Futuremark
2009-09-11 23:21:35 ----D---- C:\Program Files\Common Files\Futuremark Shared
2009-09-11 23:21:13 ----D---- C:\WINDOWS\Sun
2009-09-11 23:20:17 ----A---- C:\WINDOWS\system32\javaws.exe
2009-09-11 23:20:17 ----A---- C:\WINDOWS\system32\javaw.exe
2009-09-11 23:20:17 ----A---- C:\WINDOWS\system32\java.exe
2009-09-11 23:20:17 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-09-11 23:20:06 ----D---- C:\Program Files\Java
2009-09-11 23:19:34 ----D---- C:\Documents and Settings\Admin\Application Data\Sun
2009-09-11 18:47:01 ----D---- C:\Program Files\OpenAL
2009-09-11 18:47:01 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2009-09-11 18:46:59 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2009-09-11 14:00:53 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2009-09-11 14:00:50 ----D---- C:\Program Files\DAEMON Tools Toolbar
2009-09-11 14:00:37 ----D---- C:\Documents and Settings\Admin\Application Data\DAEMON Tools Lite
2009-09-11 13:51:14 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Pro
2009-09-07 14:29:41 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-09-07 14:29:13 ----D---- C:\WINDOWS\SxsCaPendDel
2009-09-07 14:26:03 ----D---- C:\WINDOWS\system32\xlive
2009-09-07 14:26:02 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2009-09-06 19:59:21 ----RHD---- C:\Documents and Settings\Admin\Application Data\SecuROM
2009-09-06 19:47:22 ----D---- C:\Program Files\AMD
2009-09-06 19:46:11 ----D---- C:\WINDOWS\system32\AGEIA
2009-09-06 19:46:11 ----D---- C:\Program Files\AGEIA Technologies
2009-09-06 19:45:52 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-09-06 19:30:01 ----D---- C:\Documents and Settings\Admin\Application Data\WinRAR
2009-09-06 19:14:14 ----D---- C:\Program Files\WinRAR
2009-09-01 18:23:12 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2009-09-01 18:23:02 ----D---- C:\Documents and Settings\Admin\Application Data\id Software
2009-09-01 18:23:00 ----D---- C:\WINDOWS\system32\LogFiles
2009-09-01 18:23:00 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2009-09-01 18:23:00 ----A---- C:\WINDOWS\system32\pbsvc.exe
2009-09-01 18:22:51 ----D---- C:\Documents and Settings\All Users\Application Data\id Software
2009-08-30 19:13:48 ----D---- C:\Documents and Settings\Admin\Application Data\DAEMON Tools Pro
2009-08-30 17:24:58 ----D---- C:\Documents and Settings\Admin\Application Data\vlc
2009-08-30 17:07:00 ----D---- C:\Documents and Settings\Admin\Application Data\uTorrent
2009-08-30 17:02:41 ----D---- C:\WINDOWS\pss
2009-08-30 17:00:40 ----D---- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2009-08-30 16:56:39 ----A---- C:\WINDOWS\ODBC.INI
2009-08-30 16:56:36 ----A---- C:\WINDOWS\system32\mdimon.dll
2009-08-30 16:55:55 ----D---- C:\Program Files\Common Files\DESIGNER
2009-08-30 16:55:49 ----D---- C:\WINDOWS\SHELLNEW
2009-08-30 16:55:47 ----D---- C:\Program Files\Microsoft.NET
2009-08-30 16:40:09 ----A---- C:\WINDOWS\system32\TUProgSt.exe
2009-08-30 16:40:08 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2009-08-30 16:40:07 ----A---- C:\WINDOWS\system32\TuneUpDefragService.exe
2009-08-30 16:38:59 ----D---- C:\Documents and Settings\Admin\Application Data\TuneUp Software
2009-08-30 16:38:49 ----D---- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2009-08-30 16:37:58 ----SHD---- C:\Documents and Settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-08-30 16:31:00 ----A---- C:\WINDOWS\system32\h323log.txt
2009-08-30 16:27:15 ----D---- C:\Program Files\Common Files\Adobe
2009-08-30 16:26:45 ----A---- C:\WINDOWS\system32\usbui.dll
2009-08-30 16:25:25 ----A---- C:\WINDOWS\imsins.BAK
2009-08-30 16:25:22 ----SHD---- C:\WINDOWS\Installer
2009-08-30 16:25:22 ----D---- C:\Program Files\Common Files\ODBC
2009-08-30 16:25:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-08-30 16:25:22 ----A---- C:\WINDOWS\ODBCINST.INI
2009-08-30 16:25:18 ----D---- C:\Program Files\Common Files\SpeechEngines
2009-08-30 16:25:17 ----RD---- C:\Program Files
2009-08-30 16:25:17 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-08-30 16:25:17 ----D---- C:\Program Files\Common Files
2009-08-30 16:25:14 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-08-30 16:25:13 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-08-30 16:25:13 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-08-30 16:25:11 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-08-30 16:25:08 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-08-30 16:25:08 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-08-30 16:25:08 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-08-30 16:25:08 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-08-30 16:25:08 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-08-30 16:25:08 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-08-30 16:25:08 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-08-30 16:25:06 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-08-30 16:25:06 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-08-30 16:25:06 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-08-30 16:25:06 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-08-30 16:25:06 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-08-30 16:25:04 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-08-30 16:25:02 ----A---- C:\WINDOWS\system32\irclass.dll
2009-08-30 16:25:01 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-08-30 16:25:01 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-08-30 16:25:01 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-08-30 16:25:01 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-08-30 16:24:58 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-08-30 16:24:58 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-08-30 16:24:58 ----A---- C:\WINDOWS\system32\batt.dll
2009-08-30 16:24:57 ----A---- C:\WINDOWS\system32\storprop.dll
2009-08-30 16:24:57 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-08-30 16:24:49 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2009-08-30 16:22:54 ----D---- C:\WINDOWS\system32\CatRoot2
2009-08-30 16:22:54 ----D---- C:\WINDOWS\system32\CatRoot
2009-08-30 16:22:48 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2009-08-30 16:22:23 ----D---- C:\Documents and Settings
2009-08-30 16:22:22 ----SHD---- C:\System Volume Information
2009-08-30 16:17:15 ----SD---- C:\WINDOWS\Offline Web Pages
2009-08-30 16:17:15 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-08-30 16:17:15 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-08-30 16:17:15 ----RSD---- C:\WINDOWS\Fonts
2009-08-30 16:17:15 ----RD---- C:\WINDOWS\Web
2009-08-30 16:17:15 ----HD---- C:\WINDOWS\inf
2009-08-30 16:17:15 ----D---- C:\WINDOWS\WinSxS
2009-08-30 16:17:15 ----D---- C:\WINDOWS\WBEM
2009-08-30 16:17:15 ----D---- C:\WINDOWS\twain_32
2009-08-30 16:17:15 ----D---- C:\WINDOWS\Temp
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\wins
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\wbem
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\usmt
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\spool
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\ShellExt
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\Setup
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\scripting
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\ras
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\PreInstall
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\oobe
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\npp
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\mui
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\Macromed
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\inetsrv
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\IME
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\icsxml
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\ias
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\export
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\en-US
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\en
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\drivers
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\dhcp
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\config
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\3com_dmi
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32\1033
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system32
2009-08-30 16:17:15 ----D---- C:\WINDOWS\system
2009-08-30 16:17:15 ----D---- C:\WINDOWS\SoftwareDistribution
2009-08-30 16:17:15 ----D---- C:\WINDOWS\security
2009-08-30 16:17:15 ----D---- C:\WINDOWS\Resources
2009-08-30 16:17:15 ----D---- C:\WINDOWS\repair
2009-08-30 16:17:15 ----D---- C:\WINDOWS\Provisioning
2009-08-30 16:17:15 ----D---- C:\WINDOWS\PeerNet
2009-08-30 16:17:15 ----D---- C:\WINDOWS\pchealth
2009-08-30 16:17:15 ----D---- C:\WINDOWS\Network Diagnostic
2009-08-30 16:17:15 ----D---- C:\WINDOWS\mui
2009-08-30 16:17:15 ----D---- C:\WINDOWS\msapps
2009-08-30 16:17:15 ----D---- C:\WINDOWS\msagent
2009-08-30 16:17:15 ----D---- C:\WINDOWS\Media
2009-08-30 16:17:15 ----D---- C:\WINDOWS\L2Schemas
2009-08-30 16:17:15 ----D---- C:\WINDOWS\java
2009-08-30 16:17:15 ----D---- C:\WINDOWS\ime
2009-08-30 16:17:15 ----D---- C:\WINDOWS\Help
2009-08-30 16:17:15 ----D---- C:\WINDOWS\ehome
2009-08-30 16:17:15 ----D---- C:\WINDOWS\Driver Cache
2009-08-30 16:17:15 ----D---- C:\WINDOWS\Debug
2009-08-30 16:17:15 ----D---- C:\WINDOWS\Cursors
2009-08-30 16:17:15 ----D---- C:\WINDOWS\Connection Wizard
2009-08-30 16:17:15 ----D---- C:\WINDOWS\Config
2009-08-30 16:17:15 ----D---- C:\WINDOWS\AppPatch
2009-08-30 16:17:15 ----D---- C:\WINDOWS\addins
2009-08-30 16:17:15 ----D---- C:\WINDOWS
2009-08-30 15:51:49 ----D---- C:\Documents and Settings\All Users\Application Data\Comodo
2009-08-30 15:51:48 ----A---- C:\WINDOWS\system32\guard32.dll
2009-08-30 15:51:40 ----HD---- C:\Program Files\InstallShield Installation Information
2009-08-30 15:51:40 ----D---- C:\Program Files\ATI Technologies
2009-08-30 15:51:24 ----D---- C:\Program Files\Common Files\InstallShield
2009-08-30 15:47:43 ----D---- C:\Documents and Settings\Admin\Application Data\Macromedia
2009-08-30 15:47:43 ----D---- C:\Documents and Settings\Admin\Application Data\Adobe
2009-08-30 15:46:01 ----D---- C:\Documents and Settings\Admin\Application Data\Winamp
2009-08-30 15:45:14 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-08-30 15:45:13 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-08-30 15:45:13 ----D---- C:\Program Files\Intel
2009-08-30 15:42:14 ----D---- C:\WINDOWS\system32\NtmsData
2009-08-30 15:41:07 ----D---- C:\Documents and Settings\Admin\Application Data\Identities
2009-08-30 15:41:05 ----HD---- C:\Program Files\Uninstall Information
2009-08-30 15:41:02 ----SD---- C:\Documents and Settings\Admin\Application Data\Microsoft
2009-08-30 15:41:02 ----ASH---- C:\Documents and Settings\Admin\Application Data\desktop.ini
2009-08-30 15:40:05 ----D---- C:\WINDOWS\Prefetch
2009-08-30 15:40:04 ----SD---- C:\WINDOWS\system32\Microsoft
2009-08-30 15:40:04 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-30 15:37:21 ----D---- C:\WINDOWS\system32\xircom
2009-08-30 15:37:21 ----D---- C:\Program Files\xerox
2009-08-30 15:37:21 ----D---- C:\Program Files\microsoft frontpage
2009-08-30 15:37:02 ----A---- C:\WINDOWS\control.ini
2009-08-30 15:37:02 ----A---- C:\AUTOEXEC.BAT
2009-08-30 15:36:52 ----A---- C:\WINDOWS\OEWABLog.txt
2009-08-30 15:36:48 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-08-30 15:36:09 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-08-30 15:36:07 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-08-30 15:36:03 ----HD---- C:\Program Files\WindowsUpdate
2009-08-30 15:35:41 ----D---- C:\WINDOWS\system32\DirectX
2009-08-30 15:35:31 ----A---- C:\WINDOWS\system32\atrace.dll
2009-08-30 15:35:28 ----A---- C:\WINDOWS\system32\desktop.ini
2009-08-30 15:35:28 ----A---- C:\WINDOWS\desktop.ini
2009-08-30 15:35:20 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-08-30 15:35:18 ----A---- C:\WINDOWS\system32\acctres.dll
2009-08-30 15:35:17 ----D---- C:\Program Files\Common Files\Services
2009-08-30 15:35:14 ----SD---- C:\WINDOWS\Tasks
2009-08-30 15:35:14 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-08-30 15:35:13 ----D---- C:\Program Files\Common Files\MSSoap