Drive Cleaner Befall?

#1 Guten Tag Community!

Vor einigen Tagen zeigte Opera beim surfen eine Meldung, ich hätte "Sexseiten besucht". Kurz darauf wurde ich zu der Drive Cleaner Seite weitergeleitet. Ich habe das Fenster geschloßen.

Soweit es mir möglich war, habe ich versucht das Problem selbst in den Griff zu bekommen, allerdings würde ich gerne von euch wissen, ob das Problem jetzt komplett beseitigt ist!


1.
Temporaere Dateien beseitigen - erledigt

2.
Combofix:


((((((((((((((((((((((((( Files Created from 2007-06-24 to 2007-07-24 )))))))))))))))))))))))))))))))


2007-07-24 09:04 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-07-23 19:58 <DIR> d-------- C:\Programme\ClearProg
2007-07-14 11:48 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\Google
2007-07-11 14:22 <DIR> d-------- C:\DOKUME~1\ALLUSE~1\ANWEND~1\nView_Profiles
2007-07-11 14:06 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2007-07-11 14:06 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-07-11 14:06 <DIR> d-------- C:\WINDOWS\nview
2007-07-07 00:28 <DIR> d-------- C:\NVIDIA
2007-07-06 10:56 20,938 --a------ C:\WINDOWS\War3Unin.dat
2007-07-06 10:56 2,829 --a------ C:\WINDOWS\War3Unin.pif
2007-07-06 10:56 126,976 --a------ C:\WINDOWS\War3Unin.exe


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-23 18:20:08 -------- d-----w C:\Programme\mIRC
2007-07-21 14:57:25 -------- d-----w C:\Programme\Opera
2007-07-10 22:14:42 70,778 ----a-w C:\WINDOWS\system32\perfc007.dat
2007-07-10 22:14:42 405,448 ----a-w C:\WINDOWS\system32\perfh007.dat
2007-07-10 19:21:21 -------- d-----w C:\Programme\AGEIA Technologies
2007-07-10 19:20:58 -------- d-----w C:\Programme\Gemeinsame Dateien\Wise Installation Wizard
2007-07-10 19:18:13 -------- d--h--w C:\Programme\InstallShield Installation Information
2007-07-05 21:58:58 -------- d-----w C:\Programme\ICQ6
2007-06-18 21:23:58 -------- d-----w C:\DOKUME~1\HERRDO~1\ANWEND~1\Lavasoft
2007-06-18 21:23:55 -------- d-----w C:\Programme\Lavasoft
2007-06-18 17:35:35 -------- d-----w C:\Programme\RegCleaner
2007-06-18 17:11:17 223,128 ----a-w C:\WINDOWS\system32\drivers\dtscsi.sys
2007-06-18 17:06:08 96,256 ----a-w C:\WINDOWS\system32\drivers\sptd2333.sys
2007-06-18 17:06:08 664,064 ----a-w C:\WINDOWS\system32\drivers\sptd.sys
2007-06-17 08:31:13 -------- d-----w C:\Programme\Guitar Pro 5
2007-06-15 13:44:11 -------- d-----w C:\Programme\Miranda IM
2007-06-14 19:03:53 -------- d-----w C:\DOKUME~1\HERRDO~1\ANWEND~1\Miranda
2007-06-05 14:52:41 -------- d-----w C:\Programme\DivX
2007-06-03 08:36:01 4,608 ----a-w C:\WINDOWS\system32\w95inf32.dll
2007-06-03 08:36:01 2,272 ----a-w C:\WINDOWS\system32\w95inf16.dll
2007-06-03 08:35:27 -------- d-----w C:\Programme\ArcSoft
2007-06-03 08:33:32 -------- d-----w C:\Programme\Canon
2007-06-02 17:19:50 -------- d-----w C:\Programme\DOSBox-0.70
2007-06-02 14:03:08 53,248 ----a-w C:\WINDOWS\ipuninst.exe
2007-05-29 10:35:55 -------- d-----w C:\Programme\BitComet FLV Converter
2007-05-25 15:39:38 -------- d-----w C:\DOKUME~1\HERRDO~1\ANWEND~1\vlc
2007-05-25 15:29:04 -------- d-----w C:\Programme\VideoLAN
2007-05-16 15:11:44 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-05-15 17:06:58 71,208 ----a-w C:\WINDOWS\system32\PhysXLoader.dll
2007-05-11 14:49:27 3,020 ----a-w C:\WINDOWS\mozver.dat
2007-04-25 14:22:27 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2004-10-01 14:00:16 40,960 ----a-w C:\Programme\Uninstall_CDS.exe


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl"="C:\Programme\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" [2004-11-02 21:24]
"razer"="C:\Programme\Razer\razerhid.exe" [2005-05-17 19:21]
"avgnt"="C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" [2007-04-20 15:17]
"WinampAgent"="C:\Programme\Winamp\winampa.exe" [2006-10-25 07:37]
"SoundMax"="C:\Programme\Analog Devices\SoundMAX\Smax4.exe" [2006-05-18 15:26]
"SoundMAXPnP"="C:\Programme\Analog Devices\Core\smax4pnp.exe" [2006-05-18 08:22]
"ZoneAlarm Client"="C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe" [2007-03-09 00:02]
"TkBellExe"="C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" [2007-04-20 21:27]
"TomTomHOME.exe"="C:\Programme\TomTom HOME\TomTomHOME.exe" [2007-03-14 16:52]
"SunJavaUpdateSched"="C:\Programme\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"QuickTime Task"="C:\Programme\QuickTime\qttask.exe" [2007-04-27 09:41]
"iTunesHelper"="C:\Programme\iTunes\iTunesHelper.exe" [2007-04-27 11:25]
"nwiz"="nwiz.exe" [2007-04-19 13:26 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="NvMCTray.dll" [2007-04-19 13:26 C:\WINDOWS\system32\nvmctray.dll]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 14:00]
"PowerBar"="" []
"Steam"="" []
"NBJ"="C:\Programme\Ahead\Nero BackItUp\NBJ.exe" [2005-10-11 19:25]
"MSMSGS"="C:\Programme\Messenger\msmsgs.exe" [2004-10-13 18:24]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGEIA PhysX SysTray]
C:\Programme\AGEIA Technologies\TrayIcon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ Lite]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"C:\Programme\iTunes\iTunesHelper.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Programme\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
"C:\Programme\MSN Messenger\MsnMsgr.Exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Programme\QuickTime\qttask.exe" -atboottime



[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{11d72f84-eabe-11db-b197-0018f34d65af}]
AutoRun\command- setupSNK.exe


Contents of the 'Scheduled Tasks' folder
2007-05-13 18:35:06 C:\WINDOWS\tasks\AppleSoftwareUpdate.job


3.
Erstellen eines Hijackthis-Logfiles

Logfile of HijackThis v1.99.1
Scan saved at 09:13:40, on 24.07.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Programme\Razer\razerhid.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\Winamp\winampa.exe
C:\Programme\Analog Devices\SoundMAX\Smax4.exe
C:\Programme\Analog Devices\Core\smax4pnp.exe
C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE
C:\Programme\TomTom HOME\TomTomHOME.exe
C:\Programme\Java\jre1.6.0_01\bin\jusched.exe
C:\Programme\QuickTime\qttask.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\iPod\bin\iPodService.exe
C:\Programme\Razer\razerofa.exe
C:\Programme\Opera\Opera.exe
C:\Programme\MSN Messenger\usnsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Programme\Winamp\winamp.exe
C:\Dokumente und Einstellungen\Herr Dortmann\Desktop\hijackthis_199\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [RemoteControl] "C:\Programme\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [razer] C:\Programme\Razer\razerhid.exe
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [SoundMax] "C:\Programme\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programme\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Programme\TomTom HOME\TomTomHOME.exe" -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NBJ] "C:\Programme\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by131fd.bay131.hotmail.msn.com/resources/MsnPUpld.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{79643656-E948-482D-8726-FF27E18A5D7C}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


4.
Logfiles mittels datfind.bat erstellen und posten (abkopieren)

24.07.2007 08:28 13.646 wpa.dbl
24.07.2007 08:28 88.723 nvapps.xml
24.07.2007 08:28 55.080 vsconfig.xml
22.07.2007 18:39 279.552 swreg.exe
11.07.2007 00:14 70.778 perfc007.dat
11.07.2007 00:14 405.448 perfh007.dat
11.07.2007 00:14 58.732 perfc009.dat
11.07.2007 00:14 392.432 perfh009.dat
11.07.2007 00:14 899.764 PerfStringBackup.INI
28.06.2007 09:57 16.256.984 MRT.exe
17.06.2007 15:10 95.864 FNTCACHE.DAT
03.06.2007 10:36 23.392 nscompat.tlb
03.06.2007 10:36 16.832 amcompat.tlb
03.06.2007 10:36 2.272 w95inf16.dll
03.06.2007 10:36 4.608 w95inf32.dll
16.05.2007 17:11 683.520 inetcomm.dll
15.05.2007 19:06 71.208 PhysXLoader.dll
11.05.2007 16:49 4.254 jupdate-1.6.0_01-b06.log
04.05.2007 14:27 3.079.680 mshtml.dll
27.04.2007 09:42 49.152 QuickTime.qts
27.04.2007 09:42 65.536 QuickTimeVR.qtx
25.04.2007 16:22 144.896 schannel.dll
23.04.2007 02:15 1.044.480 libdivx.dll
23.04.2007 02:15 200.704 ssldivx.dll
20.04.2007 21:27 185.952 rmoc3260.dll
20.04.2007 21:27 5.632 pndx5032.dll
20.04.2007 21:27 6.656 pndx5016.dll
20.04.2007 21:27 278.528 pncrt.dll
19.04.2007 14:14 208.896 NVUNINST.EXE
19.04.2007 13:26 274.432 nvrses.dll
19.04.2007 13:26 266.240 nvrsesm.dll
19.04.2007 13:26 241.664 nvrsfi.dll
19.04.2007 13:26 278.528 nvrsfr.dll
19.04.2007 13:26 147.456 nvcolor.exe
19.04.2007 13:26 323.584 nvrshe.dll
19.04.2007 13:26 241.664 nvrseng.dll
19.04.2007 13:26 274.432 nvrsel.dll
19.04.2007 13:26 253.952 nvrshu.dll
19.04.2007 13:26 270.336 nvrsde.dll
19.04.2007 13:26 274.432 nvrsit.dll
19.04.2007 13:26 245.760 nvrsda.dll
19.04.2007 13:26 241.664 nvrscs.dll
19.04.2007 13:26 262.144 nvrsja.dll
19.04.2007 13:26 258.048 nvrsko.dll
19.04.2007 13:26 266.240 nvrsnl.dll
19.04.2007 13:26 249.856 nvrsno.dll
19.04.2007 13:26 249.856 nvrspl.dll
19.04.2007 13:26 323.584 nvrsar.dll
19.04.2007 13:26 266.240 nvrspt.dll
19.04.2007 13:26 425.984 keystone.exe
19.04.2007 13:26 5.644.288 nvoglnt.dll
19.04.2007 13:26 286.720 nvnt4cpl.dll
19.04.2007 13:26 2.859.008 nvmoblsr.dll
19.04.2007 13:26 262.144 nvrsptb.dll
19.04.2007 13:26 888.832 nvmobls.dll
19.04.2007 13:26 262.144 nvrsru.dll
19.04.2007 13:26 249.856 nvrssk.dll
19.04.2007 13:26 249.856 nvrssl.dll
19.04.2007 13:26 245.760 nvrssv.dll
19.04.2007 13:26 249.856 nvrstr.dll
19.04.2007 13:26 86.016 nvmctray.dll
19.04.2007 13:26 458.752 nvmccssr.dll
19.04.2007 13:26 188.416 nvmccss.dll
19.04.2007 13:26 4.543.616 nv4_disp.dll
19.04.2007 13:26 212.992 nvapi.dll
19.04.2007 13:26 442.368 nvappbar.exe
19.04.2007 13:26 221.184 nvrszhc.dll
19.04.2007 13:26 45.056 nvmccsrs.dll
19.04.2007 13:26 118.784 nvrszht.dll
19.04.2007 13:26 229.376 nvmccs.dll
19.04.2007 13:26 1.474.560 nview.dll
19.04.2007 13:26 35.840 nvcod.dll
19.04.2007 13:26 581.632 nvhwvid.dll
19.04.2007 13:26 3.203.072 nvgamesr.dll
19.04.2007 13:26 466.944 nvshell.dll
19.04.2007 13:26 3.035.136 nvgames.dll
19.04.2007 13:26 311.296 nvexpbar.dll
19.04.2007 13:26 1.339.392 nvdspsch.exe
19.04.2007 13:26 5.255.168 nvdispsr.dll
19.04.2007 13:26 159.810 nvsvc32.exe
19.04.2007 13:26 5.619.712 nvdisps.dll
19.04.2007 13:26 17.056 nvdisp.nvu
19.04.2007 13:26 1.011.712 nvcpluir.dll
19.04.2007 13:26 794.624 nvcplui.exe
19.04.2007 13:26 7.700.480 nvcpl.dll
19.04.2007 13:26 35.840 nvcodins.dll
19.04.2007 13:26 1.626.112 nwiz.exe
19.04.2007 13:26 1.732.608 nvwssr.dll
19.04.2007 13:26 1.236.992 nvwss.dll
19.04.2007 13:26 167.936 nvwrszht.dll
19.04.2007 13:26 73.728 nvtuicpl.cpl
19.04.2007 13:26 163.840 nvwrszhc.dll
19.04.2007 13:26 303.104 nvwrstr.dll
19.04.2007 13:26 294.912 nvwrssv.dll
19.04.2007 13:26 303.104 nvwrssl.dll
19.04.2007 13:26 299.008 nvwrssk.dll
19.04.2007 13:26 315.392 nvwrsru.dll
19.04.2007 13:26 319.488 nvwrsptb.dll
19.04.2007 13:26 323.584 nvwrspt.dll
19.04.2007 13:26 294.912 nvwrspl.dll
19.04.2007 13:26 299.008 nvwrsno.dll
19.04.2007 13:26 319.488 nvwrsnl.dll
19.04.2007 13:26 196.608 nvwrsko.dll
19.04.2007 13:26 212.992 nvwrsja.dll
19.04.2007 13:26 323.584 nvwrsit.dll
19.04.2007 13:26 315.392 nvwrshu.dll
19.04.2007 13:26 278.528 nvwrshe.dll
19.04.2007 13:26 208.896 nvudisp.exe
19.04.2007 13:26 335.872 nvwrsel.dll
19.04.2007 13:26 327.680 nvwrsfr.dll
19.04.2007 13:26 303.104 nvwrsfi.dll
19.04.2007 13:26 327.680 nvwrsesm.dll
19.04.2007 13:26 335.872 nvwrses.dll
19.04.2007 13:26 286.720 nvwrseng.dll
19.04.2007 13:26 2.924.544 nvvitvs.dll
19.04.2007 13:26 311.296 nvwrsde.dll
19.04.2007 13:26 294.912 nvwrsda.dll
19.04.2007 13:26 286.720 nvwrscs.dll
19.04.2007 13:26 282.624 nvwrsar.dll
19.04.2007 13:26 1.019.904 nvwimg.dll
19.04.2007 13:26 1.703.936 nvwdmcpl.dll
19.04.2007 13:26 81.920 nvwddi.dll
19.04.2007 13:26 2.973.696 nvvitvsr.dll
19.04.2007 13:26 69.632 nvcpl.cpl
18.04.2007 18:13 2.854.400 msi.dll
18.04.2007 14:31 617.472 urlmon.dll
18.04.2007 14:31 664.576 wininet.dll
18.04.2007 14:31 1.494.528 shdocvw.dll
18.04.2007 14:31 474.624 shlwapi.dll
18.04.2007 14:31 39.424 pngfilt.dll
18.04.2007 14:31 532.480 mstime.dll
18.04.2007 14:31 146.432 msrating.dll
18.04.2007 14:31 449.024 mshtmled.dll
18.04.2007 14:31 1.023.488 browseui.dll
18.04.2007 14:31 55.808 extmgr.dll
18.04.2007 14:31 152.064 cdfview.dll
18.04.2007 14:31 251.392 iepeers.dll
18.04.2007 14:31 96.768 inseng.dll
18.04.2007 14:31 16.384 jsproxy.dll
18.04.2007 14:31 1.056.256 danim.dll
18.04.2007 14:31 357.888 dxtmsft.dll
18.04.2007 14:31 205.312 dxtrans.dll
18.04.2007 12:27 123.392 xpsp3res.dll
16.04.2007 22:47 33.624 wups.dll
16.04.2007 22:47 30.040 wuapi.dll.mui
16.04.2007 22:47 30.040 wuaucpl.cpl.mui
16.04.2007 22:45 1.710.936 wuaueng.dll
16.04.2007 22:45 549.720 wuapi.dll
16.04.2007 22:45 325.976 wucltui.dll
16.04.2007 22:45 216.408 wuaucpl.cpl
16.04.2007 22:45 203.096 wuweb.dll
16.04.2007 22:45 92.504 cdm.dll
16.04.2007 22:45 43.352 wups2.dll
16.04.2007 22:45 53.080 wuauclt.exe
16.04.2007 22:45 20.824 wuaueng.dll.mui
16.04.2007 22:44 34.136 wucltui.dll.mui
16.04.2007 17:53 1.058.304 kernel32.dll
14.04.2007 15:59 489.000 PhysX.cpl
14.04.2007 15:57 53.248 AgCPanelSwedish.dll
14.04.2007 15:57 53.248 AgCPanelSpanish.dll
14.04.2007 15:57 53.248 AgCPanelTraditionalChinese.dll
14.04.2007 15:57 53.248 AgCPanelGerman.dll
14.04.2007 15:57 53.248 AgCPanelPortugese.dll
14.04.2007 15:57 53.248 AgCPanelKorean.dll
14.04.2007 15:57 53.248 AgCPanelSimplifiedChinese.dll
14.04.2007 15:57 53.248 AgCPanelJapanese.dll
14.04.2007 15:57 53.248 AgCPanelFrench.dll
13.04.2007 03:21 271.360 mscoree.dll
04.04.2007 18:55 261.480 xactengine2_7.dll
04.04.2007 18:53 81.768 xinput1_3.dll



MFG

Andreas

#2 Scan dein Rechner mal mit RogueRemover PRO Trail für 30 tage
http://www.malwarebytes.org/rogueremoverpro.php
__________
MfG Argus