Trojaner noch da? csrss.exe doppelt vorhanden

DDS (Ver_2011-08-26.01) - NTFSAMD64 
Internet Explorer: 9.0.8112.16421  BrowserJavaVersion: 1.6.0_14
Run by Janis at 12:24:50 on 2012-04-12
Microsoft® Windows Vista™ Home Premium   6.0.6002.2.1252.49.1031.18.4094.2592 [GMT 2:00]
.
AV: Emsisoft Anti-Malware *Enabled/Outdated* {0ADC9F7D-20C1-240F-01E2-43466EBA893A}
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Emsisoft Anti-Malware *Enabled/Outdated* {B1BD7E99-06FB-2B81-3B52-7834153DC387}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\System32\svchost.exe -k HPZ12
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
C:\Program Files (x86)\Java\jre6\bin\jucheck.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\conime.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://schacharena.de/
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
mRun: [emsisoft anti-malware] "c:\program files (x86)\emsisoft anti-malware\a2guard.exe" /d=60
mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\ADOBEG~1.LNK - C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Free YouTube to Mp3 Converter - C:\Users\Janis\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Nach Microsoft E&xel exportieren - C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
DPF: {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_14-windows-i586.cab
TCP: Interfaces\{13C7871A-BF04-4830-8A42-C76FFA19736A} : NameServer = 193.189.244.225 193.189.244.206
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~3\Office12\GR99D3~1.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\PROGRA~2\MICROS~3\Office12\GRA8E1~1.DLL
{18DF081C-E8AD-4283-A596-FA578C2EBDC3}
mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
mRun-x64: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
mRun-x64: [emsisoft anti-malware] "c:\program files (x86)\emsisoft anti-malware\a2guard.exe" /d=60
mRun-x64: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
SEH-X64: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}: Groove GFS Stub Execution Hook
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Janis\AppData\Roaming\Mozilla\Firefox\Profiles\uk81ahyf.default\
FF - prefs.js: browser.startup.homepage - hxxp://schacharena.de/
FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
.
============= SERVICES / DRIVERS ===============
.
R1 A2DDA;A2 Direct Disk Access Support Driver;C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [2012-4-5 23208]
R1 a2injectiondriver;a2injectiondriver;C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [2012-4-5 41728]
R1 a2util;a-squared Malware-IDS utility driver;C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [2012-4-5 14720]
R1 avkmgr;avkmgr;C:\Windows\system32\DRIVERS\avkmgr.sys --> C:\Windows\system32\DRIVERS\avkmgr.sys [?]
R2 a2AntiMalware;Emsisoft Anti-Malware 6.0 - Service;C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [2012-4-5 3025112]
R2 AntiVirSchedulerService;Avira Planer;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2012-1-22 86224]
R2 AntiVirService;Avira Echtzeit Scanner;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2012-1-22 110032]
R2 avgntflt;avgntflt;C:\Windows\system32\DRIVERS\avgntflt.sys --> C:\Windows\system32\DRIVERS\avgntflt.sys [?]
R2 FontCache;Windows-Dienst für Schriftartencache;C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504]
R2 UMVPFSrv;UMVPFSrv;C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2011-4-1 428640]
R3 a2acc;a2acc;C:\Program Files (x86)\Emsisoft Anti-Malware\a2accx64.sys [2012-4-5 63880]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S3 arusb_lhx;Atheros 11n Wireless LAN device driver;C:\Windows\system32\DRIVERS\arusb_lhx.sys --> C:\Windows\system32\DRIVERS\arusb_lhx.sys [?]
S3 AVMCOWAN;AVM ISDN CoNDIS WAN-CAPI-Treiber;C:\Windows\system32\DRIVERS\AVMCOWAN.sys --> C:\Windows\system32\DRIVERS\AVMCOWAN.sys [?]
S3 avmeject;AVM Eject;C:\Windows\system32\drivers\avmeject.sys --> C:\Windows\system32\drivers\avmeject.sys [?]
S3 DualCoreCenter;DualCoreCenter;C:\Program Files (x86)\MSI\DualCoreCenter\NTGLM7X64.sys [2008-11-3 40248]
S3 FUS2BASE;AVM FRITZ!Card USB;C:\Windows\system32\DRIVERS\fus2base.sys --> C:\Windows\system32\DRIVERS\fus2base.sys [?]
S3 FWLANUSB;AVM FRITZ!WLAN;C:\Windows\system32\DRIVERS\fwlanusb.sys --> C:\Windows\system32\DRIVERS\fwlanusb.sys [?]
S3 fwlanusbn;FRITZ!WLAN N;C:\Windows\system32\DRIVERS\fwlanusbn.sys --> C:\Windows\system32\DRIVERS\fwlanusbn.sys [?]
S3 FXUSBASE;AVM FRITZ!X USB;C:\Windows\system32\DRIVERS\fxusbase.sys --> C:\Windows\system32\DRIVERS\fxusbase.sys [?]
S3 hwusbdev;Huawei DataCard USB PNP Device;C:\Windows\system32\DRIVERS\ewusbdev.sys --> C:\Windows\system32\DRIVERS\ewusbdev.sys [?]
S3 LVUVC64;Logitech Webcam 500(UVC);C:\Windows\system32\DRIVERS\lvuvc64.sys --> C:\Windows\system32\DRIVERS\lvuvc64.sys [?]
S3 PCAMp50a64;PCAMp50a64 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCAMp50a64.sys --> C:\Windows\system32\Drivers\PCAMp50a64.sys [?]
S3 PCASp50a64;PCASp50a64 NDIS Protocol Driver;C:\Windows\system32\Drivers\PCASp50a64.sys --> C:\Windows\system32\Drivers\PCASp50a64.sys [?]
S3 PerfHost;Leistungsindikator-DLL-Host;C:\Windows\SysWOW64\perfhost.exe [2008-1-21 19968]
S3 RushTopDevice2;RushTopDevice2;C:\Program Files (x86)\MSI\DualCoreCenter\RushTop64.sys [2008-11-3 75096]
S3 WN111v2;NETGEAR WN111v2 USB2.0 Wireless Card Service;C:\Windows\system32\DRIVERS\WN111v2x.sys --> C:\Windows\system32\DRIVERS\WN111v2x.sys [?]
S3 WNDA3100;NETGEAR WNDA3100 USB2.0 Wireless Card Service;C:\Windows\system32\DRIVERS\WNDA31vx.sys --> C:\Windows\system32\DRIVERS\WNDA31vx.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-3-18 1020768]
S4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-12-3 89920]
S4 CTUPnPSv;Creative Centrale Media Server;C:\Program Files (x86)\Creative\Creative Centrale\CTUPnPSv.exe [2008-5-21 64000]
.
=============== File Associations ===============
.
JSEFile=C:\Windows\SysWOW64\WScript.exe "%1" %*
regfile="regedit.exe" "%1"
.
=============== Created Last 30 ================
.
2012-04-12 07:29:58	78848	----a-w-	C:\Windows\System32\imagehlp.dll
2012-04-12 07:29:58	5632	----a-w-	C:\Windows\System32\wmi.dll
2012-04-12 07:29:58	5120	----a-w-	C:\Windows\SysWow64\wmi.dll
2012-04-12 07:29:58	219136	----a-w-	C:\Windows\System32\wintrust.dll
2012-04-12 07:29:58	16384	----a-w-	C:\Windows\System32\drivers\fs_rec.sys
2012-04-12 07:29:57	172032	----a-w-	C:\Windows\SysWow64\wintrust.dll
2012-04-12 07:29:57	157696	----a-w-	C:\Windows\SysWow64\imagehlp.dll
2012-04-11 13:24:09	327680	----a-w-	C:\Windows\System32\d3d10_1core.dll
2012-04-11 13:24:09	219648	----a-w-	C:\Windows\SysWow64\d3d10_1core.dll
2012-04-11 13:24:09	1555968	----a-w-	C:\Windows\System32\DWrite.dll
2012-04-11 13:24:09	1068544	----a-w-	C:\Windows\SysWow64\DWrite.dll
2012-04-11 13:24:08	683008	----a-w-	C:\Windows\SysWow64\d2d1.dll
2012-04-11 13:24:08	2002944	----a-w-	C:\Windows\System32\d3d10warp.dll
2012-04-11 13:24:08	1172480	----a-w-	C:\Windows\SysWow64\d3d10warp.dll
2012-04-11 13:24:07	834048	----a-w-	C:\Windows\System32\d2d1.dll
2012-04-11 13:24:07	196096	----a-w-	C:\Windows\System32\d3d10_1.dll
2012-04-11 13:24:07	160768	----a-w-	C:\Windows\SysWow64\d3d10_1.dll
2012-04-11 13:24:03	2409784	----a-w-	C:\Program Files\Windows Mail\OESpamFilter.dat
2012-04-11 13:24:03	2409784	----a-w-	C:\Program Files (x86)\Windows Mail\OESpamFilter.dat
2012-04-11 13:17:58	876032	----a-w-	C:\Windows\SysWow64\XpsPrint.dll
2012-04-11 13:17:58	1653760	----a-w-	C:\Windows\System32\XpsPrint.dll
2012-04-11 13:17:35	8669240	----a-w-	C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6B17A62D-CA6F-46FA-9A63-E24C121457C3}\mpengine.dll
2012-04-09 19:27:32	--------	d-----w-	C:\Program Files\Windows Portable Devices
2012-04-09 19:27:32	--------	d-----w-	C:\Program Files (x86)\Windows Portable Devices
2012-04-09 07:20:59	37888	----a-w-	C:\Windows\System32\BthMtpContextHandler.dll
2012-04-08 08:53:34	288768	----a-w-	C:\Windows\SysWow64\XpsGdiConverter.dll
2012-04-08 08:53:33	479744	----a-w-	C:\Windows\System32\XpsGdiConverter.dll
2012-04-08 08:53:32	1149440	----a-w-	C:\Windows\System32\FntCache.dll
2012-04-08 08:53:00	231936	----a-w-	C:\Windows\System32\XpsRasterService.dll
2012-04-08 08:43:57	1426304	----a-w-	C:\Windows\System32\drivers\tcpip.sys
2012-04-08 08:43:43	2765824	----a-w-	C:\Windows\System32\win32k.sys
2012-04-08 08:40:46	621056	----a-w-	C:\Windows\System32\msvcrt.dll
2012-04-08 08:40:45	680448	----a-w-	C:\Windows\SysWow64\msvcrt.dll
2012-04-08 08:40:42	85504	----a-w-	C:\Windows\System32\csrsrv.dll
2012-04-08 08:40:39	316928	----a-w-	C:\Windows\System32\msshsq.dll
2012-04-08 08:40:38	231424	----a-w-	C:\Windows\SysWow64\msshsq.dll
2012-04-08 08:35:36	1570816	----a-w-	C:\Windows\System32\quartz.dll
2012-04-08 08:35:36	1314816	----a-w-	C:\Windows\SysWow64\quartz.dll
2012-04-08 08:35:35	497152	----a-w-	C:\Windows\SysWow64\qdvd.dll
2012-04-08 08:35:35	352256	----a-w-	C:\Windows\System32\qdvd.dll
2012-04-08 08:35:22	2048	----a-w-	C:\Windows\SysWow64\tzres.dll
2012-04-08 08:35:22	2048	----a-w-	C:\Windows\System32\tzres.dll
2012-04-08 08:30:05	1585152	----a-w-	C:\Windows\System32\ntdll.dll
2012-04-08 08:30:04	1167984	----a-w-	C:\Windows\SysWow64\ntdll.dll
2012-04-08 08:25:24	555520	----a-w-	C:\Windows\SysWow64\UIAutomationCore.dll
2012-04-08 08:25:23	735744	----a-w-	C:\Windows\System32\UIAutomationCore.dll
2012-04-08 08:25:23	4096	----a-w-	C:\Windows\SysWow64\oleaccrc.dll
2012-04-08 08:25:23	4096	----a-w-	C:\Windows\System32\oleaccrc.dll
2012-04-08 08:25:23	332288	----a-w-	C:\Windows\System32\oleacc.dll
2012-04-08 08:25:23	238080	----a-w-	C:\Windows\SysWow64\oleacc.dll
2012-04-08 08:25:22	563712	----a-w-	C:\Windows\SysWow64\oleaut32.dll
2012-04-08 08:25:21	847360	----a-w-	C:\Windows\System32\oleaut32.dll
2012-04-07 16:30:46	92672	----a-w-	C:\Windows\SysWow64\UIAnimation.dll
2012-04-07 16:30:46	1164800	----a-w-	C:\Windows\System32\UIRibbonRes.dll
2012-04-07 16:30:46	103424	----a-w-	C:\Windows\System32\UIAnimation.dll
2012-04-07 16:30:45	3815424	----a-w-	C:\Windows\System32\UIRibbon.dll
2012-04-07 16:30:45	3023360	----a-w-	C:\Windows\SysWow64\UIRibbon.dll
2012-04-07 16:30:45	1164800	----a-w-	C:\Windows\SysWow64\UIRibbonRes.dll
2012-04-06 20:37:57	559616	----a-w-	C:\Windows\System32\EncDec.dll
2012-04-06 20:37:56	429056	----a-w-	C:\Windows\SysWow64\EncDec.dll
2012-04-06 20:37:54	695296	----a-w-	C:\Windows\System32\drivers\bthport.sys
2012-04-06 20:37:54	35328	----a-w-	C:\Windows\System32\drivers\BTHUSB.SYS
2012-04-06 20:36:03	451072	----a-w-	C:\Windows\System32\winsrv.dll
2012-04-06 20:33:29	404992	----a-w-	C:\Windows\System32\drivers\afd.sys
2012-04-06 20:33:27	893440	----a-w-	C:\Program Files\Common Files\System\wab32.dll
2012-04-06 20:33:27	707584	----a-w-	C:\Program Files (x86)\Common Files\System\wab32.dll
2012-04-06 20:33:27	50688	----a-w-	C:\Program Files\Windows Mail\wabimp.dll
2012-04-06 20:31:33	76800	----a-w-	C:\Windows\System32\packager.dll
2012-04-06 20:31:33	66560	----a-w-	C:\Windows\SysWow64\packager.dll
2012-04-06 20:17:52	375808	----a-w-	C:\Windows\System32\psisdecd.dll
2012-04-06 20:17:52	293376	----a-w-	C:\Windows\SysWow64\psisdecd.dll
2012-04-06 20:17:51	73216	----a-w-	C:\Windows\System32\MSDvbNP.ax
2012-04-06 20:17:51	69632	----a-w-	C:\Windows\SysWow64\Mpeg2Data.ax
2012-04-06 20:17:51	57856	----a-w-	C:\Windows\SysWow64\MSDvbNP.ax
2012-04-06 20:17:51	289792	----a-w-	C:\Windows\System32\psisrndr.ax
2012-04-06 20:17:51	217088	----a-w-	C:\Windows\SysWow64\psisrndr.ax
2012-04-06 20:17:51	100352	----a-w-	C:\Windows\System32\Mpeg2Data.ax
2012-04-06 19:55:22	708096	----a-w-	C:\Windows\System32\rdpencom.dll
2012-04-06 19:55:22	613376	----a-w-	C:\Windows\SysWow64\rdpencom.dll
2012-04-06 19:55:22	209920	----a-w-	C:\Windows\System32\drivers\rdpwd.sys
2012-04-05 17:20:21	--------	d-----w-	C:\Program Files (x86)\Emsisoft Anti-Malware
2012-04-05 10:53:02	--------	d-----w-	C:\Windows\SysWow64\vi-VN
2012-04-05 10:53:02	--------	d-----w-	C:\Windows\SysWow64\eu-ES
2012-04-05 10:53:02	--------	d-----w-	C:\Windows\SysWow64\ca-ES
2012-04-05 10:53:02	--------	d-----w-	C:\Windows\System32\eu-ES
2012-04-05 10:53:02	--------	d-----w-	C:\Windows\System32\ca-ES
2012-04-05 10:53:00	--------	d-----w-	C:\Windows\System32\vi-VN
2012-04-03 08:36:32	--------	d-----w-	C:\Windows\System32\EventProviders
.
==================== Find3M  ====================
.
2012-04-10 04:05:06	161792	----a-w-	C:\Windows\SysWow64\msls31.dll
2012-04-10 04:05:04	86528	----a-w-	C:\Windows\SysWow64\iesysprep.dll
2012-04-10 04:05:04	76800	----a-w-	C:\Windows\SysWow64\SetIEInstalledDate.exe
2012-04-10 04:05:04	74752	----a-w-	C:\Windows\SysWow64\RegisterIEPKEYs.exe
2012-04-10 04:05:04	48640	----a-w-	C:\Windows\SysWow64\mshtmler.dll
2012-04-10 04:05:03	63488	----a-w-	C:\Windows\SysWow64\tdc.ocx
2012-04-10 04:05:03	367104	----a-w-	C:\Windows\SysWow64\html.iec
2012-04-10 04:05:02	74752	----a-w-	C:\Windows\SysWow64\iesetup.dll
2012-04-10 04:05:01	23552	----a-w-	C:\Windows\SysWow64\licmgr10.dll
2012-04-10 04:05:01	152064	----a-w-	C:\Windows\SysWow64\wextract.exe
2012-04-10 04:05:01	150528	----a-w-	C:\Windows\SysWow64\iexpress.exe
2012-04-10 04:05:00	420864	----a-w-	C:\Windows\SysWow64\vbscript.dll
2012-03-06 06:44:22	4699520	----a-w-	C:\Windows\System32\ntoskrnl.exe
2012-02-28 06:56:48	2311168	----a-w-	C:\Windows\System32\jscript9.dll
2012-02-28 06:49:56	1390080	----a-w-	C:\Windows\System32\wininet.dll
2012-02-28 06:48:57	1493504	----a-w-	C:\Windows\System32\inetcpl.cpl
2012-02-28 06:42:55	2382848	----a-w-	C:\Windows\System32\mshtml.tlb
2012-02-28 01:18:55	1799168	----a-w-	C:\Windows\SysWow64\jscript9.dll
2012-02-28 01:11:21	1427456	----a-w-	C:\Windows\SysWow64\inetcpl.cpl
2012-02-28 01:11:07	1127424	----a-w-	C:\Windows\SysWow64\wininet.dll
2012-02-28 01:03:16	2382848	----a-w-	C:\Windows\SysWow64\mshtml.tlb
2012-02-23 08:18:36	279656	------w-	C:\Windows\System32\MpSigStub.exe
2009-02-20 20:18:32	73356901	----a-w-	C:\Program Files (x86)\Adobe Photoshop CS4 Portable multi.exe
.
============= FINISH: 12:25:51,71 ===============
         

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:44:32, on 12.04.2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Java\jre6\bin\jusched.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
C:\Program Files (x86)\Java\jre6\bin\jucheck.exe
C:\Windows\SysWOW64\conime.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://schacharena.de/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [emsisoft anti-malware] "c:\program files (x86)\emsisoft anti-malware\a2guard.exe" /d=60
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'NETZWERKDIENST')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Janis\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL
O10 - Broken Internet access because of LSP provider 'c:\program files (x86)\bonjour\mdnsnsp.dll' missing
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{13C7871A-BF04-4830-8A42-C76FFA19736A}: NameServer = 193.189.244.225 193.189.244.206
O17 - HKLM\System\CS1\Services\Tcpip\..\{13C7871A-BF04-4830-8A42-C76FFA19736A}: NameServer = 193.189.244.225 193.189.244.206
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Emsisoft Anti-Malware 6.0 - Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Planer (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Echtzeit Scanner (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6164 bytes