Trojaner-Board - TR/Alureon.19456U.3

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - TR/Alureon.19456U.3 (https://www.trojaner-board.de/77487-tr-alureon-19456u-3-a.html)

Code:

======List of files/folders created in the last 1 months======
 

2009-09-21 18:13:58 ----D---- C:\Avenger

2009-09-21 18:13:58 ----A---- C:\avenger.txt

2009-09-21 11:13:07 ----A---- C:\Windows\system32\jscript.dll

2009-09-20 17:41:23 ----D---- C:\Windows\temp

2009-09-20 17:41:21 ----A---- C:\ComboFix.txt

2009-09-20 17:40:29 ----SHD---- C:\$RECYCLE.BIN

2009-09-20 17:09:01 ----A---- C:\Windows\system32\occache.dll

2009-09-20 17:09:01 ----A---- C:\Windows\system32\jsproxy.dll

2009-09-20 17:09:00 ----A---- C:\Windows\system32\wininet.dll

2009-09-20 17:09:00 ----A---- C:\Windows\system32\msfeedsbs.dll

2009-09-20 17:09:00 ----A---- C:\Windows\system32\msfeeds.dll

2009-09-20 17:09:00 ----A---- C:\Windows\system32\ieui.dll

2009-09-20 17:09:00 ----A---- C:\Windows\system32\iesetup.dll

2009-09-20 17:09:00 ----A---- C:\Windows\system32\iernonce.dll

2009-09-20 17:09:00 ----A---- C:\Windows\system32\iepeers.dll

2009-09-20 17:08:59 ----A---- C:\Windows\system32\urlmon.dll

2009-09-20 17:08:59 ----A---- C:\Windows\system32\msfeedssync.exe

2009-09-20 17:08:59 ----A---- C:\Windows\system32\ieUnatt.exe

2009-09-20 17:08:59 ----A---- C:\Windows\system32\iesysprep.dll

2009-09-20 17:08:59 ----A---- C:\Windows\system32\iertutil.dll

2009-09-20 17:08:59 ----A---- C:\Windows\system32\iedkcs32.dll

2009-09-20 17:08:59 ----A---- C:\Windows\system32\ie4uinit.exe

2009-09-20 17:08:57 ----A---- C:\Windows\system32\mshtml.dll

2009-09-20 17:08:57 ----A---- C:\Windows\system32\ieframe.dll

2009-09-20 17:07:24 ----A---- C:\Windows\system32\mshtmled.dll

2009-09-20 17:07:24 ----A---- C:\Windows\system32\icardie.dll

2009-09-20 17:07:23 ----A---- C:\Windows\system32\msls31.dll

2009-09-20 17:07:23 ----A---- C:\Windows\system32\mshtmler.dll

2009-09-20 17:07:23 ----A---- C:\Windows\system32\admparse.dll

2009-09-20 17:07:22 ----A---- C:\Windows\system32\imgutil.dll

2009-09-20 17:07:22 ----A---- C:\Windows\system32\ieakeng.dll

2009-09-20 17:07:22 ----A---- C:\Windows\system32\dxtrans.dll

2009-09-20 17:07:22 ----A---- C:\Windows\system32\dxtmsft.dll

2009-09-20 17:07:22 ----A---- C:\Windows\system32\corpol.dll

2009-09-20 17:07:21 ----A---- C:\Windows\system32\webcheck.dll

2009-09-20 17:07:21 ----A---- C:\Windows\system32\msrating.dll

2009-09-20 17:07:21 ----A---- C:\Windows\system32\licmgr10.dll

2009-09-20 17:07:21 ----A---- C:\Windows\system32\inseng.dll

2009-09-20 17:07:21 ----A---- C:\Windows\system32\ieakui.dll

2009-09-20 17:07:21 ----A---- C:\Windows\system32\ieaksie.dll

2009-09-20 17:07:20 ----A---- C:\Windows\system32\WinFXDocObj.exe

2009-09-20 17:07:20 ----A---- C:\Windows\system32\wextract.exe

2009-09-20 17:07:20 ----A---- C:\Windows\system32\pngfilt.dll

2009-09-20 17:07:20 ----A---- C:\Windows\system32\mstime.dll

2009-09-20 17:07:20 ----A---- C:\Windows\system32\ieapfltr.dll

2009-09-20 17:07:20 ----A---- C:\Windows\system32\advpack.dll

2009-09-20 17:07:19 ----A---- C:\Windows\system32\vbscript.dll

2009-09-20 17:07:19 ----A---- C:\Windows\system32\url.dll

2009-09-20 17:07:18 ----A---- C:\Windows\system32\SetIEInstalledDate.exe

2009-09-20 17:07:18 ----A---- C:\Windows\system32\SetDepNx.exe

2009-09-20 17:07:18 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

2009-09-20 17:07:18 ----A---- C:\Windows\system32\PDMSetup.exe

2009-09-20 17:07:18 ----A---- C:\Windows\system32\mshta.exe

2009-09-20 17:07:18 ----A---- C:\Windows\system32\iexpress.exe

2009-09-19 19:22:33 ----D---- C:\Windows\system32\eu-ES

2009-09-19 19:22:33 ----D---- C:\Windows\system32\ca-ES

2009-09-19 19:22:31 ----D---- C:\Windows\system32\vi-VN

2009-09-19 19:07:23 ----D---- C:\Windows\system32\EventProviders

2009-09-19 19:06:25 ----A---- C:\Windows\system32\NlsLexicons0007.dll

2009-09-19 19:06:23 ----A---- C:\Windows\system32\SLCExt.dll

2009-09-19 19:06:22 ----A---- C:\Windows\system32\SLsvc.exe

2009-09-19 19:06:21 ----A---- C:\Windows\system32\FunctionDiscoveryFolder.dll

2009-09-19 19:06:21 ----A---- C:\Windows\system32\DevicePairingWizard.exe

2009-09-19 19:06:20 ----A---- C:\Windows\system32\NlsLexicons0009.dll

2009-09-19 19:06:18 ----A---- C:\Windows\system32\mssrch.dll

2009-09-19 19:06:16 ----A---- C:\Windows\system32\tquery.dll

2009-09-19 19:06:15 ----A---- C:\Windows\system32\PresentationNative_v0300.dll

2009-09-19 19:06:14 ----A---- C:\Windows\system32\scavenge.dll

2009-09-19 19:06:14 ----A---- C:\Windows\system32\RMActivate_isv.exe

2009-09-19 19:06:14 ----A---- C:\Windows\system32\RMActivate.exe

2009-09-19 19:06:13 ----A---- C:\Windows\system32\msi.dll

2009-09-19 19:06:13 ----A---- C:\Windows\system32\imapi2fs.dll

2009-09-19 19:06:12 ----A---- C:\Windows\system32\WscEapPr.dll

2009-09-19 19:06:12 ----A---- C:\Windows\system32\wcnwiz2.dll

2009-09-19 19:06:12 ----A---- C:\Windows\system32\sysmain.dll

2009-09-19 19:06:12 ----A---- C:\Windows\system32\secproc_isv.dll

2009-09-19 19:06:11 ----A---- C:\Windows\system32\icardagt.exe

2009-09-19 19:06:11 ----A---- C:\Windows\system32\AuxiliaryDisplayCpl.dll

2009-09-19 19:06:10 ----A---- C:\Windows\system32\spreview.exe

2009-09-19 19:06:10 ----A---- C:\Windows\system32\spinstall.exe

2009-09-19 19:06:10 ----A---- C:\Windows\system32\EhStorShell.dll

2009-09-19 19:06:09 ----A---- C:\Windows\system32\spwizui.dll

2009-09-19 19:06:09 ----A---- C:\Windows\system32\drmv2clt.dll

2009-09-19 19:06:08 ----A---- C:\Windows\system32\shell32.dll

2009-09-19 19:06:08 ----A---- C:\Windows\system32\secproc.dll

2009-09-19 19:06:08 ----A---- C:\Windows\system32\p2psvc.dll

2009-09-19 19:06:08 ----A---- C:\Windows\system32\mcupdate_GenuineIntel.dll

2009-09-19 19:06:07 ----A---- C:\Windows\system32\SearchIndexer.exe

2009-09-19 19:06:07 ----A---- C:\Windows\system32\mssvp.dll

2009-09-19 19:06:07 ----A---- C:\Windows\system32\mssphtb.dll

2009-09-19 19:06:07 ----A---- C:\Windows\system32\mssph.dll

2009-09-19 19:06:07 ----A---- C:\Windows\system32\MSMPEG2VDEC.DLL

2009-09-19 19:06:07 ----A---- C:\Windows\system32\mscoree.dll

2009-09-19 19:06:06 ----A---- C:\Windows\system32\sdohlp.dll

2009-09-19 19:06:06 ----A---- C:\Windows\system32\imapi2.dll

2009-09-19 19:06:05 ----A---- C:\Windows\system32\ntkrnlpa.exe

2009-09-19 19:06:05 ----A---- C:\Windows\system32\IMJP10K.DLL

2009-09-19 19:06:05 ----A---- C:\Windows\system32\esent.dll

2009-09-19 19:06:05 ----A---- C:\Windows\system32\DevicePairing.dll

2009-09-19 19:06:04 ----A---- C:\Windows\system32\wevtsvc.dll

2009-09-19 19:06:04 ----A---- C:\Windows\system32\sperror.dll

2009-09-19 19:06:04 ----A---- C:\Windows\system32\SLC.dll

2009-09-19 19:06:04 ----A---- C:\Windows\system32\RMActivate_ssp.exe

2009-09-19 19:06:04 ----A---- C:\Windows\system32\PresentationHostProxy.dll

2009-09-19 19:06:04 ----A---- C:\Windows\system32\korwbrkr.dll

2009-09-19 19:06:04 ----A---- C:\Windows\system32\IasMigReader.exe

2009-09-19 19:06:03 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe

2009-09-19 19:06:03 ----A---- C:\Windows\system32\msshsq.dll

2009-09-19 19:06:02 ----A---- C:\Windows\system32\ntoskrnl.exe

2009-09-19 19:06:02 ----A---- C:\Windows\system32\msxml6.dll

2009-09-19 19:06:02 ----A---- C:\Windows\system32\msjet40.dll

2009-09-19 19:06:02 ----A---- C:\Windows\system32\MPSSVC.dll

2009-09-19 19:06:01 ----A---- C:\Windows\system32\Query.dll

2009-09-19 19:06:01 ----A---- C:\Windows\system32\qmgr.dll

2009-09-19 19:06:01 ----A---- C:\Windows\system32\P2PGraph.dll

2009-09-19 19:06:01 ----A---- C:\Windows\system32\msexch40.dll

2009-09-19 19:06:01 ----A---- C:\Windows\system32\diagperf.dll

2009-09-19 19:06:00 ----A---- C:\Windows\system32\winload.exe

2009-09-19 19:06:00 ----A---- C:\Windows\system32\uDWM.dll

2009-09-19 19:06:00 ----A---- C:\Windows\system32\srchadmin.dll

2009-09-19 19:06:00 ----A---- C:\Windows\system32\ole32.dll

2009-09-19 19:06:00 ----A---- C:\Windows\system32\ntdll.dll

2009-09-19 19:06:00 ----A---- C:\Windows\system32\msxml3.dll

2009-09-19 19:06:00 ----A---- C:\Windows\system32\mmc.exe

2009-09-19 19:06:00 ----A---- C:\Windows\system32\mblctr.exe

2009-09-19 19:06:00 ----A---- C:\Windows\system32\EncDec.dll

2009-09-19 19:05:59 ----A---- C:\Windows\system32\riched20.dll

2009-09-19 19:05:59 ----A---- C:\Windows\system32\RacEngn.dll

2009-09-19 19:05:59 ----A---- C:\Windows\system32\IasMigPlugin.dll

2009-09-19 19:05:59 ----A---- C:\Windows\system32\fdBth.dll

2009-09-19 19:05:59 ----A---- C:\Windows\system32\dfsr.exe

2009-09-19 19:05:58 ----A---- C:\Windows\system32\SearchProtocolHost.exe

2009-09-19 19:05:58 ----A---- C:\Windows\system32\SearchFilterHost.exe

2009-09-19 19:05:58 ----A---- C:\Windows\system32\milcore.dll

2009-09-19 19:05:58 ----A---- C:\Windows\system32\kernel32.dll

2009-09-19 19:05:58 ----A---- C:\Windows\system32\EhStorAPI.dll

2009-09-19 19:05:57 ----A---- C:\Windows\system32\spoolss.dll

2009-09-19 19:05:57 ----A---- C:\Windows\system32\schedsvc.dll

2009-09-19 19:05:57 ----A---- C:\Windows\system32\NaturalLanguage6.dll

2009-09-19 19:05:57 ----A---- C:\Windows\system32\CertEnroll.dll

2009-09-19 19:05:57 ----A---- C:\Windows\system32\AuxiliaryDisplayDriverLib.dll

2009-09-19 19:05:56 ----A---- C:\Windows\system32\WinSAT.exe

2009-09-19 19:05:56 ----A---- C:\Windows\system32\msvcp60.dll

2009-09-19 19:05:56 ----A---- C:\Windows\system32\msjtes40.dll

2009-09-19 19:05:56 ----A---- C:\Windows\system32\infocardapi.dll

2009-09-19 19:05:56 ----A---- C:\Windows\system32\gpedit.dll

2009-09-19 19:05:55 ----A---- C:\Windows\system32\PresentationSettings.exe

2009-09-19 19:05:55 ----A---- C:\Windows\system32\Magnify.exe

2009-09-19 19:05:55 ----A---- C:\Windows\system32\es.dll

2009-09-19 19:05:54 ----A---- C:\Windows\system32\mstext40.dll

2009-09-19 19:05:54 ----A---- C:\Windows\system32\AuxiliaryDisplayServices.dll

2009-09-19 19:05:54 ----A---- C:\Windows\system32\advapi32.dll

2009-09-19 19:05:53 ----A---- C:\Windows\system32\WMPhoto.dll

2009-09-19 19:05:53 ----A---- C:\Windows\system32\WindowsAnytimeUpgradeCPL.dll

2009-09-19 19:05:53 ----A---- C:\Windows\system32\WebClnt.dll

2009-09-19 19:05:53 ----A---- C:\Windows\system32\vssapi.dll

2009-09-19 19:05:53 ----A---- C:\Windows\system32\slwmi.dll

2009-09-19 19:05:53 ----A---- C:\Windows\system32\msxbde40.dll

2009-09-19 19:05:53 ----A---- C:\Windows\system32\msexcl40.dll

2009-09-19 19:05:53 ----A---- C:\Windows\system32\comsvcs.dll

2009-09-19 19:05:53 ----A---- C:\Windows\system32\authui.dll

2009-09-19 19:05:52 ----A---- C:\Windows\system32\propsys.dll

2009-09-19 19:05:52 ----A---- C:\Windows\system32\PresentationHost.exe

2009-09-19 19:05:52 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2009-09-19 19:05:52 ----A---- C:\Windows\system32\newdev.dll

2009-09-19 19:05:52 ----A---- C:\Windows\system32\NetProjW.dll

2009-09-19 19:05:52 ----A---- C:\Windows\system32\msrepl40.dll

2009-09-19 19:05:52 ----A---- C:\Windows\system32\iasrecst.dll

2009-09-19 19:05:52 ----A---- C:\Windows\system32\gpsvc.dll

2009-09-19 19:05:52 ----A---- C:\Windows\system32\eudcedit.exe

2009-09-19 19:05:52 ----A---- C:\Windows\system32\crypt32.dll

2009-09-19 19:05:51 ----A---- C:\Windows\system32\setupapi.dll

2009-09-19 19:05:51 ----A---- C:\Windows\system32\rpcss.dll

2009-09-19 19:05:51 ----A---- C:\Windows\system32\mspbde40.dll

2009-09-19 19:05:51 ----A---- C:\Windows\system32\d3d9.dll

2009-09-19 19:05:51 ----A---- C:\Windows\explorer.exe

2009-09-19 19:05:50 ----A---- C:\Windows\system32\wevtapi.dll

2009-09-19 19:05:50 ----A---- C:\Windows\system32\shlwapi.dll

2009-09-19 19:05:50 ----A---- C:\Windows\system32\photowiz.dll

2009-09-19 19:05:50 ----A---- C:\Windows\system32\nlhtml.dll

2009-09-19 19:05:50 ----A---- C:\Windows\system32\msrd3x40.dll

2009-09-19 19:05:50 ----A---- C:\Windows\system32\msltus40.dll

2009-09-19 19:05:50 ----A---- C:\Windows\system32\msdtctm.dll

2009-09-19 19:05:50 ----A---- C:\Windows\system32\mfc42.dll

2009-09-19 19:05:50 ----A---- C:\Windows\system32\EhStorPwdMgr.dll

2009-09-19 19:05:50 ----A---- C:\Windows\system32\EhStorAuthn.dll

2009-09-19 19:05:50 ----A---- C:\Windows\system32\davclnt.dll

2009-09-19 19:05:50 ----A---- C:\Windows\system32\browseui.dll

2009-09-19 19:05:49 ----A---- C:\Windows\system32\user32.dll

2009-09-19 19:05:49 ----A---- C:\Windows\system32\samsrv.dll

2009-09-19 19:05:49 ----A---- C:\Windows\system32\ci.dll

2009-09-19 19:05:48 ----A---- C:\Windows\system32\win32spl.dll

2009-09-19 19:05:48 ----A---- C:\Windows\system32\WcnNetsh.dll

2009-09-19 19:05:48 ----A---- C:\Windows\system32\SLCommDlg.dll

2009-09-19 19:05:48 ----A---- C:\Windows\system32\quartz.dll

2009-09-19 19:05:48 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe

2009-09-19 19:05:48 ----A---- C:\Windows\system32\oleaut32.dll

2009-09-19 19:05:48 ----A---- C:\Windows\system32\netshell.dll

2009-09-19 19:05:48 ----A---- C:\Windows\system32\IKEEXT.DLL

2009-09-19 19:05:48 ----A---- C:\Windows\system32\compcln.exe

2009-09-19 19:05:47 ----A---- C:\Windows\system32\xmlfilter.dll

2009-09-19 19:05:47 ----A---- C:\Windows\system32\winhttp.dll

2009-09-19 19:05:47 ----A---- C:\Windows\system32\QAGENTRT.DLL

2009-09-19 19:05:47 ----A---- C:\Windows\system32\mswstr10.dll

2009-09-19 19:05:47 ----A---- C:\Windows\system32\msvcrt.dll

2009-09-19 19:05:47 ----A---- C:\Windows\system32\msctf.dll

2009-09-19 19:05:47 ----A---- C:\Windows\system32\gdi32.dll

2009-09-19 19:05:47 ----A---- C:\Windows\system32\emdmgmt.dll

2009-09-19 19:05:47 ----A---- C:\Windows\system32\audiosrv.dll

2009-09-19 19:05:47 ----A---- C:\Windows\system32\apds.dll

2009-09-19 19:05:46 ----A---- C:\Windows\system32\winresume.exe

2009-09-19 19:05:46 ----A---- C:\Windows\system32\VSSVC.exe

2009-09-19 19:05:46 ----A---- C:\Windows\system32\sqlsrv32.dll

2009-09-19 19:05:46 ----A---- C:\Windows\system32\SLUI.exe

2009-09-19 19:05:46 ----A---- C:\Windows\system32\propdefs.dll

2009-09-19 19:05:46 ----A---- C:\Windows\system32\odbc32.dll

2009-09-19 19:05:46 ----A---- C:\Windows\system32\msrd2x40.dll

2009-09-19 19:05:46 ----A---- C:\Windows\system32\mfc42u.dll

2009-09-19 19:05:46 ----A---- C:\Windows\system32\iphlpsvc.dll

2009-09-19 19:05:46 ----A---- C:\Windows\system32\eapphost.dll

2009-09-19 19:05:45 ----A---- C:\Windows\system32\wevtutil.exe

2009-09-19 19:05:45 ----A---- C:\Windows\system32\shdocvw.dll

2009-09-19 19:05:45 ----A---- C:\Windows\system32\mssitlb.dll

2009-09-19 19:05:45 ----A---- C:\Windows\system32\dbgeng.dll

2009-09-19 19:05:44 ----A---- C:\Windows\system32\WsmSvc.dll

2009-09-19 19:05:44 ----A---- C:\Windows\system32\vds.exe

2009-09-19 19:05:44 ----A---- C:\Windows\system32\usp10.dll

2009-09-19 19:05:44 ----A---- C:\Windows\system32\swprv.dll

Code:

2009-09-19 19:05:44 ----A---- C:\Windows\system32\mmcndmgr.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\WSDApi.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\Wldap32.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\wcnwiz.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\netlogon.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\msscb.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\msctfp.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\fdBthProxy.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\evr.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\drvinst.exe

2009-09-19 19:05:43 ----A---- C:\Windows\system32\devmgr.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\DevicePairingProxy.dll

2009-09-19 19:05:43 ----A---- C:\Windows\system32\BFE.DLL

2009-09-19 19:05:43 ----A---- C:\Windows\system32\adsldpc.dll

2009-09-19 19:05:42 ----A---- C:\Windows\system32\WMVSDECD.DLL

2009-09-19 19:05:42 ----A---- C:\Windows\system32\WindowsCodecs.dll

2009-09-19 19:05:42 ----A---- C:\Windows\system32\wercon.exe

2009-09-19 19:05:42 ----A---- C:\Windows\system32\services.exe

2009-09-19 19:05:42 ----A---- C:\Windows\system32\comdlg32.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\wcncsvc.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\umpnpmgr.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\taskeng.exe

2009-09-19 19:05:41 ----A---- C:\Windows\system32\rtffilt.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\reg.exe

2009-09-19 19:05:41 ----A---- C:\Windows\system32\PortableDeviceApi.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\mswdat10.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\msjter40.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\msdtcprx.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\msdrm.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\mimefilt.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\ipsmsnap.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\dnsapi.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\certutil.exe

2009-09-19 19:05:41 ----A---- C:\Windows\system32\certcli.dll

2009-09-19 19:05:41 ----A---- C:\Windows\system32\adtschema.dll

2009-09-19 19:05:40 ----A---- C:\Windows\system32\WMNetMgr.dll

2009-09-19 19:05:40 ----A---- C:\Windows\system32\w32time.dll

2009-09-19 19:05:40 ----A---- C:\Windows\system32\rsaenh.dll

2009-09-19 19:05:40 ----A---- C:\Windows\system32\msshooks.dll

2009-09-19 19:05:40 ----A---- C:\Windows\system32\msscntrs.dll

2009-09-19 19:05:40 ----A---- C:\Windows\system32\msihnd.dll

2009-09-19 19:05:40 ----A---- C:\Windows\system32\IPSECSVC.DLL

2009-09-19 19:05:40 ----A---- C:\Windows\system32\bthserv.dll

2009-09-19 19:05:40 ----A---- C:\Windows\system32\bcrypt.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\wmicmiplugin.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\TsWpfWrp.exe

2009-09-19 19:05:39 ----A---- C:\Windows\system32\termsrv.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\profsvc.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\netapi32.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\mtxclu.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\msstrc.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\mscories.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\MMDevAPI.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\inetpp.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\inetcomm.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\hidserv.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\fundisc.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\dhcpcsvc6.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\dfshim.dll

2009-09-19 19:05:39 ----A---- C:\Windows\system32\cryptsvc.dll

2009-09-19 19:05:38 ----A---- C:\Windows\system32\wdc.dll

2009-09-19 19:05:38 ----A---- C:\Windows\system32\spoolsv.exe

2009-09-19 19:05:38 ----A---- C:\Windows\system32\shsvcs.dll

2009-09-19 19:05:38 ----A---- C:\Windows\system32\rasmans.dll

2009-09-19 19:05:38 ----A---- C:\Windows\system32\pnidui.dll

2009-09-19 19:05:38 ----A---- C:\Windows\system32\msiexec.exe

2009-09-19 19:05:38 ----A---- C:\Windows\system32\imapi.dll

2009-09-19 19:05:38 ----A---- C:\Windows\system32\icardres.dll

2009-09-19 19:05:38 ----A---- C:\Windows\system32\iassdo.dll

2009-09-19 19:05:38 ----A---- C:\Windows\system32\chsbrkr.dll

2009-09-19 19:05:38 ----A---- C:\Windows\system32\autofmt.exe

2009-09-19 19:05:37 ----A---- C:\Windows\system32\wersvc.dll

2009-09-19 19:05:37 ----A---- C:\Windows\system32\slmgr.vbs

2009-09-19 19:05:37 ----A---- C:\Windows\system32\scrrun.dll

2009-09-19 19:05:37 ----A---- C:\Windows\system32\PSHED.DLL

2009-09-19 19:05:37 ----A---- C:\Windows\system32\pidgenx.dll

2009-09-19 19:05:37 ----A---- C:\Windows\system32\pdh.dll

2009-09-19 19:05:37 ----A---- C:\Windows\system32\dhcpcsvc.dll

2009-09-19 19:05:37 ----A---- C:\Windows\system32\CertEnrollUI.dll

2009-09-19 19:05:37 ----A---- C:\Windows\system32\azroles.dll

2009-09-19 19:05:36 ----A---- C:\Windows\system32\wmpmde.dll

2009-09-19 19:05:36 ----A---- C:\Windows\system32\winlogon.exe

2009-09-19 19:05:36 ----A---- C:\Windows\system32\SyncCenter.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\wisptis.exe

2009-09-19 19:05:35 ----A---- C:\Windows\system32\WindowsCodecsExt.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\untfs.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\spp.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\SLUINotify.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\sethc.exe

2009-09-19 19:05:35 ----A---- C:\Windows\system32\scrobj.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\rtutils.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\ncrypt.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\msjetoledb40.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\kd1394.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\iassam.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\comuid.dll

2009-09-19 19:05:35 ----A---- C:\Windows\system32\certmgr.dll

2009-09-19 19:05:34 ----A---- C:\Windows\system32\winsrv.dll

2009-09-19 19:05:34 ----A---- C:\Windows\system32\taskcomp.dll

2009-09-19 19:05:34 ----A---- C:\Windows\system32\printui.dll

2009-09-19 19:05:34 ----A---- C:\Windows\system32\iasnap.dll

2009-09-19 19:05:34 ----A---- C:\Windows\system32\dwm.exe

2009-09-19 19:05:34 ----A---- C:\Windows\system32\autoconv.exe

2009-09-19 19:05:34 ----A---- C:\Windows\system32\autochk.exe

2009-09-19 19:05:33 ----A---- C:\Windows\system32\wow32.dll

2009-09-19 19:05:33 ----A---- C:\Windows\system32\userenv.dll

2009-09-19 19:05:33 ----A---- C:\Windows\system32\spcmsg.dll

2009-09-19 19:05:33 ----A---- C:\Windows\system32\RelMon.dll

2009-09-19 19:05:33 ----A---- C:\Windows\system32\osk.exe

2009-09-19 19:05:33 ----A---- C:\Windows\system32\onex.dll

2009-09-19 19:05:33 ----A---- C:\Windows\system32\mswsock.dll

2009-09-19 19:05:33 ----A---- C:\Windows\system32\kdusb.dll

2009-09-19 19:05:33 ----A---- C:\Windows\system32\kdcom.dll

2009-09-19 19:05:33 ----A---- C:\Windows\system32\cscript.exe

2009-09-19 19:05:33 ----A---- C:\Windows\system32\basecsp.dll

2009-09-19 19:05:33 ----A---- C:\Windows\system32\audiodg.exe

2009-09-19 19:05:32 ----A---- C:\Windows\system32\wsepno.dll

2009-09-19 19:05:32 ----A---- C:\Windows\system32\WinSCard.dll

2009-09-19 19:05:32 ----A---- C:\Windows\system32\winmm.dll

2009-09-19 19:05:32 ----A---- C:\Windows\system32\WerFaultSecure.exe

2009-09-19 19:05:32 ----A---- C:\Windows\system32\WerFault.exe

2009-09-19 19:05:32 ----A---- C:\Windows\system32\Utilman.exe

2009-09-19 19:05:32 ----A---- C:\Windows\system32\stobject.dll

2009-09-19 19:05:32 ----A---- C:\Windows\system32\secproc_ssp_isv.dll

2009-09-19 19:05:32 ----A---- C:\Windows\system32\secproc_ssp.dll

2009-09-19 19:05:32 ----A---- C:\Windows\system32\rdpencom.dll

2009-09-19 19:05:32 ----A---- C:\Windows\system32\offfilt.dll

2009-09-19 19:05:32 ----A---- C:\Windows\system32\msftedit.dll

2009-09-19 19:05:32 ----A---- C:\Windows\system32\mfplat.dll

2009-09-19 19:05:32 ----A---- C:\Windows\system32\dnsrslvr.dll

2009-09-19 19:05:32 ----A---- C:\Windows\system32\diskraid.exe

2009-09-19 19:05:31 ----A---- C:\Windows\system32\wscript.exe

2009-09-19 19:05:31 ----A---- C:\Windows\system32\wscntfy.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\wiaservc.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\ulib.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\sysclass.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\SndVol.exe

2009-09-19 19:05:31 ----A---- C:\Windows\system32\rastapi.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\prnntfy.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\odbccp32.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\msnetobj.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\mscms.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\mcmde.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\IPHLPAPI.DLL

2009-09-19 19:05:31 ----A---- C:\Windows\system32\iasdatastore.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\dsound.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\cryptui.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\apphelp.dll

2009-09-19 19:05:31 ----A---- C:\Windows\system32\adsmsext.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\wusa.exe

2009-09-19 19:05:30 ----A---- C:\Windows\system32\wscsvc.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\WMVENCOD.DLL

2009-09-19 19:05:30 ----A---- C:\Windows\system32\wlangpui.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\vdsdyn.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\regsvc.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\rastls.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\rasapi32.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\pnpsetup.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\ntprint.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\mscorier.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\logman.exe

2009-09-19 19:05:30 ----A---- C:\Windows\system32\ipsecsnp.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\iashlpr.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\gpapi.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\fdProxy.dll

2009-09-19 19:05:30 ----A---- C:\Windows\system32\diskpart.exe

2009-09-19 19:05:30 ----A---- C:\Windows\system32\brcpl.dll

2009-09-19 19:05:29 ----A---- C:\Windows\system32\zipfldr.dll

2009-09-19 19:05:29 ----A---- C:\Windows\system32\wsnmp32.dll

2009-09-19 19:05:29 ----A---- C:\Windows\system32\wshext.dll

2009-09-19 19:05:29 ----A---- C:\Windows\system32\wpccpl.dll

2009-09-19 19:05:29 ----A---- C:\Windows\system32\wer.dll

2009-09-19 19:05:29 ----A---- C:\Windows\system32\themecpl.dll

2009-09-19 19:05:29 ----A---- C:\Windows\system32\rasdlg.dll

2009-09-19 19:05:29 ----A---- C:\Windows\system32\netcenter.dll

2009-09-19 19:05:29 ----A---- C:\Windows\system32\iassvcs.dll

2009-09-19 19:05:29 ----A---- C:\Windows\system32\iasrad.dll

2009-09-19 19:05:29 ----A---- C:\Windows\system32\findstr.exe

2009-09-19 19:05:28 ----A---- C:\Windows\system32\uxsms.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\tsbyuv.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\srvsvc.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\slcc.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\scansetting.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\powrprof.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\ntmarta.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\networkmap.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\msutb.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\mstsc.exe

2009-09-19 19:05:28 ----A---- C:\Windows\system32\mstlsapi.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\mssprxy.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\iasads.dll

2009-09-19 19:05:28 ----A---- C:\Windows\system32\iasacct.dll

2009-09-19 19:05:27 ----A---- C:\Windows\system32\themeui.dll

2009-09-19 19:05:27 ----A---- C:\Windows\system32\systemcpl.dll

2009-09-19 19:05:27 ----A---- C:\Windows\system32\sud.dll

2009-09-19 19:05:27 ----A---- C:\Windows\system32\samlib.dll

2009-09-19 19:05:27 ----A---- C:\Windows\system32\powercpl.dll

2009-09-19 19:05:27 ----A---- C:\Windows\system32\PerfCenterCPL.dll

2009-09-19 19:05:27 ----A---- C:\Windows\system32\pcaui.dll

2009-09-19 19:05:27 ----A---- C:\Windows\system32\newdev.exe

2009-09-19 19:05:27 ----A---- C:\Windows\system32\dot3svc.dll

2009-09-19 19:05:27 ----A---- C:\Windows\system32\connect.dll

2009-09-19 19:05:27 ----A---- C:\Windows\system32\authz.dll

2009-09-19 19:05:27 ----A---- C:\Windows\system32\accessibilitycpl.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\wpcao.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\wlanpref.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\vdsutil.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\usercpl.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\tapisrv.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\scksp.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\scesrv.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\rpchttp.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\regapi.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\qdvd.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\psisdecd.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\oleprn.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\msinfo32.exe

2009-09-19 19:05:26 ----A---- C:\Windows\system32\mpr.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\mmci.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\imm32.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\feclient.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\autoplay.dll

2009-09-19 19:05:26 ----A---- C:\Windows\system32\AudioSes.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\wscisvif.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\TSTheme.exe

2009-09-19 19:05:25 ----A---- C:\Windows\system32\spwinsat.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\sdclt.exe

2009-09-19 19:05:25 ----A---- C:\Windows\system32\scecli.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\rekeywiz.exe

2009-09-19 19:05:25 ----A---- C:\Windows\system32\rasplap.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\rasgcw.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\qedit.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\pnpui.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\perfdisk.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\ncryptui.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\iaspolcy.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\hdwwiz.exe

2009-09-19 19:05:25 ----A---- C:\Windows\system32\FWPUCLNT.DLL

2009-09-19 19:05:25 ----A---- C:\Windows\system32\Faultrep.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\dpapimig.exe

2009-09-19 19:05:25 ----A---- C:\Windows\system32\dot3msm.dll

2009-09-19 19:05:25 ----A---- C:\Windows\system32\DeviceEject.exe

2009-09-19 19:05:25 ----A---- C:\Windows\system32\certreq.exe

2009-09-19 19:05:24 ----A---- C:\Windows\system32\WMVXENCD.DLL

2009-09-19 19:05:24 ----A---- C:\Windows\system32\wlanui.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\wiaaut.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\whealogr.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\tcpmon.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\tcpipcfg.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\srcore.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\SnippingTool.exe

2009-09-19 19:05:24 ----A---- C:\Windows\system32\shwebsvc.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\SCardSvr.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\rasppp.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\raschap.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\PnPutil.exe

2009-09-19 19:05:24 ----A---- C:\Windows\system32\PnPUnattend.exe

2009-09-19 19:05:24 ----A---- C:\Windows\system32\MSVidCtl.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\fontext.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\fdWSD.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\dsprop.dll

2009-09-19 19:05:24 ----A---- C:\Windows\system32\conime.exe

2009-09-19 19:05:24 ----A---- C:\Windows\system32\cmmon32.exe

2009-09-19 19:05:24 ----A---- C:\Windows\system32\cmdial32.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\wmdrmsdk.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\wlgpclnt.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\shsetup.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\rdpwsx.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\rasmontr.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\oobefldr.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\mscandui.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\modemui.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\dimsroam.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\dataclen.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\chtbrkr.dll

2009-09-19 19:05:23 ----A---- C:\Windows\system32\blackbox.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\WSDMon.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\wscapi.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\wpcsvc.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\wmpeffects.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\thawbrkr.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\softkbd.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\smss.exe

2009-09-19 19:05:22 ----A---- C:\Windows\system32\sendmail.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\networkexplorer.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\netplwiz.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\msscp.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\msimtf.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\logagent.exe

2009-09-19 19:05:22 ----A---- C:\Windows\system32\InkEd.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\ifmon.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\gpresult.exe

2009-09-19 19:05:22 ----A---- C:\Windows\system32\credui.dll

2009-09-19 19:05:22 ----A---- C:\Windows\system32\cipher.exe

2009-09-19 19:05:22 ----A---- C:\Windows\system32\certprop.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\wshbth.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\version.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\SLLUA.exe

2009-09-19 19:05:21 ----A---- C:\Windows\system32\puiapi.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\olepro32.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\msisip.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\msctfui.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\mprapi.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\MediaMetadataHandler.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\input.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\fdSSDP.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\fc.exe

2009-09-19 19:05:21 ----A---- C:\Windows\system32\ExplorerFrame.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\drmmgrtn.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\dmsynth.dll

2009-09-19 19:05:21 ----A---- C:\Windows\system32\cdd.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\wsdchngr.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\tscupgrd.exe

2009-09-19 19:05:20 ----A---- C:\Windows\system32\Storprop.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\SMBHelperClass.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\slcinst.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\rasdial.exe

2009-09-19 19:05:20 ----A---- C:\Windows\system32\rasdiag.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\PortableDeviceTypes.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\nslookup.exe

2009-09-19 19:05:20 ----A---- C:\Windows\system32\networkitemfactory.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\msjint40.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\MsCtfMonitor.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\l2nacp.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\ipconfig.exe

2009-09-19 19:05:20 ----A---- C:\Windows\system32\ftp.exe

2009-09-19 19:05:20 ----A---- C:\Windows\system32\fdWCN.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\eappcfg.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\eapp3hst.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\dot3cfg.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\dmusic.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\cscdll.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\cscapi.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\CHxReadingStringIME.dll

2009-09-19 19:05:20 ----A---- C:\Windows\system32\bthudtask.exe

2009-09-19 19:05:20 ----A---- C:\Windows\system32\bthci.dll

2009-09-19 19:05:19 ----A---- C:\Windows\system32\PNPXAssoc.dll

2009-09-19 19:05:19 ----A---- C:\Windows\system32\ocsetup.exe

2009-09-19 19:05:19 ----A---- C:\Windows\system32\mmcico.dll

2009-09-19 19:05:19 ----A---- C:\Windows\system32\hbaapi.dll

2009-09-19 19:05:19 ----A---- C:\Windows\system32\gpupdate.exe

2009-09-19 19:05:19 ----A---- C:\Windows\system32\FwRemoteSvr.dll

2009-09-19 19:05:19 ----A---- C:\Windows\system32\fdeploy.dll

2009-09-19 19:05:19 ----A---- C:\Windows\system32\eappgnui.dll

2009-09-19 19:05:19 ----A---- C:\Windows\system32\csrstub.exe

2009-09-19 19:05:19 ----A---- C:\Windows\system32\cbsra.exe

2009-09-19 19:05:18 ----A---- C:\Windows\system32\winrnr.dll

2009-09-19 19:05:18 ----A---- C:\Windows\system32\vdmdbg.dll

2009-09-19 19:05:18 ----A---- C:\Windows\system32\slwga.dll

2009-09-19 19:05:18 ----A---- C:\Windows\system32\odbcconf.dll

2009-09-19 19:05:18 ----A---- C:\Windows\system32\NcdProp.dll

2009-09-19 19:05:18 ----A---- C:\Windows\system32\iscsilog.dll

2009-09-19 19:05:18 ----A---- C:\Windows\system32\inetppui.dll

2009-09-19 19:05:18 ----A---- C:\Windows\system32\bitsigd.dll

2009-09-19 19:05:17 ----A---- C:\Windows\system32\midimap.dll

2009-09-19 19:05:15 ----A---- C:\Windows\system32\msimsg.dll

2009-09-19 19:05:15 ----A---- C:\Windows\system32\f3ahvoas.dll

2009-09-19 19:04:59 ----A---- C:\Windows\system32\SmiEngine.dll

2009-09-19 19:04:57 ----A---- C:\Windows\system32\wdscore.dll

2009-09-19 19:04:57 ----A---- C:\Windows\system32\PkgMgr.exe

2009-09-19 19:04:51 ----A---- C:\Windows\system32\drvstore.dll

Code:

2009-09-17 01:51:57 ----D---- C:\found.000

2009-09-15 17:01:31 ----D---- C:\rsit

2009-09-12 19:07:14 ----D---- C:\Windows\CheckSur

2009-09-12 18:47:05 ----D---- C:\ProgramData\KONAMI

2009-09-12 18:25:40 ----D---- C:\Program Files\KONAMI

2009-09-10 01:11:49 ----A---- C:\Windows\system32\lsasrv.dll

2009-09-10 01:11:48 ----A---- C:\Windows\system32\wdigest.dll

2009-09-10 01:11:48 ----A---- C:\Windows\system32\msv1_0.dll

2009-09-10 01:11:48 ----A---- C:\Windows\system32\kerberos.dll

2009-09-10 01:11:47 ----A---- C:\Windows\system32\secur32.dll

2009-09-10 01:11:47 ----A---- C:\Windows\system32\schannel.dll

2009-09-10 01:11:47 ----A---- C:\Windows\system32\lsass.exe

2009-09-09 19:41:07 ----A---- C:\Windows\system32\TCPSVCS.EXE

2009-09-09 19:41:07 ----A---- C:\Windows\system32\ROUTE.EXE

2009-09-09 19:41:07 ----A---- C:\Windows\system32\NETSTAT.EXE

2009-09-09 19:41:07 ----A---- C:\Windows\system32\netiohlp.dll

2009-09-09 19:41:07 ----A---- C:\Windows\system32\MRINFO.EXE

2009-09-09 19:41:07 ----A---- C:\Windows\system32\HOSTNAME.EXE

2009-09-09 19:41:07 ----A---- C:\Windows\system32\finger.exe

2009-09-09 19:41:07 ----A---- C:\Windows\system32\ARP.EXE

2009-09-09 19:40:51 ----A---- C:\Windows\system32\netevent.dll

2009-09-09 19:38:49 ----A---- C:\Windows\system32\wlansvc.dll

2009-09-09 19:38:49 ----A---- C:\Windows\system32\wlansec.dll

2009-09-09 19:38:49 ----A---- C:\Windows\system32\wlanmsm.dll

2009-09-09 19:38:49 ----A---- C:\Windows\system32\wlanhlp.dll

2009-09-09 19:38:48 ----A---- C:\Windows\system32\wlanapi.dll

2009-09-09 19:38:39 ----A---- C:\Windows\system32\L2SecHC.dll

2009-09-09 19:37:52 ----A---- C:\Windows\system32\WMVCORE.DLL

2009-09-09 19:37:46 ----A---- C:\Windows\system32\rrinstaller.exe

2009-09-09 19:37:46 ----A---- C:\Windows\system32\mfps.dll

2009-09-09 19:37:46 ----A---- C:\Windows\system32\mfpmp.exe

2009-09-09 19:37:46 ----A---- C:\Windows\system32\mferror.dll

2009-09-09 19:37:45 ----A---- C:\Windows\system32\mf.dll

2009-09-03 10:56:31 ----A---- C:\Windows\system32\Apphlpdm.dll

2009-09-03 10:56:30 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll

2009-08-26 12:23:00 ----A---- C:\Windows\system32\tzres.dll

2009-08-26 11:00:32 ----A---- C:\Windows\system32\gameux.dll
 

======List of files/folders modified in the last 1 months======
 

2009-09-21 18:19:46 ----D---- C:\Windows\System32

2009-09-21 18:19:46 ----D---- C:\Windows\inf

2009-09-21 18:19:46 ----A---- C:\Windows\system32\PerfStringBackup.INI

2009-09-21 18:16:42 ----D---- C:\Windows\Tasks

2009-09-21 18:14:11 ----D---- C:\Windows\Internet Logs

2009-09-21 18:13:58 ----D---- C:\Windows\system32\drivers

2009-09-21 17:49:08 ----RD---- C:\Program Files

2009-09-21 17:49:06 ----D---- C:\Windows\system32\catroot

2009-09-21 12:26:19 ----D---- C:\ProgramData\Google Updater

2009-09-21 11:14:37 ----D---- C:\Windows\winsxs

2009-09-21 11:14:30 ----SHD---- C:\System Volume Information

2009-09-20 17:44:31 ----D---- C:\Windows

2009-09-20 17:41:24 ----D---- C:\Windows\system32\de-DE

2009-09-20 17:41:24 ----D---- C:\Qoobox

2009-09-20 17:40:08 ----D---- C:\Windows\ERDNT

2009-09-20 17:39:36 ----A---- C:\Windows\system.ini

2009-09-20 17:36:24 ----D---- C:\Windows\AppPatch

2009-09-20 17:36:23 ----D---- C:\Program Files\Common Files

2009-09-20 17:29:20 ----D---- C:\Windows\rescache

2009-09-20 17:10:55 ----D---- C:\Windows\system32\migration

2009-09-20 17:10:55 ----D---- C:\Program Files\Internet Explorer

2009-09-20 17:10:50 ----D---- C:\Windows\system32\en-US

2009-09-20 17:10:50 ----D---- C:\Windows\PolicyDefinitions

2009-09-20 17:09:22 ----D---- C:\Windows\system32\catroot2

2009-09-20 15:40:32 ----SHD---- C:\Windows\Installer

2009-09-20 15:40:32 ----RSD---- C:\Windows\assembly

2009-09-20 12:26:38 ----SD---- C:\ProgramData\Microsoft

2009-09-20 12:06:36 ----D---- C:\Windows\Microsoft.NET

2009-09-19 19:33:41 ----D---- C:\Program Files\SUPERAntiSpyware

2009-09-19 19:30:50 ----D---- C:\Boot

2009-09-19 19:30:46 ----D---- C:\Windows\Prefetch

2009-09-19 19:23:30 ----D---- C:\Program Files\Windows Calendar

2009-09-19 19:23:29 ----D---- C:\Program Files\Windows Sidebar

2009-09-19 19:23:29 ----D---- C:\Program Files\Windows Media Player

2009-09-19 19:23:29 ----D---- C:\Program Files\Windows Mail

2009-09-19 19:23:29 ----D---- C:\Program Files\Movie Maker

2009-09-19 19:23:28 ----D---- C:\Program Files\Windows Journal

2009-09-19 19:23:28 ----D---- C:\Program Files\Windows Collaboration

2009-09-19 19:23:27 ----D---- C:\Program Files\Windows Photo Gallery

2009-09-19 19:23:27 ----D---- C:\Program Files\Common Files\System

2009-09-19 19:23:24 ----D---- C:\Windows\servicing

2009-09-19 19:23:24 ----D---- C:\Windows\ehome

2009-09-19 19:23:24 ----D---- C:\Program Files\Windows Defender

2009-09-19 19:23:12 ----D---- C:\Windows\IME

2009-09-19 19:23:11 ----D---- C:\Windows\system32\XPSViewer

2009-09-19 19:23:11 ----D---- C:\Windows\system32\sk-SK

2009-09-19 19:23:11 ----D---- C:\Windows\system32\lv-LV

2009-09-19 19:23:11 ----D---- C:\Windows\system32\ko-KR

2009-09-19 19:23:11 ----D---- C:\Windows\system32\hr-HR

2009-09-19 19:23:11 ----D---- C:\Windows\system32\et-EE

2009-09-19 19:23:11 ----D---- C:\Windows\system32\da-DK

2009-09-19 19:23:08 ----D---- C:\Windows\system32\oobe

2009-09-19 19:23:08 ----D---- C:\Windows\system32\it-IT

2009-09-19 19:23:08 ----D---- C:\Windows\system32\el-GR

2009-09-19 19:23:03 ----D---- C:\Windows\system32\sv-SE

2009-09-19 19:23:03 ----D---- C:\Windows\system32\SLUI

2009-09-19 19:23:03 ----D---- C:\Windows\system32\setup

2009-09-19 19:23:03 ----D---- C:\Windows\system32\ru-RU

2009-09-19 19:23:03 ----D---- C:\Windows\system32\pt-PT

2009-09-19 19:23:03 ----D---- C:\Windows\system32\hu-HU

2009-09-19 19:23:03 ----D---- C:\Windows\system32\he-IL

2009-09-19 19:23:03 ----D---- C:\Windows\system32\fr-FR

2009-09-19 19:23:03 ----D---- C:\Windows\system32\fi-FI

2009-09-19 19:23:03 ----D---- C:\Windows\system32\cs-CZ

2009-09-19 19:23:03 ----D---- C:\Windows\system32\AdvancedInstallers

2009-09-19 19:23:02 ----D---- C:\Windows\system32\zh-TW

2009-09-19 19:23:02 ----D---- C:\Windows\system32\zh-CN

2009-09-19 19:23:02 ----D---- C:\Windows\system32\uk-UA

2009-09-19 19:23:02 ----D---- C:\Windows\system32\sr-Latn-CS

2009-09-19 19:23:02 ----D---- C:\Windows\system32\sl-SI

2009-09-19 19:23:02 ----D---- C:\Windows\system32\pl-PL

2009-09-19 19:23:02 ----D---- C:\Windows\system32\manifeststore

2009-09-19 19:23:02 ----D---- C:\Windows\system32\es-ES

2009-09-19 19:23:01 ----D---- C:\Windows\system32\th-TH

2009-09-19 19:23:01 ----D---- C:\Windows\system32\ro-RO

2009-09-19 19:23:01 ----D---- C:\Windows\system32\ja-JP

2009-09-19 19:23:01 ----D---- C:\Windows\system32\bg-BG

2009-09-19 19:23:00 ----D---- C:\Windows\system32\wbem

2009-09-19 19:23:00 ----D---- C:\Windows\system32\tr-TR

2009-09-19 19:22:59 ----D---- C:\Windows\system32\pt-BR

2009-09-19 19:22:59 ----D---- C:\Windows\system32\nl-NL

2009-09-19 19:22:59 ----D---- C:\Windows\system32\nb-NO

2009-09-19 19:22:59 ----D---- C:\Windows\system32\migwiz

2009-09-19 19:22:59 ----D---- C:\Windows\system32\lt-LT

2009-09-19 19:22:59 ----D---- C:\Windows\system32\ar-SA

2009-09-19 19:22:40 ----RSD---- C:\Windows\Fonts

2009-09-19 19:22:31 ----D---- C:\Windows\system32\Boot

2009-09-19 13:03:14 ----D---- C:\Users\PDvaS\AppData\Roaming\vlc

2009-09-17 01:43:27 ----D---- C:\Windows\security

2009-09-16 18:12:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2009-09-15 16:04:22 ----D---- C:\Windows\Debug

2009-09-14 02:12:36 ----A---- C:\Windows\PEV.exe

2009-09-13 21:41:24 ----D---- C:\Windows\system32\Tasks

2009-09-13 11:46:49 ----D---- C:\Program Files\Mozilla Firefox

2009-09-12 18:47:05 ----D---- C:\ProgramData

2009-09-10 13:14:34 ----HD---- C:\Program Files\InstallShield Installation Information

2009-09-10 05:04:20 ----D---- C:\Windows\system32\config

2009-09-10 05:04:10 ----D---- C:\Windows\VMC302

2009-09-10 05:04:10 ----D---- C:\Windows\system32\Msdtc

2009-09-10 05:04:07 ----D---- C:\Windows\registration

2009-09-10 01:24:52 ----D---- C:\Users\PDvaS\AppData\Roaming\dvdcss

2009-09-03 12:49:43 ----D---- C:\Windows\Minidump

2009-08-31 10:11:10 ----D---- C:\Program Files\Java

2009-08-28 23:38:20 ----A---- C:\Windows\system32\mrt.exe
 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R1 ASPI32;ASPI32; C:\Windows\system32\drivers\ASPI32.sys [1999-09-10 25244]

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]

R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-04-27 96104]

R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2009-05-14 9968]

R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys [2009-08-07 74480]

R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-06-10 28520]

R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-08-05 55656]

R2 KMDFMEMIO;SAMSUNG Kernel Driver; C:\Windows\system32\DRIVERS\kmdfmemio.sys [2008-09-01 13312]

R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-13 954368]

R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-08-08 3895808]

R3 CmBatt;Treiber für Microsoft-ACPI-Kontrollmethodenkompatible Batterie; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]

R3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-07-07 2152088]

R3 KMWDFILTER;HIDUASDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]

R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [2009-05-14 7408]

R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-10-26 193456]

R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2008-05-28 22072]

R3 VMC302;Vimicro Camera Service VMC302; C:\Windows\System32\Drivers\VMC302.sys [2008-08-28 241664]

R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2008-06-27 303616]

S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-03-21 1203776]

S3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\Windows\system32\DRIVERS\bcm4sbxp.sys [2006-11-02 45056]

S3 BthEnum;Bluetooth-Anforderungsblocktreiber; C:\Windows\system32\DRIVERS\BthEnum.sys [2008-01-21 19456]

S3 BthPan;Bluetooth-Gerät (PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]

S3 BTHPORT;Bluetooth-Porttreiber; C:\Windows\System32\Drivers\BTHport.sys [2008-04-29 220160]

S3 BTHUSB;USB-Treiber für Bluetooth-Funkgerät; C:\Windows\System32\Drivers\BTHUSB.sys [2008-04-29 29184]

S3 btwaudio;Bluetooth-Audiogerät; C:\Windows\system32\drivers\btwaudio.sys [2008-02-14 80424]

S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2007-07-16 80936]

S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-07-16 16168]

S3 catchme;catchme; \??\C:\Users\PDvaS\AppData\Local\Temp\catchme.sys []

S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]

S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-10-19 1380864]

S3 mbr;mbr; \??\C:\Users\PDvaS\AppData\Local\Temp\mbr.sys []

S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]

S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]

S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]

S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]

S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2008-01-21 2225664]

S3 RFCOMM;Bluetooth-Gerät (RFCOMM-Protokoll-TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2008-02-21 50688]

S3 SynasUSB;SynasUSB; C:\Windows\system32\drivers\SynasUSB.sys [2006-11-23 18432]

S3 tapvpn;TAP VPN Adapter; C:\Windows\system32\DRIVERS\tapvpn.sys [2008-01-23 27136]

S3 TASCAM_US122144;TASCAM USB 2.0 Audio Device driver; C:\Windows\System32\Drivers\tascusb2.sys [2007-12-18 360448]

S3 TASCAM_US122L_MIDI;TASCAM US-122L WDM MIDI Device; C:\Windows\system32\drivers\tscusb2m.sys [2007-12-18 18944]

S3 TASCAM_US122L_WDM;TASCAM US-122L WDM; C:\Windows\system32\drivers\tscusb2a.sys [2007-12-18 33792]

S3 usbaudio;USB-Audiotreiber (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]

S3 usbvideo;USB-Videogerät (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]

S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]

S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]

S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2008-01-21 11264]
 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-06-10 108289]

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-05 185089]

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-08-08 700416]

R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]

R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-03-17 73728]

R2 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2006-04-14 28933976]

R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2006-12-19 272024]

R2 TuneUp.ProgramStatisticsSvc;@%SystemRoot%\System32\TUProgSt.exe,-1; C:\Windows\System32\TUProgSt.exe [2009-06-01 603904]

R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-21 21504]

S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-20 182768]

S2 Samsung Update Plus;Samsung Update Plus; C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe [2008-05-13 77480]

S3 HssTrayService;Hotspot Shield Tray Service; C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE []

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2006-04-14 87840]

S3 TuneUp.Defrag;@%SystemRoot%\System32\TuneUpDefragService.exe,-1; C:\Windows\System32\TuneUpDefragService.exe [2009-06-01 362240]

S4 MSSQLServerADHelper;Hilfsdienst von SQL Server für Active Directory; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2005-10-13 45272]

S4 SQLBrowser;SQL Server-Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2006-04-14 240416]
 

-----------------EOF-----------------

Code:

info.txt logfile of random's system information tool 1.06 2009-09-15 17:01:38
 

======Uninstall list======
 

2007 Microsoft Office system-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROHYBRIDR /dll OSETUP.DLL

Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE

Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe

Adobe Flash Player ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe

Adobe Reader 8.1.0 - Deutsch-->MsiExec.exe /I{AC76BA86-7AD7-1031-7B44-A81000000003}

Agere Systems HDA Modem-->agrsmdel

ALUpdate-->"C:\Program Files\ESTsoft\ALUpdate\unins000.exe"

AMD USB Audio Driver Filter-->MsiExec.exe /X{A3AB35FA-943E-4799-99DC-46EFD59E998F}

Atheros WLAN Client-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{04983D37-2202-4295-94A2-8B547C66133F}\setup.exe" -l0x9 

ATI PCI Express (3GIO) Filter Driver-->C:\Program Files\InstallShield Installation Information\{E713653C-8312-4BC6-AFC9-ADE1F2F04AB9}\setup.exe -runfromtemp -l0x0009 -removeonly

Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE

AVS Update Manager 1.0-->"C:\Program Files\AVS4YOU\AVSUpdateManger\unins000.exe"

Business Contact Manager für Outlook 2007-->"C:\Program Files\Microsoft Small Business\Business Contact Manager\SetupBootstrap\Setup.exe" /remove {4cb9f93c-9edc-4be9-ae61-af128ddbecfa}

Business Contact Manager für Outlook 2007-->MsiExec.exe /X{4cb9f93c-9edc-4be9-ae61-af128ddbecfa}

Catalyst Control Center - Branding-->MsiExec.exe /I{2433BAD7-453F-473D-BE81-455E68940DEB}

CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"

Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}

CorelDRAW Graphics Suite 12-->MsiExec.exe /I{505AFDC0-5E72-4928-8368-5DEA385E3647}

CyberLink DVD Suite-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe"  -uninstall

CyberLink Power2Go-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\setup.exe"  -uninstall

DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN

Easy Battery Manager-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6F730513-8688-4C3C-90A3-6B9792CE2EF3}\setup.exe" -l0x9 Remove

Easy Display Manager-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{17283B95-21A8-4996-97DA-547A48DB266F}\setup.exe" -l0x9  -removeonly

Easy Network Manager 4.0-->C:\Program Files\InstallShield Installation Information\{308BD058-411C-4AF2-8BF6-A6C7CFD0270D}\setup.exe -runfromtemp -l0x0407

Easy SpeedUp Manager-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EF367AA4-070B-493C-9575-85BE59D789C9}\setup.exe" -l0x9 Remove

FIFA 09-->MsiExec.exe /X{2315B23D-3E21-4920-837D-AE6460934ECB}

Free FLV Converter V 6.23.0-->"C:\Program Files\Free FLV Converter\unins000.exe"

GeoGebra-->"C:\Program Files\GeoGebra\UninstallerData\Uninstaller.exe"

Google Updater-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall

HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

imagine digital freedom - Samsung-->MsiExec.exe /X{00AF10C1-44BD-4862-9D7F-24E6BA3E87FD}

Java(TM) 6 Update 13-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216012FF}

LabelPrint-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\setup.exe"  -uninstall

LightScribe System Software  1.12.37.1-->MsiExec.exe /X{004C5DA2-2051-4D25-94BA-51CF810C91EB}

MAGIX Music Maker Hip Hop Edition 2 4.0.0.10 (D)-->C:\Program Files\MAGIX\MusicMakerHipHopEdition2\instslct.exe

Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"

Marvell Miniport Driver-->C:\Program Files\Marvell\Miniport Driver\Uninst.exe

Medieval CUE Splitter-->MsiExec.exe /I{B96D2269-568B-4CBF-9332-12FAE8B158F7}

Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"

Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

Microsoft Office 2003 Web Components-->MsiExec.exe /I{90A40407-6000-11D3-8CFE-0150048383C9}

Microsoft Office 2007 Primary Interop Assemblies-->MsiExec.exe /X{50120000-1105-0000-0000-0000000FF1CE}

Microsoft Office Access MUI (German) 2007-->MsiExec.exe /X{90120000-0015-0407-0000-0000000FF1CE}

Microsoft Office Excel MUI (German) 2007-->MsiExec.exe /X{90120000-0016-0407-0000-0000000FF1CE}

Microsoft Office Outlook MUI (German) 2007-->MsiExec.exe /X{90120000-001A-0407-0000-0000000FF1CE}

Microsoft Office PowerPoint MUI (German) 2007-->MsiExec.exe /X{90120000-0018-0407-0000-0000000FF1CE}

Microsoft Office Professional Hybrid 2007-->MsiExec.exe /X{91120000-0031-0000-0000-0000000FF1CE}

Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}

Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}

Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}

Microsoft Office Proof (Italian) 2007-->MsiExec.exe /X{90120000-001F-0410-0000-0000000FF1CE}

Microsoft Office Proofing (German) 2007-->MsiExec.exe /X{90120000-002C-0407-0000-0000000FF1CE}

Microsoft Office Publisher MUI (German) 2007-->MsiExec.exe /X{90120000-0019-0407-0000-0000000FF1CE}

Microsoft Office Shared MUI (German) 2007-->MsiExec.exe /X{90120000-006E-0407-0000-0000000FF1CE}

Microsoft Office Small Business Connectivity Components-->MsiExec.exe /X{A939D341-5A04-4E0A-BB55-3E65B386432D}

Microsoft Office Word MUI (German) 2007-->MsiExec.exe /X{90120000-001B-0407-0000-0000000FF1CE}

Microsoft Picture It! Foto Premium 10-->"C:\Program Files\Common Files\Microsoft Shared\Picture It!\RmvSuite.exe" ADDREMOVE=1 SKU=PREM

Microsoft SOAP Toolkit 2.0 SP2-->MsiExec.exe /I{36BEAD11-8577-49AD-9250-E06A50AE87B0}

Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)-->MsiExec.exe /I{028ED9C4-25EE-4DEE-9CF4-91034BC89B18}

Microsoft SQL Server 2005-->"C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\ARPWrapper.exe" /Remove

Microsoft SQL Server Native Client-->MsiExec.exe /I{547DCEC7-DD2A-47E9-82C7-5CF1EAB526DA}

Microsoft SQL Server VSS Writer-->MsiExec.exe /I{2DFB5485-A3EF-4298-9280-4AF80C9F4BE9}

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}

Mozilla Firefox (3.5.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe

MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

Oxin's Style! 3D Sexvilla 2.058 MOD 300-->"C:\Program Files\Oxin's Style!\3D SexVilla 2\Save\unins000.exe"

PlayCamera-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{804F1285-8CBF-408D-8CDC-D4D40003B2E4}\setup.exe" -l0x7 

PowerDirector-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe"  -uninstall

PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe"  -uninstall

PowerProducer-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\Setup.exe"  -uninstall

Pro Evolution Soccer 2009-->MsiExec.exe /X{A8DB611A-D80E-450D-85F6-3ACDD164BE31}

Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\setup.exe"  -removeonly

Samsung Magic Doctor-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{32D6A58F-9659-446C-BBFC-E6F2B41F24DC}\Setup.exe" -l0x9 Remove

Samsung Recovery Solution III-->"C:\Program Files\InstallShield Installation Information\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}\setup.exe" -runfromtemp -l0x0007 -removeonly

Samsung Update Plus-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{685707A4-911C-468D-BFC4-64A50E5E3A0C} /l1031 

Stronghold 2 Deluxe-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{16D2C649-CBA8-44EE-B730-12584667D487}\setup.exe" -l0x7  -removeonly

SUPERAntiSpyware Free Edition-->MsiExec.exe /X{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}

Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall

Syncrosoft Lizenz Kontrolle-->C:\PROGRA~1\SYNCRO~1\UNWISE.EXE C:\PROGRA~1\SYNCRO~1\INSTALL.LOG

Techno4ever Player-->C:\Program Files\T4E\Player\T4E_Uninstaller.exe

Tom Clancy's Splinter Cell Chaos Theory-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{888DD888-82BE-4D85-BCB2-2E042CD3E844}\setup.exe" -l0x7  -removeonly

Tsunami-Filter-Pack-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DCFF9230-22DC-40ED-BBCC-0F260B85734C}\setup.exe" -l0x9 

TuneUp Utilities 2009-->MsiExec.exe /I{55A29068-F2CE-456C-9148-C869879E2357}

Ultra AVI Converter 4.4.0529-->"C:\Program Files\Ultra AVI Converter\unins000.exe"

Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)-->MsiExec.exe /X{07629207-FAA0-4F1A-8092-BF5085BE511F}

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""

Update for Office 2007 (KB934528)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {2B939677-2FFD-48F6-9075-7BF48CB87C80}

Update for Office System 2007 Setup (KB929722)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {D8E9BEBD-655F-467D-8176-CA9959C140A3}

US-122L / US-144 driver-->C:\Windows\usb-audio.deTascam\Setup.exe /l0

User Guide-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}\setup.exe" -l0x9 Remove

VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}

Vimicro UVC Camera-->C:\Program Files\InstallShield Installation Information\{71A51B09-E7D3-11DB-A386-005056C00008}\setup.exe -runfromtemp -l0x0009 -removeonly

Virtual DJ - Atomix Productions-->C:\PROGRA~1\VIRTUA~1\UNWISE.EXE C:\PROGRA~1\VIRTUA~1\INSTALL.LOG

Vista Codec Package-->MsiExec.exe /I{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}

VLC media player 1.0.1-->C:\Program Files\VideoLAN\VLC\uninstall.exe

WIDCOMM Bluetooth Software 6.0.1.6300-->MsiExec.exe /X{03D1988F-469F-4843-8E6E-E5FE9D17889D}

Windows Live Anmelde-Assistent-->MsiExec.exe /I{52B97218-98CB-4B8B-9283-D213C85E1AA4}

Windows Live Call-->MsiExec.exe /I{5FC68772-6D56-41C6-9DF1-24E868198AE6}

Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}

Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe

Windows Live Essentials-->MsiExec.exe /I{91E04CA7-0B13-4F8C-AA4D-2A573AC96D19}

Windows Live Messenger-->MsiExec.exe /X{837B6259-6FF5-4E66-87C1-A5A15ED36FF4}

Windows Live OneCare safety scanner-->"C:\Program Files\Windows Live Safety Center\UnInstall.exe"

Windows Live OneCare safety scanner-->MsiExec.exe /X{FE0646A7-19D0-41B4-A2BB-2C35D644270D}

Windows Live-Uploadtool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}

Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}

WinRAR-->C:\Program Files\WinRAR\uninstall.exe

Zattoo 3.3.3 Beta-->C:\Program Files\Zattoo\uninst.exe

ZoneAlarm-->C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe
 

======Security center information======
 

FW: ZoneAlarm Firewall

AS: Windows Defender

AS: SUPERAntiSpyware
 

======System event log======
 

Computer Name: PDvaS-PC

Event Code: 7030

Message: Der Dienst "Anwendungserfahrung AeLookupSvcALG" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Record Number: 91354

Source Name: Service Control Manager

Time Written: 20090915140802.000000-000

Event Type: Fehler

User: 
 

Computer Name: PDvaS-PC

Event Code: 7036

Message: Dienst "Windows Modules Installer" befindet sich jetzt im Status "Beendet".

Record Number: 91355

Source Name: Service Control Manager

Time Written: 20090915140835.000000-000

Event Type: Informationen

User: 
 

Computer Name: PDvaS-PC

Event Code: 7036

Message: Dienst "Unterstützung in der Systemsteuerung unter Lösungen für Probleme" befindet sich jetzt im Status "Ausgeführt".

Record Number: 91356

Source Name: Service Control Manager

Time Written: 20090915141115.000000-000

Event Type: Informationen

User: 
 

Computer Name: PDvaS-PC

Event Code: 7036

Message: Dienst "Unterstützung in der Systemsteuerung unter Lösungen für Probleme" befindet sich jetzt im Status "Beendet".

Record Number: 91357

Source Name: Service Control Manager

Time Written: 20090915141115.000000-000

Event Type: Informationen

User: 
 

Computer Name: PDvaS-PC

Event Code: 7036

Message: Dienst "WinHTTP-Web Proxy Auto-Discovery-Dienst" befindet sich jetzt im Status "Beendet".

Record Number: 91358

Source Name: Service Control Manager

Time Written: 20090915141745.000000-000

Event Type: Informationen

User: 
 

=====Application event log=====
 

Computer Name: PDvaS-PC

Event Code: 4113

Message: AntiVir erkannte in der Datei C:\Windows\System32\gasfkydfrximfi.dll verdächtigen Code mit der Bezeichnung 'TR/Alureon.19456U.3'!

Record Number: 34681

Source Name: Avira AntiVir

Time Written: 20090915150119.000000-000

Event Type: Warnung

User: NT-AUTORITÄT\SYSTEM
 

Computer Name: PDvaS-PC

Event Code: 4113

Message: AntiVir erkannte in der Datei C:\Windows\System32\gasfkydfrximfi.dll verdächtigen Code mit der Bezeichnung 'TR/Alureon.19456U.3'!

Record Number: 34682

Source Name: Avira AntiVir

Time Written: 20090915150124.000000-000

Event Type: Warnung

User: NT-AUTORITÄT\SYSTEM
 

Computer Name: PDvaS-PC

Event Code: 4113

Message: AntiVir erkannte in der Datei C:\Windows\System32\gasfkydfrximfi.dll verdächtigen Code mit der Bezeichnung 'TR/Alureon.19456U.3'!

Record Number: 34683

Source Name: Avira AntiVir

Time Written: 20090915150133.000000-000

Event Type: Warnung

User: NT-AUTORITÄT\SYSTEM
 

Computer Name: PDvaS-PC

Event Code: 5

Message: Unsupported service control request (see data below)

Record Number: 34684

Source Name: LightScribeService

Time Written: 20090915150137.000000-000

Event Type: Informationen

User: 
 

Computer Name: PDvaS-PC

Event Code: 4113

Message: AntiVir erkannte in der Datei C:\Windows\System32\gasfkydfrximfi.dll verdächtigen Code mit der Bezeichnung 'TR/Alureon.19456U.3'!

Record Number: 34685

Source Name: Avira AntiVir

Time Written: 20090915150217.000000-000

Event Type: Warnung

User: NT-AUTORITÄT\SYSTEM
 

=====Security event log=====
 

Computer Name: PDvaS-PC

Event Code: 5038

Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.
 

Dateiname:        \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys        

Record Number: 23953

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090915150136.151398-000

Event Type: Überwachung gescheitert

User: 
 

Computer Name: PDvaS-PC

Event Code: 5038

Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.
 

Dateiname:        \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys        

Record Number: 23954

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090915150136.198198-000

Event Type: Überwachung gescheitert

User: 
 

Computer Name: PDvaS-PC

Event Code: 5038

Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.
 

Dateiname:        \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys        

Record Number: 23955

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090915150136.260598-000

Event Type: Überwachung gescheitert

User: 
 

Computer Name: PDvaS-PC

Event Code: 5038

Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.
 

Dateiname:        \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys        

Record Number: 23956

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090915150136.322998-000

Event Type: Überwachung gescheitert

User: 
 

Computer Name: PDvaS-PC

Event Code: 5038

Message: Die Codeintegrität hat festgestellt, dass der Abbildhash einer Datei nicht gültig ist. Die Datei wurde möglicherweise durch eine nicht autorisierte Änderung beschädigt. Dieses Problem kann auch auf einen potenziellen Fehler des Datenträgergeräts hinweisen.
 

Dateiname:        \Device\HarddiskVolume2\Windows\System32\drivers\tcpip.sys        

Record Number: 23957

Source Name: Microsoft-Windows-Security-Auditing

Time Written: 20090915150136.385398-000

Event Type: Überwachung gescheitert

User: 
 

======Environment variables======
 

"ComSpec"=%SystemRoot%\system32\cmd.exe

"FP_NO_HOST_CHECK"=NO

"OS"=Windows_NT

"Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Microsoft SQL Server\90\Tools\binn

"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC

"PROCESSOR_ARCHITECTURE"=x86

"TEMP"=%SystemRoot%\TEMP

"TMP"=%SystemRoot%\TEMP

"USERNAME"=SYSTEM

"windir"=%SystemRoot%

"PROCESSOR_LEVEL"=17

"PROCESSOR_IDENTIFIER"=x86 Family 17 Model 3 Stepping 1, AuthenticAMD

"PROCESSOR_REVISION"=0301

"NUMBER_OF_PROCESSORS"=2

"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat

"DFSTRACINGON"=FALSE

"tvdumpflags"=8
 

-----------------EOF-----------------

Das sieht unauffällig aus. Noch weitere Probleme?

Hab keine weiteren Probleme mehr. War mir halt nicht wirklich sicher ob der Trojaner wirklich entfernt wurde.

Also kann ich jetzt wieder sorglos abends ins Bett gehen?:)

Naja, was heißt sorglos. Die Logfiles sind lediglich unauffällig und das Problem ist auch behoben. Ein Restrisiko bleibt bei einer Bereinigung immer. Wenn man wirklich eine garantierte restlose Schädlingsentfernung will, hilft nur ein Neuaufsetzen des Systems inkl. Formatierung.

hmm...naja Neuaufsetzen wollte ich jetzt eigentlich nich. Ich denke wir belassen es hierbei und ich gehe dieses Restrisiko ein.

Also vielen Dank für deine Hilfe!:daumenhoc

Mfg PDvaS