explorer.exe direkt nach Anmeldung
Hallo,
wir haben in unserem Unternehmen ein Problem mit der explorer.exe.
Nach jedem Anmeldevorgang stürzt sofort der Prozess ab und in der Ereignisanzeige steht dann folgender Fehler: Code:
Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.5512, fehlgeschlagenes Modul shdocvw.dll, Version 6.0.2900.6036, Fehleradresse 0x00018004.
Das ganze hat vor einem Monat mit 2 PCs angefangen (Windows Updates?) und konnte durch Ersetzen der DLL gelöst werden. Inzwischen funktioniert das nicht mehr und die Anzal der Rechner mit dem Problem ist auf ca. 30 gestiegen. An der Konfiguration der PCs wurde nichts geändert. Das AD/GPO wurde auch nicht verändert.
Hier die üblichen Logs:
OTL: Code:
OTL logfile created on: 19.11.2010 14:37:25 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Dokumente und Einstellungen\testuserb\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1.005,00 Mb Total Physical Memory | 639,00 Mb Available Physical Memory | 64,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): C:\pagefile.sys 1512 3024 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 97,65 Gb Total Space | 85,36 Gb Free Space | 87,41% Space Free | Partition Type: NTFS
Drive D: | 135,22 Gb Total Space | 135,14 Gb Free Space | 99,94% Space Free | Partition Type: NTFS
Drive Q: | 2000,00 Gb Total Space | 26,85 Gb Free Space | 1,34% Space Free | Partition Type: NTFS
Drive V: | 850,00 Gb Total Space | 223,39 Gb Free Space | 26,28% Space Free | Partition Type: NTFS
Computer Name: BWSK0118 | User Name: testuserb | NOT logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Dokumente und Einstellungen\testuserb\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Programme\TeamViewer\Version5\TeamViewer.exe (TeamViewer GmbH)
PRC - C:\Programme\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
PRC - C:\Programme\Analog Devices\SoundMAX\SMax4.exe (Analog Devices, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
========== Modules (SafeList) ==========
MOD - C:\Dokumente und Einstellungen\testuserb\Desktop\OTL.exe (OldTimer Tools)
MOD - c:\Programme\TeamViewer\Version5\TV.dll (TeamViewer GmbH)
MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
========== Driver Services (SafeList) ==========
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-343818398-776561741-1801674531-7679\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.***-gmbh.de
IE - HKU\S-1-5-21-343818398-776561741-1801674531-7679\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.***-gmbh.de
IE - HKU\S-1-5-21-343818398-776561741-1801674531-7679\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKU\S-1-5-21-343818398-776561741-1801674531-7679\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.***-gmbh.de;hxxp://192.168.42.1:8530;hxxp://192.168.42.16:7080;hxxp://192.168.42.5;<local>
IE - HKU\S-1-5-21-343818398-776561741-1801674531-7679\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 127.0.0.1:80
O1 HOSTS File: ([2008.04.14 13:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ApplyEsf-eDocPrintPro] C:\Programme\Gemeinsame Dateien\MAYComputer\eDocPrintPro\ApplyEsf.exe (May Software)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [SoundMAX] C:\Programme\Analog Devices\SoundMAX\Smax4.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SoundMAXPnP] C:\Programme\Analog Devices\Core\smax4pnp.exe (Analog Devices, Inc.)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-343818398-776561741-1801674531-7679\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-343818398-776561741-1801674531-7679\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-343818398-776561741-1801674531-7679\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: Wallpaper = \\192.168.42.5\netlogon\***-logo.jpg
O7 - HKU\S-1-5-21-343818398-776561741-1801674531-7679\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: WallpaperStyle = 0
O7 - HKU\S-1-5-21-343818398-776561741-1801674531-7679\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 1
O7 - HKU\S-1-5-21-343818398-776561741-1801674531-7679\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 1
O7 - HKU\S-1-5-21-343818398-776561741-1801674531-7679\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispAppearancePage = 1
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.8 192.168.42.5
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = ***-GmbH.de
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll - C:\WINDOWS\System32\igfxdev.dll (Intel Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.10.22 08:26:40 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7
ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Sicherheitsupdate für Windows XP (KB923789)
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - Web Folders
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} -
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Shockwave Flash
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - C:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
========== Files/Folders - Created Within 30 Days ==========
[2010.11.19 12:22:36 | 006,153,352 | ---- | C] (Malwarebytes Corporation ) -- C:\Dokumente und Einstellungen\testuserb\Desktop\mbam-setup.exe
[2010.11.19 12:22:33 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\testuserb\Desktop\OTL.exe
[2010.11.19 12:18:22 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.11.19 12:18:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2010.11.19 12:18:20 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.11.19 12:18:20 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes Anti-Malware
[2010.11.19 12:02:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\testuserb\Anwendungsdaten\Avira
[2010.11.19 12:02:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\testuserb\Anwendungsdaten\Identities
[2010.11.19 12:02:10 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\testuserb\Eigene Dateien\Eigene Musik
[2010.11.19 12:02:10 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\testuserb\Eigene Dateien
[2010.11.19 12:02:10 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\testuserb\Eigene Dateien\Eigene Bilder
[2010.11.19 12:02:09 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\testuserb\IETldCache
[2010.11.19 12:02:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\testuserb\Anwendungsdaten\TeamViewer
[2010.11.19 12:01:59 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\testuserb\Anwendungsdaten\Microsoft
[2010.11.19 12:01:59 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\testuserb\Anwendungsdaten
[2010.11.19 12:01:59 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\testuserb\Favoriten
[2010.11.19 12:01:59 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\testuserb\Cookies
[2010.11.19 12:01:59 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\testuserb\Druckumgebung
[2010.11.19 12:01:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\testuserb\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2010.11.19 12:01:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\testuserb\Desktop
[2010.11.19 12:01:58 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\testuserb\SendTo
[2010.11.19 12:01:58 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\testuserb\Recent
[2010.11.19 12:01:58 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\testuserb\Startmenü
[2010.11.19 12:01:58 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\testuserb\Vorlagen
[2010.11.19 12:01:58 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\testuserb\Netzwerkumgebung
[2010.11.19 12:01:58 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\testuserb\Lokale Einstellungen
[2010.11.08 10:34:07 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.10.26 14:15:00 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Adobe
[2010.10.22 11:28:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\SchCache
[2010.10.22 11:22:32 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2010.10.22 11:22:31 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2010.10.22 11:22:31 | 000,102,856 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avfwot.sys
[2010.10.22 11:22:31 | 000,079,432 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avfwim.sys
[2010.10.22 11:22:31 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2010.10.22 11:22:31 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2010.10.22 11:22:31 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2010.10.22 11:21:29 | 000,000,000 | ---D | C] -- C:\Programme\Avira
[2010.10.22 11:21:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2010.10.22 11:13:46 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Works
[2010.10.22 11:13:36 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Visual Studio
[2010.10.22 11:13:36 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\DESIGNER
[2010.10.22 11:13:26 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft.NET
[2010.10.22 11:12:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2010.10.22 11:12:14 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Office
[2010.10.22 11:12:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help
[2010.10.22 11:12:01 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2010.10.22 11:01:01 | 000,000,000 | ---D | C] -- C:\Programme\eDocEMail
[2010.10.22 10:59:45 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\MAYComputer
[2010.10.22 10:59:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eDocPrintPro
[2010.10.22 10:49:31 | 000,000,000 | ---D | C] -- C:\Programme\VideoLAN
[2010.10.22 10:49:11 | 000,000,000 | ---D | C] -- C:\Programme\7-Zip
[2010.10.22 10:47:59 | 000,000,000 | ---D | C] -- C:\Programme\JkDefragGUI
[2010.10.22 10:45:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2010.10.22 10:45:25 | 000,000,000 | ---D | C] -- C:\Programme\MSBuild
[2010.10.22 10:45:24 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-US
[2010.10.22 10:45:20 | 000,000,000 | ---D | C] -- C:\Programme\Reference Assemblies
[2010.10.22 10:45:06 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\prntvpt.dll
[2010.10.22 10:45:05 | 001,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xpssvcs.dll
[2010.10.22 10:44:44 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2010.10.22 10:44:32 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2010.10.22 10:43:47 | 000,000,000 | ---D | C] -- C:\Programme\TeamViewer
[2010.10.22 10:39:51 | 000,000,000 | ---D | C] -- C:\Programme\gs
[2010.10.22 10:39:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe
[2010.10.22 10:39:07 | 000,000,000 | ---D | C] -- C:\Programme\Adobe
[2010.10.22 10:07:02 | 000,000,000 | ---D | C] -- C:\Programme\Hewlett-Packard
[2010.10.22 10:01:47 | 000,045,184 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\drivers\HECI.sys
[2010.10.22 10:01:46 | 000,981,528 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\heciudlg.exe
[2010.10.22 10:01:46 | 000,000,000 | ---D | C] -- C:\Programme\Intel
[2010.10.22 09:54:41 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2010.10.22 09:54:41 | 000,000,000 | RHSD | C] -- C:\WINDOWS\System32\dllcache
[2010.10.22 09:54:41 | 000,000,000 | R--D | C] -- C:\WINDOWS\Web
[2010.10.22 09:54:41 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\system
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Network Diagnostic
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\L2Schemas
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\java
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de-de
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2010.10.22 09:54:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
[2010.10.22 09:54:26 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys
[2010.10.22 09:54:26 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax
[2010.10.22 09:54:26 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys
[2010.10.22 09:54:26 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll
[2010.10.22 09:54:24 | 001,285,632 | ---- | C] (Analog Devices) -- C:\WINDOWS\System32\SMMedia.dll
[2010.10.22 09:54:24 | 000,053,248 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\System32\wdmioctl.dll
[2010.10.22 09:54:24 | 000,049,152 | ---- | C] (Analog Devices Inc.) -- C:\WINDOWS\System32\DSndUp.exe
[2010.10.22 09:54:24 | 000,000,000 | -H-D | C] -- C:\Programme\InstallShield Installation Information
[2010.10.22 09:54:24 | 000,000,000 | ---D | C] -- C:\Programme\Analog Devices
[2010.10.22 09:54:14 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\InstallShield
[2010.10.22 09:50:50 | 000,258,048 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrsve.lrc
[2010.10.22 09:50:50 | 000,253,952 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrtrk.lrc
[2010.10.22 09:50:50 | 000,225,280 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrheb.lrc
[2010.10.22 09:50:50 | 000,184,320 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrjpn.lrc
[2010.10.22 09:50:50 | 000,180,224 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrkor.lrc
[2010.10.22 09:50:50 | 000,057,344 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxprd32.dll
[2010.10.22 09:50:50 | 000,024,576 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxexps.dll
[2010.10.22 09:50:49 | 006,048,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\drivers\igxpmp32.sys
[2010.10.22 09:50:49 | 005,672,960 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxress.dll
[2010.10.22 09:50:49 | 003,398,656 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxpdx32.dll
[2010.10.22 09:50:49 | 002,350,368 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxpdv32.dll
[2010.10.22 09:50:49 | 002,342,912 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\iglicd32.dll
[2010.10.22 09:50:49 | 000,651,264 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxcfg.exe
[2010.10.22 09:50:49 | 000,294,912 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igldev32.dll
[2010.10.22 09:50:49 | 000,286,720 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrell.lrc
[2010.10.22 09:50:49 | 000,278,528 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrita.lrc
[2010.10.22 09:50:49 | 000,278,528 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrfra.lrc
[2010.10.22 09:50:49 | 000,278,528 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxresp.lrc
[2010.10.22 09:50:49 | 000,278,528 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrdeu.lrc
[2010.10.22 09:50:49 | 000,274,432 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrnld.lrc
[2010.10.22 09:50:49 | 000,270,336 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrptg.lrc
[2010.10.22 09:50:49 | 000,266,240 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrrus.lrc
[2010.10.22 09:50:49 | 000,266,240 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrptb.lrc
[2010.10.22 09:50:49 | 000,262,144 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrplk.lrc
[2010.10.22 09:50:49 | 000,262,144 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrhun.lrc
[2010.10.22 09:50:49 | 000,258,048 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrsky.lrc
[2010.10.22 09:50:49 | 000,258,048 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrfin.lrc
[2010.10.22 09:50:49 | 000,258,048 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrdan.lrc
[2010.10.22 09:50:49 | 000,258,048 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrcsy.lrc
[2010.10.22 09:50:49 | 000,253,952 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrslv.lrc
[2010.10.22 09:50:49 | 000,253,952 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrnor.lrc
[2010.10.22 09:50:49 | 000,249,856 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrenu.lrc
[2010.10.22 09:50:49 | 000,237,568 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrtha.lrc
[2010.10.22 09:50:49 | 000,229,376 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrara.lrc
[2010.10.22 09:50:49 | 000,217,088 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxdev.dll
[2010.10.22 09:50:49 | 000,212,992 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxpph.dll
[2010.10.22 09:50:49 | 000,181,760 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igxpgd32.dll
[2010.10.22 09:50:49 | 000,172,032 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxext.exe
[2010.10.22 09:50:49 | 000,155,648 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrcht.lrc
[2010.10.22 09:50:49 | 000,155,648 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxrchs.lrc
[2010.10.22 09:50:49 | 000,135,168 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxdo.dll
[2010.10.22 09:50:49 | 000,126,976 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxcpl.cpl
[2010.10.22 09:50:49 | 000,106,496 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\hccutils.dll
[2010.10.22 09:50:49 | 000,052,224 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\igfxsrvc.dll
[2010.10.22 09:50:48 | 000,920,088 | ---- | C] (Intel® Corporation) -- C:\WINDOWS\System32\igxpun.exe
[2010.10.22 09:50:48 | 000,319,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\difxapi.dll
[2010.10.22 09:50:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang
[2010.10.22 09:50:48 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DRVSTORE
[2010.10.22 09:50:44 | 000,000,000 | ---D | C] -- C:\Intel
[2010.10.22 09:18:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie8updates
[2010.10.22 09:02:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2010.10.22 09:01:58 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2010.10.22 09:01:03 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll
[2010.10.22 09:00:12 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2010.10.22 09:00:11 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\ODBC
[2010.10.22 09:00:09 | 000,000,000 | R--D | C] -- C:\Programme
[2010.10.22 09:00:09 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\SpeechEngines
[2010.10.22 09:00:09 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared
[2010.10.22 09:00:09 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien
[2010.10.22 09:00:06 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuq.dll
[2010.10.22 09:00:06 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuf.dll
[2010.10.22 09:00:06 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll
[2010.10.22 09:00:05 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll
[2010.10.22 09:00:05 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll
[2010.10.22 09:00:05 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll
[2010.10.22 09:00:05 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll
[2010.10.22 09:00:05 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll
[2010.10.22 09:00:05 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll
[2010.10.22 09:00:05 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll
[2010.10.22 09:00:05 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll
[2010.10.22 09:00:04 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll
[2010.10.22 09:00:04 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll
[2010.10.22 09:00:04 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll
[2010.10.22 09:00:04 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll
[2010.10.22 09:00:03 | 000,008,192 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll
[2010.10.22 09:00:03 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll
[2010.10.22 09:00:03 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll
[2010.10.22 09:00:03 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll
[2010.10.22 09:00:03 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll
[2010.10.22 09:00:03 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll
[2010.10.22 09:00:03 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll
[2010.10.22 09:00:02 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll
[2010.10.22 09:00:02 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll
[2010.10.22 09:00:02 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll
[2010.10.22 09:00:02 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll
[2010.10.22 09:00:02 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll
[2010.10.22 09:00:01 | 000,007,168 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll
[2010.10.22 09:00:01 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll
[2010.10.22 09:00:01 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll
[2010.10.22 09:00:01 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll
[2010.10.22 09:00:01 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl.dll
[2010.10.22 09:00:01 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll
[2010.10.22 09:00:01 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll
[2010.10.22 09:00:01 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll
[2010.10.22 09:00:01 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll
[2010.10.22 09:00:01 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL
[2010.10.22 09:00:01 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll
[2010.10.22 09:00:01 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl1.dll
[2010.10.22 09:00:01 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll
[2010.10.22 08:59:59 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll
[2010.10.22 08:59:59 | 000,103,936 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll
[2010.10.22 08:59:59 | 000,086,556 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dgsetup.dll
[2010.10.22 08:59:59 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll
[2010.10.22 08:59:59 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll
[2010.10.22 08:59:59 | 000,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV
[2010.10.22 08:59:58 | 000,127,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL
[2010.10.22 08:59:58 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL
[2010.10.22 08:59:58 | 000,073,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV
[2010.10.22 08:59:58 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV
[2010.10.22 08:59:58 | 000,025,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV
[2010.10.22 08:59:58 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL
[2010.10.22 08:59:58 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL
[2010.10.22 08:59:58 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL
[2010.10.22 08:59:58 | 000,009,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL
[2010.10.22 08:59:58 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL
[2010.10.22 08:59:58 | 000,004,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV
[2010.10.22 08:59:58 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV
[2010.10.22 08:59:58 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV
[2010.10.22 08:59:58 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV
[2010.10.22 08:59:58 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV
[2010.10.22 08:59:58 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV
[2010.10.22 08:59:58 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK
[2010.10.22 08:59:57 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WINSPOOL.DRV
[2010.10.22 08:59:57 | 000,109,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL
[2010.10.22 08:59:57 | 000,070,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL
[2010.10.22 08:59:57 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL
[2010.10.22 08:59:57 | 000,033,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL
[2010.10.22 08:59:57 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE
[2010.10.22 08:59:57 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll
[2010.10.22 08:59:56 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll
[2010.10.22 08:59:50 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü
[2010.10.22 08:59:50 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente
[2010.10.22 08:59:50 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users\Vorlagen
[2010.10.22 08:59:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Favoriten
[2010.10.22 08:59:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Desktop
[2010.10.22 08:59:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2010.10.22 08:59:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2010.10.22 08:59:35 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft
[2010.10.22 08:59:35 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten
[2010.10.22 08:59:18 | 000,000,000 | -HSD | C] -- C:\System Volume Information
[2010.10.22 08:59:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen
[2010.10.22 08:57:10 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\browserchoice.exe
[2010.10.22 08:42:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Windows Genuine Advantage
[2010.10.22 08:42:49 | 000,026,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
[2010.10.22 08:42:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2010.10.22 08:42:48 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2010.10.22 08:42:46 | 000,018,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2010.10.22 08:40:21 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2010.10.22 08:36:26 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2010.10.22 08:36:08 | 000,256,712 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\PROUnstl.exe
[2010.10.22 08:31:46 | 000,000,000 | -H-D | C] -- C:\Programme\Uninstall Information
[2010.10.22 08:31:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2010.10.22 08:31:07 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2010.10.22 08:31:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010.10.22 08:26:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2010.10.22 08:26:53 | 000,000,000 | ---D | C] -- C:\Programme\xerox
[2010.10.22 08:26:53 | 000,000,000 | ---D | C] -- C:\Programme\microsoft frontpage
[2010.10.22 08:26:30 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll
[2010.10.22 08:25:59 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\All Users\DRM
[2010.10.22 08:25:51 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2010.10.22 08:25:51 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2010.10.22 08:25:44 | 000,000,000 | -H-D | C] -- C:\Programme\WindowsUpdate
[2010.10.22 08:25:41 | 000,000,000 | ---D | C] -- C:\Programme\Online-Dienste
[2010.10.22 08:25:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2010.10.22 08:25:24 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll
[2010.10.22 08:25:18 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll
[2010.10.22 08:25:17 | 000,070,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll
[2010.10.22 08:25:16 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Dienste
[2010.10.22 08:25:14 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll
[2010.10.22 08:25:14 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2010.10.22 08:25:14 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\MSSoap
[2010.10.22 08:25:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2010.10.22 08:25:10 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2010.10.22 08:25:08 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
[2010.10.22 08:25:08 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll
[2010.10.22 08:25:08 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll
[2010.10.22 08:25:08 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe
[2010.10.22 08:25:08 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll
[2010.10.22 08:25:08 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll
[2010.10.22 08:25:08 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll
[2010.10.22 08:25:08 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll
[2010.10.22 08:25:07 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll
[2010.10.22 08:25:05 | 000,000,000 | ---D | C] -- C:\Programme\Movie Maker
[2010.10.22 08:24:52 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll
[2010.10.22 08:24:52 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll
[2010.10.22 08:24:52 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll
[2010.10.22 08:24:52 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll
[2010.10.22 08:24:49 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll
[2010.10.22 08:24:49 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltMc.exe
[2010.10.22 08:24:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2010.10.22 08:24:48 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll
[2010.10.22 08:24:48 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll
[2010.10.22 08:24:48 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll
[2010.10.22 08:24:48 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll
[2010.10.22 08:24:48 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll
[2010.10.22 08:24:46 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll
[2010.10.22 08:24:46 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll
[2010.10.22 08:24:46 | 000,000,000 | ---D | C] -- C:\Programme\NetMeeting
[2010.10.22 08:24:45 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll
[2010.10.22 08:24:44 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe
[2010.10.22 08:24:44 | 000,000,000 | ---D | C] -- C:\Programme\Outlook Express
[2010.10.22 08:24:43 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll
[2010.10.22 08:24:43 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll
[2010.10.22 08:24:43 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll
[2010.10.22 08:24:43 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll
[2010.10.22 08:24:39 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\System
[2010.10.22 08:24:38 | 000,000,000 | ---D | C] -- C:\Programme\Internet Explorer
[2010.10.22 08:24:37 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Bilder
[2010.10.22 08:24:11 | 000,000,000 | ---D | C] -- C:\Programme\ComPlus Applications
[2010.10.22 08:24:05 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2010.10.22 08:23:59 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Musik
[2010.10.22 08:23:59 | 000,000,000 | ---D | C] -- C:\Programme\Windows Media Player
[2010.10.22 08:23:59 | 000,000,000 | ---D | C] -- C:\Programme\Online Services
[2010.10.22 08:23:54 | 000,000,000 | ---D | C] -- C:\Programme\Messenger
[2010.10.22 08:23:51 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe
[2010.10.22 08:23:51 | 000,000,000 | ---D | C] -- C:\Programme\MSN Gaming Zone
[2010.10.22 08:23:43 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avtapi.dll
[2010.10.22 08:23:43 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
[2010.10.22 08:23:43 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avwav.dll
[2010.10.22 08:23:43 | 000,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll
[2010.10.22 08:23:43 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avmeter.dll
[2010.10.22 08:23:42 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winchat.exe
[2010.10.22 08:23:37 | 000,683,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll
[2010.10.22 08:23:37 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\calc.exe
[2010.10.22 08:23:37 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe
[2010.10.22 08:23:37 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sol.exe
[2010.10.22 08:23:36 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshearts.exe
[2010.10.22 08:23:36 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmine.exe
[2010.10.22 08:23:36 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\freecell.exe
[2010.10.22 08:23:36 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe
[2010.10.22 08:23:36 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe
[2010.10.22 08:23:36 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe
[2010.10.22 08:23:36 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe
[2010.10.22 08:23:36 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe
[2010.10.22 08:23:36 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe
[2010.10.22 08:23:35 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe
[2010.10.22 08:23:35 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe
[2010.10.22 08:23:35 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe
[2010.10.22 08:23:35 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe
[2010.10.22 08:23:35 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe
[2010.10.22 08:23:35 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe
[2010.10.22 08:23:35 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll
[2010.10.22 08:23:35 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll
[2010.10.22 08:23:24 | 000,000,000 | ---D | C] -- C:\Programme\MSN
[2010.10.22 08:23:23 | 000,356,352 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll
[2010.10.22 08:23:23 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe
[2010.10.22 08:23:23 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe
[2010.10.22 08:23:23 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe
[2010.10.22 08:23:23 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl
[2010.10.22 08:23:22 | 000,539,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe
[2010.10.22 08:23:22 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
[2010.10.22 08:23:22 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe
[2010.10.22 08:23:22 | 000,000,000 | ---D | C] -- C:\Programme\Windows NT
[2010.10.22 08:23:21 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll
[2010.10.22 08:23:21 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll
[2010.10.22 08:23:21 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll
[2010.10.22 08:23:21 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll
[2010.10.22 08:23:20 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll
[2010.10.22 08:23:20 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll
[2010.10.22 08:23:20 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe
[2010.10.22 08:23:20 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe
[2010.10.22 08:23:20 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll
[2010.10.22 08:23:20 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe
[2010.10.22 08:23:19 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll
[2010.10.22 08:23:19 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll
[2010.10.22 08:23:19 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll
[2010.10.22 08:23:19 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll
[2010.10.22 08:23:19 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll
[2010.10.22 08:23:19 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe
[2010.10.22 08:23:19 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll
[2010.10.22 08:23:19 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll
[2010.10.22 08:23:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2010.10.22 08:23:18 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll
[2010.10.22 08:23:18 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll
[2010.10.22 08:23:18 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll
[2010.10.22 08:23:18 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll
[2010.10.22 08:23:18 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe
[2010.10.22 08:23:18 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll
[2010.10.22 08:23:18 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2010.10.22 08:23:17 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll
[2010.10.22 08:23:17 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll
[2010.10.22 08:23:17 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll
[2010.10.22 08:23:17 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll
[2010.10.22 08:23:17 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll
[2010.10.22 08:23:17 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll
[2010.10.22 08:23:17 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll
[2010.10.22 08:23:17 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll
[2010.10.22 08:23:16 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll
[2010.10.22 08:23:16 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll
[2010.10.22 08:23:12 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll
[2010.10.22 08:23:11 | 000,189,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll
[2010.10.22 08:23:11 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll
[2010.10.22 08:23:11 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll
[2010.10.22 08:23:07 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Videos
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010.11.19 14:36:00 | 000,000,428 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{78DC3309-C3D4-4E3B-BC11-F48A35C2C1D0}.job
[2010.11.19 12:30:27 | 000,001,718 | -H-- | M] () -- C:\Dokumente und Einstellungen\testuserb\Eigene Dateien\Default.rdp
[2010.11.19 12:13:08 | 006,153,352 | ---- | M] (Malwarebytes Corporation ) -- C:\Dokumente und Einstellungen\testuserb\Desktop\mbam-setup.exe
[2010.11.19 12:09:50 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\testuserb\Desktop\OTL.exe
[2010.11.19 12:06:15 | 000,004,198 | RHS- | M] () -- C:\Dokumente und Einstellungen\testuserb\ntuser.pol
[2010.11.19 12:06:01 | 000,452,236 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2010.11.19 12:06:01 | 000,435,396 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.11.19 12:06:01 | 000,081,300 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2010.11.19 12:06:01 | 000,068,292 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.11.19 12:01:38 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.11.18 05:44:56 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.11.04 05:22:34 | 000,140,440 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.10.26 14:15:15 | 000,001,709 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader 9.lnk
[2010.10.22 11:22:41 | 000,001,671 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk
[2010.10.22 11:22:27 | 000,124,784 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2010.10.22 11:22:27 | 000,060,936 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2010.10.22 11:22:27 | 000,028,520 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2010.10.22 11:22:27 | 000,022,360 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2010.10.22 11:22:26 | 000,102,856 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avfwot.sys
[2010.10.22 11:22:26 | 000,079,432 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avfwim.sys
[2010.10.22 11:22:26 | 000,045,416 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2010.10.22 10:49:51 | 000,000,691 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\VLC media player.lnk
[2010.10.22 10:48:01 | 000,001,596 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\JkDefragGUI.lnk
[2010.10.22 10:46:07 | 000,000,787 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\TeamViewer 5 Host.lnk
[2010.10.22 09:21:23 | 000,004,444 | ---- | M] () -- C:\WINDOWS\System32\pid.PNF
[2010.10.22 09:19:24 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010.10.22 09:12:16 | 000,001,503 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Browserwahl.lnk
[2010.10.22 08:40:35 | 000,016,699 | RHS- | M] () -- C:\Dokumente und Einstellungen\All Users\ntuser.pol
[2010.10.22 08:28:53 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2010.10.22 08:28:18 | 000,000,261 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2010.10.22 08:26:40 | 000,002,951 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.10.22 08:26:40 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010.10.22 08:26:40 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010.10.22 08:26:40 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010.10.22 08:26:40 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010.10.22 08:26:38 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010.10.22 08:26:38 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010.10.22 08:26:38 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010.10.22 08:26:30 | 000,004,161 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2010.10.22 08:24:18 | 000,021,740 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010.10.22 08:22:25 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.11.19 12:03:05 | 000,001,718 | -H-- | C] () -- C:\Dokumente und Einstellungen\testuserb\Eigene Dateien\Default.rdp
[2010.11.19 12:02:06 | 000,004,198 | RHS- | C] () -- C:\Dokumente und Einstellungen\testuserb\ntuser.pol
[2010.11.02 14:01:23 | 000,000,428 | -H-- | C] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{78DC3309-C3D4-4E3B-BC11-F48A35C2C1D0}.job
[2010.10.26 14:15:15 | 000,001,709 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader 9.lnk
[2010.10.22 11:22:41 | 000,001,671 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk
[2010.10.22 10:49:54 | 000,001,477 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ideal***.lnk
[2010.10.22 10:49:51 | 000,000,691 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\VLC media player.lnk
[2010.10.22 10:48:01 | 000,001,596 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\JkDefragGUI.lnk
[2010.10.22 10:43:54 | 000,000,787 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\TeamViewer 5 Host.lnk
[2010.10.22 09:58:38 | 000,000,211 | -HS- | C] () -- C:\boot.ini
[2010.10.22 09:58:35 | 000,000,261 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2010.10.22 09:50:49 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v5016.dll
[2010.10.22 09:50:49 | 000,029,504 | ---- | C] () -- C:\WINDOWS\System32\igxpxs32.vp
[2010.10.22 09:50:49 | 000,002,096 | ---- | C] () -- C:\WINDOWS\System32\igxpxk32.vp
[2010.10.22 09:21:23 | 000,004,444 | ---- | C] () -- C:\WINDOWS\System32\pid.PNF
[2010.10.22 09:12:16 | 000,001,503 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Browserwahl.lnk
[2010.10.22 09:00:14 | 000,001,393 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010.10.22 09:00:11 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010.10.22 08:59:57 | 000,001,806 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2010.10.22 08:59:18 | 000,140,440 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.10.22 08:40:35 | 000,016,699 | RHS- | C] () -- C:\Dokumente und Einstellungen\All Users\ntuser.pol
[2010.10.22 08:28:53 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2010.10.22 08:28:18 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010.10.22 08:26:40 | 000,002,951 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.10.22 08:26:40 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2010.10.22 08:26:40 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2010.10.22 08:26:40 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2010.10.22 08:26:40 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2010.10.22 08:26:38 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2010.10.22 08:26:38 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2010.10.22 08:26:37 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2010.10.22 08:25:23 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt256.bmp
[2010.10.22 08:25:22 | 000,048,680 | -HS- | C] () -- C:\WINDOWS\winnt.bmp
[2010.10.22 08:24:18 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010.10.22 08:23:39 | 000,065,832 | ---- | C] () -- C:\WINDOWS\Santa Fe-Stuck.bmp
[2010.10.22 08:23:39 | 000,009,522 | ---- | C] () -- C:\WINDOWS\Zapotek.bmp
[2010.10.22 08:23:38 | 000,065,978 | ---- | C] () -- C:\WINDOWS\Seifenblase.bmp
[2010.10.22 08:23:38 | 000,065,954 | ---- | C] () -- C:\WINDOWS\Präriewind.bmp
[2010.10.22 08:23:38 | 000,026,680 | ---- | C] () -- C:\WINDOWS\Fächer.bmp
[2010.10.22 08:23:38 | 000,026,582 | ---- | C] () -- C:\WINDOWS\Granit.bmp
[2010.10.22 08:23:38 | 000,017,362 | ---- | C] () -- C:\WINDOWS\Rhododendron.bmp
[2010.10.22 08:23:38 | 000,017,336 | ---- | C] () -- C:\WINDOWS\Angler.bmp
[2010.10.22 08:23:38 | 000,017,062 | ---- | C] () -- C:\WINDOWS\Kaffeetasse.bmp
[2010.10.22 08:23:38 | 000,016,730 | ---- | C] () -- C:\WINDOWS\Feder.bmp
[2010.10.22 08:23:38 | 000,001,272 | ---- | C] () -- C:\WINDOWS\Blaue Spitzen 16.bmp
[2010.10.22 08:23:36 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2010.10.22 08:23:36 | 000,001,237 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2010.10.22 08:23:35 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2010.10.22 08:23:30 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
========== LOP Check ==========
[2010.10.22 11:01:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eDocPrintPro
[2010.11.19 12:02:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\testuserb\Anwendungsdaten\TeamViewer
[2010.11.19 14:36:00 | 000,000,428 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{78DC3309-C3D4-4E3B-BC11-F48A35C2C1D0}.job
========== Purity Check ==========
========== Custom Scans ==========
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2010.11.19 12:02:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\testuserb\Anwendungsdaten\Avira
[2010.11.19 12:02:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\testuserb\Anwendungsdaten\Identities
[2010.11.19 12:03:12 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\testuserb\Anwendungsdaten\Microsoft
[2010.11.19 12:02:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\testuserb\Anwendungsdaten\TeamViewer
< %APPDATA%\*.exe /s >
< %SYSTEMDRIVE%\*.exe >
< MD5 for: AGP440.SYS >
[2008.04.14 13:00:00 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
< MD5 for: ATAPI.SYS >
[2008.04.14 13:00:00 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.14 13:00:00 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
< MD5 for: EVENTLOG.DLL >
[2008.04.14 13:00:00 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2008.04.14 13:00:00 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\explorer.exe
< MD5 for: NETLOGON.DLL >
[2008.04.14 13:00:00 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2008.04.14 13:00:00 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: USER32.DLL >
[2008.04.14 13:00:00 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\user32.dll
< MD5 for: USERINIT.EXE >
[2008.04.14 13:00:00 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2008.04.14 13:00:00 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2008.04.14 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2010.10.22 09:58:38 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2010.10.22 09:58:38 | 001,089,536 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2010.10.22 09:58:38 | 000,454,656 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< End of report >
Extras: Code:
OTL Extras logfile created on: 19.11.2010 14:37:25 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Dokumente und Einstellungen\testuserb\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1.005,00 Mb Total Physical Memory | 639,00 Mb Available Physical Memory | 64,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 85,00% Paging File free
Paging file location(s): C:\pagefile.sys 1512 3024 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 97,65 Gb Total Space | 85,36 Gb Free Space | 87,41% Space Free | Partition Type: NTFS
Drive D: | 135,22 Gb Total Space | 135,14 Gb Free Space | 99,94% Space Free | Partition Type: NTFS
Drive Q: | 2000,00 Gb Total Space | 26,85 Gb Free Space | 1,34% Space Free | Partition Type: NTFS
Drive V: | 850,00 Gb Total Space | 223,39 Gb Free Space | 26,28% Space Free | Partition Type: NTFS
Computer Name: BWSK0118 | User Name: testuserb | NOT logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"7030:TCP" = 7030:TCP:*:Enabled:Avira Security Management Center Agent (Incoming)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\TeamViewer\Version5\TeamViewer.exe" = C:\Programme\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)
"C:\Programme\TeamViewer\Version5\TeamViewer_Service.exe" = C:\Programme\TeamViewer\Version5\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH)
"C:\Programme\Avira\Avira Security Management Center Agent\agent.exe" = C:\Programme\Avira\Avira Security Management Center Agent\agent.exe:*:Enabled:Avira Security Management Center Agent (Outgoing) -- (Avira GmbH)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{61FA587F-4EB1-47E3-8672-D0C9F876962A}" = eDoc Plugin EMail
"{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU
"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (German) 12
"{90120000-0012-0000-0000-0000000FF1CE}" = Microsoft Office Standard 2007
"{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0012-0000-0000-0000000FF1CE}_STANDARD_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_STANDARD_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_STANDARD_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_STANDARD_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_STANDARD_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_STANDARD_{A0516415-ED61-419A-981D-93596DA74165}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_STANDARD_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_STANDARD_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_STANDARD_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_STANDARD_{26454C26-D259-4543-AA60-3189E09C5F76}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.0 - Deutsch
"{AC76BA86-7AD7-2447-0000-900000000003}" = Chinese Simplified Fonts Support For Adobe Reader 9
"{AC76BA86-7AD7-2448-0000-900000000003}" = Chinese Traditional Fonts Support For Adobe Reader 9
"{AC76BA86-7AD7-5760-0000-900000000003}" = Japanese Fonts Support For Adobe Reader 9
"{B4007B15-35A1-44B2-A591-BCF387720BC4}" = eDocPrintPro v3.15.5
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DBBE5C26-72B7-4E01-950D-86BDE35918ED}" = Embedded Security for HP ProtectTools Driver
"{E93FA0AE-24E0-4D5B-A6FF-1C46B4829776}" = gs_x86
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F3493E2F-B147-4EDD-9AE2-5DEDB8776232}" = Avira Security Management Center Agent
"7-Zip" = 7-Zip 4.65
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Avira AntiVir Desktop" = Avira AntiVir Professional
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HECI" = Intel(R) Management Engine Interface
"ie8" = Windows Internet Explorer 8
"JkDefragGUI" = JkDefragGUI 1.15
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"PROSet" = Intel(R) Network Connections Drivers
"SP46137" = HP Softpaq SP46137
"STANDARD" = Microsoft Office Standard 2007
"TeamViewer 5 Host" = TeamViewer 5 Host
"VLC media player" = VLC media player 1.1.4
========== Last 10 Event Log Errors ==========
Error: Unable to start EventLog service!
< End of report >
Malwarebytes' Anti-Malware: Code:
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Datenbank Version: 5150
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
19.11.2010 12:24:17
mbam-log-2010-11-19 (12-24-17).txt
Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 208736
Laufzeit: 4 Minute(n), 35 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
Sind für jede Hilfe dankbar, Test-PCs stehen bereit, Datenverlust spielt keine Rolle und Fehler ist reproduzierbar.
Gruß
BM |
