Hallo.
Wenn ich meinen Rechner starte, läuft erst ein paar Minuten alles normal, aber bei zunehmender Betriebsdauer tritt bei jedem Linkklick das Problem auf, daß ich bei Firefox und dem Internet Explorer keine Rückmeldung mehr bekomme, bis dann kurze Zeit später der Rechner komplett abstürzt und mir nur der Hardreset bleibt.
Ich habe Malwarebytes' Anti-Malware drüberlaufen lassen und es wurde einiges gefunden.
Hier die Logs:
Malwarebytes' Anti-Malware
SUPERAntiSpywareCode:Malwarebytes' Anti-Malware 1.30 Datenbank Version: 1391 Windows 6.0.6001 Service Pack 1 13.11.2008 01:32:01 mbam-log-2008-11-13 (01-32-01).txt Scan-Methode: Vollständiger Scan (C:\|) Durchsuchte Objekte: 140635 Laufzeit: 31 minute(s), 27 second(s) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 1 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 2 Infizierte Dateiobjekte der Registrierung: 1 Infizierte Verzeichnisse: 0 Infizierte Dateien: 20 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: C:\Windows\System32\cbXPfCtr.dll (Trojan.Vundo) -> Delete on reboot. Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSServer (Trojan.Agent) -> Delete on reboot. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSServer (Trojan.Agent) -> Quarantined and deleted successfully. Infizierte Dateiobjekte der Registrierung: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\\windows\\system32\\cbxpffxp -> Quarantined and deleted successfully. Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: C:\Users\Karsten\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IX6WLCIX\upd[1] (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\cbXPfFXp.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\cbXqQhEt.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\iifdbArs.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\qoMeEUnl.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\vtUonOEX.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\SysWOW64\cbXPfFXp.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\SysWOW64\cbXqQhEt.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\SysWOW64\iifdbArs.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\SysWOW64\qoMeEUnl.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\SysWOW64\vtUonOEX.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\cbXPfCtr.dll (Trojan.Agent) -> Delete on reboot. C:\Windows\System32\cbXqoNDT.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\geBsqpMd.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\jkkIBTJD.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\ddcCRJBT.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\rqRHxWQI.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\fCrqQGXQ.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\hgGxXpQj.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\Windows\System32\hgGyYPJa.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
hijackthis (Der rot markierte Eintrag wird mir bei der Auswertung als gefährlich angezeigt)Code:SUPERAntiSpyware Scan Log http://www.superantispyware.com Generated 11/14/2008 at 04:54 PM Application Version : 4.21.1004 Core Rules Database Version : 3637 Trace Rules Database Version: 1620 Scan type : Complete Scan Total Scan Time : 00:54:30 Memory items scanned : 135 Memory threats detected : 1 Registry items scanned : 6801 Registry threats detected : 7 File items scanned : 31819 File threats detected : 11 Trojan.Vundo-Variant/Small-GEN C:\WINDOWS\SYSTEM32\EFCBTRSL.DLL C:\WINDOWS\SYSTEM32\EFCBTRSL.DLL Adware.Vundo Variant HKLM\Software\Classes\CLSID\{9950772D-AF73-4AEA-80B6-C251EC40EA30} HKCR\CLSID\{9950772D-AF73-4AEA-80B6-C251EC40EA30} HKCR\CLSID\{9950772D-AF73-4AEA-80B6-C251EC40EA30}\InprocServer32 HKCR\CLSID\{9950772D-AF73-4AEA-80B6-C251EC40EA30}\InprocServer32#ThreadingModel C:\WINDOWS\SYSWOW64\EFCBTRSL.DLL HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks#{9950772D-AF73-4AEA-80B6-C251EC40EA30} HKCR\CLSID\{9950772D-AF73-4AEA-80B6-C251EC40EA30} Adware.Tracking Cookie C:\Users\Karsten\AppData\Roaming\Microsoft\Windows\Cookies\karsten@2o7[2].txt C:\Users\Karsten\AppData\Roaming\Microsoft\Windows\Cookies\karsten@www.etracker[1].txt Adware.Vundo Variant/Rel HKLM\Software\Microsoft\Windows\CurrentVersion\Run#MSServer [ rundll32.exe C:\Windows\system32\efcBtrSL.dll,#1 ] Adware.Vundo/Variant C:\WINDOWS\SYSWOW64\AWTSQGXO.DLL C:\WINDOWS\SYSWOW64\DDCBXNDD.DLL C:\WINDOWS\SYSWOW64\EFCBQOOF.DLL C:\WINDOWS\SYSWOW64\EFCBTSSS.DLL C:\WINDOWS\SYSWOW64\JKKICCST.DLL C:\WINDOWS\SYSWOW64\QOMCCCBB.DLL C:\WINDOWS\SYSWOW64\URQRLDVW.DLL
hjtscanlistCode:Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:33:37, on 14.11.2008 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files (x86)\Trillian\trillian.exe C:\Program Files (x86)\Java\jre1.6.0_07\bin\jusched.exe C:\Program Files (x86)\Ashampoo\Ashampoo Magical Defrag 2\bin\defragTaskBar.exe C:\Program Files (x86)\Kaspersky Internet Security 2009\avp.exe C:\PROGRA~2\Ashampoo\ASHAMP~2\bin\DEFRAG~3.EXE C:\PROGRA~2\Ashampoo\ASHAMP~2\bin\defragActivityMonitor.exe C:\Windows\SysWOW64\rundll32.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bild.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files (x86)\google\googletoolbar1.dll O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" O4 - HKLM\..\Run: [DefragTaskBar] "C:\Program Files (x86)\Ashampoo\Ashampoo Magical Defrag 2\bin\defragTaskBar.exe" O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Internet Security 2009\avp.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [MSServer] rundll32.exe C:\Windows\system32\awtrPgHB.dll,#1 O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Program Files (x86)\Kaspersky Internet Security 2009\ie_banner_deny.htm O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~2\Java\JRE16~3.0_0\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~2\Java\JRE16~3.0_0\bin\ssv.dll O9 - Extra button: Statistik für den Schutz des Web-Datenverkehrs - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files (x86)\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\Spybot - Search & Destroy\SDHelper.dll O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{B1C16C8B-64DB-4CC2-85E0-DB2BB2754BD7}: NameServer = 192.168.2.1 O20 - AppInit_DLLs: C:\PROGRA~2\Kaspersky Internet Security 2009\mzvkbd.dll,C:\PROGRA~2\Kaspersky Internet Security 2009\adialhk.dll O23 - Service: AAV UpdateService - Unknown owner - C:\Program Files (x86)\Common Files\AAV\aavus.exe O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files (x86)\Ad-Aware\aawservice.exe O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AshampooDefragService - - C:\Program Files (x86)\Ashampoo\Ashampoo Magical Defrag 2\bin\aDefragService.exe O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing) O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files (x86)\Kaspersky Internet Security 2009\avp.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII.SP1\Win32\RpcDataSrv.exe O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite XII.SP1\RpcSandraSrv.exe O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 9526 bytes
VistaFindCode:$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ º º hjtscanlist v2.0 º º $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ Microsoft Windows [Version 6.0.6001] C: C:\hiberfil.sys --------- C:\pagefile.sys --------- 14.11.2008 16:57 C:\Windows --------- 32768 14.11.2008 15:31 C:\ProgramData --------- 8192 14.11.2008 15:31 C:\Program Files (x86) --------- 24576 14.11.2008 15:30 C:\System Volume Information --------- 20480 29.10.2008 16:42 C:\Program Files --------- 8192 29.10.2008 14:31 C:\Boot --------- 4096 01.10.2008 15:05 C:\stsvc.txt --------- 11088 07.09.2008 00:52 C:\tmp.bat --------- 6191 07.09.2008 00:49 C:\start.vbs --------- 84 01.04.2008 17:53 C:\ctapi_out_gr.txt --------- 0 29.03.2008 12:20 C:\MSOCache --------- 0 29.03.2008 04:43 C:\PerfLogs --------- 0 29.03.2008 04:06 C:\db1c5bb62e4a1cf90f1e5906 --------- 0 29.03.2008 03:41 C:\Intel --------- 0 29.03.2008 00:54 C:\$Recycle.Bin --------- 4096 29.03.2008 00:52 C:\Users --------- 4096 29.03.2008 00:50 C:\Programme --------- 0 29.03.2008 00:50 C:\Dokumente und Einstellungen --------- 0 29.03.2008 00:39 C:\BOOTSECT.BAK --------- 8192 18.01.2008 23:45 C:\bootmgr --------- 333203 17.03.2007 12:41 C:\grldr --------- 171136 02.11.2006 16:41 C:\Documents and Settings --------- 0 ---------------------------------------- C:\Windows 14.11.2008 22:22 C:\Windows\WindowsUpdate.log --------- 1732190 14.11.2008 22:19 C:\Windows\bootstat.dat --------- 67584 14.11.2008 16:57 C:\Windows\MEMORY.DMP --------- 333330592 13.11.2008 22:40 C:\Windows\ntbtlog.txt --------- 165720 13.11.2008 21:14 C:\Windows\NeroDigital.ini --------- 69 12.11.2008 23:34 C:\Windows\setuperr.log --------- 0 12.11.2008 23:34 C:\Windows\setupact.log --------- 0 12.11.2008 19:41 C:\Windows\PFRO.log --------- 348 30.10.2008 02:51 C:\Windows\QTFont.for --------- 1409 30.10.2008 02:51 C:\Windows\QTFont.qfn --------- 54156 29.10.2008 18:01 C:\Windows\tmp.tmp.tmp1 --------- 33851752 07.09.2008 13:23 C:\Windows\ktel.ini --------- 459 07.09.2008 00:52 C:\Windows\regme.vbs --------- 182 07.09.2008 00:52 C:\Windows\7201.bat --------- 1395 07.09.2008 00:49 C:\Windows\8039.bat --------- 1399 27.07.2008 22:41 C:\Windows\PhotoSnapViewer.INI --------- 151 20.06.2008 12:12 C:\Windows\ST6UNST.000 --------- 354 20.06.2008 12:12 C:\Windows\ST6UNST.EXE --------- 74752 13.05.2008 23:33 C:\Windows\pass.txt --------- 533 30.03.2008 01:48 C:\Windows\abreg.ini --------- 99 29.03.2008 19:39 C:\Windows\mozver.dat --------- 1182 29.03.2008 19:29 C:\Windows\nsreg.dat --------- 0 29.03.2008 18:56 C:\Windows\oodcnt.INI --------- 0 29.03.2008 04:53 C:\Windows\WindowsShell.Manifest --------- 749 29.03.2008 04:27 C:\Windows\SPInstall.etl --------- 327680 29.03.2008 03:54 C:\Windows\ativpsrm.bin --------- 0 29.03.2008 03:39 C:\Windows\DIFxAPI.dll --------- 525792 29.03.2008 03:39 C:\Windows\HideWin.exe --------- 315392 19.01.2008 00:00 C:\Windows\splwow64.exe --------- 39936 19.01.2008 00:00 C:\Windows\regedit.exe --------- 161792 19.01.2008 00:00 C:\Windows\notepad.exe --------- 169472 19.01.2008 00:00 C:\Windows\fveupdate.exe --------- 14848 19.01.2008 00:00 C:\Windows\HelpPane.exe --------- 734720 19.01.2008 00:00 C:\Windows\explorer.exe --------- 3080704 19.01.2008 00:00 C:\Windows\bfsvc.exe --------- 65536 11.10.2007 11:04 C:\Windows\SkyTel.exe --------- 1826816 11.10.2007 10:52 C:\Windows\RAVCpl64.exe --------- 5429760 04.10.2007 17:02 C:\Windows\atiogl.xml --------- 11283 26.07.2007 18:06 C:\Windows\RtlUpd64.exe --------- 1363968 26.07.2007 17:09 C:\Windows\RtlExUpd.dll --------- 520192 06.06.2007 07:00 C:\Windows\NOCLOSE.PIF --------- 545 06.06.2007 07:00 C:\Windows\UC.PIF --------- 545 06.06.2007 07:00 C:\Windows\RAR.PIF --------- 545 06.06.2007 07:00 C:\Windows\PKUNZIP.PIF --------- 545 06.06.2007 07:00 C:\Windows\PKZIP.PIF --------- 545 06.06.2007 07:00 C:\Windows\ARJ.PIF --------- 545 06.06.2007 07:00 C:\Windows\LHA.PIF --------- 545 01.06.2007 10:23 C:\Windows\UNNeroMediaHome.exe --------- 972336 15.05.2007 09:45 C:\Windows\UNNeroVision.exe --------- 972336 23.04.2007 16:42 C:\Windows\UNRecode.exe --------- 972336 20.03.2007 21:22 C:\Windows\UNNeroBackItUp.exe --------- 972336 16.03.2007 17:40 C:\Windows\DELL_VERSION --------- 59 28.02.2007 16:41 C:\Windows\UNNeroShowTime.exe --------- 972336 06.02.2007 01:05 C:\Windows\AviSplitter.INI --------- 38 02.11.2006 16:42 C:\Windows\win.ini --------- 144 02.11.2006 16:02 C:\Windows\WMSysPr9.prx --------- 316640 02.11.2006 16:00 C:\Windows\twunk_16.exe --------- 49680 02.11.2006 16:00 C:\Windows\twunk_32.exe --------- 31232 02.11.2006 16:00 C:\Windows\twain_32.dll --------- 50688 02.11.2006 16:00 C:\Windows\twain.dll --------- 94784 02.11.2006 12:15 C:\Windows\hh.exe --------- 15872 02.11.2006 10:45 C:\Windows\winhlp32.exe --------- 9216 02.11.2006 09:26 C:\Windows\mib.bin --------- 43131 07.10.2006 16:43 C:\Windows\x2.64.exe --------- 502784 19.09.2006 12:41 C:\Windows\Ultimate.xml --------- 4261 18.09.2006 22:44 C:\Windows\system.ini --------- 219 18.09.2006 22:30 C:\Windows\msdfmap.ini --------- 1405 03.07.2006 15:31 C:\Windows\tm.ini --------- 74 13.06.2006 12:22 C:\Windows\EVN-Tool3.CAB --------- 5097889 12.04.2006 08:47 C:\Windows\meta4.exe --------- 217073 05.04.2006 07:09 C:\Windows\MOTA113.exe --------- 66560 15.09.2005 14:35 C:\Windows\UNNeroMediaHome.cfg --------- 50 30.08.2005 21:37 C:\Windows\UNNeroVision.cfg --------- 50 30.08.2005 21:37 C:\Windows\UNNeroShowTime.cfg --------- 50 30.08.2005 21:36 C:\Windows\UNRecode.cfg --------- 50 30.08.2005 21:33 C:\Windows\UNNeroBackItUp.cfg --------- 50 ---------------------------------------- C:\Windows\System ---------------------------------------- C:\Windows\System32 14.11.2008 22:19 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 --------- 3664 14.11.2008 22:19 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 --------- 3664 12.11.2008 23:45 C:\Windows\system32\wbem --------- 61440 12.11.2008 23:44 C:\Windows\system32\spool --------- 4096 12.11.2008 23:44 C:\Windows\system32\catroot2 --------- 16384 01.11.2008 18:07 C:\Windows\system32\perfh009.dat --------- 586980 01.11.2008 18:07 C:\Windows\system32\perfc009.dat --------- 101052 01.11.2008 18:07 C:\Windows\system32\perfh007.dat --------- 618204 01.11.2008 18:07 C:\Windows\system32\perfc007.dat --------- 122442 01.11.2008 18:07 C:\Windows\system32\PerfStringBackup.INI --------- 1418612 30.10.2008 03:06 C:\Windows\system32\catroot --------- 4096 30.10.2008 02:54 C:\Windows\system32\Tasks --------- 4096 29.10.2008 19:17 C:\Windows\system32\drivers --------- 45056 29.10.2008 14:45 C:\Windows\system32\config --------- 8192 29.10.2008 13:55 C:\Windows\system32\Msdtc --------- 4096 16.10.2008 06:49 C:\Windows\system32\netapi32.dll --------- 648704 15.10.2008 02:56 C:\Windows\system32\FNTCACHE.DAT --------- 386192 15.10.2008 02:54 C:\Windows\system32\migration --------- 4096 08.10.2008 20:20 C:\Windows\system32\LogFiles --------- 0 07.10.2008 20:42 C:\Windows\system32\de-DE --------- 196608 07.10.2008 20:12 C:\Windows\system32\mrt.exe --------- 18074048 07.10.2008 20:02 C:\Windows\system32\en-US --------- 4096 07.10.2008 18:52 C:\Windows\system32\CodeIntegrity --------- 4096 02.10.2008 05:35 C:\Windows\system32\wininet.dll --------- 1013248 02.10.2008 05:35 C:\Windows\system32\urlmon.dll --------- 1418240 02.10.2008 05:35 C:\Windows\system32\mstime.dll --------- 1129984 02.10.2008 05:35 C:\Windows\system32\mshtml.dll --------- 5678080 02.10.2008 05:35 C:\Windows\system32\jsproxy.dll --------- 32256 02.10.2008 05:35 C:\Windows\system32\ieframe.dll --------- 7004160 02.10.2008 05:35 C:\Windows\system32\iertutil.dll --------- 374784 02.10.2008 03:18 C:\Windows\system32\mshtml.tlb --------- 1383424 18.09.2008 05:56 C:\Windows\system32\ntoskrnl.exe --------- 4694584 18.09.2008 05:47 C:\Windows\system32\wersvc.dll --------- 120832 18.09.2008 05:47 C:\Windows\system32\Faultrep.dll --------- 176640 18.09.2008 03:28 C:\Windows\system32\win32k.sys --------- 2742272 28.08.2008 09:50 C:\Windows\system32\soundschemes2.exe --------- 33280 17.08.2008 11:33 C:\Windows\system32\gpprefcl.dll --------- 881160 12.08.2008 04:59 C:\Windows\system32\win32spl.dll --------- 660480 05.08.2008 11:12 C:\Windows\system32\psisdecd.dll --------- 375808 05.08.2008 11:12 C:\Windows\system32\EncDec.dll --------- 558592 05.08.2008 11:10 C:\Windows\system32\MSNP.ax --------- 101376 05.08.2008 11:10 C:\Windows\system32\mpg2splt.ax --------- 227328 05.08.2008 11:10 C:\Windows\system32\psisrndr.ax --------- 289280 02.08.2008 04:40 C:\Windows\system32\cdd.dll --------- 47104 31.07.2008 04:51 C:\Windows\system32\Apphlpdm.dll --------- 32256 31.07.2008 02:42 C:\Windows\system32\GameUXLegacyGDFs.dll --------- 4240384 19.07.2008 06:10 C:\Windows\system32\wuauclt.exe --------- 56520 19.07.2008 06:10 C:\Windows\system32\wups2.dll --------- 45256 19.07.2008 06:10 C:\Windows\system32\wups.dll --------- 37576 19.07.2008 06:09 C:\Windows\system32\wuaueng.dll --------- 2291912 19.07.2008 06:09 C:\Windows\system32\wuapi.dll --------- 687816 19.07.2008 05:34 C:\Windows\system32\wucltux.dll --------- 1717248 19.07.2008 05:33 C:\Windows\system32\wudriver.dll --------- 93184 18.07.2008 21:08 C:\Windows\system32\wuwebv.dll --------- 177216 18.07.2008 20:34 C:\Windows\system32\wuapp.exe --------- 33792 16.07.2008 03:00 C:\Windows\system32\tzres.dll --------- 2048 26.06.2008 04:56 C:\Windows\system32\wmpeffects.dll --------- 557056 26.06.2008 04:56 C:\Windows\system32\NaturalLanguage6.dll --------- 1361920 26.06.2008 04:56 C:\Windows\system32\emdmgmt.dll --------- 399872 26.06.2008 04:56 C:\Windows\system32\dataclen.dll --------- 48640 26.06.2008 03:25 C:\Windows\system32\NlsLexicons0007.dll --------- 12240896 26.06.2008 03:25 C:\Windows\system32\NlsLexicons0009.dll --------- 2644480 19.06.2008 16:38 C:\Windows\system32\IPSECSVC.DLL --------- 531456 27.05.2008 06:23 C:\Windows\system32\tquery.dll --------- 2209792 27.05.2008 06:22 C:\Windows\system32\mssrch.dll --------- 2176512 27.05.2008 06:21 C:\Windows\system32\mssvp.dll --------- 796672 27.05.2008 06:21 C:\Windows\system32\mssphtb.dll --------- 312832 27.05.2008 06:21 C:\Windows\system32\msstrc.dll --------- 78848 27.05.2008 06:21 C:\Windows\system32\SearchIndexer.exe --------- 598016 27.05.2008 06:21 C:\Windows\system32\mimefilt.dll --------- 37376 27.05.2008 06:21 C:\Windows\system32\wsepno.dll --------- 24064 27.05.2008 06:21 C:\Windows\system32\rtffilt.dll --------- 43008 27.05.2008 06:21 C:\Windows\system32\nlhtml.dll --------- 181248 27.05.2008 06:21 C:\Windows\system32\xmlfilter.dll --------- 67072 27.05.2008 06:20 C:\Windows\system32\msshsq.dll --------- 316928 27.05.2008 06:20 C:\Windows\system32\mssph.dll --------- 498176 27.05.2008 06:20 C:\Windows\system32\SearchProtocolHost.exe --------- 258560 27.05.2008 06:20 C:\Windows\system32\offfilt.dll --------- 280064 27.05.2008 06:20 C:\Windows\system32\propdefs.dll --------- 80896 27.05.2008 06:20 C:\Windows\system32\SearchFilterHost.exe --------- 112128 27.05.2008 06:20 C:\Windows\system32\msscb.dll --------- 44544 27.05.2008 06:20 C:\Windows\system32\msshooks.dll --------- 12288 27.05.2008 06:19 C:\Windows\system32\msscntrs.dll --------- 73728 27.05.2008 06:19 C:\Windows\system32\propsys.dll --------- 921088 27.05.2008 06:19 C:\Windows\system32\korwbrkr.dll --------- 180736 27.05.2008 06:19 C:\Windows\system32\mssitlb.dll --------- 87552 27.05.2008 06:19 C:\Windows\system32\mssprxy.dll --------- 40448 27.05.2008 06:19 C:\Windows\system32\srchadmin.dll --------- 347648 27.05.2008 06:19 C:\Windows\system32\thawbrkr.dll --------- 317440 27.05.2008 06:19 C:\Windows\system32\chtbrkr.dll --------- 6100480 27.05.2008 06:19 C:\Windows\system32\chsbrkr.dll --------- 1676800 27.05.2008 05:59 C:\Windows\system32\StructuredQuerySchemaTrivial.bin --------- 18904 27.05.2008 05:59 C:\Windows\system32\StructuredQuerySchema.bin --------- 106605 16.05.2008 23:44 C:\Windows\system32\WDI --------- 4096 16.05.2008 10:58 C:\Windows\system32\lsdelete.exe --------- 12632 10.05.2008 04:55 C:\Windows\system32\wshrm.dll --------- 17408 08.05.2008 07:06 C:\Windows\system32\wshext.dll --------- 101888 08.05.2008 07:06 C:\Windows\system32\vbscript.dll --------- 603648 08.05.2008 07:06 C:\Windows\system32\scrrun.dll --------- 197632 08.05.2008 07:06 C:\Windows\system32\scrobj.dll --------- 227328 ---------------------------------------- C:\Windows\Prefetch 14.11.2008 22:31 C:\Windows\Prefetch\CMD.EXE-89305D47.pf --------- 6212 14.11.2008 22:30 C:\Windows\Prefetch\CONIME.EXE-B273009A.pf --------- 11558 14.11.2008 22:24 C:\Windows\Prefetch\RUNDLL32.EXE-B626D0EF.pf --------- 30170 14.11.2008 22:24 C:\Windows\Prefetch\IEUSER.EXE-DB146D8F.pf --------- 22662 14.11.2008 22:23 C:\Windows\Prefetch\WMIADAP.EXE-369DF1CD.pf --------- 18492 14.11.2008 22:22 C:\Windows\Prefetch\SVCHOST.EXE-B421B09A.pf --------- 22502 14.11.2008 22:21 C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-AFAD3EF9.pf --------- 36882 14.11.2008 22:21 C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-AA7A1FDD.pf --------- 19306 14.11.2008 22:20 C:\Windows\Prefetch\ReadyBoot --------- 4096 14.11.2008 22:20 C:\Windows\Prefetch\WMPNSCFG.EXE-DF1DD51A.pf --------- 20888 14.11.2008 22:20 C:\Windows\Prefetch\WMPNETWK.EXE-BD0344CA.pf --------- 106862 14.11.2008 22:20 C:\Windows\Prefetch\WMIPRVSE.EXE-43972D0F.pf --------- 39252 14.11.2008 22:20 C:\Windows\Prefetch\WMI64.EXE-EC1F25DA.pf --------- 20180 14.11.2008 22:20 C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf --------- 2480764 14.11.2008 18:00 C:\Windows\Prefetch\WERMGR.EXE-2A1BCBC7.pf --------- 14020 14.11.2008 17:55 C:\Windows\Prefetch\CONIME.EXE-7C73B4FE.pf --------- 26784 14.11.2008 17:55 C:\Windows\Prefetch\IEXPLORE.EXE-F6A52C86.pf --------- 235720 14.11.2008 17:55 C:\Windows\Prefetch\SSVAGENT.EXE-864F27D4.pf --------- 19750 14.11.2008 17:54 C:\Windows\Prefetch\ACRORD32.EXE-E41408AF.pf --------- 130170 14.11.2008 17:54 C:\Windows\Prefetch\DLLHOST.EXE-71214090.pf --------- 17470 14.11.2008 17:54 C:\Windows\Prefetch\RUNDLL32.EXE-41E85287.pf --------- 23212 14.11.2008 17:54 C:\Windows\Prefetch\IEUSER.EXE-D895AB54.pf --------- 17984 14.11.2008 17:48 C:\Windows\Prefetch\FIREFOX.EXE-FBBD985A.pf --------- 187336 14.11.2008 17:30 C:\Windows\Prefetch\AgGlFgAppHistory.db --------- 2808975 14.11.2008 17:30 C:\Windows\Prefetch\AgGlFaultHistory.db --------- 847428 14.11.2008 17:30 C:\Windows\Prefetch\AgGlGlobalHistory.db --------- 3801954 14.11.2008 17:30 C:\Windows\Prefetch\AgRobust.db --------- 338856 14.11.2008 17:30 C:\Windows\Prefetch\PfSvPerfStats.bin --------- 584 14.11.2008 17:30 C:\Windows\Prefetch\LOGONUI.EXE-1BEE4A84.pf --------- 35082 14.11.2008 17:30 C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-800101646-1544789937-3466696790-1000.db --------- 1174893 14.11.2008 17:30 C:\Windows\Prefetch\AgGlUAD_S-1-5-21-800101646-1544789937-3466696790-1000.db --------- 1850530 14.11.2008 17:29 C:\Windows\Prefetch\UTORRENT16.EXE-704822AA.pf --------- 209668 14.11.2008 17:28 C:\Windows\Prefetch\NOTEPAD.EXE-28E040DE.pf --------- 22714 14.11.2008 17:28 C:\Windows\Prefetch\SUPERANTISPYWARE.EXE-1E490B70.pf --------- 127144 14.11.2008 17:18 C:\Windows\Prefetch\AVP.EXE-8DC5B8CC.pf --------- 76750 14.11.2008 17:12 C:\Windows\Prefetch\TASKENG.EXE-5BAF290C.pf --------- 19334 14.11.2008 16:58 C:\Windows\Prefetch\SPOOLSV.EXE-E4D0FF39.pf --------- 13172 14.11.2008 16:58 C:\Windows\Prefetch\DWM.EXE-AEABE78B.pf --------- 36934 14.11.2008 16:58 C:\Windows\Prefetch\USERINIT.EXE-F39AB672.pf --------- 24132 14.11.2008 16:58 C:\Windows\Prefetch\RUNONCE.EXE-E33ED995.pf --------- 19564 14.11.2008 16:58 C:\Windows\Prefetch\DLLHOST.EXE-893DDF55.pf --------- 30690 14.11.2008 16:58 C:\Windows\Prefetch\WERFAULT.EXE-B7E27BE5.pf --------- 15492 14.11.2008 16:58 C:\Windows\Prefetch\AAWSERVICE.EXE-2FDC2118.pf --------- 52058 14.11.2008 16:54 C:\Windows\Prefetch\CACLS.EXE-FB3244C5.pf --------- 23078 14.11.2008 15:55 C:\Windows\Prefetch\RUNDLL32.EXE-84C84F14.pf --------- 23138 14.11.2008 15:31 C:\Windows\Prefetch\MSIEXEC.EXE-F3744DFD.pf --------- 69274 14.11.2008 15:31 C:\Windows\Prefetch\SVCHOST.EXE-8FD92526.pf --------- 19722 14.11.2008 15:30 C:\Windows\Prefetch\VSSVC.EXE-04D079CC.pf --------- 32912 14.11.2008 15:30 C:\Windows\Prefetch\MSIEXEC.EXE-B5AFA339.pf --------- 24380 14.11.2008 15:30 C:\Windows\Prefetch\SUPERANTISPYWARE.EXE-D73144E8.pf --------- 61852 14.11.2008 15:29 C:\Windows\Prefetch\ADEFRAGCTRL.EXE-4FBB9169.pf --------- 55942 14.11.2008 15:29 C:\Windows\Prefetch\VERCLSID.EXE-4D95F5A7.pf --------- 15396 14.11.2008 15:28 C:\Windows\Prefetch\RAREXTLOADER.EXE-4B76CB3C.pf --------- 31500 14.11.2008 15:28 C:\Windows\Prefetch\WINRAR.EXE-0BE7308A.pf --------- 655908 14.11.2008 15:23 C:\Windows\Prefetch\SPLWOW64.EXE-FBA11EAB.pf --------- 47744 14.11.2008 15:23 C:\Windows\Prefetch\WINWORD.EXE-0FC8A15F.pf --------- 148210 14.11.2008 15:22 C:\Windows\Prefetch\VERCLSID.EXE-9E4B27CB.pf --------- 16298 14.11.2008 15:07 C:\Windows\Prefetch\IMAPP.EXE-7F79DBD5.pf --------- 85606 14.11.2008 15:07 C:\Windows\Prefetch\INCMAIL.EXE-DC2B876B.pf --------- 281062 14.11.2008 15:07 C:\Windows\Prefetch\IMLPP.EXE-0A75031C.pf --------- 26140 14.11.2008 05:49 C:\Windows\Prefetch\WSQMCONS.EXE-E2CE6542.pf --------- 972 14.11.2008 05:47 C:\Windows\Prefetch\RUNDLL32.EXE-F452D79D.pf --------- 566 14.11.2008 05:37 C:\Windows\Prefetch\Layout.ini --------- 1310744 13.11.2008 23:02 C:\Windows\Prefetch\NOTEPAD.EXE-EB1B961A.pf --------- 17782 13.11.2008 22:46 C:\Windows\Prefetch\DLLHOST.EXE-896DB558.pf --------- 24462 13.11.2008 22:46 C:\Windows\Prefetch\ACRORD32INFO.EXE-7C963EC3.pf --------- 78336 13.11.2008 22:45 C:\Windows\Prefetch\HIJACKTHIS.EXE-7D4E1A38.pf --------- 49172 13.11.2008 22:06 C:\Windows\Prefetch\RUNDLL32.EXE-61C95DE5.pf --------- 23030 13.11.2008 21:08 C:\Windows\Prefetch\RUNDLL32.EXE-F718A44F.pf --------- 28358 13.11.2008 20:31 C:\Windows\Prefetch\NMINDEXINGSERVICE.EXE-03D3841C.pf --------- 40362 13.11.2008 20:31 C:\Windows\Prefetch\NMINDEXSTORESVR.EXE-EEC1D271.pf --------- 67698 13.11.2008 20:31 C:\Windows\Prefetch\SHOWTIME.EXE-A5AEF6E3.pf --------- 163762 13.11.2008 20:31 C:\Windows\Prefetch\NMBGMONITOR.EXE-F4816796.pf --------- 31406 13.11.2008 19:59 C:\Windows\Prefetch\WMPLAYER.EXE-61D40ED1.pf --------- 208902 13.11.2008 19:51 C:\Windows\Prefetch\EXCEL.EXE-4D637CBA.pf --------- 127364 13.11.2008 19:48 C:\Windows\Prefetch\RUNDLL32.EXE-7E1C8AD2.pf --------- 23118 13.11.2008 16:14 C:\Windows\Prefetch\RUNDLL32.EXE-533A78AD.pf --------- 23294 13.11.2008 10:50 C:\Windows\Prefetch\CCC.EXE-000FEDE2.pf --------- 229270 13.11.2008 10:50 C:\Windows\Prefetch\RUNDLL32.EXE-E6D7C0A4.pf --------- 23150 13.11.2008 01:40 C:\Windows\Prefetch\SDUPDATE.EXE-4671138A.pf --------- 70674 13.11.2008 01:40 C:\Windows\Prefetch\SPYBOTSD.EXE-E761F450.pf --------- 134624 13.11.2008 01:38 C:\Windows\Prefetch\SSVAGENT.EXE-4297652D.pf --------- 19592 13.11.2008 01:15 C:\Windows\Prefetch\EXPLORER.EXE-7A3328DA.pf --------- 137532 13.11.2008 00:53 C:\Windows\Prefetch\MBAM.EXE-B70480CA.pf --------- 66522 13.11.2008 00:50 C:\Windows\Prefetch\RUNDLL32.EXE-3D0A09A7.pf --------- 23158 13.11.2008 00:17 C:\Windows\Prefetch\RUNDLL32.EXE-D68FD13F.pf --------- 23118 13.11.2008 00:02 C:\Windows\Prefetch\ADVCHECK162.TMP-670260F9.pf --------- 22546 13.11.2008 00:02 C:\Windows\Prefetch\TOOLS216.TMP-7A4635E1.pf --------- 21898 13.11.2008 00:02 C:\Windows\Prefetch\TOOLS216.EXE-BB93133C.pf --------- 21236 13.11.2008 00:02 C:\Windows\Prefetch\ADVCHECK162.EXE-F4196B84.pf --------- 21490 13.11.2008 00:02 C:\Windows\Prefetch\UPDATE.EXE-F1C089FF.pf --------- 34256 13.11.2008 00:01 C:\Windows\Prefetch\RUNDLL32.EXE-95AD93EB.pf --------- 21848 12.11.2008 23:59 C:\Windows\Prefetch\DLLHOST.EXE-7EA5E62D.pf --------- 23084 12.11.2008 23:58 C:\Windows\Prefetch\CONSENT.EXE-65F6206D.pf --------- 61318 12.11.2008 23:58 C:\Windows\Prefetch\SETUP.EXE-9F182B59.pf --------- 6936 12.11.2008 23:46 C:\Windows\Prefetch\RUNDLL32.EXE-1A5616CC.pf --------- 23054 12.11.2008 23:46 C:\Windows\Prefetch\SIDEBAR.EXE-3A7B3FCC.pf --------- 4764 12.11.2008 23:40 C:\Windows\Prefetch\RSTRUI.EXE-4841C8C8.pf --------- 51494 12.11.2008 23:38 C:\Windows\Prefetch\DLLHOST.EXE-6732F47C.pf --------- 24436 12.11.2008 23:38 C:\Windows\Prefetch\DLLHOST.EXE-C39610DD.pf --------- 19042 12.11.2008 23:38 C:\Windows\Prefetch\RUNDLL32.EXE-4F40557C.pf --------- 37966 12.11.2008 23:37 C:\Windows\Prefetch\WERCON.EXE-FE5CD389.pf --------- 140858 12.11.2008 23:35 C:\Windows\Prefetch\SVCHOST.EXE-F59CA9BD.pf --------- 22784 12.11.2008 23:35 C:\Windows\Prefetch\RUNDLL32.EXE-5ECEC0F0.pf --------- 38116 12.11.2008 23:34 C:\Windows\Prefetch\RUNDLL32.EXE-46659322.pf --------- 33788 12.11.2008 23:33 C:\Windows\Prefetch\RPCSANDRASRV.EXE-C0EC2A27.pf --------- 58420 12.11.2008 23:33 C:\Windows\Prefetch\RPCDATASRV.EXE-185081DF.pf --------- 86398 12.11.2008 23:33 C:\Windows\Prefetch\SANDRA.EXE-2A65F207.pf --------- 58730 12.11.2008 23:31 C:\Windows\Prefetch\HELPPANE.EXE-D1016F9E.pf --------- 82066 12.11.2008 23:30 C:\Windows\Prefetch\SDCLT.EXE-2D2C4DDD.pf --------- 32176 12.11.2008 20:42 C:\Windows\Prefetch\RUNDLL32.EXE-F0626A85.pf --------- 23130 12.11.2008 20:26 C:\Windows\Prefetch\RUNDLL32.EXE-208AC9CF.pf --------- 33374 12.11.2008 20:09 C:\Windows\Prefetch\RUNDLL32.EXE-0D4581E5.pf --------- 22972 12.11.2008 19:34 C:\Windows\Prefetch\REGEDIT.EXE-32FE412B.pf --------- 19576 12.11.2008 19:33 C:\Windows\Prefetch\WO5.EXE-4290621D.pf --------- 81234 12.11.2008 19:29 C:\Windows\Prefetch\REGEDIT.EXE-4748FE01.pf --------- 15974 12.11.2008 19:28 C:\Windows\Prefetch\THREATWORK.EXE-E499E54D.pf --------- 18590 12.11.2008 19:26 C:\Windows\Prefetch\CLEANMGR.EXE-05BE2D4C.pf --------- 35896 12.11.2008 19:24 C:\Windows\Prefetch\AD-AWARE.EXE-9BBDE8C8.pf --------- 56372 12.11.2008 19:24 C:\Windows\Prefetch\DFRGUI.EXE-E344E070.pf --------- 21000 12.11.2008 19:23 C:\Windows\Prefetch\CPUZ.EXE-B60CD1B3.pf --------- 30330 12.11.2008 19:18 C:\Windows\Prefetch\RUNDLL32.EXE-CCAA0064.pf --------- 55774 12.11.2008 19:17 C:\Windows\Prefetch\CCLEANER.EXE-B2CF0D1E.pf --------- 62222 12.11.2008 18:48 C:\Windows\Prefetch\GETPOPUPINFO.EXE-DFF767E1.pf --------- 22396 12.11.2008 18:47 C:\Windows\Prefetch\_IU14D2N.TMP-4EB6E1E5.pf --------- 34180 12.11.2008 18:47 C:\Windows\Prefetch\DLLHOST.EXE-AAD0E997.pf --------- 25904 12.11.2008 18:47 C:\Windows\Prefetch\UNINS000.EXE-655DD07E.pf --------- 30318 12.11.2008 18:47 C:\Windows\Prefetch\RUNDLL32.EXE-3E0AF5DC.pf --------- 21772 12.11.2008 18:47 C:\Windows\Prefetch\TJENDER.EXE-DDF92704.pf --------- 7732 12.11.2008 18:46 C:\Windows\Prefetch\CMD.EXE-EABFE48B.pf --------- 47348 12.11.2008 18:46 C:\Windows\Prefetch\IS167485.EXE-B2270BDF.pf --------- 23258 12.11.2008 18:46 C:\Windows\Prefetch\TJENDER.EXE-EE0332B1.pf --------- 31722 12.11.2008 18:46 C:\Windows\Prefetch\RUNDLL32.EXE-C671719D.pf --------- 22986 12.11.2008 17:28 C:\Windows\Prefetch\DFRGNTFS.EXE-4F838A89.pf --------- 70342 12.11.2008 17:28 C:\Windows\Prefetch\DEFRAG.EXE-738093E8.pf --------- 16196 14.10.2008 11:07 C:\Windows\Prefetch\WSCRIPT.EXE-A36E1053.pf --------- 32304 01.10.2008 03:01 C:\Windows\Prefetch\AVWSC.EXE-B2023C8F.pf --------- 48376 13.07.2008 12:14 C:\Windows\Prefetch\AgCx_SC1.db --------- 748541 13.07.2008 12:13 C:\Windows\Prefetch\AgCx_SC1.db.trx --------- 81688 29.03.2008 00:42 C:\Windows\Prefetch\AgAppLaunch.db --------- 334168 ---------------------------------------- C:\Windows\Tasks 14.11.2008 22:19 C:\Windows\Tasks\SA.DAT --------- 6 14.11.2008 17:30 C:\Windows\Tasks\SCHEDLGU.TXT --------- 32536 14.11.2008 17:14 C:\Windows\Tasks\1-Click Maintenance.job --------- 392 29.10.2008 16:27 C:\Windows\Tasks\At3.job --------- 394 29.10.2008 16:27 C:\Windows\Tasks\At1.job --------- 394 29.10.2008 16:25 C:\Windows\Tasks\At2.job --------- 372 ---------------------------------------- C:\Windows\Temp 14.11.2008 18:01 C:\Windows\Temp\cch~c10c91b9.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~c10c95bf.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~c10c6114.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~c10c64c9.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~c10c4798.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~c10c4bd1.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~c10c36df.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~c10c31bd.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~c10bed6a.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~c10bf173.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~c10ba446.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~c10ba8be.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~baa8dd09.htp --------- 8192 14.11.2008 18:01 C:\Windows\Temp\cch~baa8e078.htp --------- 8192 14.11.2008 18:00 C:\Windows\Temp\cch~b968bd8c.htp --------- 8192 14.11.2008 18:00 C:\Windows\Temp\cch~b968b891.htp --------- 8192 13.11.2008 22:04 C:\Windows\Temp\cch~6dae14ce9.htp --------- 8192 13.11.2008 22:04 C:\Windows\Temp\cch~6dae147ca.htp --------- 8192 13.11.2008 21:59 C:\Windows\Temp\cch~6a13e93d3.htp --------- 8192 13.11.2008 21:59 C:\Windows\Temp\cch~6a13e9752.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~47a1d66d2.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~47a1d6cdf.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~479a7a856.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~479a7a2a6.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~478960050.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~47895fb57.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~475616cd8.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~4756174b9.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~4754e1fd9.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~4754e2569.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~4743cbd88.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~4743cb8f5.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~46eed235e.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~46eed1c9f.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~46e9c3321.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~46e9c3f4e.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~46ddfce96.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~46ddfd445.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~46ddf523e.htp --------- 8192 13.11.2008 16:10 C:\Windows\Temp\cch~46ddf4b3e.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46cc9eb71.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46cc9f019.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46bb8c97f.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46bb8ce39.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46aa8135e.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46aa80f17.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~464241318.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~464240e83.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46395558d.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~463955bb1.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46392779b.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4639272f1.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4639243c7.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~463924860.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46392329b.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~463922ded.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~463921710.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~463921c5c.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46391fd05.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~463920260.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46391d2aa.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46391cda3.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4638f9bd1.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4638f9704.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~463600db2.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~463600911.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634cdf1b.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634cd8d2.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634bda0c.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634bde97.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634bc74b.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634bc246.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634bb189.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634bac67.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634b9631.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634b9aa7.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634b03e3.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634afefc.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634ab548.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4634ab9c2.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46349afd0.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46349998e.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~463383731.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~46338324a.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4630f4a8f.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4630f4344.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4623dc006.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4623dc4ce.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4623b21e8.htp --------- 8192 13.11.2008 16:09 C:\Windows\Temp\cch~4623b1dad.htp --------- 8192 13.11.2008 14:34 C:\Windows\Temp\cch~1a8e378d6.htp --------- 8192 13.11.2008 14:34 C:\Windows\Temp\cch~1a8e37e13.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a7b8639d.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a7b85e5f.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a770bf3c.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a770b9d3.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a77078c8.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a7707213.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a7705849.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a7705d62.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a7704358.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a7703e40.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a770215b.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a7702787.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a76ff45a.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a76fee2f.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a76fae2e.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a76f986d.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a7330729.htp --------- 8192 13.11.2008 14:33 C:\Windows\Temp\cch~1a7330ca7.htp --------- 8192 13.11.2008 02:24 C:\Windows\Temp\MpCmdRun.log --------- 824 13.11.2008 00:47 C:\Windows\Temp\cch~1882e2a99.htp --------- 8192 13.11.2008 00:47 C:\Windows\Temp\cch~1882e2fcd.htp --------- 8192 13.11.2008 00:46 C:\Windows\Temp\cch~187539d07.htp --------- 8192 13.11.2008 00:46 C:\Windows\Temp\cch~18753953a.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~168196786.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~168196bc8.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~1681951ca.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~1681945e0.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~168192d8e.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~1681928f1.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~16818ecad.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~16818e773.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~168181f7d.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~168181b50.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~16817f46c.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~16817f016.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~1680bd440.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~1680bd88a.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~167d67a77.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~167d67616.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~167c83bc2.htp --------- 8192 13.11.2008 00:44 C:\Windows\Temp\cch~167c8371e.htp --------- 8192 13.11.2008 00:09 C:\Windows\Temp\cch~7fe49ca9.htp --------- 8192 13.11.2008 00:09 C:\Windows\Temp\cch~7fe480d9.htp --------- 8192 12.11.2008 23:56 C:\Windows\Temp\History --------- 0 12.11.2008 23:56 C:\Windows\Temp\Cookies --------- 0 12.11.2008 23:56 C:\Windows\Temp\Temporary Internet Files --------- 0 03.09.2008 14:07 C:\Windows\Temp\UDDEE6E.tmp --------- 7408 ---------------------------------------- C:\Users\Karsten\AppData\Local\Temp 14.11.2008 22:24 C:\Users\Karsten\AppData\Local\Temp\jusched.log --------- 3806 14.11.2008 22:19 C:\Users\Karsten\AppData\Local\Temp\WPDNSE --------- 0 14.11.2008 22:19 C:\Users\Karsten\AppData\Local\Temp\Karsten.bmp --------- 31832 14.11.2008 17:56 C:\Users\Karsten\AppData\Local\Temp\java_install_reg.log --------- 208 14.11.2008 17:55 C:\Users\Karsten\AppData\Local\Temp\hsperfdata_Karsten --------- 0 14.11.2008 15:22 C:\Users\Karsten\AppData\Local\Temp\VBE --------- 0 14.11.2008 15:14 C:\Users\Karsten\AppData\Local\Temp\IM --------- 0 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_index.dat --------- 1044 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_71226664243.dat --------- 267184 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_41226667723.dat --------- 242448 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_271226649010.dat --------- 235644 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_231226612407.dat --------- 306836 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_221226664123.dat --------- 274712 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_201226660524.dat --------- 298192 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_181226671324.dat --------- 226576 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_171226653323.dat --------- 235764 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_161226599323.dat --------- 212748 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_71226664249.dat --------- 79484 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_41226667729.dat --------- 67148 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_211226664182.dat --------- 55432 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_201226597823.dat --------- 74928 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_131226598607.dat --------- 68724 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_121226656927.dat --------- 72792 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_111226602083.dat --------- 75188 14.11.2008 15:12 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_101226598542.dat --------- 64768 13.11.2008 22:34 C:\Users\Karsten\AppData\Local\Temp\plugtmp-4 --------- 0 13.11.2008 21:59 C:\Users\Karsten\AppData\Local\Temp\plugtmp-3 --------- 0 13.11.2008 18:30 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_271226595782.dat --------- 222672 13.11.2008 18:30 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_231226595609.dat --------- 291976 13.11.2008 18:30 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_101226596086.dat --------- 56060 13.11.2008 17:29 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_81226591283.dat --------- 74060 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_8_2_21224089394.dat --------- 8680 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_8_2_11223394495.dat --------- 16804 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_71226563324.dat --------- 292596 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_41226584923.dat --------- 315620 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_261226581448.dat --------- 239208 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_251226399582.dat --------- 140644 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_241226399410.dat --------- 211676 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_221226577723.dat --------- 299544 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_211226414287.dat --------- 245188 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_201226484127.dat --------- 323972 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_181226494923.dat --------- 271816 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_171226418305.dat --------- 258060 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_161226505724.dat --------- 231756 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_151226574124.dat --------- 185256 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_141226487727.dat --------- 183384 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_2_131226588523.dat --------- 290236 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_91226421608.dat --------- 68176 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_71226427971.dat --------- 79484 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_41226566453.dat --------- 68524 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_211226043874.dat --------- 63396 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_201226582166.dat --------- 63404 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_181225018872.dat --------- 72228 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_161226422446.dat --------- 65996 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_141226560924.dat --------- 63992 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_131225982299.dat --------- 58232 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_121226576284.dat --------- 70668 13.11.2008 16:10 C:\Users\Karsten\AppData\Local\Temp\cteng_1_1_111226473323.dat --------- 66128 13.11.2008 16:09 C:\Users\Karsten\AppData\Local\Temp\plugtmp-2 --------- 0 13.11.2008 14:40 C:\Users\Karsten\AppData\Local\Temp\plugtmp-1 --------- 0 13.11.2008 00:18 C:\Users\Karsten\AppData\Local\Temp\~DFBCB4.tmp --------- 311296 13.11.2008 00:08 C:\Users\Karsten\AppData\Local\Temp\plugtmp --------- 0 12.11.2008 23:48 C:\Users\Karsten\AppData\Local\Temp\Low --------- 0 12.11.2008 21:01 C:\Users\Karsten\AppData\Local\Temp\~DF6304.tmp --------- 311296 12.11.2008 18:47 C:\Users\Karsten\AppData\Local\Temp\IXP000.TMP --------- 0 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0000e9f2 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0000ea50 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0000ef70 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0000f0f7 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0000f193 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0000f712 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0000fb19 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp00010039 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp00010fe9 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0000e435 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0001124a --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp000115a6 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp00011a97 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp00011e70 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp000125e2 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp00013449 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp00013d52 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0001439b --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp00016462 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0001f836 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0000e2ed --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp0000e658 --------- 35840 12.11.2008 01:53 C:\Users\Karsten\AppData\Local\Temp\tmp000111ae --------- 35840 29.03.2008 00:54 C:\Users\Karsten\AppData\Local\Temp\FXSAPIDebugLogFile.txt --------- 0 ---------------------------------------- C:\Program Files 29.10.2008 16:42 C:\Program Files\Common Files --------- 4096 15.10.2008 02:54 C:\Program Files\Windows Mail --------- 4096 15.08.2008 12:16 C:\Program Files\AviSynth 2.5 --------- 0 02.04.2008 12:33 C:\Program Files\BitLocker --------- 0 02.04.2008 12:32 C:\Program Files\Microsoft Games --------- 4096 29.03.2008 18:58 C:\Program Files\SiSoftware --------- 0 29.03.2008 12:22 C:\Program Files\Microsoft Office --------- 0 29.03.2008 04:53 C:\Program Files\desktop.ini --------- 174 29.03.2008 04:45 C:\Program Files\Windows Calendar --------- 0 29.03.2008 04:45 C:\Program Files\Movie Maker --------- 4096 29.03.2008 04:45 C:\Program Files\Windows Sidebar --------- 4096 29.03.2008 04:45 C:\Program Files\Internet Explorer --------- 4096 29.03.2008 04:45 C:\Program Files\Windows Media Player --------- 4096 29.03.2008 04:45 C:\Program Files\Windows Collaboration --------- 4096 29.03.2008 04:45 C:\Program Files\Windows Journal --------- 4096 29.03.2008 04:45 C:\Program Files\Windows Photo Gallery --------- 4096 29.03.2008 04:45 C:\Program Files\Windows Defender --------- 4096 29.03.2008 03:53 C:\Program Files\ATI Technologies --------- 0 29.03.2008 03:51 C:\Program Files\ATI --------- 0 29.03.2008 02:33 C:\Program Files\VistaCodecPack --------- 0 29.03.2008 00:50 C:\Program Files\Gemeinsame Dateien --------- 0 29.03.2008 00:50 C:\Program Files\Windows NT --------- 4096 02.11.2006 16:42 C:\Program Files\Uninstall Information --------- 0 02.11.2006 16:06 C:\Program Files\Reference Assemblies --------- 0 02.11.2006 16:06 C:\Program Files\MSBuild --------- 0 ---------------------------------------- C:\ProgramData\.. Karsten Public desktop.ini Default Default User All Users ---------------------------------------- C:\Windows\system32\drivers\etc\hosts 127.0.0.1 localhost ::1 localhost 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 123topsearch.com 127.0.0.1 www.123topsearch.com 127.0.0.1 132.com 127.0.0.1 www.132.com 127.0.0.1 www.136136.net 127.0.0.1 136136.net 127.0.0.1 163ns.com 127.0.0.1 www.163ns.com 127.0.0.1 171203.com 127.0.0.1 17-plus.com 127.0.0.1 1800searchonline.com 127.0.0.1 www.1800searchonline.com 127.0.0.1 180searchassistant.com 127.0.0.1 www.180searchassistant.com 127.0.0.1 www.180solutions.com 127.0.0.1 180solutions.com 127.0.0.1 181.365soft.info 127.0.0.1 www.181.365soft.info 127.0.0.1 www.1987324.com 127.0.0.1 1987324.com 127.0.0.1 1clickpcfix.com 127.0.0.1 www.1clickpcfix.com 127.0.0.1 1-domains-registrations.com 127.0.0.1 www.1-domains-registrations.com 127.0.0.1 www.1sexparty.com 127.0.0.1 1sexparty.com 127.0.0.1 www.1stantivirus.com 127.0.0.1 1stantivirus.com 127.0.0.1 www.1stpagehere.com 127.0.0.1 1stpagehere.com 127.0.0.1 www.1stsearchportal.com 127.0.0.1 1stsearchportal.com 127.0.0.1 2.82211.net 127.0.0.1 www.2006ooo.com 127.0.0.1 2006ooo.com 127.0.0.1 www.2007-download.com 127.0.0.1 2007-download.com 127.0.0.1 www.2008-search-destroy.com 127.0.0.1 2008-search-destroy.com 127.0.0.1 www.2020search.com 127.0.0.1 2020search.com 127.0.0.1 20x2p.com 127.0.0.1 24.365soft.info 127.0.0.1 www.24.365soft.info 127.0.0.1 www.24-7pharmacy.info 127.0.0.1 24-7pharmacy.info 127.0.0.1 24-7searching-and-more.com 127.0.0.1 www.24-7searching-and-more.com 127.0.0.1 www.24teen.com 127.0.0.1 24teen.com 127.0.0.1 2ndpower.com 127.0.0.1 www.2search.com 127.0.0.1 2search.com 127.0.0.1 www.2search.org 127.0.0.1 2search.org 127.0.0.1 www.2squared.com 127.0.0.1 2squared.com 127.0.0.1 www.3322.org 127.0.0.1 3322.org 127.0.0.1 365soft.info 127.0.0.1 www.36site.com 127.0.0.1 36site.com ---------------------------------------- Abbildname PID Sitzungsname Sitz.-Nr. Speichernutzung ========================= ======== ================ =========== =============== System Idle Process 0 Services 0 24 K System 4 Services 0 864 K smss.exe 668 Services 0 696 K csrss.exe 808 Services 0 5.468 K wininit.exe 856 Services 0 3.932 K csrss.exe 876 Console 1 8.676 K services.exe 912 Services 0 6.932 K lsass.exe 936 Services 0 8.440 K lsm.exe 944 Services 0 4.184 K winlogon.exe 468 Console 1 5.148 K svchost.exe 768 Services 0 6.000 K svchost.exe 460 Services 0 6.632 K svchost.exe 452 Services 0 19.544 K Ati2evxx.exe 1104 Services 0 3.852 K svchost.exe 1128 Services 0 12.164 K svchost.exe 1200 Services 0 102.664 K svchost.exe 1212 Services 0 25.244 K audiodg.exe 1304 Services 0 15.180 K svchost.exe 1332 Services 0 4.456 K SLsvc.exe 1376 Services 0 4.084 K svchost.exe 1500 Services 0 14.112 K svchost.exe 1516 Services 0 12.968 K aawservice.exe 1616 Services 0 2.064 K Ati2evxx.exe 1644 Console 1 5.888 K dwm.exe 1896 Console 1 39.808 K explorer.exe 1932 Console 1 37.140 K spoolsv.exe 1976 Services 0 9.632 K svchost.exe 2000 Services 0 11.148 K taskeng.exe 984 Console 1 10.208 K RAVCpl64.exe 2236 Console 1 6.380 K schedhlp.exe 2252 Console 1 5.988 K sidebar.exe 2260 Console 1 19.368 K SUPERAntiSpyware.exe 2280 Console 1 1.236 K trillian.exe 2304 Console 1 7.628 K taskeng.exe 2332 Services 0 6.388 K jusched.exe 2356 Console 1 4.208 K defragTaskBar.exe 2372 Console 1 6.024 K avp.exe 2392 Console 1 3.940 K MOM.exe 2400 Console 1 4.664 K sidebar.exe 2852 Console 1 20.948 K aavus.exe 2924 Services 0 4.544 K schedul2.exe 2944 Services 0 3.536 K aDefragService.exe 2984 Services 0 9.064 K avp.exe 3008 Services 0 32.168 K LSSrvc.exe 3056 Services 0 4.224 K svchost.exe 1848 Services 0 4.800 K DEFRAG~3.EXE 2812 Console 1 6.840 K defragActivityMonitor.exe 1436 Console 1 5.600 K defragActivityMonitor64.e 1324 Console 1 2.252 K StarWindServiceAE.exe 3032 Services 0 4.740 K svchost.exe 2112 Services 0 5.924 K TrueImageTryStartService. 1396 Services 0 4.860 K SearchIndexer.exe 3116 Services 0 27.624 K SDWinSec.exe 3272 Services 0 7.760 K CCC.exe 3724 Console 1 7.772 K rundll32.exe 4028 Console 1 13.620 K WmiPrvSE.exe 4088 Services 0 9.096 K wmpnscfg.exe 1920 Console 1 5.284 K wmpnetwk.exe 1248 Services 0 14.296 K svchost.exe 2608 Services 0 11.776 K cmd.exe 4308 Console 1 4.208 K conime.exe 4676 Console 1 3.964 K SearchProtocolHost.exe 3124 Services 0 10.508 K SearchFilterHost.exe 4260 Services 0 7.048 K dllhost.exe 1180 Console 1 5.584 K tasklist.exe 4416 Console 1 5.780 K ***** Ende des Scans 14.11.2008 um 22:31:26,24 ***
Code:Datentr„ger in Laufwerk C: ist System Volumeseriennummer: 147B-1A69 Verzeichnis von C:\ 14.11.2008 23:09 0 VistaFind.txt 14.11.2008 22:44 2.145.902.592 hiberfil.sys 14.11.2008 22:44 2.459.652.096 pagefile.sys 10 Datei(en), 4.606.084.582 Bytes 0 Verzeichnis(se), 37.027.852.288 Bytes frei Datentr„ger in Laufwerk C: ist System Volumeseriennummer: 147B-1A69 Verzeichnis von C:\Windows 14.11.2008 22:48 1.734.526 WindowsUpdate.log 14.11.2008 22:44 67.584 bootstat.dat 14.11.2008 16:57 333.330.592 MEMORY.DMP 13.11.2008 22:40 165.720 ntbtlog.txt 13.11.2008 21:14 69 NeroDigital.ini 12.11.2008 23:34 0 setuperr.log 12.11.2008 23:34 0 setupact.log 12.11.2008 19:41 348 PFRO.log 30.10.2008 02:51 1.409 QTFont.for 30.10.2008 02:51 54.156 QTFont.qfn 29.10.2008 18:01 33.851.752 tmp.tmp.tmp1 76 Datei(en), 395.242.796 Bytes 0 Verzeichnis(se), 37.027.844.096 Bytes frei Datentr„ger in Laufwerk C: ist System Volumeseriennummer: 147B-1A69 Verzeichnis von C:\Windows\system Datentr„ger in Laufwerk C: ist System Volumeseriennummer: 147B-1A69 Verzeichnis von C:\Windows\system32 14.11.2008 22:45 3.664 7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 14.11.2008 22:45 3.664 7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 01.11.2008 18:07 586.980 perfh009.dat 01.11.2008 18:07 101.052 perfc009.dat 01.11.2008 18:07 618.204 perfh007.dat 01.11.2008 18:07 122.442 perfc007.dat 01.11.2008 18:07 1.418.612 PerfStringBackup.INI 16.10.2008 06:49 648.704 netapi32.dll 15.10.2008 02:56 386.192 FNTCACHE.DAT 2268 Datei(en), 1.029.495.840 Bytes 0 Verzeichnis(se), 37.027.655.680 Bytes frei Datentr„ger in Laufwerk C: ist System Volumeseriennummer: 147B-1A69 Verzeichnis von C:\Users\Karsten\AppData\Local\Temp 14.11.2008 22:50 3.979 jusched.log 14.11.2008 22:45 31.832 Karsten.bmp 14.11.2008 17:56 208 java_install_reg.log 14.11.2008 15:12 1.044 cteng_index.dat 14.11.2008 15:12 267.184 cteng_1_2_71226664243.dat 14.11.2008 15:12 242.448 cteng_1_2_41226667723.dat 14.11.2008 15:12 235.644 cteng_1_2_271226649010.dat 14.11.2008 15:12 306.836 cteng_1_2_231226612407.dat 14.11.2008 15:12 274.712 cteng_1_2_221226664123.dat 14.11.2008 15:12 298.192 cteng_1_2_201226660524.dat 14.11.2008 15:12 226.576 cteng_1_2_181226671324.dat 14.11.2008 15:12 235.764 cteng_1_2_171226653323.dat 14.11.2008 15:12 212.748 cteng_1_2_161226599323.dat 14.11.2008 15:12 79.484 cteng_1_1_71226664249.dat 14.11.2008 15:12 67.148 cteng_1_1_41226667729.dat 14.11.2008 15:12 55.432 cteng_1_1_211226664182.dat 14.11.2008 15:12 74.928 cteng_1_1_201226597823.dat 14.11.2008 15:12 68.724 cteng_1_1_131226598607.dat 14.11.2008 15:12 72.792 cteng_1_1_121226656927.dat 14.11.2008 15:12 75.188 cteng_1_1_111226602083.dat 14.11.2008 15:12 64.768 cteng_1_1_101226598542.dat 13.11.2008 18:30 222.672 cteng_1_2_271226595782.dat 13.11.2008 18:30 291.976 cteng_1_2_231226595609.dat 13.11.2008 18:30 56.060 cteng_1_1_101226596086.dat 13.11.2008 17:29 74.060 cteng_1_1_81226591283.dat 13.11.2008 16:10 8.680 cteng_8_2_21224089394.dat 13.11.2008 16:10 16.804 cteng_8_2_11223394495.dat 13.11.2008 16:10 292.596 cteng_1_2_71226563324.dat 13.11.2008 16:10 315.620 cteng_1_2_41226584923.dat 13.11.2008 16:10 239.208 cteng_1_2_261226581448.dat 13.11.2008 16:10 140.644 cteng_1_2_251226399582.dat 13.11.2008 16:10 211.676 cteng_1_2_241226399410.dat 13.11.2008 16:10 299.544 cteng_1_2_221226577723.dat 13.11.2008 16:10 245.188 cteng_1_2_211226414287.dat 13.11.2008 16:10 323.972 cteng_1_2_201226484127.dat 13.11.2008 16:10 271.816 cteng_1_2_181226494923.dat 13.11.2008 16:10 258.060 cteng_1_2_171226418305.dat 13.11.2008 16:10 231.756 cteng_1_2_161226505724.dat 13.11.2008 16:10 185.256 cteng_1_2_151226574124.dat 13.11.2008 16:10 183.384 cteng_1_2_141226487727.dat 13.11.2008 16:10 290.236 cteng_1_2_131226588523.dat 13.11.2008 16:10 68.176 cteng_1_1_91226421608.dat 13.11.2008 16:10 79.484 cteng_1_1_71226427971.dat 13.11.2008 16:10 68.524 cteng_1_1_41226566453.dat 13.11.2008 16:10 63.396 cteng_1_1_211226043874.dat 13.11.2008 16:10 63.404 cteng_1_1_201226582166.dat 13.11.2008 16:10 72.228 cteng_1_1_181225018872.dat 13.11.2008 16:10 65.996 cteng_1_1_161226422446.dat 13.11.2008 16:10 63.992 cteng_1_1_141226560924.dat 13.11.2008 16:10 58.232 cteng_1_1_131225982299.dat 13.11.2008 16:10 70.668 cteng_1_1_121226576284.dat 13.11.2008 16:10 66.128 cteng_1_1_111226473323.dat 13.11.2008 00:18 311.296 ~DFBCB4.tmp 12.11.2008 21:01 311.296 ~DF6304.tmp 12.11.2008 01:53 35.840 tmp0000e2ed 12.11.2008 01:53 35.840 tmp0000e658 12.11.2008 01:53 35.840 tmp0000e9f2 12.11.2008 01:53 35.840 tmp0000ea50 12.11.2008 01:53 35.840 tmp0000ef70 12.11.2008 01:53 35.840 tmp0000f0f7 12.11.2008 01:53 35.840 tmp0000f193 12.11.2008 01:53 35.840 tmp0000f712 12.11.2008 01:53 35.840 tmp0000fb19 12.11.2008 01:53 35.840 tmp00010039 12.11.2008 01:53 35.840 tmp00010fe9 12.11.2008 01:53 35.840 tmp000111ae 12.11.2008 01:53 35.840 tmp0001124a 12.11.2008 01:53 35.840 tmp000115a6 12.11.2008 01:53 35.840 tmp00011a97 12.11.2008 01:53 35.840 tmp00011e70 12.11.2008 01:53 35.840 tmp00012219 12.11.2008 01:53 35.840 tmp000125e2 12.11.2008 01:53 35.840 tmp00013449 12.11.2008 01:53 35.840 tmp00013d52 12.11.2008 01:53 35.840 tmp0001439b 12.11.2008 01:53 35.840 tmp00016462 12.11.2008 01:53 35.840 tmp0001f836 12.11.2008 01:53 35.840 tmp0000e435 79 Datei(en), 9.277.819 Bytes 0 Verzeichnis(se), 37.027.729.408 Bytes frei Datentr„ger in Laufwerk C: ist System Volumeseriennummer: 147B-1A69 Verzeichnis von C:\Windows\prefetch 14.11.2008 23:08 19.306 SEARCHFILTERHOST.EXE-AA7A1FDD.pf 14.11.2008 23:08 23.684 SEARCHPROTOCOLHOST.EXE-AFAD3EF9.pf 14.11.2008 23:08 567.926 WINRAR.EXE-0BE7308A.pf 14.11.2008 23:08 17.024 DLLHOST.EXE-71214090.pf 14.11.2008 23:08 31.488 RAREXTLOADER.EXE-4B76CB3C.pf 14.11.2008 23:08 15.396 VERCLSID.EXE-4D95F5A7.pf 14.11.2008 23:08 16.322 VERCLSID.EXE-9E4B27CB.pf 14.11.2008 23:00 19.450 TASKENG.EXE-5BAF290C.pf 14.11.2008 22:58 14.020 WERMGR.EXE-2A1BCBC7.pf 14.11.2008 22:56 17.752 NOTEPAD.EXE-EB1B961A.pf 14.11.2008 22:53 29.894 NOTEPAD.EXE-28E040DE.pf 14.11.2008 22:53 127.360 SUPERANTISPYWARE.EXE-1E490B70.pf 14.11.2008 22:50 30.170 RUNDLL32.EXE-B626D0EF.pf 14.11.2008 22:50 22.662 IEUSER.EXE-DB146D8F.pf 14.11.2008 22:49 18.394 WMIADAP.EXE-369DF1CD.pf 14.11.2008 22:47 22.526 SVCHOST.EXE-B421B09A.pf 14.11.2008 22:46 180.958 FIREFOX.EXE-FBBD985A.pf 14.11.2008 22:46 20.082 WMPNSCFG.EXE-DF1DD51A.pf 14.11.2008 22:46 32.244 DLLHOST.EXE-893DDF55.pf 14.11.2008 22:46 20.180 WMI64.EXE-EC1F25DA.pf 14.11.2008 22:46 2.519.098 NTOSBOOT-B00DFAAD.pf 14.11.2008 22:42 32.054 DLLHOST.EXE-896DB558.pf 14.11.2008 22:41 71.902 MBAM.EXE-B70480CA.pf 14.11.2008 22:33 56.936 HIJACKTHIS.EXE-7D4E1A38.pf 14.11.2008 22:31 22.424 TASKLIST.EXE-9811F41E.pf 14.11.2008 22:31 6.212 CMD.EXE-89305D47.pf 14.11.2008 22:30 11.558 CONIME.EXE-B273009A.pf 14.11.2008 22:20 106.862 WMPNETWK.EXE-BD0344CA.pf 14.11.2008 22:20 39.252 WMIPRVSE.EXE-43972D0F.pf 14.11.2008 17:55 26.784 CONIME.EXE-7C73B4FE.pf 14.11.2008 17:55 235.720 IEXPLORE.EXE-F6A52C86.pf 14.11.2008 17:55 19.750 SSVAGENT.EXE-864F27D4.pf 14.11.2008 17:54 130.170 ACRORD32.EXE-E41408AF.pf 14.11.2008 17:54 23.212 RUNDLL32.EXE-41E85287.pf 14.11.2008 17:54 17.984 IEUSER.EXE-D895AB54.pf 14.11.2008 17:30 2.808.975 AgGlFgAppHistory.db 14.11.2008 17:30 847.428 AgGlFaultHistory.db 14.11.2008 17:30 3.801.954 AgGlGlobalHistory.db 14.11.2008 17:30 338.856 AgRobust.db 14.11.2008 17:30 584 PfSvPerfStats.bin 14.11.2008 17:30 35.082 LOGONUI.EXE-1BEE4A84.pf 14.11.2008 17:30 1.174.893 AgGlUAD_P_S-1-5-21-800101646-1544789937-3466696790-1000.db 14.11.2008 17:30 1.850.530 AgGlUAD_S-1-5-21-800101646-1544789937-3466696790-1000.db 14.11.2008 17:29 209.668 UTORRENT16.EXE-704822AA.pf 14.11.2008 17:18 76.750 AVP.EXE-8DC5B8CC.pf 14.11.2008 16:58 13.172 SPOOLSV.EXE-E4D0FF39.pf 14.11.2008 16:58 36.934 DWM.EXE-AEABE78B.pf 14.11.2008 16:58 19.564 RUNONCE.EXE-E33ED995.pf 14.11.2008 16:58 24.132 USERINIT.EXE-F39AB672.pf 14.11.2008 16:58 15.492 WERFAULT.EXE-B7E27BE5.pf 14.11.2008 16:58 52.058 AAWSERVICE.EXE-2FDC2118.pf 14.11.2008 16:54 23.078 CACLS.EXE-FB3244C5.pf 14.11.2008 15:55 23.138 RUNDLL32.EXE-84C84F14.pf 14.11.2008 15:31 69.274 MSIEXEC.EXE-F3744DFD.pf 14.11.2008 15:31 19.722 SVCHOST.EXE-8FD92526.pf 14.11.2008 15:30 32.912 VSSVC.EXE-04D079CC.pf 14.11.2008 15:30 24.380 MSIEXEC.EXE-B5AFA339.pf 14.11.2008 15:30 61.852 SUPERANTISPYWARE.EXE-D73144E8.pf 14.11.2008 15:29 55.942 ADEFRAGCTRL.EXE-4FBB9169.pf 14.11.2008 15:23 47.744 SPLWOW64.EXE-FBA11EAB.pf 14.11.2008 15:23 148.210 WINWORD.EXE-0FC8A15F.pf 14.11.2008 15:07 85.606 IMAPP.EXE-7F79DBD5.pf 14.11.2008 15:07 281.062 INCMAIL.EXE-DC2B876B.pf 14.11.2008 15:07 26.140 IMLPP.EXE-0A75031C.pf 14.11.2008 05:49 972 WSQMCONS.EXE-E2CE6542.pf 14.11.2008 05:47 566 RUNDLL32.EXE-F452D79D.pf 14.11.2008 05:37 1.310.744 Layout.ini 13.11.2008 22:46 78.336 ACRORD32INFO.EXE-7C963EC3.pf 13.11.2008 22:06 23.030 RUNDLL32.EXE-61C95DE5.pf 13.11.2008 21:08 28.358 RUNDLL32.EXE-F718A44F.pf 13.11.2008 20:31 40.362 NMINDEXINGSERVICE.EXE-03D3841C.pf 13.11.2008 20:31 67.698 NMINDEXSTORESVR.EXE-EEC1D271.pf 13.11.2008 20:31 163.762 SHOWTIME.EXE-A5AEF6E3.pf 13.11.2008 20:31 31.406 NMBGMONITOR.EXE-F4816796.pf 13.11.2008 19:59 208.902 WMPLAYER.EXE-61D40ED1.pf 13.11.2008 19:51 127.364 EXCEL.EXE-4D637CBA.pf 13.11.2008 19:48 23.118 RUNDLL32.EXE-7E1C8AD2.pf 13.11.2008 16:14 23.294 RUNDLL32.EXE-533A78AD.pf 13.11.2008 10:50 229.270 CCC.EXE-000FEDE2.pf 13.11.2008 10:50 23.150 RUNDLL32.EXE-E6D7C0A4.pf 13.11.2008 01:40 70.674 SDUPDATE.EXE-4671138A.pf 13.11.2008 01:40 134.624 SPYBOTSD.EXE-E761F450.pf 13.11.2008 01:38 19.592 SSVAGENT.EXE-4297652D.pf 13.11.2008 01:15 137.532 EXPLORER.EXE-7A3328DA.pf 13.11.2008 00:50 23.158 RUNDLL32.EXE-3D0A09A7.pf 13.11.2008 00:17 23.118 RUNDLL32.EXE-D68FD13F.pf 13.11.2008 00:02 22.546 ADVCHECK162.TMP-670260F9.pf 13.11.2008 00:02 21.898 TOOLS216.TMP-7A4635E1.pf 13.11.2008 00:02 21.236 TOOLS216.EXE-BB93133C.pf 13.11.2008 00:02 21.490 ADVCHECK162.EXE-F4196B84.pf 13.11.2008 00:02 34.256 UPDATE.EXE-F1C089FF.pf 13.11.2008 00:01 21.848 RUNDLL32.EXE-95AD93EB.pf 12.11.2008 23:59 23.084 DLLHOST.EXE-7EA5E62D.pf 12.11.2008 23:58 61.318 CONSENT.EXE-65F6206D.pf 12.11.2008 23:58 6.936 SETUP.EXE-9F182B59.pf 12.11.2008 23:46 23.054 RUNDLL32.EXE-1A5616CC.pf 12.11.2008 23:46 4.764 SIDEBAR.EXE-3A7B3FCC.pf 12.11.2008 23:40 51.494 RSTRUI.EXE-4841C8C8.pf 12.11.2008 23:38 24.436 DLLHOST.EXE-6732F47C.pf 12.11.2008 23:38 19.042 DLLHOST.EXE-C39610DD.pf 12.11.2008 23:38 37.966 RUNDLL32.EXE-4F40557C.pf 12.11.2008 23:37 140.858 WERCON.EXE-FE5CD389.pf 12.11.2008 23:35 22.784 SVCHOST.EXE-F59CA9BD.pf 12.11.2008 23:35 38.116 RUNDLL32.EXE-5ECEC0F0.pf 12.11.2008 23:34 33.788 RUNDLL32.EXE-46659322.pf 12.11.2008 23:33 58.420 RPCSANDRASRV.EXE-C0EC2A27.pf 12.11.2008 23:33 86.398 RPCDATASRV.EXE-185081DF.pf 12.11.2008 23:33 58.730 SANDRA.EXE-2A65F207.pf 12.11.2008 23:31 82.066 HELPPANE.EXE-D1016F9E.pf 12.11.2008 23:30 32.176 SDCLT.EXE-2D2C4DDD.pf 12.11.2008 20:42 23.130 RUNDLL32.EXE-F0626A85.pf 12.11.2008 20:26 33.374 RUNDLL32.EXE-208AC9CF.pf 12.11.2008 20:09 22.972 RUNDLL32.EXE-0D4581E5.pf 12.11.2008 19:34 19.576 REGEDIT.EXE-32FE412B.pf 12.11.2008 19:33 81.234 WO5.EXE-4290621D.pf 12.11.2008 19:29 15.974 REGEDIT.EXE-4748FE01.pf 12.11.2008 19:28 18.590 THREATWORK.EXE-E499E54D.pf 12.11.2008 19:26 35.896 CLEANMGR.EXE-05BE2D4C.pf 12.11.2008 19:24 56.372 AD-AWARE.EXE-9BBDE8C8.pf 12.11.2008 19:24 21.000 DFRGUI.EXE-E344E070.pf 12.11.2008 19:23 30.330 CPUZ.EXE-B60CD1B3.pf 12.11.2008 19:18 55.774 RUNDLL32.EXE-CCAA0064.pf 12.11.2008 19:17 62.222 CCLEANER.EXE-B2CF0D1E.pf 12.11.2008 18:48 22.396 GETPOPUPINFO.EXE-DFF767E1.pf 12.11.2008 18:47 34.180 _IU14D2N.TMP-4EB6E1E5.pf 12.11.2008 18:47 25.904 DLLHOST.EXE-AAD0E997.pf 12.11.2008 18:47 30.318 UNINS000.EXE-655DD07E.pf 12.11.2008 18:47 21.772 RUNDLL32.EXE-3E0AF5DC.pf 12.11.2008 18:47 7.732 TJENDER.EXE-DDF92704.pf 12.11.2008 18:46 47.348 CMD.EXE-EABFE48B.pf 12.11.2008 18:46 23.258 IS167485.EXE-B2270BDF.pf 12.11.2008 18:46 31.722 TJENDER.EXE-EE0332B1.pf 12.11.2008 18:46 22.986 RUNDLL32.EXE-C671719D.pf 12.11.2008 17:28 70.342 DFRGNTFS.EXE-4F838A89.pf 12.11.2008 17:28 16.196 DEFRAG.EXE-738093E8.pf 14.10.2008 11:07 32.304 WSCRIPT.EXE-A36E1053.pf 140 Datei(en), 22.585.297 Bytes 0 Verzeichnis(se), 37.027.713.024 Bytes frei Datentr„ger in Laufwerk C: ist System Volumeseriennummer: 147B-1A69 Verzeichnis von C:\Windows\tasks 14.11.2008 22:45 6 SA.DAT 14.11.2008 17:30 32.536 SCHEDLGU.TXT 14.11.2008 17:14 392 1-Click Maintenance.job 29.10.2008 16:27 394 At3.job 29.10.2008 16:27 394 At1.job 29.10.2008 16:25 372 At2.job 6 Datei(en), 34.094 Bytes 0 Verzeichnis(se), 37.027.717.120 Bytes frei Datentr„ger in Laufwerk C: ist System Volumeseriennummer: 147B-1A69 Verzeichnis von C:\Program Files 29.10.2008 16:42 <DIR> . 29.10.2008 16:42 <DIR> .. 29.03.2008 03:51 <DIR> ATI 29.03.2008 03:53 <DIR> ATI Technologies 15.08.2008 12:16 <DIR> AviSynth 2.5 02.04.2008 12:33 <DIR> BitLocker 29.10.2008 16:42 <DIR> Common Files 29.03.2008 04:45 <DIR> Internet Explorer 02.04.2008 12:32 <DIR> Microsoft Games 29.03.2008 12:22 <DIR> Microsoft Office 29.03.2008 04:45 <DIR> Movie Maker 02.11.2006 16:06 <DIR> MSBuild 02.11.2006 16:06 <DIR> Reference Assemblies 29.03.2008 18:58 <DIR> SiSoftware 29.03.2008 02:33 <DIR> VistaCodecPack 29.03.2008 04:45 <DIR> Windows Calendar 29.03.2008 04:45 <DIR> Windows Collaboration 29.03.2008 04:45 <DIR> Windows Defender 29.03.2008 04:45 <DIR> Windows Journal 15.10.2008 02:54 <DIR> Windows Mail 29.03.2008 04:45 <DIR> Windows Media Player 29.03.2008 00:50 <DIR> Windows NT 29.03.2008 04:45 <DIR> Windows Photo Gallery 29.03.2008 04:45 <DIR> Windows Sidebar 0 Datei(en), 0 Bytes 24 Verzeichnis(se), 37.027.717.120 Bytes frei
Für Eure Hilfe wäre ich sehr dankbar.
Gruß
kafi112
klicken) ändern, Du musst eingelogt sein!
