|
Internet Explorer öffnet ständig werbung ohne zutuhn Hab mich schon ein wenig belesen und mit Hijackthis gescannt. Bis jetzt ist das hier rausgekommen. Hoffe ihr könnt mir helfen. Benutze Avira und das konnte nichts feststellen. Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:59:03, on 04.07.2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\Avira\AntiVir Desktop\sched.exe C:\WINDOWS\Explorer.EXE C:\Programme\Avira\AntiVir Desktop\avgnt.exe C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\Tgifid.exe C:\Programme\Avira\AntiVir Desktop\avguard.exe C:\Programme\ICQ6Toolbar\ICQ Service.exe C:\Programme\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\nvsvc32.exe C:\Programme\Avira\AntiVir Desktop\avshadow.exe C:\WINDOWS\system32\wscntfy.exe C:\Programme\Mozilla Firefox\firefox.exe C:\Dokumente und Einstellungen\Robert\Eigene Dateien\Downloads\HiJackThis204.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = hxxp://www.dvdvideosoft.com/r/de_AfterInstallA.htm R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll R3 - URLSearchHook: (no name) - - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [VO3N0SLJ2I] C:\WINDOWS\Tgifid.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe O23 - Service: ICQ Service - Unknown owner - C:\Programme\ICQ6Toolbar\ICQ Service.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 4847 bytes |
ootl: Systemscan mit OTL download otl: http://filepony.de/download-otl/ Doppelklick auf die OTL.exe (user von Windows 7 und Vista: Rechtsklick als Administrator ausführen) 1. Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output 2. Hake an "scan all users" 3. Unter "Extra Registry wähle: "Use Safelist" "LOP Check" "Purity Check" 4. Kopiere in die Textbox: netsvcs msconfig safebootminimal safebootnetwork activex drivers32 %ALLUSERSPROFILE%\Application Data\*. %ALLUSERSPROFILE%\Application Data\*.exe /s %APPDATA%\*. %APPDATA%\*.exe /s %SYSTEMDRIVE%\*.exe /md5start userinit.exe eventlog.dll scecli.dll netlogon.dll cngaudit.dll ws2ifsl.sys sceclt.dll ntelogon.dll logevent.dll iaStor.sys nvstor.sys atapi.sys IdeChnDr.sys viasraid.sys AGP440.sys vaxscsi.sys nvatabus.sys viamraid.sys nvata.sys nvgts.sys iastorv.sys ViPrt.sys eNetHook.dll ahcix86.sys KR10N.sys nvstor32.sys ahcix86s.sys /md5stop %systemroot%\system32\drivers\*.sys /lockedfiles %systemroot%\System32\config\*.sav %systemroot%\*. /mp /s %systemroot%\system32\*.dll /lockedfiles CREATERESTOREPOINT 5. Klicke "Scan" 6. 2 reporte werden erstellt: OTL.Txt Extras.Txt falls sie zu groß sind, aufteilen |
Extras: {\rtf1\ansi\ansicpg1252\deff0\deflang1031{\fonttbl{\f0\fswiss\fcharset0 Arial;}} {\*\generator Msftedit 5.41.15.1515;}\viewkind4\uc1\pard\f0\fs20OTL EXTRAS Logfile: Code: OTL Extras logfile created on: 04.07.2010 19:23:37 - Run 1\par\par } |
Text einfügen und absenden klappt ja nich wirklich reibungslos.....Überschreite ständig die 30sec. OTL Teil I {\rtf1\ansi\ansicpg1252\deff0\deflang1031{\fonttbl{\f0\fswiss\fcharset0 Arial;}} {\*\generator Msftedit 5.41.15.1515;}\viewkind4\uc1\pard\f0\fs20 OTL logfile created on: 04.07.2010 19:23:37 - Run 1\par OTL by OldTimer - Version 3.2.7.0 Folder = C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\Downloads\par Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation\par Internet Explorer (Version = 6.0.2900.5512)\par Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy\par \par 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 49,00% Memory free\par 3,00 Gb Paging File | 3,00 Gb Available in Paging File | 80,00% Paging File free\par Paging file location(s): c:\\pagefile.sys 2046 8000 [binary data]\par \par %SystemDrive% = C: | %SystemRoot% = C:\\WINDOWS | %ProgramFiles% = C:\\Programme\par Drive C: | 465,75 Gb Total Space | 454,93 Gb Free Space | 97,68% Space Free | Partition Type: NTFS\par D: Drive not present or media not loaded\par E: Drive not present or media not loaded\par F: Drive not present or media not loaded\par G: Drive not present or media not loaded\par H: Drive not present or media not loaded\par I: Drive not present or media not loaded\par \par Computer Name: SCHORSCH\par Current User Name: Robert\par Logged in as Administrator.\par \par Current Boot Mode: Normal\par Scan Mode: All users\par Company Name Whitelist: Off\par Skip Microsoft Files: Off\par File Age = 30 Days\par Output = Minimal\par \par ========== Processes (SafeList) ==========\par \par PRC - C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\Downloads\\OTL.exe (OldTimer Tools)\par PRC - C:\\WINDOWS\\Tgifid.exe ()\par PRC - C:\\Programme\\Mozilla Firefox\\firefox.exe (Mozilla Corporation)\par PRC - C:\\Programme\\ICQ7.2\\ICQ.exe (ICQ, LLC.)\par PRC - C:\\Programme\\Avira\\AntiVir Desktop\\avguard.exe (Avira GmbH)\par PRC - C:\\Programme\\ICQ6Toolbar\\ICQ Service.exe ()\par PRC - C:\\Programme\\Avira\\AntiVir Desktop\\avgnt.exe (Avira GmbH)\par PRC - C:\\Programme\\Avira\\AntiVir Desktop\\sched.exe (Avira GmbH)\par PRC - C:\\Programme\\Gemeinsame Dateien\\Java\\Java Update\\jusched.exe (Sun Microsystems, Inc.)\par PRC - C:\\Programme\\Avira\\AntiVir Desktop\\avshadow.exe (Avira GmbH)\par PRC - C:\\WINDOWS\\explorer.exe (Microsoft Corporation)\par \par \par ========== Modules (SafeList) ==========\par \par MOD - C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\Downloads\\OTL.exe (OldTimer Tools)\par MOD - C:\\WINDOWS\\system32\\msscript.ocx (Microsoft Corporation)\par \par \par ========== Win32 Services (SafeList) ==========\par \par SRV - (SSHNAS) -- C:\\WINDOWS\\system32\\sshnas21.dll ()\par SRV - (AntiVirService) -- C:\\Programme\\Avira\\AntiVir Desktop\\avguard.exe (Avira GmbH)\par SRV - (ICQ Service) -- C:\\Programme\\ICQ6Toolbar\\ICQ Service.exe ()\par SRV - (AntiVirSchedulerService) -- C:\\Programme\\Avira\\AntiVir Desktop\\sched.exe (Avira GmbH)\par \par \par ========== Driver Services (SafeList) ==========\par \par DRV - (avipbb) -- C:\\WINDOWS\\system32\\drivers\\avipbb.sys (Avira GmbH)\par DRV - (avgntflt) -- C:\\WINDOWS\\system32\\drivers\\avgntflt.sys (Avira GmbH)\par DRV - (avgio) -- C:\\Programme\\Avira\\AntiVir Desktop\\avgio.sys (Avira GmbH)\par DRV - (ssmdrv) -- C:\\WINDOWS\\system32\\drivers\\ssmdrv.sys (Avira GmbH)\par DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\\WINDOWS\\system32\\drivers\\RtkHDAud.sys (Realtek Semiconductor Corp.)\par DRV - (HDAudBus) -- C:\\WINDOWS\\system32\\drivers\\hdaudbus.sys (Windows (R) Server 2003 DDK provider)\par DRV - (nv) -- C:\\WINDOWS\\system32\\drivers\\nv4_mini.sys (NVIDIA Corporation)\par DRV - (RTLE8023xp) -- C:\\WINDOWS\\system32\\drivers\\Rtenicxp.sys (Realtek Semiconductor Corporation )\par DRV - (NVHDA) -- C:\\WINDOWS\\system32\\drivers\\nvhda32.sys (NVIDIA Corporation)\par DRV - (nvsmu) -- C:\\WINDOWS\\system32\\drivers\\nvsmu.sys (NVIDIA Corporation)\par DRV - (BIOS) -- C:\\WINDOWS\\system32\\drivers\\BIOS.sys (BIOSTAR Group)\par \par \par ========== Standard Registry (SafeList) ==========\par \par \par ========== Internet Explorer ==========\par \par IE - HKLM\\SOFTWARE\\Microsoft\\Internet Explorer\\Main,Local Page = %SystemRoot%\\system32\\blank.htm\par \par \par IE - HKU\\.DEFAULT\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings: "ProxyEnable" = 0\par \par IE - HKU\\S-1-5-18\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings: "ProxyEnable" = 0\par \par \par \par IE - HKU\\S-1-5-21-1123561945-884357618-725345543-1003\\SOFTWARE\\Microsoft\\Internet Explorer\\Main,Start Page = hxxp://start.icq.com/\par IE - HKU\\S-1-5-21-1123561945-884357618-725345543-1003\\..\\URLSearchHook: - Reg Error: Key error. File not found\par IE - HKU\\S-1-5-21-1123561945-884357618-725345543-1003\\..\\URLSearchHook: \{855F3B16-6D32-4fe6-8A56-BBB695989046\} - C:\\Programme\\ICQ6Toolbar\\ICQToolBar.dll (ICQ)\par IE - HKU\\S-1-5-21-1123561945-884357618-725345543-1003\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings: "ProxyEnable" = 0\par \par ========== FireFox ==========\par \par FF - prefs.js..browser.search.defaultenginename: "ICQ Search"\par FF - prefs.js..browser.search.selectedEngine: "Google"\par FF - prefs.js..browser.startup.homepage: "hxxp://google.de/"\par FF - prefs.js..extensions.enabledItems: \{800b5000-a755-47e1-992b-48a1c1357f07\}:2.0.0.4\par FF - prefs.js..extensions.enabledItems: \{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA\}:6.0.20\par FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0\par FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.4&q="\par \par FF - HKLM\\software\\mozilla\\Mozilla Firefox 3.5.10\\extensions\\\\Components: C:\\Programme\\Mozilla Firefox\\components [2010.06.27 12:49:07 | 000,000,000 | ---D | M]\par FF - HKLM\\software\\mozilla\\Mozilla Firefox 3.5.10\\extensions\\\\Plugins: C:\\Programme\\Mozilla Firefox\\plugins [2010.06.30 21:30:10 | 000,000,000 | ---D | M]\par \par [2010.06.25 13:10:21 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Mozilla\\Extensions\par [2010.07.03 18:33:28 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Mozilla\\Firefox\\Profiles\\yojnk6bd.default\\extensions\par [2010.06.25 15:02:34 | 000,000,000 | ---D | M] (No name found) -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Mozilla\\Firefox\\Profiles\\yojnk6bd.default\\extensions\\\{800b5000-a755-47e1-992b-48a1c1357f07\}\par [2010.06.30 21:26:27 | 000,000,000 | ---D | M] (No name found) -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Mozilla\\Firefox\\Profiles\\yojnk6bd.default\\extensions\\\{E2883E8F-472F-4fb0-9522-AC9BF37916A7\}\par [2010.06.30 21:26:27 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Mozilla\\Firefox\\Profiles\\yojnk6bd.default\\extensions\\staged-xpis\par [2010.06.25 15:02:34 | 000,000,168 | ---- | M] () -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Mozilla\\Firefox\\Profiles\\yojnk6bd.default\\searchplugins\\icqplugin.gif\par [2010.06.25 15:02:34 | 000,000,618 | ---- | M] () -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Mozilla\\Firefox\\Profiles\\yojnk6bd.default\\searchplugins\\icqplugin.src\par [2010.07.02 17:42:24 | 000,001,069 | ---- | M] () -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Mozilla\\Firefox\\Profiles\\yojnk6bd.default\\searchplugins\\icqplugin.xml\par [2010.07.03 18:33:28 | 000,000,000 | ---D | M] -- C:\\Programme\\Mozilla Firefox\\extensions\par [2010.06.25 15:06:54 | 000,000,000 | ---D | M] (Java Console) -- C:\\Programme\\Mozilla Firefox\\extensions\\\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA\}\par [2010.06.25 15:06:48 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\\Programme\\Mozilla Firefox\\plugins\\npdeployJava1.dll\par [2010.06.27 12:49:04 | 000,001,392 | ---- | M] () -- C:\\Programme\\Mozilla Firefox\\searchplugins\\amazondotcom-de.xml\par [2010.06.27 12:49:04 | 000,002,344 | ---- | M] () -- C:\\Programme\\Mozilla Firefox\\searchplugins\\eBay-de.xml\par [2010.06.27 12:49:04 | 000,006,805 | ---- | M] () -- C:\\Programme\\Mozilla Firefox\\searchplugins\\leo_ende_de.xml\par [2010.06.27 12:49:04 | 000,001,178 | ---- | M] () -- C:\\Programme\\Mozilla Firefox\\searchplugins\\wikipedia-de.xml\par [2010.06.27 12:49:04 | 000,000,801 | ---- | M] () -- C:\\Programme\\Mozilla Firefox\\searchplugins\\yahoo-de.xml\par \par O1 HOSTS File: ([2001.08.18 12:00:00 | 000,000,820 | ---- | M]) - C:\\WINDOWS\\system32\\drivers\\etc\\hosts\par O1 - Hosts: 127.0.0.1 localhost\par O2 - BHO: (Adobe PDF Link Helper) - \{18DF081C-E8AD-4283-A596-FA578C2EBDC3\} - C:\\Programme\\Gemeinsame Dateien\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll (Adobe Systems Incorporated)\par O3 - HKLM\\..\\Toolbar: (ICQToolBar) - \{855F3B16-6D32-4FE6-8A56-BBB695989046\} - C:\\Programme\\ICQ6Toolbar\\ICQToolBar.dll (ICQ)\par O3 - HKU\\S-1-5-21-1123561945-884357618-725345543-1003\\..\\Toolbar\\WebBrowser: (no name) - \{D4027C7F-154A-4066-A1AD-4243D8127440\} - No CLSID value found.\par O4 - HKLM..\\Run: [Adobe ARM] C:\\Programme\\Gemeinsame Dateien\\Adobe\\ARM\\1.0\\AdobeARM.exe (Adobe Systems Incorporated)\par O4 - HKLM..\\Run: [Alcmtr] C:\\WINDOWS\\Alcmtr.exe (Realtek Semiconductor Corp.)\par O4 - HKLM..\\Run: [avgnt] C:\\Programme\\Avira\\AntiVir Desktop\\avgnt.exe (Avira GmbH)\par O4 - HKLM..\\Run: [KernelFaultCheck] File not found\par O4 - HKLM..\\Run: [NvCplDaemon] C:\\WINDOWS\\System32\\NvCpl.DLL (NVIDIA Corporation)\par O4 - HKLM..\\Run: [NvMediaCenter] C:\\WINDOWS\\System32\\NvMcTray.DLL (NVIDIA Corporation)\par O4 - HKLM..\\Run: [nwiz] C:\\WINDOWS\\System32\\nwiz.exe ()\par O4 - HKLM..\\Run: [SunJavaUpdateSched] C:\\Programme\\Gemeinsame Dateien\\Java\\Java Update\\jusched.exe (Sun Microsystems, Inc.)\par O4 - HKU\\S-1-5-21-1123561945-884357618-725345543-1003..\\Run: [VO3N0SLJ2I] C:\\WINDOWS\\Tgifid.exe ()\par O6 - HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: HonorAutoRunSetting = 1\par O7 - HKU\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: NoDriveTypeAutoRun = 145\par O7 - HKU\\S-1-5-18\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: NoDriveTypeAutoRun = 145\par O7 - HKU\\S-1-5-19\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: NoDriveTypeAutoRun = 145\par O7 - HKU\\S-1-5-20\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: NoDriveTypeAutoRun = 145\par O7 - HKU\\S-1-5-21-1123561945-884357618-725345543-1003\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\policies\\Explorer: NoDriveTypeAutoRun = 145\par O9 - Extra Button: ICQ7.2 - \{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6\} - C:\\Programme\\ICQ7.2\\ICQ.exe (ICQ, LLC.)\par O9 - Extra 'Tools' menuitem : ICQ7.2 - \{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6\} - C:\\Programme\\ICQ7.2\\ICQ.exe (ICQ, LLC.)\par O16 - DPF: \{8AD9C840-044E-11D1-B3E9-00805F499D93\} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)\par O16 - DPF: \{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA\} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)\par O16 - DPF: \{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA\} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)\par O16 - DPF: \{D27CDB6E-AE6D-11CF-96B8-444553540000\} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)\par O17 - HKLM\\System\\CCS\\Services\\Tcpip\\Parameters: DhcpNameServer = 192.168.2.1\par O18 - Protocol\\Handler\\http\\0x00000001 \{E1D2BF42-A96B-11d1-9C6B-0000F875AC61\} - C:\\Programme\\Gemeinsame Dateien\\System\\Ole DB\\MSDAIPP.DLL (Microsoft Corporation)\par O18 - Protocol\\Handler\\http\\oledb \{E1D2BF40-A96B-11d1-9C6B-0000F875AC61\} - C:\\Programme\\Gemeinsame Dateien\\System\\Ole DB\\MSDAIPP.DLL (Microsoft Corporation)\par O18 - Protocol\\Handler\\https\\0x00000001 \{E1D2BF42-A96B-11d1-9C6B-0000F875AC61\} - C:\\Programme\\Gemeinsame Dateien\\System\\Ole DB\\MSDAIPP.DLL (Microsoft Corporation)\par O18 - Protocol\\Handler\\https\\oledb \{E1D2BF40-A96B-11d1-9C6B-0000F875AC61\} - C:\\Programme\\Gemeinsame Dateien\\System\\Ole DB\\MSDAIPP.DLL (Microsoft Corporation)\par O18 - Protocol\\Handler\\ipp\\0x00000001 \{E1D2BF42-A96B-11d1-9C6B-0000F875AC61\} - C:\\Programme\\Gemeinsame Dateien\\System\\Ole DB\\MSDAIPP.DLL (Microsoft Corporation)\par O18 - Protocol\\Handler\\msdaipp\\0x00000001 \{E1D2BF42-A96B-11d1-9C6B-0000F875AC61\} - C:\\Programme\\Gemeinsame Dateien\\System\\Ole DB\\MSDAIPP.DLL (Microsoft Corporation)\par O18 - Protocol\\Handler\\msdaipp\\oledb \{E1D2BF40-A96B-11d1-9C6B-0000F875AC61\} - C:\\Programme\\Gemeinsame Dateien\\System\\Ole DB\\MSDAIPP.DLL (Microsoft Corporation)\par O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\\WINDOWS\\explorer.exe (Microsoft Corporation)\par O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home\par O24 - Desktop WallPaper: C:\\WINDOWS\\Web\\Wallpaper\\Gr\'fcne Idylle.bmp\par O24 - Desktop BackupWallPaper: C:\\WINDOWS\\Web\\Wallpaper\\Gr\'fcne Idylle.bmp\par O32 - HKLM CDRom: AutoRun - 1\par O32 - AutoRun File - [2010.06.25 12:53:14 | 000,000,000 | ---- | M] () - C:\\AUTOEXEC.BAT -- [ NTFS ]\par O34 - HKLM BootExecute: (autocheck autochk *) - File not found\par O35 - HKLM\\..comfile [open] -- "%1" %*\par O35 - HKLM\\..exefile [open] -- "%1" %*\par O37 - HKLM\\...com [@ = comfile] -- "%1" %*\par O37 - HKLM\\...exe [@ = exefile] -- "%1" %*\par \par NetSvcs: 6to4 - File not found\par NetSvcs: Ias - C:\\WINDOWS\\system32\\ias [2010.07.04 15:43:56 | 000,000,000 | ---D | M]\par NetSvcs: Iprip - File not found\par NetSvcs: Irmon - File not found\par NetSvcs: NWCWorkstation - File not found\par NetSvcs: Nwsapagent - File not found\par NetSvcs: WmdmPmSp - File not found\par \par \par SafeBootMin: Base - Driver Group\par SafeBootMin: Boot Bus Extender - Driver Group\par SafeBootMin: Boot file system - Driver Group\par SafeBootMin: File system - Driver Group\par SafeBootMin: Filter - Driver Group\par SafeBootMin: PCI Configuration - Driver Group\par SafeBootMin: PNP Filter - Driver Group\par SafeBootMin: Primary disk - Driver Group\par SafeBootMin: SCSI Class - Driver Group\par SafeBootMin: sermouse.sys - Driver\par SafeBootMin: System Bus Extender - Driver Group\par SafeBootMin: vga.sys - Driver\par SafeBootMin: \{36FC9E60-C465-11CF-8056-444553540000\} - Universal Serial Bus controllers\par SafeBootMin: \{4D36E965-E325-11CE-BFC1-08002BE10318\} - CD-ROM Drive\par SafeBootMin: \{4D36E967-E325-11CE-BFC1-08002BE10318\} - DiskDrive\par SafeBootMin: \{4D36E969-E325-11CE-BFC1-08002BE10318\} - Standard floppy disk controller\par SafeBootMin: \{4D36E96A-E325-11CE-BFC1-08002BE10318\} - Hdc\par SafeBootMin: \{4D36E96B-E325-11CE-BFC1-08002BE10318\} - Keyboard\par SafeBootMin: \{4D36E96F-E325-11CE-BFC1-08002BE10318\} - Mouse\par SafeBootMin: \{4D36E977-E325-11CE-BFC1-08002BE10318\} - PCMCIA Adapters\par SafeBootMin: \{4D36E97B-E325-11CE-BFC1-08002BE10318\} - SCSIAdapter\par SafeBootMin: \{4D36E97D-E325-11CE-BFC1-08002BE10318\} - System\par SafeBootMin: \{4D36E980-E325-11CE-BFC1-08002BE10318\} - Floppy disk drive\par SafeBootMin: \{71A27CDD-812A-11D0-BEC7-08002BE2092F\} - Volume\par SafeBootMin: \{745A17A0-74D3-11D0-B6FE-00A0C90F57DA\} - Human Interface Devices\par \par SafeBootNet: Base - Driver Group\par SafeBootNet: Boot Bus Extender - Driver Group\par SafeBootNet: Boot file system - Driver Group\par SafeBootNet: File system - Driver Group\par SafeBootNet: Filter - Driver Group\par SafeBootNet: NDIS Wrapper - Driver Group\par SafeBootNet: NetBIOSGroup - Driver Group\par SafeBootNet: NetDDEGroup - Driver Group\par SafeBootNet: Network - Driver Group\par SafeBootNet: NetworkProvider - Driver Group\par SafeBootNet: PCI Configuration - Driver Group\par SafeBootNet: PNP Filter - Driver Group\par SafeBootNet: PNP_TDI - Driver Group\par SafeBootNet: Primary disk - Driver Group\par SafeBootNet: SCSI Class - Driver Group\par SafeBootNet: sermouse.sys - Driver\par SafeBootNet: Streams Drivers - Driver Group\par SafeBootNet: System Bus Extender - Driver Group\par SafeBootNet: TDI - Driver Group\par SafeBootNet: vga.sys - Driver\par SafeBootNet: \{36FC9E60-C465-11CF-8056-444553540000\} - Universal Serial Bus controllers\par SafeBootNet: \{4D36E965-E325-11CE-BFC1-08002BE10318\} - CD-ROM Drive\par SafeBootNet: \{4D36E967-E325-11CE-BFC1-08002BE10318\} - DiskDrive\par SafeBootNet: \{4D36E969-E325-11CE-BFC1-08002BE10318\} - Standard floppy disk controller\par SafeBootNet: \{4D36E96A-E325-11CE-BFC1-08002BE10318\} - Hdc\par SafeBootNet: \{4D36E96B-E325-11CE-BFC1-08002BE10318\} - Keyboard\par SafeBootNet: \{4D36E96F-E325-11CE-BFC1-08002BE10318\} - Mouse\par SafeBootNet: \{4D36E972-E325-11CE-BFC1-08002BE10318\} - Net\par SafeBootNet: \{4D36E973-E325-11CE-BFC1-08002BE10318\} - NetClient\par SafeBootNet: \{4D36E974-E325-11CE-BFC1-08002BE10318\} - NetService\par SafeBootNet: \{4D36E975-E325-11CE-BFC1-08002BE10318\} - NetTrans\par SafeBootNet: \{4D36E977-E325-11CE-BFC1-08002BE10318\} - PCMCIA Adapters\par SafeBootNet: \{4D36E97B-E325-11CE-BFC1-08002BE10318\} - SCSIAdapter\par SafeBootNet: \{4D36E97D-E325-11CE-BFC1-08002BE10318\} - System\par SafeBootNet: \{4D36E980-E325-11CE-BFC1-08002BE10318\} - Floppy disk drive\par SafeBootNet: \{71A27CDD-812A-11D0-BEC7-08002BE2092F\} - Volume\par SafeBootNet: \{745A17A0-74D3-11D0-B6FE-00A0C90F57DA\} - Human Interface Devices\par \par ActiveX: \{08B0E5C0-4FCB-11CF-AAA5-00401C608500\} - Java (Sun)\par ActiveX: \{10072CEC-8CC1-11D1-986E-00A0C955B42F\} - Vektorgrafik-Rendering (VML)\par ActiveX: \{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220\} - NetShow\par ActiveX: \{22d6f312-b0f6-11d0-94ab-0080c74c7e95\} - Microsoft Windows Media Player 6.4\par ActiveX: \{283807B5-2C60-11D0-A31D-00AA00B92C03\} - DirectAnimation\par ActiveX: \{2C7339CF-2B09-4501-B3F3-F3508C9228ED\} - %SystemRoot%\\system32\\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\\system32\\themeui.dll\par ActiveX: \{36f8ec70-c29a-11d1-b5c7-0000f8051515\} - Dynamic HTML-Datenbindung f\'fcr Java\par ActiveX: \{3af36230-a269-11d1-b5bf-0000f8051515\} - Offlinebrowsingpaket\par ActiveX: \{3bf42070-b3b1-11d1-b5c5-0000f8051515\} - Uniscribe\par ActiveX: \{4278c270-a269-11d1-b5bf-0000f8051515\} - Erweitertes Authoring\par ActiveX: \{44BBA840-CC51-11CF-AAFA-00AA00B6015C\} - "%ProgramFiles%\\Outlook Express\\setup50.exe" /APP:OE /CALLER:WINNT /user /install\par ActiveX: \{44BBA842-CC51-11CF-AAFA-00AA00B6015B\} - rundll32.exe advpack.dll,LaunchINFSection C:\\WINDOWS\\INF\\msnetmtg.inf,NetMtg.Install.PerUser.NT\par ActiveX: \{44BBA848-CC51-11CF-AAFA-00AA00B6015C\} - DirectShow\par ActiveX: \{44BBA855-CC51-11CF-AAFA-00AA00B6015F\} - DirectDrawEx\par ActiveX: \{45ea75a0-a269-11d1-b5bf-0000f8051515\} - Internet Explorer-Hilfe\par ActiveX: \{4f216970-c90c-11d1-b5c7-0000f8051515\} - DirectAnimation Java Classes\par ActiveX: \{4f645220-306d-11d2-995d-00c04f98bbc9\} - Microsoft Windows Script 5.7\par ActiveX: \{5945c046-1e7d-11d1-bc44-00c04fd912be\} - rundll32.exe advpack.dll,LaunchINFSection C:\\WINDOWS\\INF\\msmsgs.inf,BLC.QuietInstall.PerUser\par ActiveX: \{5A8D6EE0-3E18-11D0-821E-444553540000\} - ICW\par ActiveX: \{5fd399c0-a70a-11d1-9948-00c04f98bbc9\} - Internet Explorer Setup Tools\par ActiveX: \{630b1da0-b465-11d1-9948-00c04f98bbc9\} - Browsererweiterungen\par ActiveX: \{6BF52A52-394A-11d3-B153-00C04F79FAA6\} - Microsoft Windows Media Player\par ActiveX: \{6fab99d0-bab8-11d1-994a-00c04f98bbc9\} - Zugang zu MSN Site\par ActiveX: \{7790769C-0471-11d2-AF11-00C04FA35D02\} - "%ProgramFiles%\\Outlook Express\\setup50.exe" /APP:WAB /CALLER:WINNT /user /install\par ActiveX: \{89820200-ECBD-11cf-8B85-00AA005B4340\} - regsvr32.exe /s /n /i:U shell32.dll\par ActiveX: \{89820200-ECBD-11cf-8B85-00AA005B4383\} - %SystemRoot%\\system32\\ie4uinit.exe\par ActiveX: \{9381D8F2-0288-11D0-9501-00AA00B911A5\} - Dynamic HTML-Datenbindung\par ActiveX: \{ACC563BC-4266-43f0-B6ED-9D38C4202C7E\} - \par ActiveX: \{C9E9A340-D1F1-11D0-821E-444553540600\} - Internet Explorer-Hauptschriftarten\par ActiveX: \{CC2A9BA0-3BDD-11D0-821E-444553540000\} - Taskplaner\par ActiveX: \{CDD7975E-60F8-41d5-8149-19E51D6F71D0\} - Windows Movie Maker v2.1\par ActiveX: \{D27CDB6E-AE6D-11cf-96B8-444553540000\} - Macromedia Shockwave Flash\par ActiveX: \{de5aed00-a4bf-11d1-9948-00c04f98bbc9\} - HTML-Hilfe\par ActiveX: \{E92B03AB-B707-11d2-9CBD-0000F87A369E\} - Active Directory Service Interface\par ActiveX: >\{22d6f312-b0f6-11d0-94ab-0080c74c7e95\} - C:\\WINDOWS\\inf\\unregmp2.exe /ShowWMP\par ActiveX: >\{26923b43-4d38-484f-9b9e-de460746276c\} - %systemroot%\\system32\\shmgrate.exe OCInstallUserConfigIE\par ActiveX: >\{60B49E34-C7CC-11D0-8953-00A0C90347FF\}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP\par ActiveX: >\{881dd1c5-3dcf-431b-b061-f3f88e8be88a\} - %systemroot%\\system32\\shmgrate.exe OCInstallUserConfigOE\par \par Drivers32: msacm.iac2 - C:\\WINDOWS\\system32\\iac25_32.ax (Intel Corporation)\par Drivers32: msacm.l3acm - C:\\WINDOWS\\system32\\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)\par Drivers32: msacm.sl_anet - C:\\WINDOWS\\System32\\sl_anet.acm (Sipro Lab Telecom Inc.)\par Drivers32: msacm.trspch - C:\\WINDOWS\\System32\\tssoft32.acm (DSP GROUP, INC.)\par Drivers32: vidc.cvid - C:\\WINDOWS\\System32\\iccvid.dll (Radius Inc.)\par Drivers32: vidc.iv31 - C:\\WINDOWS\\System32\\ir32_32.dll ()\par Drivers32: vidc.iv32 - C:\\WINDOWS\\System32\\ir32_32.dll ()\par Drivers32: vidc.iv41 - C:\\WINDOWS\\System32\\ir41_32.ax (Intel Corporation)\par Drivers32: vidc.iv50 - C:\\WINDOWS\\System32\\ir50_32.dll (Intel Corporation)\par \par CREATERESTOREPOINT\par Restore point Set: OTL Restore Point (16902109354000384)\par \par ========== Files/Folders - Created Within 30 Days ==========\par \par [2010.07.04 17:57:33 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\pss\par [2010.07.04 17:50:20 | 000,000,000 | ---D | C] -- C:\\VundoFix Backups\par [2010.07.04 13:59:41 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Prefetch\par [2010.07.04 13:58:22 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\winzm.ime\par [2010.07.04 13:58:22 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\winsp.ime\par [2010.07.04 13:58:22 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\winpy.ime\par [2010.07.04 13:58:22 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\winime.ime\par [2010.07.04 13:58:21 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\winar30.ime\par [2010.07.04 13:58:21 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wingb.ime\par [2010.07.04 13:58:21 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\weitekp9.dll\par [2010.07.04 13:58:21 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\weitekp9.sys\par [2010.07.04 13:58:20 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\w3svc.dll\par [2010.07.04 13:58:20 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wam51.dll\par [2010.07.04 13:58:20 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\w3ext.dll\par [2010.07.04 13:58:20 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wamreg51.dll\par [2010.07.04 13:58:20 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wamps51.dll\par [2010.07.04 13:58:20 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\w3svapi.dll\par [2010.07.04 13:58:19 | 000,426,041 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\voicepad.dll\par [2010.07.04 13:58:19 | 000,086,073 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\voicesub.dll\par [2010.07.04 13:58:19 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\w32.dll\par [2010.07.04 13:58:19 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\w3ctrs51.dll\par [2010.07.04 13:58:17 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\uihelper.dll\par [2010.07.04 13:58:17 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\uniime.dll\par [2010.07.04 13:58:17 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\unicdime.ime\par [2010.07.04 13:58:17 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tsprof.exe\par [2010.07.04 13:58:16 | 000,571,392 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tintlgnt.ime\par [2010.07.04 13:58:16 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tintsetp.exe\par [2010.07.04 13:58:16 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tintlphr.exe\par [2010.07.04 13:58:16 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tools.dll\par [2010.07.04 13:58:16 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tmigrate.dll\par [2010.07.04 13:58:15 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\thawbrkr.dll\par [2010.07.04 13:58:15 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tdipx.sys\par [2010.07.04 13:58:15 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tdspx.sys\par [2010.07.04 13:58:15 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tdasync.sys\par [2010.07.04 13:58:14 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\svcext51.dll\par [2010.07.04 13:58:14 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\status.dll\par [2010.07.04 13:58:13 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\srusbusd.dll\par [2010.07.04 13:58:13 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sspifilt.dll\par [2010.07.04 13:58:13 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\ssinc51.dll\par [2010.07.04 13:58:12 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\softkey.dll\par [2010.07.04 13:58:12 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\snmpthrd.dll\par [2010.07.04 13:58:12 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\snmpstup.dll\par [2010.07.04 13:58:12 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\snmptrap.exe\par [2010.07.04 13:58:12 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\EXCH_snprfdll.dll\par [2010.07.04 13:58:11 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\smtpsvc.dll\par [2010.07.04 13:58:11 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\snmpincl.dll\par [2010.07.04 13:58:11 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\snmpcl.dll\par [2010.07.04 13:58:11 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\snmpsmir.dll\par [2010.07.04 13:58:11 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\snmp.exe\par [2010.07.04 13:58:11 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\EXCH_smtpctrs.dll\par [2010.07.04 13:58:11 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\snmpmib.dll\par [2010.07.04 13:58:10 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\smi2smir.exe\par [2010.07.04 13:58:10 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sm9aw.dll\par [2010.07.04 13:58:10 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\smb6w.dll\par [2010.07.04 13:58:10 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sma3w.dll\par [2010.07.04 13:58:10 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sm93w.dll\par [2010.07.04 13:58:10 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sm92w.dll\par [2010.07.04 13:58:10 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sm90w.dll\par [2010.07.04 13:58:10 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sm8dw.dll\par [2010.07.04 13:58:10 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\smierrsm.dll\par [2010.07.04 13:58:10 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\smtpapi.dll\par [2010.07.04 13:58:10 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\smimsgif.dll\par [2010.07.04 13:58:10 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\smierrsy.dll\par [2010.07.04 13:58:09 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sm87w.dll\par [2010.07.04 13:58:09 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sm81w.dll\par [2010.07.04 13:58:09 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sm8cw.dll\par [2010.07.04 13:58:09 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sm8aw.dll\par [2010.07.04 13:58:09 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sm89w.dll\par [2010.07.04 13:58:09 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sm59w.dll\par [2010.07.04 13:58:09 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\simptcp.dll\par [2010.07.04 13:58:07 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\seo.dll\par [2010.07.04 13:58:07 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\EXCH_scripto.dll\par [2010.07.04 13:58:07 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\EXCH_seos.dll\par [2010.07.04 13:58:06 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\\WINDOWS\\System32\\dllcache\\rwia330.dll\par [2010.07.04 13:58:06 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\\WINDOWS\\System32\\dllcache\\rwia001.dll\par [2010.07.04 13:58:06 | 000,029,184 | ---- | C] (Ricoh Co., Ltd.) -- C:\\WINDOWS\\System32\\dllcache\\rw330ext.dll\par [2010.07.04 13:58:06 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rw001ext.dll\par [2010.07.04 13:58:06 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rwnh.dll\par [2010.07.04 13:58:06 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rpcref.dll\par [2010.07.04 13:58:05 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\romanime.ime\par [2010.07.04 13:58:05 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\EXCH_regtrace.exe\par [2010.07.04 13:58:05 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\register.exe\par [2010.07.04 13:58:04 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\quick.ime\par [2010.07.04 13:58:04 | 000,020,736 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\ramdisk.sys\par [2010.07.04 13:58:04 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\quser.exe\par [2010.07.04 13:58:04 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\query.exe\par [2010.07.04 13:58:03 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\pmxviceo.dll\par [2010.07.04 13:58:03 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\pmxmcro.dll\par [2010.07.04 13:58:03 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\pwsdata.dll\par [2010.07.04 13:58:02 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\pintlgnt.ime\par [2010.07.04 13:58:02 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\phon.ime\par [2010.07.04 13:58:02 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\pintlphr.exe\par [2010.07.04 13:58:02 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\pmigrate.dll\par [2010.07.04 13:58:02 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\pintlcsd.dll\par [2010.07.04 13:58:02 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\permchk.dll\par [2010.07.04 13:58:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\pmxgl.dll\par [2010.07.04 13:58:01 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\padrs411.dll\par [2010.07.04 13:58:01 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\pagecnt.dll\par [2010.07.04 13:58:01 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\padrs404.dll\par [2010.07.04 13:58:01 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\padrs804.dll\par [2010.07.04 13:58:01 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\padrs412.dll\par [2010.07.04 13:57:59 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nsepm.dll\par [2010.07.04 13:57:59 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\EXCH_ntfsdrv.dll\par [2010.07.04 13:57:58 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nextlink.dll\par [2010.07.04 13:57:57 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\multibox.dll\par [2010.07.04 13:57:57 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mtstocom.exe\par [2010.07.04 13:57:55 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msir3jp.lex\par [2010.07.04 13:57:55 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msir3jp.dll\par [2010.07.04 13:57:50 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mga.sys\par [2010.07.04 13:57:50 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mga.dll\par [2010.07.04 13:57:50 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\metada51.dll\par [2010.07.04 13:57:50 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mdsync.dll\par [2010.07.04 13:57:50 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\migregdb.exe\par [2010.07.04 13:57:49 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\EXCH_mailmsg.dll\par [2010.07.04 13:57:49 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\md5filt.dll\par [2010.07.04 13:57:49 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\lprmon.dll\par [2010.07.04 13:57:48 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\lmmib2.dll\par [2010.07.04 13:57:48 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\lpdsvc.dll\par [2010.07.04 13:57:48 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\logscrpt.dll\par [2010.07.04 13:57:48 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\lonsint.dll\par [2010.07.04 13:57:47 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\korwbrkr.dll\par [2010.07.04 13:57:47 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdvntc.dll\par [2010.07.04 13:57:47 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdusa.dll\par [2010.07.04 13:57:47 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdurdu.dll\par [2010.07.04 13:57:46 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdnecat.dll\par [2010.07.04 13:57:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdnecnt.dll\par [2010.07.04 13:57:46 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdnec95.dll\par [2010.07.04 13:57:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdlk41a.dll\par [2010.07.04 13:57:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdth3.dll\par [2010.07.04 13:57:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdth2.dll\par [2010.07.04 13:57:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdlk41j.dll\par [2010.07.04 13:57:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdth1.dll\par [2010.07.04 13:57:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdth0.dll\par [2010.07.04 13:57:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdsyr2.dll\par [2010.07.04 13:57:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdsyr1.dll\par [2010.07.04 13:57:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdintel.dll\par [2010.07.04 13:57:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdibm02.dll\par [2010.07.04 13:57:45 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdinpun.dll\par [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdintam.dll\par [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdinmar.dll\par [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdinkan.dll\par [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdinhin.dll\par [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdinguj.dll\par [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdindev.dll\par [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdheb.dll\par [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdfa.dll\par [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbddiv2.dll\par [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbddiv1.dll\par [2010.07.04 13:57:45 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdgeo.dll\par [2010.07.04 13:57:44 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\jupiw.dll\par [2010.07.04 13:57:44 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iwrps.dll\par [2010.07.04 13:57:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdax2.dll\par [2010.07.04 13:57:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbd106n.dll\par [2010.07.04 13:57:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbd101a.dll\par [2010.07.04 13:57:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbd101.dll\par [2010.07.04 13:57:44 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbda3.dll\par [2010.07.04 13:57:44 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbda2.dll\par [2010.07.04 13:57:44 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbda1.dll\par [2010.07.04 13:57:44 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdarmw.dll\par [2010.07.04 13:57:44 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\kbdarme.dll\par [2010.07.04 13:57:43 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iprip.dll\par [2010.07.04 13:57:43 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iscomlog.dll\par [2010.07.04 13:57:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\isapips.dll\par [2010.07.04 13:57:42 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imskdic.dll\par [2010.07.04 13:57:42 | 000,315,455 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imskf.dll\par [2010.07.04 13:57:42 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\infocomm.dll\par [2010.07.04 13:57:42 | 000,102,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imlang.dll\par [2010.07.04 13:57:42 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\inetin51.exe\par [2010.07.04 13:57:42 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\infoctrs.dll\par [2010.07.04 13:57:41 | 000,307,257 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjpdct.exe\par [2010.07.04 13:57:41 | 000,274,489 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjputyc.dll\par [2010.07.04 13:57:41 | 000,262,200 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjputy.exe\par [2010.07.04 13:57:41 | 000,233,527 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjprw.exe\par [2010.07.04 13:57:41 | 000,208,952 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjpmig.exe\par [2010.07.04 13:57:41 | 000,155,705 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjpdsvr.exe\par [2010.07.04 13:57:41 | 000,081,976 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjpdct.dll\par [2010.07.04 13:57:41 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imkrinst.exe\par [2010.07.04 13:57:41 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjpdadm.exe\par [2010.07.04 13:57:41 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjpuex.exe\par [2010.07.04 13:57:40 | 000,811,064 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjp81k.dll\par [2010.07.04 13:57:40 | 000,716,856 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjpcus.dll\par [2010.07.04 13:57:40 | 000,368,696 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjpcic.dll\par [2010.07.04 13:57:40 | 000,340,023 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imjp81.ime\par [2010.07.04 13:57:40 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imepadsv.exe\par [2010.07.04 13:57:40 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imekrcic.dll\par [2010.07.04 13:57:40 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imepadsm.dll\par [2010.07.04 13:57:40 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imekrmbx.dll\par [2010.07.04 13:57:40 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imekrmig.exe\par [2010.07.04 13:57:39 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iische51.dll\par [2010.07.04 13:57:39 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\imekr61.ime\par [2010.07.04 13:57:39 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iislog51.dll\par [2010.07.04 13:57:39 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iisclex4.dll\par [2010.07.04 13:57:39 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iisadmin.dll\par [2010.07.04 13:57:39 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iiscrmap.dll\par [2010.07.04 13:57:39 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iisfecnv.dll\par [2010.07.04 13:57:39 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iissync.exe\par [2010.07.04 13:57:39 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iismui.dll\par [2010.07.04 13:57:36 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\hwxkor.dll\par [2010.07.04 13:57:30 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\hwxcht.dll\par [2010.07.04 13:57:30 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\httpext.dll\par [2010.07.04 13:57:30 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\httpod51.dll\par [2010.07.04 13:57:30 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\httpmb51.dll\par [2010.07.04 13:57:29 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\hostmib.dll\par [2010.07.04 13:57:29 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\hanjadic.dll\par [2010.07.04 13:57:29 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\gzip.dll\par [2010.07.04 13:57:28 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsxp32.dll\par [2010.07.04 13:57:28 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxstiff.dll\par [2010.07.04 13:57:28 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxssvc.exe\par [2010.07.04 13:57:28 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxst30.dll\par [2010.07.04 13:57:28 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxswzrd.dll\par [2010.07.04 13:57:28 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsui.dll\par [2010.07.04 13:57:27 | 000,563,200 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsst.dll\par [2010.07.04 13:57:27 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxscomex.dll\par [2010.07.04 13:57:27 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxscover.exe\par [2010.07.04 13:57:27 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsclnt.exe\par [2010.07.04 13:57:27 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsclntr.dll\par [2010.07.04 13:57:27 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxscom.dll\par [2010.07.04 13:57:27 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsevent.dll\par [2010.07.04 13:57:27 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsroute.dll\par [2010.07.04 13:57:27 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsdrv.dll\par [2010.07.04 13:57:27 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsmon.dll\par [2010.07.04 13:57:27 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsext32.dll\par [2010.07.04 13:57:27 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxssend.exe\par [2010.07.04 13:57:27 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsperf.dll\par [2010.07.04 13:57:27 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsres.dll\par [2010.07.04 13:57:26 | 000,451,584 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxsapi.dll\par [2010.07.04 13:57:26 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\ftpsv251.dll\par [2010.07.04 13:57:26 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fxscfgwz.dll\par [2010.07.04 13:57:26 | 000,024,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fpadmcgi.exe\par [2010.07.04 13:57:26 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fpadmdll.dll\par [2010.07.04 13:57:26 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\ftpctrs2.dll\par [2010.07.04 13:57:26 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\ftpmib.dll\par [2010.07.04 13:57:26 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\ftlx041e.dll\par [2010.07.04 13:57:25 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\EXCH_fcachdll.dll\par [2010.07.04 13:57:25 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\flattemp.exe\par [2010.07.04 13:57:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\exstrace.dll\par [2010.07.04 13:57:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\f3ahvoas.dll\par [2010.07.04 13:57:24 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\evntagnt.dll\par [2010.07.04 13:57:24 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\evntwin.exe\par [2010.07.04 13:57:24 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\\WINDOWS\\System32\\dllcache\\esuimgd.dll\par [2010.07.04 13:57:24 | 000,045,568 | ---- | C] (SEIKO EPSON CORP.) -- C:\\WINDOWS\\System32\\dllcache\\esunid.dll\par [2010.07.04 13:57:24 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\\WINDOWS\\System32\\dllcache\\esucmd.dll\par [2010.07.04 13:57:24 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\evntcmd.exe\par [2010.07.04 13:57:24 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\et4000.sys\par [2010.07.04 13:57:20 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\dayi.ime\par [2010.07.04 13:57:19 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\davcdata.exe\par [2010.07.04 13:57:18 | 000,057,399 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cplexe.exe\par [2010.07.04 13:57:18 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\convlog.exe\par [2010.07.04 13:57:18 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\controt.dll\par [2010.07.04 13:57:18 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\counters.dll\par [2010.07.04 13:57:18 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cprofile.exe\par [2010.07.04 13:57:17 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cintsetp.exe\par [2010.07.04 13:57:17 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cintime.dll\par [2010.07.04 13:57:17 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\compfilt.dll\par [2010.07.04 13:57:17 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cintlgnt.ime\par [2010.07.04 13:57:16 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\chsbrkr.dll\par [2010.07.04 13:57:16 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\chtbrkr.dll\par [2010.07.04 13:57:16 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\chtmbx.dll\par [2010.07.04 13:57:16 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\chtskdic.dll\par [2010.07.04 13:57:15 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\chajei.ime\par [2010.07.04 13:57:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\chgport.exe\par [2010.07.04 13:57:15 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\chgusr.exe\par [2010.07.04 13:57:15 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\chglogon.exe\par [2010.07.04 13:57:15 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\change.exe\par [2010.07.04 13:57:14 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\c_g18030.dll\par [2010.07.04 13:57:14 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\\WINDOWS\\System32\\dllcache\\cap7146.sys\par [2010.07.04 13:57:14 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\c_iscii.dll\par [2010.07.04 13:57:14 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\c_is2022.dll\par [2010.07.04 13:57:09 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\browscap.dll\par [2010.07.04 13:57:08 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\asp51.dll\par [2010.07.04 13:57:08 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\asptxn.dll\par [2010.07.04 13:57:08 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\aspperf.dll\par [2010.07.04 13:57:08 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\authfilt.dll\par [2010.07.04 13:57:07 | 000,334,848 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\aqueue.dll\par [2010.07.04 13:57:07 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\appconf.dll\par [2010.07.04 13:57:07 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\EXCH_aqadmin.dll\par [2010.07.04 13:57:07 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt0804.dll\par [2010.07.04 13:57:07 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt0412.dll\par [2010.07.04 13:57:06 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt0411.dll\par [2010.07.04 13:57:06 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt040d.dll\par [2010.07.04 13:57:06 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt0404.dll\par [2010.07.04 13:57:06 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt0401.dll\par [2010.07.04 13:57:06 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\EXCH_adsiisex.dll\par [2010.07.04 13:57:05 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\adrot.dll\par [2010.07.04 13:57:05 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\admexs.dll\par [2010.07.04 13:57:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\admxprox.dll\par [2010.07.04 13:57:03 | 000,032,827 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tcptest.exe\par [2010.07.04 13:57:03 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tcptsat.dll\par [2010.07.04 13:57:03 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wamregps.dll\par [2010.07.04 13:57:02 | 002,134,528 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\smtpsnap.dll\par [2010.07.04 13:57:02 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\smtpadm.dll\par [2010.07.04 13:57:02 | 000,020,536 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\shtml.dll\par [2010.07.04 13:57:02 | 000,016,437 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\shtml.exe\par [2010.07.04 13:57:02 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\staxmem.dll\par [2010.07.04 13:56:59 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\logui.ocx\par [2010.07.04 13:56:58 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\inetmgr.dll\par [2010.07.04 13:56:58 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iisui.dll\par [2010.07.04 13:56:58 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iisrtl.dll\par [2010.07.04 13:56:58 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\isatq.dll\par [2010.07.04 13:56:58 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\inetsloc.dll\par [2010.07.04 13:56:58 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\infoadmn.dll\par [2010.07.04 13:56:58 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\inetmgr.exe\par [2010.07.04 13:56:57 | 000,598,071 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fpmmc.dll\par [2010.07.04 13:56:57 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fpmmcsat.dll\par [2010.07.04 13:56:57 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iisext51.dll\par [2010.07.04 13:56:57 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iismap.dll\par [2010.07.04 13:56:57 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iisrstas.exe\par [2010.07.04 13:56:57 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fpexedll.dll\par [2010.07.04 13:56:57 | 000,020,538 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fpremadm.exe\par [2010.07.04 13:56:57 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iisreset.exe\par [2010.07.04 13:56:57 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\ftpsapi2.dll\par [2010.07.04 13:56:57 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iisrstap.dll\par [2010.07.04 13:56:56 | 000,876,653 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp4awel.dll\par [2010.07.04 13:56:56 | 000,188,494 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fpcount.exe\par [2010.07.04 13:56:56 | 000,184,435 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp4amsft.dll\par [2010.07.04 13:56:56 | 000,147,513 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp4apws.dll\par [2010.07.04 13:56:56 | 000,109,328 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp98swin.exe\par [2010.07.04 13:56:56 | 000,102,509 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp4atxt.dll\par [2010.07.04 13:56:56 | 000,082,035 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp4anscp.dll\par [2010.07.04 13:56:56 | 000,049,212 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp4awebs.dll\par [2010.07.04 13:56:56 | 000,049,210 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp4areg.dll\par [2010.07.04 13:56:56 | 000,041,020 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp4avnb.dll\par [2010.07.04 13:56:56 | 000,032,826 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp4avss.dll\par [2010.07.04 13:56:56 | 000,014,608 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp98sadm.exe\par [2010.07.04 13:56:55 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\certwiz.ocx\par [2010.07.04 13:56:55 | 000,188,480 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cfgwiz.exe\par [2010.07.04 13:56:55 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\certmap.ocx\par [2010.07.04 13:56:55 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cnfgprts.ocx\par [2010.07.04 13:56:55 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\coadmin.dll\par [2010.07.04 13:56:55 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\author.exe\par [2010.07.04 13:56:54 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\adsiis51.dll\par [2010.07.04 13:56:54 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\admwprox.dll\par [2010.07.04 13:56:54 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\author.dll\par [2010.07.04 13:56:54 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\admin.exe\par [2010.07.04 13:56:53 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\admin.dll\par [2010.07.04 13:49:00 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\\WINDOWS\\System32\\spxcoins.dll\par [2010.07.04 13:49:00 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\\WINDOWS\\System32\\dllcache\\spxcoins.dll\par [2010.07.04 13:49:00 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\irclass.dll\par [2010.07.04 13:49:00 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\irclass.dll\par [2010.07.04 13:31:09 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\LogFiles\par [2010.07.04 10:14:18 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\appmgmt\par [2010.07.03 23:01:40 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Utherverse\par [2010.07.03 22:58:13 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Startmen\'b3\par [2010.07.03 22:50:40 | 000,000,000 | ---D | C] -- C:\\Programme\\Utherverse Digital Inc\par [2010.07.01 15:48:59 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\NtmsData\par [2010.07.01 15:26:58 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\gtk-2.0\par [2010.06.30 21:28:23 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Lokale Einstellungen\\Anwendungsdaten\\Adobe\par [2010.06.30 21:27:58 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Anwendungsdaten\\Adobe\par [2010.06.30 21:27:50 | 000,000,000 | ---D | C] -- C:\\Programme\\Gemeinsame Dateien\\Adobe\par [2010.06.30 21:27:50 | 000,000,000 | ---D | C] -- C:\\Programme\\Adobe\par [2010.06.30 00:18:14 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\KB905474\par [2010.06.29 16:54:59 | 000,000,000 | ---D | C] -- C:\\e711cd94357417b49e56e2f1ac14a4c8\par [2010.06.29 16:48:18 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\browserchoice.exe\par [2010.06.29 16:44:10 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\PreInstall\par [2010.06.29 16:44:09 | 000,026,488 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\spupdsvc.exe\par [2010.06.29 16:44:09 | 000,018,808 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\spmsg.dll\par [2010.06.29 16:44:08 | 000,000,000 | -H-D | C] -- C:\\WINDOWS\\$hf_mig$\par [2010.06.29 10:59:07 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\SoftwareDistribution\par [2010.06.27 17:55:28 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Lokale Einstellungen\\Anwendungsdaten\\Identities\par [2010.06.27 11:21:04 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\ICQ\par [2010.06.25 17:44:49 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\.thumbnails\par [2010.06.25 17:44:35 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\.gimp-2.6\par [2010.06.25 17:44:34 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\gegl-0.0\par [2010.06.25 15:07:11 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Sun\par [2010.06.25 15:07:07 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Anwendungsdaten\\Sun\par [2010.06.25 15:07:06 | 000,000,000 | ---D | C] -- C:\\Programme\\Gemeinsame Dateien\\Java\par [2010.06.25 15:06:53 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\\WINDOWS\\System32\\deployJava1.dll\par [2010.06.25 15:06:53 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\\WINDOWS\\System32\\javaws.exe\par [2010.06.25 15:06:53 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\\WINDOWS\\System32\\javaw.exe\par [2010.06.25 15:06:53 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\\WINDOWS\\System32\\java.exe\par [2010.06.25 15:06:53 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\\WINDOWS\\System32\\javacpl.cpl\par [2010.06.25 15:06:46 | 000,000,000 | ---D | C] -- C:\\Programme\\Java\par [2010.06.25 15:06:11 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Sun\par [2010.06.25 15:02:33 | 000,000,000 | ---D | C] -- C:\\Programme\\ICQ6Toolbar\par [2010.06.25 15:02:30 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Anwendungsdaten\\ICQ\par [2010.06.25 15:02:14 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\ICQ\par [2010.06.25 15:02:14 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Lokale Einstellungen\\Anwendungsdaten\\AOL\par [2010.06.25 15:02:09 | 000,000,000 | ---D | C] -- C:\\Programme\\ICQ7.2\par [2010.06.25 15:00:06 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Minidump\par [2010.06.25 14:37:48 | 000,000,000 | R-SD | C] -- C:\\WINDOWS\\Fonts\par [2010.06.25 14:37:48 | 000,000,000 | RHSD | C] -- C:\\WINDOWS\\System32\\dllcache\par [2010.06.25 14:37:48 | 000,000,000 | R--D | C] -- C:\\WINDOWS\\Web\par [2010.06.25 14:37:48 | 000,000,000 | -H-D | C] -- C:\\WINDOWS\\inf\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\WinSxS\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\wins\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\wbem\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\usmt\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\twain_32\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Temp\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\system32\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\system\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\spool\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\ShellExt\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\Setup\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\security\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Resources\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\repair\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\ras\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Provisioning\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\PeerNet\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\pchealth\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\oobe\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\npp\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Network Diagnostic\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\mui\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\mui\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\msapps\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\msagent\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Media\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\L2Schemas\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\java\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\inetsrv\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\IME\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\ime\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\icsxml\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\ias\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Help\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\export\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\drivers\\etc\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\ehome\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\drivers\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Driver Cache\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\drivers\\disdn\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\dhcp\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\de-de\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Debug\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\de\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Cursors\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Connection Wizard\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\config\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Config\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\AppPatch\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\addins\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\3com_dmi\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\3076\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\2052\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\1054\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\1042\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\1041\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\1037\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\1033\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\1031\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\1028\par [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\1025\par [2010.06.25 14:37:36 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Macromedia\par [2010.06.25 14:37:36 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Adobe\par [2010.06.25 14:11:00 | 016,871,432 | ---- | C] ( ) -- C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\gimp-2.6.7-i686-setup.exe\par [2010.06.25 14:10:55 | 011,008,060 | ---- | C] (DVDVideoSoft Limited. ) -- C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\FreeYouTubeToMp3Converter.exe\par [2010.06.25 14:10:45 | 101,418,769 | ---- | C] (ATARI, Inc.) -- C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\TACOPS_3.4.EXE\par [2010.06.25 13:44:44 | 000,000,000 | -HSD | C] -- C:\\WINDOWS\\Installer\par [2010.06.25 13:44:44 | 000,000,000 | ---D | C] -- C:\\Programme\\Gemeinsame Dateien\\ODBC\par [2010.06.25 13:44:43 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\spcommon.dll\par [2010.06.25 13:44:43 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\spcplui.dll\par [2010.06.25 13:44:42 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\spttseng.dll\par [2010.06.25 13:44:41 | 000,741,376 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sapi.dll\par [2010.06.25 13:44:41 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sapi.cpl\par [2010.06.25 13:44:41 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sapisvr.exe\par [2010.06.25 13:44:41 | 000,000,000 | R--D | C] -- C:\\Programme\par [2010.06.25 13:44:41 | 000,000,000 | ---D | C] -- C:\\Programme\\Gemeinsame Dateien\\SpeechEngines\par [2010.06.25 13:44:41 | 000,000,000 | ---D | C] -- C:\\Programme\\Gemeinsame Dateien\\Microsoft Shared\par [2010.06.25 13:44:41 | 000,000,000 | ---D | C] -- C:\\Programme\\Gemeinsame Dateien\par [2010.06.25 13:44:39 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt0408.dll\par [2010.06.25 13:44:39 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt040e.dll\par [2010.06.25 13:44:39 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt041f.dll\par [2010.06.25 13:44:39 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt0419.dll\par [2010.06.25 13:44:39 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt0415.dll\par [2010.06.25 13:44:39 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\agt0405.dll\par [2010.06.25 13:44:31 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\\WINDOWS\\System32\\dllcache\\dgrpsetu.dll\par [2010.06.25 13:44:31 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\\WINDOWS\\System32\\dgrpsetu.dll\par [2010.06.25 13:44:31 | 000,103,936 | ---- | C] (Equinox Systems Inc.) -- C:\\WINDOWS\\System32\\EqnClass.Dll\par [2010.06.25 13:44:31 | 000,103,936 | ---- | C] (Equinox Systems Inc.) -- C:\\WINDOWS\\System32\\dllcache\\eqnclass.dll\par [2010.06.25 13:44:31 | 000,013,600 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System\\WFWNET.DRV\par [2010.06.25 13:44:31 | 000,004,048 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System\\TIMER.DRV\par [2010.06.25 13:44:31 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System\\SYSTEM.DRV\par [2010.06.25 13:44:31 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System\\VGA.DRV\par [2010.06.25 13:44:30 | 000,070,368 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System\\AVICAP.DLL\par [2010.06.25 13:44:30 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System\\MOUSE.DRV\par [2010.06.25 13:44:30 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System\\KEYBOARD.DRV\par [2010.06.25 13:44:30 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System\\SOUND.DRV\par [2010.06.25 13:44:29 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System\\WINSPOOL.DRV\par [2010.06.25 13:44:29 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\irenum.sys\par [2010.06.25 13:44:27 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\storprop.dll\par [2010.06.25 13:44:20 | 000,000,000 | R--D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Startmen\'fc\par [2010.06.25 13:44:20 | 000,000,000 | R--D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Dokumente\par [2010.06.25 13:44:20 | 000,000,000 | -H-D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Vorlagen\par [2010.06.25 13:44:20 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Favoriten\par [2010.06.25 13:44:20 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\par [2010.06.25 13:42:32 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\CatRoot2\par [2010.06.25 13:42:32 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\CatRoot\par [2010.06.25 13:42:26 | 000,000,000 | --SD | C] -- C:\\Dokumente und Einstellungen\\All Users\\Anwendungsdaten\\Microsoft\par [2010.06.25 13:42:26 | 000,000,000 | RH-D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Anwendungsdaten\par [2010.06.25 13:42:08 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\par [2010.06.25 13:42:07 | 000,000,000 | -HSD | C] -- C:\\System Volume Information\par [2010.06.25 13:36:43 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Avira\par [2010.06.25 13:20:07 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\pdf\par [2010.06.25 13:19:29 | 000,000,000 | -HSD | C] -- C:\\RECYCLER\par [2010.06.25 13:18:49 | 000,000,000 | ---D | C] -- C:\\Programme\\GIMP-2.0\par [2010.06.25 13:15:43 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\\WINDOWS\\System32\\drivers\\ssmdrv.sys\par [2010.06.25 13:15:42 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\\WINDOWS\\System32\\drivers\\avipbb.sys\par [2010.06.25 13:15:42 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\\WINDOWS\\System32\\drivers\\avgntflt.sys\par [2010.06.25 13:15:42 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\\WINDOWS\\System32\\drivers\\avgntdd.sys\par [2010.06.25 13:15:42 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\\WINDOWS\\System32\\drivers\\avgntmgr.sys\par [2010.06.25 13:15:42 | 000,000,000 | ---D | C] -- C:\\Programme\\Avira\par [2010.06.25 13:15:42 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Anwendungsdaten\\Avira\par [2010.06.25 13:12:55 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\Downloads\par [2010.06.25 13:10:16 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Lokale Einstellungen\\Anwendungsdaten\\Mozilla\par [2010.06.25 13:10:16 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Mozilla\par [2010.06.25 13:10:08 | 000,000,000 | ---D | C] -- C:\\Programme\\Mozilla Firefox\par [2010.06.25 13:08:05 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\DVDVideoSoft\par [2010.06.25 13:08:01 | 000,000,000 | ---D | C] -- C:\\Programme\\Gemeinsame Dateien\\DVDVideoSoft\par [2010.06.25 13:08:01 | 000,000,000 | ---D | C] -- C:\\Programme\\DVDVideoSoft\par [2010.06.25 13:03:32 | 000,000,000 | ---D | C] -- C:\\Programme\\Infogrames\par [2010.06.25 13:03:21 | 000,328,704 | ---- | C] (InstallShield Software Corporation ) -- C:\\WINDOWS\\IsUn0407.exe\par [2010.06.25 13:02:25 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\Lang\par [2010.06.25 13:01:10 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\ReinstallBackups\par [2010.06.25 13:01:03 | 000,069,632 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\System32\\ChCfg.exe\par [2010.06.25 13:00:59 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\RTCOM\par [2010.06.25 13:00:54 | 009,715,200 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\RTLCPL.exe\par [2010.06.25 13:00:54 | 001,826,816 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\SkyTel.exe\par [2010.06.25 13:00:54 | 001,196,032 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\RtlUpd.exe\par [2010.06.25 13:00:54 | 000,266,240 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\System32\\RTSndMgr.cpl\par [2010.06.25 13:00:54 | 000,077,824 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\SoundMan.exe\par [2010.06.25 13:00:53 | 004,755,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\System32\\drivers\\RtkHDAud.sys\par [2010.06.25 13:00:53 | 002,808,832 | ---- | C] (RealTek Semicoductor Corp.) -- C:\\WINDOWS\\alcwzrd.exe\par [2010.06.25 13:00:53 | 002,165,760 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\MicCal.exe\par [2010.06.25 13:00:53 | 000,278,528 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\System32\\ALSndMgr.cpl\par [2010.06.25 13:00:53 | 000,057,344 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\Alcmtr.exe\par [2010.06.25 13:00:51 | 000,528,384 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\RtlExUpd.dll\par [2010.06.25 13:00:51 | 000,319,488 | ---- | C] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\HideWin.exe\par [2010.06.25 13:00:10 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\ksproxy.ax\par [2010.06.25 13:00:10 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\ksuser.dll\par [2010.06.25 12:59:53 | 000,105,856 | ---- | C] (Realtek Semiconductor Corporation ) -- C:\\WINDOWS\\System32\\drivers\\Rtenicxp.sys\par [2010.06.25 12:59:52 | 000,000,000 | -H-D | C] -- C:\\Programme\\InstallShield Installation Information\par [2010.06.25 12:59:52 | 000,000,000 | ---D | C] -- C:\\Programme\\Realtek\par [2010.06.25 12:59:52 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\OPTIONS\par [2010.06.25 12:59:50 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\InstallShield\par [2010.06.25 12:59:38 | 000,442,368 | ---- | C] (NVIDIA Corporation) -- C:\\WINDOWS\\System32\\nvudisp.exe\par [2010.06.25 12:59:38 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\nview\par [2010.06.25 12:59:33 | 000,000,000 | ---D | C] -- C:\\Programme\\Gemeinsame Dateien\\InstallShield\par [2010.06.25 12:59:03 | 000,356,352 | ---- | C] (NVIDIA Corporation) -- C:\\WINDOWS\\System32\\nvusmu.exe\par [2010.06.25 12:59:02 | 000,442,368 | ---- | C] (NVIDIA Corporation) -- C:\\WINDOWS\\System32\\nvusmb.exe\par [2010.06.25 12:58:59 | 000,442,368 | ---- | C] (NVIDIA Corporation) -- C:\\WINDOWS\\System32\\NVUNINST.EXE\par [2010.06.25 12:58:31 | 000,013,696 | R--- | C] (BIOSTAR Group) -- C:\\WINDOWS\\System32\\drivers\\BIOS.sys\par [2010.06.25 12:57:03 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Identities\par [2010.06.25 12:57:02 | 000,000,000 | -H-D | C] -- C:\\Programme\\Uninstall Information\par [2010.06.25 12:56:59 | 000,000,000 | R--D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\Eigene Musik\par [2010.06.25 12:56:59 | 000,000,000 | R--D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\par [2010.06.25 12:56:59 | 000,000,000 | R--D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Eigene Dateien\\Eigene Bilder\par [2010.06.25 12:56:44 | 000,000,000 | --SD | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Microsoft\par [2010.06.25 12:56:44 | 000,000,000 | --SD | C] -- C:\\Dokumente und Einstellungen\\Robert\\Cookies\par [2010.06.25 12:56:44 | 000,000,000 | RH-D | C] -- C:\\Dokumente und Einstellungen\\Robert\\SendTo\par [2010.06.25 12:56:44 | 000,000,000 | RH-D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Recent\par [2010.06.25 12:56:44 | 000,000,000 | RH-D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\par [2010.06.25 12:56:44 | 000,000,000 | R--D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Startmen\'fc\par [2010.06.25 12:56:44 | 000,000,000 | R--D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Favoriten\par [2010.06.25 12:56:44 | 000,000,000 | -H-D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Vorlagen\par [2010.06.25 12:56:44 | 000,000,000 | -H-D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Netzwerkumgebung\par [2010.06.25 12:56:44 | 000,000,000 | -H-D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Lokale Einstellungen\par [2010.06.25 12:56:44 | 000,000,000 | -H-D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Druckumgebung\par [2010.06.25 12:56:44 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Lokale Einstellungen\\Anwendungsdaten\\Microsoft\par [2010.06.25 12:56:44 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\Robert\\Desktop\par [2010.06.25 12:55:59 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\SoftwareDistribution\par [2010.06.25 12:55:57 | 000,000,000 | --SD | C] -- C:\\WINDOWS\\System32\\Microsoft\par [2010.06.25 12:55:57 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\LocalService\\Lokale Einstellungen\\Anwendungsdaten\\Microsoft\par [2010.06.25 12:55:56 | 000,000,000 | --SD | C] -- C:\\Dokumente und Einstellungen\\LocalService\\Anwendungsdaten\\Microsoft\par [2010.06.25 12:55:41 | 000,000,000 | --SD | C] -- C:\\Dokumente und Einstellungen\\NetworkService\\Anwendungsdaten\\Microsoft\par [2010.06.25 12:55:41 | 000,000,000 | ---D | C] -- C:\\Dokumente und Einstellungen\\NetworkService\\Lokale Einstellungen\\Anwendungsdaten\\Microsoft\par [2010.06.25 12:54:03 | 000,618,605 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fp4autl.dll\par [2010.06.25 12:53:35 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\xircom\par [2010.06.25 12:53:35 | 000,000,000 | ---D | C] -- C:\\Programme\\xerox\par [2010.06.25 12:53:35 | 000,000,000 | ---D | C] -- C:\\Programme\\microsoft frontpage\par [2010.06.25 12:53:02 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\mapi32.dll\par [2010.06.25 12:52:32 | 000,000,000 | -HSD | C] -- C:\\Dokumente und Einstellungen\\All Users\\DRM\par [2010.06.25 12:52:26 | 000,000,000 | --SD | C] -- C:\\WINDOWS\\Downloaded Program Files\par [2010.06.25 12:52:26 | 000,000,000 | R--D | C] -- C:\\WINDOWS\\Offline Web Pages\par [2010.06.25 12:52:19 | 000,000,000 | -H-D | C] -- C:\\Programme\\WindowsUpdate\par [2010.06.25 12:52:16 | 000,000,000 | ---D | C] -- C:\\Programme\\Online-Dienste\par [2010.06.25 12:52:04 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\DirectX\par [2010.06.25 12:52:00 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\helphost.exe\par [2010.06.25 12:52:00 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\notiflag.exe\par [2010.06.25 12:52:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\brpinfo.dll\par [2010.06.25 12:52:00 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\atrace.dll\par [2010.06.25 12:52:00 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\atrace.dll\par [2010.06.25 12:52:00 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\hcappres.dll\par [2010.06.25 12:51:54 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\srdiag.exe\par [2010.06.25 12:51:53 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\acctres.dll\par [2010.06.25 12:51:53 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\acctres.dll\par [2010.06.25 12:51:53 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msinfo32.exe\par [2010.06.25 12:51:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wb32.exe\par [2010.06.25 12:51:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\nmevtmsg.dll\par [2010.06.25 12:51:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nmevtmsg.dll\par [2010.06.25 12:51:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cb32.exe\par [2010.06.25 12:51:52 | 000,000,000 | ---D | C] -- C:\\Programme\\Gemeinsame Dateien\\Dienste\par [2010.06.25 12:51:50 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mssoap1.dll\par [2010.06.25 12:51:50 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icwtutor.exe\par [2010.06.25 12:51:50 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icwres.dll\par [2010.06.25 12:51:50 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\trialoc.dll\par [2010.06.25 12:51:50 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wisc10.dll\par [2010.06.25 12:51:50 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mssoapr.dll\par [2010.06.25 12:51:50 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\isignup.exe\par [2010.06.25 12:51:50 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\icfgnt5.dll\par [2010.06.25 12:51:50 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icfgnt5.dll\par [2010.06.25 12:51:50 | 000,000,000 | --SD | C] -- C:\\WINDOWS\\Tasks\par [2010.06.25 12:51:50 | 000,000,000 | ---D | C] -- C:\\Programme\\Gemeinsame Dateien\\MSSoap\par [2010.06.25 12:51:49 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\ieinfo5.ocx\par [2010.06.25 12:51:47 | 003,166,208 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msgr3en.dll\par [2010.06.25 12:51:47 | 000,851,968 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\vgx.dll\par [2010.06.25 12:51:47 | 000,727,614 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\srchui.dll\par [2010.06.25 12:51:47 | 000,058,434 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\srchctls.dll\par [2010.06.25 12:51:47 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\srchasst\par [2010.06.25 12:51:46 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\setup_wm.exe\par [2010.06.25 12:51:46 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mpvis.dll\par [2010.06.25 12:51:46 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmpns.dll\par [2010.06.25 12:51:46 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmpband.dll\par [2010.06.25 12:51:46 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\Macromed\par [2010.06.25 12:51:45 | 000,786,432 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\migrate.exe\par [2010.06.25 12:51:45 | 000,364,544 | ---- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- C:\\WINDOWS\\System32\\dllcache\\npdsplay.dll\par [2010.06.25 12:51:45 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\npdrmv2.dll\par [2010.06.25 12:51:45 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmplayer.exe\par |
kann dauern.... [2010.06.25 12:51:45 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\custsat.dll\par [2010.06.25 12:51:45 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\npwmsdrm.dll\par [2010.06.25 12:51:45 | 000,004,639 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mplayer2.exe\par [2010.06.25 12:51:44 | 001,135,616 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wuaueng.dll\par [2010.06.25 12:51:44 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\wuaueng1.dll\par [2010.06.25 12:51:44 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wuaueng1.dll\par [2010.06.25 12:51:44 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\wuauclt1.exe\par [2010.06.25 12:51:44 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wuauclt1.exe\par [2010.06.25 12:51:44 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wuaucpl.cpl\par [2010.06.25 12:51:44 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wuweb.dll\par [2010.06.25 12:51:44 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\wucltui.dll\par [2010.06.25 12:51:44 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wucltui.dll\par [2010.06.25 12:51:44 | 000,111,616 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wuauclt.exe\par [2010.06.25 12:51:44 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\wups.dll\par [2010.06.25 12:51:44 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wups.dll\par [2010.06.25 12:51:44 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wuauserv.dll\par [2010.06.25 12:51:43 | 000,431,616 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\wuapi.dll\par [2010.06.25 12:51:43 | 000,431,616 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wuapi.dll\par [2010.06.25 12:51:43 | 000,409,088 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\qmgr.dll\par [2010.06.25 12:51:43 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\qmgrprxy.dll\par [2010.06.25 12:51:43 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\qmgrprxy.dll\par [2010.06.25 12:51:43 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\bitsprx2.dll\par [2010.06.25 12:51:43 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\bitsprx2.dll\par [2010.06.25 12:51:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\bitsprx4.dll\par [2010.06.25 12:51:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\bitsprx4.dll\par [2010.06.25 12:51:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\bitsprx3.dll\par [2010.06.25 12:51:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\bitsprx3.dll\par [2010.06.25 12:51:42 | 004,293,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmm2res.dll\par [2010.06.25 12:51:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmm2res2.dll\par [2010.06.25 12:51:42 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmm2eres.dll\par [2010.06.25 12:51:41 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\moviemk.exe\par [2010.06.25 12:51:41 | 000,502,272 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmm2fxa.dll\par [2010.06.25 12:51:41 | 000,402,432 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmm2filt.dll\par [2010.06.25 12:51:41 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmm2fxb.dll\par [2010.06.25 12:51:41 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmm2ae.dll\par [2010.06.25 12:51:41 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmm2ext.dll\par [2010.06.25 12:51:40 | 000,000,000 | ---D | C] -- C:\\Programme\\Movie Maker\par [2010.06.25 12:51:30 | 000,565,760 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msobmain.dll\par [2010.06.25 12:51:30 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msobcomm.dll\par [2010.06.25 12:51:30 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\oobebaln.exe\par [2010.06.25 12:51:30 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msobshel.dll\par [2010.06.25 12:51:30 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msoobe.exe\par [2010.06.25 12:51:30 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msobweb.dll\par [2010.06.25 12:51:30 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msobdl.dll\par [2010.06.25 12:51:28 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\uploadm.exe\par [2010.06.25 12:51:28 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\pchshell.dll\par [2010.06.25 12:51:28 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\safrslv.dll\par [2010.06.25 12:51:28 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\safrslv.dll\par [2010.06.25 12:51:28 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\safrcdlg.dll\par [2010.06.25 12:51:28 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\safrcdlg.dll\par [2010.06.25 12:51:28 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\racpldlg.dll\par [2010.06.25 12:51:28 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\racpldlg.dll\par [2010.06.25 12:51:28 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\pchsvc.dll\par [2010.06.25 12:51:28 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\safrdm.dll\par [2010.06.25 12:51:28 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\safrdm.dll\par [2010.06.25 12:51:26 | 000,769,024 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\helpctr.exe\par [2010.06.25 12:51:26 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\helpsvc.exe\par [2010.06.25 12:51:26 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msconfig.exe\par [2010.06.25 12:51:26 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\hscupd.exe\par [2010.06.25 12:51:25 | 000,385,536 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rstrui.exe\par [2010.06.25 12:51:25 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\srrstr.dll\par [2010.06.25 12:51:25 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\srrstr.dll\par [2010.06.25 12:51:25 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\srsvc.dll\par [2010.06.25 12:51:25 | 000,129,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fltmgr.sys\par [2010.06.25 12:51:25 | 000,073,472 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sr.sys\par [2010.06.25 12:51:25 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\srclient.dll\par [2010.06.25 12:51:25 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\fltMc.exe\par [2010.06.25 12:51:25 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fltmc.exe\par [2010.06.25 12:51:25 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fltlib.dll\par [2010.06.25 12:51:25 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\Restore\par [2010.06.25 12:51:24 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\callcont.dll\par [2010.06.25 12:51:24 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nmas.dll\par [2010.06.25 12:51:24 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\ils.dll\par [2010.06.25 12:51:24 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\ils.dll\par [2010.06.25 12:51:24 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\msconf.dll\par [2010.06.25 12:51:24 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msconf.dll\par [2010.06.25 12:51:24 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\dcap32.dll\par [2010.06.25 12:51:24 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\mnmdd.dll\par [2010.06.25 12:51:24 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mnmdd.dll\par [2010.06.25 12:51:24 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mnmsrvc.exe\par [2010.06.25 12:51:24 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\\WINDOWS\\System32\\isrdbg32.dll\par [2010.06.25 12:51:24 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\\WINDOWS\\System32\\dllcache\\isrdbg32.dll\par [2010.06.25 12:51:24 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\nmmkcert.dll\par [2010.06.25 12:51:24 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nmmkcert.dll\par [2010.06.25 12:51:24 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nmasnt.dll\par [2010.06.25 12:51:23 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mst120.dll\par [2010.06.25 12:51:23 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nac.dll\par [2010.06.25 12:51:23 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nmwb.dll\par [2010.06.25 12:51:23 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nmft.dll\par [2010.06.25 12:51:23 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nmchat.dll\par [2010.06.25 12:51:23 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nmcom.dll\par [2010.06.25 12:51:23 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rrcm.dll\par [2010.06.25 12:51:23 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mst123.dll\par [2010.06.25 12:51:23 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\h323cc.dll\par [2010.06.25 12:51:23 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\confmrsl.dll\par [2010.06.25 12:51:22 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\conf.exe\par [2010.06.25 12:51:22 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wab32.dll\par [2010.06.25 12:51:22 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\msoeacct.dll\par [2010.06.25 12:51:22 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msoeacct.dll\par [2010.06.25 12:51:22 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\nmoldwb.dll\par [2010.06.25 12:51:22 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\msoert2.dll\par [2010.06.25 12:51:22 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msoert2.dll\par [2010.06.25 12:51:22 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wabimp.dll\par [2010.06.25 12:51:22 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wab.exe\par [2010.06.25 12:51:22 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wabfind.dll\par [2010.06.25 12:51:22 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wabmig.exe\par [2010.06.25 12:51:22 | 000,000,000 | ---D | C] -- C:\\Programme\\NetMeeting\par [2010.06.25 12:51:21 | 000,691,712 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\inetcomm.dll\par [2010.06.25 12:51:21 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wab32res.dll\par [2010.06.25 12:51:21 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\oeimport.dll\par [2010.06.25 12:51:21 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\directdb.dll\par [2010.06.25 12:51:21 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msimn.exe\par [2010.06.25 12:51:21 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\inetres.dll\par [2010.06.25 12:51:21 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\inetres.dll\par [2010.06.25 12:51:20 | 002,532,864 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msoeres.dll\par [2010.06.25 12:51:20 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mstask.dll\par [2010.06.25 12:51:20 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\schedsvc.dll\par [2010.06.25 12:51:20 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\setup50.exe\par [2010.06.25 12:51:20 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\oemig50.exe\par [2010.06.25 12:51:20 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\oemiglib.dll\par [2010.06.25 12:51:20 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\mstinit.exe\par [2010.06.25 12:51:20 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mstinit.exe\par [2010.06.25 12:51:20 | 000,000,000 | ---D | C] -- C:\\Programme\\Outlook Express\par [2010.06.25 12:51:19 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\inetcfg.dll\par [2010.06.25 12:51:19 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\inetcfg.dll\par [2010.06.25 12:51:19 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\isign32.dll\par [2010.06.25 12:51:19 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\isign32.dll\par [2010.06.25 12:51:19 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\icwdial.dll\par [2010.06.25 12:51:19 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icwdial.dll\par [2010.06.25 12:51:19 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\icwphbk.dll\par [2010.06.25 12:51:19 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icwphbk.dll\par [2010.06.25 12:51:18 | 000,554,008 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\dao360.dll\par [2010.06.25 12:51:18 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icwconn1.exe\par [2010.06.25 12:51:18 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sqlxmlx.dll\par [2010.06.25 12:51:18 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icwhelp.dll\par [2010.06.25 12:51:18 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icwconn2.exe\par [2010.06.25 12:51:18 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icwconn.dll\par [2010.06.25 12:51:18 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icwutil.dll\par [2010.06.25 12:51:18 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icwdl.dll\par [2010.06.25 12:51:18 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icwrmind.exe\par [2010.06.25 12:51:18 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\inetwiz.exe\par [2010.06.25 12:51:17 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\oledb32.dll\par [2010.06.25 12:51:17 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdasql.dll\par [2010.06.25 12:51:17 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdaora.dll\par [2010.06.25 12:51:17 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdaps.dll\par [2010.06.25 12:51:17 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msjro.dll\par [2010.06.25 12:51:17 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdatl3.dll\par [2010.06.25 12:51:17 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdaosp.dll\par [2010.06.25 12:51:17 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\oledb32r.dll\par [2010.06.25 12:51:17 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msxactps.dll\par [2010.06.25 12:51:17 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdatt.dll\par [2010.06.25 12:51:17 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdasqlr.dll\par [2010.06.25 12:51:17 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdaorar.dll\par [2010.06.25 12:51:17 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdaurl.dll\par [2010.06.25 12:51:17 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdasc.dll\par [2010.06.25 12:51:17 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdaer.dll\par [2010.06.25 12:51:17 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdaenum.dll\par [2010.06.25 12:51:17 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdadc.dll\par [2010.06.25 12:51:16 | 000,536,576 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msado15.dll\par [2010.06.25 12:51:16 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdaprst.dll\par [2010.06.25 12:51:16 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msadox.dll\par [2010.06.25 12:51:16 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msadomd.dll\par [2010.06.25 12:51:16 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdarem.dll\par [2010.06.25 12:51:16 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msado27.tlb\par [2010.06.25 12:51:16 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msado26.tlb\par [2010.06.25 12:51:16 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msado25.tlb\par [2010.06.25 12:51:16 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msado21.tlb\par [2010.06.25 12:51:16 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msado20.tlb\par [2010.06.25 12:51:16 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msadrh15.dll\par [2010.06.25 12:51:16 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msador15.dll\par [2010.06.25 12:51:16 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdfmap.dll\par [2010.06.25 12:51:16 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msader15.dll\par [2010.06.25 12:51:16 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdaremr.dll\par [2010.06.25 12:51:16 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdaprsr.dll\par [2010.06.25 12:51:15 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msadce.dll\par [2010.06.25 12:51:15 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msadds.dll\par [2010.06.25 12:51:15 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msadco.dll\par [2010.06.25 12:51:15 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msadcf.dll\par [2010.06.25 12:51:15 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msadcs.dll\par [2010.06.25 12:51:15 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msaddsr.dll\par [2010.06.25 12:51:15 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msadcer.dll\par [2010.06.25 12:51:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msadcor.dll\par [2010.06.25 12:51:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msadcfr.dll\par [2010.06.25 12:51:15 | 000,000,000 | ---D | C] -- C:\\Programme\\Gemeinsame Dateien\\System\par [2010.06.25 12:51:14 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iexplore.exe\par [2010.06.25 12:51:14 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\hmmapi.dll\par [2010.06.25 12:51:14 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\iedw.exe\par [2010.06.25 12:51:14 | 000,000,000 | ---D | C] -- C:\\Programme\\Internet Explorer\par [2010.06.25 12:51:13 | 000,000,000 | R--D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Dokumente\\Eigene Bilder\par [2010.06.25 12:50:43 | 000,000,000 | ---D | C] -- C:\\Programme\\ComPlus Applications\par [2010.06.25 12:50:37 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\Registration\par [2010.06.25 12:50:30 | 000,000,000 | R--D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Dokumente\\Eigene Musik\par [2010.06.25 12:50:30 | 000,000,000 | ---D | C] -- C:\\Programme\\Windows Media Player\par [2010.06.25 12:50:30 | 000,000,000 | ---D | C] -- C:\\Programme\\Online Services\par [2010.06.25 12:50:24 | 000,042,577 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\bckgzm.exe\par [2010.06.25 12:50:24 | 000,000,000 | ---D | C] -- C:\\Programme\\Messenger\par [2010.06.25 12:50:23 | 002,178,131 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\shvlres.dll\par [2010.06.25 12:50:23 | 001,817,687 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\bckgres.dll\par [2010.06.25 12:50:23 | 000,781,397 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\chkrres.dll\par [2010.06.25 12:50:23 | 000,753,236 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rvseres.dll\par [2010.06.25 12:50:23 | 000,082,501 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\bckg.dll\par [2010.06.25 12:50:23 | 000,066,113 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\shvl.dll\par [2010.06.25 12:50:23 | 000,048,706 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rvse.dll\par [2010.06.25 12:50:23 | 000,042,575 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\chkrzm.exe\par [2010.06.25 12:50:23 | 000,042,574 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rvsezm.exe\par [2010.06.25 12:50:23 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\shvlzm.exe\par [2010.06.25 12:50:23 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\hrtzzm.exe\par [2010.06.25 12:50:23 | 000,040,515 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\chkr.dll\par [2010.06.25 12:50:22 | 001,175,635 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\hrtzres.dll\par [2010.06.25 12:50:22 | 001,042,515 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cmnresm.dll\par [2010.06.25 12:50:22 | 000,217,160 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cmnclim.dll\par [2010.06.25 12:50:22 | 000,113,222 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\zoneclim.dll\par [2010.06.25 12:50:22 | 000,057,409 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\hrtz.dll\par [2010.06.25 12:50:22 | 000,041,029 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\zcorem.dll\par [2010.06.25 12:50:22 | 000,032,339 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\uniansi.dll\par [2010.06.25 12:50:22 | 000,013,894 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\zonelibm.dll\par [2010.06.25 12:50:22 | 000,004,677 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\zeeverm.dll\par [2010.06.25 12:50:21 | 000,036,937 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\zclientm.exe\par [2010.06.25 12:50:21 | 000,029,760 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\znetm.dll\par [2010.06.25 12:50:21 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\write.exe\par [2010.06.25 12:50:21 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\write.exe\par [2010.06.25 12:50:21 | 000,000,000 | ---D | C] -- C:\\Programme\\MSN Gaming Zone\par [2010.06.25 12:50:15 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\avtapi.dll\par [2010.06.25 12:50:15 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\avtapi.dll\par [2010.06.25 12:50:15 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\sndvol32.exe\par [2010.06.25 12:50:15 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sndvol32.exe\par [2010.06.25 12:50:15 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\avwav.dll\par [2010.06.25 12:50:15 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\avwav.dll\par [2010.06.25 12:50:15 | 000,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\\WINDOWS\\System32\\hticons.dll\par [2010.06.25 12:50:15 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\winchat.exe\par [2010.06.25 12:50:15 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\winchat.exe\par [2010.06.25 12:50:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\avmeter.dll\par [2010.06.25 12:50:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\avmeter.dll\par [2010.06.25 12:50:15 | 000,013,312 | ---- | C] (Hilgraeve, Inc.) -- C:\\WINDOWS\\System32\\dllcache\\htrn_jis.dll\par [2010.06.25 12:50:10 | 000,683,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\getuname.dll\par [2010.06.25 12:50:10 | 000,683,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\getuname.dll\par [2010.06.25 12:50:10 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\winmine.exe\par [2010.06.25 12:50:10 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\winmine.exe\par [2010.06.25 12:50:10 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\calc.exe\par [2010.06.25 12:50:10 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\calc.exe\par [2010.06.25 12:50:10 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\charmap.exe\par [2010.06.25 12:50:10 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\charmap.exe\par [2010.06.25 12:50:10 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\sol.exe\par [2010.06.25 12:50:10 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sol.exe\par [2010.06.25 12:50:09 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\mshearts.exe\par [2010.06.25 12:50:09 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mshearts.exe\par [2010.06.25 12:50:09 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\freecell.exe\par [2010.06.25 12:50:09 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\freecell.exe\par [2010.06.25 12:50:09 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\regini.exe\par [2010.06.25 12:50:09 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\regini.exe\par [2010.06.25 12:50:09 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\qwinsta.exe\par [2010.06.25 12:50:09 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\qwinsta.exe\par [2010.06.25 12:50:09 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\msg.exe\par [2010.06.25 12:50:09 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msg.exe\par [2010.06.25 12:50:09 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\tsshutdn.exe\par [2010.06.25 12:50:09 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tsshutdn.exe\par [2010.06.25 12:50:09 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\qappsrv.exe\par [2010.06.25 12:50:09 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\qappsrv.exe\par [2010.06.25 12:50:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\tskill.exe\par [2010.06.25 12:50:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tskill.exe\par [2010.06.25 12:50:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\rwinsta.exe\par [2010.06.25 12:50:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rwinsta.exe\par [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\tsdiscon.exe\par [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tsdiscon.exe\par [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\tscon.exe\par [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tscon.exe\par [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\shadow.exe\par [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\shadow.exe\par [2010.06.25 12:50:09 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\reset.exe\par [2010.06.25 12:50:09 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\reset.exe\par [2010.06.25 12:50:09 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\rdpcfgex.dll\par [2010.06.25 12:50:09 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rdpcfgex.dll\par [2010.06.25 12:50:08 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmi2xml.dll\par [2010.06.25 12:50:08 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mtsadmin.tlb\par [2010.06.25 12:50:08 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\logoff.exe\par [2010.06.25 12:50:08 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\logoff.exe\par [2010.06.25 12:50:08 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cdmodem.dll\par [2010.06.25 12:50:08 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\cdmodem.dll\par [2010.06.25 12:50:06 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmipicmp.dll\par [2010.06.25 12:50:06 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmimsg.dll\par [2010.06.25 12:50:06 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmitimep.dll\par [2010.06.25 12:50:05 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msiprov.dll\par [2010.06.25 12:50:05 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\dsprov.dll\par [2010.06.25 12:50:05 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\updprov.dll\par [2010.06.25 12:50:05 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tmplprov.dll\par [2010.06.25 12:50:05 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemdisp.tlb\par [2010.06.25 12:50:05 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\trnsprov.dll\par [2010.06.25 12:50:05 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\fwdprov.dll\par [2010.06.25 12:50:05 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\smtpcons.dll\par [2010.06.25 12:50:05 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemads.tlb\par [2010.06.25 12:50:05 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\winmgmtr.dll\par [2010.06.25 12:50:05 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\unsecapp.exe\par [2010.06.25 12:50:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\winmgmt.exe\par [2010.06.25 12:50:05 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemads.dll\par [2010.06.25 12:49:57 | 000,282,624 | ---- | C] (Cinematronics) -- C:\\WINDOWS\\System32\\dllcache\\pinball.exe\par [2010.06.25 12:49:57 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\accwiz.exe\par [2010.06.25 12:49:57 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\accwiz.exe\par [2010.06.25 12:49:57 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\access.cpl\par [2010.06.25 12:49:57 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\access.cpl\par [2010.06.25 12:49:57 | 000,000,000 | ---D | C] -- C:\\Programme\\MSN\par [2010.06.25 12:49:56 | 000,545,280 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\dialer.exe\par [2010.06.25 12:49:56 | 000,356,352 | ---- | C] (Hilgraeve, Inc.) -- C:\\WINDOWS\\System32\\hypertrm.dll\par [2010.06.25 12:49:56 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\mspaint.exe\par [2010.06.25 12:49:56 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mspaint.exe\par [2010.06.25 12:49:56 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\sndrec32.exe\par [2010.06.25 12:49:56 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sndrec32.exe\par [2010.06.25 12:49:56 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\mplay32.exe\par [2010.06.25 12:49:56 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mplay32.exe\par [2010.06.25 12:49:56 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\clipbrd.exe\par [2010.06.25 12:49:56 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\clipbrd.exe\par [2010.06.25 12:49:56 | 000,000,000 | ---D | C] -- C:\\Programme\\Windows NT\par [2010.06.25 12:49:55 | 000,539,136 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\spider.exe\par [2010.06.25 12:49:55 | 000,539,136 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\spider.exe\par [2010.06.25 12:49:55 | 000,139,656 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rdpwd.sys\par [2010.06.25 12:49:55 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\tscfgwmi.dll\par [2010.06.25 12:49:55 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tscfgwmi.dll\par [2010.06.25 12:49:55 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\tsgqec.dll\par [2010.06.25 12:49:55 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tsgqec.dll\par [2010.06.25 12:49:55 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tdtcp.sys\par [2010.06.25 12:49:55 | 000,012,040 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\tdpipe.sys\par [2010.06.25 12:49:54 | 002,061,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\lhmstscx.dll\par [2010.06.25 12:49:54 | 000,677,888 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\lhmstsc.exe\par [2010.06.25 12:49:54 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\rhttpaa.dll\par [2010.06.25 12:49:54 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rhttpaa.dll\par [2010.06.25 12:49:54 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\sessmgr.exe\par [2010.06.25 12:49:54 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\aaclient.dll\par [2010.06.25 12:49:54 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\aaclient.dll\par [2010.06.25 12:49:54 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\rdshost.exe\par [2010.06.25 12:49:54 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rdshost.exe\par [2010.06.25 12:49:54 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\remotepg.dll\par [2010.06.25 12:49:54 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\rdsaddin.exe\par [2010.06.25 12:49:54 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rdsaddin.exe\par [2010.06.25 12:49:53 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\termsrv.dll\par [2010.06.25 12:49:53 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\msdtcuiu.dll\par [2010.06.25 12:49:53 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdtcuiu.dll\par [2010.06.25 12:49:53 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\rdchost.dll\par [2010.06.25 12:49:53 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rdchost.dll\par [2010.06.25 12:49:53 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\mtxoci.dll\par [2010.06.25 12:49:53 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mtxoci.dll\par [2010.06.25 12:49:53 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\rdpwsx.dll\par [2010.06.25 12:49:53 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rdpwsx.dll\par [2010.06.25 12:49:53 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\rdpclip.exe\par [2010.06.25 12:49:53 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rdpclip.exe\par [2010.06.25 12:49:53 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cfgbkend.dll\par [2010.06.25 12:49:53 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\cfgbkend.dll\par [2010.06.25 12:49:53 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\qprocess.exe\par [2010.06.25 12:49:53 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\qprocess.exe\par [2010.06.25 12:49:53 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\rdpsnd.dll\par [2010.06.25 12:49:53 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\rdpsnd.dll\par [2010.06.25 12:49:53 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\icaapi.dll\par [2010.06.25 12:49:53 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\icaapi.dll\par [2010.06.25 12:49:53 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\MsDtc\par [2010.06.25 12:49:52 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\msdtctm.dll\par [2010.06.25 12:49:52 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdtctm.dll\par [2010.06.25 12:49:52 | 000,427,008 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\msdtcprx.dll\par [2010.06.25 12:49:52 | 000,427,008 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdtcprx.dll\par [2010.06.25 12:49:52 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\msdtclog.dll\par [2010.06.25 12:49:52 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdtclog.dll\par [2010.06.25 12:49:52 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\xolehlp.dll\par [2010.06.25 12:49:52 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\xolehlp.dll\par [2010.06.25 12:49:52 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\comrepl.exe\par [2010.06.25 12:49:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\msdtc.exe\par [2010.06.25 12:49:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\comrereg.exe\par [2010.06.25 12:49:51 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\catsrvut.dll\par [2010.06.25 12:49:51 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\catsrvut.dll\par [2010.06.25 12:49:51 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\comadmin.dll\par [2010.06.25 12:49:51 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\clbcatex.dll\par [2010.06.25 12:49:51 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\clbcatex.dll\par [2010.06.25 12:49:51 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\comrepl.dll\par [2010.06.25 12:49:51 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\comrepl.dll\par [2010.06.25 12:49:51 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\catsrvps.dll\par [2010.06.25 12:49:51 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\catsrvps.dll\par [2010.06.25 12:49:51 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\colbact.dll\par [2010.06.25 12:49:51 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\colbact.dll\par [2010.06.25 12:49:51 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\stclient.dll\par [2010.06.25 12:49:51 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\stclient.dll\par [2010.06.25 12:49:51 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\mtxlegih.dll\par [2010.06.25 12:49:51 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mtxlegih.dll\par [2010.06.25 12:49:51 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\mtxdm.dll\par [2010.06.25 12:49:51 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mtxdm.dll\par [2010.06.25 12:49:51 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\comaddin.dll\par [2010.06.25 12:49:51 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\comaddin.dll\par [2010.06.25 12:49:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\dcomcnfg.exe\par [2010.06.25 12:49:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dcomcnfg.exe\par [2010.06.25 12:49:51 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\mtxex.dll\par [2010.06.25 12:49:51 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mtxex.dll\par [2010.06.25 12:49:51 | 000,000,000 | ---D | C] -- C:\\WINDOWS\\System32\\Com\par [2010.06.25 12:49:50 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\comsvcs.dll\par [2010.06.25 12:49:50 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\comsvcs.dll\par [2010.06.25 12:49:50 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\comuid.dll\par [2010.06.25 12:49:50 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\comuid.dll\par [2010.06.25 12:49:50 | 000,498,688 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\clbcatq.dll\par [2010.06.25 12:49:50 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\catsrv.dll\par [2010.06.25 12:49:50 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\catsrv.dll\par [2010.06.25 12:49:50 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\comsnap.dll\par [2010.06.25 12:49:50 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\comsnap.dll\par [2010.06.25 12:49:49 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmisvc.dll\par [2010.06.25 12:49:49 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmiutils.dll\par [2010.06.25 12:49:49 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmipsess.dll\par [2010.06.25 12:49:48 | 000,370,176 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmic.exe\par [2010.06.25 12:49:48 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemess.dll\par [2010.06.25 12:49:48 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemupgd.dll\par [2010.06.25 12:49:48 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmiadap.exe\par [2010.06.25 12:49:48 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemdisp.dll\par [2010.06.25 12:49:48 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmipcima.dll\par [2010.06.25 12:49:48 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmiprov.dll\par [2010.06.25 12:49:48 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmidcprv.dll\par [2010.06.25 12:49:48 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmipdskq.dll\par [2010.06.25 12:49:48 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmiapsrv.exe\par [2010.06.25 12:49:48 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemtest.exe\par [2010.06.25 12:49:48 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmiaprpl.dll\par [2010.06.25 12:49:48 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmipjobj.dll\par [2010.06.25 12:49:48 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmipiprt.dll\par [2010.06.25 12:49:48 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmicookr.dll\par [2010.06.25 12:49:48 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemsvc.dll\par [2010.06.25 12:49:48 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemprox.dll\par [2010.06.25 12:49:48 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wmiapres.dll\par [2010.06.25 12:49:47 | 000,531,456 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemcore.dll\par [2010.06.25 12:49:47 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\provthrd.dll\par [2010.06.25 12:49:47 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemcomn.dll\par [2010.06.25 12:49:47 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\ntevt.dll\par [2010.06.25 12:49:47 | 000,201,216 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemcntl.dll\par [2010.06.25 12:49:47 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\repdrvfs.dll\par [2010.06.25 12:49:47 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\viewprov.dll\par [2010.06.25 12:49:47 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\policman.dll\par [2010.06.25 12:49:47 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\stdprov.dll\par [2010.06.25 12:49:47 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\wbemcons.dll\par [2010.06.25 12:49:47 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\scrcons.exe\par [2010.06.25 12:49:46 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\esscli.dll\par [2010.06.25 12:49:46 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\framedyn.dll\par [2010.06.25 12:49:46 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mofd.dll\par [2010.06.25 12:49:46 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\ncprov.dll\par [2010.06.25 12:49:46 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\krnlprov.dll\par [2010.06.25 12:49:46 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mofcomp.exe\par [2010.06.25 12:49:45 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cimwin32.dll\par [2010.06.25 12:49:45 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\cmprops.dll\par [2010.06.25 12:49:45 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\cmprops.dll\par [2010.06.25 12:49:45 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\licwmi.dll\par [2010.06.25 12:49:45 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\licwmi.dll\par [2010.06.25 12:49:45 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\servdeps.dll\par [2010.06.25 12:49:45 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\servdeps.dll\par [2010.06.25 12:49:45 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\mmfutil.dll\par [2010.06.25 12:49:45 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\\WINDOWS\\System32\\dllcache\\mmfutil.dll\par [2010.06.25 12:49:43 | 000,000,000 | R--D | C] -- C:\\Dokumente und Einstellungen\\All Users\\Dokumente\\Eigene Videos\par [6 C:\\WINDOWS\\*.tmp files -> C:\\WINDOWS\\*.tmp -> ]\par [1 C:\\WINDOWS\\System32\\*.tmp files -> C:\\WINDOWS\\System32\\*.tmp -> ]\par \par ========== Files - Modified Within 30 Days ==========\par \par [2010.07.04 18:02:05 | 000,000,248 | -H-- | M] () -- C:\\WINDOWS\\tasks\\\{62C40AA6-4406-467a-A5A5-DFDF1B559B7A\}.job\par [2010.07.04 17:02:39 | 000,723,744 | ---- | M] () -- C:\\WINDOWS\\System32\\PerfStringBackup.INI\par [2010.07.04 17:02:39 | 000,316,594 | ---- | M] () -- C:\\WINDOWS\\System32\\perfh007.dat\par [2010.07.04 17:02:39 | 000,311,604 | ---- | M] () -- C:\\WINDOWS\\System32\\perfh009.dat\par [2010.07.04 17:02:39 | 000,048,156 | ---- | M] () -- C:\\WINDOWS\\System32\\perfc007.dat\par [2010.07.04 17:02:39 | 000,039,992 | ---- | M] () -- C:\\WINDOWS\\System32\\perfc009.dat\par [2010.07.04 17:01:41 | 000,000,260 | ---- | M] () -- C:\\WINDOWS\\tasks\\WGASetup.job\par [2010.07.04 16:58:31 | 000,000,316 | -HS- | M] () -- C:\\WINDOWS\\tasks\\IPMBNRUO.job\par [2010.07.04 16:58:27 | 000,000,006 | -H-- | M] () -- C:\\WINDOWS\\tasks\\SA.DAT\par [2010.07.04 16:58:26 | 000,160,101 | ---- | M] () -- C:\\WINDOWS\\System32\\nvapps.xml\par [2010.07.04 16:58:23 | 000,002,048 | --S- | M] () -- C:\\WINDOWS\\bootstat.dat\par [2010.07.04 14:53:25 | 001,048,576 | -H-- | M] () -- C:\\Dokumente und Einstellungen\\Robert\\NTUSER.DAT\par [2010.07.04 14:53:25 | 000,000,190 | -HS- | M] () -- C:\\Dokumente und Einstellungen\\Robert\\ntuser.ini\par [2010.07.04 14:53:21 | 002,654,956 | -H-- | M] () -- C:\\Dokumente und Einstellungen\\Robert\\Lokale Einstellungen\\Anwendungsdaten\\IconCache.db\par [2010.07.04 14:52:39 | 1609,842,688 | ---- | M] () -- C:\\WINDOWS\\MEMORY.DMP\par [2010.07.04 14:05:39 | 000,012,328 | ---- | M] () -- C:\\Dokumente und Einstellungen\\Robert\\Lokale Einstellungen\\Anwendungsdaten\\GDIPFONTCACHEV1.DAT\par [2010.07.04 13:59:38 | 000,002,206 | ---- | M] () -- C:\\WINDOWS\\System32\\wpa.dbl\par [2010.07.04 13:59:22 | 000,090,296 | ---- | M] () -- C:\\WINDOWS\\System32\\FNTCACHE.DAT\par [2010.07.04 13:58:36 | 000,021,483 | ---- | M] () -- C:\\WINDOWS\\System32\\$winnt$.inf\par [2010.07.04 13:56:38 | 000,316,640 | ---- | M] () -- C:\\WINDOWS\\WMSysPr9.prx\par [2010.07.04 13:56:37 | 000,023,392 | ---- | M] () -- C:\\WINDOWS\\System32\\nscompat.tlb\par [2010.07.04 13:56:37 | 000,016,832 | ---- | M] () -- C:\\WINDOWS\\System32\\amcompat.tlb\par [2010.07.04 13:56:29 | 000,004,161 | ---- | M] () -- C:\\WINDOWS\\ODBCINST.INI\par [2010.07.04 13:55:52 | 000,000,488 | RH-- | M] () -- C:\\WINDOWS\\System32\\WindowsLogon.manifest\par [2010.07.04 13:55:52 | 000,000,488 | RH-- | M] () -- C:\\WINDOWS\\System32\\logonui.exe.manifest\par [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\\WINDOWS\\System32\\wuaucpl.cpl.manifest\par [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\\WINDOWS\\WindowsShell.Manifest\par [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\\WINDOWS\\System32\\sapi.cpl.manifest\par [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\\WINDOWS\\System32\\nwc.cpl.manifest\par [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\\WINDOWS\\System32\\ncpa.cpl.manifest\par [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\\WINDOWS\\System32\\cdplayer.exe.manifest\par [2010.07.04 13:55:39 | 000,000,477 | ---- | M] () -- C:\\WINDOWS\\win.ini\par [2010.07.04 13:54:51 | 000,022,880 | ---- | M] () -- C:\\WINDOWS\\System32\\emptyregdb.dat\par [2010.07.04 13:53:47 | 000,000,211 | -HS- | M] () -- C:\\boot.ini\par [2010.07.04 13:49:10 | 000,004,444 | ---- | M] () -- C:\\WINDOWS\\System32\\pid.PNF\par [2010.07.04 13:49:04 | 000,000,231 | ---- | M] () -- C:\\WINDOWS\\system.ini\par [2010.07.04 10:34:01 | 000,163,840 | ---- | M] () -- C:\\WINDOWS\\Tgifie.exe\par [2010.07.04 10:34:01 | 000,163,840 | ---- | M] () -- C:\\WINDOWS\\Tgifid.exe\par [2010.07.04 10:34:01 | 000,163,840 | ---- | M] () -- C:\\WINDOWS\\Tgific.exe\par [2010.07.04 10:34:01 | 000,163,840 | ---- | M] () -- C:\\WINDOWS\\Tgifib.exe\par [2010.07.04 10:33:59 | 000,163,840 | ---- | M] () -- C:\\WINDOWS\\Tgifia.exe\par [2010.07.04 10:33:57 | 000,209,408 | ---- | M] () -- C:\\WINDOWS\\System32\\sshnas21.dll\par [2010.07.01 15:49:13 | 000,273,307 | ---- | M] () -- C:\\WINDOWS\\setupapi.old\par [2010.07.01 15:40:39 | 000,063,488 | RHS- | M] () -- C:\\WINDOWS\\System32\\tlntsess7.dll\par [2010.07.01 15:26:58 | 000,002,239 | ---- | M] () -- C:\\Dokumente und Einstellungen\\Robert\\.recently-used.xbel\par [2010.06.30 22:26:12 | 000,001,374 | ---- | M] () -- C:\\WINDOWS\\imsins.BAK\par [2010.06.30 21:30:11 | 000,001,709 | ---- | M] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\Adobe Reader 9.lnk\par [2010.06.26 11:08:45 | 000,000,772 | ---- | M] () -- C:\\Dokumente und Einstellungen\\Robert\\Desktop\\Windows Media Player.lnk\par [2010.06.25 19:50:08 | 000,000,899 | ---- | M] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\Tactical Ops.lnk\par [2010.06.25 15:06:48 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\\WINDOWS\\System32\\deployJava1.dll\par [2010.06.25 15:06:48 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\\WINDOWS\\System32\\javaws.exe\par [2010.06.25 15:06:48 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\\WINDOWS\\System32\\javaw.exe\par [2010.06.25 15:06:48 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\\WINDOWS\\System32\\java.exe\par [2010.06.25 15:06:48 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\\WINDOWS\\System32\\javacpl.cpl\par [2010.06.25 15:02:50 | 000,001,451 | ---- | M] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\ICQ7.2.lnk\par [2010.06.25 13:19:09 | 000,000,778 | ---- | M] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\GIMP 2.lnk\par [2010.06.25 13:15:49 | 000,001,671 | ---- | M] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\Avira AntiVir Control Center.lnk\par [2010.06.25 13:10:17 | 000,000,000 | ---- | M] () -- C:\\WINDOWS\\nsreg.dat\par |
OTL Teil III (das ist dann jetz alles) [2010.06.25 13:10:10 | 000,001,566 | ---- | M] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\Mozilla Firefox.lnk\par [2010.06.25 13:08:05 | 000,000,906 | ---- | M] () -- C:\\Dokumente und Einstellungen\\Robert\\Desktop\\DVDVideoSoft Free Studio.lnk\par [2010.06.25 13:02:28 | 000,940,794 | ---- | M] () -- C:\\WINDOWS\\System32\\LoopyMusic.wav\par [2010.06.25 13:02:28 | 000,146,650 | ---- | M] () -- C:\\WINDOWS\\System32\\BuzzingBee.wav\par [2010.06.25 13:00:51 | 000,319,488 | ---- | M] (Realtek Semiconductor Corp.) -- C:\\WINDOWS\\HideWin.exe\par [2010.06.25 12:57:27 | 000,000,104 | ---- | M] () -- C:\\Dokumente und Einstellungen\\Robert\\Desktop\\Arbeitsplatz.lnk\par [2010.06.25 12:55:43 | 000,008,192 | ---- | M] () -- C:\\WINDOWS\\REGLOCS.OLD\par [2010.06.25 12:53:14 | 000,002,951 | ---- | M] () -- C:\\WINDOWS\\System32\\CONFIG.NT\par [2010.06.25 12:53:14 | 000,000,000 | RHS- | M] () -- C:\\MSDOS.SYS\par [2010.06.25 12:53:14 | 000,000,000 | RHS- | M] () -- C:\\IO.SYS\par [2010.06.25 12:53:14 | 000,000,000 | ---- | M] () -- C:\\WINDOWS\\control.ini\par [2010.06.25 12:53:14 | 000,000,000 | ---- | M] () -- C:\\CONFIG.SYS\par [2010.06.25 12:53:14 | 000,000,000 | ---- | M] () -- C:\\AUTOEXEC.BAT\par [2010.06.25 12:50:41 | 000,000,037 | ---- | M] () -- C:\\WINDOWS\\vbaddin.ini\par [2010.06.25 12:50:41 | 000,000,036 | ---- | M] () -- C:\\WINDOWS\\vb.ini\par [6 C:\\WINDOWS\\*.tmp files -> C:\\WINDOWS\\*.tmp -> ]\par [1 C:\\WINDOWS\\System32\\*.tmp files -> C:\\WINDOWS\\System32\\*.tmp -> ]\par \par ========== Files Created - No Company Name ==========\par \par [2010.07.04 14:04:20 | 000,163,840 | ---- | C] () -- C:\\WINDOWS\\Tgifie.exe\par [2010.07.04 14:04:14 | 000,163,840 | ---- | C] () -- C:\\WINDOWS\\Tgifid.exe\par [2010.07.04 13:58:27 | 000,028,288 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\xjis.nls\par [2010.07.04 13:58:03 | 000,083,748 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\prcp.nls\par [2010.07.04 13:58:03 | 000,083,748 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\prc.nls\par [2010.07.04 13:58:02 | 000,175,104 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\pintlcsa.dll\par [2010.07.04 13:57:48 | 000,047,066 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\ksc.nls\par [2010.07.04 13:57:47 | 001,158,818 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\korwbrkr.lex\par [2010.07.04 13:57:42 | 000,059,392 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\imscinst.exe\par [2010.07.04 13:57:41 | 000,196,665 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\imjpinst.exe\par [2010.07.04 13:57:39 | 000,134,339 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\imekr.lex\par [2010.07.04 13:57:33 | 013,463,552 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\hwxjpn.dll\par [2010.07.04 13:57:29 | 000,108,827 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\hanja.lex\par [2010.07.04 13:57:26 | 000,094,208 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\fpencode.dll\par [2010.07.04 13:57:16 | 000,173,568 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\chtskf.dll\par [2010.07.04 13:57:14 | 000,066,594 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_864.nls\par [2010.07.04 13:57:14 | 000,066,594 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_862.nls\par [2010.07.04 13:57:14 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_870.nls\par [2010.07.04 13:57:13 | 000,180,770 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20932.nls\par [2010.07.04 13:57:13 | 000,177,698 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20949.nls\par [2010.07.04 13:57:13 | 000,173,602 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20936.nls\par [2010.07.04 13:57:13 | 000,066,594 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_858.nls\par [2010.07.04 13:57:13 | 000,066,594 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_720.nls\par [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_708.nls\par [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_28596.nls\par [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_21027.nls\par [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_21025.nls\par [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20924.nls\par [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20880.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20871.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20838.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20833.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20424.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20423.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20420.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20297.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20290.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20285.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20284.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20280.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20278.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20277.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20273.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20269.nls\par [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20108.nls\par [2010.07.04 13:57:11 | 000,189,986 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1361.nls\par [2010.07.04 13:57:11 | 000,187,938 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20005.nls\par [2010.07.04 13:57:11 | 000,186,402 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20001.nls\par [2010.07.04 13:57:11 | 000,185,378 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20003.nls\par [2010.07.04 13:57:11 | 000,180,258 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20004.nls\par [2010.07.04 13:57:11 | 000,180,258 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20000.nls\par [2010.07.04 13:57:11 | 000,173,602 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20002.nls\par [2010.07.04 13:57:11 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20107.nls\par [2010.07.04 13:57:11 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20106.nls\par [2010.07.04 13:57:11 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20105.nls\par [2010.07.04 13:57:10 | 000,177,698 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_10003.nls\par [2010.07.04 13:57:10 | 000,173,602 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_10008.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1149.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1148.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1147.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1146.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1145.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1144.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1143.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1142.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1141.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1140.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_1047.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_10021.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_10005.nls\par [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_10004.nls\par [2010.07.04 13:57:09 | 000,195,618 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_10002.nls\par [2010.07.04 13:57:09 | 000,162,850 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_10001.nls\par [2010.07.04 13:57:09 | 000,082,172 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\bopomofo.nls\par [2010.07.04 13:57:09 | 000,066,728 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\big5.nls\par [2010.07.04 13:55:52 | 000,000,488 | RH-- | C] () -- C:\\WINDOWS\\System32\\logonui.exe.manifest\par [2010.07.04 13:55:48 | 000,000,749 | RH-- | C] () -- C:\\WINDOWS\\System32\\wuaucpl.cpl.manifest\par [2010.07.04 13:55:48 | 000,000,749 | RH-- | C] () -- C:\\WINDOWS\\WindowsShell.Manifest\par [2010.07.04 13:55:48 | 000,000,749 | RH-- | C] () -- C:\\WINDOWS\\System32\\sapi.cpl.manifest\par [2010.07.04 13:55:48 | 000,000,749 | RH-- | C] () -- C:\\WINDOWS\\System32\\nwc.cpl.manifest\par [2010.07.04 13:55:48 | 000,000,749 | RH-- | C] () -- C:\\WINDOWS\\System32\\ncpa.cpl.manifest\par [2010.07.04 13:48:45 | 002,039,179 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\NT5.CAT\par [2010.07.04 13:48:45 | 001,246,537 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\SP3.CAT\par [2010.07.04 13:48:45 | 000,817,199 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\NT5IIS.CAT\par [2010.07.04 13:48:45 | 000,399,645 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\MAPIMIG.CAT\par [2010.07.04 13:48:45 | 000,144,484 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\netfx.cat\par [2010.07.04 13:48:45 | 000,105,926 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\tabletpc.cat\par [2010.07.04 13:48:45 | 000,041,270 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\MW770.CAT\par [2010.07.04 13:48:45 | 000,034,747 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\mediactr.cat\par [2010.07.04 13:48:45 | 000,033,765 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\FP4.CAT\par [2010.07.04 13:48:45 | 000,021,771 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\msn7.cat\par [2010.07.04 13:48:45 | 000,016,825 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\IMS.CAT\par [2010.07.04 13:48:45 | 000,014,433 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\msn9.cat\par [2010.07.04 13:48:45 | 000,013,472 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\HPCRDP.CAT\par [2010.07.04 13:48:45 | 000,012,363 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\MSMSGS.CAT\par [2010.07.04 13:48:45 | 000,010,027 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\MSTSWEB.CAT\par [2010.07.04 13:48:45 | 000,008,574 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\IASNT4.CAT\par [2010.07.04 13:48:45 | 000,007,382 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\OEMBIOS.CAT\par [2010.07.04 13:48:44 | 000,631,338 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\NT5INF.CAT\par [2010.07.04 13:30:38 | 000,163,840 | ---- | C] () -- C:\\WINDOWS\\Tgific.exe\par [2010.07.04 12:23:40 | 000,163,840 | ---- | C] () -- C:\\WINDOWS\\Tgifib.exe\par [2010.07.04 10:34:03 | 000,163,840 | ---- | C] () -- C:\\WINDOWS\\Tgifia.exe\par [2010.07.04 10:34:00 | 000,000,248 | -H-- | C] () -- C:\\WINDOWS\\tasks\\\{62C40AA6-4406-467a-A5A5-DFDF1B559B7A\}.job\par [2010.07.04 10:33:57 | 000,209,408 | ---- | C] () -- C:\\WINDOWS\\System32\\sshnas21.dll\par [2010.07.01 15:40:39 | 000,063,488 | RHS- | C] () -- C:\\WINDOWS\\System32\\tlntsess7.dll\par [2010.07.01 15:40:39 | 000,000,316 | -HS- | C] () -- C:\\WINDOWS\\tasks\\IPMBNRUO.job\par [2010.07.01 15:26:58 | 000,002,239 | ---- | C] () -- C:\\Dokumente und Einstellungen\\Robert\\.recently-used.xbel\par [2010.07.01 15:02:35 | 000,012,148 | ---- | C] () -- C:\\Dokumente und Einstellungen\\Robert\\hs_err_pid2992.log\par [2010.06.30 21:28:01 | 000,001,709 | ---- | C] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\Adobe Reader 9.lnk\par [2010.06.30 00:18:14 | 000,000,260 | ---- | C] () -- C:\\WINDOWS\\tasks\\WGASetup.job\par [2010.06.29 20:34:56 | 000,014,089 | ---- | C] () -- C:\\Dokumente und Einstellungen\\Robert\\hs_err_pid2592.log\par [2010.06.27 09:24:38 | 000,000,772 | ---- | C] () -- C:\\Dokumente und Einstellungen\\Robert\\Desktop\\Windows Media Player.lnk\par [2010.06.25 19:50:08 | 000,000,899 | ---- | C] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\Tactical Ops.lnk\par [2010.06.25 15:02:50 | 000,001,451 | ---- | C] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\ICQ7.2.lnk\par [2010.06.25 14:41:20 | 000,000,211 | -HS- | C] () -- C:\\boot.ini\par [2010.06.25 14:41:17 | 000,021,483 | ---- | C] () -- C:\\WINDOWS\\System32\\$winnt$.inf\par [2010.06.25 14:37:48 | 1609,842,688 | ---- | C] () -- C:\\WINDOWS\\MEMORY.DMP\par [2010.06.25 13:47:35 | 000,004,444 | ---- | C] () -- C:\\WINDOWS\\System32\\pid.PNF\par [2010.06.25 13:44:47 | 000,001,374 | ---- | C] () -- C:\\WINDOWS\\imsins.BAK\par [2010.06.25 13:44:42 | 001,685,606 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\sam.spd\par [2010.06.25 13:44:42 | 000,605,050 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\r1033tts.lxa\par [2010.06.25 13:44:42 | 000,000,888 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\sam.sdf\par [2010.06.25 13:44:41 | 000,643,717 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\ltts1033.lxa\par [2010.06.25 13:44:39 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_28603.nls\par [2010.06.25 13:44:39 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\c_28603.nls\par [2010.06.25 13:44:38 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_28599.nls\par [2010.06.25 13:44:38 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\c_28599.nls\par [2010.06.25 13:44:36 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_28595.nls\par [2010.06.25 13:44:36 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\C_28595.NLS\par [2010.06.25 13:44:35 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_28597.nls\par [2010.06.25 13:44:35 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\C_28597.NLS\par [2010.06.25 13:44:34 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_28594.nls\par [2010.06.25 13:44:34 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\C_28594.NLS\par [2010.06.25 13:44:32 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\c_20127.nls\par [2010.06.25 13:44:32 | 000,066,082 | ---- | C] () -- C:\\WINDOWS\\System32\\c_20127.nls\par [2010.06.25 13:44:29 | 000,001,806 | ---- | C] () -- C:\\WINDOWS\\System32\\AUTOEXEC.NT\par [2010.06.25 13:42:41 | 000,007,334 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\wmerrenu.cat\par [2010.06.25 13:42:26 | 000,273,307 | ---- | C] () -- C:\\WINDOWS\\setupapi.old\par [2010.06.25 13:42:07 | 000,090,296 | ---- | C] () -- C:\\WINDOWS\\System32\\FNTCACHE.DAT\par [2010.06.25 13:19:09 | 000,000,778 | ---- | C] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\GIMP 2.lnk\par [2010.06.25 13:15:49 | 000,001,671 | ---- | C] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\Avira AntiVir Control Center.lnk\par [2010.06.25 13:10:17 | 000,000,000 | ---- | C] () -- C:\\WINDOWS\\nsreg.dat\par [2010.06.25 13:10:10 | 000,001,566 | ---- | C] () -- C:\\Dokumente und Einstellungen\\All Users\\Desktop\\Mozilla Firefox.lnk\par [2010.06.25 13:08:05 | 000,000,906 | ---- | C] () -- C:\\Dokumente und Einstellungen\\Robert\\Desktop\\DVDVideoSoft Free Studio.lnk\par [2010.06.25 13:02:28 | 000,940,794 | ---- | C] () -- C:\\WINDOWS\\System32\\LoopyMusic.wav\par [2010.06.25 13:02:28 | 000,146,650 | ---- | C] () -- C:\\WINDOWS\\System32\\BuzzingBee.wav\par [2010.06.25 13:01:06 | 000,000,553 | ---- | C] () -- C:\\WINDOWS\\USetup.iss\par [2010.06.25 12:59:41 | 000,160,101 | ---- | C] () -- C:\\WINDOWS\\System32\\nvapps.xml\par [2010.06.25 12:59:38 | 000,017,937 | ---- | C] () -- C:\\WINDOWS\\System32\\nvdisp.nvu\par [2010.06.25 12:59:03 | 000,000,659 | ---- | C] () -- C:\\WINDOWS\\System32\\nvsmu.nvu\par [2010.06.25 12:59:02 | 000,002,016 | ---- | C] () -- C:\\WINDOWS\\System32\\nvsmb.nvu\par [2010.06.25 12:57:27 | 000,000,104 | ---- | C] () -- C:\\Dokumente und Einstellungen\\Robert\\Desktop\\Arbeitsplatz.lnk\par [2010.06.25 12:56:46 | 000,000,190 | -HS- | C] () -- C:\\Dokumente und Einstellungen\\Robert\\ntuser.ini\par [2010.06.25 12:56:45 | 000,024,576 | -H-- | C] () -- C:\\Dokumente und Einstellungen\\Robert\\ntuser.dat.LOG\par [2010.06.25 12:56:44 | 001,048,576 | -H-- | C] () -- C:\\Dokumente und Einstellungen\\Robert\\NTUSER.DAT\par [2010.06.25 12:55:43 | 000,008,192 | ---- | C] () -- C:\\WINDOWS\\REGLOCS.OLD\par [2010.06.25 12:54:56 | 000,002,048 | --S- | C] () -- C:\\WINDOWS\\bootstat.dat\par [2010.06.25 12:53:14 | 000,002,951 | ---- | C] () -- C:\\WINDOWS\\System32\\CONFIG.NT\par [2010.06.25 12:53:14 | 000,000,000 | RHS- | C] () -- C:\\MSDOS.SYS\par [2010.06.25 12:53:14 | 000,000,000 | RHS- | C] () -- C:\\IO.SYS\par [2010.06.25 12:53:14 | 000,000,000 | ---- | C] () -- C:\\CONFIG.SYS\par [2010.06.25 12:53:14 | 000,000,000 | ---- | C] () -- C:\\AUTOEXEC.BAT\par [2010.06.25 12:53:11 | 000,023,392 | ---- | C] () -- C:\\WINDOWS\\System32\\nscompat.tlb\par [2010.06.25 12:53:11 | 000,016,832 | ---- | C] () -- C:\\WINDOWS\\System32\\amcompat.tlb\par [2010.06.25 12:53:10 | 000,316,640 | ---- | C] () -- C:\\WINDOWS\\WMSysPr9.prx\par [2010.06.25 12:52:26 | 000,000,488 | RH-- | C] () -- C:\\WINDOWS\\System32\\WindowsLogon.manifest\par [2010.06.25 12:52:22 | 000,000,749 | RH-- | C] () -- C:\\WINDOWS\\System32\\cdplayer.exe.manifest\par [2010.06.25 12:52:09 | 004,399,505 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\nls302en.lex\par [2010.06.25 12:51:58 | 000,048,680 | -HS- | C] () -- C:\\WINDOWS\\winnt256.bmp\par [2010.06.25 12:51:58 | 000,048,680 | -HS- | C] () -- C:\\WINDOWS\\winnt.bmp\par [2010.06.25 12:51:54 | 000,000,984 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\srframe.mmf\par [2010.06.25 12:51:26 | 000,380,416 | ---- | C] () -- C:\\WINDOWS\\System32\\dllcache\\msinfo.dll\par [2010.06.25 12:50:52 | 000,022,880 | ---- | C] () -- C:\\WINDOWS\\System32\\emptyregdb.dat\par [2010.06.25 12:50:12 | 000,065,832 | ---- | C] () -- C:\\WINDOWS\\Santa Fe-Stuck.bmp\par [2010.06.25 12:50:12 | 000,026,680 | ---- | C] () -- C:\\WINDOWS\\F\'e4cher.bmp\par [2010.06.25 12:50:12 | 000,009,522 | ---- | C] () -- C:\\WINDOWS\\Zapotek.bmp\par [2010.06.25 12:50:11 | 000,093,702 | ---- | C] () -- C:\\WINDOWS\\System32\\subrange.uce\par [2010.06.25 12:50:11 | 000,065,978 | ---- | C] () -- C:\\WINDOWS\\Seifenblase.bmp\par [2010.06.25 12:50:11 | 000,065,954 | ---- | C] () -- C:\\WINDOWS\\Pr\'e4riewind.bmp\par [2010.06.25 12:50:11 | 000,026,582 | ---- | C] () -- C:\\WINDOWS\\Granit.bmp\par [2010.06.25 12:50:11 | 000,017,362 | ---- | C] () -- C:\\WINDOWS\\Rhododendron.bmp\par [2010.06.25 12:50:11 | 000,017,336 | ---- | C] () -- C:\\WINDOWS\\Angler.bmp\par [2010.06.25 12:50:11 | 000,017,062 | ---- | C] () -- C:\\WINDOWS\\Kaffeetasse.bmp\par [2010.06.25 12:50:11 | 000,016,740 | ---- | C] () -- C:\\WINDOWS\\System32\\shiftjis.uce\par [2010.06.25 12:50:11 | 000,016,730 | ---- | C] () -- C:\\WINDOWS\\Feder.bmp\par [2010.06.25 12:50:11 | 000,012,876 | ---- | C] () -- C:\\WINDOWS\\System32\\korean.uce\par [2010.06.25 12:50:11 | 000,008,484 | ---- | C] () -- C:\\WINDOWS\\System32\\kanji_2.uce\par [2010.06.25 12:50:11 | 000,006,948 | ---- | C] () -- C:\\WINDOWS\\System32\\kanji_1.uce\par [2010.06.25 12:50:11 | 000,001,272 | ---- | C] () -- C:\\WINDOWS\\Blaue Spitzen 16.bmp\par [2010.06.25 12:50:10 | 000,060,458 | ---- | C] () -- C:\\WINDOWS\\System32\\ideograf.uce\par [2010.06.25 12:50:10 | 000,024,006 | ---- | C] () -- C:\\WINDOWS\\System32\\gb2312.uce\par [2010.06.25 12:50:10 | 000,022,984 | ---- | C] () -- C:\\WINDOWS\\System32\\bopomofo.uce\par [2010.06.25 12:50:09 | 000,003,286 | ---- | C] () -- C:\\WINDOWS\\System32\\tslabels.h\par [2010.06.25 12:50:09 | 000,001,237 | ---- | C] () -- C:\\WINDOWS\\System32\\usrlogon.cmd\par [2010.06.25 12:50:08 | 000,000,768 | ---- | C] () -- C:\\WINDOWS\\System32\\msdtcprf.h\par [2010.06.25 12:50:04 | 000,063,488 | ---- | C] () -- C:\\WINDOWS\\System32\\wmimgmt.msc\par [2008.03.19 17:04:00 | 001,703,936 | ---- | C] () -- C:\\WINDOWS\\System32\\nvwdmcpl.dll\par [2008.03.19 17:04:00 | 001,486,848 | ---- | C] () -- C:\\WINDOWS\\System32\\nview.dll\par [2008.03.19 17:04:00 | 001,019,904 | ---- | C] () -- C:\\WINDOWS\\System32\\nvwimg.dll\par [2008.03.19 17:04:00 | 000,466,944 | ---- | C] () -- C:\\WINDOWS\\System32\\nvshell.dll\par [2008.03.19 17:04:00 | 000,286,720 | ---- | C] () -- C:\\WINDOWS\\System32\\nvnt4cpl.dll\par \par ========== LOP Check ==========\par \par [2010.06.25 15:02:31 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\All Users\\Anwendungsdaten\\ICQ\par [2010.07.01 15:26:58 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\gtk-2.0\par [2010.07.04 18:22:16 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\ICQ\par [2010.07.03 23:01:40 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Utherverse\par [2010.07.04 16:58:31 | 000,000,316 | -HS- | M] () -- C:\\WINDOWS\\Tasks\\IPMBNRUO.job\par [2010.07.04 17:01:41 | 000,000,260 | ---- | M] () -- C:\\WINDOWS\\Tasks\\WGASetup.job\par [2010.07.04 18:02:05 | 000,000,248 | -H-- | M] () -- C:\\WINDOWS\\Tasks\\\{62C40AA6-4406-467a-A5A5-DFDF1B559B7A\}.job\par \par ========== Purity Check ==========\par \par \par \par ========== Custom Scans ==========\par \par \par < %ALLUSERSPROFILE%\\Application Data\\*. >\par \par < %ALLUSERSPROFILE%\\Application Data\\*.exe /s >\par \par < %APPDATA%\\*. >\par [2010.06.30 21:28:23 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Adobe\par [2010.06.25 13:36:43 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Avira\par [2010.07.01 15:26:58 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\gtk-2.0\par [2010.07.04 18:22:16 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\ICQ\par [2010.06.25 12:57:03 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Identities\par [2010.06.25 12:59:50 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\InstallShield\par [2010.06.25 14:37:36 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Macromedia\par [2010.07.04 10:12:28 | 000,000,000 | --SD | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Microsoft\par [2010.06.25 13:10:21 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Mozilla\par [2010.06.25 15:06:11 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Sun\par [2010.07.03 23:01:40 | 000,000,000 | ---D | M] -- C:\\Dokumente und Einstellungen\\Robert\\Anwendungsdaten\\Utherverse\par \par < %APPDATA%\\*.exe /s >\par \par < %SYSTEMDRIVE%\\*.exe >\par \par \par < MD5 for: AGP440.SYS >\par [2008.04.14 08:03:54 | 020,108,202 | ---- | M] () .cab file -- C:\\WINDOWS\\Driver Cache\\i386\\sp3.cab:AGP440.sys\par [2008.04.14 08:03:54 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\\WINDOWS\\system32\\drivers\\agp440.sys\par \par < MD5 for: ATAPI.SYS >\par [2008.04.14 08:03:54 | 020,108,202 | ---- | M] () .cab file -- C:\\WINDOWS\\Driver Cache\\i386\\sp3.cab:atapi.sys\par [2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\\WINDOWS\\system32\\drivers\\atapi.sys\par \par < MD5 for: EVENTLOG.DLL >\par [2008.04.14 07:52:12 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\\WINDOWS\\system32\\dllcache\\eventlog.dll\par [2008.04.14 07:52:12 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\\WINDOWS\\system32\\eventlog.dll\par \par < MD5 for: NETLOGON.DLL >\par [2008.04.14 07:52:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\\WINDOWS\\system32\\dllcache\\netlogon.dll\par [2008.04.14 07:52:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\\WINDOWS\\system32\\netlogon.dll\par \par < MD5 for: SCECLI.DLL >\par [2008.04.14 07:52:24 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\\WINDOWS\\system32\\dllcache\\scecli.dll\par [2008.04.14 07:52:24 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\\WINDOWS\\system32\\scecli.dll\par \par < MD5 for: USERINIT.EXE >\par [2008.04.14 07:53:04 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\\WINDOWS\\system32\\dllcache\\userinit.exe\par [2008.04.14 07:53:04 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\\WINDOWS\\system32\\userinit.exe\par \par < MD5 for: WS2IFSL.SYS >\par [2001.08.18 12:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\\WINDOWS\\system32\\dllcache\\ws2ifsl.sys\par [2001.08.18 12:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\\WINDOWS\\system32\\drivers\\ws2ifsl.sys\par \par < %systemroot%\\system32\\drivers\\*.sys /lockedfiles >\par \par < %systemroot%\\System32\\config\\*.sav >\par [2010.07.04 15:47:09 | 000,262,144 | ---- | M] () -- C:\\WINDOWS\\system32\\config\\default.sav\par [2010.07.04 13:35:13 | 000,262,144 | ---- | M] () -- C:\\WINDOWS\\system32\\config\\security.sav\par [2010.07.04 15:47:09 | 011,010,048 | ---- | M] () -- C:\\WINDOWS\\system32\\config\\software.sav\par [2010.07.04 15:47:11 | 003,932,160 | ---- | M] () -- C:\\WINDOWS\\system32\\config\\system.sav\par \par < %systemroot%\\*. /mp /s >\par \par < %systemroot%\\system32\\*.dll /lockedfiles >\par [2008.04.14 07:52:10 | 001,267,200 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- C:\\WINDOWS\\system32\\comsvcs.dll\par [2010.07.01 15:40:39 | 000,063,488 | RHS- | M] () Unable to obtain MD5 -- C:\\WINDOWS\\system32\\tlntsess7.dll\par [1 C:\\WINDOWS\\system32\\*.tmp files -> C:\\WINDOWS\\system32\\*.tmp -> ]\par < End of report >\par } |
bitte erstelle und poste ein combofix log. Ein Leitfaden und Tutorium zur Nutzung von ComboFix |
LOG Combofix Logfile: Code: ComboFix 10-07-03.06 - Robert 04.07.2010 20:26:01.1.2 - x86 |
rechtsklick avira schirm, guard deaktivieren. dan öffne arbeitsplatz, c: dort suche qoobox, rechtsklick, zu qoobox.rar oder zip hinzufügen, dieses archiv hochladen: http://www.trojaner-board.de/54791-a...ner-board.html wie unter punkt2 beschrieben, gib bescheid wenn fertig. downloade dann malwarebytes. http://www.trojaner-board.de/51187-anleitung-malwarebytes-anti-malware.html instalieren, öffnen, registerkarte aktualisierung, programm updaten, registerkarte scanner, komplett scan, funde löschen, log posten, avira einschalten. |
mbam-log Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 4275 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 04.07.2010 21:39:25 mbam-log-2010-07-04 (21-39-25).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Durchsuchte Objekte: 132626 Laufzeit: 7 Minute(n), 56 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 1 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: HKEY_CURRENT_USER\SOFTWARE\VO3N0SLJ2I (Trojan.FakeAlert) -> Quarantined and deleted successfully. Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
poste mal bitte ne neue otl.txt die extras benötige ich nicht |
Neue OTL Teil I OTL logfile created on: 05.07.2010 11:02:50 - Run 3 OTL by OldTimer - Version 3.2.7.0 Folder = C:\Dokumente und Einstellungen\Robert\Eigene Dateien\Downloads Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 69,00% Memory free 3,00 Gb Paging File | 3,00 Gb Available in Paging File | 89,00% Paging File free Paging file location(s): c:\pagefile.sys 2046 8000 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 465,75 Gb Total Space | 454,93 Gb Free Space | 97,68% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: SCHORSCH Current User Name: Robert Logged in as Administrator. Current Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\Robert\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Programme\ICQ6Toolbar\ICQ Service.exe () PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Dokumente und Einstellungen\Robert\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (ICQ Service) -- C:\Programme\ICQ6Toolbar\ICQ Service.exe () SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) ========== Driver Services (SafeList) ========== DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH) DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH) DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH) DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.) DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider) DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation) DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation ) DRV - (NVHDA) -- C:\WINDOWS\system32\drivers\nvhda32.sys (NVIDIA Corporation) DRV - (nvsmu) -- C:\WINDOWS\system32\drivers\nvsmu.sys (NVIDIA Corporation) DRV - (BIOS) -- C:\WINDOWS\system32\drivers\BIOS.sys (BIOSTAR Group) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1123561945-884357618-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ IE - HKU\S-1-5-21-1123561945-884357618-725345543-1003\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKU\S-1-5-21-1123561945-884357618-725345543-1003\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKU\S-1-5-21-1123561945-884357618-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "hxxp://google.de/" FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:2.0.0.4 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.4&q=" FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.06.27 12:49:07 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.5.10\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.06.30 21:30:10 | 000,000,000 | ---D | M] [2010.06.25 13:10:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Mozilla\Extensions [2010.07.04 19:27:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Mozilla\Firefox\Profiles\yojnk6bd.default\extensions [2010.06.25 15:02:34 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Mozilla\Firefox\Profiles\yojnk6bd.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2010.06.30 21:26:27 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Mozilla\Firefox\Profiles\yojnk6bd.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} [2010.06.30 21:26:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Mozilla\Firefox\Profiles\yojnk6bd.default\extensions\staged-xpis [2010.06.25 15:02:34 | 000,000,168 | ---- | M] () -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Mozilla\Firefox\Profiles\yojnk6bd.default\searchplugins\icqplugin.gif [2010.06.25 15:02:34 | 000,000,618 | ---- | M] () -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Mozilla\Firefox\Profiles\yojnk6bd.default\searchplugins\icqplugin.src [2010.07.02 17:42:24 | 000,001,069 | ---- | M] () -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Mozilla\Firefox\Profiles\yojnk6bd.default\searchplugins\icqplugin.xml [2010.07.04 19:27:52 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2010.06.25 15:06:54 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010.06.25 15:06:48 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll [2010.06.27 12:49:04 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.06.27 12:49:04 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010.06.27 12:49:04 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.06.27 12:49:04 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.06.27 12:49:04 | 000,000,801 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2010.07.04 20:28:54 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ) O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1123561945-884357618-725345543-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKU\S-1-5-21-1123561945-884357618-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKU\S-1-5-21-1123561945-884357618-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKU\S-1-5-21-1123561945-884357618-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2010.06.25 12:53:14 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs: 6to4 - File not found NetSvcs: Ias - C:\WINDOWS\system32\ias [2010.07.04 15:43:56 | 000,000,000 | ---D | M] NetSvcs: Iprip - File not found NetSvcs: Irmon - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: WmdmPmSp - File not found SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: SCSI Class - Driver Group SafeBootMin: sermouse.sys - Driver SafeBootMin: System Bus Extender - Driver Group SafeBootMin: vga.sys - Driver SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: SCSI Class - Driver Group SafeBootNet: sermouse.sys - Driver SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TDI - Driver Group SafeBootNet: vga.sys - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML) ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4 ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offlinebrowsingpaket ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer-Hilfe ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7 ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsererweiterungen ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - Zugang zu MSN Site ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - %SystemRoot%\system32\ie4uinit.exe ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML-Datenbindung ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} - ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer-Hauptschriftarten ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML-Hilfe ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation) Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.) Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.) Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.) Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll () Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll () Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation) Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation) CREATERESTOREPOINT Restore point Set: OTL Restore Point (16902109354000384) ========== Files/Folders - Created Within 30 Days ========== [2010.07.05 10:57:23 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2010.07.04 21:30:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Malwarebytes [2010.07.04 21:30:00 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.07.04 21:29:58 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.07.04 21:29:58 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2010.07.04 21:29:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2010.07.04 20:25:34 | 000,000,000 | RHSD | C] -- C:\cmdcons [2010.07.04 20:24:52 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2010.07.04 20:24:52 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2010.07.04 20:24:52 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2010.07.04 20:24:52 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2010.07.04 20:24:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2010.07.04 20:24:48 | 000,000,000 | ---D | C] -- C:\ComboFix [2010.07.04 20:23:37 | 000,000,000 | ---D | C] -- C:\Qoobox [2010.07.04 17:57:33 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss [2010.07.04 17:50:20 | 000,000,000 | ---D | C] -- C:\VundoFix Backups [2010.07.04 13:59:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch [2010.07.04 13:58:22 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winzm.ime [2010.07.04 13:58:22 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winsp.ime [2010.07.04 13:58:22 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winpy.ime [2010.07.04 13:58:22 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winime.ime [2010.07.04 13:58:21 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winar30.ime [2010.07.04 13:58:21 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wingb.ime [2010.07.04 13:58:21 | 000,041,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.dll [2010.07.04 13:58:21 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\weitekp9.sys [2010.07.04 13:58:20 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svc.dll [2010.07.04 13:58:20 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wam51.dll [2010.07.04 13:58:20 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ext.dll [2010.07.04 13:58:20 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamreg51.dll [2010.07.04 13:58:20 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamps51.dll [2010.07.04 13:58:20 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3svapi.dll [2010.07.04 13:58:19 | 000,426,041 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicepad.dll [2010.07.04 13:58:19 | 000,086,073 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\voicesub.dll [2010.07.04 13:58:19 | 000,048,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32.dll [2010.07.04 13:58:19 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w3ctrs51.dll [2010.07.04 13:58:17 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uihelper.dll [2010.07.04 13:58:17 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniime.dll [2010.07.04 13:58:17 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unicdime.ime [2010.07.04 13:58:17 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsprof.exe [2010.07.04 13:58:16 | 000,571,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlgnt.ime [2010.07.04 13:58:16 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintsetp.exe [2010.07.04 13:58:16 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tintlphr.exe [2010.07.04 13:58:16 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tools.dll [2010.07.04 13:58:16 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmigrate.dll [2010.07.04 13:58:15 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\thawbrkr.dll [2010.07.04 13:58:15 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdipx.sys [2010.07.04 13:58:15 | 000,019,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdspx.sys [2010.07.04 13:58:15 | 000,013,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdasync.sys [2010.07.04 13:58:14 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\svcext51.dll [2010.07.04 13:58:14 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\status.dll [2010.07.04 13:58:13 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srusbusd.dll [2010.07.04 13:58:13 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sspifilt.dll [2010.07.04 13:58:13 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ssinc51.dll [2010.07.04 13:58:12 | 000,143,422 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\softkey.dll [2010.07.04 13:58:12 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpthrd.dll [2010.07.04 13:58:12 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpstup.dll [2010.07.04 13:58:12 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmptrap.exe [2010.07.04 13:58:12 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll [2010.07.04 13:58:11 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpsvc.dll [2010.07.04 13:58:11 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpincl.dll [2010.07.04 13:58:11 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpcl.dll [2010.07.04 13:58:11 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpsmir.dll [2010.07.04 13:58:11 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmp.exe [2010.07.04 13:58:11 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll [2010.07.04 13:58:11 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\snmpmib.dll [2010.07.04 13:58:10 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smi2smir.exe [2010.07.04 13:58:10 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm9aw.dll [2010.07.04 13:58:10 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smb6w.dll [2010.07.04 13:58:10 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sma3w.dll [2010.07.04 13:58:10 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm93w.dll [2010.07.04 13:58:10 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm92w.dll [2010.07.04 13:58:10 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm90w.dll [2010.07.04 13:58:10 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8dw.dll [2010.07.04 13:58:10 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsm.dll [2010.07.04 13:58:10 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpapi.dll [2010.07.04 13:58:10 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smimsgif.dll [2010.07.04 13:58:10 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smierrsy.dll [2010.07.04 13:58:09 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm87w.dll [2010.07.04 13:58:09 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm81w.dll [2010.07.04 13:58:09 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8cw.dll [2010.07.04 13:58:09 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm8aw.dll [2010.07.04 13:58:09 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm89w.dll [2010.07.04 13:58:09 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sm59w.dll [2010.07.04 13:58:09 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\simptcp.dll [2010.07.04 13:58:07 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\seo.dll [2010.07.04 13:58:07 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_scripto.dll [2010.07.04 13:58:07 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_seos.dll [2010.07.04 13:58:06 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia330.dll [2010.07.04 13:58:06 | 000,081,408 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rwia001.dll [2010.07.04 13:58:06 | 000,029,184 | ---- | C] (Ricoh Co., Ltd.) -- C:\WINDOWS\System32\dllcache\rw330ext.dll [2010.07.04 13:58:06 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rw001ext.dll [2010.07.04 13:58:06 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rwnh.dll [2010.07.04 13:58:06 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rpcref.dll [2010.07.04 13:58:05 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\romanime.ime [2010.07.04 13:58:05 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe [2010.07.04 13:58:05 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\register.exe [2010.07.04 13:58:04 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quick.ime [2010.07.04 13:58:04 | 000,020,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ramdisk.sys [2010.07.04 13:58:04 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quser.exe [2010.07.04 13:58:04 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\query.exe [2010.07.04 13:58:03 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxviceo.dll [2010.07.04 13:58:03 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxmcro.dll [2010.07.04 13:58:03 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pwsdata.dll [2010.07.04 13:58:02 | 000,482,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlgnt.ime [2010.07.04 13:58:02 | 000,079,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\phon.ime [2010.07.04 13:58:02 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlphr.exe [2010.07.04 13:58:02 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmigrate.dll [2010.07.04 13:58:02 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pintlcsd.dll [2010.07.04 13:58:02 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\permchk.dll [2010.07.04 13:58:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pmxgl.dll [2010.07.04 13:58:01 | 000,036,927 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs411.dll [2010.07.04 13:58:01 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pagecnt.dll [2010.07.04 13:58:01 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs404.dll [2010.07.04 13:58:01 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs804.dll [2010.07.04 13:58:01 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\padrs412.dll [2010.07.04 13:57:59 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nsepm.dll [2010.07.04 13:57:59 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll [2010.07.04 13:57:58 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nextlink.dll [2010.07.04 13:57:57 | 000,229,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\multibox.dll [2010.07.04 13:57:57 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtstocom.exe [2010.07.04 13:57:55 | 001,875,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.lex [2010.07.04 13:57:55 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msir3jp.dll [2010.07.04 13:57:50 | 000,092,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.sys [2010.07.04 13:57:50 | 000,092,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mga.dll [2010.07.04 13:57:50 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\metada51.dll [2010.07.04 13:57:50 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mdsync.dll [2010.07.04 13:57:50 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migregdb.exe [2010.07.04 13:57:49 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll [2010.07.04 13:57:49 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\md5filt.dll [2010.07.04 13:57:49 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lprmon.dll [2010.07.04 13:57:48 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lmmib2.dll [2010.07.04 13:57:48 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lpdsvc.dll [2010.07.04 13:57:48 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logscrpt.dll [2010.07.04 13:57:48 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lonsint.dll [2010.07.04 13:57:47 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\korwbrkr.dll [2010.07.04 13:57:47 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdvntc.dll [2010.07.04 13:57:47 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdusa.dll [2010.07.04 13:57:47 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdurdu.dll [2010.07.04 13:57:46 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecat.dll [2010.07.04 13:57:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnecnt.dll [2010.07.04 13:57:46 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdnec95.dll [2010.07.04 13:57:46 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41a.dll [2010.07.04 13:57:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth3.dll [2010.07.04 13:57:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth2.dll [2010.07.04 13:57:46 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdlk41j.dll [2010.07.04 13:57:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth1.dll [2010.07.04 13:57:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdth0.dll [2010.07.04 13:57:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr2.dll [2010.07.04 13:57:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdsyr1.dll |
OTL Teil II [2010.07.04 13:57:46 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintel.dll [2010.07.04 13:57:45 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdibm02.dll [2010.07.04 13:57:45 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinpun.dll [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdintam.dll [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinmar.dll [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinkan.dll [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinhin.dll [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdinguj.dll [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdindev.dll [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdheb.dll [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdfa.dll [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv2.dll [2010.07.04 13:57:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbddiv1.dll [2010.07.04 13:57:45 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdgeo.dll [2010.07.04 13:57:44 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jupiw.dll [2010.07.04 13:57:44 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iwrps.dll [2010.07.04 13:57:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdax2.dll [2010.07.04 13:57:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd106n.dll [2010.07.04 13:57:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101a.dll [2010.07.04 13:57:44 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbd101.dll [2010.07.04 13:57:44 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda3.dll [2010.07.04 13:57:44 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda2.dll [2010.07.04 13:57:44 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbda1.dll [2010.07.04 13:57:44 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarmw.dll [2010.07.04 13:57:44 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kbdarme.dll [2010.07.04 13:57:43 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iprip.dll [2010.07.04 13:57:43 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iscomlog.dll [2010.07.04 13:57:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isapips.dll [2010.07.04 13:57:42 | 000,471,102 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskdic.dll [2010.07.04 13:57:42 | 000,315,455 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imskf.dll [2010.07.04 13:57:42 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infocomm.dll [2010.07.04 13:57:42 | 000,102,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imlang.dll [2010.07.04 13:57:42 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetin51.exe [2010.07.04 13:57:42 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoctrs.dll [2010.07.04 13:57:41 | 000,307,257 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.exe [2010.07.04 13:57:41 | 000,274,489 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputyc.dll [2010.07.04 13:57:41 | 000,262,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjputy.exe [2010.07.04 13:57:41 | 000,233,527 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjprw.exe [2010.07.04 13:57:41 | 000,208,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpmig.exe [2010.07.04 13:57:41 | 000,155,705 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdsvr.exe [2010.07.04 13:57:41 | 000,081,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdct.dll [2010.07.04 13:57:41 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imkrinst.exe [2010.07.04 13:57:41 | 000,057,398 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpdadm.exe [2010.07.04 13:57:41 | 000,045,109 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpuex.exe [2010.07.04 13:57:40 | 000,811,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81k.dll [2010.07.04 13:57:40 | 000,716,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcus.dll [2010.07.04 13:57:40 | 000,368,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjpcic.dll [2010.07.04 13:57:40 | 000,340,023 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imjp81.ime [2010.07.04 13:57:40 | 000,311,359 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsv.exe [2010.07.04 13:57:40 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrcic.dll [2010.07.04 13:57:40 | 000,102,463 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imepadsm.dll [2010.07.04 13:57:40 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmbx.dll [2010.07.04 13:57:40 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekrmig.exe [2010.07.04 13:57:39 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iische51.dll [2010.07.04 13:57:39 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\imekr61.ime [2010.07.04 13:57:39 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iislog51.dll [2010.07.04 13:57:39 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisclex4.dll [2010.07.04 13:57:39 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisadmin.dll [2010.07.04 13:57:39 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iiscrmap.dll [2010.07.04 13:57:39 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisfecnv.dll [2010.07.04 13:57:39 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iissync.exe [2010.07.04 13:57:39 | 000,003,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismui.dll [2010.07.04 13:57:36 | 010,129,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxkor.dll [2010.07.04 13:57:30 | 010,096,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hwxcht.dll [2010.07.04 13:57:30 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpext.dll [2010.07.04 13:57:30 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpod51.dll [2010.07.04 13:57:30 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpmb51.dll [2010.07.04 13:57:29 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hostmib.dll [2010.07.04 13:57:29 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hanjadic.dll [2010.07.04 13:57:29 | 000,032,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gzip.dll [2010.07.04 13:57:28 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsxp32.dll [2010.07.04 13:57:28 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxstiff.dll [2010.07.04 13:57:28 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssvc.exe [2010.07.04 13:57:28 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxst30.dll [2010.07.04 13:57:28 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxswzrd.dll [2010.07.04 13:57:28 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsui.dll [2010.07.04 13:57:27 | 000,563,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsst.dll [2010.07.04 13:57:27 | 000,285,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscomex.dll [2010.07.04 13:57:27 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscover.exe [2010.07.04 13:57:27 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclnt.exe [2010.07.04 13:57:27 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsclntr.dll [2010.07.04 13:57:27 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscom.dll [2010.07.04 13:57:27 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsevent.dll [2010.07.04 13:57:27 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsroute.dll [2010.07.04 13:57:27 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsdrv.dll [2010.07.04 13:57:27 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsmon.dll [2010.07.04 13:57:27 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsext32.dll [2010.07.04 13:57:27 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxssend.exe [2010.07.04 13:57:27 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsperf.dll [2010.07.04 13:57:27 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsres.dll [2010.07.04 13:57:26 | 000,451,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxsapi.dll [2010.07.04 13:57:26 | 000,125,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpsv251.dll [2010.07.04 13:57:26 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fxscfgwz.dll [2010.07.04 13:57:26 | 000,024,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmcgi.exe [2010.07.04 13:57:26 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpadmdll.dll [2010.07.04 13:57:26 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpctrs2.dll [2010.07.04 13:57:26 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpmib.dll [2010.07.04 13:57:26 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftlx041e.dll [2010.07.04 13:57:25 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll [2010.07.04 13:57:25 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\flattemp.exe [2010.07.04 13:57:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\exstrace.dll [2010.07.04 13:57:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\f3ahvoas.dll [2010.07.04 13:57:24 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntagnt.dll [2010.07.04 13:57:24 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntwin.exe [2010.07.04 13:57:24 | 000,057,856 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esuimgd.dll [2010.07.04 13:57:24 | 000,045,568 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esunid.dll [2010.07.04 13:57:24 | 000,031,744 | ---- | C] (SEIKO EPSON CORP.) -- C:\WINDOWS\System32\dllcache\esucmd.dll [2010.07.04 13:57:24 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\evntcmd.exe [2010.07.04 13:57:24 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\et4000.sys [2010.07.04 13:57:20 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dayi.ime [2010.07.04 13:57:19 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\davcdata.exe [2010.07.04 13:57:18 | 000,057,399 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cplexe.exe [2010.07.04 13:57:18 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\convlog.exe [2010.07.04 13:57:18 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\controt.dll [2010.07.04 13:57:18 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\counters.dll [2010.07.04 13:57:18 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cprofile.exe [2010.07.04 13:57:17 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintsetp.exe [2010.07.04 13:57:17 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintime.dll [2010.07.04 13:57:17 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\compfilt.dll [2010.07.04 13:57:17 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cintlgnt.ime [2010.07.04 13:57:16 | 001,677,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chsbrkr.dll [2010.07.04 13:57:16 | 000,838,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtbrkr.dll [2010.07.04 13:57:16 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtmbx.dll [2010.07.04 13:57:16 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chtskdic.dll [2010.07.04 13:57:15 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chajei.ime [2010.07.04 13:57:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgport.exe [2010.07.04 13:57:15 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chgusr.exe [2010.07.04 13:57:15 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chglogon.exe [2010.07.04 13:57:15 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\change.exe [2010.07.04 13:57:14 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_g18030.dll [2010.07.04 13:57:14 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -- C:\WINDOWS\System32\dllcache\cap7146.sys [2010.07.04 13:57:14 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_iscii.dll [2010.07.04 13:57:14 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\c_is2022.dll [2010.07.04 13:57:09 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\browscap.dll [2010.07.04 13:57:08 | 000,374,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asp51.dll [2010.07.04 13:57:08 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\asptxn.dll [2010.07.04 13:57:08 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aspperf.dll [2010.07.04 13:57:08 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\authfilt.dll [2010.07.04 13:57:07 | 000,334,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aqueue.dll [2010.07.04 13:57:07 | 000,110,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\appconf.dll [2010.07.04 13:57:07 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll [2010.07.04 13:57:07 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0804.dll [2010.07.04 13:57:07 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0412.dll [2010.07.04 13:57:06 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0411.dll [2010.07.04 13:57:06 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040d.dll [2010.07.04 13:57:06 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0404.dll [2010.07.04 13:57:06 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0401.dll [2010.07.04 13:57:06 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll [2010.07.04 13:57:05 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adrot.dll [2010.07.04 13:57:05 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admexs.dll [2010.07.04 13:57:05 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admxprox.dll [2010.07.04 13:57:03 | 000,032,827 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptest.exe [2010.07.04 13:57:03 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tcptsat.dll [2010.07.04 13:57:03 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wamregps.dll [2010.07.04 13:57:02 | 002,134,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpsnap.dll [2010.07.04 13:57:02 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpadm.dll [2010.07.04 13:57:02 | 000,020,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.dll [2010.07.04 13:57:02 | 000,016,437 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shtml.exe [2010.07.04 13:57:02 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\staxmem.dll [2010.07.04 13:56:59 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logui.ocx [2010.07.04 13:56:58 | 000,847,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetmgr.dll [2010.07.04 13:56:58 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisui.dll [2010.07.04 13:56:58 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrtl.dll [2010.07.04 13:56:58 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isatq.dll [2010.07.04 13:56:58 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetsloc.dll [2010.07.04 13:56:58 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\infoadmn.dll [2010.07.04 13:56:58 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetmgr.exe [2010.07.04 13:56:57 | 000,598,071 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmc.dll [2010.07.04 13:56:57 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpmmcsat.dll [2010.07.04 13:56:57 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisext51.dll [2010.07.04 13:56:57 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iismap.dll [2010.07.04 13:56:57 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrstas.exe [2010.07.04 13:56:57 | 000,020,541 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpexedll.dll [2010.07.04 13:56:57 | 000,020,538 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpremadm.exe [2010.07.04 13:56:57 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisreset.exe [2010.07.04 13:56:57 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ftpsapi2.dll [2010.07.04 13:56:57 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iisrstap.dll [2010.07.04 13:56:56 | 000,876,653 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awel.dll [2010.07.04 13:56:56 | 000,188,494 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fpcount.exe [2010.07.04 13:56:56 | 000,184,435 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4amsft.dll [2010.07.04 13:56:56 | 000,147,513 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4apws.dll [2010.07.04 13:56:56 | 000,109,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98swin.exe [2010.07.04 13:56:56 | 000,102,509 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4atxt.dll [2010.07.04 13:56:56 | 000,082,035 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4anscp.dll [2010.07.04 13:56:56 | 000,049,212 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4awebs.dll [2010.07.04 13:56:56 | 000,049,210 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4areg.dll [2010.07.04 13:56:56 | 000,041,020 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avnb.dll [2010.07.04 13:56:56 | 000,032,826 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4avss.dll [2010.07.04 13:56:56 | 000,014,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp98sadm.exe [2010.07.04 13:56:55 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\certwiz.ocx [2010.07.04 13:56:55 | 000,188,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cfgwiz.exe [2010.07.04 13:56:55 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\certmap.ocx [2010.07.04 13:56:55 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cnfgprts.ocx [2010.07.04 13:56:55 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\coadmin.dll [2010.07.04 13:56:55 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.exe [2010.07.04 13:56:54 | 000,290,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adsiis51.dll [2010.07.04 13:56:54 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admwprox.dll [2010.07.04 13:56:54 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\author.dll [2010.07.04 13:56:54 | 000,016,439 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.exe [2010.07.04 13:56:53 | 000,020,540 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\admin.dll [2010.07.04 13:49:00 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll [2010.07.04 13:49:00 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\dllcache\spxcoins.dll [2010.07.04 13:49:00 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll [2010.07.04 13:49:00 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irclass.dll [2010.07.04 13:31:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\LogFiles [2010.07.04 10:14:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt [2010.07.03 23:01:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Utherverse [2010.07.03 22:58:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Startmen³ [2010.07.03 22:50:40 | 000,000,000 | ---D | C] -- C:\Programme\Utherverse Digital Inc [2010.07.01 15:48:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData [2010.07.01 15:26:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\gtk-2.0 [2010.06.30 21:28:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Lokale Einstellungen\Anwendungsdaten\Adobe [2010.06.30 21:27:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe [2010.06.30 21:27:50 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Adobe [2010.06.30 21:27:50 | 000,000,000 | ---D | C] -- C:\Programme\Adobe [2010.06.30 00:18:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\KB905474 [2010.06.29 16:54:59 | 000,000,000 | ---D | C] -- C:\e711cd94357417b49e56e2f1ac14a4c8 [2010.06.29 16:48:18 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe [2010.06.29 16:44:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall [2010.06.29 16:44:09 | 000,026,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe [2010.06.29 16:44:09 | 000,018,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll [2010.06.29 16:44:08 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$ [2010.06.29 10:59:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution [2010.06.27 17:55:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Lokale Einstellungen\Anwendungsdaten\Identities [2010.06.27 11:21:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Eigene Dateien\ICQ [2010.06.25 17:44:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\.thumbnails [2010.06.25 17:44:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\.gimp-2.6 [2010.06.25 17:44:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Eigene Dateien\gegl-0.0 [2010.06.25 15:07:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun [2010.06.25 15:07:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sun [2010.06.25 15:07:06 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Java [2010.06.25 15:06:53 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2010.06.25 15:06:53 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010.06.25 15:06:53 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010.06.25 15:06:53 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010.06.25 15:06:53 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2010.06.25 15:06:46 | 000,000,000 | ---D | C] -- C:\Programme\Java [2010.06.25 15:06:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Sun [2010.06.25 15:02:33 | 000,000,000 | ---D | C] -- C:\Programme\ICQ6Toolbar [2010.06.25 15:02:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ [2010.06.25 15:02:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\ICQ [2010.06.25 15:02:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Lokale Einstellungen\Anwendungsdaten\AOL [2010.06.25 15:02:09 | 000,000,000 | ---D | C] -- C:\Programme\ICQ7.2 [2010.06.25 15:00:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump [2010.06.25 14:37:48 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts [2010.06.25 14:37:48 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache [2010.06.25 14:37:48 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web [2010.06.25 14:37:48 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32 [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32 [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\system [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\security [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\java [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de-de [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076 [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052 [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054 [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042 [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041 [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037 [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033 [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031 [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028 [2010.06.25 14:37:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025 [2010.06.25 14:37:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Macromedia [2010.06.25 14:37:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Adobe [2010.06.25 14:11:00 | 016,871,432 | ---- | C] ( ) -- C:\Dokumente und Einstellungen\Robert\Eigene Dateien\gimp-2.6.7-i686-setup.exe [2010.06.25 14:10:55 | 011,008,060 | ---- | C] (DVDVideoSoft Limited. ) -- C:\Dokumente und Einstellungen\Robert\Eigene Dateien\FreeYouTubeToMp3Converter.exe [2010.06.25 14:10:45 | 101,418,769 | ---- | C] (ATARI, Inc.) -- C:\Dokumente und Einstellungen\Robert\Eigene Dateien\TACOPS_3.4.EXE [2010.06.25 13:44:44 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer [2010.06.25 13:44:44 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\ODBC [2010.06.25 13:44:43 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcommon.dll [2010.06.25 13:44:43 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spcplui.dll [2010.06.25 13:44:42 | 000,774,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spttseng.dll [2010.06.25 13:44:41 | 000,741,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapi.dll [2010.06.25 13:44:41 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapi.cpl [2010.06.25 13:44:41 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sapisvr.exe [2010.06.25 13:44:41 | 000,000,000 | R--D | C] -- C:\Programme [2010.06.25 13:44:41 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\SpeechEngines [2010.06.25 13:44:41 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared [2010.06.25 13:44:41 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien [2010.06.25 13:44:39 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0408.dll [2010.06.25 13:44:39 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt040e.dll [2010.06.25 13:44:39 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt041f.dll [2010.06.25 13:44:39 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0419.dll [2010.06.25 13:44:39 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0415.dll [2010.06.25 13:44:39 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\agt0405.dll [2010.06.25 13:44:31 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dllcache\dgrpsetu.dll [2010.06.25 13:44:31 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll [2010.06.25 13:44:31 | 000,103,936 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll [2010.06.25 13:44:31 | 000,103,936 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\dllcache\eqnclass.dll [2010.06.25 13:44:31 | 000,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV [2010.06.25 13:44:31 | 000,004,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV [2010.06.25 13:44:31 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV [2010.06.25 13:44:31 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV [2010.06.25 13:44:30 | 000,070,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL [2010.06.25 13:44:30 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV [2010.06.25 13:44:30 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV [2010.06.25 13:44:30 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV [2010.06.25 13:44:29 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WINSPOOL.DRV [2010.06.25 13:44:29 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irenum.sys [2010.06.25 13:44:27 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll [2010.06.25 13:44:20 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü [2010.06.25 13:44:20 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente [2010.06.25 13:44:20 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users\Vorlagen [2010.06.25 13:44:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Favoriten [2010.06.25 13:44:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Desktop [2010.06.25 13:42:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2 [2010.06.25 13:42:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot [2010.06.25 13:42:26 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft [2010.06.25 13:42:26 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten [2010.06.25 13:42:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen [2010.06.25 13:42:07 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010.06.25 13:36:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Avira [2010.06.25 13:20:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Eigene Dateien\pdf [2010.06.25 13:18:49 | 000,000,000 | ---D | C] -- C:\Programme\GIMP-2.0 [2010.06.25 13:15:43 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys [2010.06.25 13:15:42 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys [2010.06.25 13:15:42 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys [2010.06.25 13:15:42 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys [2010.06.25 13:15:42 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys [2010.06.25 13:15:42 | 000,000,000 | ---D | C] -- C:\Programme\Avira [2010.06.25 13:15:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira [2010.06.25 13:12:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Eigene Dateien\Downloads [2010.06.25 13:10:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Lokale Einstellungen\Anwendungsdaten\Mozilla [2010.06.25 13:10:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Mozilla [2010.06.25 13:10:08 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox [2010.06.25 13:08:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Eigene Dateien\DVDVideoSoft [2010.06.25 13:08:01 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\DVDVideoSoft [2010.06.25 13:08:01 | 000,000,000 | ---D | C] -- C:\Programme\DVDVideoSoft [2010.06.25 13:03:32 | 000,000,000 | ---D | C] -- C:\Programme\Infogrames [2010.06.25 13:03:21 | 000,328,704 | ---- | C] (InstallShield Software Corporation ) -- C:\WINDOWS\IsUn0407.exe [2010.06.25 13:02:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang [2010.06.25 13:01:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups [2010.06.25 13:01:03 | 000,069,632 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\ChCfg.exe [2010.06.25 13:00:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\RTCOM |
OTL Teil 3 [2010.06.25 13:00:54 | 009,715,200 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTLCPL.exe [2010.06.25 13:00:54 | 001,826,816 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SkyTel.exe [2010.06.25 13:00:54 | 001,196,032 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlUpd.exe [2010.06.25 13:00:54 | 000,266,240 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RTSndMgr.cpl [2010.06.25 13:00:54 | 000,077,824 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SoundMan.exe [2010.06.25 13:00:53 | 004,755,968 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys [2010.06.25 13:00:53 | 002,808,832 | ---- | C] (RealTek Semicoductor Corp.) -- C:\WINDOWS\alcwzrd.exe [2010.06.25 13:00:53 | 002,165,760 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\MicCal.exe [2010.06.25 13:00:53 | 000,278,528 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\ALSndMgr.cpl [2010.06.25 13:00:53 | 000,057,344 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\Alcmtr.exe [2010.06.25 13:00:51 | 000,528,384 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlExUpd.dll [2010.06.25 13:00:51 | 000,319,488 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\HideWin.exe [2010.06.25 13:00:10 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax [2010.06.25 13:00:10 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll [2010.06.25 12:59:53 | 000,105,856 | ---- | C] (Realtek Semiconductor Corporation ) -- C:\WINDOWS\System32\drivers\Rtenicxp.sys [2010.06.25 12:59:52 | 000,000,000 | -H-D | C] -- C:\Programme\InstallShield Installation Information [2010.06.25 12:59:52 | 000,000,000 | ---D | C] -- C:\Programme\Realtek [2010.06.25 12:59:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\OPTIONS [2010.06.25 12:59:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\InstallShield [2010.06.25 12:59:38 | 000,442,368 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvudisp.exe [2010.06.25 12:59:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\nview [2010.06.25 12:59:33 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\InstallShield [2010.06.25 12:59:03 | 000,356,352 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvusmu.exe [2010.06.25 12:59:02 | 000,442,368 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvusmb.exe [2010.06.25 12:58:59 | 000,442,368 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\NVUNINST.EXE [2010.06.25 12:58:31 | 000,013,696 | R--- | C] (BIOSTAR Group) -- C:\WINDOWS\System32\drivers\BIOS.sys [2010.06.25 12:57:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Identities [2010.06.25 12:57:02 | 000,000,000 | -H-D | C] -- C:\Programme\Uninstall Information [2010.06.25 12:56:59 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Robert\Eigene Dateien\Eigene Musik [2010.06.25 12:56:59 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Robert\Eigene Dateien [2010.06.25 12:56:59 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Robert\Eigene Dateien\Eigene Bilder [2010.06.25 12:56:44 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Microsoft [2010.06.25 12:56:44 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Robert\Cookies [2010.06.25 12:56:44 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Robert\SendTo [2010.06.25 12:56:44 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Robert\Recent [2010.06.25 12:56:44 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten [2010.06.25 12:56:44 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Robert\Startmenü [2010.06.25 12:56:44 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Robert\Favoriten [2010.06.25 12:56:44 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Robert\Vorlagen [2010.06.25 12:56:44 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Robert\Netzwerkumgebung [2010.06.25 12:56:44 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Robert\Lokale Einstellungen [2010.06.25 12:56:44 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Robert\Druckumgebung [2010.06.25 12:56:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Lokale Einstellungen\Anwendungsdaten\Microsoft [2010.06.25 12:56:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Robert\Desktop [2010.06.25 12:55:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution [2010.06.25 12:55:57 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft [2010.06.25 12:55:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft [2010.06.25 12:55:56 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Microsoft [2010.06.25 12:55:41 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Microsoft [2010.06.25 12:55:41 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft [2010.06.25 12:54:03 | 000,618,605 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fp4autl.dll [2010.06.25 12:53:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom [2010.06.25 12:53:35 | 000,000,000 | ---D | C] -- C:\Programme\xerox [2010.06.25 12:53:35 | 000,000,000 | ---D | C] -- C:\Programme\microsoft frontpage [2010.06.25 12:53:02 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll [2010.06.25 12:52:32 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\All Users\DRM [2010.06.25 12:52:26 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files [2010.06.25 12:52:26 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages [2010.06.25 12:52:19 | 000,000,000 | -H-D | C] -- C:\Programme\WindowsUpdate [2010.06.25 12:52:16 | 000,000,000 | ---D | C] -- C:\Programme\Online-Dienste [2010.06.25 12:52:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX [2010.06.25 12:52:00 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helphost.exe [2010.06.25 12:52:00 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\notiflag.exe [2010.06.25 12:52:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\brpinfo.dll [2010.06.25 12:52:00 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\atrace.dll [2010.06.25 12:52:00 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll [2010.06.25 12:52:00 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hcappres.dll [2010.06.25 12:51:54 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srdiag.exe [2010.06.25 12:51:53 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\acctres.dll [2010.06.25 12:51:53 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll [2010.06.25 12:51:53 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msinfo32.exe [2010.06.25 12:51:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wb32.exe [2010.06.25 12:51:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll [2010.06.25 12:51:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmevtmsg.dll [2010.06.25 12:51:53 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cb32.exe [2010.06.25 12:51:52 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Dienste [2010.06.25 12:51:50 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoap1.dll [2010.06.25 12:51:50 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwtutor.exe [2010.06.25 12:51:50 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwres.dll [2010.06.25 12:51:50 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trialoc.dll [2010.06.25 12:51:50 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wisc10.dll [2010.06.25 12:51:50 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mssoapr.dll [2010.06.25 12:51:50 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isignup.exe [2010.06.25 12:51:50 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll [2010.06.25 12:51:50 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icfgnt5.dll [2010.06.25 12:51:50 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks [2010.06.25 12:51:50 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\MSSoap [2010.06.25 12:51:49 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieinfo5.ocx [2010.06.25 12:51:47 | 003,166,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msgr3en.dll [2010.06.25 12:51:47 | 000,851,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vgx.dll [2010.06.25 12:51:47 | 000,727,614 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srchui.dll [2010.06.25 12:51:47 | 000,058,434 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srchctls.dll [2010.06.25 12:51:47 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst [2010.06.25 12:51:46 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\setup_wm.exe [2010.06.25 12:51:46 | 000,368,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mpvis.dll [2010.06.25 12:51:46 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpns.dll [2010.06.25 12:51:46 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmpband.dll [2010.06.25 12:51:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed [2010.06.25 12:51:45 | 000,786,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\migrate.exe [2010.06.25 12:51:45 | 000,364,544 | ---- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) -- C:\WINDOWS\System32\dllcache\npdsplay.dll [2010.06.25 12:51:45 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npdrmv2.dll [2010.06.25 12:51:45 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmplayer.exe [2010.06.25 12:51:45 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\custsat.dll [2010.06.25 12:51:45 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\npwmsdrm.dll [2010.06.25 12:51:45 | 000,004,639 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplayer2.exe [2010.06.25 12:51:44 | 001,929,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll [2010.06.25 12:51:44 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll [2010.06.25 12:51:44 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wucltui.dll [2010.06.25 12:51:44 | 000,217,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaucpl.cpl [2010.06.25 12:51:44 | 000,209,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuweb.dll [2010.06.25 12:51:44 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll [2010.06.25 12:51:44 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng1.dll [2010.06.25 12:51:44 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe [2010.06.25 12:51:44 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt1.exe [2010.06.25 12:51:44 | 000,053,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe [2010.06.25 12:51:44 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll [2010.06.25 12:51:44 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wups.dll [2010.06.25 12:51:44 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauserv.dll [2010.06.25 12:51:43 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll [2010.06.25 12:51:43 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuapi.dll [2010.06.25 12:51:43 | 000,409,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qmgr.dll [2010.06.25 12:51:43 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll [2010.06.25 12:51:43 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qmgrprxy.dll [2010.06.25 12:51:43 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bitsprx2.dll [2010.06.25 12:51:43 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll [2010.06.25 12:51:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bitsprx4.dll [2010.06.25 12:51:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll [2010.06.25 12:51:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bitsprx3.dll [2010.06.25 12:51:43 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll [2010.06.25 12:51:42 | 004,293,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2res.dll [2010.06.25 12:51:42 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2res2.dll [2010.06.25 12:51:42 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2eres.dll [2010.06.25 12:51:41 | 003,558,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\moviemk.exe [2010.06.25 12:51:41 | 000,502,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2fxa.dll [2010.06.25 12:51:41 | 000,402,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2filt.dll [2010.06.25 12:51:41 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2fxb.dll [2010.06.25 12:51:41 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2ae.dll [2010.06.25 12:51:41 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmm2ext.dll [2010.06.25 12:51:40 | 000,000,000 | ---D | C] -- C:\Programme\Movie Maker [2010.06.25 12:51:30 | 000,565,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobmain.dll [2010.06.25 12:51:30 | 000,122,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobcomm.dll [2010.06.25 12:51:30 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oobebaln.exe [2010.06.25 12:51:30 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobshel.dll [2010.06.25 12:51:30 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoobe.exe [2010.06.25 12:51:30 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobweb.dll [2010.06.25 12:51:30 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msobdl.dll [2010.06.25 12:51:28 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uploadm.exe [2010.06.25 12:51:28 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pchshell.dll [2010.06.25 12:51:28 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll [2010.06.25 12:51:28 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrslv.dll [2010.06.25 12:51:28 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll [2010.06.25 12:51:28 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrcdlg.dll [2010.06.25 12:51:28 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll [2010.06.25 12:51:28 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\racpldlg.dll [2010.06.25 12:51:28 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\pchsvc.dll [2010.06.25 12:51:28 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll [2010.06.25 12:51:28 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\safrdm.dll [2010.06.25 12:51:26 | 000,769,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpctr.exe [2010.06.25 12:51:26 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe [2010.06.25 12:51:26 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msconfig.exe [2010.06.25 12:51:26 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hscupd.exe [2010.06.25 12:51:25 | 000,385,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rstrui.exe [2010.06.25 12:51:25 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll [2010.06.25 12:51:25 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srrstr.dll [2010.06.25 12:51:25 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srsvc.dll [2010.06.25 12:51:25 | 000,129,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fltmgr.sys [2010.06.25 12:51:25 | 000,073,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sr.sys [2010.06.25 12:51:25 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srclient.dll [2010.06.25 12:51:25 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltMc.exe [2010.06.25 12:51:25 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fltmc.exe [2010.06.25 12:51:25 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fltlib.dll [2010.06.25 12:51:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore [2010.06.25 12:51:24 | 000,385,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\callcont.dll [2010.06.25 12:51:24 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmas.dll [2010.06.25 12:51:24 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll [2010.06.25 12:51:24 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ils.dll [2010.06.25 12:51:24 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll [2010.06.25 12:51:24 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msconf.dll [2010.06.25 12:51:24 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dcap32.dll [2010.06.25 12:51:24 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll [2010.06.25 12:51:24 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mnmdd.dll [2010.06.25 12:51:24 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mnmsrvc.exe [2010.06.25 12:51:24 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll [2010.06.25 12:51:24 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\dllcache\isrdbg32.dll [2010.06.25 12:51:24 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll [2010.06.25 12:51:24 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmmkcert.dll [2010.06.25 12:51:24 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmasnt.dll [2010.06.25 12:51:23 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mst120.dll [2010.06.25 12:51:23 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nac.dll [2010.06.25 12:51:23 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmwb.dll [2010.06.25 12:51:23 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmft.dll [2010.06.25 12:51:23 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmchat.dll [2010.06.25 12:51:23 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmcom.dll [2010.06.25 12:51:23 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rrcm.dll [2010.06.25 12:51:23 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mst123.dll [2010.06.25 12:51:23 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\h323cc.dll [2010.06.25 12:51:23 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\confmrsl.dll [2010.06.25 12:51:22 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\conf.exe [2010.06.25 12:51:22 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab32.dll [2010.06.25 12:51:22 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll [2010.06.25 12:51:22 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoeacct.dll [2010.06.25 12:51:22 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\nmoldwb.dll [2010.06.25 12:51:22 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll [2010.06.25 12:51:22 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoert2.dll [2010.06.25 12:51:22 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wabimp.dll [2010.06.25 12:51:22 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab.exe [2010.06.25 12:51:22 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wabfind.dll [2010.06.25 12:51:22 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wabmig.exe [2010.06.25 12:51:22 | 000,000,000 | ---D | C] -- C:\Programme\NetMeeting [2010.06.25 12:51:21 | 000,691,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcomm.dll [2010.06.25 12:51:21 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wab32res.dll [2010.06.25 12:51:21 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oeimport.dll [2010.06.25 12:51:21 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\directdb.dll [2010.06.25 12:51:21 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msimn.exe [2010.06.25 12:51:21 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll [2010.06.25 12:51:21 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetres.dll [2010.06.25 12:51:20 | 002,532,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msoeres.dll [2010.06.25 12:51:20 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstask.dll [2010.06.25 12:51:20 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\schedsvc.dll [2010.06.25 12:51:20 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\setup50.exe [2010.06.25 12:51:20 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oemig50.exe [2010.06.25 12:51:20 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oemiglib.dll [2010.06.25 12:51:20 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe [2010.06.25 12:51:20 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mstinit.exe [2010.06.25 12:51:20 | 000,000,000 | ---D | C] -- C:\Programme\Outlook Express [2010.06.25 12:51:19 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll [2010.06.25 12:51:19 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcfg.dll [2010.06.25 12:51:19 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll [2010.06.25 12:51:19 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\isign32.dll [2010.06.25 12:51:19 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll [2010.06.25 12:51:19 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwdial.dll [2010.06.25 12:51:19 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll [2010.06.25 12:51:19 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwphbk.dll [2010.06.25 12:51:18 | 000,554,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dao360.dll [2010.06.25 12:51:18 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwconn1.exe [2010.06.25 12:51:18 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sqlxmlx.dll [2010.06.25 12:51:18 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwhelp.dll [2010.06.25 12:51:18 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwconn2.exe [2010.06.25 12:51:18 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwconn.dll [2010.06.25 12:51:18 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwutil.dll [2010.06.25 12:51:18 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwdl.dll [2010.06.25 12:51:18 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icwrmind.exe [2010.06.25 12:51:18 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetwiz.exe [2010.06.25 12:51:17 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oledb32.dll [2010.06.25 12:51:17 | 000,315,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdasql.dll [2010.06.25 12:51:17 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaora.dll [2010.06.25 12:51:17 | 000,204,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaps.dll [2010.06.25 12:51:17 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msjro.dll [2010.06.25 12:51:17 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdatl3.dll [2010.06.25 12:51:17 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaosp.dll [2010.06.25 12:51:17 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oledb32r.dll [2010.06.25 12:51:17 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxactps.dll [2010.06.25 12:51:17 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdatt.dll [2010.06.25 12:51:17 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdasqlr.dll [2010.06.25 12:51:17 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaorar.dll [2010.06.25 12:51:17 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaurl.dll [2010.06.25 12:51:17 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdasc.dll [2010.06.25 12:51:17 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaer.dll [2010.06.25 12:51:17 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaenum.dll [2010.06.25 12:51:17 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdadc.dll [2010.06.25 12:51:16 | 000,536,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado15.dll [2010.06.25 12:51:16 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaprst.dll [2010.06.25 12:51:16 | 000,200,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadox.dll [2010.06.25 12:51:16 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadomd.dll [2010.06.25 12:51:16 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdarem.dll [2010.06.25 12:51:16 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado27.tlb [2010.06.25 12:51:16 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado26.tlb [2010.06.25 12:51:16 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado25.tlb [2010.06.25 12:51:16 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado21.tlb [2010.06.25 12:51:16 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msado20.tlb [2010.06.25 12:51:16 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadrh15.dll [2010.06.25 12:51:16 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msador15.dll [2010.06.25 12:51:16 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdfmap.dll [2010.06.25 12:51:16 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msader15.dll [2010.06.25 12:51:16 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaremr.dll [2010.06.25 12:51:16 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdaprsr.dll [2010.06.25 12:51:15 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll [2010.06.25 12:51:15 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadds.dll [2010.06.25 12:51:15 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadco.dll [2010.06.25 12:51:15 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcf.dll [2010.06.25 12:51:15 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcs.dll [2010.06.25 12:51:15 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msaddsr.dll [2010.06.25 12:51:15 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcer.dll [2010.06.25 12:51:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcor.dll [2010.06.25 12:51:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadcfr.dll [2010.06.25 12:51:15 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\System [2010.06.25 12:51:14 | 000,093,184 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iexplore.exe [2010.06.25 12:51:14 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hmmapi.dll [2010.06.25 12:51:14 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iedw.exe [2010.06.25 12:51:14 | 000,000,000 | ---D | C] -- C:\Programme\Internet Explorer [2010.06.25 12:51:13 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Bilder [2010.06.25 12:50:43 | 000,000,000 | ---D | C] -- C:\Programme\ComPlus Applications [2010.06.25 12:50:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration [2010.06.25 12:50:30 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Musik [2010.06.25 12:50:30 | 000,000,000 | ---D | C] -- C:\Programme\Windows Media Player [2010.06.25 12:50:30 | 000,000,000 | ---D | C] -- C:\Programme\Online Services [2010.06.25 12:50:24 | 000,042,577 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgzm.exe [2010.06.25 12:50:24 | 000,000,000 | ---D | C] -- C:\Programme\Messenger [2010.06.25 12:50:23 | 002,178,131 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlres.dll [2010.06.25 12:50:23 | 001,817,687 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckgres.dll [2010.06.25 12:50:23 | 000,781,397 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrres.dll [2010.06.25 12:50:23 | 000,753,236 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvseres.dll [2010.06.25 12:50:23 | 000,082,501 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bckg.dll [2010.06.25 12:50:23 | 000,066,113 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvl.dll [2010.06.25 12:50:23 | 000,048,706 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvse.dll [2010.06.25 12:50:23 | 000,042,575 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkrzm.exe [2010.06.25 12:50:23 | 000,042,574 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rvsezm.exe [2010.06.25 12:50:23 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shvlzm.exe [2010.06.25 12:50:23 | 000,042,573 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzzm.exe [2010.06.25 12:50:23 | 000,040,515 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\chkr.dll [2010.06.25 12:50:22 | 001,175,635 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtzres.dll [2010.06.25 12:50:22 | 001,042,515 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnresm.dll [2010.06.25 12:50:22 | 000,217,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmnclim.dll [2010.06.25 12:50:22 | 000,113,222 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zoneclim.dll [2010.06.25 12:50:22 | 000,057,409 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hrtz.dll [2010.06.25 12:50:22 | 000,041,029 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zcorem.dll [2010.06.25 12:50:22 | 000,032,339 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uniansi.dll [2010.06.25 12:50:22 | 000,013,894 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zonelibm.dll [2010.06.25 12:50:22 | 000,004,677 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zeeverm.dll [2010.06.25 12:50:21 | 000,036,937 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\zclientm.exe [2010.06.25 12:50:21 | 000,029,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\znetm.dll [2010.06.25 12:50:21 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe [2010.06.25 12:50:21 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\write.exe [2010.06.25 12:50:21 | 000,000,000 | ---D | C] -- C:\Programme\MSN Gaming Zone [2010.06.25 12:50:15 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avtapi.dll [2010.06.25 12:50:15 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avtapi.dll [2010.06.25 12:50:15 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe [2010.06.25 12:50:15 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndvol32.exe [2010.06.25 12:50:15 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avwav.dll [2010.06.25 12:50:15 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avwav.dll [2010.06.25 12:50:15 | 000,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll [2010.06.25 12:50:15 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winchat.exe [2010.06.25 12:50:15 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winchat.exe [2010.06.25 12:50:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\avmeter.dll [2010.06.25 12:50:15 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avmeter.dll [2010.06.25 12:50:15 | 000,013,312 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\dllcache\htrn_jis.dll [2010.06.25 12:50:10 | 000,683,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll [2010.06.25 12:50:10 | 000,683,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\getuname.dll [2010.06.25 12:50:10 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmine.exe [2010.06.25 12:50:10 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmine.exe [2010.06.25 12:50:10 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\calc.exe [2010.06.25 12:50:10 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe [2010.06.25 12:50:10 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\charmap.exe [2010.06.25 12:50:10 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe [2010.06.25 12:50:10 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sol.exe [2010.06.25 12:50:10 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sol.exe [2010.06.25 12:50:09 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshearts.exe [2010.06.25 12:50:09 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mshearts.exe [2010.06.25 12:50:09 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\freecell.exe [2010.06.25 12:50:09 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\freecell.exe [2010.06.25 12:50:09 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe [2010.06.25 12:50:09 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\regini.exe [2010.06.25 12:50:09 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe [2010.06.25 12:50:09 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qwinsta.exe [2010.06.25 12:50:09 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe [2010.06.25 12:50:09 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msg.exe [2010.06.25 12:50:09 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe [2010.06.25 12:50:09 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsshutdn.exe [2010.06.25 12:50:09 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe [2010.06.25 12:50:09 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qappsrv.exe [2010.06.25 12:50:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe [2010.06.25 12:50:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tskill.exe [2010.06.25 12:50:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe [2010.06.25 12:50:09 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rwinsta.exe [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsdiscon.exe [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscon.exe [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe [2010.06.25 12:50:09 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shadow.exe [2010.06.25 12:50:09 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe [2010.06.25 12:50:09 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\reset.exe [2010.06.25 12:50:09 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll [2010.06.25 12:50:09 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpcfgex.dll [2010.06.25 12:50:08 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmi2xml.dll [2010.06.25 12:50:08 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtsadmin.tlb [2010.06.25 12:50:08 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe [2010.06.25 12:50:08 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\logoff.exe [2010.06.25 12:50:08 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdmodem.dll [2010.06.25 12:50:08 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll [2010.06.25 12:50:06 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipicmp.dll [2010.06.25 12:50:06 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmimsg.dll [2010.06.25 12:50:06 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmitimep.dll [2010.06.25 12:50:05 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msiprov.dll [2010.06.25 12:50:05 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsprov.dll [2010.06.25 12:50:05 | 000,116,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\updprov.dll [2010.06.25 12:50:05 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tmplprov.dll [2010.06.25 12:50:05 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemdisp.tlb [2010.06.25 12:50:05 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\trnsprov.dll [2010.06.25 12:50:05 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fwdprov.dll [2010.06.25 12:50:05 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\smtpcons.dll [2010.06.25 12:50:05 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.tlb [2010.06.25 12:50:05 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmtr.dll [2010.06.25 12:50:05 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\unsecapp.exe [2010.06.25 12:50:05 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winmgmt.exe [2010.06.25 12:50:05 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemads.dll [2010.06.25 12:49:57 | 000,282,624 | ---- | C] (Cinematronics) -- C:\WINDOWS\System32\dllcache\pinball.exe [2010.06.25 12:49:57 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\accwiz.exe [2010.06.25 12:49:57 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe [2010.06.25 12:49:57 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\access.cpl [2010.06.25 12:49:57 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl [2010.06.25 12:49:57 | 000,000,000 | ---D | C] -- C:\Programme\MSN [2010.06.25 12:49:56 | 000,545,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dialer.exe [2010.06.25 12:49:56 | 000,356,352 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll [2010.06.25 12:49:56 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe [2010.06.25 12:49:56 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mspaint.exe [2010.06.25 12:49:56 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe [2010.06.25 12:49:56 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sndrec32.exe [2010.06.25 12:49:56 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe [2010.06.25 12:49:56 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mplay32.exe [2010.06.25 12:49:56 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\clipbrd.exe [2010.06.25 12:49:56 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe [2010.06.25 12:49:56 | 000,000,000 | ---D | C] -- C:\Programme\Windows NT [2010.06.25 12:49:55 | 000,539,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe [2010.06.25 12:49:55 | 000,539,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\spider.exe [2010.06.25 12:49:55 | 000,139,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwd.sys [2010.06.25 12:49:55 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll [2010.06.25 12:49:55 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tscfgwmi.dll [2010.06.25 12:49:55 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll [2010.06.25 12:49:55 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tsgqec.dll [2010.06.25 12:49:55 | 000,021,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdtcp.sys [2010.06.25 12:49:55 | 000,012,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\tdpipe.sys [2010.06.25 12:49:54 | 002,061,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lhmstscx.dll [2010.06.25 12:49:54 | 000,677,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lhmstsc.exe [2010.06.25 12:49:54 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll [2010.06.25 12:49:54 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rhttpaa.dll [2010.06.25 12:49:54 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sessmgr.exe [2010.06.25 12:49:54 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\aaclient.dll [2010.06.25 12:49:54 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll [2010.06.25 12:49:54 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe [2010.06.25 12:49:54 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdshost.exe [2010.06.25 12:49:54 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\remotepg.dll [2010.06.25 12:49:54 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe |
Und OTL Teil IV [2010.06.25 12:49:54 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdsaddin.exe [2010.06.25 12:49:53 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\termsrv.dll [2010.06.25 12:49:53 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll [2010.06.25 12:49:53 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtcuiu.dll [2010.06.25 12:49:53 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll [2010.06.25 12:49:53 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdchost.dll [2010.06.25 12:49:53 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll [2010.06.25 12:49:53 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxoci.dll [2010.06.25 12:49:53 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll [2010.06.25 12:49:53 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpwsx.dll [2010.06.25 12:49:53 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe [2010.06.25 12:49:53 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpclip.exe [2010.06.25 12:49:53 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cfgbkend.dll [2010.06.25 12:49:53 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll [2010.06.25 12:49:53 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe [2010.06.25 12:49:53 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\qprocess.exe [2010.06.25 12:49:53 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll [2010.06.25 12:49:53 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rdpsnd.dll [2010.06.25 12:49:53 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll [2010.06.25 12:49:53 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icaapi.dll [2010.06.25 12:49:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc [2010.06.25 12:49:52 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll [2010.06.25 12:49:52 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtctm.dll [2010.06.25 12:49:52 | 000,427,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll [2010.06.25 12:49:52 | 000,427,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtcprx.dll [2010.06.25 12:49:52 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll [2010.06.25 12:49:52 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtclog.dll [2010.06.25 12:49:52 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll [2010.06.25 12:49:52 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xolehlp.dll [2010.06.25 12:49:52 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comrepl.exe [2010.06.25 12:49:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtc.exe [2010.06.25 12:49:52 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comrereg.exe [2010.06.25 12:49:51 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\catsrvut.dll [2010.06.25 12:49:51 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll [2010.06.25 12:49:51 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comadmin.dll [2010.06.25 12:49:51 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\clbcatex.dll [2010.06.25 12:49:51 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll [2010.06.25 12:49:51 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comrepl.dll [2010.06.25 12:49:51 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll [2010.06.25 12:49:51 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\catsrvps.dll [2010.06.25 12:49:51 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll [2010.06.25 12:49:51 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\colbact.dll [2010.06.25 12:49:51 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll [2010.06.25 12:49:51 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll [2010.06.25 12:49:51 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\stclient.dll [2010.06.25 12:49:51 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll [2010.06.25 12:49:51 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxlegih.dll [2010.06.25 12:49:51 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll [2010.06.25 12:49:51 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxdm.dll [2010.06.25 12:49:51 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comaddin.dll [2010.06.25 12:49:51 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll [2010.06.25 12:49:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dcomcnfg.exe [2010.06.25 12:49:51 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe [2010.06.25 12:49:51 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll [2010.06.25 12:49:51 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxex.dll [2010.06.25 12:49:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com [2010.06.25 12:49:50 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comsvcs.dll [2010.06.25 12:49:50 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll [2010.06.25 12:49:50 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comuid.dll [2010.06.25 12:49:50 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll [2010.06.25 12:49:50 | 000,498,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\clbcatq.dll [2010.06.25 12:49:50 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\catsrv.dll [2010.06.25 12:49:50 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll [2010.06.25 12:49:50 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comsnap.dll [2010.06.25 12:49:50 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll [2010.06.25 12:49:49 | 000,145,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmisvc.dll [2010.06.25 12:49:49 | 000,099,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiutils.dll [2010.06.25 12:49:49 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipsess.dll [2010.06.25 12:49:48 | 000,370,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmic.exe [2010.06.25 12:49:48 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemess.dll [2010.06.25 12:49:48 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemupgd.dll [2010.06.25 12:49:48 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiadap.exe [2010.06.25 12:49:48 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemdisp.dll [2010.06.25 12:49:48 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipcima.dll [2010.06.25 12:49:48 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiprov.dll [2010.06.25 12:49:48 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmidcprv.dll [2010.06.25 12:49:48 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipdskq.dll [2010.06.25 12:49:48 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiapsrv.exe [2010.06.25 12:49:48 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemtest.exe [2010.06.25 12:49:48 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiaprpl.dll [2010.06.25 12:49:48 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipjobj.dll [2010.06.25 12:49:48 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmipiprt.dll [2010.06.25 12:49:48 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmicookr.dll [2010.06.25 12:49:48 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemsvc.dll [2010.06.25 12:49:48 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemprox.dll [2010.06.25 12:49:48 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wmiapres.dll [2010.06.25 12:49:47 | 000,531,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcore.dll [2010.06.25 12:49:47 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\provthrd.dll [2010.06.25 12:49:47 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcomn.dll [2010.06.25 12:49:47 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntevt.dll [2010.06.25 12:49:47 | 000,201,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcntl.dll [2010.06.25 12:49:47 | 000,178,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\repdrvfs.dll [2010.06.25 12:49:47 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\viewprov.dll [2010.06.25 12:49:47 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\policman.dll [2010.06.25 12:49:47 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\stdprov.dll [2010.06.25 12:49:47 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wbemcons.dll [2010.06.25 12:49:47 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scrcons.exe [2010.06.25 12:49:46 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\esscli.dll [2010.06.25 12:49:46 | 000,185,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\framedyn.dll [2010.06.25 12:49:46 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mofd.dll [2010.06.25 12:49:46 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ncprov.dll [2010.06.25 12:49:46 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\krnlprov.dll [2010.06.25 12:49:46 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mofcomp.exe [2010.06.25 12:49:45 | 001,359,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cimwin32.dll [2010.06.25 12:49:45 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cmprops.dll [2010.06.25 12:49:45 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll [2010.06.25 12:49:45 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll [2010.06.25 12:49:45 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\licwmi.dll [2010.06.25 12:49:45 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll [2010.06.25 12:49:45 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\servdeps.dll [2010.06.25 12:49:45 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll [2010.06.25 12:49:45 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mmfutil.dll [2010.06.25 12:49:43 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Videos [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.07.05 10:50:12 | 000,723,744 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010.07.05 10:50:12 | 000,316,594 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010.07.05 10:50:12 | 000,311,604 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010.07.05 10:50:12 | 000,048,156 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010.07.05 10:50:12 | 000,039,992 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010.07.05 10:46:06 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job [2010.07.05 10:45:59 | 000,160,101 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2010.07.05 10:45:58 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010.07.05 10:45:57 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.07.05 09:58:36 | 001,048,576 | -H-- | M] () -- C:\Dokumente und Einstellungen\Robert\NTUSER.DAT [2010.07.05 09:58:36 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Robert\ntuser.ini [2010.07.05 09:58:32 | 001,576,810 | -H-- | M] () -- C:\Dokumente und Einstellungen\Robert\Lokale Einstellungen\Anwendungsdaten\IconCache.db [2010.07.04 23:14:46 | 1609,842,688 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP [2010.07.04 21:30:02 | 000,000,676 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.07.04 21:25:37 | 000,869,052 | ---- | M] () -- C:\Qoobox.zip [2010.07.04 20:29:00 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2010.07.04 20:28:54 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2010.07.04 20:25:38 | 000,000,281 | RHS- | M] () -- C:\boot.ini [2010.07.04 14:05:39 | 000,012,328 | ---- | M] () -- C:\Dokumente und Einstellungen\Robert\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT [2010.07.04 13:59:38 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.07.04 13:59:22 | 000,090,296 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.07.04 13:58:36 | 000,021,483 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf [2010.07.04 13:56:38 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx [2010.07.04 13:56:37 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2010.07.04 13:56:37 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2010.07.04 13:56:29 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI [2010.07.04 13:55:52 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\WindowsLogon.manifest [2010.07.04 13:55:52 | 000,000,488 | RH-- | M] () -- C:\WINDOWS\System32\logonui.exe.manifest [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\WindowsShell.Manifest [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\sapi.cpl.manifest [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\nwc.cpl.manifest [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\ncpa.cpl.manifest [2010.07.04 13:55:48 | 000,000,749 | RH-- | M] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2010.07.04 13:55:39 | 000,000,477 | ---- | M] () -- C:\WINDOWS\win.ini [2010.07.04 13:54:51 | 000,022,880 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat [2010.07.04 13:53:47 | 000,000,211 | ---- | M] () -- C:\Boot.bak [2010.07.04 13:49:10 | 000,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF [2010.07.01 15:49:13 | 000,273,307 | ---- | M] () -- C:\WINDOWS\setupapi.old [2010.07.01 15:40:39 | 000,063,488 | RHS- | M] () -- C:\WINDOWS\System32\tlntsess7.dll [2010.07.01 15:26:58 | 000,002,239 | ---- | M] () -- C:\Dokumente und Einstellungen\Robert\.recently-used.xbel [2010.06.30 22:26:12 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2010.06.30 21:30:11 | 000,001,709 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader 9.lnk [2010.06.26 11:08:45 | 000,000,772 | ---- | M] () -- C:\Dokumente und Einstellungen\Robert\Desktop\Windows Media Player.lnk [2010.06.25 19:50:08 | 000,000,899 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Tactical Ops.lnk [2010.06.25 15:06:48 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2010.06.25 15:06:48 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010.06.25 15:06:48 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010.06.25 15:06:48 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010.06.25 15:06:48 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2010.06.25 15:02:50 | 000,001,451 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ICQ7.2.lnk [2010.06.25 13:19:09 | 000,000,778 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\GIMP 2.lnk [2010.06.25 13:15:49 | 000,001,671 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk [2010.06.25 13:10:17 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat [2010.06.25 13:10:10 | 000,001,566 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk [2010.06.25 13:08:05 | 000,000,906 | ---- | M] () -- C:\Dokumente und Einstellungen\Robert\Desktop\DVDVideoSoft Free Studio.lnk [2010.06.25 13:02:28 | 000,940,794 | ---- | M] () -- C:\WINDOWS\System32\LoopyMusic.wav [2010.06.25 13:02:28 | 000,146,650 | ---- | M] () -- C:\WINDOWS\System32\BuzzingBee.wav [2010.06.25 13:00:51 | 000,319,488 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\HideWin.exe [2010.06.25 12:57:27 | 000,000,104 | ---- | M] () -- C:\Dokumente und Einstellungen\Robert\Desktop\Arbeitsplatz.lnk [2010.06.25 12:55:43 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD [2010.06.25 12:53:14 | 000,002,951 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT [2010.06.25 12:53:14 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS [2010.06.25 12:53:14 | 000,000,000 | RHS- | M] () -- C:\IO.SYS [2010.06.25 12:53:14 | 000,000,000 | ---- | M] () -- C:\WINDOWS\control.ini [2010.06.25 12:53:14 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS [2010.06.25 12:53:14 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT [2010.06.25 12:50:41 | 000,000,037 | ---- | M] () -- C:\WINDOWS\vbaddin.ini [2010.06.25 12:50:41 | 000,000,036 | ---- | M] () -- C:\WINDOWS\vb.ini [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.07.04 21:30:02 | 000,000,676 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk [2010.07.04 21:25:37 | 000,869,052 | ---- | C] () -- C:\Qoobox.zip [2010.07.04 20:25:38 | 000,000,211 | ---- | C] () -- C:\Boot.bak [2010.07.04 20:25:36 | 000,262,448 | ---- | C] () -- C:\cmldr [2010.07.04 20:24:52 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe [2010.07.04 20:24:52 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2010.07.04 20:24:52 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2010.07.04 20:24:52 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe [2010.07.04 20:24:52 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2010.07.04 13:58:27 | 000,028,288 | ---- | C] () -- C:\WINDOWS\System32\dllcache\xjis.nls [2010.07.04 13:58:03 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prcp.nls [2010.07.04 13:58:03 | 000,083,748 | ---- | C] () -- C:\WINDOWS\System32\dllcache\prc.nls [2010.07.04 13:58:02 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll [2010.07.04 13:57:48 | 000,047,066 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ksc.nls [2010.07.04 13:57:47 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex [2010.07.04 13:57:42 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe [2010.07.04 13:57:41 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe [2010.07.04 13:57:39 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex [2010.07.04 13:57:33 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll [2010.07.04 13:57:29 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex [2010.07.04 13:57:26 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\dllcache\fpencode.dll [2010.07.04 13:57:16 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll [2010.07.04 13:57:14 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_864.nls [2010.07.04 13:57:14 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_862.nls [2010.07.04 13:57:14 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_870.nls [2010.07.04 13:57:13 | 000,180,770 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20932.nls [2010.07.04 13:57:13 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20949.nls [2010.07.04 13:57:13 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20936.nls [2010.07.04 13:57:13 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_858.nls [2010.07.04 13:57:13 | 000,066,594 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_720.nls [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_708.nls [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28596.nls [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21027.nls [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_21025.nls [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20924.nls [2010.07.04 13:57:13 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20880.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20871.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20838.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20833.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20424.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20423.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20420.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20297.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20290.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20285.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20284.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20280.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20278.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20277.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20273.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20269.nls [2010.07.04 13:57:12 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20108.nls [2010.07.04 13:57:11 | 000,189,986 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1361.nls [2010.07.04 13:57:11 | 000,187,938 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20005.nls [2010.07.04 13:57:11 | 000,186,402 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20001.nls [2010.07.04 13:57:11 | 000,185,378 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20003.nls [2010.07.04 13:57:11 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20004.nls [2010.07.04 13:57:11 | 000,180,258 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20000.nls [2010.07.04 13:57:11 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20002.nls [2010.07.04 13:57:11 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20107.nls [2010.07.04 13:57:11 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20106.nls [2010.07.04 13:57:11 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20105.nls [2010.07.04 13:57:10 | 000,177,698 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10003.nls [2010.07.04 13:57:10 | 000,173,602 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10008.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1149.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1148.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1147.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1146.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1145.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1144.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1143.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1142.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1141.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1140.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_1047.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10021.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10005.nls [2010.07.04 13:57:10 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10004.nls [2010.07.04 13:57:09 | 000,195,618 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10002.nls [2010.07.04 13:57:09 | 000,162,850 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_10001.nls [2010.07.04 13:57:09 | 000,082,172 | ---- | C] () -- C:\WINDOWS\System32\dllcache\bopomofo.nls [2010.07.04 13:57:09 | 000,066,728 | ---- | C] () -- C:\WINDOWS\System32\dllcache\big5.nls [2010.07.04 13:55:52 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\logonui.exe.manifest [2010.07.04 13:55:48 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\wuaucpl.cpl.manifest [2010.07.04 13:55:48 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\WindowsShell.Manifest [2010.07.04 13:55:48 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\sapi.cpl.manifest [2010.07.04 13:55:48 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\nwc.cpl.manifest [2010.07.04 13:55:48 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\ncpa.cpl.manifest [2010.07.04 13:48:45 | 002,039,179 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5.CAT [2010.07.04 13:48:45 | 001,246,537 | ---- | C] () -- C:\WINDOWS\System32\dllcache\SP3.CAT [2010.07.04 13:48:45 | 000,817,199 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5IIS.CAT [2010.07.04 13:48:45 | 000,399,645 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MAPIMIG.CAT [2010.07.04 13:48:45 | 000,144,484 | ---- | C] () -- C:\WINDOWS\System32\dllcache\netfx.cat [2010.07.04 13:48:45 | 000,105,926 | ---- | C] () -- C:\WINDOWS\System32\dllcache\tabletpc.cat [2010.07.04 13:48:45 | 000,041,270 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MW770.CAT [2010.07.04 13:48:45 | 000,034,747 | ---- | C] () -- C:\WINDOWS\System32\dllcache\mediactr.cat [2010.07.04 13:48:45 | 000,033,765 | ---- | C] () -- C:\WINDOWS\System32\dllcache\FP4.CAT [2010.07.04 13:48:45 | 000,021,771 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn7.cat [2010.07.04 13:48:45 | 000,016,825 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IMS.CAT [2010.07.04 13:48:45 | 000,014,433 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msn9.cat [2010.07.04 13:48:45 | 000,013,472 | ---- | C] () -- C:\WINDOWS\System32\dllcache\HPCRDP.CAT [2010.07.04 13:48:45 | 000,012,363 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSMSGS.CAT [2010.07.04 13:48:45 | 000,010,027 | ---- | C] () -- C:\WINDOWS\System32\dllcache\MSTSWEB.CAT [2010.07.04 13:48:45 | 000,008,574 | ---- | C] () -- C:\WINDOWS\System32\dllcache\IASNT4.CAT [2010.07.04 13:48:45 | 000,007,382 | ---- | C] () -- C:\WINDOWS\System32\dllcache\OEMBIOS.CAT [2010.07.04 13:48:44 | 000,631,338 | ---- | C] () -- C:\WINDOWS\System32\dllcache\NT5INF.CAT [2010.07.01 15:40:39 | 000,063,488 | RHS- | C] () -- C:\WINDOWS\System32\tlntsess7.dll [2010.07.01 15:26:58 | 000,002,239 | ---- | C] () -- C:\Dokumente und Einstellungen\Robert\.recently-used.xbel [2010.07.01 15:02:35 | 000,012,148 | ---- | C] () -- C:\Dokumente und Einstellungen\Robert\hs_err_pid2992.log [2010.06.30 21:28:01 | 000,001,709 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader 9.lnk [2010.06.30 00:18:14 | 000,000,260 | ---- | C] () -- C:\WINDOWS\tasks\WGASetup.job [2010.06.29 20:34:56 | 000,014,089 | ---- | C] () -- C:\Dokumente und Einstellungen\Robert\hs_err_pid2592.log [2010.06.27 09:24:38 | 000,000,772 | ---- | C] () -- C:\Dokumente und Einstellungen\Robert\Desktop\Windows Media Player.lnk [2010.06.25 19:50:08 | 000,000,899 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Tactical Ops.lnk [2010.06.25 15:02:50 | 000,001,451 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ICQ7.2.lnk [2010.06.25 14:41:20 | 000,000,281 | RHS- | C] () -- C:\boot.ini [2010.06.25 14:41:17 | 000,021,483 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf [2010.06.25 14:37:48 | 1609,842,688 | ---- | C] () -- C:\WINDOWS\MEMORY.DMP [2010.06.25 13:47:35 | 000,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF [2010.06.25 13:44:47 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK [2010.06.25 13:44:42 | 001,685,606 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.spd [2010.06.25 13:44:42 | 000,605,050 | ---- | C] () -- C:\WINDOWS\System32\dllcache\r1033tts.lxa [2010.06.25 13:44:42 | 000,000,888 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sam.sdf [2010.06.25 13:44:41 | 000,643,717 | ---- | C] () -- C:\WINDOWS\System32\dllcache\ltts1033.lxa [2010.06.25 13:44:39 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28603.nls [2010.06.25 13:44:39 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28603.nls [2010.06.25 13:44:38 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28599.nls [2010.06.25 13:44:38 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_28599.nls [2010.06.25 13:44:36 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28595.nls [2010.06.25 13:44:36 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28595.NLS [2010.06.25 13:44:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28597.nls [2010.06.25 13:44:35 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28597.NLS [2010.06.25 13:44:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_28594.nls [2010.06.25 13:44:34 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\C_28594.NLS [2010.06.25 13:44:32 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\dllcache\c_20127.nls [2010.06.25 13:44:32 | 000,066,082 | ---- | C] () -- C:\WINDOWS\System32\c_20127.nls [2010.06.25 13:44:29 | 000,001,806 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT [2010.06.25 13:42:41 | 000,007,334 | ---- | C] () -- C:\WINDOWS\System32\dllcache\wmerrenu.cat [2010.06.25 13:42:26 | 000,273,307 | ---- | C] () -- C:\WINDOWS\setupapi.old [2010.06.25 13:42:07 | 000,090,296 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.06.25 13:19:09 | 000,000,778 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\GIMP 2.lnk [2010.06.25 13:15:49 | 000,001,671 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk [2010.06.25 13:10:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat [2010.06.25 13:10:10 | 000,001,566 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk [2010.06.25 13:08:05 | 000,000,906 | ---- | C] () -- C:\Dokumente und Einstellungen\Robert\Desktop\DVDVideoSoft Free Studio.lnk [2010.06.25 13:02:28 | 000,940,794 | ---- | C] () -- C:\WINDOWS\System32\LoopyMusic.wav [2010.06.25 13:02:28 | 000,146,650 | ---- | C] () -- C:\WINDOWS\System32\BuzzingBee.wav [2010.06.25 13:01:06 | 000,000,553 | ---- | C] () -- C:\WINDOWS\USetup.iss [2010.06.25 12:59:41 | 000,160,101 | ---- | C] () -- C:\WINDOWS\System32\nvapps.xml [2010.06.25 12:59:38 | 000,017,937 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu [2010.06.25 12:59:03 | 000,000,659 | ---- | C] () -- C:\WINDOWS\System32\nvsmu.nvu [2010.06.25 12:59:02 | 000,002,016 | ---- | C] () -- C:\WINDOWS\System32\nvsmb.nvu [2010.06.25 12:57:27 | 000,000,104 | ---- | C] () -- C:\Dokumente und Einstellungen\Robert\Desktop\Arbeitsplatz.lnk [2010.06.25 12:56:46 | 000,000,190 | -HS- | C] () -- C:\Dokumente und Einstellungen\Robert\ntuser.ini [2010.06.25 12:56:45 | 000,001,024 | -H-- | C] () -- C:\Dokumente und Einstellungen\Robert\ntuser.dat.LOG [2010.06.25 12:56:44 | 001,048,576 | -H-- | C] () -- C:\Dokumente und Einstellungen\Robert\NTUSER.DAT [2010.06.25 12:55:43 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD [2010.06.25 12:54:56 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2010.06.25 12:53:14 | 000,002,951 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT [2010.06.25 12:53:14 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS [2010.06.25 12:53:14 | 000,000,000 | RHS- | C] () -- C:\IO.SYS [2010.06.25 12:53:14 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS [2010.06.25 12:53:14 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT [2010.06.25 12:53:11 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb [2010.06.25 12:53:11 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb [2010.06.25 12:53:10 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx [2010.06.25 12:52:26 | 000,000,488 | RH-- | C] () -- C:\WINDOWS\System32\WindowsLogon.manifest [2010.06.25 12:52:22 | 000,000,749 | RH-- | C] () -- C:\WINDOWS\System32\cdplayer.exe.manifest [2010.06.25 12:52:09 | 004,399,505 | ---- | C] () -- C:\WINDOWS\System32\dllcache\nls302en.lex [2010.06.25 12:51:58 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp [2010.06.25 12:51:58 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp [2010.06.25 12:51:54 | 000,000,984 | ---- | C] () -- C:\WINDOWS\System32\dllcache\srframe.mmf [2010.06.25 12:51:26 | 000,380,416 | ---- | C] () -- C:\WINDOWS\System32\dllcache\msinfo.dll [2010.06.25 12:50:52 | 000,022,880 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2010.06.25 12:50:12 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe-Stuck.bmp [2010.06.25 12:50:12 | 000,026,680 | ---- | C] () -- C:\WINDOWS\Fächer.bmp [2010.06.25 12:50:12 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotek.bmp [2010.06.25 12:50:11 | 000,093,702 | ---- | C] () -- C:\WINDOWS\System32\subrange.uce [2010.06.25 12:50:11 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Seifenblase.bmp [2010.06.25 12:50:11 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Präriewind.bmp [2010.06.25 12:50:11 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Granit.bmp [2010.06.25 12:50:11 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp [2010.06.25 12:50:11 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Angler.bmp [2010.06.25 12:50:11 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Kaffeetasse.bmp [2010.06.25 12:50:11 | 000,016,740 | ---- | C] () -- C:\WINDOWS\System32\shiftjis.uce [2010.06.25 12:50:11 | 000,016,730 | ---- | C] () -- C:\WINDOWS\Feder.bmp [2010.06.25 12:50:11 | 000,012,876 | ---- | C] () -- C:\WINDOWS\System32\korean.uce [2010.06.25 12:50:11 | 000,008,484 | ---- | C] () -- C:\WINDOWS\System32\kanji_2.uce [2010.06.25 12:50:11 | 000,006,948 | ---- | C] () -- C:\WINDOWS\System32\kanji_1.uce [2010.06.25 12:50:11 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blaue Spitzen 16.bmp [2010.06.25 12:50:10 | 000,060,458 | ---- | C] () -- C:\WINDOWS\System32\ideograf.uce [2010.06.25 12:50:10 | 000,024,006 | ---- | C] () -- C:\WINDOWS\System32\gb2312.uce [2010.06.25 12:50:10 | 000,022,984 | ---- | C] () -- C:\WINDOWS\System32\bopomofo.uce [2010.06.25 12:50:09 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h [2010.06.25 12:50:09 | 000,001,237 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd [2010.06.25 12:50:08 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h [2010.06.25 12:50:04 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc [2008.03.19 17:04:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2008.03.19 17:04:00 | 001,486,848 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2008.03.19 17:04:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2008.03.19 17:04:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2008.03.19 17:04:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll ========== Custom Scans ========== < %ALLUSERSPROFILE%\Application Data\*. > < %ALLUSERSPROFILE%\Application Data\*.exe /s > < %APPDATA%\*. > [2010.06.30 21:28:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Adobe [2010.06.25 13:36:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Avira [2010.07.01 15:26:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\gtk-2.0 [2010.07.05 09:58:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\ICQ [2010.06.25 12:57:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Identities [2010.06.25 12:59:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\InstallShield [2010.06.25 14:37:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Macromedia [2010.07.04 21:30:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Malwarebytes [2010.07.04 10:12:28 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Microsoft [2010.06.25 13:10:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Mozilla [2010.06.25 15:06:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Sun [2010.07.03 23:01:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Utherverse < %APPDATA%\*.exe /s > < %SYSTEMDRIVE%\*.exe > < MD5 for: AGP440.SYS > [2008.04.14 08:03:54 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys [2008.04.14 08:03:54 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys [2008.04.14 08:03:54 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys < MD5 for: ATAPI.SYS > [2008.04.14 08:03:54 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys [2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys [2008.04.14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys < MD5 for: EVENTLOG.DLL > [2008.04.14 07:52:12 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\ERDNT\cache\eventlog.dll [2008.04.14 07:52:12 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\dllcache\eventlog.dll [2008.04.14 07:52:12 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll < MD5 for: NETLOGON.DLL > [2008.04.14 07:52:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\ERDNT\cache\netlogon.dll [2008.04.14 07:52:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\dllcache\netlogon.dll [2008.04.14 07:52:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll < MD5 for: SCECLI.DLL > [2008.04.14 07:52:24 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\ERDNT\cache\scecli.dll [2008.04.14 07:52:24 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\dllcache\scecli.dll [2008.04.14 07:52:24 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll < MD5 for: USERINIT.EXE > [2008.04.14 07:53:04 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\ERDNT\cache\userinit.exe [2008.04.14 07:53:04 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\dllcache\userinit.exe [2008.04.14 07:53:04 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe < MD5 for: WS2IFSL.SYS > [2001.08.18 12:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\dllcache\ws2ifsl.sys [2001.08.18 12:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys < %systemroot%\system32\drivers\*.sys /lockedfiles > < %systemroot%\System32\config\*.sav > [2010.07.04 15:47:09 | 000,262,144 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav [2010.07.04 13:35:13 | 000,262,144 | ---- | M] () -- C:\WINDOWS\system32\config\security.sav [2010.07.04 15:47:09 | 011,010,048 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav [2010.07.04 15:47:11 | 003,932,160 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > [2010.07.01 15:40:39 | 000,063,488 | RHS- | M] () Unable to obtain MD5 -- C:\WINDOWS\system32\tlntsess7.dll [1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ] < End of report > |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 22:43 Uhr. |
Copyright ©2000-2025, Trojaner-Board