| |
| |||||||
Log-Analyse und Auswertung: Verdacht auf VirenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
06.04.2010, 03:17
| #1 |
 |  Verdacht auf Viren Systembeschreibung: Windows Vista Core 2 Duo P7450 2x 2.26GHz 4096MB (2x 2048MB) 1 TB (2x 500GB) NVIDIA GeForce 9600M GT 1 TB Windows Vista Home Premium Problembeschreibung: Ich habe letzterzeit paar Probleme mit meinem Laptop Acer Aspire 7730G... 1. Schließen sich bei mir Programme ohne irgendwelche Meldung oder der gleichen und starten auch nicht mehr neu.... 2. Windows explorer stürzt ständig ab und meldet sich mit dem Problem das Explorer nicht mehr reagiert und neustartet..... 3. Aktualiesiert sich ständig ohne Grund mein Desktop es wird ganz kurz schwarz und dann wieder normal.... 4. Wenn ich ein Programm aufmache und dann die Windows Taste drücke wird das Programm minimiert aber überall ist es schwarz man kann nur teilweise was sehen.... Sobald ich aber ein Order aufmache und es verschiebe werden die stellen wo das Ordner hingeschoben wird wieder normal war früher auch nicht so... 5. Es dauert länger bis die Programme starten... 6. Windows Explorer ist stark ausgelastet! 7. Es trat bis jetzt 1 dieses Fehler auf: Buffer overrun detected....ich weiß nicht warum... 8. Wenn ich Programme mit der Windows Taste minimiere stürzen diese ab.....Ist auch neu... 9. Trat Heute dieses Fehler auf: Auf einmal wurden alle Ordner auf dem Desktop markiert und ließen sich auch nicht mehr "entmakieren".... Hoffe jemand kann mir sagen was ich tun kann und mir helfen.... mfg Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 04:15:44, on 06.04.2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v7.00 (7.00.6002.18005) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe C:\Windows\SYSTEM32\taskeng.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Users\***\AppData\Local\Temp\RtkBtMnt.exe C:\Program Files\Launch Manager\QtZgAcer.EXE C:\Windows\PLFSetI.exe C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\RocketDock\RocketDock.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Windows\SYSTEM32\taskeng.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1208&m=aspire_7730g R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1208&m=aspire_7730g R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe" O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe" O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 O8 - Extra context menu item: Save YouTube Video as MP3 - res://C:\Program Files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP3.htm O9 - Extra button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - (no file) O9 - Extra 'Tools' menuitem: In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - (no file) O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O13 - Gopher Prefix: O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\Common Files\NMSAccessU.exe O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\Windows\system32\sfrem01.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- End of file - 11131 bytes |
|
06.04.2010, 09:50
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Verdacht auf Viren Hallo und
__________________ Bitte diese Liste beachten und abarbeiten. Beim Scan mit MalwareBytes auch alle externen Speicher (ext. Platten, USB-Sticks, ... mit anklemmen!! ) Falls Du Probleme mit Malwarebytes hast (startet nicht, Updates laden nicht etc.), das hier beachten > http://www.trojaner-board.de/82699-m...tet-nicht.html Wichtig für Benutzer mit Windows Vista und Windows 7: Bitte alle Tools per Rechtsklick => Als Admin ausführen! Falls RSIT nicht startet: im Kompatibilitätsmodus ausführen (Rechtsklick auf RSIT.exe, Reiter Kompatibilität) => Windows XP einstellen und ausführen Die Logfiles kannst Du zB alle in eine Datei zippen und auf File-Upload.net hochladen und hier verlinken, denn 1. sind manche Logfiles fürs Board nämlich zu groß und 2. kann ich mit einem Klick mir gleich alle auf einmal runterladen.
__________________ |
|
06.04.2010, 18:43
| #3 |
| | Verdacht auf Viren 1.CCleaner ausgeführt!
__________________2.Malwarebytes: Code:
ATTFilter Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org
Datenbank Version: 3954
Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005
06.04.2010 20:36:56
mbam-log-2010-04-06 (20-36-56).txt
Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 106497
Laufzeit: 5 Minute(n), 12 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
3.RSIT: Code:
ATTFilter Logfile of random's system information tool 1.06 (written by random/random) Run by *** at 2010-04-06 19:39:13 Microsoft® Windows Vista™ Home Premium Service Pack 2 System drive C: has 41 GB (17%) free of 233 GB Total RAM: 3066 MB (60% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:39:15, on 06.04.2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v7.00 (7.00.6002.18005) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\SYSTEM32\taskeng.exe C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Launch Manager\QtZgAcer.EXE C:\Windows\PLFSetI.exe C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\RocketDock\RocketDock.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Users\***\AppData\Local\Temp\RtkBtMnt.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Windows\SYSTEM32\taskeng.exe C:\Windows\Explorer.EXE C:\Users\***\Downloads\RSIT.exe C:\Program Files\Trend Micro\HijackThis\***.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1208&m=aspire_7730g R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1208&m=aspire_7730g R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe O4 - HKLM\..\Run: [eAudio] "C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe" O4 - HKLM\..\Run: [BkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe" O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe" O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 O8 - Extra context menu item: Save YouTube Video as MP3 - res://C:\Program Files\Common Files\DVDVideoSoft\Dll\IEContextMenuY.dll/scriptY2MP3.htm O9 - Extra button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - (no file) O9 - Extra 'Tools' menuitem: In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - (no file) O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O13 - Gopher Prefix: O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\Common Files\NMSAccessU.exe O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\Windows\system32\sfrem01.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- End of file - 11127 bytes ======Scheduled tasks folder====== C:\Windows\tasks\GlaryInitialize.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2009-10-29 4150160] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live Anmelde-Hilfsprogramm - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-18 279664] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}] Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-02-18 812528] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2009-11-03 556432] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-09 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E5A1691B-D188-4419-AD02-90002030B8EE}] FlashFXP Helper for Internet Explorer - C:\PROGRA~1\FlashFXP\IEFlash.dll [2006-03-31 191096] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - Acer eDataSecurity Management - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll [2008-03-05 142896] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-18 279664] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184] "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-04-28 6111232] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-01-18 1033512] "ePower_DMC"=C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [2008-04-23 397312] "eDataSecurity Loader"=C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe [2008-03-05 526896] "eAudio"=C:\Program Files\Acer\Empowering Technology\eAudio\eAudio.exe [2008-03-07 544768] "BkupTray"=C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [2008-04-06 34040] "IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2008-07-20 182808] "LManager"=C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE [2008-07-02 821768] "PLFSetI"=C:\Windows\PLFSetI.exe [2007-10-23 200704] "ArcadeDeluxeAgent"=C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [2008-05-12 147456] "CLMLServer"=C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [2008-05-12 167936] "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-06-02 68856] "RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616] "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2009-10-29 4150160] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "BindDirectlyToPropertySetStorage"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Program Files\FlashFXP\FlashFXP.exe"="C:\Program Files\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "C:\Program Files\FlashFXP\FlashFXP.exe"="C:\Program Files\FlashFXP\FlashFXP.exe:*:Enabled:FlashFXP v3" ======List of files/folders created in the last 1 months====== 2010-04-06 19:34:54 ----D---- C:\rsit 2010-04-05 16:21:04 ----D---- C:\ProgramData\Sun 2010-04-05 16:20:51 ----D---- C:\Program Files\Common Files\Java 2010-04-05 16:18:24 ----A---- C:\Windows\system32\javaws.exe 2010-04-05 16:18:24 ----A---- C:\Windows\system32\javaw.exe 2010-04-05 16:18:24 ----A---- C:\Windows\system32\java.exe 2010-04-04 23:15:16 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2010-04-03 14:59:31 ----D---- C:\Program Files\Serials World 2010-04-02 03:35:43 ----D---- C:\Program Files\Common Files\Software Update Utility 2010-04-02 03:35:23 ----D---- C:\Users\***\AppData\Roaming\acccore 2010-04-02 03:35:11 ----D---- C:\searchplugins 2010-04-02 03:35:11 ----D---- C:\ProgramData\AIM 2010-04-02 03:35:07 ----D---- C:\Program Files\AIM 2010-04-02 03:35:05 ----D---- C:\Program Files\Common Files\AOL 2010-04-01 20:13:06 ----D---- C:\Program Files\Empire Interactive 2010-04-01 15:24:20 ----D---- C:\Program Files\Metin2 2010-04-01 13:19:27 ----D---- C:\ProgramData\Ubisoft 2010-04-01 01:43:11 ----D---- C:\Users\***\AppData\Roaming\Intel 2010-04-01 01:43:10 ----D---- C:\ProgramData\Roaming 2010-04-01 01:42:17 ----D---- C:\Program Files\Cisco 2010-04-01 01:42:12 ----D---- C:\ProgramData\Intel 2010-03-31 23:53:23 ----D---- C:\Program Files\MetaGeek 2010-03-31 23:35:17 ----D---- C:\Users\***\AppData\Roaming\NVIDIA 2010-03-31 23:33:11 ----D---- C:\Users\***\AppData\Roaming\GlarySoft 2010-03-31 23:24:12 ----D---- C:\Program Files\Glary Utilities 2010-03-31 22:58:19 ----D---- C:\Users\***\AppData\Roaming\Uniblue 2010-03-31 22:58:15 ----D---- C:\Program Files\Uniblue 2010-03-31 19:29:37 ----A---- C:\Windows\system32\nvhdap32.dll 2010-03-31 19:29:37 ----A---- C:\Windows\system32\nvapo32v.dll 2010-03-31 19:28:53 ----D---- C:\Windows\DEA314C409294250BC9298E4C105F28D.TMP 2010-03-31 19:28:08 ----A---- C:\Windows\system32\OpenCL.dll 2010-03-31 19:28:08 ----A---- C:\Windows\system32\nvwgf2um.dll 2010-03-31 19:28:07 ----A---- C:\Windows\system32\nvoglv32.dll 2010-03-31 19:28:06 ----A---- C:\Windows\system32\nvd3dum.dll 2010-03-31 19:28:06 ----A---- C:\Windows\system32\nvcuvid.dll 2010-03-31 19:28:06 ----A---- C:\Windows\system32\nvcuvenc.dll 2010-03-31 19:28:04 ----A---- C:\Windows\system32\nvcuda.dll 2010-03-31 19:28:03 ----A---- C:\Windows\system32\nvcompiler.dll 2010-03-31 19:28:03 ----A---- C:\Windows\system32\nvcod1910.dll 2010-03-31 19:28:03 ----A---- C:\Windows\system32\nvcod.dll 2010-03-31 19:28:03 ----A---- C:\Windows\system32\nvapi.dll 2010-03-31 19:27:55 ----D---- C:\NVIDIA 2010-03-31 19:14:26 ----D---- C:\Program Files\Driver Cleaner Pro 2010-03-31 14:17:38 ----D---- C:\ProgramData\Codemasters 2010-03-31 14:10:31 ----A---- C:\Windows\system32\mkl_vml_p4.dll 2010-03-31 14:10:31 ----A---- C:\Windows\system32\mkl_vml_p3.dll 2010-03-31 14:10:31 ----A---- C:\Windows\system32\mkl_vml_def.dll 2010-03-31 14:10:31 ----A---- C:\Windows\system32\mkl_p4.dll 2010-03-31 14:10:31 ----A---- C:\Windows\system32\mkl_p3.dll 2010-03-31 14:10:31 ----A---- C:\Windows\system32\mkl_lapack64.dll 2010-03-31 14:10:30 ----A---- C:\Windows\system32\rapture3d_oal.dll 2010-03-31 14:10:30 ----A---- C:\Windows\system32\mkl_lapack32.dll 2010-03-31 14:10:30 ----A---- C:\Windows\system32\mkl_def.dll 2010-03-31 14:10:30 ----A---- C:\Windows\system32\libguide40.dll 2010-03-31 14:10:29 ----D---- C:\Program Files\BRS 2010-03-31 14:10:18 ----RA---- C:\Windows\system32\tmpAE2A.tmp 2010-03-31 14:10:18 ----D---- C:\Program Files\OpenAL 2010-03-31 14:10:18 ----A---- C:\Windows\system32\wrap_oal.dll 2010-03-31 14:10:18 ----A---- C:\Windows\system32\OpenAL32.dll 2010-03-31 14:09:06 ----RA---- C:\Windows\system32\tmpADFB.tmp 2010-03-31 13:28:57 ----A---- C:\Windows\system32\wininet.dll 2010-03-31 13:28:57 ----A---- C:\Windows\system32\mshtml.dll 2010-03-31 13:28:56 ----A---- C:\Windows\system32\urlmon.dll 2010-03-31 13:28:56 ----A---- C:\Windows\system32\ieframe.dll 2010-03-31 13:28:55 ----A---- C:\Windows\system32\mshtmled.dll 2010-03-31 13:28:55 ----A---- C:\Windows\system32\ieui.dll 2010-03-31 13:28:54 ----A---- C:\Windows\system32\iepeers.dll 2010-03-31 13:28:54 ----A---- C:\Windows\system32\ieencode.dll 2010-03-31 13:28:54 ----A---- C:\Windows\system32\ieapfltr.dll 2010-03-29 02:39:05 ----D---- C:\Program Files\AxBx 2010-03-29 00:05:33 ----D---- C:\ProgramData\Ableton 2010-03-29 00:05:31 ----D---- C:\Users\***\AppData\Roaming\Ableton 2010-03-29 00:04:22 ----A---- C:\Windows\system32\REX Shared Library.dll 2010-03-28 18:21:12 ----A---- C:\Windows\system32\PnkBstrB.exe 2010-03-28 18:21:11 ----A---- C:\Windows\system32\PnkBstrA.exe 2010-03-28 13:04:21 ----A---- C:\Windows\game.ini 2010-03-28 12:39:44 ----SHD---- C:\Windows\ftpcache 2010-03-27 00:47:23 ----D---- C:\Program Files\Timeline Interactive 2010-03-26 19:54:17 ----D---- C:\Windows\C5C1C0F0D62F4DBF81D4D7EF397C228B.TMP 2010-03-26 19:33:48 ----D---- C:\Program Files\SystemRequirementsLab 2010-03-26 19:29:19 ----A---- C:\Windows\system32\XAudio2_6.dll 2010-03-26 19:29:19 ----A---- C:\Windows\system32\XAPOFX1_4.dll 2010-03-26 19:29:19 ----A---- C:\Windows\system32\xactengine3_6.dll 2010-03-26 19:29:19 ----A---- C:\Windows\system32\X3DAudio1_7.dll 2010-03-26 19:26:09 ----D---- C:\Program Files\NVIDIA Corporation 2010-03-26 19:11:48 ----D---- C:\Program Files\METRO 2033 2010-03-25 17:26:19 ----A---- C:\Windows\system32\ztvunrar36.dll 2010-03-25 17:26:19 ----A---- C:\Windows\system32\ztvunace26.dll 2010-03-25 17:26:19 ----A---- C:\Windows\system32\ztvcabinet.dll 2010-03-25 17:26:19 ----A---- C:\Windows\system32\UNRAR3.dll 2010-03-25 17:26:19 ----A---- C:\Windows\system32\unacev2.dll 2010-03-25 17:26:14 ----D---- C:\Users\***\AppData\Roaming\Simply Super Software 2010-03-25 17:26:14 ----D---- C:\ProgramData\Simply Super Software 2010-03-25 17:26:14 ----D---- C:\Program Files\Trojan Remover 2010-03-23 21:12:40 ----D---- C:\Users\***\AppData\Roaming\Dr. DivX 2.0 OSS 2010-03-23 14:59:52 ----D---- C:\Program Files\Common Files\Reallusion 2010-03-22 17:51:12 ----D---- C:\ProgramData\McAfee Security Scan 2010-03-22 17:51:11 ----D---- C:\Program Files\McAfee Security Scan 2010-03-21 22:51:31 ----D---- C:\Program Files\Enterbrain 2010-03-21 22:50:52 ----D---- C:\Program Files\Common Files\Enterbrain 2010-03-20 23:47:30 ----D---- C:\Users\***\AppData\Roaming\Softplicity 2010-03-20 23:29:12 ----D---- C:\Users\***\AppData\Roaming\AccurateRip 2010-03-20 23:29:12 ----A---- C:\Windows\system32\SpoonUninstall.exe 2010-03-20 23:29:08 ----D---- C:\Program Files\Illustrate 2010-03-20 01:57:43 ----D---- C:\Users\***\AppData\Roaming\Apple Computer 2010-03-20 01:57:08 ----D---- C:\Program Files\Safari 2010-03-19 22:03:53 ----D---- C:\Users\***\AppData\Roaming\Opera 2010-03-19 22:02:49 ----D---- C:\Program Files\Opera 2010-03-18 17:01:17 ----D---- C:\Windows\B83FC356B7C0441F8A4DD71E088E7974.TMP 2010-03-18 14:08:17 ----D---- C:\ProgramData\Protexis 2010-03-18 14:08:15 ----D---- C:\Users\***\AppData\Roaming\Corel 2010-03-18 12:33:50 ----A---- C:\Windows\system32\browserchoice.exe 2010-03-17 00:17:28 ----D---- C:\Users\***\AppData\Roaming\FreeScreenToVideo 2010-03-16 21:33:17 ----D---- C:\Program Files\EA Games 2010-03-16 20:46:00 ----A---- C:\Windows\system32\nvvsvc.exe 2010-03-16 20:46:00 ----A---- C:\Windows\system32\nvsvcr.dll 2010-03-16 20:46:00 ----A---- C:\Windows\system32\nvsvc.dll 2010-03-16 20:46:00 ----A---- C:\Windows\system32\nvshext.dll 2010-03-16 20:46:00 ----A---- C:\Windows\system32\nvmctray.dll 2010-03-16 20:46:00 ----A---- C:\Windows\system32\nvhotkey.dll 2010-03-16 20:46:00 ----A---- C:\Windows\system32\nvcpl.dll 2010-03-16 19:42:02 ----D---- C:\Windows\E4D153288C89484BB9AAF5BE9EA6D01C.TMP 2010-03-15 22:30:24 ----D---- C:\Program Files\Microsoft Visual Studio 9.0 2010-03-15 22:29:46 ----D---- C:\Program Files\Common Files\Corel 2010-03-15 22:29:25 ----D---- C:\ProgramData\Corel 2010-03-14 19:09:50 ----D---- C:\Program Files\IrfanView 2010-03-14 15:37:26 ----D---- C:\Program Files\Lavalys 2010-03-14 14:55:32 ----D---- C:\Users\***\AppData\Roaming\FlashFXP 2010-03-14 14:55:12 ----D---- C:\Program Files\FlashFXP 2010-03-14 04:03:27 ----D---- C:\Program Files\QuickTime 2010-03-14 04:03:26 ----D---- C:\ProgramData\Apple Computer 2010-03-14 04:02:38 ----D---- C:\Program Files\Common Files\Apple 2010-03-14 04:01:06 ----D---- C:\ProgramData\Apple 2010-03-14 04:01:06 ----D---- C:\Program Files\Apple Software Update 2010-03-14 03:53:53 ----D---- C:\Program Files\Common Files\Macrovision Shared 2010-03-14 03:43:15 ----D---- C:\ProgramData\FLEXnet 2010-03-13 20:21:09 ----D---- C:\Program Files\MAXON 2010-03-13 15:03:41 ----D---- C:\Users\***\AppData\Roaming\MAXON 2010-03-13 03:11:07 ----D---- C:\Images 2010-03-13 03:11:07 ----D---- C:\Cache 2010-03-13 03:11:06 ----D---- C:\DataBase 2010-03-13 03:10:31 ----D---- C:\Web 2010-03-13 03:10:31 ----D---- C:\Log 2010-03-13 03:10:31 ----D---- C:\Lex 2010-03-13 03:10:31 ----D---- C:\Galleries 2010-03-13 03:10:31 ----A---- C:\Windows\Relax.ini 2010-03-13 03:10:05 ----D---- C:\Program Files\StudioLine Web 2010-03-13 03:10:05 ----A---- C:\SLDD.ini.bak 2010-03-13 03:10:05 ----A---- C:\SLDD.ini 2010-03-13 02:36:57 ----D---- C:\Program Files\WPF Toolkit 2010-03-13 02:36:26 ----D---- C:\Program Files\Microsoft SDKs 2010-03-12 23:06:34 ----D---- C:\Program Files\Warhammer 40000 Dawn of War II - Chaos Rising 2010-03-11 22:18:03 ----A---- C:\Windows\ODBC.INI 2010-03-11 22:17:59 ----A---- C:\Windows\system32\mdimon.dll 2010-03-11 12:03:39 ----A---- C:\Windows\system32\nshhttp.dll 2010-03-11 12:03:37 ----A---- C:\Windows\system32\httpapi.dll 2010-03-10 13:56:08 ----D---- C:\Program Files\FLF Services 2010-03-09 14:11:27 ----D---- C:\Program Files\Supreme Commander 2 2010-03-09 12:32:40 ----D---- C:\Program Files\Microsoft Synchronization Services 2010-03-09 12:31:26 ----D---- C:\Program Files\Microsoft Sync Framework 2010-03-09 12:29:25 ----D---- C:\Program Files\Microsoft Analysis Services 2010-03-08 20:04:45 ----D---- C:\downloads 2010-03-08 20:04:44 ----D---- C:\Users\***\AppData\Roaming\FVZilla ======List of files/folders modified in the last 1 months====== 2010-04-06 19:39:12 ----D---- C:\Windows\Temp 2010-04-06 19:38:01 ----D---- C:\Windows 2010-04-06 19:35:04 ----D---- C:\Windows\Prefetch 2010-04-06 19:24:22 ----D---- C:\Users\***\AppData\Roaming\vlc 2010-04-06 19:20:17 ----D---- C:\Windows\System32 2010-04-06 19:20:17 ----D---- C:\Windows\inf 2010-04-06 19:20:17 ----A---- C:\Windows\system32\PerfStringBackup.INI 2010-04-06 18:39:27 ----RD---- C:\Program Files\sft loader 2010-04-06 00:29:53 ----SHD---- C:\System Volume Information 2010-04-05 16:21:04 ----D---- C:\ProgramData 2010-04-05 16:20:54 ----SHD---- C:\Windows\Installer 2010-04-05 16:20:51 ----D---- C:\Program Files\Common Files 2010-04-05 16:18:16 ----D---- C:\Program Files\Java 2010-04-04 23:35:49 ----D---- C:\Windows\system32\drivers 2010-04-04 23:35:49 ----D---- C:\Windows\de-DE 2010-04-04 23:15:16 ----D---- C:\Program Files 2010-04-03 14:50:39 ----D---- C:\ProgramData\Microsoft Help 2010-04-03 03:38:35 ----HD---- C:\Program Files\InstallShield Installation Information 2010-04-03 03:38:35 ----D---- C:\Program Files\Ubisoft 2010-04-03 03:38:33 ----D---- C:\Windows\system32\catroot2 2010-04-03 03:36:57 ----D---- C:\Users\***\AppData\Roaming\Ubisoft 2010-04-02 18:48:04 ----D---- C:\Program Files\Mozilla Firefox 2010-04-01 19:43:44 ----RSD---- C:\Windows\assembly 2010-04-01 02:32:36 ----D---- C:\Windows\winsxs 2010-04-01 02:23:49 ----D---- C:\Windows\system32\Msdtc 2010-04-01 02:23:45 ----D---- C:\Windows\system32\wbem 2010-04-01 02:20:19 ----D---- C:\Windows\system32\config 2010-04-01 02:20:07 ----D---- C:\Windows\Tasks 2010-04-01 02:20:07 ----D---- C:\Windows\system32\spool 2010-04-01 02:20:06 ----D---- C:\Windows\registration 2010-04-01 01:58:37 ----D---- C:\Windows\system32\catroot 2010-04-01 01:42:11 ----D---- C:\Program Files\Intel 2010-03-31 23:24:17 ----D---- C:\Windows\system32\Tasks 2010-03-31 19:31:16 ----D---- C:\ProgramData\NVIDIA 2010-03-31 19:29:15 ----D---- C:\Windows\Help 2010-03-31 00:22:09 ----D---- C:\Program Files\Pokemon World Online 2010-03-28 23:27:06 ----D---- C:\Program Files\TmNationsForever 2010-03-28 18:21:11 ----D---- C:\Windows\system32\LogFiles 2010-03-28 18:00:49 ----D---- C:\Program Files\Activision 2010-03-26 22:49:47 ----D---- C:\Program Files\Metin2_Germany 2010-03-26 22:15:19 ----D---- C:\Program Files\Electronic Arts 2010-03-26 19:54:13 ----D---- C:\Program Files\Common Files\Wise Installation Wizard 2010-03-26 12:45:02 ----D---- C:\Windows\Microsoft.NET 2010-03-25 22:33:35 ----HD---- C:\LG3G 2010-03-25 21:40:12 ----A---- C:\Windows\My Video Converter.INI 2010-03-25 17:08:22 ----D---- C:\Program Files\Steam neu 2010-03-24 20:38:58 ----SD---- C:\Users\***\AppData\Roaming\Microsoft 2010-03-23 21:12:40 ----D---- C:\Program Files\DivX 2010-03-21 23:31:06 ----D---- C:\Users\***\AppData\Roaming\FileZilla 2010-03-21 20:21:30 ----D---- C:\Users\***\AppData\Roaming\dvdcss 2010-03-20 23:33:18 ----D---- C:\Program Files\Common Files\microsoft shared 2010-03-19 00:35:15 ----D---- C:\ProgramData\Electronic Arts 2010-03-19 00:27:25 ----D---- C:\ProgramData\McAfee 2010-03-19 00:22:42 ----D---- C:\Program Files\QIP 2010-03-17 00:12:08 ----AD---- C:\ProgramData\TEMP 2010-03-16 21:11:47 ----D---- C:\ProgramData\DassaultSystemes 2010-03-16 15:31:11 ----D---- C:\ProgramData\TmForever 2010-03-15 22:32:18 ----SD---- C:\ProgramData\Microsoft 2010-03-15 22:29:36 ----RSD---- C:\Windows\Fonts 2010-03-15 17:51:45 ----D---- C:\Program Files\FileZilla FTP Client 2010-03-14 17:39:00 ----D---- C:\Users\***\AppData\Roaming\Adobe 2010-03-14 03:59:03 ----D---- C:\Program Files\Adobe 2010-03-14 03:58:02 ----D---- C:\Program Files\Common Files\Adobe 2010-03-14 03:57:51 ----D---- C:\ProgramData\Adobe 2010-03-13 23:22:07 ----D---- C:\Program Files\Internet Explorer 2010-03-13 02:59:38 ----D---- C:\Windows\Debug 2010-03-13 02:39:21 ----D---- C:\Program Files\Microsoft Expression 2010-03-12 11:26:36 ----A---- C:\Windows\system32\NVUNINST.EXE 2010-03-12 01:29:23 ----D---- C:\Program Files\Windows Mail 2010-03-12 01:29:23 ----D---- C:\Program Files\Movie Maker 2010-03-11 22:16:19 ----D---- C:\Windows\ShellNew 2010-03-11 22:15:25 ----D---- C:\Program Files\Microsoft Office 2010-03-11 22:14:03 ----D---- C:\Windows\system 2010-03-11 20:34:34 ----D---- C:\Program Files\MSECACHE 2010-03-10 13:45:04 ----D---- C:\Program Files\Dassault Systemes 2010-03-10 13:29:54 ----A---- C:\psapi.dll 2010-03-09 12:34:12 ----D---- C:\Program Files\MSBuild 2010-03-09 12:31:26 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition 2010-03-09 12:30:19 ----D---- C:\Program Files\Microsoft Visual Studio 8 2010-03-09 12:29:39 ----A---- C:\Windows\win.ini 2010-03-09 12:29:35 ----D---- C:\Program Files\Common Files\System 2010-03-09 04:28:20 ----A---- C:\Windows\system32\deploytk.dll 2010-03-08 00:06:34 ----D---- C:\Program Files\Common Files\DVDVideoSoft 2010-03-07 15:32:50 ----D---- C:\Program Files\CCleaner ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608] R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104] R1 LUMDriver;LUMDriver; \??\C:\Windows\system32\drivers\LUMDriver.sys [2007-04-24 16688] R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520] R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}; \??\C:\Program Files\Acer Arcade Deluxe\PlayMovie\000.fcl [2008-05-09 61424] R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-08-14 74720] R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-02-02 281760] R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-12-07 56816] R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-03-21 15392] R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-02-02 25888] R2 NTIPPKernel;NTIPPKernel; \??\C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\NTIPPKernel.sys [2008-01-16 122368] R2 PSDNServ;PSDNServ; C:\Windows\system32\DRIVERS\PSDNServ.sys [2008-03-05 16944] R2 psdvdisk;PSDVdisk; C:\Windows\system32\DRIVERS\PSDVdisk.sys [2008-03-05 60464] R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-02-29 1202560] R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2008-03-28 210432] R3 CmBatt;Treiber für Microsoft-ACPI-Kontrollmethodenkompatible Batterie; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208] R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2008-07-02 21264] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-04-28 2127512] R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2008-04-21 81296] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2010-03-29 20824] R3 NETw5v32;Intel(R) Wireless WiFi Link Adaptertreiber für Windows Vista 32-Bit; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-04-28 3658752] R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2008-01-30 14848] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2010-01-28 68200] R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2010-03-17 11597416] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-01-18 196784] R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2009-10-14 10064] R3 usbvideo;USB-Videogerät (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016] R3 winbondcir;Winbond IR Transceiver; C:\Windows\system32\DRIVERS\winbondcir.sys [2007-03-28 43008] R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264] S3 aheqvver;aheqvver; C:\Windows\system32\drivers\aheqvver.sys [] S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-07-28 919552] S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-08-05 54632] S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-09-23 26176] S3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520] S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192] S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888] S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016] S3 usbbus;LGE Mobile Composite USB Device; C:\Windows\system32\DRIVERS\lgusbbus.sys [2007-07-11 12416] S3 UsbDiag;LGE Mobile USB Serial Port; C:\Windows\system32\DRIVERS\lgusbdiag.sys [2007-07-11 19840] S3 USBModem;LGE Mobile USB Modem; C:\Windows\system32\DRIVERS\lgusbmodem.sys [2007-07-11 21632] S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448] S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328] S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656] S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616] S4 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2008-03-18 13312] R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289] R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-07-21 185089] R2 BUNAgentSvc;NTI Backup Now 5 Agent Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384] R2 CLHNService;CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [2008-01-16 81504] R2 eDataSecurity Service;eDataSecurity Service; C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe [2008-03-05 500784] R2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-03-21 24576] R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2008-07-20 354840] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440] R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2010-03-29 303952] R2 MobilityService;MobilityService; C:\Acer\Mobility Center\MobilityService.exe [2007-12-06 110592] R2 NMSAccessU;NMSAccessU; C:\Program Files\Common Files\NMSAccessU.exe [2007-01-25 65536] R2 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-06 50424] R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-04 131072] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-03-16 129640] R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-03-28 66872] R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\Cyberlink\Shared files\RichVideo.exe [2007-01-09 272024] R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2009-10-30 1021256] R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-21 21504] S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-18 135664] S2 sfrem01;SF FrontLine Drivers Auto Removal (v1); C:\Windows\system32\sfrem01.exe [2006-07-05 358008] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-03-14 655624] S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504] S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-06-02 182768] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2009-10-29 30603640] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2009-09-26 149336] S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2009-09-26 4639136] S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-03-04 332720] S3 TuneUp.Defrag;@C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2009-11-20 435016] -----------------EOF----------------- Geändert von Bount (06.04.2010 um 19:38 Uhr) |
|
09.04.2010, 17:21
| #4 |
| | Verdacht auf Viren Kann mir keiner helfen? Ich bin grade voll verzweifelt und weiß auch nicht mehr weiter.... Tut mir leid wenn ich euch dadurch Umstände oder so mache....aber ich weiß wirklich nicht mehr weiter.....-.- mfg Bount |
|
09.04.2010, 18:14
| #5 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Verdacht auf Viren Sry, hab Deinen Strang übersehen. Mach bitte mit Malwarebytes ein Update der Signaturen (Datenbank Version) und starte einen Vollscan.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
09.04.2010, 21:52
| #6 |
| | Verdacht auf VirenCode:
ATTFilter Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org
Datenbank Version: 3972
Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005
09.04.2010 22:32:24
mbam-log-2010-04-09 (22-32-24).txt
Art des Suchlaufs: Vollständiger Suchlauf
Durchsuchte Objekte: 496724
Laufzeit: 2 Stunde(n), 9 Minute(n), 4 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
|
|
10.04.2010, 13:08
| #7 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Verdacht auf Viren Das ist sauber. Hast Du überhaupt noch Probleme bzgl. Virenmeldungen oder typischen Symtome die bei Schädlingsbefall da sind?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
10.04.2010, 15:16
| #8 |
| | Verdacht auf Viren ja halt die Probleme die ich oben beschriebene habe.... Am auffälligsten ist für mich das die Programme ohne Grund abstürzen!!! mfg Bount |
|
10.04.2010, 15:35
| #9 |
| | Verdacht auf Viren Hm ist alles sauber.... Mache mal einen Scan mit einem anderen Antivirenprogramm wie Avira oder McAfee. MfG Thomas
__________________ MfG Thomas Gras wächst auch nicht schneller, wenn man daran zieht. |
|
11.04.2010, 15:53
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Verdacht auf Viren Programmabstürze können auch durch defekte oder übertaktete Hardware verursacht werden. Hast Du ne Knoppix-CD zur Hand? Wenn diese Live-System auch instabil läuft, wäre das ein Hinweis dafür. Ich würde dann auf defektem Arbeitsspeicher (Bluescreens!) oder evtl. auch defektem Netzteil tippen. Aber mal eben so auf gut Glück austauschen wäre ungünstig, Hardware kostet ja Geld Vllt kannst Du dieses Problem auch mal hier im Hardwarebereich noch stellen, ich mach hier fast nur noch Bereinigungen 
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Verdacht auf Viren |
| acer aspire, agere systems, antivir, antivir guard, auf einmal, ausgelastet, avira, bho, browser, buffer overrun, desktop, excel, fehler, firefox, google, gupdate, hijack, hijackthis, home, internet, internet explorer, laptop acer, launch, local\temp, logfile, malwarebytes' anti-malware, mozilla, mp3, plug-in, rundll, schließen sich, security scan, senden, software, starten, verdacht auf viren, viren |
Linear-Darstellung
