Trojaner-Board - Trojaner "hrt54is56ijfgte"

Hi,

nachfolgend die Datei: hoffe ich habe es richtig gemacht ( Run Scan gestartet ) :OTL Logfile:
Code:
OTL logfile created on: 12/25/2011 7:40:28 PM - Run 

OTLPE by OldTimer - Version 3.1.48.0     Folder = X:\Programs\OTLPE

Microsoft Windows XP Service Pack 2 (Version = 5.1.2600) - Type = SYSTEM

Internet Explorer (Version = 6.0.2800.2180)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

1,022.00 Mb Total Physical Memory | 809.00 Mb Available Physical Memory | 79.00% Memory free

906.00 Mb Paging File | 843.00 Mb Available in Paging File | 93.00% Paging File free

Paging file location(s): c:\pagefile.sys 1536 3072 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme

Drive C: | 97.66 Gb Total Space | 7.62 Gb Free Space | 7.81% Space Free | Partition Type: NTFS

Drive D: | 488.60 Mb Total Space | 238.78 Mb Free Space | 48.87% Space Free | Partition Type: FAT

Drive E: | 51.37 Gb Total Space | 26.72 Gb Free Space | 52.02% Space Free | Partition Type: NTFS

Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS

 

Computer Name: REATOGO | User Name: SYSTEM

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

Using ControlSet: ControlSet002

 
 ========== Win32 Services (SafeList) ==========

 

SRV - File not found [Disabled] --  -- (x10nets)

SRV - File not found [On_Demand] --  -- (iPod Service)

SRV - File not found [On_Demand] --  -- (AppMgmt)

SRV - [2011/08/31 11:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto] -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2011/08/10 07:52:54 | 000,138,760 | R--- | M] (Symantec Corporation) [Auto] -- C:\Programme\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe -- (NIS)

SRV - [2011/07/03 08:16:45 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2011/05/04 08:21:16 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2011/04/22 07:21:10 | 000,092,592 | ---- | M] (TomTom) [Auto] -- C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Anwendungsdaten\Microsoft\CD Burning\Tom Tom\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)

SRV - [2010/12/08 08:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand] -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)

SRV - [2008/11/03 19:06:28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)

SRV - [2006/10/26 08:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)

SRV - [2005/10/03 16:03:06 | 000,098,304 | ---- | M] (Intel Corporation) [Auto] -- C:\Programme\Intel\Wireless\Bin\OProtSvc.exe -- (OwnershipProtocol)

SRV - [2002/02/13 05:18:24 | 000,196,668 | ---- | M] (AVM Berlin) [Disabled] -- C:\Programme\Gemeinsame Dateien\AVM\De_serv.exe -- (de_serv)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - File not found [Kernel | On_Demand] --  -- (WDICA)

DRV - File not found [Kernel | System] --  -- (Wbutton)

DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)

DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)

DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)

DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)

DRV - File not found [Kernel | System] --  -- (PCIDump)

DRV - File not found [Kernel | On_Demand] --  -- (MBAMSwissArmy)

DRV - File not found [Kernel | System] --  -- (mailKmd)

DRV - File not found [Kernel | System] --  -- (lbrtfdc)

DRV - File not found [Kernel | System] --  -- (i2omgmt)

DRV - File not found [Kernel | System] --  -- (Changer)

DRV - [2011/12/25 09:04:32 | 000,127,096 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)

DRV - [2011/08/31 11:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)

DRV - [2011/08/09 20:00:00 | 001,576,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20110810.019\NAVEX15.SYS -- (NAVEX15)

DRV - [2011/08/09 20:00:00 | 000,374,392 | ---- | M] (Symantec Corporation) [Kernel | System] -- C:\Programme\Gemeinsame Dateien\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)

DRV - [2011/08/09 20:00:00 | 000,086,136 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20110810.019\NAVENG.SYS -- (NAVENG)

DRV - [2011/08/08 10:38:12 | 000,132,744 | R--- | M] (Symantec Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\NIS\1301000.01C\ccSetx86.sys -- (ccSet_NIS)

DRV - [2011/08/02 13:22:10 | 000,566,904 | R--- | M] (Symantec Corporation) [File_System | System] -- C:\WINDOWS\system32\drivers\NIS\1301000.01C\SRTSP.SYS -- (SRTSP)

DRV - [2011/08/02 13:22:10 | 000,031,864 | R--- | M] (Symantec Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\NIS\1301000.01C\SRTSPX.SYS -- (SRTSPX) Symantec Real Time Storage Protection (PEL)

DRV - [2011/07/28 14:20:02 | 000,897,656 | R--- | M] (Symantec Corporation) [File_System | Boot] -- C:\WINDOWS\system32\drivers\NIS\1301000.01C\SymEFA.sys -- (SymEFA)

DRV - [2011/07/25 13:18:40 | 000,387,192 | R--- | M] (Symantec Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\NIS\1301000.01C\SYMTDI.SYS -- (SYMTDI)

DRV - [2011/07/25 13:18:36 | 000,340,088 | R--- | M] (Symantec Corporation) [Kernel | Boot] -- C:\WINDOWS\system32\drivers\NIS\1301000.01C\SymDS.sys -- (SymDS)

DRV - [2011/07/25 13:15:52 | 000,149,624 | R--- | M] (Symantec Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\NIS\1301000.01C\Ironx86.SYS -- (SymIRON)

DRV - [2011/07/25 13:15:12 | 000,815,736 | ---- | M] (Symantec Corporation) [Kernel | System] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20110723.001\BHDrvx86.sys -- (BHDrvx86)

DRV - [2011/07/20 12:43:24 | 000,356,280 | ---- | M] (Symantec Corporation) [Kernel | On_Demand] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20110726.001\IDSxpx86.sys -- (IDSxpx86)

DRV - [2011/07/03 08:16:46 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)

DRV - [2011/07/03 08:16:46 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)

DRV - [2010/07/30 08:16:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)

DRV - [2010/07/30 08:16:44 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)

DRV - [2010/07/30 08:16:42 | 000,023,040 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)

DRV - [2010/07/30 08:16:38 | 000,018,048 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)

DRV - [2009/07/29 13:04:30 | 000,129,888 | ---- | M] (Paragon) [Kernel | System] -- C:\WINDOWS\system32\drivers\Uim_IM.sys -- (Uim_IM)

DRV - [2009/07/29 13:04:30 | 000,032,048 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System] -- C:\WINDOWS\system32\drivers\UimBus.sys -- (UimBus)

DRV - [2009/06/10 14:55:24 | 000,826,752 | ---- | M] (Philips Semiconductors GmbH) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\3xHybrid.sys -- (3xHybrid)

DRV - [2009/06/10 14:55:05 | 001,120,352 | ---- | M] (Agere Systems) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AGRSM.sys -- (AgereSoftModem)

DRV - [2009/06/10 14:55:04 | 000,070,912 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys -- (RTL8023xp)

DRV - [2009/06/10 14:55:01 | 003,298,432 | ---- | M] (Intel® Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\w29n51.sys -- (w29n51) Intel(R)

DRV - [2009/06/10 14:54:30 | 000,107,890 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ATSwpDrv.sys -- (ATSWPDRV) AuthenTec TruePrint USB Driver (AES2500)

DRV - [2009/06/10 14:54:28 | 000,067,968 | ---- | M] (Texas Instruments) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tifm21.sys -- (tifm21)

DRV - [2009/06/10 14:54:16 | 004,127,232 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)

DRV - [2009/05/11 05:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)

DRV - [2009/05/11 03:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)

DRV - [2008/08/26 03:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)

DRV - [2005/05/19 09:52:58 | 000,017,792 | ---- | M] (X10 Wireless Technology, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\x10ufx2.sys -- (XUIF)

DRV - [2004/08/04 07:00:00 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\mpe.sys -- (MPE)

DRV - [2003/04/28 04:27:06 | 000,009,867 | ---- | M] () [Kernel | System] -- C:\WINDOWS\System32\drivers\HOTKEY.sys -- (Hotkey)

DRV - [2002/07/15 05:43:06 | 000,073,660 | ---- | M] (elmeg Kommunikationstechnik) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ElgTaDrv.sys -- (ElgTaDrv)

DRV - [2002/02/13 05:18:24 | 000,288,256 | ---- | M] (AVM Berlin) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NETFWDSL.SYS -- (NETFWDSL)

DRV - [2002/02/13 05:18:24 | 000,027,648 | ---- | M] (AVM Berlin) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Aadev.sys -- (aadev)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

 

 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\Gast_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = Google

IE - HKU\Gast_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = 

IE - HKU\Gast_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = 

IE - HKU\Gast_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 

IE - HKU\Gast_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\Holger_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = Google

IE - HKU\Holger_ON_C\..\URLSearchHook: {40c3cc16-7269-4b32-9531-17f2950fb06f} -  File not found

IE - HKU\Holger_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 

 

IE - HKU\systemprofile_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: H:\Nokia PC Suite 7\bkmrksync\

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\IPSFFPlgn\ [2011/12/25 12:35:42 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\coFFPlgn\ [2011/12/25 13:18:34 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011/11/17 12:21:28 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011/05/16 02:59:17 | 000,000,000 | ---D | M]

 

[2011/11/17 12:21:33 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions

[2009/09/24 11:56:18 | 000,000,000 | ---D | M] (Click&amp;Clean) -- C:\Programme\Mozilla Firefox\extensions\clickclean@hotcleaner.com

[2011/11/17 12:21:28 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll

[2011/09/30 09:12:33 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml

[2011/09/30 09:12:33 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml

[2011/09/30 09:12:33 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml

[2011/09/30 09:12:33 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml

[2011/09/30 09:12:33 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml

[2011/09/30 09:12:33 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2011/12/23 20:03:05 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1       localhost

O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)

O2 - BHO: (Winload Toolbar) - {40c3cc16-7269-4b32-9531-17f2950fb06f} -  File not found

O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.

O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Programme\Norton Internet Security\Engine\19.1.0.28\CoIEPlg.dll (Symantec Corporation)

O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Programme\Norton Internet Security\Engine\19.1.0.28\IPS\IPSBHO.dll (Symantec Corporation)

O2 - BHO: (UrlHelper Class) - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Programme\BearShare Applications\BearShare\BearShareIEHelper.dll ()

O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O3 - HKLM\..\Toolbar: (Winload Toolbar) - {40c3cc16-7269-4b32-9531-17f2950fb06f} -  File not found

O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Programme\Norton Internet Security\Engine\19.1.0.28\CoIEPlg.dll (Symantec Corporation)

O3 - HKU\Gast_ON_C\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.

O3 - HKU\Holger_ON_C\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.

O3 - HKU\Holger_ON_C\..\Toolbar\WebBrowser: (Winload Toolbar) - {40C3CC16-7269-4B32-9531-17F2950FB06F} -  File not found

O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [AlcWzrd] C:\WINDOWS\ALCWZRD.EXE (RealTek Semicoductor Corp.)

O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)

O4 - HKLM..\Run: [CtrlVol] C:\Programme\Launch Manager\CtrlVol.exe (Wistron)

O4 - HKLM..\Run: [HotkeyApp] C:\Programme\Launch Manager\HotkeyApp.exe (Wistron)

O4 - HKLM..\Run: [LaunchAp] C:\Programme\Launch Manager\LaunchAp.exe ()

O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Programme\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)

O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()

O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)

O4 - HKLM..\Run: [WBhXTAWuFpmNyON] C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\sbcvvhost_win86.exe ()

O4 - HKLM..\Run: [Wbutton] C:\Programme\Launch Manager\Wbutton.exe ()

O4 - HKU\Holger_ON_C..\Run: [PC Suite Tray]  File not found

O4 - HKU\Holger_ON_C..\Run: [SpybotSD TeaTimer]  File not found

O4 - HKU\Holger_ON_C..\Run: [sr45jurx] C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\aeuy7hsdrt5u\srt56juu.exe ()

O4 - HKU\Holger_ON_C..\Run: [TomTomHOME.exe] C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Anwendungsdaten\Microsoft\CD Burning\Tom Tom\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)

O4 - HKU\Holger_ON_C..\Run: [WBhXTAWuFpmNyON] C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\sbcvvhost_win86.exe ()

O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)

O4 - HKLM..\RunOnce: [NoIE4StubProcessing]  File not found

O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\SystemExplorerDisabled [2011/02/08 11:29:18 | 000,000,000 | -H-D | M]

O4 - Startup: C:\Dokumente und Einstellungen\Holger\Startmenü\Programme\Autostart\SystemExplorerDisabled [2010/03/22 06:19:21 | 000,000,000 | -H-D | M]

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\Gast_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\Holger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\Holger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0

O7 - HKU\Holger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDesktop = 0

O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\systemprofile_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre6\bin\npjpi160_15.dll (Sun Microsystems, Inc.)

O9 - Extra Button: Clean - {CCF00E14-7C5E-4420-9BF3-AA4809CFAA13} - C:\Programme\ClickClean\ClickClean.exe (Mixesoft)

O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)

O16 - DPF: {271A3CF5-5A54-447B-A08F-BE805F0DA60B} https://www.olb.de/olb_fb3_1857/plugin/AXFOAM.CAB (B+S Banksysteme AG DDBAC Plug-In)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)

O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKU\Holger_ON_C Winlogon: Shell - (C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\sbcvvhost_win86.exe) - C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\sbcvvhost_win86.exe ()

O20 - Winlogon\Notify\ComPlusSetup: DllName - C:\WINDOWS\system32\catsrvut.dll - C:\WINDOWS\system32\catsrvut.dll (Microsoft Corporation)

O20 - Winlogon\Notify\IntelWireless: DllName - C:\Programme\Intel\Wireless\Bin\LgNotify.dll - C:\Programme\Intel\Wireless\Bin\LgNotify.dll (Intel Corporation)

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2011/12/24 10:45:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2006/03/24 06:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]

O34 - HKLM BootExecute: (autocheck autochk *) -  File not found

O34 - HKLM BootExecute: (sprestrt) - C:\WINDOWS\System32\sprestrt.exe (Microsoft Corporation)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2011/12/25 13:07:23 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Holger\IECompatCache

[2011/12/25 13:05:50 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Holger\PrivacIE

[2011/12/25 12:36:21 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\Holger\IETldCache

[2011/12/25 10:06:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Malwarebytes

[2011/12/25 10:06:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware

[2011/12/25 10:06:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

[2011/12/25 10:06:01 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2011/12/25 10:06:00 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware

[2011/12/25 09:45:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM

[2011/12/25 09:45:12 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8

[2011/12/25 09:45:02 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood

[2011/12/25 09:40:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Holger\Startmenü\Programme\Norton

[2011/12/25 09:40:19 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Norton

[2011/12/25 09:04:32 | 000,127,096 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS

[2011/12/25 09:04:32 | 000,060,872 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\S32EVNT1.DLL

[2011/12/25 09:04:32 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Symantec Shared

[2011/12/25 09:04:32 | 000,000,000 | ---D | C] -- C:\Programme\Symantec

[2011/12/25 09:04:27 | 000,897,656 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\SymEFA.sys

[2011/12/25 09:04:27 | 000,387,192 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\symtdi.sys

[2011/12/25 09:04:27 | 000,344,184 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\symtdiv.sys

[2011/12/25 09:04:27 | 000,340,088 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\SymDS.sys

[2011/12/25 09:04:27 | 000,314,488 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\symnets.sys

[2011/12/25 09:04:27 | 000,031,864 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\srtspx.sys

[2011/12/25 09:04:26 | 000,566,904 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\srtsp.sys

[2011/12/25 09:04:26 | 000,149,624 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\Ironx86.sys

[2011/12/25 09:04:26 | 000,132,744 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\ccSetx86.sys

[2011/12/25 09:04:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\NIS

[2011/12/25 09:04:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\NIS\1301000.01C

[2011/12/25 09:03:56 | 000,000,000 | ---D | C] -- C:\Programme\Windows Sidebar

[2011/12/25 09:03:56 | 000,000,000 | ---D | C] -- C:\Programme\Norton Internet Security

[2011/12/25 09:03:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Norton Internet Security

[2011/12/25 09:03:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton

[2011/12/25 09:03:36 | 000,000,000 | ---D | C] -- C:\Programme\NortonInstaller

[2011/12/25 09:03:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NortonInstaller

[2011/12/25 06:11:05 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Eigene Dateien

[2011/12/24 15:12:40 | 000,000,000 | ---D | C] -- C:\Program Files

[2011/12/24 12:17:46 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winzm.ime

[2011/12/24 12:17:45 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winsp.ime

[2011/12/24 12:17:45 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winpy.ime

[2011/12/24 12:17:44 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wingb.ime

[2011/12/24 12:17:44 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winime.ime

[2011/12/24 12:17:43 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winar30.ime

[2011/12/24 12:17:41 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll

[2011/12/24 12:17:41 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys

[2011/12/24 12:17:38 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll

[2011/12/24 12:17:37 | 000,426,041 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicepad.dll

[2011/12/24 12:17:37 | 000,086,073 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicesub.dll

[2011/12/24 12:17:32 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniime.dll

[2011/12/24 12:17:32 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unicdime.ime

[2011/12/24 12:17:31 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe

[2011/12/24 12:17:28 | 000,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime

[2011/12/24 12:17:28 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe

[2011/12/24 12:17:28 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe

[2011/12/24 12:17:28 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll

[2011/12/24 12:17:27 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll

[2011/12/24 12:17:26 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys

[2011/12/24 12:17:26 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys

[2011/12/24 12:17:26 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys

[2011/12/24 12:17:20 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll

[2011/12/24 12:17:17 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll

[2011/12/24 12:17:16 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpthrd.dll

[2011/12/24 12:17:16 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll

[2011/12/24 12:17:16 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmptrap.exe

[2011/12/24 12:17:16 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll

[2011/12/24 12:17:15 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpincl.dll

[2011/12/24 12:17:15 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpcl.dll

[2011/12/24 12:17:15 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpsmir.dll

[2011/12/24 12:17:15 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmp.exe

[2011/12/24 12:17:15 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpmib.dll

[2011/12/24 12:17:14 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpsvc.dll

[2011/12/24 12:17:14 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll

[2011/12/24 12:17:13 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smi2smir.exe

[2011/12/24 12:17:13 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll

[2011/12/24 12:17:13 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll

[2011/12/24 12:17:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll

[2011/12/24 12:17:13 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll

[2011/12/24 12:17:12 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll

[2011/12/24 12:17:12 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll

[2011/12/24 12:17:12 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll

[2011/12/24 12:17:12 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll

[2011/12/24 12:17:12 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll

[2011/12/24 12:17:12 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll

[2011/12/24 12:17:12 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll

[2011/12/24 12:17:11 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll

[2011/12/24 12:17:11 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll

[2011/12/24 12:17:11 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll

[2011/12/24 12:17:11 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll

[2011/12/24 12:17:11 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll

[2011/12/24 12:17:10 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll

[2011/12/24 12:17:04 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll

[2011/12/24 12:17:04 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll

[2011/12/24 12:17:01 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll

[2011/12/24 12:17:01 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll

[2011/12/24 12:17:00 | 000,026,624 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll

[2011/12/24 12:17:00 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rw001ext.dll

[2011/12/24 12:16:58 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\romanime.ime

[2011/12/24 12:16:57 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe

[2011/12/24 12:16:57 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe

[2011/12/24 12:16:54 | 000,020,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ramdisk.sys

[2011/12/24 12:16:53 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quick.ime

[2011/12/24 12:16:53 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe

[2011/12/24 12:16:53 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe

[2011/12/24 12:16:48 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll

[2011/12/24 12:16:48 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll

[2011/12/24 12:16:48 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll

[2011/12/24 12:16:47 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlgnt.ime

[2011/12/24 12:16:47 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlphr.exe

[2011/12/24 12:16:47 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmigrate.dll

[2011/12/24 12:16:47 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlcsd.dll

[2011/12/24 12:16:46 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phon.ime

[2011/12/24 12:16:45 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs804.dll

[2011/12/24 12:16:44 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll

[2011/12/24 12:16:44 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs404.dll

[2011/12/24 12:16:44 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll

[2011/12/24 12:16:38 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll

[2011/12/24 12:16:31 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll

[2011/12/24 12:16:30 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtstocom.exe

[2011/12/24 12:16:24 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex

[2011/12/24 12:16:24 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll

[2011/12/24 12:16:14 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migregdb.exe

[2011/12/24 12:16:13 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys

[2011/12/24 12:16:13 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll

[2011/12/24 12:16:11 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll

[2011/12/24 12:16:10 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lprmon.dll

[2011/12/24 12:16:09 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lpdsvc.dll

[2011/12/24 12:16:08 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lmmib2.dll

[2011/12/24 12:16:06 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll

[2011/12/24 12:16:05 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll

[2011/12/24 12:16:05 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll

[2011/12/24 12:16:05 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll

[2011/12/24 12:16:04 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll

[2011/12/24 12:16:04 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll

[2011/12/24 12:16:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll

[2011/12/24 12:16:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll

[2011/12/24 12:16:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll

[2011/12/24 12:16:04 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll

[2011/12/24 12:16:03 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll

[2011/12/24 12:16:03 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll

[2011/12/24 12:16:02 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll

[2011/12/24 12:16:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41a.dll

[2011/12/24 12:16:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41j.dll

[2011/12/24 12:16:01 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll

[2011/12/24 12:16:01 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll

[2011/12/24 12:16:01 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll

[2011/12/24 12:16:01 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll

[2011/12/24 12:16:01 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll

[2011/12/24 12:16:01 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll

[2011/12/24 12:16:00 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdibm02.dll

[2011/12/24 12:16:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll

[2011/12/24 12:16:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll

[2011/12/24 12:16:00 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll

[2011/12/24 12:15:59 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll

[2011/12/24 12:15:59 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll

[2011/12/24 12:15:59 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll

[2011/12/24 12:15:58 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdax2.dll

[2011/12/24 12:15:58 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll

[2011/12/24 12:15:58 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll

[2011/12/24 12:15:58 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll

[2011/12/24 12:15:57 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd106n.dll

[2011/12/24 12:15:57 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll

[2011/12/24 12:15:57 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll

[2011/12/24 12:15:57 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll

[2011/12/24 12:15:57 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll

[2011/12/24 12:15:56 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll

[2011/12/24 12:15:56 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101.dll

[2011/12/24 12:15:54 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iprip.dll

[2011/12/24 12:15:52 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll

[2011/12/24 12:15:52 | 000,315,452 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskf.dll

[2011/12/24 12:15:51 | 000,274,489 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputyc.dll

[2011/12/24 12:15:51 | 000,262,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputy.exe

[2011/12/24 12:15:51 | 000,102,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imlang.dll

[2011/12/24 12:15:51 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe

[2011/12/24 12:15:50 | 000,233,527 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjprw.exe

[2011/12/24 12:15:50 | 000,208,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpmig.exe

[2011/12/24 12:15:50 | 000,155,705 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdsvr.exe

[2011/12/24 12:15:50 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe

[2011/12/24 12:15:49 | 000,716,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcus.dll

[2011/12/24 12:15:49 | 000,368,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcic.dll

[2011/12/24 12:15:49 | 000,307,257 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.exe

[2011/12/24 12:15:49 | 000,081,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.dll

[2011/12/24 12:15:49 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe

[2011/12/24 12:15:48 | 000,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81k.dll

[2011/12/24 12:15:48 | 000,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81.ime

[2011/12/24 12:15:48 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe

[2011/12/24 12:15:48 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll

[2011/12/24 12:15:47 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrcic.dll

[2011/12/24 12:15:47 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekr61.ime

[2011/12/24 12:15:47 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmbx.dll

[2011/12/24 12:15:47 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe

[2011/12/24 12:15:40 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll

[2011/12/24 12:15:29 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll

[2011/12/24 12:15:28 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hostmib.dll

[2011/12/24 12:15:26 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll

[2011/12/24 12:15:24 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsxp32.dll

[2011/12/24 12:15:24 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxstiff.dll

[2011/12/24 12:15:24 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxst30.dll

[2011/12/24 12:15:24 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxswzrd.dll

[2011/12/24 12:15:24 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsui.dll

[2011/12/24 12:15:23 | 000,563,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsst.dll

[2011/12/24 12:15:23 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssvc.exe

[2011/12/24 12:15:23 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll

[2011/12/24 12:15:23 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe

[2011/12/24 12:15:23 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsperf.dll

[2011/12/24 12:15:23 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsres.dll

[2011/12/24 12:15:22 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscomex.dll

[2011/12/24 12:15:22 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscover.exe

[2011/12/24 12:15:22 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscom.dll

[2011/12/24 12:15:22 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsevent.dll

[2011/12/24 12:15:22 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsdrv.dll

[2011/12/24 12:15:22 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsmon.dll

[2011/12/24 12:15:22 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsext32.dll

[2011/12/24 12:15:21 | 000,452,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsapi.dll

[2011/12/24 12:15:21 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclnt.exe

[2011/12/24 12:15:21 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll

[2011/12/24 12:15:21 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll

[2011/12/24 12:15:21 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll

[2011/12/24 12:15:20 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmdll.dll

[2011/12/24 12:15:19 | 000,024,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmcgi.exe

[2011/12/24 12:15:18 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe

[2011/12/24 12:15:17 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll

[2011/12/24 12:15:17 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\f3ahvoas.dll

[2011/12/24 12:15:16 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntagnt.dll

[2011/12/24 12:15:16 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntwin.exe

[2011/12/24 12:15:16 | 000,045,568 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll

[2011/12/24 12:15:16 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntcmd.exe

[2011/12/24 12:15:16 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys

[2011/12/24 12:15:15 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll

[2011/12/24 12:15:15 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll

[2011/12/24 12:15:06 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dayi.ime

[2011/12/24 12:15:03 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe

[2011/12/24 12:15:02 | 000,057,399 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cplexe.exe

[2011/12/24 12:15:00 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe

[2011/12/24 12:14:59 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll

[2011/12/24 12:14:59 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll

[2011/12/24 12:14:59 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll

[2011/12/24 12:14:59 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime

[2011/12/24 12:14:58 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll

[2011/12/24 12:14:57 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll

[2011/12/24 12:14:57 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe

[2011/12/24 12:14:57 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe

[2011/12/24 12:14:57 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe

[2011/12/24 12:14:56 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chajei.ime

[2011/12/24 12:14:56 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe

[2011/12/24 12:14:55 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys

[2011/12/24 12:14:55 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll

[2011/12/24 12:14:55 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll

[2011/12/24 12:14:54 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_g18030.dll

[2011/12/24 12:14:38 | 000,334,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aqueue.dll

[2011/12/24 12:14:38 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll

[2011/12/24 12:14:37 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0804.dll

[2011/12/24 12:14:37 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0412.dll

[2011/12/24 12:14:37 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0411.dll

[2011/12/24 12:14:37 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040d.dll

[2011/12/24 12:14:36 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0404.dll

[2011/12/24 12:14:36 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0401.dll

[2011/12/24 12:14:35 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll

[2011/12/24 12:14:28 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptsat.dll

[2011/12/24 12:14:27 | 000,032,827 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptest.exe

[2011/12/24 12:14:27 | 000,016,437 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.exe

[2011/12/24 12:14:26 | 000,020,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.dll

[2011/12/24 12:14:19 | 000,598,071 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmc.dll

[2011/12/24 12:14:19 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmcsat.dll

[2011/12/24 12:14:19 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpexedll.dll

[2011/12/24 12:14:19 | 000,020,538 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpremadm.exe

[2011/12/24 12:14:18 | 000,876,653 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awel.dll

[2011/12/24 12:14:18 | 000,188,494 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpcount.exe

[2011/12/24 12:14:18 | 000,109,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98swin.exe

[2011/12/24 12:14:18 | 000,049,212 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awebs.dll

[2011/12/24 12:14:18 | 000,032,826 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avss.dll

[2011/12/24 12:14:18 | 000,014,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98sadm.exe

[2011/12/24 12:14:17 | 000,184,435 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4amsft.dll

[2011/12/24 12:14:17 | 000,147,513 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4apws.dll

[2011/12/24 12:14:17 | 000,102,509 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4atxt.dll

[2011/12/24 12:14:17 | 000,082,035 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4anscp.dll

[2011/12/24 12:14:17 | 000,049,210 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4areg.dll

[2011/12/24 12:14:17 | 000,041,020 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avnb.dll

[2011/12/24 12:14:15 | 000,188,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cfgwiz.exe

[2011/12/24 12:14:15 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.dll

[2011/12/24 12:14:15 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.exe

[2011/12/24 12:14:14 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.exe

[2011/12/24 12:14:13 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.dll

[2011/12/24 11:56:58 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll

[2011/12/24 11:56:58 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll

[2011/12/24 11:14:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\OEMDrivers

[2011/12/24 10:44:21 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isignup.exe

[2011/12/24 10:43:26 | 000,000,000 | ---D | C] -- C:\Programme\ComPlus Applications

[2011/12/24 10:42:38 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe

[2011/12/24 10:42:38 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscupgrd.exe

[2011/12/23 20:02:59 | 002,237,440 | R--- | C] (OldTimer Tools) -- C:\OTLPE.exe

[2011/12/23 20:02:48 | 000,000,000 | ---D | C] -- C:\_OTL

[2011/12/23 18:49:01 | 000,000,000 | ---D | C] -- C:\Malwarebytes' Anti-Malware

[2011/12/23 14:09:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Intel

[2011/12/23 14:08:52 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft

[2011/12/23 14:08:52 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Cookies

[2011/12/23 14:08:52 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\SendTo

[2011/12/23 14:08:52 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten

[2011/12/23 14:08:52 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Zubehör

[2011/12/23 14:08:52 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü

[2011/12/23 14:08:52 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart

[2011/12/23 14:08:52 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Vorlagen

[2011/12/23 14:08:52 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Recent

[2011/12/23 14:08:52 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Netzwerkumgebung

[2011/12/23 14:08:52 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen

[2011/12/23 14:08:52 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Druckumgebung

[2011/12/23 14:08:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft Help

[2011/12/23 14:08:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft

[2011/12/23 14:08:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Favoriten

[2011/12/23 14:08:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Desktop

[2011/12/23 10:13:38 | 000,095,744 | ---- | C] (Kassl GmbH) -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\dwlGina3.dll

[2011/12/23 10:12:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\aeuy7hsdrt5u

[2011/12/23 05:55:13 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Holger\Recent

[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2011/12/25 14:31:53 | 000,000,210 | RHS- | M] () -- C:\boot.ini

[2011/12/25 14:30:33 | 000,000,378 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf

[2011/12/25 14:30:32 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2011/12/25 13:18:13 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2011/12/25 13:17:14 | 1072,156,672 | -HS- | M] () -- C:\hiberfil.sys

[2011/12/25 12:40:02 | 000,000,857 | ---- | M] () -- C:\Dokumente und Einstellungen\Holger\Desktop\Norton-Installations-dateien.lnk

[2011/12/25 12:33:16 | 000,452,159 | ---- | M] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\Cat.DB

[2011/12/25 10:06:05 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk

[2011/12/25 10:06:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware

[2011/12/25 09:46:09 | 000,286,560 | ---- | M] () -- C:\WINDOWS\setupapi.old

[2011/12/25 09:04:32 | 000,127,096 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS

[2011/12/25 09:04:32 | 000,060,872 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\S32EVNT1.DLL

[2011/12/25 09:04:32 | 000,007,510 | ---- | M] () -- C:\WINDOWS\System32\drivers\SYMEVENT.CAT

[2011/12/25 09:04:32 | 000,000,806 | ---- | M] () -- C:\WINDOWS\System32\drivers\SYMEVENT.INF

[2011/12/25 09:04:30 | 000,001,937 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Norton Internet Security.LNK

[2011/12/25 09:04:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Norton Internet Security

[2011/12/25 06:17:24 | 000,493,242 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat

[2011/12/25 06:17:24 | 000,469,796 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2011/12/25 06:17:24 | 000,099,578 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat

[2011/12/25 06:17:24 | 000,083,196 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2011/12/24 12:23:48 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2011/12/24 12:19:41 | 000,004,570 | ---- | M] () -- C:\WINDOWS\imsins.BAK

[2011/12/24 12:14:02 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Verwaltung

[2011/12/24 12:13:59 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx

[2011/12/24 12:13:58 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb

[2011/12/24 12:13:58 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb

[2011/12/24 12:13:49 | 000,004,359 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI

[2011/12/24 12:12:47 | 000,000,758 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Windows Movie Maker.lnk

[2011/12/24 12:12:12 | 000,022,908 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat

[2011/12/24 12:11:36 | 000,000,621 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Windows Messenger.lnk

[2011/12/24 12:10:57 | 000,041,156 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml

[2011/12/24 10:53:18 | 000,297,256 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2011/12/24 10:45:48 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT

[2011/12/24 10:42:51 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Spiele

[2011/12/23 10:13:38 | 000,095,744 | ---- | M] (Kassl GmbH) -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\dwlGina3.dll

[2011/12/23 10:12:04 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2011/12/23 10:12:02 | 000,405,504 | ---- | M] () -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\sbcvvhost_win86.exe

[2011/12/23 09:26:42 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini

[2011/12/23 08:54:05 | 000,000,000 | ---- | M] () -- C:\testwma.raw

[2011/12/23 05:47:05 | 000,828,023 | ---- | M] () -- C:\Dokumente und Einstellungen\Holger\Desktop\Rg 11025 Toshi.pdf

[2011/12/23 05:39:05 | 000,006,172 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat

[2011/12/18 06:40:55 | 000,002,521 | ---- | M] () -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Word 2007.lnk

[2011/12/06 13:42:27 | 000,002,523 | ---- | M] () -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Excel 2007.lnk

[2011/11/28 12:59:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\HP

[2011/11/27 06:38:37 | 000,002,563 | ---- | M] () -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Office PowerPoint 2007.lnk

[7 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2011/12/25 13:17:14 | 1072,156,672 | -HS- | C] () -- C:\hiberfil.sys

[2011/12/25 10:06:05 | 000,000,756 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk

[2011/12/25 09:40:20 | 000,000,857 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Desktop\Norton-Installations-dateien.lnk

[2011/12/25 09:05:43 | 000,452,159 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\Cat.DB

[2011/12/25 09:04:32 | 000,007,510 | ---- | C] () -- C:\WINDOWS\System32\drivers\SYMEVENT.CAT

[2011/12/25 09:04:32 | 000,000,806 | ---- | C] () -- C:\WINDOWS\System32\drivers\SYMEVENT.INF

[2011/12/25 09:04:30 | 000,001,937 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Norton Internet Security.LNK

[2011/12/25 09:04:15 | 000,003,433 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\SymEFA.inf

[2011/12/25 09:04:15 | 000,002,852 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\SymDS.inf

[2011/12/25 09:04:15 | 000,001,468 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\SymNetV.inf

[2011/12/25 09:04:15 | 000,001,440 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\SymNet.inf

[2011/12/25 09:04:15 | 000,001,389 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\srtspx.inf

[2011/12/25 09:04:15 | 000,001,389 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\srtsp.inf

[2011/12/25 09:04:15 | 000,000,828 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\ccSetx86.inf

[2011/12/25 09:04:15 | 000,000,742 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\Iron.inf

[2011/12/25 09:04:00 | 000,007,877 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\symnetv.cat

[2011/12/25 09:04:00 | 000,007,510 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\ccSetx86.cat

[2011/12/25 09:04:00 | 000,007,498 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\SymEFA.cat

[2011/12/25 09:04:00 | 000,007,496 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\srtspx.cat

[2011/12/25 09:04:00 | 000,007,492 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\SymDS.cat

[2011/12/25 09:04:00 | 000,007,492 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\srtsp.cat

[2011/12/25 09:04:00 | 000,007,492 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\iron.cat

[2011/12/25 09:04:00 | 000,007,458 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\SymNet.cat

[2011/12/25 09:04:00 | 000,002,801 | R--- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\SymVTcer.dat

[2011/12/25 09:04:00 | 000,000,172 | ---- | C] () -- C:\WINDOWS\System32\drivers\NIS\1301000.01C\isolate.ini

[2011/12/24 12:16:46 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll

[2011/12/24 12:16:06 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex

[2011/12/24 12:15:51 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe

[2011/12/24 12:15:50 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe

[2011/12/24 12:15:47 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex

[2011/12/24 12:15:34 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll

[2011/12/24 12:15:26 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex

[2011/12/24 12:15:20 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll

[2011/12/24 12:14:59 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll

[2011/12/24 11:56:54 | 000,168,806 | ---- | C] () -- C:\WINDOWS\System32\dllcache\startoc.cat

[2011/12/24 11:56:54 | 000,041,270 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT

[2011/12/24 11:56:54 | 000,018,989 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat

[2011/12/24 11:56:54 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT

[2011/12/24 11:56:54 | 000,011,651 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat

[2011/12/24 11:56:54 | 000,009,581 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT

[2011/12/24 11:56:54 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT

[2011/12/24 11:56:54 | 000,007,245 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT

[2011/12/24 11:56:54 | 000,007,046 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT

[2011/12/24 11:56:53 | 001,899,936 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT

[2011/12/24 11:56:53 | 001,014,663 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP2.CAT

[2011/12/24 11:56:53 | 000,817,199 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT

[2011/12/24 11:56:53 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT

[2011/12/24 11:56:53 | 000,030,983 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT

[2011/12/24 11:56:53 | 000,014,043 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT

[2011/12/24 11:56:52 | 000,521,298 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT

[2011/12/24 10:45:48 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT

[2011/12/24 10:42:51 | 000,000,621 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Windows Messenger.lnk

[2011/12/23 14:08:52 | 000,001,599 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Remoteunterstützung.lnk

[2011/12/23 14:08:52 | 000,000,772 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Windows Media Player.lnk

[2011/12/23 10:12:06 | 000,405,504 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\sbcvvhost_win86.exe

[2011/12/23 05:47:05 | 000,828,023 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Desktop\Rg 11025 Toshi.pdf

[2011/12/11 07:40:51 | 000,006,172 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat

[2011/11/01 12:47:24 | 000,166,589 | ---- | C] () -- C:\WINDOWS\hpoins21.dat

[2011/11/01 12:47:24 | 000,008,138 | ---- | C] () -- C:\WINDOWS\hpomdl21.dat

[2011/01/02 12:20:43 | 000,000,024 | ---- | C] () -- C:\WINDOWS\Pcrk32.INI

[2010/10/14 10:17:51 | 000,000,032 | ---- | C] () -- C:\WINDOWS\Menu.INI

[2010/02/03 06:25:56 | 000,001,028 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\WavCodec.wff

[2009/10/11 07:22:34 | 002,808,832 | ---- | C] () -- C:\Programme\Gemeinsame DateienDDBACSetup.msi

[2009/10/04 10:33:01 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\$_hpcst$.hpc

[2009/09/24 11:48:15 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\vsmon1.dll

[2009/09/17 09:56:18 | 000,206,036 | ---- | C] () -- C:\WINDOWS\hpwins14.dat

[2009/09/17 09:56:17 | 000,001,108 | R--- | C] () -- C:\WINDOWS\hpwmdl14.dat

[2009/09/16 12:02:20 | 000,320,512 | ---- | C] () -- C:\WINDOWS\System32\W32MKDE.EXE

[2009/09/16 12:02:18 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\W32MKRC.DLL

[2009/09/16 12:02:14 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\LxCI11.dll

[2009/08/28 12:40:23 | 000,000,000 | ---- | C] () -- C:\WINDOWS\hpqEmlSz.INI

[2009/07/31 07:29:04 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini

[2009/07/07 13:13:01 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat

[2009/07/07 12:11:26 | 000,121,256 | ---- | C] () -- C:\WINDOWS\hpqins00.dat

[2009/06/22 12:29:22 | 000,165,971 | ---- | C] () -- C:\WINDOWS\hpoins21.dat.temp

[2009/06/22 12:29:22 | 000,008,138 | ---- | C] () -- C:\WINDOWS\hpomdl21.dat.temp

[2009/06/15 12:15:24 | 000,078,336 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009/06/14 11:06:21 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\LxUtl10.dll

[2009/06/11 14:08:08 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Holger\Ÿ9Ÿ9

[2009/06/11 13:36:01 | 000,012,717 | R--- | C] () -- C:\WINDOWS\hpwscr14.dat

[2009/06/11 11:49:24 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI

[2009/06/11 08:33:51 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2009/06/11 08:06:30 | 000,016,384 | ---- | C] () -- C:\WINDOWS\System32\iwca.dll

[2009/06/11 07:57:00 | 000,004,212 | -H-- | C] () -- C:\WINDOWS\System32\zllictbl.dat

[2009/06/10 20:11:41 | 000,004,359 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2009/06/10 20:10:21 | 000,297,256 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2009/06/10 19:31:28 | 000,127,184 | ---- | C] () -- C:\WINDOWS\Unwise.exe

[2009/06/10 19:31:25 | 000,009,867 | ---- | C] () -- C:\WINDOWS\System32\drivers\HOTKEY.sys

[2009/06/10 19:23:37 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2009/06/10 19:18:21 | 000,022,908 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

[2009/06/10 14:55:23 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll

[2009/06/10 14:54:28 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\tifmicon.dll

[2007/11/15 14:31:34 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\LXPrnUtil10.dll

[2007/11/15 14:27:40 | 000,303,104 | ---- | C] () -- C:\WINDOWS\System32\dnt27VC8.dll

[2007/11/15 14:25:28 | 000,090,112 | ---- | C] () -- C:\WINDOWS\System32\dntvmc27VC8.dll

[2007/11/15 14:25:12 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\dntvm27VC8.dll

[2007/03/12 15:31:28 | 001,732,608 | ---- | C] () -- C:\WINDOWS\System32\BCGPStyle2007Luna.dll

[2006/09/21 06:53:28 | 000,282,679 | ---- | C] () -- C:\WINDOWS\System32\dnt27.dll

[2006/09/21 06:52:24 | 000,077,882 | ---- | C] () -- C:\WINDOWS\System32\dntvmc27.dll

[2006/09/21 06:52:14 | 000,077,881 | ---- | C] () -- C:\WINDOWS\System32\dntvm27.dll

[2005/11/21 17:51:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll

[2005/11/21 17:51:00 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe

[2005/11/21 17:51:00 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll

[2005/11/21 17:51:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe

[2005/11/21 17:51:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll

[2005/11/21 17:51:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll

[2005/11/21 17:51:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe

[2005/11/21 17:51:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe

[2005/11/21 17:51:00 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll

[2004/08/04 07:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat

[2004/08/04 07:00:00 | 000,493,242 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat

[2004/08/04 07:00:00 | 000,469,796 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat

[2004/08/04 07:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat

[2004/08/04 07:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat

[2004/08/04 07:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat

[2004/08/04 07:00:00 | 000,099,578 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat

[2004/08/04 07:00:00 | 000,083,196 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat

[2004/08/04 07:00:00 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\ieencode.dll

[2004/08/04 07:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin

[2004/08/04 07:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat

[2004/08/04 07:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat

[2004/08/04 07:00:00 | 000,027,440 | ---- | C] () -- C:\WINDOWS\System32\drivers\secdrv.sys

[2004/08/04 07:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat

[2004/08/04 07:00:00 | 000,001,788 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin

[2004/08/04 07:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat

[2004/08/03 19:57:34 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll

[2001/10/10 01:57:58 | 000,073,786 | ---- | C] () -- C:\WINDOWS\System32\dntvmc23.dll

[2001/10/10 01:57:58 | 000,061,497 | ---- | C] () -- C:\WINDOWS\System32\dntvm23.dll

[2001/09/04 08:12:28 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin

[2001/09/04 08:10:20 | 000,004,518 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat

[2001/03/07 01:02:30 | 000,229,431 | ---- | C] () -- C:\WINDOWS\System32\dnt23.dll

 
 ========== LOP Check ==========

 

[2010/08/06 14:02:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gast\Anwendungsdaten\COMPUTERBILD-Abzockschutz

[2009/06/22 10:18:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\acccore

[2011/12/23 10:12:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\aeuy7hsdrt5u

[2009/07/27 12:14:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Alexosoft

[2011/02/20 10:38:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Auslogics

[2009/06/15 11:00:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Automatische-Datensicherung.de

[2010/06/15 12:40:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\COMPUTERBILD-Abzockschutz

[2009/09/28 03:14:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\DataDesign

[2009/06/14 10:16:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Datalayer

[2009/06/11 08:48:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\EasyPCGate

[2011/10/30 08:48:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\eXPert PDF 5

[2009/09/24 12:37:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\eXPert PDF Editor

[2011/02/08 11:29:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\GetRightToGo

[2009/06/11 08:48:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\ImagesWords

[2010/02/22 11:12:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Itsth

[2010/09/28 11:36:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Langmeier Software

[2009/06/11 13:25:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Lexware

[2010/02/10 05:01:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Mondo Media

[2010/02/03 06:15:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\NCH Swift Sound

[2010/09/14 08:37:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Nokia

[2010/06/13 05:54:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Nokia Ovi Suite

[2011/05/11 12:16:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Notepad++

[2010/05/09 09:56:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Obsidium

[2009/06/11 07:56:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\OpenOffice.org

[2010/08/22 06:55:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\PC Suite

[2009/12/10 10:04:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\TeamViewer

[2010/06/10 07:46:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\TomTom

[2009/08/23 10:59:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Holger\Anwendungsdaten\Windows Search

[2009/06/10 19:40:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\X10 Commander

[2009/07/12 10:25:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\2B196

[2009/06/11 13:25:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BTrieve

[2010/04/05 12:40:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Downloaded Installations

[2011/06/29 03:50:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Easy Driver Pro

[2009/09/24 11:47:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eXPert PDF

[2009/09/24 12:32:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eXPert PDF 5

[2009/09/24 11:47:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eXPert PDF Jobs

[2009/11/29 09:26:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\explauncher

[2011/02/22 11:31:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Installations

[2009/11/30 11:38:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\launcher

[2009/06/11 13:24:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Lexware

[2009/06/11 07:57:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MailFrontier

[2010/02/03 12:54:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NCH Swift Sound

[2010/07/11 11:32:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nokia

[2010/06/13 04:42:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\OviInstallerCache

[2009/11/29 09:30:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Paragon

[2010/06/13 04:48:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite

[2009/12/25 05:25:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PRMT

[2011/10/30 12:13:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM

[2009/09/24 11:53:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sync App Settings

[2011/02/08 10:05:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SystemExplorer

[2010/06/10 07:48:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TomTom

[2011/06/29 03:50:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\UAB

[2009/06/10 19:40:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\X10 Settings

[2009/07/31 01:45:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}

[2010/10/15 02:59:15 | 000,000,922 | ---- | M] () -- C:\WINDOWS\Tasks\Paragon Archive name arc_151010075708875.job

[2010/10/15 05:55:09 | 000,000,922 | ---- | M] () -- C:\WINDOWS\Tasks\Paragon Archive name arc_151010080058062.job

 
 ========== Purity Check ==========

 

 

< End of report >
--- --- ---