Trojaner-Board - Bitte um Überprüfung

Grund der Anfrage, ich habe mir letztens ein Raubkopiertes Spiel von UseNext installiert. Nun habe ich Sorgen, dass mein Rechner in einem Botnetz ist. :(

DDS.txt:
Code:
.

DDS (Ver_2011-08-26.01) - NTFSAMD64 

Internet Explorer: 8.0.7601.17514  BrowserJavaVersion: 1.6.0_30

Run by User at 20:13:47 on 2012-02-10

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.6135.4574 [GMT 1:00]

.

AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\atieclxx.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\SysWOW64\HsMgr.exe

C:\Windows\system\HsMgr64.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Program Files (x86)\Skype\Phone\Skype.exe

C:\Program Files\ASUS Xonar DG Audio\Customapp\ASUSAUDIOCENTER.EXE

C:\Users\User\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe

C:\Users\User\AppData\Local\Apps\2.0\3P5L17YQ.PLD\K9NVK7X3.XLT\curs..tion_eee711038731a406_0004.0000_2ad57791d5c42008\CurseClient.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Windows\system32\CISVC.EXE

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe

C:\Program Files\Microsoft LifeCam\MSCamS64.exe

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\PrintIsolationHost.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\conhost.exe

C:\Windows\SysWOW64\cscript.exe

.

============== Pseudo HJT Report ===============

.

mWinlogon: Userinit=userinit.exe

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized

uRun: [SansaDispatch] C:\Users\User\AppData\Roaming\SanDisk\Sansa Updater\SansaDispatch.exe

mRun: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

mRun: [NPSStartup] 

mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

StartupFolder: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip

mPolicies-explorer: NoActiveDesktop = 1 (0x1)

mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)

mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: An OneNote s&enden - C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105

IE: Nach Microsoft E&xcel exportieren - C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000

IE: Nach Microsoft E&xel exportieren - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab

TCP: DhcpNameServer = 192.168.198.239

TCP: Interfaces\{4D3219DA-0E85-44C4-AFB2-C449FB57032C} : DhcpNameServer = 192.168.198.239

TCP: Interfaces\{F2293265-0502-450E-8A49-18B3328C4ECB} : DhcpNameServer = 8.8.8.8

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\spiele\Overwulf\SKYPE4~1.DLL

{18DF081C-E8AD-4283-A596-FA578C2EBDC3}

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}

{9030D464-4C02-4ABF-8ECC-5164760863C6}

{DBC80044-A445-435b-BC74-9C25C1C588A9}

mRun-x64: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

mRun-x64: [NPSStartup] 

mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\kfkth71s.Neu\

FF - prefs.js: browser.startup.homepage - www.google.de

FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

.

============= SERVICES / DRIVERS ===============

.

R1 aswSnx;aswSnx;C:\Windows\system32\drivers\aswSnx.sys --> C:\Windows\system32\drivers\aswSnx.sys [?]

R1 aswSP;aswSP;C:\Windows\system32\drivers\aswSP.sys --> C:\Windows\system32\drivers\aswSP.sys [?]

R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928]

R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]

R2 aswFsBlk;aswFsBlk;C:\Windows\system32\drivers\aswFsBlk.sys --> C:\Windows\system32\drivers\aswFsBlk.sys [?]

R2 aswMonFlt;aswMonFlt;\??\C:\Windows\system32\drivers\aswMonFlt.sys --> C:\Windows\system32\drivers\aswMonFlt.sys [?]

R2 avast! Antivirus;avast! Antivirus;C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-12-4 44768]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-8-3 379496]

R3 Abyssus;Razer Abyssus;C:\Windows\system32\drivers\Abyssus.sys --> C:\Windows\system32\drivers\Abyssus.sys [?]

R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]

R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]

R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\system32\drivers\AtihdW76.sys --> C:\Windows\system32\drivers\AtihdW76.sys [?]

R3 cmudaxp;ASUS Xonar DG Audio Interface;C:\Windows\system32\drivers\cmudaxp.sys --> C:\Windows\system32\drivers\cmudaxp.sys [?]

R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver;C:\Windows\system32\Drivers\nx6000.sys --> C:\Windows\system32\Drivers\nx6000.sys [?]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-12-30 2255464]

S3 BackupReader;BackupReader;C:\Windows\system32\DRIVERS\BackupReader.sys --> C:\Windows\system32\DRIVERS\BackupReader.sys [?]

S3 BrYNSvc;BrYNSvc;C:\Program Files (x86)\Browny02\BrYNSvc.exe [2011-10-12 245760]

S3 dmvsc;dmvsc;C:\Windows\system32\DRIVERS\dmvsc.sys --> C:\Windows\system32\DRIVERS\dmvsc.sys [?]

S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe [2011-10-12 130976]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]

S3 OverwolfUpdaterService;Overwolf Updater Service;D:\spiele\Overwulf\OverwolfUpdater.exe [2012-1-29 17848]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\system32\drivers\rdpvideominiport.sys --> C:\Windows\system32\drivers\rdpvideominiport.sys [?]

S3 RTL8023x64;Realtek 10/100-Netzwerkkartenfamilie-NDIS-x64-Treiber;C:\Windows\system32\DRIVERS\Rtnic64.sys --> C:\Windows\system32\DRIVERS\Rtnic64.sys [?]

S3 Synth3dVsc;Synth3dVsc;C:\Windows\system32\drivers\synth3dvsc.sys --> C:\Windows\system32\drivers\synth3dvsc.sys [?]

S3 terminpt;Microsoft Remote Desktop Input Driver;C:\Windows\system32\DRIVERS\terminpt.sys --> C:\Windows\system32\DRIVERS\terminpt.sys [?]

S3 TFsExDisk;TFsExDisk;C:\Windows\System32\drivers\TFsExDisk.Sys [2011-10-16 16448]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]

S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;C:\Windows\system32\DRIVERS\TsUsbGD.sys --> C:\Windows\system32\DRIVERS\TsUsbGD.sys [?]

S3 tsusbhub;tsusbhub;C:\Windows\system32\drivers\tsusbhub.sys --> C:\Windows\system32\drivers\tsusbhub.sys [?]

S3 VKbms;Virtual HID Minidriver;C:\Windows\system32\DRIVERS\VKbms.sys --> C:\Windows\system32\DRIVERS\VKbms.sys [?]

.

=============== Created Last 30 ================

.

2012-02-10 15:36:29        --------        d-----w-        C:\ProgramData\TriDef 3D

2012-02-10 11:56:24        --------        d-----w-        C:\ProgramData\DDD

2012-02-10 11:56:20        --------        d-----w-        C:\Program Files (x86)\TriDef 3D

2012-02-10 11:51:53        --------        d-----w-        C:\Program Files (x86)\MonitorDriver

2012-02-06 16:55:21        --------        d-----w-        C:\Users\User\AppData\Local\Deployment

2012-02-06 16:21:11        --------        d-----w-        C:\Program Files (x86)\Common Files\Blizzard Entertainment

2012-02-06 16:20:52        --------        d-----w-        C:\ProgramData\Blizzard Entertainment

2012-02-04 18:26:02        77824        ----a-w-        C:\Program Files (x86)\Common Files\InstallShield\engine\6\Intel 32\ctor.dll

2012-02-04 18:26:02        32768        ------w-        C:\Program Files (x86)\Common Files\InstallShield\engine\6\Intel 32\objectps.dll

2012-02-04 18:26:02        225280        ------w-        C:\Program Files (x86)\Common Files\InstallShield\IScript\IScript.dll

2012-02-04 18:26:02        212992        ------w-        C:\Program Files (x86)\Common Files\InstallShield\engine\6\Intel 32\ILog.dll

2012-02-04 18:26:02        176128        ------w-        C:\Program Files (x86)\Common Files\InstallShield\engine\6\Intel 32\iuser.dll

2012-02-04 14:36:09        --------        d-----w-        C:\Users\User\AppData\Local\SecondLife

2012-02-03 23:26:37        --------        d-----w-        C:\Users\User\AppData\Local\Monte Cristo

2012-02-03 16:13:43        --------        d-----w-        C:\ProgramData\TERA

2012-02-01 20:42:05        --------        d-----w-        C:\ProgramData\EA Games

2012-02-01 18:20:14        --------        d--h--w-        C:\Windows\PIF

2012-01-31 16:29:08        --------        d-----w-        C:\Program Files (x86)\Arcade Classic Pack

2012-01-31 12:42:29        --------        d-----w-        C:\Users\User\AppData\Local\Funcom

2012-01-31 12:42:17        --------        d-----w-        C:\ProgramData\media center programs

2012-01-29 12:28:57        --------        d-----w-        C:\Program Files (x86)\Common Files\Overwolf

2012-01-29 12:27:08        --------        d-----w-        C:\Users\User\AppData\Local\Overwolf

2012-01-29 10:37:45        --------        d-----w-        C:\Users\User\AppData\Roaming\FOG Downloader

2012-01-27 09:55:16        --------        d-----w-        C:\Program Files (x86)\AMD APP

2012-01-27 09:53:31        --------        d-----w-        C:\AMD

2012-01-26 07:56:00        --------        d-----w-        C:\Program Files (x86)\DAEMON Tools Lite

2012-01-24 20:14:58        --------        d-----w-        C:\Program Files (x86)\Microsoft SQL Server

2012-01-24 20:14:56        --------        d-----w-        C:\Program Files\Microsoft Synchronization Services

2012-01-24 20:14:55        --------        d-----w-        C:\Program Files\Microsoft SQL Server Compact Edition

2012-01-24 20:14:54        --------        d-----w-        C:\Program Files (x86)\Microsoft Synchronization Services

2012-01-24 20:14:53        --------        d-----w-        C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2012-01-24 20:14:46        188896        ----a-w-        C:\ProgramData\Microsoft\VCSExpress\10.0\1031\ResourceCache.dll

2012-01-24 20:14:16        --------        d-----w-        C:\Program Files (x86)\Microsoft Visual Studio 10.0

2012-01-24 20:13:57        --------        d-----w-        C:\Program Files\Microsoft Visual Studio 10.0

2012-01-24 20:13:56        --------        d-----w-        C:\Program Files\Microsoft Help Viewer

2012-01-22 11:35:04        --------        d-----w-        C:\Users\User\AppData\Roaming\elsterformular

2012-01-22 11:34:55        --------        d-----w-        C:\ProgramData\elsterformular

2012-01-22 11:34:50        --------        d-----w-        C:\Program Files (x86)\ElsterFormular

2012-01-21 17:57:19        --------        d-----w-        C:\Users\User\AppData\Roaming\Lexware

2012-01-21 17:42:25        --------        d-----w-        C:\ProgramData\lexware

2012-01-21 17:42:01        1929216        ----a-w-        C:\Windows\SysWow64\cdintf250.dll

2012-01-21 17:40:45        --------        d-----w-        C:\Program Files (x86)\Haufe

2012-01-21 17:40:44        --------        d-----w-        C:\ProgramData\Haufe

2012-01-21 17:40:26        455680        ----a-w-        C:\Windows\System32\deploytk.dll

2012-01-21 17:39:26        472808        ----a-w-        C:\Windows\SysWow64\deployJava1.dll

2012-01-21 17:38:22        --------        d-----w-        C:\Program Files (x86)\Microsoft WSE

2012-01-21 17:34:37        --------        d-----w-        C:\Program Files (x86)\Common Files\Lexware

2012-01-21 17:34:35        --------        d-----w-        C:\Users\User\AppData\Local\Lexware

2012-01-15 13:53:38        --------        d-----w-        C:\Users\User\AppData\Local\SWTOR

2012-01-14 18:54:12        --------        d-----w-        C:\Program Files (x86)\Common Files\BioWare

.

==================== Find3M  ====================

.

2012-01-26 07:56:11        564792        ----a-w-        C:\Windows\System32\drivers\sptd.sys

2012-01-11 10:47:40        466456        ----a-w-        C:\Windows\System32\wrap_oal.dll

2012-01-11 10:47:40        444952        ----a-w-        C:\Windows\SysWow64\wrap_oal.dll

2012-01-11 10:47:40        122904        ----a-w-        C:\Windows\System32\OpenAL32.dll

2012-01-11 10:47:40        109080        ----a-w-        C:\Windows\SysWow64\OpenAL32.dll

2011-12-30 18:11:31        0        ----a-w-        C:\Windows\ativpsrm.bin

2011-12-15 17:29:42        31232        ----a-w-        C:\Windows\System32\drivers\tap0901.sys

2011-12-06 03:45:40        10720256        ----a-w-        C:\Windows\System32\drivers\atikmdag.sys

2011-12-06 03:18:38        25371136        ----a-w-        C:\Windows\System32\atio6axx.dll

2011-12-06 03:17:50        159744        ----a-w-        C:\Windows\System32\atiapfxx.exe

2011-12-06 03:17:36        778752        ----a-w-        C:\Windows\SysWow64\aticfx32.dll

2011-12-06 03:16:00        933888        ----a-w-        C:\Windows\System32\aticfx64.dll

2011-12-06 03:12:52        466944        ----a-w-        C:\Windows\System32\ATIDEMGX.dll

2011-12-06 03:12:36        494080        ----a-w-        C:\Windows\System32\atieclxx.exe

2011-12-06 03:11:56        235520        ----a-w-        C:\Windows\System32\atiesrxx.exe

2011-12-06 03:10:38        120320        ----a-w-        C:\Windows\System32\atitmm64.dll

2011-12-06 03:10:20        423424        ----a-w-        C:\Windows\System32\atipdl64.dll

2011-12-06 03:10:12        360448        ----a-w-        C:\Windows\SysWow64\atipdlxx.dll

2011-12-06 03:10:00        278528        ----a-w-        C:\Windows\SysWow64\Oemdspif.dll

2011-12-06 03:09:56        21504        ----a-w-        C:\Windows\System32\atimuixx.dll

2011-12-06 03:09:50        59392        ----a-w-        C:\Windows\System32\atiedu64.dll

2011-12-06 03:09:44        43520        ----a-w-        C:\Windows\SysWow64\ati2edxx.dll

2011-12-06 03:06:38        6159872        ----a-w-        C:\Windows\SysWow64\atidxx32.dll

2011-12-06 02:56:40        19125760        ----a-w-        C:\Windows\SysWow64\atioglxx.dll

2011-12-06 02:51:22        7520768        ----a-w-        C:\Windows\System32\atidxx64.dll

2011-12-06 02:39:58        1113088        ----a-w-        C:\Windows\System32\atiumd6v.dll

2011-12-06 02:39:24        1828864        ----a-w-        C:\Windows\SysWow64\atiumdmv.dll

2011-12-06 02:39:12        4072960        ----a-w-        C:\Windows\System32\atiumd6a.dll

2011-12-06 02:34:28        51200        ----a-w-        C:\Windows\System32\aticalrt64.dll

2011-12-06 02:34:24        46080        ----a-w-        C:\Windows\SysWow64\aticalrt.dll

2011-12-06 02:34:16        44544        ----a-w-        C:\Windows\System32\aticalcl64.dll

2011-12-06 02:34:14        44032        ----a-w-        C:\Windows\SysWow64\aticalcl.dll

2011-12-06 02:34:00        13738496        ----a-w-        C:\Windows\System32\aticaldd64.dll

2011-12-06 02:33:36        5919232        ----a-w-        C:\Windows\SysWow64\atiumdag.dll

2011-12-06 02:29:30        11484672        ----a-w-        C:\Windows\SysWow64\aticaldd.dll

2011-12-06 02:28:50        4206592        ----a-w-        C:\Windows\SysWow64\atiumdva.dll

2011-12-06 02:24:02        7511040        ----a-w-        C:\Windows\System32\atiumd64.dll

2011-12-06 02:18:46        58880        ----a-w-        C:\Windows\System32\coinst.dll

2011-12-06 02:13:02        509952        ----a-w-        C:\Windows\System32\atiadlxx.dll

2011-12-06 02:12:52        356352        ----a-w-        C:\Windows\SysWow64\atiadlxy.dll

2011-12-06 02:12:38        17408        ----a-w-        C:\Windows\System32\atig6pxx.dll

2011-12-06 02:12:34        14336        ----a-w-        C:\Windows\SysWow64\atiglpxx.dll

2011-12-06 02:12:34        14336        ----a-w-        C:\Windows\System32\atiglpxx.dll

2011-12-06 02:12:30        39936        ----a-w-        C:\Windows\System32\atig6txx.dll

2011-12-06 02:12:22        33280        ----a-w-        C:\Windows\SysWow64\atigktxx.dll

2011-12-06 02:12:14        327168        ----a-w-        C:\Windows\System32\drivers\atikmpag.sys

2011-12-06 02:11:24        42496        ----a-w-        C:\Windows\System32\atiuxp64.dll

2011-12-06 02:11:16        33280        ----a-w-        C:\Windows\SysWow64\atiuxpag.dll

2011-12-06 02:11:10        39936        ----a-w-        C:\Windows\System32\atiu9p64.dll

2011-12-06 02:11:02        29696        ----a-w-        C:\Windows\SysWow64\atiu9pag.dll

2011-12-06 02:10:48        54784        ----a-w-        C:\Windows\System32\atimpc64.dll

2011-12-06 02:10:48        54784        ----a-w-        C:\Windows\System32\amdpcom64.dll

2011-12-06 02:10:42        53760        ----a-w-        C:\Windows\SysWow64\atimpc32.dll

2011-12-06 02:10:42        53760        ----a-w-        C:\Windows\SysWow64\amdpcom32.dll

2011-12-06 02:10:24        53248        ----a-w-        C:\Windows\System32\drivers\ati2erec.dll

2011-12-05 21:04:06        69632        ----a-w-        C:\Windows\System32\OpenVideo64.dll

2011-12-05 21:04:00        59904        ----a-w-        C:\Windows\SysWow64\OpenVideo.dll

2011-12-05 21:03:54        61952        ----a-w-        C:\Windows\System32\OVDecode64.dll

2011-12-05 21:03:52        54784        ----a-w-        C:\Windows\SysWow64\OVDecode.dll

2011-12-05 21:03:42        17580544        ----a-w-        C:\Windows\System32\amdocl64.dll

2011-12-05 21:03:04        14499328        ----a-w-        C:\Windows\SysWow64\amdocl.dll

2011-11-30 12:13:06        414368        ----a-w-        C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2011-11-28 18:01:25        41184        ----a-w-        C:\Windows\avastSS.scr

2011-11-28 17:54:06        591192        ----a-w-        C:\Windows\System32\drivers\aswSnx.sys

2011-11-28 17:52:11        66904        ----a-w-        C:\Windows\System32\drivers\aswMonFlt.sys

2011-11-24 04:52:09        3145216        ----a-w-        C:\Windows\System32\win32k.sys

2011-11-19 14:58:00        77312        ----a-w-        C:\Windows\System32\packager.dll

2011-11-19 14:01:00        67072        ----a-w-        C:\Windows\SysWow64\packager.dll

2011-11-17 06:49:14        95600        ----a-w-        C:\Windows\System32\drivers\ksecdd.sys

2011-11-17 06:49:14        152432        ----a-w-        C:\Windows\System32\drivers\ksecpkg.sys

2011-11-17 06:44:43        459232        ----a-w-        C:\Windows\System32\drivers\cng.sys

2011-11-17 06:41:18        1731920        ----a-w-        C:\Windows\System32\ntdll.dll

2011-11-17 06:35:28        395776        ----a-w-        C:\Windows\System32\webio.dll

2011-11-17 06:35:26        29184        ----a-w-        C:\Windows\System32\sspisrv.dll

2011-11-17 06:35:26        136192        ----a-w-        C:\Windows\System32\sspicli.dll

2011-11-17 06:35:25        340992        ----a-w-        C:\Windows\System32\schannel.dll

2011-11-17 06:35:25        28160        ----a-w-        C:\Windows\System32\secur32.dll

2011-11-17 06:35:19        1447936        ----a-w-        C:\Windows\System32\lsasrv.dll

2011-11-17 06:33:55        31232        ----a-w-        C:\Windows\System32\lsass.exe

2011-11-17 05:38:39        1292080        ----a-w-        C:\Windows\SysWow64\ntdll.dll

2011-11-17 05:35:02        314880        ----a-w-        C:\Windows\SysWow64\webio.dll

2011-11-17 05:34:52        224768        ----a-w-        C:\Windows\SysWow64\schannel.dll

2011-11-17 05:34:52        22016        ----a-w-        C:\Windows\SysWow64\secur32.dll

2011-11-17 05:28:48        96768        ----a-w-        C:\Windows\SysWow64\sspicli.dll

2011-11-15 16:58:56        146432        ----a-w-        C:\Windows\System32\SlotMaximizerAg.dll

2011-11-15 16:58:54        3507712        ----a-w-        C:\Windows\System32\SlotMaximizerBe.dll

2011-11-15 16:57:06        2463744        ----a-w-        C:\Windows\SysWow64\SlotMaximizerBe.dll

2011-11-15 16:57:02        122880        ----a-w-        C:\Windows\SysWow64\SlotMaximizerAg.dll

.

============= FINISH: 20:15:34,71 ===============
Die Attach.txt folgt auf Anfrage gezippt.