Vundo.Gen

ohhdien

extra.txt:

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Professional (build 2600) SP 2.0
Architecture: X86; Language: German

CPU 0: Mobile AMD Athlon(tm) 64 Processor 3200+
Percentage of Memory in Use: 50%
Physical Memory (total/avail): 511.3 MiB / 254.66 MiB
Pagefile Memory (total/avail): 1248.32 MiB / 954.93 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1942.73 MiB

C: is Fixed (NTFS) - 9.77 GiB total, 5.37 GiB free.
D: is Fixed (NTFS) - 9.31 GiB total, 9.1 GiB free.
F: is Fixed (NTFS) - 55.89 GiB total, 20.34 GiB free.
G: is CDROM (No Media)

\\.\PHYSICALDRIVE0 - Maxtor 52049U4 - 19.08 GiB - 2 partitions
\PARTITION0 (bootable) - Installierbares Dateisystem - 9.77 GiB - C:
\PARTITION1 - Erweitert mit Int 13 (erweitert) - 9.31 GiB - D:

\\.\PHYSICALDRIVE1 - ST360020A - 55.9 GiB - 1 partition
\PARTITION0 - Installierbares Dateisystem - 55.89 GiB - F:



-- Security Center -------------------------------------------------------------

AUOptions is disabled.
Windows Internal Firewall is disabled.

AntiVirusDisableNotify is set.
FirewallDisableNotify is set.
UpdatesDisableNotify is set.

AV: Avira AntiVir PersonalEdition v8.0.1.15 (Avira GmbH)

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\HLSW\\hlsw.exe"="D:\\HLSW\\hlsw.exe:*:Enabled:HLSW Application"
"D:\\QIP\\qip.exe"="D:\\QIP\\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\\Programme\\ICQLite\\ICQLite.exe"="C:\\Programme\\ICQLite\\ICQLite.exe:*:Enabled:ICQ Lite"


-- Environment Variables -------------------------------------------------------


Die Eingabeaufforderung ist vom Administrator deaktiviert worden.

Dr�cken Sie eine beliebige Taste . . .


-- User Profiles ---------------------------------------------------------------

odin (admin)


-- Add/Remove Programs ---------------------------------------------------------


Die Eingabeaufforderung ist vom Administrator deaktiviert worden.

Dr�cken Sie eine beliebige Taste . . .


-- Application Event Log -------------------------------------------------------

Event Record #/Type636 / Warning
Event Submitted/Written: 05/26/2008 03:12:53 PM
Event ID/Source: 4113 / Avira AntiVir
Event Description:
TR/Crypt.XPACK.GenC:\System Volume Information\_restore{B7890E31-34F8-4C78-BF3A-D3E3C224B0CD}\RP44\A0011381.sys

Event Record #/Type635 / Warning
Event Submitted/Written: 05/26/2008 03:12:49 PM
Event ID/Source: 4113 / Avira AntiVir
Event Description:
TR/Crypt.XPACK.GenC:\System Volume Information\_restore{B7890E31-34F8-4C78-BF3A-D3E3C224B0CD}\RP44\A0011377.dll

Event Record #/Type634 / Warning
Event Submitted/Written: 05/26/2008 03:12:47 PM
Event ID/Source: 4113 / Avira AntiVir
Event Description:
TR/Crypt.XPACK.GenC:\WINDOWS\system32\WinCtrl32.dll

Event Record #/Type633 / Warning
Event Submitted/Written: 05/26/2008 03:12:41 PM
Event ID/Source: 4113 / Avira AntiVir
Event Description:
TR/Crypt.XPACK.GenC:\WINDOWS\system32\WinCtrl32.dll

Event Record #/Type632 / Warning
Event Submitted/Written: 05/26/2008 03:12:29 PM
Event ID/Source: 4113 / Avira AntiVir
Event Description:
TR/Crypt.XPACK.GenC:\System Volume Information\_restore{B7890E31-34F8-4C78-BF3A-D3E3C224B0CD}\RP41\A0010378.sys



-- Security Event Log ----------------------------------------------------------

No Errors/Warnings found.


-- System Event Log ------------------------------------------------------------

Event Record #/Type5622 / Error
Event Submitted/Written: 05/26/2008 02:53:01 PM / 05/26/2008 02:53:31 PM
Event ID/Source: 12294 / ati2mtag
Event Description:
CRT invalid display type

Event Record #/Type5619 / Error
Event Submitted/Written: 05/26/2008 02:26:38 PM
Event ID/Source: 59 / SideBySide
Event Description:
Generate Activation Context ist für D:\HLSW\Plugins\messenger_plugin.dll fehlgeschlagen.
Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet.
.

Event Record #/Type5618 / Error
Event Submitted/Written: 05/26/2008 02:26:38 PM
Event ID/Source: 59 / SideBySide
Event Description:
Resolve Partial Assembly ist für Microsoft.VC80.CRT fehlgeschlagen.
Referenzfehlermeldung: Die referenzierte Assemblierung ist nicht auf dem Computer installiert.
.

Event Record #/Type5617 / Error
Event Submitted/Written: 05/26/2008 02:26:38 PM
Event ID/Source: 32 / SideBySide
Event Description:
Abhängige Assemblierung "Microsoft.VC80.CRT" konnte nicht gefunden werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer installiert.

Event Record #/Type5616 / Error
Event Submitted/Written: 05/26/2008 02:26:34 PM
Event ID/Source: 59 / SideBySide
Event Description:
Generate Activation Context ist für D:\HLSW\MFC80U.DLL fehlgeschlagen.
Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet.
.



-- End of Deckard's System Scanner: finished at 2008-05-26 15:17:21 ------------