TR/Dldr.Swizzor.Gen - Trojan - Antivir meldet 140 Funde

Believe

Vorab antivir hat ca 140 funde gehabt (rechner 1woche alt) das meiste war dies hier
TR/Dldr.Swizzor.Gen - Trojan
hab gelessen das dieser Trojaner sehr schwer zu löschen sei deswegen wollte ich eure meinung hören ob der rechner nu sauber ist thx im Vorraus
ach ps:
ccleaner und Malwarebytes sind durch gelaufen


Logfile of random's system information tool 1.06 (written by random/random)
Run by ***** at 2009-10-20 03:12:39
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 35 GB (39%) free of 90 GB
Total RAM: 3071 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 03:12:48, on 20.10.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Vtune\TBPanel.exe
D:\programme\steam\steam.exe
C:\Programme\ICQ6.5\ICQ.exe
C:\Programme\Skype\Phone\Skype.exe
C:\Programme\Messenger\msmsgs.exe
C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
C:\Programme\Skype\Plugin Manager\skypePM.exe
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Programme\Lavasoft\Ad-Aware\AAWTray.exe
C:\Dokumente und Einstellungen\****\Desktop\RSIT.exe
C:\Programme\trend micro\Admin.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ Malwarebytes Anti-Malware (reboot)] "C:\Programme\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TBPanel] C:\Programme\Vtune\TBPanel.exe /A
O4 - HKCU\..\Run: [Steam] "d:\programme\steam\steam.exe" -silent
O4 - HKCU\..\Run: [ICQ] "C:\Programme\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1255510349456
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Programme\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5444 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2009-10-15 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-15 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-05-21 17881600]
"JMB36X IDE Setup"=C:\WINDOWS\RaidTool\xInsIDE.exe [2007-03-20 36864]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-05-01 86016]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-05-01 13750272]
"avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"Adobe Reader Speed Launcher"=C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"SunJavaUpdateSched"=C:\Programme\Java\jre6\bin\jusched.exe [2009-10-15 149280]
" Malwarebytes Anti-Malware (reboot)"=C:\Programme\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe [2009-09-10 420176]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"TBPanel"=C:\Programme\Vtune\TBPanel.exe [2009-05-12 2158592]
"Steam"=d:\programme\steam\steam.exe [2009-10-15 1217784]
"ICQ"=C:\Programme\ICQ6.5\ICQ.exe [2009-03-01 172792]
"Skype"=C:\Programme\Skype\Phone\Skype.exe [2009-10-09 25623336]
"MSMSGS"=C:\Programme\Messenger\msmsgs.exe [2008-04-14 1695232]
"Octoshape Streaming Services"=C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [2009-01-08 70936]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Programme\Steam\Steam.exe"="D:\Programme\Steam\Steam.exe:*:Enabled:Steam"
"C:\Programme\ICQ6.5\ICQ.exe"="C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"D:\Programme\Steam\steamapps\ice_man633\counter-strike\hl.exe"="D:\Programme\Steam\steamapps\ice_man633\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Programme\Skype\Plugin Manager\skypePM.exe"="C:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Programme\Java\jre6\bin\java.exe"="C:\Programme\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"D:\Programme\Steam\steamapps\common\left 4 dead\left4dead.exe"="D:\Programme\Steam\steamapps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead"
"C:\Programme\Skype\Phone\Skype.exe"="C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2009-12-15 03:57:47 ----SHD---- C:\Config.Msi
2009-12-02 03:35:13 ----D---- C:\Programme\Aequitas File Checker
2009-11-30 23:14:28 ----D---- C:\Programme\Gemeinsame Dateien\Adobe
2009-11-30 23:14:28 ----D---- C:\Programme\Adobe
2009-11-24 21:19:45 ----D---- C:\Programme\Java
2009-11-20 21:23:35 ----A---- C:\lopR.txt
2009-11-20 01:18:44 ----D---- C:\rsit
2009-11-19 18:40:47 ----D---- C:\Programme\Trend Micro
2009-11-19 18:22:57 ----A---- C:\OS_v.txt
2009-11-19 18:22:57 ----A---- C:\cleannavi.txt
2009-11-11 02:06:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-11-11 02:06:46 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-11-11 02:06:41 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-11-11 02:06:37 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-11-11 02:06:32 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-11-11 02:06:28 ----HDC---- C:\WINDOWS\$NtUninstallKB935448$
2009-11-11 02:06:23 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-11-11 02:06:07 ----HDC---- C:\WINDOWS\$NtUninstallKB972260$
2009-11-11 02:06:01 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-11-11 02:05:57 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-11-11 02:05:52 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-11-11 02:05:38 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-11-11 02:05:32 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-11-11 02:05:28 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-11-11 02:05:24 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-11-11 02:05:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-11-11 02:05:13 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-11-11 02:04:52 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-11-11 02:04:47 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-11-11 02:04:43 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-11-11 02:04:37 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-11-11 02:04:33 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-11-11 02:04:14 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-11-11 02:04:07 ----HDC---- C:\WINDOWS\$NtUninstallKB959772_WM11$
2009-11-11 02:04:02 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-11-11 02:03:56 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-11-11 02:03:52 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-11-11 02:03:47 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-11-11 02:03:43 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-11-11 02:03:38 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-11-11 02:03:34 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-11-11 02:03:29 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-11-11 02:03:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-11-11 02:03:12 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-11-11 02:03:07 ----HDC---- C:\WINDOWS\$NtUninstallKB936782_WMP11$
2009-11-11 02:02:39 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-11-10 11:48:37 ----SHD---- C:\found.001
2009-11-10 10:34:26 ----D---- C:\WINDOWS\system32\CatRoot_bak
2009-11-01 19:41:21 ----D---- C:\Programme\IrfanView
2009-10-28 16:07:50 ----D---- C:\Programme\Gemeinsame Dateien\Skype
2009-10-28 16:07:47 ----RD---- C:\Programme\Skype
2009-10-20 01:47:35 ----D---- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Malwarebytes
2009-10-20 01:47:30 ----D---- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Malwarebytes
2009-10-20 01:47:29 ----D---- C:\Programme\Malwarebytes' Anti-Malware
2009-10-20 01:42:04 ----D---- C:\Programme\CCleaner
2009-10-19 05:27:13 ----SD---- C:\Programme\HLSW
2009-10-19 05:27:13 ----D---- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\HLSW
2009-10-17 23:54:46 ----D---- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Octoshape
2009-10-15 23:09:53 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-10-15 02:43:11 ----A---- C:\WINDOWS\system32\javaws.exe
2009-10-15 02:43:11 ----A---- C:\WINDOWS\system32\javaw.exe
2009-10-15 02:43:11 ----A---- C:\WINDOWS\system32\java.exe
2009-10-15 02:43:11 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-10-15 02:42:06 ----D---- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Sun
2009-10-15 01:36:28 ----D---- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Adobe
2009-10-15 01:35:21 ----D---- C:\Programme\ICQ6.5
2009-10-15 01:21:23 ----D---- C:\Lop SD
2009-10-14 22:38:47 ----D---- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\skypePM
2009-10-14 22:32:14 ----D---- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\teamspeak2
2009-10-14 22:31:06 ----D---- C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\Skype
2009-10-14 22:29:58 ----D---- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Skype
2009-10-14 16:23:33 ----A---- C:\WINDOWS\system32\h323log.txt
2009-10-14 16:21:58 ----A---- C:\WINDOWS\system32\usbui.dll
2009-10-14 16:19:12 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-10-14 16:19:11 ----A---- C:\WINDOWS\ODBCINST.INI
2009-10-14 16:19:04 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-10-14 16:19:04 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-10-14 16:19:04 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-10-14 16:19:03 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-10-14 16:19:03 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-10-14 16:19:03 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-10-14 16:19:03 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-10-14 16:19:02 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-10-14 16:19:02 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-10-14 16:19:02 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-10-14 16:19:02 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-10-14 16:19:02 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-10-14 16:19:02 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-10-14 16:19:02 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-10-14 16:19:02 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-10-14 16:19:01 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-10-14 16:19:01 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-10-14 16:19:01 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-10-14 16:19:01 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-10-14 16:19:01 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-10-14 16:19:01 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-10-14 16:19:01 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-10-14 16:18:59 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-10-14 16:18:59 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-10-14 16:18:59 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-10-14 16:18:59 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-10-14 16:18:59 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-10-14 16:18:58 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-10-14 16:18:55 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-10-14 16:18:55 ----A---- C:\WINDOWS\system32\irclass.dll
2009-10-14 16:18:55 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-10-14 16:18:55 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-10-14 16:18:55 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-10-14 16:18:53 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-10-14 16:18:53 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-10-14 16:18:52 ----A---- C:\WINDOWS\system32\batt.dll
2009-10-14 16:18:52 ----A---- C:\WINDOWS\NOTEPAD.EXE
2009-10-14 16:18:51 ----A---- C:\WINDOWS\system32\storprop.dll
2009-10-14 16:18:43 ----ASH---- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\desktop.ini