Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   TR/Crypt.ZPACK.Gen - log dateien von malwarebytes und rsit (https://www.trojaner-board.de/79441-tr-crypt-zpack-gen-log-dateien-malwarebytes-rsit.html)

sunny82 14.11.2009 23:17
TR/Crypt.ZPACK.Gen - log dateien von malwarebytes und rsit
 
hallo! hab das verbreitete problem mit dem TR/Crypt.ZPACK.Gen und john does anleitungen durchgeführt. hier die inhalte der log-dateien:

malwarebytes:

Code:

Malwarebytes' Anti-Malware 1.41
Datenbank Version: 3171
Windows 5.1.2600 Service Pack 3

14.11.2009 22:12:23
mbam-log-2009-11-14 (22-12-23).txt

Scan-Methode: Vollständiger Scan (C:\|)
Durchsuchte Objekte: 220753
Laufzeit: 2 hour(s), 0 minute(s), 1 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 1
Infizierte Registrierungsschlüssel: 2
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 1
Infizierte Verzeichnisse: 0
Infizierte Dateien: 8

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
C:\WINDOWS\system32\ynbf.bno (Trojan.Agent) -> Delete on reboot.

Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055fd26d-3a88-4e15-963d-dc8493744b1d} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{055fd26d-3a88-4e15-963d-dc8493744b1d} (Trojan.BHO) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell) -> Bad: (Explorer.exe rundll32.exe ynbf.bno ujghdrg) Good: (Explorer.exe) -> Quarantined and deleted successfully.

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\WINDOWS\system32\ynbf.bno (Trojan.Agent) -> Delete on reboot.
C:\Dokumente und Einstellungen\***\Desktop\Legal\CryptLoad\router\FRITZ!Box\nc.exe (PUP.KeyLogger) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\***\Desktop\Legal\Tools\PerfectDisk Defragmenter\PerfectDisk_Workstation_7.0.40_KeyGen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\***\Eigene Dateien\Kram\Perfect Disc\PerfectDisk_Workstation_7.0.40_KeyGen.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\49.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{08A5F15B-D5F0-4D17-893D-8B358608DCF6}\RP471\A0066222.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\WINMEM.INI (Malware.Trace) -> Quarantined and deleted successfully.
C:\Programme\ICQToolbar\toolbaru.dll (Trojan.BHO) -> Quarantined and deleted successfully.
rsit-logs folgen in einem neuen beitrag.

sunny82 14.11.2009 23:18
hier der anfang des ersten rsit-log:
Code:
Logfile of random's system information tool 1.06 (written by random/random)
Run by *** at 2009-11-14 22:42:30
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 5 GB (10%) free of 54 GB
Total RAM: 503 MB (43% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:42:52, on 14.11.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programme\Bonjour\mDNSResponder.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\Dell\QuickSet\NICCONFIGSVC.exe
C:\Programme\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\system32\PSIService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Raxco\PerfectDisk\PDEngine.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\stsystra.exe
C:\Programme\Dell\Media Experience\DMXLauncher.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\Programme\Dell\QuickSet\quickset.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Dokumente und Einstellungen\***\Desktop\Player\Winamp\Winampa.exe
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\Programme\Java\jre6\bin\jusched.exe
C:\Programme\NetWaiting\netwaiting.exe
C:\Programme\ClickOff\Clickoff.exe
C:\Programme\Digital Line Detect\DLG.exe
C:\Programme\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Dokumente und Einstellungen\***\Desktop\RSIT.exe
C:\Programme\trend micro\***.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = w*w.google.de/ig/dell?hl=de&client=dell-row&channel=de
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = h**p://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://google.icq.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = h**p://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = h**p://www.google.de/hws/sb/dell-row/de/side.html?channel=de
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = w*w.google.de/ig/dell?hl=de&client=dell-row&channel=de
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar3.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Programme\BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll (file missing)
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar3.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [DMXLauncher] C:\Programme\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Programme\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [WinampAgent] "C:\Dokumente und Einstellungen\***\Desktop\Player\Winamp\Winampa.exe"
O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Programme\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [CloneDVDElbyDelay] "C:\Programme\CloneDVD\ElbyCheck.exe" /L ElbyDelay
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Programme\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [ModemOnHold] C:\Programme\NetWaiting\netwaiting.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Clickoff.lnk = C:\Programme\ClickOff\Clickoff.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe
O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programme\Spiele\PartyPokerNet\RunPF.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programme\Spiele\PartyPokerNet\RunPF.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {2EF98DE5-183F-11D4-83EC-EC6A1DB6E213} (DynaGeoX Element) - h**p://www.dynageo.de/download/dynageoviewer.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Programme\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Programme\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Programme\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Programme\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

--
End of file - 9824 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\ISP-Anmeldungserinnerung 1.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 54248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\System32\DLA\DLASHX_W.DLL [2005-09-08 110652]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\programme\google\googletoolbar3.dll [2007-01-19 2427968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]
CBrowserHelperObject Object - C:\Programme\BAE\BAE.dll [2006-06-08 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll [2005-08-04 343112]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQ Toolbar - C:\PROGRA~1\ICQTOO~1\toolbaru.dll []
{0BF43445-2F28-4351-9252-17FE6E806AA0}
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\programme\google\googletoolbar3.dll [2007-01-19 2427968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"=C:\WINDOWS\system32\igfxtray.exe [2005-10-14 94208]
"igfxhkcmd"=C:\WINDOWS\system32\hkcmd.exe [2005-10-14 77824]
"igfxpers"=C:\WINDOWS\system32\igfxpers.exe [2005-10-14 114688]
"SigmatelSysTrayApp"=C:\WINDOWS\stsystra.exe [2006-03-24 282624]
"DMXLauncher"=C:\Programme\Dell\Media Experience\DMXLauncher.exe [2005-11-01 94208]
"SynTPEnh"=C:\Programme\Synaptics\SynTP\SynTPEnh.exe [2006-03-08 761947]
"Dell QuickSet"=C:\Programme\Dell\QuickSet\quickset.exe [2006-04-06 1032192]
"Broadcom Wireless Manager UI"=C:\WINDOWS\system32\WLTRAY.exe [2005-12-19 1347584]
"ISUSPM Startup"=C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\isuspm.exe [2005-06-10 249856]
"ISUSScheduler"=C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe [2005-06-10 81920]
""= []
"DLA"=C:\WINDOWS\System32\DLA\DLACTRLW.EXE [2005-09-08 122940]
"WinampAgent"=C:\Dokumente und Einstellungen\***\Desktop\Player\Winamp\Winampa.exe [2003-04-17 12288]
"VOBRegCheck"=C:\WINDOWS\System32\VOBREGCheck.exe [2003-01-08 153088]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"CloneCDTray"=C:\Programme\SlySoft\CloneCD\CloneCDTray.exe [2006-09-28 57344]
"CloneDVDElbyDelay"=C:\Programme\CloneDVD\ElbyCheck.exe [2002-11-02 45056]
"avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"QuickTime Task"=C:\Programme\QuickTime\QTTask.exe [2009-05-26 413696]
"iTunesHelper"=C:\Programme\iTunes\iTunesHelper.exe [2009-07-13 292128]
"SunJavaUpdateSched"=C:\Programme\Java\jre6\bin\jusched.exe [2009-10-11 149280]
"Malwarebytes Anti-Malware (reboot)"=C:\Programme\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ModemOnHold"=C:\Programme\NetWaiting\netwaiting.exe [2003-09-10 20480]

C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart
Clickoff.lnk - C:\Programme\ClickOff\Clickoff.exe
Digital Line Detect.lnk - C:\Programme\Digital Line Detect\DLG.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2005-10-14 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\ICQLite\ICQLite.exe"="C:\Programme\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite"
"C:\Games\VOLLEY\VOLLEY.EXE"="C:\Games\VOLLEY\VOLLEY.EXE:*:Enabled:VOLLEY"
"C:\Programme\eMule\emule.exe"="C:\Programme\eMule\emule.exe:*:Enabled:eMule"
"C:\Dokumente und Einstellungen\***\Desktop\Legal\Torrent\g3torrent\g3torrent.exe"="C:\Dokumente und

Einstellungen\***\Desktop\Legal\Torrent\g3torrent\g3torrent.exe:*:Enabled:g3torrent"
"C:\Programme\ICQ6\ICQ.exe"="C:\Programme\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Programme\eMule.de 0.48a v18\emule.exe"="C:\Programme\eMule.de 0.48a v18\emule.exe:*:Enabled:eMule"
"C:\Programme\Valve\Steam\SteamApps\dirk677\counter-strike source\hl2.exe"="C:\Programme\Valve\Steam\SteamApps\dirk677\counter-strike

source\hl2.exe:*:Enabled:hl2"
"C:\UT2004\System\UT2004.exe"="C:\UT2004\System\UT2004.exe:*:Enabled:UT2004"
"C:\lan-party\cs von labus\hl.exe"="C:\lan-party\cs von labus\hl.exe:*:Enabled:hl.exe"
"C:\Programme\MatchWare\Mediator 8.0 Pro\medi8or.exe"="C:\Programme\MatchWare\Mediator 8.0 Pro\medi8or.exe:*:Enabled:Mediator"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programme\Bonjour\mDNSResponder.exe"="C:\Programme\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Dokumente und Einstellungen\***\Desktop\Legal\Torrent\µtorrent\uTorrent.exe"="C:\Dokumente und

Einstellungen\***\Desktop\Legal\Torrent\µtorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Programme\iTunes\iTunes.exe"="C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2009-11-14 22:42:32 ----D---- C:\Programme\trend micro
2009-11-14 22:42:30 ----D---- C:\rsit
2009-11-14 20:09:23 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Malwarebytes
2009-11-14 20:09:15 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2009-11-14 20:09:14 ----D---- C:\Programme\Malwarebytes' Anti-Malware
2009-11-14 19:54:17 ----D---- C:\Programme\CCleaner
2009-11-12 18:05:08 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2009-11-10 20:38:09 ----A---- C:\WINDOWS\system32\javaws.exe
2009-11-10 20:38:09 ----A---- C:\WINDOWS\system32\javaw.exe
2009-11-10 20:38:09 ----A---- C:\WINDOWS\system32\java.exe
2009-11-10 00:43:10 ----D---- C:\Programme\M4a to MP3 Converter
2009-11-03 17:44:02 ----D---- C:\WINDOWS\system32\en-US
2009-11-03 13:19:30 ----HDC---- C:\WINDOWS\$NtUninstallKB976749$
2009-11-01 20:42:47 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\fretsonfire
2009-10-26 00:24:50 ----D---- C:\Programme\FunkFix
2009-10-25 22:24:13 ----D---- C:\Programme\YouTube to MP3 Converter

======List of files/folders modified in the last 1 months======

2009-11-14 22:42:38 ----D---- C:\WINDOWS\Prefetch
2009-11-14 22:42:32 ----RD---- C:\Programme
2009-11-14 22:34:29 ----D---- C:\Programme\Mozilla Thunderbird
2009-11-14 22:20:56 ----D---- C:\Programme\Mozilla Firefox
2009-11-14 22:19:06 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ClickOff
2009-11-14 22:18:50 ----D---- C:\WINDOWS\Temp
2009-11-14 22:18:50 ----D---- C:\WINDOWS\system32\ias
2009-11-14 22:18:25 ----D---- C:\WINDOWS\system32\CatRoot2
2009-11-14 22:18:25 ----A---- C:\WINDOWS\ModemLog_Conexant HDA D110 MDC V.92 Modem.txt
2009-11-14 22:18:20 ----D---- C:\WINDOWS
2009-11-14 22:17:52 ----D---- C:\WINDOWS\system32
2009-11-14 22:16:44 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-11-14 20:09:18 ----D---- C:\WINDOWS\system32\drivers
2009-11-14 19:36:53 ----HD---- C:\WINDOWS\inf
2009-11-14 17:22:29 ----D---- C:\WINDOWS\system32\CatRoot
2009-11-14 17:19:19 ----A---- C:\WINDOWS\winamp.ini
2009-11-14 15:59:00 ----D---- C:\WINDOWS\system32\FxsTmp
2009-11-14 15:57:15 ----A---- C:\WINDOWS\goldwave.ini
2009-11-12 18:05:11 ----RSHD---- C:\WINDOWS\system32\dllcache
2009-11-12 13:41:52 ----HD---- C:\WINDOWS\$hf_mig$
2009-11-11 22:49:04 ----A---- C:\WINDOWS\win.ini
2009-11-10 22:32:14 ----A---- C:\WINDOWS\NeroDigital.ini
2009-11-10 20:41:38 ----SHD---- C:\WINDOWS\Installer
2009-11-10 20:38:01 ----D---- C:\Programme\Java
2009-11-10 20:37:17 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-11-09 15:15:25 ----A---- C:\WINDOWS\avisplitter.INI
2009-11-05 18:36:21 ----A---- C:\WINDOWS\system32\MRT.exe
2009-11-04 20:15:37 ----RSD---- C:\WINDOWS\assembly
2009-11-04 20:15:37 ----D---- C:\WINDOWS\Microsoft.NET
2009-11-04 14:35:00 ----D---- C:\WINDOWS\Help
2009-11-03 17:56:38 ----D---- C:\WINDOWS\WinSxS
2009-11-03 17:43:25 ----D---- C:\Programme\Microsoft.NET
2009-11-03 13:19:47 ----A---- C:\WINDOWS\imsins.BAK
2009-11-02 20:45:59 ----D---- C:\Games
2009-10-26 22:50:16 ----D---- C:\Programme\Ant Movie Catalog
2009-10-26 21:22:21 ----D---- C:\Programme\ScummVM
2009-10-25 22:31:05 ----D---- C:\Programme\DVDVideoSoft
2009-10-25 22:30:56 ----D---- C:\Programme\Gemeinsame Dateien\DVDVideoSoft
2009-10-20 00:51:39 ----A---- C:\WINDOWS\system32\mshtml.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

sunny82 14.11.2009 23:19
der zweite teil des rsit-log:
Code:
R1 APPDRV;APPDRV; C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS [2005-08-12 16128]
R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 DLACDBHM;DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [2005-08-25 5628]
R1 DLARTL_N;DLARTL_N; C:\WINDOWS\System32\Drivers\DLARTL_N.SYS [2005-08-25 22684]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-09-11 24744]
R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-03-24 55640]
R2 DLABOIOM;DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [2005-09-08 25628]
R2 DLADResN;DLADResN; C:\WINDOWS\System32\DLA\DLADResN.SYS [2005-09-08 2496]
R2 DLAIFS_M;DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [2005-09-08 86524]
R2 DLAOPIOM;DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [2005-09-08 14684]
R2 DLAPoolM;DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [2005-09-08 6364]
R2 DLAUDF_M;DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [2005-09-08 87036]
R2 DLAUDFAM;DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [2005-09-08 94332]
R2 DRVNDDM;DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [2005-08-12 40544]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-17 13059]
R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2009-09-10 104512]
R3 asapiW2k;ASAPIW2K; C:\WINDOWS\system32\drivers\Asapiw2k.sys [2004-03-10 11264]
R3 BCM43XX;Treiber für Dell Wireless WLAN Karte; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2005-11-02 424320]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2005-08-05 45312]
R3 CmBatt;Treiber für Microsoft-ACPI-Kontrollmethodenkompatible Batterie; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 ElbyCDFL;ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [2006-12-26 34760]
R3 ElbyDelay;ElbyDelay; C:\WINDOWS\System32\Drivers\ElbyDelay.sys [2003-03-28 3840]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-03-19 23400]
R3 HDAudBus;Microsoft UAA-Bustreiber für High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-07-22 1035008]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2005-07-22 201600]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-10-14 1302812]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2004-03-29 90464]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2006-03-24 1156648]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-03-08 191872]
R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2-aktivierter Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-07-22 717952]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
S3 aympafih;aympafih; C:\WINDOWS\system32\drivers\aympafih.sys []
S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 DTT200U;DTT200U DVB-T USB receiver Driver; C:\WINDOWS\System32\Drivers\DTT200U.sys [2004-09-06 18432]
S3 DTT200ULD;DTT200U DVB-T USB receiver firmware loader; C:\WINDOWS\System32\Drivers\DTT200ULD.sys [2004-12-14 18560]
S3 E100B;Intel(R) PRO-Adaptertreiber; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-08-18 117760]
S3 HidUsb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-18 12288]
S3 mr7910;Photo Viewer; C:\WINDOWS\system32\DRIVERS\mr7910.sys [2005-06-28 113664]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA-IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;USB-Audiotreiber (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 zlportio;zlportio; \??\C:\UltraStar\zlportio.sys []
S4 agp440;Intel AGP-Bus-Filter; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Compaq AGP-Bus-Filter; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;ALI AGP-Bus-Filter; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;AMD AGP-Bus-Filtertreiber; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []
S4 sisagp;SIS AGP-Bus-Filter; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-13 40960]
S4 viaagp;VIA AGP-Bus-Filter; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Programme\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2009-05-11 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-07-09

144712]
R2 Bonjour Service;Bonjour-Dienst; C:\Programme\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 NICCONFIGSVC;NICCONFIGSVC; C:\Programme\Dell\QuickSet\NICCONFIGSVC.exe [2006-04-06 380928]
R2 PDAgent;PDAgent; C:\Programme\Raxco\PerfectDisk\PDAgent.exe [2007-11-06 414984]
R2 ProtexisLicensing;ProtexisLicensing; C:\WINDOWS\system32\PSIService.exe [2006-11-02 174656]
R2 wltrysvc;Dell Wireless WLAN Tray Service; C:\WINDOWS\System32\WLTRYSVC.EXE [2005-12-19 18944]
R3 iPod Service;iPod-Dienst; C:\Programme\iPod\bin\iPodService.exe [2009-07-13 542496]
R3 PDEngine;PDEngine; C:\Programme\Raxco\PerfectDisk\PDEngine.exe [2007-11-06 734472]
S2 clr_optimization_v4.0.21006_32;Microsoft .NET Framework NGEN v4.0.21006_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.21006\mscorsvw.exe [2009-10-07

129856]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.21006\aspnet_state.exe [2009-10-07 35144]
S3 gusvc;Google Updater Service; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-02-24 138168]
S3 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;

C:\WINDOWS\Microsoft.NET\Framework\v4.0.21006\WPF\WPFFontCache_v0400.exe [2009-10-07 752984]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.21006\SMSvcHost.exe [2009-10-07 124224]

-----------------EOF-----------------
und der erste teil des rsit-info-text:

Code:
info.txt logfile of random's system information tool 1.06 2009-11-14

22:42:56

======Uninstall list======

-->C:\Programme\DivX\ConverterUninstall.exe /CONVERTER
-->C:\Programme\Nero\Nero 7\nero\uninstall\UNNERO.exe

/UNINSTALL
-->C:\WINDOWS\IsUn0407.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x

{075473F5-846A-448B-BCB3-104AA1760205}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x

{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x

{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
-->C:\WINDOWS\system32\\MSIEXEC.EXE /x

{B12665F4-4E93-4AB4-B7FC-37053B524629}
-->C:\WINDOWS\UNNeroBackItUp.exe /UNINSTALL
-->C:\WINDOWS\UNNeroMediaHome.exe /UNINSTALL
-->C:\WINDOWS\UNNeroShowTime.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNRecode.exe /UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132

C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat - Reader 6.0.2 Update-->MsiExec.exe

/I{AC76BA86-0000-0000-0000-6028747ADE01}
Adobe Flash Player 10

Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.e

xe
Adobe Reader 6.0.1 - Deutsch-->MsiExec.exe

/I{AC76BA86-7AD7-1031-7B44-A00000000001}
AFPL Ghostscript 8.50-->c:\programme\word to

pdf\ghostscript\gs\uninstgs.exe "c:\programme\word to

pdf\ghostscript\gs\gs8.50\uninstal.txt"
AFPL Ghostscript Fonts-->c:\programme\word to

pdf\ghostscript\gs\uninstgs.exe "c:\programme\word to

pdf\ghostscript\gs\fonts\uninstal.txt"
Ant Movie Catalog-->"C:\Programme\Ant Movie

Catalog\unins000.exe"
AnyDVD-->"C:\Programme\SlySoft\AnyDVD\AnyDVD-uninst.exe"

/D="C:\Programme\SlySoft\AnyDVD"
Apple Mobile Device Support-->MsiExec.exe

/I{C337BDAF-CB4E-47E2-BE1A-CB31BB7DD0E3}
Apple Software Update-->MsiExec.exe

/I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ARTEuro-->MsiExec.exe

/I{1D3C662A-F6C6-4767-A788-7AA43A9A1317}
Audiograbber 1.83 SE

-->C:\WINDOWS\uninstall\Audiograbber\setup.exe
Auto Gordian Knot 2.45-->C:\Programme\AutoGK\uninst.exe
AVI/MPEG/ASF/WMV Splitter 3.25-->"C:\Programme\AVI MPEG ASF

WMV Splitter\unins000.exe"
Avira AntiVir Personal - Free Antivirus-->C:\Programme\Avira\AntiVir

Desktop\setup.exe /REMOVE
AviSynth 2.5-->"C:\Programme\AviSynth 2.5\Uninstall.exe"
Bonjour-->MsiExec.exe

/I{07287123-B8AC-41CE-8346-3D777245C35B}
Broadcom Management Programs-->MsiExec.exe

/I{26E1BFB0-E87E-4696-9F89-B467F01F81E5}
CCleaner-->"C:\Programme\CCleaner\uninst.exe"
ClickOff version 1.82-->C:\Programme\ClickOff\unins000.exe
CloneCD-->"C:\Programme\SlySoft\CloneCD\ccd-uninst.exe"

/D="C:\Programme\SlySoft\CloneCD"
CloneDVD-->"C:\Programme\CloneDVD\CloneDVD-uninst.exe"

/D="C:\Programme\CloneDVD"
Conexant HDA D110 MDC V.92

Modem-->C:\Programme\CONEXANT\CNXT_MODEM_HDAUDIO_VE

N_14F1&DEV_2BFA&SUBSYS_14F100C3\HXFSETUP.EXE -U

-Idel1028k.inf
Corel Paint Shop Pro X-->MsiExec.exe

/I{1A15507A-8551-4626-915D-3D5FA095CC1B}
Corel Photo Album 6-->MsiExec.exe

/X{8A9B8148-DDD7-448F-BD6C-358386D32354}
Crazy Area V2.4-->"C:\Games\Crazy Area V2\unins000.exe"
Crazy Boxes V1.8-->"C:\Games\Crazy Boxes V1\unins000.exe"
Crazy Jumpin' Jack V1.6-->"C:\Games\Crazy Jumpin' Jack

V1\unins000.exe"
Dell CinePlayer-->MsiExec.exe

/I{43CAC9A1-1993-4F65-9096-7C9AFC2BBF54}
Dell Driver Reset Tool-->MsiExec.exe

/I{5905F42D-3F5F-4916-ADA6-94A3646AEE76}
Dell Media Experience-->MsiExec.exe

/I{AC0EE5B0-A8FB-4D0A-AF03-2EDC518F841B}
Dell Wireless WLAN Card-->"C:\Programme\Dell\Dell Wireless WLAN

Card\bcmwlu00.exe" verbose

/rootkey="Software\Broadcom\802.11\UninstallInfo"

/rootdir="C:\Programme\Dell\Dell Wireless WLAN Card"
Desktop Restore-->MsiExec.exe

/I{4E227EFF-CFBC-415E-A7FD-D6C15CA908AE}
Digital Line Detect-->RunDll32

C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,Laun

chSetup "C:\Programme\InstallShield Installation

Information\{E646DCF0-5A68-11D5-B229-002078017FBF}\setup.exe"

-l0x7 ControlPanel
DivX Content

Uploader-->C:\Programme\DivX\DivXContentUploaderUninstall.exe

/CUPLOADER
DivX Converter-->C:\Programme\DivX\ConverterUninstall.exe

/CONVERTER
DivX Player-->C:\Programme\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Web Player-->C:\Programme\DivX\DivXWebPlayerUninstall.exe

/PLUGIN
DMX Update-->RunDll32

C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,Laun

chSetup "C:\Programme\InstallShield Installation

Information\{C41F4616-44B6-4E8D-BFC7-4267862A2CE1}\setup.exe"

-l0x7 -L0x7 /SMAINT
DVB-T USB 2.0 -->C:\WINDOWS\iun6002.exe

"C:\Programme\DTV\DVB-T USB 2.0\irunin.ini"
DVD Shrink 3.2-->"C:\Dokumente und

Einstellungen\***\Desktop\Legal\DVD Shrink\unins000.exe"
DVDx 2.2-->"C:\Dokumente und

Einstellungen\***\Desktop\Legal\DVDx\DVDx\unins000.exe"
DynaGeo 2.7i-->C:\Programme\DynaGeo\unins000.exe
eMule.de 0.48a v18-->"C:\Programme\eMule.de 0.48a

v18\unins000.exe"
Encoders for Helium Music Manager-->"C:\Programme\Intermedia

Design\Encoders\unins000.exe"
Free Audio CD Burner version

1.2-->"C:\Programme\DVDVideoSoft\Free Audio CD

Burner\unins000.exe"
G3 Torrent-->"C:\Dokumente und

Einstellungen\***\Desktop\Legal\Torrent\g3torrent\uninstall.exe"
GoldWave v4.26-->C:\WINDOWS\sxstall2.exe "GoldWave v4.26"

"C:\Dokumente und

Einstellungen\***\Desktop\Legal\GoldWave\GoldWave\unstall.log"
Google Earth-->MsiExec.exe

/I{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}
Google Toolbar for Internet Explorer-->regsvr32 /u /s

"c:\programme\google\googletoolbar3.dll"
Helium Music Manager 2007 (build 5545)-->"C:\Programme\Helium

2007\unins000.exe"
High Definition Audio Driver Package -

KB835221-->C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spu

ninst.exe
HijackThis 2.0.2-->"C:\Programme\trend micro\HijackThis.exe"

/uninstall
Hotfix for Windows Media Format 11 SDK

(KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuni

nst.exe"
Hotfix für Windows Media Player 11

(KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuni

nst.exe"
Hotfix für Windows XP

(KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuni

nst.exe"
Hotfix für Windows XP

(KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\

spuninst.exe"
ICQ  Toolbar-->regsvr32 /u /s

"C:\Programme\ICQToolbar\toolbaru.dll"
ICQ Toolbar-->regsvr32 /u /s "C:\PROGRA~1\ICQTOO~1\toolbaru.dll"
ICQ6-->"C:\Programme\InstallShield Installation

Information\{60DE4033-9503-48D1-A483-7846BD217CA9}\setup.exe"

-runfromtemp -l0x0009 -removeonly
Image Transfer 2.0-->MsiExec.exe

/X{4CBBFC27-69FA-4EB7-8F9B-F3FD758B83E5}
InstantCopy-->MsiExec.exe

/I{A2B3D1A5-82CA-4876-AFFA-DB304A3A4FE1}
Intel(R) Graphics Media Accelerator Driver for

Mobile-->RUNDLL32.EXE

C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID

PCI\VEN_8086&DEV_2792 PCI\VEN_8086&DEV_2592
iTunes-->MsiExec.exe

/I{99ECF41F-5CCA-42BD-B8B8-A8333E2E2944}
Java 2 Runtime Environment, SE v1.4.2_03-->MsiExec.exe

/I{7148F0A8-6813-11D6-A77B-00B0D0142030}
Java(TM) 6 Update 17-->MsiExec.exe

/X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Java(TM) 6 Update 2-->MsiExec.exe

/I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java(TM) 6 Update 3-->MsiExec.exe

/I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Java(TM) 6 Update 7-->MsiExec.exe

/I{3248F0A8-6813-11D6-A77B-00B0D0160070}
K-Lite Mega Codec Pack 3.5.3-->"C:\Programme\K-Lite Codec

Pack\unins000.exe"
Lava Lamp 3.2.0.1-->C:\Programme\Lava Lamp\SXUNINST.EXE
Malwarebytes' Anti-Malware-->"C:\Programme\Malwarebytes'

Anti-Malware\unins000.exe"
MatchWare Mediator 8.0 Pro-->MsiExec.exe

/I{1A1BA8DD-3222-4823-B508-A902128A5544}
MCU-->MsiExec.exe /I{D2988E9B-C73F-422C-AD4B-A66EBE257120}
Microsoft .NET Framework 1.1 German Language

Pack-->MsiExec.exe /X{E78BFA60-5393-4C38-82AB-E8019E464EB4}
Microsoft .NET Framework 1.1 Security Update

(KB953297)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Up

dates\hotfix.exe"

"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M95329

7\M953297Uninstall.msp"
Microsoft .NET Framework 1.1-->msiexec.exe /X

{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 1.1-->MsiExec.exe

/X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
Microsoft .NET Framework 4 Client Profile Beta

2-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.21006\SetupCache\

Client\Setup.exe /repair /x86 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile Beta 2-->MsiExec.exe

/X{57EC5BFE-7CB7-3057-8385-C9D72918511C}
Microsoft .NET Framework 4 Extended Beta

2-->C:\WINDOWS\Microsoft.NET\Framework\v4.0.21006\SetupCache\

Extended\Setup.exe /repair /x86 /parameterfolder Extended
Microsoft .NET Framework 4 Extended Beta 2-->MsiExec.exe

/X{6E405B40-3879-3C9B-9286-8D5E71258C35}
Microsoft Compression Client Pack 1.0 for Windows

XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spunins

t.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe

/I{90110407-6000-11D3-8CFE-0150048383C9}
Microsoft User-Mode Driver Framework Feature Pack

1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe

/X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable - x86

9.0.30729.17-->MsiExec.exe

/X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Works 7.0 -->MsiExec.exe

/I{EDDDC607-91D9-4758-9F57-265FDCD8A772}
Modem Helper-->RunDll32

C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,Laun

chSetup "C:\Programme\InstallShield Installation

Information\{7F142D56-3326-11D5-B229-002078017FBF}\setup.exe"

-l0x7 ControlPanel
Monkey's Audio-->"C:\Programme\Monkey's Audio\unins000.exe"
Mozilla Firefox (3.0.15)-->C:\Programme\Mozilla

Firefox\uninstall\helper.exe
Mozilla Thunderbird (2.0.0.23)-->C:\Programme\Mozilla

Thunderbird\uninstall\helper.exe
mp3Tag 5.7-->"C:\Programme\mp3Tag 5\unins000.exe"
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe

/I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe

/I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe

/I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
Nero 7 Demo-->MsiExec.exe

/I{1A1BEE58-8EA1-772E-10DF-97C19C5F1031}
NetWaiting-->RunDll32

sunny82 14.11.2009 23:20
und der letzte teil des rsit-info-texts:

Code:
C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,Laun

chSetup "C:\Programme\InstallShield Installation

Information\{3F92ABBB-6BBF-11D5-B229-002078017FBF}\setup.exe

" -l0x7 ControlPanel
Nokia Multimedia Converter 2.0-->"C:\Dokumente und

Einstellungen\***\Desktop\Legal\nokia\Nokia_Multimedia_Convert

er_2_0\Uninstall\Uninstaller.exe"
PerfectDisk-->MsiExec.exe

/I{212F5777-1190-4DEF-8E4D-6B2F313B45E7}
QuickSet-->RunDll32

C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel

32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation

Information\{C5074CC4-0E26-4716-A307-960272A90040}\setup.exe"

-l0x7  APPDRVNT4
QuickTime 3.0-->C:\WINDOWS\unin0407.exe

-fC:\Programme\QuickTime\DeIsL1.isu

-c"C:\WINDOWS\system32\QTUninst.dll
QuickTime-->MsiExec.exe

/I{C78EAC6F-7A73-452E-8134-DBB2165C5A68}
Roxio DLA-->MsiExec.exe

/I{1206EF92-2E83-4859-ACCB-2048C3CB7DA6}
Roxio MyDVD LE-->MsiExec.exe

/I{21657574-BD54-48A2-9450-EB03B2C7FC29}
Roxio RecordNow Audio-->MsiExec.exe

/I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
Roxio RecordNow Copy-->MsiExec.exe

/I{B12665F4-4E93-4AB4-B7FC-37053B524629}
Roxio RecordNow Data-->MsiExec.exe

/I{075473F5-846A-448B-BCB3-104AA1760205}
ScummVM 1.0.0rc1-->"C:\Programme\ScummVM\unins000.exe"
Search Assist-->MsiExec.exe

/X{DF6A589A-7A1A-430C-9FF2-A0BDB42669DC}
Sicherheitsupdate für Step by Step Interactive Training

(KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Step by Step Interactive Training

(KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows Media Player

(KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\

spuninst.exe"
Sicherheitsupdate für Windows Media Player

(KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\

spuninst.exe"
Sicherheitsupdate für Windows Media Player

(KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\

spuninst.exe"
Sicherheitsupdate für Windows Media Player

(KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\

spuninst.exe"
Sicherheitsupdate für Windows Media Player 11

(KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spunin

st\spuninst.exe"
Sicherheitsupdate für Windows Media Player 11

(KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spunins

t\spuninst.exe"
Sicherheitsupdate für Windows Media Player 9

(KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP9$\spunins

t\spuninst.exe"
Sicherheitsupdate für Windows XP

(KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\

spuninst.exe"
Sicherheitsupdate für Windows XP

(KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\

spuninst.exe"
Sicherheitsupdate für Windows XP

(KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB956390)-->"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB958215)-->"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB960714)-->"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB963027)-->"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB969897)-->"C:\WINDOWS\$NtUninstallKB969897$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB972260)-->"C:\WINDOWS\$NtUninstallKB972260$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB973346)-->"C:\WINDOWS\$NtUninstallKB973346$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB974455)-->"C:\WINDOWS\$NtUninstallKB974455$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuni

nst.exe"
Sicherheitsupdate für Windows XP

(KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuni

nst.exe"
Sonic Activation Module-->MsiExec.exe

/I{5B6BE547-21E2-49CA-B2E2-6A5F470593B1}
Sonic Update Manager-->MsiExec.exe

/I{30465B6C-B53F-49A1-9EBA-A3F187AD502E}
SpeechRedist-->MsiExec.exe

/X{8795CBED-55E2-4693-9F14-84EC446935BE}
Steam(TM)-->MsiExec.exe

/X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Synaptics Pointing Device Driver-->rundll32.exe

"C:\Programme\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Tiscali Internet-->MsiExec.exe

/I{58B2B6D3-E5FF-4D16-87AC-52CC5717C7C6}
T-Online Installationsdateien-->MsiExec.exe

/X{D460F2F5-645E-489F-AB9A-DEB24C47C2B5}
Uninstall 1.0.0.1-->"C:\Programme\Gemeinsame

Dateien\DVDVideoSoft\unins000.exe"
Update für Windows XP

(KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\

spuninst.exe"
Update für Windows XP

(KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuni

nst.exe"
Update für Windows XP

(KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuni

nst.exe"
Update für Windows XP

(KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuni

nst.exe"
Update für Windows XP

(KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuni

nst.exe"
Update für Windows XP

(KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuni

nst.exe"
Update für Windows XP

(KB976749)-->"C:\WINDOWS\$NtUninstallKB976749$\spuninst\spuni

nst.exe"
URL Assistant-->regsvr32 /u /s "C:\Programme\BAE\BAE.dll"
VideoLAN VLC media player 0.8.6-->C:\Dokumente und

Einstellungen\***\Desktop\Player\Tools\VLC\uninstall.exe
VobSub v2.23 (Remove

Only)-->"C:\Programme\Gabest\VobSub\uninstall.exe"
Wichtiges Update für Windows Media Player 11

(KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spunins

t\spuninst.exe"
Winamp (nur entfernen)-->"C:\Dokumente und

Einstellungen\***\Desktop\Player\Winamp\deinstwa.exe"
Winamp Advanced Controls (remove only)-->"C:\Dokumente und

Einstellungen\***\Desktop\Player\Winamp\plugins\AdvancedContr

ols5Uninst.exe"
Windows Media Format 11 runtime-->"C:\Programme\Windows Media

Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11

runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst

.exe"
Windows Media Player 11-->"C:\Programme\Windows Media

Player\Setup_wm.exe" /Uninstall
Windows Media Player

11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows XP Service Pack

3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
Windows-Treiberpaket -  (mr7910) Image 06/28/2005

1.3.0.0-->C:\WINDOWS\system32\DRVSTORE\f1490bc41e7d27129cb1

57cba768cf63b89e7752\DPInst.exe /u

mr7910_32bb2befe1e5d1d6012329af0300b36139b7b84a
winLAME rc3 (remove

only)-->"C:\Programme\winLAME\uninst-winLAME.exe"
WinRAR Archivierer-->C:\Programme\WinRar\uninstall.exe
WordToPDF 2.4-->"C:\Programme\Word To

PDF\WordToPDF\unins000.exe"
XviD 1.1 final uninstall-->"C:\Dokumente und

Einstellungen\***\Desktop\Player\XviD\XviD\unins000.exe"
XviD MPEG4 Video Codec (remove

only)-->"C:\WINDOWS\system32\xvid-uninstall.exe"
Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\unyt.exe
YOU DON'T KNOW JACK® 3 -

Abwärts!-->C:\PROGRA~1\YOUDON~1\unwise.exe /U

C:\PROGRA~1\YOUDON~1\install.log

======Security center information======

AV: AntiVir Desktop

======System event log======

Computer Name: GUGGELGU
Event Code: 7035
Message: Der Steuerbefehl "starten" wurde erfolgreich an den

Dienst "NLA (Network Location Awareness)" gesendet.

Record Number: 3394928
Source Name: Service Control Manager
Time Written: 20091008155925.000000+120
Event Type: Informationen
User: NT-AUTORITÄT\SYSTEM

Computer Name: GUGGELGU
Event Code: 7035
Message: Der Steuerbefehl "starten" wurde erfolgreich an den

Dienst "RAS-Verbindungsverwaltung" gesendet.

Record Number: 3394927
Source Name: Service Control Manager
Time Written: 20091008155925.000000+120
Event Type: Informationen
User: NT-AUTORITÄT\SYSTEM

Computer Name: GUGGELGU
Event Code: 7035
Message: Der Steuerbefehl "starten" wurde erfolgreich an den

Dienst "PDEngine" gesendet.

Record Number: 3394926
Source Name: Service Control Manager
Time Written: 20091008155925.000000+120
Event Type: Informationen
User: NT-AUTORITÄT\SYSTEM

Computer Name: GUGGELGU
Event Code: 7035
Message: Der Steuerbefehl "beenden" wurde erfolgreich an den

Dienst "Fax" gesendet.

Record Number: 3394925
Source Name: Service Control Manager
Time Written: 20091008155921.000000+120
Event Type: Informationen
User: NT-AUTORITÄT\SYSTEM

Computer Name: GUGGELGU
Event Code: 6005
Message: Der Ereignisprotokolldienst wurde gestartet.

Record Number: 3394924
Source Name: EventLog
Time Written: 20091008155911.000000+120
Event Type: Informationen
User:

=====Application event log=====

Computer Name: GUGGELGU
Event Code: 17
Message: Defragmentation on drive C:\ was canceled because of

loss of AC power.

Record Number: 11620
Source Name: PDAgent
Time Written: 20090505215124.000000+120
Event Type:
User:

Computer Name: GUGGELGU
Event Code: 17
Message: Defragmentation on drive C:\ was canceled because of

loss of AC power.

Record Number: 11619
Source Name: PDAgent
Time Written: 20090505215102.000000+120
Event Type:
User:

Computer Name: GUGGELGU
Event Code: 17
Message: Defragmentation on drive C:\ was canceled because of

loss of AC power.

Record Number: 11618
Source Name: PDAgent
Time Written: 20090505215045.000000+120
Event Type:
User:

Computer Name: GUGGELGU
Event Code: 17
Message: Defragmentation on drive C:\ was canceled because of

loss of AC power.

Record Number: 11617
Source Name: PDAgent
Time Written: 20090505215039.000000+120
Event Type:
User:

Computer Name: GUGGELGU
Event Code: 17
Message: Defragmentation on drive C:\ was canceled because of

loss of AC power.

Record Number: 11616
Source Name: PDAgent
Time Written: 20090505215032.000000+120
Event Type:
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot

%\System32\Wbem;C:\Programme\Gemeinsame Dateien\Roxio

Shared\DLLShared\;C:\Programme\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 13 Stepping 8,

GenuineIntel
"PROCESSOR_REVISION"=0d08
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WS

H
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"SonicCentral"=C:\Programme\Gemeinsame Dateien\Sonic

Shared\Sonic Central\
"CLASSPATH"=.;C:\Programme\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Programme\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------
schon mal vielen dank im voraus!


Alle Zeitangaben in WEZ +1. Es ist jetzt 08:38 Uhr.

Copyright ©2000-2026, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19