|  09.11.2008, 23:07 | #1 | 
  |  |    c:\resycled\boot.com ist keien zülässige win 32 Anwendung 
       Hallo zusammen 
Ich hab schon sämtliche Forums durch gelesen aber ich werde nicht schlau raus jedes mal wenn ich auf meine laufwerke per Arbeitsplatz zugreifen möchte schreibt er mir den Fehler "c:\resycled\boot.com ist keien zülässige win 32 Anwendung" vllt kann mir ja einer helfen.   Zitat:   | Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:59:16, on 09.11.2008
 Platform: Windows XP SP3 (WinNT 5.01.2600)
 MSIE: Internet Explorer v7.00 (7.00.6000.16735)
 Boot mode: Normal
 
 Running processes:
 C:\WINXP\System32\smss.exe
 C:\WINXP\system32\csrss.exe
 C:\WINXP\system32\winlogon.exe
 C:\WINXP\system32\services.exe
 C:\WINXP\system32\lsass.exe
 C:\WINXP\system32\svchost.exe
 C:\Programme\Gemeinsame Dateien\iS3\Anti-Spyware\SZServer.exe
 C:\WINXP\system32\svchost.exe
 C:\Programme\Rising\Rav\CCenter.exe
 C:\WINXP\System32\svchost.exe
 C:\WINXP\system32\svchost.exe
 C:\WINXP\system32\svchost.exe
 C:\PROGRAMME\RISING\RAV\ravmond.exe
 C:\WINXP\system32\spoolsv.exe
 C:\PROGRAMME\RISING\RAV\RavStub.exe
 C:\WINXP\system32\nvsvc32.exe
 C:\WINXP\system32\PnkBstrA.exe
 C:\WINXP\system32\PnkBstrB.exe
 C:\Programme\CyberLink\Shared Files\RichVideo.exe
 C:\WINXP\system32\svchost.exe
 C:\WINXP\System32\alg.exe
 C:\WINXP\system32\wscntfy.exe
 C:\WINXP\Explorer.EXE
 C:\PROGRAMME\RISING\RAV\RavMon.exe
 C:\WINXP\RTHDCPL.EXE
 C:\Programme\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
 C:\Programme\Logitech\GamePanel Software\G-series Software\LGDCore.exe
 C:\Programme\Logitech\GamePanel Software\LCD Manager\Applets\LCDClock.exe
 C:\Programme\Schmads Inc\G15_TeamSpeak\G15_TeamSpeak.exe
 C:\WINXP\system32\Vt001SNP.exe
 C:\WINXP\system32\Vt001HSN.exe
 C:\WINXP\system32\RUNDLL32.EXE
 C:\Programme\Rising\Rav\RavTask.exe
 C:\programme\steam\steam.exe
 C:\Programme\DAEMON Tools Lite\daemon.exe
 C:\WINXP\system32\ctfmon.exe
 C:\Programme\Microsoft ActiveSync\wcescomm.exe
 C:\Programme\Logitech\SetPoint\SetPoint.exe
 C:\PROGRA~1\MI3AA1~1\rapimgr.exe
 C:\Programme\Gemeinsame Dateien\Logitech\KhalShared\KHALMNPR.EXE
 C:\WINXP\system32\wuauclt.exe
 C:\Programme\teamspeak2_RC2\TeamSpeak.exe
 C:\Programme\Microsoft Office\Office12\OUTLOOK.EXE
 C:\Programme\Mozilla Firefox\firefox.exe
 C:\Programme\HLSW\hlsw.exe
 C:\Programme\Spyware Doctor\pctsAuxs.exe
 C:\Programme\Spyware Doctor\pctsSvc.exe
 C:\Programme\Spyware Doctor\pctsTray.exe
 C:\Programme\Trend Micro\HijackThis\HijackThis.exe
 C:\WINXP\system32\wbem\wmiprvse.exe
 
 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
 O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
 O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
 O2 - BHO: SITEguard BHO - {1827766B-9F49-4854-8034-F6EE26FCB1EC} - C:\Programme\STOPzilla!\SZSG.dll
 O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
 O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
 O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Programme\STOPzilla!\SZIEBHO.dll
 O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\Programme\FlashFXP\IEFlash.dll
 O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Programme\DAEMON Tools Toolbar\DTToolbar.dll
 O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
 O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
 O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Programme\STOPzilla!\SZSG.dll
 O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINXP\system32\NvCpl.dll,NvStartup
 O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
 O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
 O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
 O4 - HKLM\..\Run: [Launch LCDMon] "C:\Programme\Logitech\GamePanel Software\LCD Manager\LCDMon.exe"
 O4 - HKLM\..\Run: [Launch LGDCore] "C:\Programme\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
 O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
 O4 - HKLM\..\Run: [Vt001SNP] C:\WINXP\system32\Vt001SNP.exe
 O4 - HKLM\..\Run: [Vt001HSN] C:\WINXP\system32\Vt001HSN.exe
 O4 - HKLM\..\Run: [CloneCDTray] "C:\Programme\SlySoft\CloneCD\CloneCDTray.exe" /s
 O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe
 O4 - HKLM\..\Run: [C:\WINXP\system32\kdnrk.exe] C:\WINXP\system32\kdnrk.exe
 O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINXP\system32\NvMcTray.dll,NvTaskbarInit
 O4 - HKLM\..\Run: [RavTask] "C:\Programme\Rising\Rav\RavTask.exe" -system
 O4 - HKLM\..\Run: [ISTray] "C:\Programme\Spyware Doctor\pctsTray.exe"
 O4 - HKCU\..\Run: [Steam] "c:\programme\steam\steam.exe" -silent
 O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Programme\DAEMON Tools Lite\daemon.exe" -autorun
 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINXP\system32\ctfmon.exe
 O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\wcescomm.exe"
 O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'LOKALER DIENST')
 O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOKALER DIENST')
 O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'NETZWERKDIENST')
 O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETZWERKDIENST')
 O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'SYSTEM')
 O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
 O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'Default user')
 O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
 O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe
 O8 - Extra context menu item: An vorhandenes PDF anfügen - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
 O8 - Extra context menu item: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
 O8 - Extra context menu item: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
 O8 - Extra context menu item: Auswahl in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
 O8 - Extra context menu item: Auswahl in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
 O8 - Extra context menu item: In Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
 O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
 O8 - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
 O8 - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
 O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
 O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
 O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
 O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
 O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
 O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe
 O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe
 O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe
 O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe
 O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
 O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
 O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
 O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
 O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
 O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
 O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
 O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
 O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
 O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
 O23 - Service: NBService - Nero AG - C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
 O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINXP\system32\nvsvc32.exe
 O23 - Service: PnkBstrA - Unknown owner - C:\WINXP\system32\PnkBstrA.exe
 O23 - Service: PnkBstrB - Unknown owner - C:\WINXP\system32\PnkBstrB.exe
 O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programme\CyberLink\Shared Files\RichVideo.exe
 O23 - Service: Rising Process Communication Center (RsCCenter) - Beijing Rising Technology Co., Ltd. - C:\Programme\Rising\Rav\CCenter.exe
 O23 - Service: Rising RealTime Monitor (RsRavMon) - Beijing Rising Technology Co., Ltd. - C:\PROGRAMME\RISING\RAV\Ravmond.exe
 O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Programme\Spyware Doctor\pctsAuxs.exe
 O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Programme\Spyware Doctor\pctsSvc.exe
 O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Programme\Gemeinsame Dateien\iS3\Anti-Spyware\SZServer.exe
 O23 - Service: TuneUp Drive Defrag-Dienst (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINXP\System32\TuneUpDefragService.exe
 
 --
 End of file - 12021 bytes
 | 
 |