Logfile of HijackThis v1.99.1 Scan saved at 00:56:42, on 30.10.2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programme\TGTSoft\StyleXP\StyleXPService.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\UAService7.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Programme\AntiVir PersonalEdition Classic\avguard.exe C:\WINDOWS\Explorer.EXE C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe C:\Programme\Java\jre1.5.0_06\bin\jusched.exe C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe C:\Programme\Microsoft IntelliPoint\point32.exe C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe C:\Programme\Musicmatch\Musicmatch Jukebox\mmtask.exe C:\Programme\MessengerPlus! 3\MsgPlus.exe C:\WINDOWS\system32\ctfmon.exe C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Programme\Messenger\msmsgs.exe C:\Programme\Spybot - Search & Destroy\TeaTimer.exe C:\Programme\Mozilla Firefox\firefox.exe C:\WINDOWS\System32\samsusrr.exe C:\Programme\Java\jre1.5.0_06\bin\jucheck.exe C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Downloads\avenger.exe C:\Programme\MSN Messenger\msnmsgr.exe C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Downloads\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/ O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: (no name) - {D2A037A1-E7CA-46F5-8940-D3C789DC8870} - C:\WINDOWS\system32\ati2dwaa.dll O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup O4 - HKLM\..\Run: [WinampAgent] "C:\Programme\Winamp\Winampa.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programme\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [Zone Labs Client] C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [IntelliPoint] "C:\Programme\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [MMTray] "C:\Programme\Musicmatch\Musicmatch Jukebox\mm_tray.exe" O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [mmtask] "C:\Programme\Musicmatch\Musicmatch Jukebox\mmtask.exe" O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programme\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Programme\Gemeinsame Dateien\Logitech\KhalShared\KHALMNPR.EXE" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [STYLEXP] C:\Programme\TGTSoft\StyleXP\StyleXP.exe -Hide O4 - HKCU\..\Run: [Microsoft Works Update Detection] C:\Programme\Microsoft Works\WkDetect.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [BLASC] "C:\Spielee\World of Warcraft\BLASC\BLASC.exe" O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe O8 - Extra context menu item: Download all by Free Download Manager - file://C:\Programme\Free Download Manager\dlall.htm O8 - Extra context menu item: Download by Free Download Manager - file://C:\Programme\Free Download Manager\dllink.htm O8 - Extra context menu item: Download selected by Free Download Manager - file://C:\Programme\Free Download Manager\dlselected.htm O8 - Extra context menu item: Download web site by Free Download Manager - file://C:\Programme\Free Download Manager\dlpage.htm O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{5B8F4E90-1D86-4E61-B711-9F29F9EB69A6}: NameServer = 192.168.0.1 O18 - Protocol: bw+0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O18 - Protocol: offline-8876480 - {676726C3-13EC-4212-B5CF-5DFC4122CCB5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O20 - AppInit_DLLs: MsgPlusLoader.dll psapdani.dll e1.dll O20 - Winlogon Notify: conmgr - conmgr32.dll (file missing) O20 - Winlogon Notify: samsusrr - C:\WINDOWS\system32\samsusrr.dll O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NBService - Nero AG - C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: StyleXPService - Unknown owner - C:\Programme\TGTSoft\StyleXP\StyleXPService.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe ----------------------------------------------------------------------------------------------------------------------------- Ich - 06-10-30 0:58:30,87 Service Pack 2 ComboFix 06.10.19 - Running from: "C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Downloads" ((((((((((((((((((((((((((((((( Files Created from 2006-09-30 to 2006-10-30 )))))))))))))))))))))))))))))))))) 2006-10-29 20:03 80,996 --a------ C:\WINDOWS\system32\samsusrr.exe 2006-10-23 16:17 135,680 --a------ C:\WINDOWS\cc5.exe 2006-10-23 16:16 103,936 --a------ C:\WINDOWS\msupdtwiz.exe 2006-10-20 10:27 9,216 --a------ C:\WINDOWS\system32\e1.dll 2006-10-20 02:12 80,996 --a------ C:\WINDOWS\system32\samsusrr.exe.vir 2006-10-18 12:20 141,312 --a------ C:\WINDOWS\cc3.exe 2006-10-18 12:20 108,511 --a------ C:\WINDOWS\smm126.exe 2006-10-17 13:44 0 --a------ C:\WINDOWS\hv4e05.dll 2006-10-17 00:31 28,672 --------- C:\WINDOWS\system32\psapdani.dll 2006-10-14 16:43 8,704 --a------ C:\WINDOWS\system32\E1.DLL.vir 2006-10-14 16:43 28,672 --a------ C:\WINDOWS\system32\PSAPDANI.DLL.vir 2006-10-14 16:43 20,480 --a------ C:\WINDOWS\system32\netfrtm.dll 2006-10-14 16:43 12,288 --a------ C:\WINDOWS\system32\hypewmv9.exe 2006-10-14 16:43 106,496 --a------ C:\WINDOWS\system32\samsusrr.dll (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-10-30 00:06 -------- d-------- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Xfire 2006-10-30 00:03 -------- d---s---- C:\Programme\Xfire 2006-10-30 00:03 -------- d-------- C:\Programme\mp3_maker_titanium_2004 2006-10-30 00:03 -------- d-------- C:\Programme\Mozilla Firefox 2006-10-30 00:03 -------- d-------- C:\Programme\Media_Manager 2006-10-30 00:03 -------- d-------- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Azureus 2006-10-29 23:59 -------- d-------- C:\Programme\CleanUp! 2006-10-29 19:56 43520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll 2006-10-27 21:00 -------- d-------- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\teamspeak2 2006-10-16 16:19 -------- d-------- C:\Programme\ICQLite 2006-10-16 16:07 -------- d-------- C:\Programme\IrfanView 2006-10-16 16:07 -------- d-------- C:\Programme\GoldWaveDemo 2006-10-14 01:22 -------- d-------- C:\Programme\ICQToolbar 2006-10-02 13:38 -------- d-------- C:\Programme\Gemeinsame Dateien\Ahead 2006-10-02 13:38 -------- d-------- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Ahead 2006-09-30 11:59 -------- d-------- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DeepBurner 2006-09-30 11:50 -------- d-------- C:\Programme\Astonsoft 2006-09-29 19:38 -------- d-------- C:\Programme\Ahead 2006-09-27 19:16 -------- d-------- C:\Programme\Microsoft Picture It! 2006-09-27 16:56 -------- d--h----- C:\Programme\InstallShield Installation Information 2006-09-27 16:56 -------- d-------- C:\Programme\Google 2006-09-27 16:56 -------- d-------- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Google 2006-09-20 02:42 -------- d-------- C:\Programme\PokerStars 2006-09-20 02:42 -------- d-------- C:\Programme\Gemeinsame Dateien 2006-09-14 11:31 -------- d-------- C:\Programme\AntiVir PersonalEdition Classic 2006-08-27 13:41 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll 2006-08-23 23:26 120294 --a------ C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Cosmos Prefs (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe" "STYLEXP"="C:\\Programme\\TGTSoft\\StyleXP\\StyleXP.exe -Hide" "Steam"="" "Microsoft Works Update Detection"="C:\\Programme\\Microsoft Works\\WkDetect.exe" "msnmsgr"="\"C:\\Programme\\MSN Messenger\\msnmsgr.exe\" /background" "LDM"="C:\\Programme\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe" "MSMSGS"="\"C:\\Programme\\Messenger\\msmsgs.exe\" /background" "BLASC"="\"C:\\Spielee\\World of Warcraft\\BLASC\\BLASC.exe\"" "SpybotSD TeaTimer"="C:\\Programme\\Spybot - Search & Destroy\\TeaTimer.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "TkBellExe"="\"C:\\Programme\\Gemeinsame Dateien\\Real\\Update_OB\\realsched.exe\" -osboot" "C-Media Mixer"="Mixer.exe /startup" "WinampAgent"="\"C:\\Programme\\Winamp\\Winampa.exe\"" "SunJavaUpdateSched"="C:\\Programme\\Java\\jre1.5.0_06\\bin\\jusched.exe" "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" "NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit" "KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\ 65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00 "NeroFilterCheck"="C:\\Programme\\Gemeinsame Dateien\\Ahead\\Lib\\NeroCheck.exe" "DAEMON Tools-1033"="\"C:\\Programme\\D-Tools\\daemon.exe\" -lang 1033" "Zone Labs Client"="C:\\Programme\\Zone Labs\\ZoneAlarm\\zlclient.exe" "IntelliPoint"="\"C:\\Programme\\Microsoft IntelliPoint\\point32.exe\"" "MMTray"="\"C:\\Programme\\Musicmatch\\Musicmatch Jukebox\\mm_tray.exe\"" "avgnt"="\"C:\\Programme\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min" "mmtask"="\"C:\\Programme\\Musicmatch\\Musicmatch Jukebox\\mmtask.exe\"" "MessengerPlus3"="\"C:\\Programme\\MessengerPlus! 3\\MsgPlus.exe\"" "Logitech Hardware Abstraction Layer"="\"C:\\Programme\\Gemeinsame Dateien\\Logitech\\KhalShared\\KHALMNPR.EXE\"" @="" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000001 [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="Die derzeitige Homepage" "Flags"=dword:00000002 "Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,00,00,00,\ 00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00 "CurrentState"=hex:04,00,00,40 "OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\ ff,ff,04,00,00,00 "RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\ 00,00,01,00,00,00 [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 "NoCDBurning"=dword:00000001 "FoFileAssociate"=dword:00000000 "StartMenuLogoff"=dword:00000001 "NoShellSearchButton"=dword:00000000 "NoLowDiskSpaceChecks"=dword:00000000 "HideClock"=dword:00000000 "NoRecentDocsMenu"=dword:00000001 "NoFolderOptions"=dword:00000000 "NoUserNameInStartMenu"=dword:00000000 "NoRecentDocsNetHood"=dword:00000001 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoSharedDocuments"=dword:00000000 "NoCDBurning"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run] [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}" "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}" "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Erinnerungen in Microsoft Works-Kalender.lnk] "path"="C:\\Dokumente und Einstellungen\\All Users\\Startmenü\\Programme\\Autostart\\Erinnerungen in Microsoft Works-Kalender.lnk" "backup"="C:\\WINDOWS\\pss\\Erinnerungen in Microsoft Works-Kalender.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\GEMEIN~1\\MICROS~1\\WORKSS~1\\wkcalrem.exe " "item"="Erinnerungen in Microsoft Works-Kalender" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^InterVideo WinCinema Manager.lnk] "path"="C:\\Dokumente und Einstellungen\\All Users\\Startmenü\\Programme\\Autostart\\InterVideo WinCinema Manager.lnk" "backup"="C:\\WINDOWS\\pss\\InterVideo WinCinema Manager.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\Common\\Bin\\WINCIN~1.EXE " "item"="InterVideo WinCinema Manager" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Microsoft Office.lnk] "path"="C:\\Dokumente und Einstellungen\\All Users\\Startmenü\\Programme\\Autostart\\Microsoft Office.lnk" "backup"="C:\\WINDOWS\\pss\\Microsoft Office.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\MICROS~2\\Office10\\OSA.EXE -b -l" "item"="Microsoft Office" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^WinManager.lnk] "path"="C:\\Dokumente und Einstellungen\\All Users\\Startmenü\\Programme\\Autostart\\WinManager.lnk" "backup"="C:\\WINDOWS\\pss\\WinManager.lnkCommon Startup" "location"="Common Startup" "command"="C:\\PROGRA~1\\PC-TV\\WINMAN~1\\WINMAN~1.EXE " "item"="WinManager" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BearShare] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="BearShare" "hkey"="HKLM" "command"="\"C:\\Programme\\BearShare\\BearShare.exe\" /pause" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ Lite] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ICQLite" "hkey"="HKLM" "command"="C:\\Programme\\ICQLite\\ICQLite.exe -minimize" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="iTunesHelper" "hkey"="HKLM" "command"="\"C:\\Programme\\iTunes\\iTunesHelper.exe\"" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MessengerPlus3] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="MsgPlus" "hkey"="HKLM" "command"="\"C:\\Programme\\MessengerPlus! 3\\MsgPlus.exe\"" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Portfolio] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="WksSb" "hkey"="HKLM" "command"="C:\\Programme\\Microsoft Works\\WksSb.exe /AllUsers" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft Works Update Detection] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="WkDetect" "hkey"="HKLM" "command"="C:\\Programme\\Microsoft Works\\WkDetect.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="msmsgs" "hkey"="HKCU" "command"="\"C:\\Programme\\Messenger\\msmsgs.exe\" /background" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="msnmsgr" "hkey"="HKCU" "command"="\"C:\\Programme\\MSN Messenger\\msnmsgr.exe\" /background" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Skype" "hkey"="HKCU" "command"="\"C:\\Programme\\Skype\\Phone\\Skype.exe\" /nosplash /minimized" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="" "hkey"="HKCU" "command"="" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TVTip] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="tvtip" "hkey"="HKLM" "command"="C:\\Programme\\TV Movie\\TV Movie ClickFinder\\tvtip.EXE /m" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WorksFUD] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="wkfud" "hkey"="HKLM" "command"="C:\\Programme\\Microsoft Works\\wkfud.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "vsmon"=dword:00000002 "iPodService"=dword:00000003 HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\conmgr HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\samsusrr [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" Completion time: 06-10-30 0:58:54.57 C:\ComboFix.txt ... 06-10-30 00:58 C:\ComboFix2.txt ... 06-10-30 00:49 C:\ComboFix3.txt ... 06-10-30 00:10 --------------------------------------------------------------------------------------------------------------------- Volume in Laufwerk C: hat keine Bezeichnung. Volumeseriennummer: 8465-E983 Verzeichnis von C:\WINDOWS\system32 30.10.2006 00:13 80.996 samsusrr.exe 30.10.2006 00:06 29.204 nvapps.xml 29.10.2006 19:56 43.520 CmdLineExt03.dll 29.10.2006 19:55 344.608 perfh009.dat 29.10.2006 19:55 48.244 perfc009.dat 29.10.2006 19:55 360.520 perfh007.dat 29.10.2006 19:55 57.964 perfc007.dat 29.10.2006 19:55 820.448 PerfStringBackup.INI 23.10.2006 15:37 2.206 wpa.dbl 20.10.2006 10:27 9.216 e1.dll 20.10.2006 02:12 80.996 samsusrr.exe.vir 17.10.2006 00:31 28.672 psapdani.dll 14.10.2006 16:43 106.496 samsusrr.dll 14.10.2006 16:43 8.704 E1.DLL.vir 14.10.2006 16:43 28.672 PSAPDANI.DLL.vir 14.10.2006 16:43 20.480 netfrtm.dll 14.10.2006 16:43 12.288 hypewmv9.exe 27.08.2006 13:41 98.304 CmdLineExt.dll 27.08.2006 13:38 1 SI.bin --------------------------------------------------------------------------------------------------------------------- Volume in Laufwerk C: hat keine Bezeichnung. Volumeseriennummer: 8465-E983 Verzeichnis von C:\DOKUME~1\Ich\LOKALE~1\Temp 30.10.2006 01:05 0 BITB.tmp 06.03.2006 01:32 24.613 IadHide5.dll --------------------------------------------------------------------------------------------------------------------- Volume in Laufwerk C: hat keine Bezeichnung. Volumeseriennummer: 8465-E983 Verzeichnis von C:\WINDOWS 30.10.2006 01:03 116 NeroDigital.ini 29.10.2006 20:31 132 winamp.ini 29.10.2006 19:53 0 0.log 29.10.2006 19:53 159 wiadebug.log 29.10.2006 19:53 50 wiaservc.log 29.10.2006 19:53 2.048 bootstat.dat 29.10.2006 06:33 32.588 SchedLgU.Txt 29.10.2006 06:33 127.225 WindowsUpdate.log 28.10.2006 21:36 16 mswiiz32.dat 28.10.2006 21:36 16 mswiz32.dat 28.10.2006 18:56 0 gdx9iva.bmp 28.10.2006 05:42 78.640 wmsetup.log 25.10.2006 18:53 175.481 setupact.log 23.10.2006 16:47 0 msupdtwiz.s 23.10.2006 16:47 9.800 msupdtwiz.wax 23.10.2006 16:17 135.680 cc5.exe 23.10.2006 16:16 0 msupdtwiz.z 23.10.2006 16:16 16 msupdtwiz.dat 23.10.2006 16:16 103.936 msupdtwiz.exe 20.10.2006 12:10 16 serrv.dat 18.10.2006 13:51 141.312 cc3.exe 18.10.2006 13:50 108.511 smm126.exe 18.10.2006 12:20 0 jw9ucgel.scf 17.10.2006 13:44 0 hv4e05.dll 16.10.2006 20:08 0 h6j40x.txt 14.10.2006 16:48 0 sc.xml1 09.10.2006 13:30 366 brqikmon.ini 02.10.2006 13:35 58.912 DirectX.log 02.10.2006 13:34 846.757 setupapi.log 01.10.2006 15:04 227 system.ini 01.10.2006 15:04 686 win.ini --------------------------------------------------------------------------------------------------------------------- Volume in Laufwerk C: hat keine Bezeichnung. Volumeseriennummer: 8465-E983 Verzeichnis von C:\WINDOWS\Temp 29.10.2006 19:53 256 ZLT06c76.TMP --------------------------------------------------------------------------------------------------------------------- Volume in Laufwerk C: hat keine Bezeichnung. Volumeseriennummer: 8465-E983 Verzeichnis von C:\WINDOWS\Downloaded Program Files 14.09.2005 21:49 65 desktop.ini --------------------------------------------------------------------------------------------------------------------- Volume in Laufwerk C: hat keine Bezeichnung. Volumeseriennummer: 8465-E983 Verzeichnis von C:\ 30.10.2006 01:10 0 sys.txt 30.10.2006 01:08 622 down.txt 30.10.2006 01:08 277 tmp.txt 30.10.2006 01:07 7.858 system.txt 30.10.2006 01:06 337 systemtemp.txt 30.10.2006 01:06 109.040 system32.txt 30.10.2006 00:58 14.720 ComboFix.txt 30.10.2006 00:49 14.683 ComboFix2.txt 30.10.2006 00:23 3.373 look.txt 30.10.2006 00:10 15.120 ComboFix3.txt 29.10.2006 19:53 1.610.612.736 pagefile.sys 01.10.2006 15:04 353 boot.ini