Befall mit Win32.Renos

======List of files/folders created in the last 1 months======

2009-02-12 21:30:23 ----D---- C:\rsit
2009-02-12 21:23:38 ----A---- C:\WINDOWS\gmer.ini
2009-02-12 21:23:37 ----A---- C:\WINDOWS\gmer_uninstall.cmd
2009-02-12 21:23:37 ----A---- C:\WINDOWS\gmer.dll
2009-02-12 21:23:36 ----A---- C:\WINDOWS\gmer.exe
2009-02-12 17:26:26 ----HDC---- C:\WINDOWS\$NtUninstallKB960715$
2009-02-12 16:33:42 ----D---- C:\Programme\Trend Micro
2009-02-12 15:37:14 ----A---- C:\WINDOWS\wininit.ini
2009-02-12 14:56:14 ----D---- C:\Programme\Spybot - Search & Destroy
2009-02-12 14:56:14 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy
2009-02-12 14:48:47 ----D---- C:\VIRUSfighter
2009-02-12 14:27:43 ----A---- C:\WINDOWS\system32\fejokt.dll
2009-02-11 11:58:38 ----D---- C:\Programme\Dirk
2009-02-07 11:20:57 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVS4YOU
2009-02-06 22:10:36 ----D---- C:\Programme\Gemeinsame Dateien\AVSMedia
2009-02-06 22:10:34 ----A---- C:\WINDOWS\system32\mpg4c32.dll
2009-02-06 22:10:34 ----A---- C:\WINDOWS\system32\mcdvd_32.dll
2009-02-06 22:10:33 ----A---- C:\WINDOWS\system32\msxml3a.dll
2009-02-06 22:10:33 ----A---- C:\WINDOWS\system32\msvcp70.dll
2009-02-06 22:10:33 ----A---- C:\WINDOWS\system32\mfc70.dll
2009-02-06 22:10:33 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2009-02-06 22:10:32 ----D---- C:\Programme\AVS4YOU
2009-02-06 22:10:32 ----A---- C:\WINDOWS\system32\msvcr70.dll
2009-02-06 18:49:06 ----D---- C:\WINDOWS\system32\LogFiles
2009-02-04 11:49:06 ----D---- C:\Dokumente und Einstellungen\alles meins\Anwendungsdaten\Google
2009-02-04 11:44:27 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Google Updater
2009-02-04 11:44:20 ----D---- C:\Programme\Google
2009-01-27 18:44:24 ----D---- C:\Dokumente und Einstellungen\alles meins\Anwendungsdaten\gtk-2.0
2009-01-27 17:49:31 ----D---- C:\Dokumente und Einstellungen\alles meins\Anwendungsdaten\NJStar
2009-01-27 17:49:21 ----D---- C:\Programme\NJStar Japanese WP
2009-01-25 13:50:34 ----D---- C:\Dokumente und Einstellungen\alles meins\Anwendungsdaten\WinRAR
2009-01-25 13:49:31 ----D---- C:\Programme\WinRAR
2009-01-25 13:45:17 ----A---- C:\WINDOWS\system32\RchTxDE.dll
2009-01-25 13:45:16 ----A---- C:\WINDOWS\system32\MsPrpDE.dll
2009-01-25 13:45:15 ----A---- C:\WINDOWS\system32\MsStkPrp.dll
2009-01-25 13:45:14 ----A---- C:\WINDOWS\system32\CmDlgDE.dll
2009-01-25 13:45:14 ----A---- C:\WINDOWS\system32\CmCtlDE.dll
2009-01-25 13:45:11 ----D---- C:\Programme\RS ZIP 4.0
2009-01-25 13:38:46 ----D---- C:\Dokumente und Einstellungen\alles meins\Anwendungsdaten\AnotherUnzipper
2009-01-22 23:38:54 ----D---- C:\Programme\Gemeinsame Dateien\xing shared
2009-01-22 23:38:39 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2009-01-22 23:38:05 ----A---- C:\WINDOWS\system32\pndx5032.dll
2009-01-22 23:38:05 ----A---- C:\WINDOWS\system32\pndx5016.dll
2009-01-22 23:38:01 ----A---- C:\WINDOWS\system32\pncrt.dll
2009-01-22 23:38:01 ----A---- C:\WINDOWS\system32\msvcr71.dll
2009-01-22 23:38:01 ----A---- C:\WINDOWS\system32\msvcp71.dll
2009-01-22 23:36:27 ----D---- C:\Programme\Real
2009-01-18 14:11:31 ----D---- C:\WINDOWS\Sun
2009-01-18 14:08:44 ----A---- C:\WINDOWS\system32\javaws.exe
2009-01-18 14:08:44 ----A---- C:\WINDOWS\system32\javaw.exe
2009-01-18 14:08:44 ----A---- C:\WINDOWS\system32\java.exe
2009-01-18 14:08:44 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-01-18 14:08:04 ----D---- C:\Programme\Java
2009-01-18 14:06:20 ----D---- C:\Dokumente und Einstellungen\alles meins\Anwendungsdaten\Sun
2009-01-18 14:05:33 ----D---- C:\Programme\SDM20
2009-01-15 12:19:38 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-01-15 12:19:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-01-15 09:40:51 ----D---- C:\51e176f5f36bd070cc9d

======List of files/folders modified in the last 1 months======

2009-02-12 21:30:25 ----D---- C:\WINDOWS\Temp
2009-02-12 21:30:11 ----D---- C:\WINDOWS\Prefetch
2009-02-12 21:23:38 ----D---- C:\WINDOWS
2009-02-12 21:23:37 ----AD---- C:\WINDOWS\system32\drivers
2009-02-12 21:22:53 ----D---- C:\Programme\Mozilla Firefox
2009-02-12 21:12:04 ----SD---- C:\WINDOWS\Tasks
2009-02-12 21:08:32 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-02-12 21:08:10 ----D---- C:\Dokumente und Einstellungen\alles meins\Anwendungsdaten\uTorrent
2009-02-12 17:48:05 ----D---- C:\Programme
2009-02-12 17:39:02 ----D---- C:\WINDOWS\system32
2009-02-12 17:26:33 ----HD---- C:\WINDOWS\inf
2009-02-12 17:26:26 ----HD---- C:\WINDOWS\$hf_mig$
2009-02-12 17:26:22 ----A---- C:\WINDOWS\imsins.BAK
2009-02-12 17:26:05 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-02-12 17:26:02 ----D---- C:\Programme\Internet Explorer
2009-02-12 17:25:31 ----D---- C:\WINDOWS\system32\CatRoot2
2009-02-12 14:48:46 ----HD---- C:\Programme\InstallShield Installation Information
2009-02-11 11:58:44 ----SHD---- C:\WINDOWS\Installer
2009-02-11 11:58:40 ----SD---- C:\Dokumente und Einstellungen\alles meins\Anwendungsdaten\Microsoft
2009-02-06 22:10:47 ----RSD---- C:\WINDOWS\Fonts
2009-02-06 22:10:36 ----D---- C:\Programme\Gemeinsame Dateien
2009-01-23 22:33:31 ----D---- C:\Dokumente und Einstellungen\alles meins\Anwendungsdaten\Real
2009-01-22 23:38:46 ----D---- C:\Programme\Gemeinsame Dateien\Real
2009-01-19 11:05:04 ----D---- C:\Programme\Weight Commander
2009-01-16 21:01:34 ----A---- C:\WINDOWS\system32\mshtml.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 mfehidk;McAfee Inc. mfehidk; C:\WINDOWS\system32\drivers\mfehidk.sys [2007-11-22 201320]
R1 MPFP;MPFP; C:\WINDOWS\System32\Drivers\Mpfp.sys [2007-07-13 113952]
R1 WmiAcpi;Microsoft Windows-Verwaltungsschnittstelle für ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2008-05-20 1312576]
R3 CmBatt;Treiber für Microsoft-ACPI-Kontrollmethodenkompatible Batterie; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2004-12-08 16896]
R3 HDAudBus;Microsoft UAA-Bustreiber für High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-02-15 5854752]
R3 int15.sys;int15.sys; \??\C:\Acer\Empowering Technology\eRecovery\int15.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-05-20 4800000]
R3 M3000Srv;Acer Crystal Eye webcam Driver; C:\WINDOWS\System32\Drivers\M3000KNT.sys [2008-05-05 254976]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\WINDOWS\system32\drivers\mfeavfk.sys [2007-11-22 79304]
R3 mfebopk;McAfee Inc. mfebopk; C:\WINDOWS\system32\drivers\mfebopk.sys [2007-11-22 35240]
R3 mfesmfk;McAfee Inc. mfesmfk; C:\WINDOWS\system32\drivers\mfesmfk.sys [2007-12-02 40488]
R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-18 12288]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-07-01 108800]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2008-04-25 225024]
R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2-aktivierter Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]
S3 gmer;gmer; C:\WINDOWS\System32\DRIVERS\gmer.sys [2009-02-12 85969]
S3 mferkdk;McAfee Inc. mferkdk; C:\WINDOWS\system32\drivers\mferkdk.sys [2007-11-22 33832]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA-IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 tbhsd;Tunebite High-Speed Dubbing; C:\WINDOWS\system32\drivers\tbhsd.sys [2008-11-04 43552]
S3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
R2 Bonjour Service;Bonjour-Dienst; C:\Programme\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 IviRegMgr;IviRegMgr; C:\Programme\Gemeinsame Dateien\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-01-18 152984]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Programme\McAfee\SiteAdvisor\McSACore.exe [2009-01-23 203280]
R2 mcmscsvc;McAfee Services; C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe [2008-01-09 767976]
R2 McNASvc;McAfee Network Agent; c:\PROGRA~1\GEMEIN~1\mcafee\mna\mcnasvc.exe [2008-01-25 2458128]
R2 McProxy;McAfee Proxy Service; c:\PROGRA~1\GEMEIN~1\mcafee\mcproxy\mcproxy.exe [2007-08-15 359248]
R2 McShield;McAfee Real-time Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [2007-07-24 144704]
R2 MpfService;McAfee Personal Firewall Service; C:\Programme\McAfee\MPF\MPFSrv.exe [2007-07-18 856864]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Programme\McAfee\MSK\MskSrver.exe [2007-11-26 23880]
R3 iPod Service;iPod-Dienst; C:\Programme\iPod\bin\iPodService.exe [2008-11-20 536872]
R3 McSysmon;McAfee SystemGuards; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [2007-12-05 695624]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 gupdate1c986b5d67d2ca0;Google Update Service (gupdate1c986b5d67d2ca0); C:\Programme\Google\Update\GoogleUpdate.exe [2009-02-04 133104]
S2 gusvc;Google Software Updater; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-04 182768]
S3 aspnet_state;ASP.NET-Statusdienst; C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [2004-07-15 32768]
S3 McODS;McAfee Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe [2007-11-07 378184]
S3 odserv;Microsoft Office Diagnostics Service; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 Norman NJeeves;Norman NJeeves; C:\VIRUSfighter\bin\NJEEVES.EXE [2005-01-12 143360]
S4 Norman ZANDA;Norman ZANDA; C:\VIRUSfighter\Bin\Zanda.exe [2005-05-31 176128]

-----------------EOF-----------------