Hallo,

ich habe seit ca. 4 Tagen einen oder mehrere sehr lästige Viren/Trojaner auf meinem Rechner und werde sie nichtmehr los. Ich habe mehrere scans mit verschieden antivir und antispyware-Programmen durchlaufen lassen hat aber garnichts gebracht. Die Programme habe ich dann alle wieder Deinstalliert. Dann bin ich über Google auf dieses Forum gekommen und habe mich ein wenig umgeschaut, die Programme HijackThis, Ccleaner, Rsit und Malwarebytes' Anti-Malware installiert und durchlaufen lassen.
Auserdem sind in meinem Taskmanger sehr viele Prozesse am laufen obwohl ich vor einer Woche erst alles neu gemacht habe. Es sind auffällig viele svchost.exe dabei und anderer müll. Habe schon den autostart über Ausführen/regedit geleert aber nach neustart ist fast alles wieder da und das sind mit sicherheit nicht alles Prozesse die benötigt werden!

Hier die Logs:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:23:25, on 29.12.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Programme\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Prog.Install\RSIT.exe
C:\Programme\trend micro\*****.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Google Sidewiki... - res://C:\Programme\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1261590193666
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Programme\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Programme\Spyware Doctor\pctsSvc.exe

--
End of file - 3149 bytes

Logfile of random's system information tool 1.06 (written by random/random)
Run by ***** at 2009-12-29 00:23:24
Microsoft Windows XP Professional Service Pack 3
System drive C: has 811 GB (85%) free of 954 GB
Total RAM: 3070 MB (84% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:23:25, on 29.12.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Programme\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Prog.Install\RSIT.exe
C:\Programme\trend micro\*****.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Google Sidewiki... - res://C:\Programme\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/Driver...reqlab_nvd.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1261590193666
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/ge...sh/swflash.cab
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Programme\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Programme\Spyware Doctor\pctsSvc.exe

--
End of file - 3149 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-03-26 16859136]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-11-20 12669544]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\World of Warcraft\World of Warcraft\Launcher.exe"="C:\World of Warcraft\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"E:\Programme\eMule\emule.exe"="E:\Programme\eMule\emule.exe:*:Enabled:eMule"
"C:\Spiele\Steam\SteamApps\kommissbrot\source sdk base 2007\hl2.exe"="C:\Spiele\Steam\SteamApps\***\source sdk base 2007\hl2.exe:*:Enabled:hl2"
"C:\Spiele\Steam\SteamApps\kommissbrot\half-life 2 deathmatch\hl2.exe"="C:\Spiele\Steam\SteamApps\***\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2009-12-29 00:20:34 ----D---- C:\rsit
2009-12-29 00:20:34 ----D---- C:\Programme\trend micro
2009-12-29 00:13:27 ----D---- C:\Programme\CCleaner
2009-12-28 23:14:25 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Malwarebytes
2009-12-28 23:14:21 ----D---- C:\Programme\Malwarebytes' Anti-Malware
2009-12-28 23:14:21 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2009-12-28 22:44:53 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Uniblue
2009-12-28 21:52:52 ----D---- C:\Programme\Verimount
2009-12-27 23:31:07 ----D---- C:\WINDOWS\system32\appmgmt
2009-12-27 23:24:05 ----A---- C:\WINDOWS\system32\ChCfg.exe
2009-12-27 23:23:11 ----A---- C:\WINDOWS\SoundMan.exe
2009-12-27 23:23:10 ----A---- C:\WINDOWS\SkyTel.exe
2009-12-27 23:23:10 ----A---- C:\WINDOWS\RtlUpd.exe
2009-12-27 23:23:10 ----A---- C:\WINDOWS\RTLCPL.exe
2009-12-27 23:23:07 ----A---- C:\WINDOWS\RTHDCPL.exe
2009-12-27 23:23:05 ----A---- C:\WINDOWS\MicCal.exe
2009-12-27 23:23:04 ----A---- C:\WINDOWS\alcwzrd.exe
2009-12-27 23:23:03 ----HD---- C:\Programme\InstallShield Installation Information
2009-12-27 23:23:03 ----D---- C:\Programme\Realtek
2009-12-27 23:23:03 ----A---- C:\WINDOWS\Alcmtr.exe
2009-12-27 23:22:58 ----A---- C:\WINDOWS\RtlExUpd.dll
2009-12-27 22:43:09 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BitDefender
2009-12-27 22:41:41 ----D---- C:\Programme\Gemeinsame Dateien\BitDefender
2009-12-27 16:35:26 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\FRISK Software
2009-12-27 16:31:40 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FRISK Software
2009-12-27 15:59:37 ----D---- C:\Programme\TrendMicro
2009-12-27 04:44:59 ----SHD---- C:\Config.Msi
2009-12-27 04:44:16 ----D---- C:\7c7c511d947875ce9d0da2a72b
2009-12-27 04:43:52 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-12-26 23:23:27 ----D---- C:\WINDOWS\pss
2009-12-26 22:27:18 ----A---- C:\WINDOWS\system32\uxtF.tmp
2009-12-26 22:26:55 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\TuneUp Software
2009-12-26 22:26:42 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
2009-12-26 22:26:36 ----SHD---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2009-12-26 21:56:16 ----D---- C:\Programme\Spyware Doctor
2009-12-26 21:56:16 ----D---- C:\Programme\Gemeinsame Dateien\PC Tools
2009-12-26 21:56:16 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\PC Tools
2009-12-26 21:56:16 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Tools
2009-12-26 21:03:53 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\CyberLink
2009-12-26 21:03:35 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CyberLink
2009-12-26 21:03:28 ----D---- C:\Programme\Gemeinsame Dateien\CyberLink
2009-12-26 21:02:44 ----A---- C:\WINDOWS\system32\msxml3a.dll
2009-12-26 21:02:34 ----AD---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Temp
2009-12-26 16:26:50 ----D---- C:\WINDOWS\system32\XPSViewer
2009-12-26 16:26:46 ----D---- C:\Programme\MSBuild
2009-12-26 16:26:45 ----D---- C:\WINDOWS\system32\en-US
2009-12-26 16:26:37 ----D---- C:\Programme\Reference Assemblies
2009-12-26 16:26:21 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2009-12-26 16:26:21 ----N---- C:\WINDOWS\system32\prntvpt.dll
2009-12-26 16:26:20 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2009-12-26 16:26:20 ----D---- C:\a531de732b580fd172c937a21dfc
2009-12-26 16:00:34 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-26 16:00:31 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-12-26 02:24:59 ----D---- C:\Programme\ratDVD
2009-12-25 20:25:45 ----RSD---- C:\WINDOWS\assembly
2009-12-25 20:25:29 ----D---- C:\WINDOWS\Microsoft.NET
2009-12-25 15:51:12 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Macromedia
2009-12-25 15:51:12 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Adobe
2009-12-25 15:48:24 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla
2009-12-25 15:48:20 ----D---- C:\Programme\Mozilla Firefox
2009-12-25 15:37:56 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-12-25 15:37:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-12-25 15:37:49 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-12-25 15:37:46 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-12-25 15:37:43 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-12-25 15:37:39 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2009-12-25 15:37:37 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2009-12-25 15:37:33 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-12-25 15:37:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-25 15:37:26 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-12-25 15:37:22 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2009-12-25 15:37:19 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2009-12-25 15:37:16 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2009-12-25 15:36:56 ----D---- C:\WINDOWS\ie8updates
2009-12-25 15:36:49 ----D---- C:\WINDOWS\WBEM
2009-12-25 15:35:58 ----HDC---- C:\WINDOWS\ie8
2009-12-25 15:34:16 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-12-25 15:34:13 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2009-12-25 15:34:11 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2009-12-25 15:34:08 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2009-12-25 15:34:06 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-12-25 15:34:02 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2009-12-25 15:33:59 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-12-25 15:33:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-12-25 15:33:49 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2009-12-25 15:33:47 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-12-25 15:33:44 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-12-25 15:33:41 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2009-12-25 15:33:37 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2009-12-25 15:33:33 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-12-25 15:33:29 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2009-12-25 15:33:22 ----HDC---- C:\WINDOWS\$NtUninstallKB976325$
2009-12-25 15:33:19 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2009-12-25 15:33:16 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-12-25 15:33:04 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2009-12-25 15:33:01 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-12-25 15:32:58 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-12-25 15:32:55 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-12-25 15:32:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-12-25 15:32:49 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2009-12-25 15:32:45 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-25 15:32:41 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-12-25 15:32:39 ----A---- C:\WINDOWS\system32\wmpns.dll
2009-12-25 15:32:36 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2009-12-25 15:32:33 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-12-25 15:32:30 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-25 15:32:27 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-12-25 15:32:23 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-12-25 15:32:20 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-12-25 15:32:17 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-12-25 15:32:12 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2009-12-25 15:32:09 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-12-25 15:32:06 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2009-12-25 15:32:03 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2009-12-25 15:31:59 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-12-25 15:31:56 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-12-25 15:31:52 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-12-25 15:31:45 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-12-25 15:31:42 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2009-12-25 15:31:39 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2009-12-25 15:31:34 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-12-25 15:31:30 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2009-12-25 15:23:24 ----D---- C:\Dokumente und Einstellungen\David\Anwendungsdaten\Google
2009-12-25 15:22:41 ----D---- C:\Programme\Google
2009-12-25 15:22:29 ----A---- C:\WINDOWS\system32\javaws.exe
2009-12-25 15:22:29 ----A---- C:\WINDOWS\system32\javaw.exe
2009-12-25 15:22:29 ----A---- C:\WINDOWS\system32\java.exe
2009-12-25 15:22:29 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-12-25 15:22:18 ----D---- C:\Programme\Java
2009-12-25 15:21:48 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Sun
2009-12-24 00:32:06 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\dvdcss
2009-12-23 22:38:55 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\vlc
2009-12-23 22:38:27 ----D---- C:\Programme\VideoLAN
2009-12-23 22:07:03 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard Entertainment
2009-12-23 21:23:05 ----D---- C:\Images
2009-12-23 20:57:51 ----D---- C:\Spiele
2009-12-23 20:53:35 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard
2009-12-23 20:37:40 ----D---- C:\Filme
2009-12-23 20:25:26 ----SHD---- C:\RECYCLER
2009-12-23 20:24:01 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\WinRAR
2009-12-23 20:23:30 ----D---- C:\Programme\WinZip
2009-12-23 20:22:10 ----D---- C:\Programme\WinRAR
2009-12-23 20:11:16 ----D---- C:\Programme\Gemeinsame Dateien\Blizzard Entertainment
2009-12-23 20:07:05 ----D---- C:\World of Warcraft
2009-12-23 20:02:54 ----D---- C:\WINDOWS\Prefetch
2009-12-23 19:55:05 ----N---- C:\WINDOWS\system32\msxml6r.dll
2009-12-23 19:55:05 ----N---- C:\WINDOWS\system32\msxml6.dll
2009-12-23 19:54:53 ----N---- C:\WINDOWS\system32\aaclient.dll
2009-12-23 19:54:52 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2009-12-23 19:54:52 ----N---- C:\WINDOWS\system32\azroles.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\eapolqec.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\dot3ui.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\dot3svc.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\dot3msm.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\dot3api.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\dimsroam.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2009-12-23 19:54:51 ----N---- C:\WINDOWS\system32\credssp.dll
2009-12-23 19:54:50 ----N---- C:\WINDOWS\system32\eapsvc.dll
2009-12-23 19:54:50 ----N---- C:\WINDOWS\system32\eapqec.dll
2009-12-23 19:54:50 ----N---- C:\WINDOWS\system32\eappprxy.dll
2009-12-23 19:54:50 ----N---- C:\WINDOWS\system32\eapphost.dll
2009-12-23 19:54:50 ----N---- C:\WINDOWS\system32\eappgnui.dll
2009-12-23 19:54:50 ----N---- C:\WINDOWS\system32\eappcfg.dll
2009-12-23 19:54:49 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2009-12-23 19:54:49 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2009-12-23 19:54:48 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2009-12-23 19:54:48 ----N---- C:\WINDOWS\system32\kmsvc.dll
2009-12-23 19:54:48 ----N---- C:\WINDOWS\system32\kbdpash.dll
2009-12-23 19:54:48 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2009-12-23 19:54:47 ----N---- C:\WINDOWS\system32\onex.dll
2009-12-23 19:54:47 ----N---- C:\WINDOWS\system32\napstat.exe
2009-12-23 19:54:47 ----N---- C:\WINDOWS\system32\napmontr.dll
2009-12-23 19:54:47 ----N---- C:\WINDOWS\system32\napipsec.dll
2009-12-23 19:54:47 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2009-12-23 19:54:47 ----N---- C:\WINDOWS\system32\mssha.dll
2009-12-23 19:54:47 ----N---- C:\WINDOWS\system32\mmcperf.exe
2009-12-23 19:54:47 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2009-12-23 19:54:47 ----N---- C:\WINDOWS\system32\mmcex.dll
2009-12-23 19:54:47 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2009-12-23 19:54:46 ----N---- C:\WINDOWS\system32\setupn.exe
2009-12-23 19:54:46 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2009-12-23 19:54:46 ----N---- C:\WINDOWS\system32\rasqec.dll
2009-12-23 19:54:46 ----N---- C:\WINDOWS\system32\qutil.dll
2009-12-23 19:54:46 ----N---- C:\WINDOWS\system32\qcliprov.dll
2009-12-23 19:54:46 ----N---- C:\WINDOWS\system32\qagentrt.dll
2009-12-23 19:54:46 ----N---- C:\WINDOWS\system32\qagent.dll
2009-12-23 19:54:46 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2009-12-23 19:54:45 ----N---- C:\WINDOWS\system32\tzchange.exe
2009-12-23 19:54:45 ----N---- C:\WINDOWS\system32\tspkg.dll
2009-12-23 19:54:45 ----N---- C:\WINDOWS\system32\tsgqec.dll
2009-12-23 19:54:44 ----N---- C:\WINDOWS\system32\wmphoto.dll
2009-12-23 19:54:44 ----N---- C:\WINDOWS\system32\wlanapi.dll
2009-12-23 19:54:44 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2009-12-23 19:54:44 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2009-12-23 19:54:43 ----A---- C:\WINDOWS\system32\xmllite.dll
2009-12-23 19:54:42 ----D---- C:\WINDOWS\system32\de-de
2009-12-23 19:54:40 ----D---- C:\WINDOWS\l2schemas
2009-12-23 19:54:39 ----D---- C:\WINDOWS\system32\de
2009-12-23 19:47:16 ----D---- C:\WINDOWS\network diagnostic
2009-12-23 19:46:05 ----A---- C:\WINDOWS\005425_.tmp
2009-12-23 19:37:03 ----D---- C:\Musik
2009-12-23 19:35:25 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\teamspeak2
2009-12-23 19:35:17 ----D---- C:\Programme\Teamspeak2_RC2
2009-12-23 19:32:19 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2009-12-23 19:32:18 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2009-12-23 19:32:16 ----D---- C:\WINDOWS\Logs
2009-12-23 19:32:07 ----D---- C:\Programme\Winamp Detect
2009-12-23 19:31:56 ----D---- C:\WINDOWS\RegisteredPackages
2009-12-23 19:31:33 ----N---- C:\WINDOWS\system32\vxblock.dll
2009-12-23 19:31:33 ----N---- C:\WINDOWS\system32\pxwave.dll
2009-12-23 19:31:33 ----N---- C:\WINDOWS\system32\pxsfs.dll
2009-12-23 19:31:33 ----N---- C:\WINDOWS\system32\pxmas.dll
2009-12-23 19:31:33 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2009-12-23 19:31:33 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2009-12-23 19:31:33 ----N---- C:\WINDOWS\system32\pxdrv.dll
2009-12-23 19:31:33 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2009-12-23 19:31:33 ----N---- C:\WINDOWS\system32\pxafs.dll
2009-12-23 19:31:33 ----N---- C:\WINDOWS\system32\px.dll
2009-12-23 19:31:32 ----D---- C:\Programme\Winamp
2009-12-23 19:31:32 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Winamp
2009-12-23 19:29:33 ----D---- C:\Prog.Install
2009-12-23 19:28:02 ----D---- C:\Updates
2009-12-23 19:27:53 ----D---- C:\Treiber
2009-12-23 19:20:20 ----HDC---- C:\WINDOWS\$NtUninstallKB924496$
2009-12-23 19:20:14 ----HDC---- C:\WINDOWS\$NtUninstallKB924191$
2009-12-23 19:20:09 ----HDC---- C:\WINDOWS\$NtUninstallKB923414$
2009-12-23 19:20:03 ----HDC---- C:\WINDOWS\$NtUninstallKB923191$
2009-12-23 19:19:57 ----HDC---- C:\WINDOWS\$NtUninstallKB922819$
2009-12-23 19:19:51 ----HDC---- C:\WINDOWS\$NtUninstallKB922616$
2009-12-23 19:19:45 ----HDC---- C:\WINDOWS\$NtUninstallKB921883$
2009-12-23 19:19:38 ----HDC---- C:\WINDOWS\$NtUninstallKB921398$
2009-12-23 19:19:32 ----HDC---- C:\WINDOWS\$NtUninstallKB920685$
2009-12-23 19:19:26 ----HDC---- C:\WINDOWS\$NtUninstallKB920683$
2009-12-23 19:19:20 ----HDC---- C:\WINDOWS\$NtUninstallKB920670$
2009-12-23 19:19:14 ----HDC---- C:\WINDOWS\$NtUninstallKB919007$
2009-12-23 19:19:08 ----HDC---- C:\WINDOWS\$NtUninstallKB917953$
2009-12-23 19:19:02 ----HDC---- C:\WINDOWS\$NtUninstallKB917422$
2009-12-23 19:18:56 ----HDC---- C:\WINDOWS\$NtUninstallKB917344$
2009-12-23 19:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB914389$
2009-12-23 19:18:44 ----HDC---- C:\WINDOWS\$NtUninstallKB914388$
2009-12-23 19:18:37 ----HDC---- C:\WINDOWS\$NtUninstallKB913580$
2009-12-23 19:18:31 ----HDC---- C:\WINDOWS\$NtUninstallKB912919$
2009-12-23 19:18:25 ----HDC---- C:\WINDOWS\$NtUninstallKB911927$
2009-12-23 19:18:19 ----HDC---- C:\WINDOWS\$NtUninstallKB911562$
2009-12-23 19:18:13 ----HDC---- C:\WINDOWS\$NtUninstallKB911280$
2009-12-23 19:18:07 ----HDC---- C:\WINDOWS\$NtUninstallKB910437$
2009-12-23 19:18:01 ----HDC---- C:\WINDOWS\$NtUninstallKB908531$
2009-12-23 19:17:54 ----HDC---- C:\WINDOWS\$NtUninstallKB908519$
2009-12-23 19:17:48 ----HDC---- C:\WINDOWS\$NtUninstallKB905749$
2009-12-23 19:17:42 ----HDC---- C:\WINDOWS\$NtUninstallKB905414$
2009-12-23 19:17:36 ----HDC---- C:\WINDOWS\$NtUninstallKB904706$
2009-12-23 19:17:29 ----HDC---- C:\WINDOWS\$NtUninstallKB902400$
2009-12-23 19:17:23 ----HDC---- C:\WINDOWS\$NtUninstallKB901214$
2009-12-23 19:17:17 ----HDC---- C:\WINDOWS\$NtUninstallKB901017$
2009-12-23 19:17:10 ----HDC---- C:\WINDOWS\$NtUninstallKB900725$
2009-12-23 19:17:04 ----HDC---- C:\WINDOWS\$NtUninstallKB899591$
2009-12-23 19:16:58 ----HDC---- C:\WINDOWS\$NtUninstallKB899587$
2009-12-23 19:16:51 ----HDC---- C:\WINDOWS\$NtUninstallKB896428$
2009-12-23 19:16:45 ----HDC---- C:\WINDOWS\$NtUninstallKB896424$
2009-12-23 19:16:39 ----HDC---- C:\WINDOWS\$NtUninstallKB896423$
2009-12-23 19:16:33 ----HDC---- C:\WINDOWS\$NtUninstallKB896358$
2009-12-23 19:16:28 ----HDC---- C:\WINDOWS\$NtUninstallKB893756$
2009-12-23 19:16:21 ----HDC---- C:\WINDOWS\$NtUninstallKB891781$
2009-12-23 19:16:15 ----HDC---- C:\WINDOWS\$NtUninstallKB890859$
2009-12-23 19:16:09 ----HDC---- C:\WINDOWS\$NtUninstallKB890046$
2009-12-23 19:16:03 ----HDC---- C:\WINDOWS\$NtUninstallKB888302$
2009-12-23 19:15:58 ----HDC---- C:\WINDOWS\$NtUninstallKB885836$
2009-12-23 19:15:53 ----HDC---- C:\WINDOWS\$NtUninstallKB885835$
2009-12-23 19:15:44 ----HDC---- C:\WINDOWS\$NtUninstallKB873339$
2009-12-23 19:15:29 ----RASH---- C:\boot.ini
2009-12-23 19:14:06 ----D---- C:\WINDOWS\provisioning
2009-12-23 19:14:06 ----D---- C:\WINDOWS\peernet
2009-12-23 19:13:35 ----D---- C:\WINDOWS\ServicePackFiles
2009-12-23 19:12:03 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-12-23 19:12:01 ----D---- C:\WINDOWS\EHome
2009-12-23 19:10:47 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-23 19:10:47 ----RSD---- C:\WINDOWS\Fonts
2009-12-23 19:10:47 ----RD---- C:\WINDOWS\Web
2009-12-23 19:10:47 ----HD---- C:\WINDOWS\inf
2009-12-23 19:10:47 ----D---- C:\WINDOWS\WinSxS
2009-12-23 19:10:47 ----D---- C:\WINDOWS\twain_32
2009-12-23 19:10:47 ----D---- C:\WINDOWS\Temp
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\wins
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\wbem
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\usmt
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\spool
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\ShellExt
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\Setup
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\ras
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\oobe
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\npp
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\mui
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\inetsrv
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\IME
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\icsxml
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\ias
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\export
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\drivers
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\dhcp
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\config
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\3com_dmi
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\3076
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\2052
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\1054
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\1042
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\1041
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\1037
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\1033
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\1031
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\1028
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32\1025
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system32
2009-12-23 19:10:47 ----D---- C:\WINDOWS\system
2009-12-23 19:10:47 ----D---- C:\WINDOWS\security
2009-12-23 19:10:47 ----D---- C:\WINDOWS\Resources
2009-12-23 19:10:47 ----D---- C:\WINDOWS\repair
2009-12-23 19:10:47 ----D---- C:\WINDOWS\mui
2009-12-23 19:10:47 ----D---- C:\WINDOWS\msapps
2009-12-23 19:10:47 ----D---- C:\WINDOWS\msagent
2009-12-23 19:10:47 ----D---- C:\WINDOWS\Media
2009-12-23 19:10:47 ----D---- C:\WINDOWS\java
2009-12-23 19:10:47 ----D---- C:\WINDOWS\ime
2009-12-23 19:10:47 ----D---- C:\WINDOWS\Help
2009-12-23 19:10:47 ----D---- C:\WINDOWS\Driver Cache
2009-12-23 19:10:47 ----D---- C:\WINDOWS\Debug
2009-12-23 19:10:47 ----D---- C:\WINDOWS\Cursors
2009-12-23 19:10:47 ----D---- C:\WINDOWS\Connection Wizard
2009-12-23 19:10:47 ----D---- C:\WINDOWS\Config
2009-12-23 19:10:47 ----D---- C:\WINDOWS\AppPatch
2009-12-23 19:10:47 ----D---- C:\WINDOWS\addins
2009-12-23 19:10:47 ----D---- C:\WINDOWS
2009-12-23 19:09:46 ----A---- C:\WINDOWS\system32\OpenCL.dll
2009-12-23 19:09:46 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2009-12-23 19:09:46 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2009-12-23 19:09:46 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2009-12-23 19:09:45 ----A---- C:\WINDOWS\system32\nvcuda.dll
2009-12-23 19:09:45 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2009-12-23 19:09:45 ----A---- C:\WINDOWS\system32\nvcodins.dll
2009-12-23 19:09:45 ----A---- C:\WINDOWS\system32\nvcod.dll
2009-12-23 19:09:45 ----A---- C:\WINDOWS\system32\nvapi.dll
2009-12-23 19:05:52 ----HDC---- C:\WINDOWS\$NtUninstallKB899587_0$
2009-12-23 19:05:45 ----HDC---- C:\WINDOWS\$NtUninstallKB924191_0$
2009-12-23 19:05:37 ----HDC---- C:\WINDOWS\$NtUninstallKB922819_0$
2009-12-23 19:05:28 ----HDC---- C:\WINDOWS\$NtUninstallKB885835_0$
2009-12-23 19:05:21 ----HDC---- C:\WINDOWS\$NtUninstallKB885836_0$
2009-12-23 19:05:14 ----HDC---- C:\WINDOWS\$NtUninstallKB923414_0$
2009-12-23 19:05:07 ----HDC---- C:\WINDOWS\$NtUninstallKB921883_0$
2009-12-23 19:05:00 ----HDC---- C:\WINDOWS\$NtUninstallKB911927_0$
2009-12-23 19:04:53 ----HDC---- C:\WINDOWS\$NtUninstallKB922616_0$
2009-12-23 19:04:45 ----HDC---- C:\WINDOWS\$NtUninstallKB901017_0$
2009-12-23 19:04:38 ----HDC---- C:\WINDOWS\$NtUninstallKB899591_0$
2009-12-23 19:04:31 ----HDC---- C:\WINDOWS\$NtUninstallKB920685_0$
2009-12-23 19:04:24 ----HDC---- C:\WINDOWS\$NtUninstallKB896424_0$
2009-12-23 19:04:15 ----HDC---- C:\WINDOWS\$NtUninstallKB893756_0$
2009-12-23 19:04:08 ----HDC---- C:\WINDOWS\$NtUninstallKB911280_0$
2009-12-23 19:04:01 ----HDC---- C:\WINDOWS\$NtUninstallKB911562_0$
2009-12-23 19:03:55 ----HDC---- C:\WINDOWS\$NtUninstallKB896423_0$
2009-12-23 19:03:46 ----HDC---- C:\WINDOWS\$NtUninstallKB873339_0$
2009-12-23 19:03:35 ----HDC---- C:\WINDOWS\$NtUninstallKB924496_0$
2009-12-23 19:03:28 ----HDC---- C:\WINDOWS\$NtUninstallKB925486-IE6SP1-20060918.120000$
2009-12-23 19:03:21 ----HDC---- C:\WINDOWS\$NtUninstallKB921398_0$
2009-12-23 19:03:15 ----HDC---- C:\WINDOWS\$NtUninstallKB918439-IE6SP1-20060530.145346$
2009-12-23 19:03:09 ----HDC---- C:\WINDOWS\$NtUninstallKB896358_0$
2009-12-23 19:03:02 ----HDC---- C:\WINDOWS\$NtUninstallKB910437_0$
2009-12-23 19:02:55 ----HDC---- C:\WINDOWS\$NtUninstallKB905495$
2009-12-23 19:02:49 ----HDC---- C:\WINDOWS\$NtUninstallKB911564$
2009-12-23 19:02:37 ----HDC---- C:\WINDOWS\$NtUninstallKB902400_0$
2009-12-23 19:02:30 ----HDC---- C:\WINDOWS\$NtUninstallKB920670_0$
2009-12-23 19:02:25 ----HDC---- C:\WINDOWS\$NtUninstallKB891781_0$
2009-12-23 19:02:19 ----HDC---- C:\WINDOWS\$NtUninstallKB890046_0$
2009-12-23 19:02:13 ----HDC---- C:\WINDOWS\$NtUninstallKB919007_0$
2009-12-23 19:02:06 ----HDC---- C:\WINDOWS\$NtUninstallKB914388_0$
2009-12-23 19:02:01 ----HDC---- C:\WINDOWS\$NtUninstallKB917344_0$
2009-12-23 19:01:55 ----HDC---- C:\WINDOWS\$NtUninstallKB905414_0$
2009-12-23 19:01:50 ----HDC---- C:\WINDOWS\$NtUninstallKB917953_0$
2009-12-23 19:01:44 ----HDC---- C:\WINDOWS\$NtUninstallKB917734_WMP8$
2009-12-23 19:01:33 ----HDC---- C:\WINDOWS\$NtUninstallKB901214_0$
2009-12-23 19:01:26 ----HDC---- C:\WINDOWS\$NtUninstallKB923191_0$
2009-12-23 19:01:20 ----HDC---- C:\WINDOWS\$NtUninstallKB917422_0$
2009-12-23 19:01:14 ----HDC---- C:\WINDOWS\$NtUninstallKB892944$
2009-12-23 19:01:08 ----HDC---- C:\WINDOWS\$NtUninstallKB888302_0$
2009-12-23 19:01:01 ----HDC---- C:\WINDOWS\$NtUninstallKB900725_0$
2009-12-23 19:00:56 ----HDC---- C:\WINDOWS\$NtUninstallKB912919_0$
2009-12-23 19:00:49 ----HDC---- C:\WINDOWS\$NtUninstallKB918899-IE6SP1-20060725.123917$
2009-12-23 19:00:41 ----HDC---- C:\WINDOWS\$NtUninstallKB911567-OE6SP1-20060316.165634$
2009-12-23 19:00:36 ----HDC---- C:\WINDOWS\$NtUninstallKB904706_0$
2009-12-23 19:00:29 ----HDC---- C:\WINDOWS\$NtUninstallKB908531_0$
2009-12-23 19:00:13 ----A---- C:\WINDOWS\system32\MRT.exe
2009-12-23 19:00:05 ----HDC---- C:\WINDOWS\$NtUninstallKB905749_0$
2009-12-23 18:59:57 ----HDC---- C:\WINDOWS\$NtUninstallKB913580_0$
2009-12-23 18:59:52 ----HDC---- C:\WINDOWS\$NtUninstallKB896428_0$
2009-12-23 18:59:47 ----HDC---- C:\WINDOWS\$NtUninstallKB835409$
2009-12-23 18:59:42 ----HDC---- C:\WINDOWS\$NtUninstallKB908519_0$
2009-12-23 18:59:36 ----HDC---- C:\WINDOWS\$NtUninstallKB920683_0$
2009-12-23 18:59:27 ----HDC---- C:\WINDOWS\$NtUninstallKB914389_0$
2009-12-23 18:59:05 ----HDC---- C:\WINDOWS\$NtUninstallKB890859_0$
2009-12-23 18:59:01 ----N---- C:\WINDOWS\system32\spnpinst.exe
2009-12-23 18:55:14 ----D---- C:\WINDOWS\system32\AGEIA
2009-12-23 18:55:14 ----D---- C:\Programme\AGEIA Technologies
2009-12-23 18:55:12 ----D---- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard
2009-12-23 18:55:11 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NVIDIA Corporation
2009-12-23 18:54:55 ----D---- C:\Programme\NVIDIA Corporation
2009-12-23 18:54:38 ----D---- C:\NVIDIA
2009-12-23 18:50:56 ----D---- C:\Programme\SystemRequirementsLab
2009-12-23 18:49:27 ----A---- C:\WINDOWS\system32\esent.dll
2009-12-23 18:48:03 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Windows Genuine Advantage
2009-12-23 18:45:41 ----D---- C:\WINDOWS\system32\PreInstall
2009-12-23 18:45:39 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-12-23 18:45:39 ----HD---- C:\WINDOWS\$hf_mig$
2009-12-23 18:45:29 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2009-12-23 18:45:20 ----D---- C:\WINDOWS\system32\bits
2009-12-23 18:45:16 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-12-23 18:45:16 ----HDC---- C:\WINDOWS\$NtUninstallKB842773$
2009-12-23 18:45:05 ----N---- C:\WINDOWS\system32\bitsprx3.dll
2009-12-23 18:45:05 ----N---- C:\WINDOWS\system32\bitsprx2.dll
2009-12-23 18:45:05 ----A---- C:\WINDOWS\system32\winhttp.dll
2009-12-23 18:45:05 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2009-12-23 18:44:09 ----A---- C:\WINDOWS\system32\wups2.dll
2009-12-23 18:44:09 ----A---- C:\WINDOWS\system32\wups.dll
2009-12-23 18:44:09 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2009-12-23 18:44:08 ----A---- C:\WINDOWS\system32\wucltui.dll
2009-12-23 18:44:08 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2009-12-23 18:44:08 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2009-12-23 18:44:08 ----A---- C:\WINDOWS\system32\wuapi.dll
2009-12-23 18:43:36 ----D---- C:\WINDOWS\SoftwareDistribution
2009-12-23 18:38:01 ----D---- C:\Programme\Marvell
2009-12-23 18:37:44 ----D---- C:\WINDOWS\system32\Lang
2009-12-23 18:36:35 ----D---- C:\WINDOWS\system32\RTCOM
2009-12-23 18:36:34 ----A---- C:\WINDOWS\system32\ksuser.dll
2009-12-23 18:36:14 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2009-12-23 18:36:13 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXP$
2009-12-23 18:36:03 ----A---- C:\WINDOWS\HideWin.exe
2009-12-23 18:36:02 ----D---- C:\Programme\Gemeinsame Dateien\InstallShield
2009-12-23 18:35:01 ----SD---- C:\WINDOWS\system32\Microsoft
2009-12-23 18:33:21 ----A---- C:\WINDOWS\system32\usbui.dll
2009-12-23 18:32:19 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-12-23 18:32:18 ----DC---- C:\WINDOWS\system32\DRVSTORE
2009-12-23 18:32:18 ----D---- C:\Programme\Intel
2009-12-23 18:32:18 ----A---- C:\WINDOWS\system32\CSVer.dll
2009-12-23 18:32:10 ----D---- C:\Intel
2009-12-23 18:31:00 ----SHD---- C:\WINDOWS\Installer
2009-12-23 18:30:58 ----D---- C:\Dokumente und Einstellungen\David\Anwendungsdaten\Identities
2009-12-23 18:30:56 ----HD---- C:\Programme\Uninstall Information
2009-12-23 18:30:49 ----SD---- C:\Dokumente und Einstellungen\David\Anwendungsdaten\Microsoft
2009-12-23 18:30:49 ----ASH---- C:\Dokumente und Einstellungen\David\Anwendungsdaten\desktop.ini
2009-12-23 18:27:11 ----SHD---- C:\System Volume Information
2009-12-23 18:27:01 ----N---- C:\WINDOWS\SchedLgU.Txt
2009-12-23 18:24:37 ----D---- C:\WINDOWS\system32\xircom
2009-12-23 18:24:37 ----D---- C:\Programme\xerox
2009-12-23 18:24:37 ----D---- C:\Programme\microsoft frontpage
2009-12-23 18:24:25 ----A---- C:\WINDOWS\control.ini
2009-12-23 18:24:25 ----A---- C:\AUTOEXEC.BAT
2009-12-23 18:24:19 ----A---- C:\WINDOWS\system32\mapi32.dll
2009-12-23 18:23:56 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-12-23 18:23:56 ----RD---- C:\WINDOWS\Offline Web Pages
2009-12-23 18:23:56 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2009-12-23 18:23:54 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2009-12-23 18:23:52 ----D---- C:\Programme\Online-Dienste
2009-12-23 18:23:37 ----D---- C:\WINDOWS\system32\DirectX
2009-12-23 18:23:07 ----A---- C:\WINDOWS\system32\safrslv.dll
2009-12-23 18:23:07 ----A---- C:\WINDOWS\system32\safrdm.dll
2009-12-23 18:23:07 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2009-12-23 18:23:07 ----A---- C:\WINDOWS\system32\racpldlg.dll
2009-12-23 18:23:06 ----A---- C:\WINDOWS\system32\atrace.dll
2009-12-23 18:23:03 ----A---- C:\WINDOWS\system32\desktop.ini
2009-12-23 18:23:03 ----A---- C:\WINDOWS\desktop.ini
2009-12-23 18:22:56 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2009-12-23 18:22:56 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2009-12-23 18:22:56 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2009-12-23 18:22:55 ----A---- C:\WINDOWS\system32\acctres.dll
2009-12-23 18:22:54 ----D---- C:\Programme\Gemeinsame Dateien\Dienste
2009-12-23 18:22:53 ----A---- C:\WINDOWS\system32\inetres.dll
2009-12-23 18:22:49 ----SD---- C:\WINDOWS\Tasks
2009-12-23 18:22:49 ----A---- C:\WINDOWS\system32\isign32.dll
2009-12-23 18:22:49 ----A---- C:\WINDOWS\system32\inetcfg.dll
2009-12-23 18:22:49 ----A---- C:\WINDOWS\system32\icwphbk.dll
2009-12-23 18:22:49 ----A---- C:\WINDOWS\system32\icwdial.dll
2009-12-23 18:22:49 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2009-12-23 18:22:46 ----D---- C:\Programme\Gemeinsame Dateien\MSSoap
2009-12-23 18:22:41 ----D---- C:\WINDOWS\srchasst
2009-12-23 18:22:40 ----D---- C:\WINDOWS\system32\Macromed
2009-12-23 18:22:39 ----A---- C:\WINDOWS\system32\qmgr.dll
2009-12-23 18:22:38 ----D---- C:\Programme\Movie Maker
2009-12-23 18:22:34 ----D---- C:\WINDOWS\system32\Restore
2009-12-23 18:22:34 ----D---- C:\WINDOWS\PCHealth
2009-12-23 18:22:34 ----A---- C:\WINDOWS\system32\srrstr.dll
2009-12-23 18:22:33 ----A---- C:\WINDOWS\system32\srsvc.dll
2009-12-23 18:22:33 ----A---- C:\WINDOWS\system32\srclient.dll
2009-12-23 18:22:33 ----A---- C:\WINDOWS\system32\mnmdd.dll
2009-12-23 18:22:33 ----A---- C:\WINDOWS\system32\ils.dll
2009-12-23 18:22:32 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2009-12-23 18:22:32 ----A---- C:\WINDOWS\system32\msconf.dll
2009-12-23 18:22:30 ----D---- C:\Programme\NetMeeting
2009-12-23 18:22:30 ----A---- C:\WINDOWS\system32\msoert2.dll
2009-12-23 18:22:30 ----A---- C:\WINDOWS\system32\msoeacct.dll
2009-12-23 18:22:29 ----A---- C:\WINDOWS\system32\inetcomm.dll
2009-12-23 18:22:28 ----D---- C:\Programme\Outlook Express
2009-12-23 18:22:28 ----A---- C:\WINDOWS\system32\schedsvc.dll
2009-12-23 18:22:28 ----A---- C:\WINDOWS\system32\mstinit.exe
2009-12-23 18:22:28 ----A---- C:\WINDOWS\system32\mstask.dll
2009-12-23 18:22:21 ----D---- C:\Programme\Gemeinsame Dateien\System
2009-12-23 18:22:20 ----D---- C:\Programme\Internet Explorer
2009-12-23 18:22:10 ----D---- C:\Programme\ComPlus Applications
2009-12-23 18:22:10 ----A---- C:\WINDOWS\vbaddin.ini
2009-12-23 18:22:10 ----A---- C:\WINDOWS\vb.ini
2009-12-23 18:22:09 ----D---- C:\WINDOWS\Registration
2009-12-23 18:22:08 ----HD---- C:\Programme\WindowsUpdate
2009-12-23 18:22:08 ----D---- C:\Programme\Online Services
2009-12-23 18:22:07 ----D---- C:\Programme\Windows Media Player
2009-12-23 18:22:00 ----D---- C:\Programme\MSN Gaming Zone
2009-12-23 18:22:00 ----A---- C:\WINDOWS\system32\write.exe
2009-12-23 18:21:50 ----A---- C:\WINDOWS\system32\sndvol32.exe
2009-12-23 18:21:50 ----A---- C:\WINDOWS\system32\sndrec32.exe
2009-12-23 18:21:50 ----A---- C:\WINDOWS\system32\accwiz.exe
2009-12-23 18:21:49 ----A---- C:\WINDOWS\system32\hticons.dll
2009-12-23 18:21:49 ----A---- C:\WINDOWS\system32\avwav.dll
2009-12-23 18:21:49 ----A---- C:\WINDOWS\system32\avtapi.dll
2009-12-23 18:21:49 ----A---- C:\WINDOWS\system32\avmeter.dll
2009-12-23 18:21:48 ----A---- C:\WINDOWS\system32\winchat.exe
2009-12-23 18:21:41 ----A---- C:\WINDOWS\system32\getuname.dll
2009-12-23 18:21:41 ----A---- C:\WINDOWS\system32\charmap.exe
2009-12-23 18:21:40 ----A---- C:\WINDOWS\system32\winmine.exe
2009-12-23 18:21:40 ----A---- C:\WINDOWS\system32\sol.exe
2009-12-23 18:21:40 ----A---- C:\WINDOWS\system32\calc.exe
2009-12-23 18:21:39 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2009-12-23 18:21:39 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2009-12-23 18:21:39 ----A---- C:\WINDOWS\system32\tslabels.ini
2009-12-23 18:21:39 ----A---- C:\WINDOWS\system32\tskill.exe
2009-12-23 18:21:39 ----A---- C:\WINDOWS\system32\reset.exe
2009-12-23 18:21:39 ----A---- C:\WINDOWS\system32\rdshost.exe
2009-12-23 18:21:39 ----A---- C:\WINDOWS\system32\mshearts.exe
2009-12-23 18:21:39 ----A---- C:\WINDOWS\system32\freecell.exe
2009-12-23 18:21:38 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2009-12-23 18:21:38 ----A---- C:\WINDOWS\system32\tscon.exe
2009-12-23 18:21:38 ----A---- C:\WINDOWS\system32\shadow.exe
2009-12-23 18:21:38 ----A---- C:\WINDOWS\system32\rwinsta.exe
2009-12-23 18:21:38 ----A---- C:\WINDOWS\system32\regini.exe
2009-12-23 18:21:38 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2009-12-23 18:21:38 ----A---- C:\WINDOWS\system32\qwinsta.exe
2009-12-23 18:21:38 ----A---- C:\WINDOWS\system32\qprocess.exe
2009-12-23 18:21:38 ----A---- C:\WINDOWS\system32\qappsrv.exe
2009-12-23 18:21:38 ----A---- C:\WINDOWS\system32\msg.exe
2009-12-23 18:21:38 ----A---- C:\WINDOWS\system32\logoff.exe
2009-12-23 18:21:37 ----A---- C:\WINDOWS\system32\xolehlp.dll
2009-12-23 18:21:37 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2009-12-23 18:21:37 ----A---- C:\WINDOWS\system32\msdtctm.dll
2009-12-23 18:21:37 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2009-12-23 18:21:37 ----A---- C:\WINDOWS\system32\cdmodem.dll
2009-12-23 18:21:36 ----A---- C:\WINDOWS\system32\msdtclog.dll
2009-12-23 18:21:36 ----A---- C:\WINDOWS\system32\msdtc.exe
2009-12-23 18:21:35 ----A---- C:\WINDOWS\system32\stclient.dll
2009-12-23 18:21:35 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2009-12-23 18:21:35 ----A---- C:\WINDOWS\system32\mtxex.dll
2009-12-23 18:21:35 ----A---- C:\WINDOWS\system32\mtxdm.dll
2009-12-23 18:21:35 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2009-12-23 18:21:35 ----A---- C:\WINDOWS\system32\comrepl.dll
2009-12-23 18:21:35 ----A---- C:\WINDOWS\system32\comaddin.dll
2009-12-23 18:21:34 ----A---- C:\WINDOWS\system32\comuid.dll
2009-12-23 18:21:34 ----A---- C:\WINDOWS\system32\comsnap.dll
2009-12-23 18:21:34 ----A---- C:\WINDOWS\system32\clbcatex.dll
2009-12-23 18:21:34 ----A---- C:\WINDOWS\system32\catsrvps.dll
2009-12-23 18:21:26 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2009-12-23 18:21:26 ----A---- C:\WINDOWS\system32\servdeps.dll
2009-12-23 18:21:25 ----A---- C:\WINDOWS\system32\mmfutil.dll
2009-12-23 18:21:25 ----A---- C:\WINDOWS\system32\cmprops.dll
2009-12-23 18:21:20 ----D---- C:\Programme\MSN
2009-12-23 18:21:19 ----D---- C:\Programme\Windows NT
2009-12-23 18:21:19 ----A---- C:\WINDOWS\system32\spider.exe
2009-12-23 18:21:19 ----A---- C:\WINDOWS\system32\mspaint.exe
2009-12-23 18:21:19 ----A---- C:\WINDOWS\system32\mplay32.exe
2009-12-23 18:21:19 ----A---- C:\WINDOWS\system32\clipbrd.exe
2009-12-23 18:21:18 ----A---- C:\WINDOWS\system32\wuauserv.dll
2009-12-23 18:21:18 ----A---- C:\WINDOWS\system32\wuaueng.dll
2009-12-23 18:21:18 ----A---- C:\WINDOWS\system32\wuauclt.exe
2009-12-23 18:21:18 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2009-12-23 18:21:17 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2009-12-23 18:21:17 ----A---- C:\WINDOWS\system32\termsrv.dll
2009-12-23 18:21:17 ----A---- C:\WINDOWS\system32\sessmgr.exe
2009-12-23 18:21:17 ----A---- C:\WINDOWS\system32\remotepg.dll
2009-12-23 18:21:17 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2009-12-23 18:21:17 ----A---- C:\WINDOWS\system32\rdchost.dll
2009-12-23 18:21:17 ----A---- C:\WINDOWS\system32\mstscax.dll
2009-12-23 18:21:17 ----A---- C:\WINDOWS\system32\mstsc.exe
2009-12-23 18:21:16 ----D---- C:\WINDOWS\system32\MsDtc
2009-12-23 18:21:16 ----D---- C:\WINDOWS\system32\Com
2009-12-23 18:21:16 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2009-12-23 18:21:16 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2009-12-23 18:21:16 ----A---- C:\WINDOWS\system32\rdpclip.exe
2009-12-23 18:21:16 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2009-12-23 18:21:16 ----A---- C:\WINDOWS\system32\icaapi.dll
2009-12-23 18:21:16 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2009-12-23 18:21:11 ----A---- C:\WINDOWS\system32\licwmi.dll
2009-12-23 18:20:51 ----A---- C:\WINDOWS\system32\h323log.txt
2009-12-23 18:19:15 ----A---- C:\WINDOWS\system32\hidserv.dll
2009-12-23 18:17:56 ----D---- C:\Programme\Gemeinsame Dateien\ODBC
2009-12-23 18:17:56 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-23 18:17:56 ----A---- C:\WINDOWS\ODBCINST.INI
2009-12-23 18:17:53 ----D---- C:\Programme\Gemeinsame Dateien\SpeechEngines
2009-12-23 18:17:52 ----RD---- C:\Programme
2009-12-23 18:17:52 ----D---- C:\Programme\Gemeinsame Dateien\Microsoft Shared
2009-12-23 18:17:52 ----D---- C:\Programme\Gemeinsame Dateien
2009-12-23 18:17:50 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2009-12-23 18:17:50 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2009-12-23 18:17:50 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbdur.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbdru.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2009-12-23 18:17:48 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2009-12-23 18:17:46 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2009-12-23 18:17:46 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2009-12-23 18:17:46 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2009-12-23 18:17:46 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2009-12-23 18:17:46 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2009-12-23 18:17:46 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2009-12-23 18:17:46 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2009-12-23 18:17:44 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2009-12-23 18:17:44 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2009-12-23 18:17:44 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2009-12-23 18:17:44 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2009-12-23 18:17:44 ----RA---- C:\WINDOWS\system32\kbdest.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdro.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2009-12-23 18:17:42 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2009-12-23 18:17:40 ----A---- C:\WINDOWS\system32\spxcoins.dll
2009-12-23 18:17:40 ----A---- C:\WINDOWS\system32\irclass.dll
2009-12-23 18:17:40 ----A---- C:\WINDOWS\system32\dgsetup.dll
2009-12-23 18:17:40 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2009-12-23 18:17:39 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2009-12-23 18:17:37 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2009-12-23 18:17:37 ----A---- C:\WINDOWS\TASKMAN.EXE
2009-12-23 18:17:37 ----A---- C:\WINDOWS\system32\batt.dll
2009-12-23 18:17:37 ----A---- C:\WINDOWS\notepad.exe
2009-12-23 18:17:35 ----A---- C:\WINDOWS\system32\storprop.dll
2009-12-23 18:17:34 ----ASH---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\desktop.ini
2009-12-23 18:17:02 ----RA---- C:\WINDOWS\SETA.tmp
2009-12-23 18:16:59 ----RA---- C:\WINDOWS\SET3.tmp
2009-12-23 18:16:55 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-23 18:16:55 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-23 18:16:50 ----SD---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft
2009-12-23 18:16:32 ----D---- C:\Dokumente und Einstellungen

======List of files/folders modified in the last 1 months======

2009-12-27 23:51:19 ----A---- C:\WINDOWS\win.ini
2009-12-27 23:51:19 ----A---- C:\WINDOWS\system.ini
2009-12-23 19:12:50 ----RASH---- C:\NTDETECT.COM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Microsoft HID Class-Treiber; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-03-26 4713472]
R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-18 12288]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-11-21 10235968]
R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;USB2-aktivierter Hub; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\System32\DRIVERS\yk51x86.sys [2007-12-28 285952]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;Filtertreiber für Systemwiederherstellung; C:\WINDOWS\System32\DRIVERS\sr.sys [2008-04-14 73472]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-12-25 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-11-20 154216]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 sdAuxService;PC Tools Auxiliary Service; C:\Programme\Spyware Doctor\pctsAuxs.exe [2009-10-30 359624]
S3 sdCoreService;PC Tools Security Service; C:\Programme\Spyware Doctor\pctsSvc.exe [2009-11-06 1141712]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Malwarebytes' Anti-Malware 1.42
Datenbank Version: 3445
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

28.12.2009 23:18:00
mbam-log-2009-12-28 (23-18-00).txt

Scan-Methode: Quick-Scan
Durchsuchte Objekte: 108189
Laufzeit: 2 minute(s), 20 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 1
Infizierte Registrierungsschlüssel: 7
Infizierte Registrierungswerte: 2
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 1
Infizierte Dateien: 10

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
C:\WINDOWS\system32\ygdrb4.dll (Trojan.Agent) -> Delete on reboot.

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\CLSID\{a5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.Zlob.H) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{a5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.Agent) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\LEO0WTUNO7 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\AGprotect (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\J8RPLTROBQ (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.Zlob.H) -> Delete on reboot.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\idstrf (Malware.Trace) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811 (Trojan.Agent) -> Quarantined and deleted successfully.

Infizierte Dateien:
C:\WINDOWS\system32\ygdrb4.dll (Trojan.Zlob.H) -> Delete on reboot.
C:\WINDOWS\system32\nrsg2.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\a.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\coywng.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\prillh.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\David\Lokale Einstellungen\Temp\fkfcayjun.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\David\Lokale Einstellungen\Temp\def4fnpg.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\Desktop.ini (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\d.exe (Trojan.Dropper) -> Quarantined and deleted successfully.

Systemwiederherstellung abschalten (Windowstaste + Pause), im abgesichertem modus nochmal scannen, auch SUPERAntiSpyware soll wunder wirken.
im extremfall halt mit ner Live cd scannen, die du dir mit dem brenner deines vertrauens brennst.