![]() |
|
Log-Analyse und Auswertung: Ist mein System verseucht?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #6 |
![]() | ![]() Ist mein System verseucht? Hier die Log.txt Logfile of random's system information tool 1.06 (written by random/random) Run by Robert at 2010-03-17 20:13:00 Microsoft Windows XP Professional Service Pack 2 System drive C: has 19 GB (31%) free of 60 GB Total RAM: 2047 MB (49% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:13:09, on 17.03.2010 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.20935) Boot mode: Normal Running processes: C:\WINXP\System32\smss.exe C:\WINXP\system32\winlogon.exe C:\WINXP\system32\services.exe C:\WINXP\system32\lsass.exe C:\WINXP\system32\Ati2evxx.exe C:\WINXP\system32\svchost.exe C:\WINXP\System32\svchost.exe C:\WINXP\system32\Ati2evxx.exe C:\WINXP\system32\spoolsv.exe C:\Programme\Avira\AntiVir Desktop\sched.exe C:\WINXP\Explorer.EXE C:\Programme\Logitech\iTouch\iTouch.exe C:\PROGRA~1\MICROS~2\GAMECO~1\STRATE~1\daemon14.exe C:\Programme\DAEMON Tools\daemon.exe C:\WINXP\system32\ctfmon.exe C:\PROGRA~1\Accord\Accord.exe C:\Programme\Palm\Hotsync.exe C:\Programme\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe C:\Programme\UltraMon\UltraMon.exe C:\Programme\Stardock\ObjectDock\ObjectDock.exe C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe C:\Programme\UltraMon\UltraMonTaskbar.exe C:\Programme\Avira\AntiVir Desktop\avguard.exe C:\Programme\Java\jre6\bin\jqs.exe C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe C:\Programme\OO Software\Defrag\oodag.exe C:\WINXP\system32\svchost.exe C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe C:\Programme\Avira\AntiVir Desktop\avmailc.exe C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE C:\Programme\Malwarebytes' Anti-Malware\mbam.exe C:\Programme\Java\jre6\bin\javaw.exe C:\progra~1\micros~1\office11\outlook.exe C:\Programme\Microsoft Office\OFFICE11\WINWORD.EXE C:\Programme\NEW Soft\Comic Sammler Pro\CSPro.exe C:\WINXP\system32\notepad.exe C:\Programme\Mozilla Firefox\firefox.exe C:\Programme\Avanquest\PowerDesk\PDExplo.exe D:\Downloads\RSIT.exe C:\Programme\trend micro\Robert.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.daemonsearch.com/intl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programme\Logitech\iTouch\iTouch.exe O4 - HKLM\..\Run: [Daemon14] C:\PROGRA~1\MICROS~2\GAMECO~1\STRATE~1\daemon14.exe O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKCU\..\Run: [DAEMON Tools] "C:\Programme\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKCU\..\Run: [ctfmon.exe] C:\WINXP\system32\ctfmon.exe O4 - HKCU\..\Run: [Accord] C:\PROGRA~1\Accord\Accord.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'Default user') O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user') O4 - Startup: AutorunsDisabled O4 - Startup: Stardock ObjectDock.lnk = C:\Programme\Stardock\ObjectDock\ObjectDock.exe O4 - Global Startup: HOTSYNCSHORTCUTNAME.lnk = C:\Programme\Palm\Hotsync.exe O4 - Global Startup: Pinnacle PCTV Scheduler.lnk = C:\Programme\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe O4 - Global Startup: UltraMon.lnk = ? O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINXP\system32\GPhotos.scr/200 O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - res://C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: In Adobe PDF konvertieren - res://C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - res://C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - res://C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1257698022171 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O20 - AppInit_DLLs: acaptuser32.dll O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe O23 - Service: Avira Firewall (AntiVirFirewallService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avfwsvc.exe O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avmailc.exe O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINXP\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINXP\system32\ati2sgag.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Programme\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: NMIndexingService - Nero AG - C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexingService.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\Programme\OO Software\Defrag\oodag.exe O23 - Service: PLFlash DeviceIoControl Service - Unknown owner - C:\Programme\Nero\Nero BackItUp 4\IoctlSvc.exe (file missing) O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe -- End of file - 8995 bytes ======Scheduled tasks folder====== C:\WINXP\tasks\AppleSoftwareUpdate.job C:\WINXP\tasks\Google Software Updater.job C:\WINXP\tasks\GoogleUpdateTaskMachineCore.job C:\WINXP\tasks\GoogleUpdateTaskMachineUA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}] Adobe PDF Conversion Toolbar Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Programme\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll [2009-07-06 668656] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2009-07-25 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-25 73728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}] SmartSelect Class - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "zBrowser Launcher"=C:\Programme\Logitech\iTouch\iTouch.exe [2004-03-18 892928] "Daemon14"=C:\PROGRA~1\MICROS~2\GAMECO~1\STRATE~1\daemon14.exe [2000-06-02 28746] "avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-07-15 209153] "QuickTime Task"=C:\Programme\QuickTime\qttask.exe [2009-09-05 417792] "StartCCC"=C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-02-25 61440] "Malwarebytes' Anti-Malware"=C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe [2010-01-07 429392] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools"=C:\Programme\DAEMON Tools\daemon.exe [2007-09-18 171464] "ctfmon.exe"=C:\WINXP\system32\ctfmon.exe [2004-08-03 15360] "Accord"=C:\PROGRA~1\Accord\Accord.exe [2001-03-18 163840] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0] C:\Programme\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service] C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe [2007-12-03 140568] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor] C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe [2007-12-03 911184] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher] C:\Programme\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager] C:\Programme\Gemeinsame Dateien\Adobe\CS4ServiceManager\CS4ServiceManager.exe -launchedbylogin [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDRegion] C:\Programme\Cyberlink\Shared Files\brs.exe [2007-11-14 91432] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Programme\Gemeinsame Dateien\Nero\Lib\NMBgMonitor.exe [2007-08-03 202024] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Directory Opus Desktop Dblclk] C:\Programme\GPSoftware\Directory Opus\dopusrt.exe /dblclk [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] C:\Programme\iTunes\iTunesHelper.exe [2009-09-08 305440] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut] C:\Programme\CyberLink\PowerDVD\Language\Language.exe [2007-03-14 54832] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan] C:\Programme\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2007-08-08 1828136] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Nero\Lib\NeroCheck.exe [2007-03-01 153136] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray] C:\Programme\OO Software\Defrag\oodtray.exe [2009-09-11 2524416] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDVD8LanguageShortcut] C:\Programme\CyberLink\PowerDVD8\Language\Language.exe [2007-12-14 50472] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe [2007-03-14 71216] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl8] C:\Programme\CyberLink\PowerDVD8\PDVD8Serv.exe [2008-02-18 77824] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan] C:\WINXP\SOUNDMAN.EXE [2005-08-17 90112] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] c:\programme\steam\steam.exe [2010-03-13 1217872] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe] C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe [2007-12-03 2622104] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Acrobat - Schnellstart.lnk] C:\WINXP\Installer\{AC76BA86-1033-F400-7760-000000000002}\SC_Acrobat.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Google Updater.lnk] C:\PROGRA~1\Google\GOOGLE~1\GOOGLE~1.EXE [2009-07-06 160240] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^InterVideo WinCinema Manager.lnk] C:\PROGRA~1\INTERV~1\Common\Bin\WINCIN~1.EXE [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^Robert^Startmenü^Programme^Autostart^ImpulseNow.lnk] C:\PROGRA~1\Stardock\Impulse\Now\IMPULS~1.EXE [2009-09-08 464176] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^Robert^Startmenü^Programme^Autostart^Palm Registration.lnk] C:\PROGRA~1\Palm\register.exe [2005-08-08 2494464] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^Robert^Startmenü^Programme^Autostart^Stardock ObjectDock.lnk] C:\PROGRA~1\Stardock\OBJECT~1\OBJECT~1.EXE [2007-04-24 3581680] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "RichVideo"=2 "Nero BackItUp Scheduler 3"=2 "gusvc"=2 "FLEXnet Licensing Service"=3 "WMPNetworkSvc"=3 "NeroPolicyAgent"=2 "idsvc"=3 "Bonjour Service"=2 "Apple Mobile Device"=2 "Adobe LM Service"=3 "gupdate"=2 "Nero BackItUp Scheduler 4.0"=2 C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart HOTSYNCSHORTCUTNAME.lnk - C:\Programme\Palm\Hotsync.exe Pinnacle PCTV Scheduler.lnk - C:\Programme\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe UltraMon.lnk - C:\WINXP\Installer\{AF0FA6D7-96F3-468A-ABB7-28BE006EA8E9}\IcoUltraMon.ico C:\Dokumente und Einstellungen\Robert\Startmenü\Programme\Autostart AutorunsDisabled Stardock ObjectDock.lnk - C:\Programme\Stardock\ObjectDock\ObjectDock.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="acaptuser32.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] C:\WINXP\system32\Ati2evxx.dll [2009-02-25 155648] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] 0aMCPClient - {F5DF91F9-15E9-416B-A7C3-7519B11ECBFC} WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINXP\system32\WPDShServiceObj.dll [2007-10-09 133632] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa] "authentication packages"=msv1_0 relog_ap [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=323 "NoDrives"=0 "NoDriveAutoRun"=67108863 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"= "NoDriveAutoRun"= "NoDriveTypeAutoRun"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Programme\DC++\DCPlusPlus.exe"="C:\Programme\DC++\DCPlusPlus.exe:*:Enabled ![]() "C:\Programme\CyberLink\PowerDVD\PowerDVD.exe"="C:\Programme\CyberLink\PowerDVD\PowerDVD.exe:*:Enabled:CyberLink PowerDVD" "C:\Programme\CyberLink\PowerDVD8\PowerDVD8.exe"="C:\Programme\CyberLink\PowerDVD8\PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0" "C:\Programme\Palm\Hotsync.exe"="C:\Programme\Palm\Hotsync.exe:*:Enabled:HotSync® Manager Application" "C:\Programme\Bonjour\mDNSResponder.exe"="C:\Programme\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour" "C:\Programme\iTunes\iTunes.exe"="C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes" "C:\Programme\SmartFTP Client\SmartFTP.exe"="C:\Programme\SmartFTP Client\SmartFTP.exe:*:Enabled:SmartFTP Client 4.0" "C:\Programme\KONAMI\Pro Evolution Soccer 2010\pes2010.exe"="C:\Programme\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010" "C:\Programme\Opera\opera.exe"="C:\Programme\Opera\opera.exe:*:Enabled:Opera Internet Browser" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Programme\CyberLink\PowerDVD8\PowerDVD8.exe"="C:\Programme\CyberLink\PowerDVD8\PowerDVD8.exe:*:Enabled:CyberLink PowerDVD 8.0" ======File associations====== .js - open - .txt - open - ======List of files/folders created in the last 1 months====== 2010-03-15 20:03:46 ----D---- C:\Programme\trend micro 2010-03-15 20:03:44 ----D---- C:\rsit 2010-03-14 20:20:19 ----D---- C:\Programme\CCleaner 2010-03-14 19:55:42 ----D---- C:\Programme\TrendMicro 2010-03-12 18:07:05 ----HDC---- C:\WINXP\$NtUninstallKB952011$ 2010-03-10 22:32:04 ----D---- C:\Programme\DVDVideoSoft 2010-03-07 21:43:12 ----D---- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Extensis 2010-03-07 21:43:12 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Extensis 2010-03-07 12:20:19 ----D---- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Opera 2010-03-07 12:19:54 ----D---- C:\Programme\Opera 2010-03-06 19:28:24 ----D---- C:\Programme\ESET 2010-03-01 22:34:50 ----D---- C:\Videos 2010-02-19 21:21:53 ----D---- C:\Programme\DVD Decrypter 2010-02-19 20:01:15 ----D---- C:\Programme\TV-Browser ======List of files/folders modified in the last 1 months====== 2010-03-17 20:10:57 ----D---- C:\Programme\Mozilla Firefox 2010-03-17 19:30:04 ----A---- C:\WINXP\iTouch.ini 2010-03-17 19:22:27 ----D---- C:\WINXP\Prefetch 2010-03-17 17:27:52 ----D---- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\vlc 2010-03-17 16:42:29 ----D---- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\dvdcss 2010-03-17 14:53:10 ----SD---- C:\WINXP\Tasks 2010-03-17 10:41:10 ----D---- C:\WINXP\Temp 2010-03-17 09:36:42 ----D---- C:\WINXP\system32\CatRoot2 2010-03-17 09:36:37 ----D---- C:\WINXP 2010-03-17 09:34:44 ----D---- C:\WINXP\system32\drivers 2010-03-17 09:34:44 ----D---- C:\WINXP\Driver Cache 2010-03-17 00:05:11 ----A---- C:\WINXP\SchedLgU.Txt 2010-03-16 19:40:49 ----D---- C:\WINXP\Minidump 2010-03-16 19:40:49 ----D---- C:\WINXP\Debug 2010-03-15 21:03:28 ----A---- C:\WINXP\NeroDigital.ini 2010-03-15 20:10:03 ----D---- C:\WINXP\repair 2010-03-15 20:03:46 ----RD---- C:\Programme 2010-03-15 19:53:08 ----D---- C:\WINXP\ehome 2010-03-15 16:13:55 ----D---- C:\Programme\Malwarebytes' Anti-Malware 2010-03-14 19:55:46 ----SHD---- C:\WINXP\Installer 2010-03-14 19:50:17 ----D---- C:\Programme\Internet Explorer 2010-03-13 20:54:12 ----D---- C:\Programme\Steam 2010-03-13 20:16:50 ----A---- C:\WINXP\NEWMedia.ini 2010-03-12 22:13:37 ----A---- C:\WINXP\win.ini 2010-03-12 18:07:40 ----HD---- C:\WINXP\inf 2010-03-12 18:07:24 ----D---- C:\WINXP\system32\dllcache 2010-03-12 18:07:22 ----D---- C:\WINXP\system32 2010-03-10 22:32:45 ----D---- C:\Programme\Gemeinsame Dateien\DVDVideoSoft 2010-03-10 22:32:04 ----RSD---- C:\WINXP\assembly 2010-03-10 22:19:23 ----D---- C:\WINXP\WinSxS 2010-03-08 20:27:10 ----D---- C:\Programme\FontExpert 2010-03-07 15:37:40 ----D---- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\DC++ 2010-03-07 08:05:02 ----D---- C:\Programme\Microsoft Silverlight 2010-03-06 15:50:58 ----D---- C:\WINXP\system32\oodag 2010-03-05 20:13:06 ----D---- C:\Programme\NewsLeecher 2010-03-02 23:07:40 ----D---- C:\Temp 2010-02-20 16:52:57 ----D---- C:\Dokumente und Einstellungen\Robert\Anwendungsdaten\Canon 2010-02-19 22:57:29 ----D---- C:\Programme\DVBViewer 2010-02-19 22:10:50 ----D---- C:\Programme\DivX 2010-02-19 22:10:22 ----D---- C:\Programme\Gemeinsame Dateien\DivX Shared 2010-02-19 19:02:21 ----D---- C:\Programme\Media Convert Master 2010-02-19 19:02:10 ----HD---- C:\Programme\InstallShield Installation Information ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AsIO;AsIO; C:\WINXP\system32\drivers\AsIO.sys [2007-12-17 12400] R1 avfwot;avfwot; C:\WINXP\system32\DRIVERS\avfwot.sys [2009-07-15 97608] R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys [] R1 avipbb;avipbb; C:\WINXP\system32\DRIVERS\avipbb.sys [2009-07-15 96104] R1 kbdhid;Tastatur-HID-Treiber; C:\WINXP\system32\DRIVERS\kbdhid.sys [2004-08-03 14848] R1 PQNTDrv;PQNTDrv; C:\WINXP\system32\drivers\PQNTDrv.sys [2002-09-16 4228] R1 ssmdrv;ssmdrv; C:\WINXP\system32\DRIVERS\ssmdrv.sys [2009-07-15 28520] R1 WS2IFSL;Windows Socket 2.0 Non-IFS-Dienstanbieter-Unterstützungsumgebung; C:\WINXP\System32\drivers\ws2ifsl.sys [2001-08-23 12032] R2 {95808DC4-FA4A-4C74-92FE-5B863F82066B};{95808DC4-FA4A-4C74-92FE-5B863F82066B}; \??\C:\Programme\CyberLink\PowerDVD\000.fcl [] R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}; \??\C:\Programme\CyberLink\PowerDVD8\000.fcl [] R2 avgntflt;avgntflt; C:\WINXP\system32\DRIVERS\avgntflt.sys [2009-12-07 56816] R2 tifsfilter;Acronis True Image FS Filter; C:\WINXP\system32\DRIVERS\tifsfilt.sys [2008-01-24 44384] R2 UltraMonUtility;UltraMon Utility Driver; \??\C:\Programme\Gemeinsame Dateien\Realtime Soft\UltraMonMirrorDrv\x32\UltraMonUtility.sys [] R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINXP\system32\drivers\ALCXWDM.SYS [2005-08-19 3644800] R3 Arp1394;1394-ARP-Clientprotokoll; C:\WINXP\system32\DRIVERS\arp1394.sys [2007-10-09 60800] R3 ati2mtag;ati2mtag; C:\WINXP\system32\DRIVERS\ati2mtag.sys [2009-02-25 3565568] R3 ATIAVAIW;ATI T200 Unified AVStream service; C:\WINXP\system32\DRIVERS\atinavt2.sys [2009-02-04 170496] R3 avfwim;AvFw Packet Filter Miniport; C:\WINXP\system32\DRIVERS\avfwim.sys [2009-07-15 69632] R3 GcKernel;Microsoft SideWinder Value Add - Filtertreiber; C:\WINXP\system32\DRIVERS\GcKernel.sys [2004-08-03 59136] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINXP\System32\Drivers\GEARAspiWDM.sys [2009-05-18 26600] R3 HIDSwvd;Microsoft SideWinder-Minitreiber für virtuelles HID-Gerät; C:\WINXP\system32\DRIVERS\HIDSwvd.sys [2001-08-17 2688] R3 hidusb;Microsoft HID Class-Treiber; C:\WINXP\system32\DRIVERS\hidusb.sys [2001-08-23 9600] R3 itchfltr;iTouch Keyboard Filter; C:\WINXP\system32\DRIVERS\itchfltr.sys [2004-03-10 12953] R3 MBAMProtector;MBAMProtector; \??\C:\WINXP\system32\drivers\mbam.sys [] R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINXP\system32\drivers\mbamswissarmy.sys [] R3 mouhid;Maus-HID-Treiber; C:\WINXP\system32\DRIVERS\mouhid.sys [2007-10-09 12288] R3 ms_mpu401;Microsoft MPU-401 MIDI UART-Treiber; C:\WINXP\system32\drivers\msmpu401.sys [2001-08-17 2944] R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINXP\system32\DRIVERS\ASACPI.sys [2004-08-13 5810] R3 NIC1394;1394-Netzwerktreiber; C:\WINXP\system32\DRIVERS\nic1394.sys [2007-10-09 61824] R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINXP\system32\DRIVERS\NVENETFD.sys [2005-07-26 33664] R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINXP\system32\DRIVERS\nvnetbus.sys [2005-07-26 12928] R3 pcouffin;VSO Software pcouffin; C:\WINXP\System32\Drivers\pcouffin.sys [2009-10-16 47360] R3 pctvvbi;PCTVVBI; C:\WINXP\system32\DRIVERS\pctvvbi.sys [2002-11-11 6400] R3 PtvAudio;PtvAudio; C:\WINXP\system32\DRIVERS\PtvAudio.sys [2003-06-16 9216] R3 PtvVideo;PtvVideo; C:\WINXP\system32\DRIVERS\PtvVideo.sys [2003-06-16 14592] R3 UltraMonMirror;UltraMonMirror; C:\WINXP\system32\DRIVERS\UltraMonMirror.sys [2006-09-24 3584] R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINXP\system32\DRIVERS\usbehci.sys [2004-08-03 26624] R3 usbhub;Microsoft USB-Standardhubtreiber; C:\WINXP\system32\DRIVERS\usbhub.sys [2004-08-03 57600] R3 usbohci;Miniporttreiber für Microsoft USB Open Host-Controller; C:\WINXP\system32\DRIVERS\usbohci.sys [2004-08-03 17024] R3 usbstor;USB-Massenspeichertreiber; C:\WINXP\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496] S3 a016bus;Sony Ericsson Device A016 driver (WDM); C:\WINXP\system32\DRIVERS\a016bus.sys [2008-01-18 83880] S3 a016mdfl;Sony Ericsson Device A016 USB WMC Modeme Filter; C:\WINXP\system32\DRIVERS\a016mdfl.sys [2008-01-18 15016] S3 a016mdm;Sony Ericsson Device A016 USB WMC Modem Driver; C:\WINXP\system32\DRIVERS\a016mdm.sys [2008-01-18 110504] S3 a016mgmt;Sony Ericsson Device A016 USB WMC Device Management Drivers (WDM); C:\WINXP\system32\DRIVERS\a016mgmt.sys [2008-01-18 104488] S3 a016obex;Sony Ericsson Device A016 USB WMC OBEX Interface; C:\WINXP\system32\DRIVERS\a016obex.sys [2008-01-18 100648] S3 ALSysIO;ALSysIO; \??\C:\DOKUME~1\Robert\LOKALE~1\Temp\ALSysIO.sys [] S3 auuiyecj;auuiyecj; C:\WINXP\system32\drivers\auuiyecj.sys [] S3 CCDECODE;Untertiteldecoder; C:\WINXP\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024] S3 DbusAudio;DbusAudio; C:\WINXP\system32\drivers\DbusAudio.sys [2009-08-27 23096] S3 GIVEIO;GIVEIO; \??\D:\xbox360\Variante 2\DosFlash32\giveio.sys [] S3 grmnusb;grmnusb; C:\WINXP\system32\drivers\grmnusb.sys [2003-09-23 7296] S3 hamachi_oem;PlayLinc Adapter; C:\WINXP\system32\DRIVERS\gan_adapter.sys [2006-08-28 10664] S3 MPE;BDA MPE-Filter; C:\WINXP\system32\DRIVERS\MPE.sys [2004-08-03 15360] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINXP\system32\drivers\MSTEE.sys [2004-08-03 5504] S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINXP\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376] S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINXP\system32\DRIVERS\NdisIP.sys [2004-08-03 10880] S3 PalmUSBD;PalmUSBD; C:\WINXP\system32\drivers\PalmUSBD.sys [2008-11-16 16694] S3 S6U12BScanner;MUSTEK 1200 UB Still Image Device Service; C:\WINXP\system32\drivers\usbscan.sys [2004-08-03 15104] S3 SLIP;BDA Slip De-Framer; C:\WINXP\system32\DRIVERS\SLIP.sys [2004-08-03 11136] S3 streamip;BDA-IPSink; C:\WINXP\system32\DRIVERS\StreamIP.sys [2004-08-03 15360] S3 usbscan;USB-Scannertreiber; C:\WINXP\system32\DRIVERS\usbscan.sys [2004-08-03 15104] S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINXP\system32\DRIVERS\wceusbsh.sys [2006-11-06 28672] S3 WSTCODEC;World Standard Teletext-Codec; C:\WINXP\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINXP\system32\DRIVERS\WudfPf.sys [2007-10-09 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINXP\system32\DRIVERS\wudfrd.sys [2007-10-09 82944] S3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINXP\system32\DRIVERS\yk51x86.sys [2005-03-30 230400] S4 IntelIde;IntelIde; C:\WINXP\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe [2007-12-03 427288] R2 AntiVirFirewallService;Avira Firewall; C:\Programme\Avira\AntiVir Desktop\avfwsvc.exe [2009-07-15 388865] R2 AntiVirMailService;Avira AntiVir MailGuard; C:\Programme\Avira\AntiVir Desktop\avmailc.exe [2009-07-15 194817] R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Programme\Avira\AntiVir Desktop\sched.exe [2009-07-15 108289] R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2009-08-19 185089] R2 AntiVirWebService;Avira AntiVir WebGuard; C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE [2009-07-15 434945] R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINXP\system32\Ati2evxx.exe [2009-02-25 602112] R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-07-25 153376] R2 MBAMService;MBAMService; C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe [2010-01-07 236368] R2 O&O Defrag;O&O Defrag; C:\Programme\OO Software\Defrag\oodag.exe [2009-09-11 1488128] R2 TryAndDecideService;Acronis Try And Decide Service; C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe [2007-12-03 498792] S2 ATI Smart;ATI Smart; C:\WINXP\system32\ati2sgag.exe [2009-02-25 593920] S2 gupdate;Google Update Service (gupdate); C:\Programme\Google\Update\GoogleUpdate.exe [2009-09-15 133104] S2 gusvc;Google Software Updater; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-06 190448] S2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\Programme\Nero\Nero BackItUp 4\IoctlSvc.exe [] S3 aspnet_state;ASP.NET-Zustandsdienst; C:\WINXP\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINXP\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINXP\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864] S3 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 iPod Service;iPod-Dienst; C:\Programme\iPod\bin\iPodService.exe [2009-09-08 545568] S3 NMIndexingService;NMIndexingService; C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexingService.exe [2007-08-03 382248] S3 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINXP\system32\svchost.exe [2004-08-03 14336] S4 Adobe LM Service;Adobe LM Service; C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe [2008-01-25 69632] S4 Apple Mobile Device;Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-06-05 144712] S4 Bonjour Service;Bonjour-Dienst; C:\Programme\Bonjour\mDNSResponder.exe [2008-12-12 238888] S4 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-01-02 655624] S4 idsvc;Windows CardSpace; C:\WINXP\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256] S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Programme\Nero\Nero8\Nero BackItUp\NBService.exe [2007-08-08 836904] S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Programme\Gemeinsame Dateien\Nero\Nero BackItUp 4\NBService.exe [] S4 NeroPolicyAgent;Nero BackItUp Scheduler 3 NeroPolicyAgent; C:\WINXP\system32\actxprxyy.exe srv [] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINXP\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880] S4 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Programme\CyberLink\Shared files\RichVideo.exe [2007-05-14 272024] S4 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576] -----------------EOF----------------- |
Themen zu Ist mein System verseucht? |
adobe, antivir, antivir guard, avgnt, avgnt.exe, avira, bho, browseui preloader, dateien, desktop, excel, explorer, firefox, firewall, gservice, gupdate, hijack, hkus\s-1-5-18, hotkey, hängen, internet, internet explorer, micro, microsoft, mozilla, pdf, pdf-datei, plug-in, programme, software, system, windows, windows xp |