Ok. Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.


Downloade Dir danach bitte MBRCheck (by a_d_13) und speichere die Datei auf dem Desktop.

• Doppelklick auf die MBRCheck.exe.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Das Tool braucht nur wenige Sekunden.
• Danach solltest du eine MBRCheck_<Datum>_<Uhrzeit>.txt auf dem Desktop finden.

Poste mir bitte den Inhalt des .txt Dokumentes

hier das Logfile von osam .... habe leider die online abfrage nicht übersprungen und hoffe das ist nicht weiter schlimm.

OSAM Logfile:

Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 15:44:40 on 26.05.2011

OS: Windows XP Home Edition Service Pack 3 (Build 2600)
Default Browser: Deutsche Telekom AG Browser 6.0 6, 12, 0, 15

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"ALSNDMGR.CPL" - ? - C:\WINDOWS\system32\ALSNDMGR.CPL  (File signed by Microsoft | File found, but it contains no detailed information)
"infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS\system32\infocardcpl.cpl
"javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS\system32\javacpl.cpl
"QuickTime.cpl" - "Apple Computer, Inc." - C:\WINDOWS\system32\QuickTime.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"Avira AntiVir Personal" - "Avira GmbH" - C:\PROGRA~1\Avira\ANTIVI~1\avconfig.cpl
"Avira AntiVir PersonalEdition Classic Konfiguration" - ? - C:\PROGRA~1\ANTIVI~1\avconfig.cpl  (File not found)
"ToSysCnf" - "Deutsche Telekom AG, Marmiko IT-Solutions GmbH" - C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToSysCnf.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"acedrv11" (acedrv11) - "Protect Software GmbH" - C:\WINDOWS\system32\drivers\acedrv11.sys
"avgio" (avgio) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avgio.sys
"avgntflt" (avgntflt) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avipbb.sys
"BrPar" (BrPar) - "Brother Industries Ltd." - C:\WINDOWS\System32\drivers\BrPar.sys
"catchme" (catchme) - ? - C:\DOKUME~1\MIRCOP~1\LOKALE~1\Temp\catchme.sys  (File not found)
"CdaD10BA" (CdaD10BA) - "Macrovision Europe Ltd" - C:\WINDOWS\system32\drivers\CdaD10BA.SYS
"Changer" (Changer) - ? - C:\WINDOWS\system32\drivers\Changer.sys  (File not found)
"i2omgmt" (i2omgmt) - ? - C:\WINDOWS\system32\drivers\i2omgmt.sys  (File not found)
"ISDN PCI CAPI" (WDMCAPI) - "ISDN Company" - C:\WINDOWS\System32\DRIVERS\WDMCAPI.sys
"lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS\system32\drivers\lbrtfdc.sys  (File not found)
"MACNDIS5 NDIS Protocol Driver" (MACNDIS5) - "Marmiko IT-Solutions GmbH" - C:\PROGRA~1\GEMEIN~1\MARMIK~1\MACNDIS5.SYS
"mbr" (mbr) - ? - C:\cofi\mbr.sys  (Hidden registry entry, rootkit activity | File not found)
"MIINPazX NDIS Protocol Driver" (MIINPazX) - "Deutsche Telekom AG, Marmiko IT-Solutions GmbH" - C:\PROGRA~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS
"MTOnlPktAlyX NDIS Protocol Driver" (MTOnlPktAlyX) - "Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH" - C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS
"NDIS WAN miniport" (WDMWANMP) - "ISDN Company" - C:\WINDOWS\System32\DRIVERS\wdmwanmp.sys
"NETGEAR WG111v2 54Mbps Wireless USB 2.0 Adapter NT Driver" (RTLWUSB) - "NETGEAR Inc." - C:\WINDOWS\System32\DRIVERS\wg111v2.sys
"Padus ASPI Shell" (pfc) - "Padus, Inc." - C:\WINDOWS\System32\drivers\pfc.sys
"PCIDump" (PCIDump) - ? - C:\WINDOWS\system32\drivers\PCIDump.sys  (File not found)
"PDCOMP" (PDCOMP) - ? - C:\WINDOWS\system32\drivers\PDCOMP.sys  (File not found)
"PDFRAME" (PDFRAME) - ? - C:\WINDOWS\system32\drivers\PDFRAME.sys  (File not found)
"PDRELI" (PDRELI) - ? - C:\WINDOWS\system32\drivers\PDRELI.sys  (File not found)
"PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS\system32\drivers\PDRFRAME.sys  (File not found)
"PxHelp20" (PxHelp20) - "Sonic Solutions" - C:\WINDOWS\System32\Drivers\PxHelp20.sys
"Realtek EAPPkt Protocol" (EAPPkt) - "Windows (R) 2000 DDK provider" - C:\WINDOWS\System32\DRIVERS\EAPPkt.sys
"SSHDRV64" (SSHDRV64) - ? - C:\WINDOWS\system32\drivers\SSHDRV64.sys  (File found, but it contains no detailed information)
"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\ssmdrv.sys
"StarForce Protection Environment Driver v6" (prodrv06) - "Protection Technology" - C:\WINDOWS\System32\drivers\prodrv06.sys
"StarForce Protection Helper Driver" (sfhlp01) - "Protection Technology" - C:\WINDOWS\System32\drivers\sfhlp01.sys
"StarForce Protection Helper Driver v2" (prohlp02) - "Protection Technology" - C:\WINDOWS\System32\drivers\prohlp02.sys
"StarForce Protection Synchronization Driver v1" (prosync1) - "Protection Technology" - C:\WINDOWS\System32\drivers\prosync1.sys
"T-Online Dialerschutz Hooking Treiber" (DFSYS) - "T-Systems Enterprise Services GmbH" - C:\Programme\T-Online\Dialerschutz-Software\DFSYS.SYS
"T-Online Dialerschutz VoIP Service" (SipIMNDI) - "T-Systems Enterprise Services GmbH" - C:\WINDOWS\System32\DRIVERS\SipIMNDI.sys
"USB-Flachbettscanner" (SampleScanner) - ? - C:\WINDOWS\System32\DRIVERS\ArtecGT.sys  (File not found)
"WAN Miniport (ATW)" (wanatw) - ? - C:\WINDOWS\System32\DRIVERS\wanatw4.sys  (File not found)
"WDICA" (WDICA) - ? - C:\WINDOWS\system32\drivers\WDICA.sys  (File not found)

[Explorer]
-----( HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{BDEADF00-C265-11d0-BCED-00A0C90AB50F} "Webordner" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL
-----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )-----
{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
-----( HKLM\Software\Classes\Protocols\Handler )-----
{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Programme\Windows Live\Mail\mailcomm.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{23170F69-40C1-278A-1000-000100020000} "7-Zip Shell Extension" - "Igor Pavlov" - C:\Programme\7-Zip\7-zip.dll
{0563DB41-F538-4B37-A92D-4659049B7766} "CLSID_WLMCMimeFilter" - "Microsoft Corporation" - C:\Programme\Windows Live\Mail\mailcomm.dll
 "CorelDRAW ESSENTIALS Shell Extension Component" - ? -   (File not found | COM-object registry key not found)
{42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung" - ? - deskpan.dll  (File not found)
{C9CF278C-460E-4917-BC43-3F75E6E47D3D} "fluxDVD Shell Information Extractor" - "ACE GmbH" - C:\PROGRA~1\GEMEIN~1\fluxDVD\Lib\XEB\XEBShell.dll
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung" - ? -   (File not found | COM-object registry key not found)
{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice Property Sheet Handler" - ? - C:\Programme\StarOffice7\program\shlxthdl.dll
{0006F045-0000-0000-C000-000000000046} "Outlook-Dateisymbolerweiterung" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office\OLKFSTUB.DLL
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - C:\Program Files\Real\RealPlayer\rpshell.dll
{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\shlext.dll
{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung" - ? -   (File not found | COM-object registry key not found)
{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe
{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll
{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Programme\Windows Live\Toolbar\wltcore.dll
ITBar7Height "ITBar7Height" - ? -   (File not found | COM-object registry key not found)
<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)
<binary data> "ITBarLayout" - ? -   (File not found | COM-object registry key not found)
-----( HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks )-----
{EF99BD32-C1FB-11D2-892F-0090271D4F88} "&Yahoo! Toolbar" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{5D637FAD-E202-48D1-8F18-5B9C459BD1E3} "Image Uploader Control" - "Aurigma, Inc." - C:\WINDOWS\Downloaded Program Files\ImageUploader5.ocx / hxxp://www.hood.de/ImageUploader5.cab
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_23" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_23.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} "Java Plug-in 1.6.0_23" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_23.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_23" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_23.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
{02BCC737-B171-4746-94C9-0D8A0B2C0089} "Microsoft Office Template and Media Control" - "Microsoft Corporation" - C:\WINDOWS\Downloaded Program Files\IEAWSDC.DLL / hxxp://office.microsoft.com/templates/ieawsdc.cab
{A3D4089B-1FA9-4FC7-AF6B-19A4866D4FDF} "TOIDownloadCtrl Class" - "T-Systems International GmbH" - C:\WINDOWS\Downloaded Program Files\TOIDownloadManager.dll / hxxp://drm1.t-online.de/MeineFilmeVoD/TOIDownloadManager.cab
{17492023-C23A-453E-A040-C7C580BBF700} "Windows Genuine Advantage Validation Tool" - "Microsoft Corporation" - C:\WINDOWS\system32\LegitCheckControl.DLL / hxxp://download.microsoft.com/download/8/b/d/8bd77752-5704-4d68-a152-f7252adaa4f2/LegitCheckControl.cab
{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} "{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}" - ? -   (File not found | COM-object registry key not found) / hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} "{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}" - ? -   (File not found | COM-object registry key not found) / hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
{CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} "{CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7}" - ? -   (File not found | COM-object registry key not found) / hxxp://***images.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
{E2883E8F-472F-4FB0-9522-AC9BF37916A7} "{E2883E8F-472F-4FB0-9522-AC9BF37916A7}" - ? -   (File not found | COM-object registry key not found) / hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
"ICQ7.2" - "ICQ, LLC." - C:\Programme\ICQ7.2\ICQ.exe
{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "In Blog veröffentlichen" - "Microsoft Corporation" - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----
<binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Programme\Windows Live\Toolbar\wltcore.dll
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} "Easy-WebPrint" - ? - C:\Programme\Canon\Easy-WebPrint\Toolband.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{19C8E43B-07B3-49CB-BFFC-6777B593E6F8} "Download Manager Browser Helper Object" - "Protect Software GmbH" - C:\PROGRA~1\GEMEIN~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
{3049C3E9-B461-4BC5-8870-4C09146192CA} "RealPlayer Download and Record Plugin for Internet Explorer" - "RealPlayer" - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} "Search Helper" - "Microsoft Corporation" - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live Anmelde-Hilfsprogramm" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} "Windows Live Toolbar Helper" - "Microsoft Corporation" - C:\Programme\Windows Live\Toolbar\wltcore.dll
{5C255C8A-E604-49b4-9D64-90988571CECB} "{5C255C8A-E604-49b4-9D64-90988571CECB}" - ? -   (File not found | COM-object registry key not found)

[Logon]
-----( %AllUsersProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini
-----( %UserProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\***\Startmenü\Programme\Autostart\desktop.ini
"Registration DIE SIEDLER - Das Erbe der Könige - Gold Edition.LNK" - ? - C:\Dokumente und Einstellungen\***\Startmenü\Programme\Autostart\Registration DIE SIEDLER - Das Erbe der Könige - Gold Edition.LNK  (Shortcut exists | File not found)
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"InfoCockpit" - "Deutsche Telekom AG, T-Com" - C:\Programme\T-Online\T-Online_Software_6\Info-Cockpit\IC_START.EXE /nosplash
"Skype" - "Skype Technologies S.A." - "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
"T-Online_Software_6\WLAN-Access Finder" - "Deutsche Telekom AG, Marmiko IT-Solutions GmbH" - C:\Programme\T-Online\WLAN-Access Finder\ToWLaAcF.exe /StartMinimized
"TomTomHOME.exe" - "TomTom" - "C:\Programme\TomTom HOME 2\TomTomHOMERunner.exe"
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"avgnt" - "Avira GmbH" - "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
"CorelDRAW ESSENTIALS14" - "Corel Corporation" - C:\Programme\Corel\CorelDRAW ESSENTIALS 2\Register\Registration.exe /title="CorelDRAW ESSENTIALS" /date=052911 serial=ES02WBG-0090091-CML
"HP Software Update" - "Hewlett-Packard Co." - C:\Programme\HP\HP Software Update\HPWuSchd2.exe
"OpwareSE2" - "ScanSoft, Inc." - "C:\Programme\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
"QuickTime Task" - "Apple Computer, Inc." - "C:\Programme\QuickTime\qttask.exe" -atboottime
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe"
"T-Online Dialerschutz-Software" - "T-Systems Enterprise Services GmbH" - "C:\Programme\T-Online\Dialerschutz-Software\Defender.exe"
"TkBellExe" - "RealNetworks, Inc." - "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe"  -osboot
"ToADiMon.exe" - "Deutsche Telekom AG, Marmiko IT-Solutions GmbH" - C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe -TOnlineAutodialStart

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
"Anwendungsverwaltung" (AppMgmt) - ? - C:\WINDOWS\System32\appmgmts.dll  (File not found)
"ASP.NET State Service" (aspnet_state) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
"Automatisches LiveUpdate - Scheduler" (Automatisches LiveUpdate - Scheduler) - ? - "C:\Programme\Symantec\LiveUpdate\ALUSchedulerSvc.exe"  (File not found)
"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avguard.exe
"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\sched.exe
"DATA BECKER Update Service" (DBService) - "DATA BECKER GmbH & Co KG" - C:\Programme\Gemeinsame Dateien\DATA BECKER Shared\DBService.exe
"Firebird Server - MAGIX Instance" (FirebirdServerMAGIXInstance) - "MAGIX®" - C:\MAGIX\Common\Database\bin\fbserver.exe
"getPlus(R) Helper" (getPlusHelper) - "NOS Microsystems Ltd." - C:\Programme\NOS\bin\getPlus_Helper.dll
"Haufe iDesk-Service in C:\Programme\Haufe\iDesk\iDeskService\Zope" (HRService) - ? - C:\Programme\Haufe\iDesk\iDeskService\iDeskService.exe  (File found, but it contains no detailed information)
"hpqcxs08" (hpqcxs08) - "Hewlett-Packard Co." - C:\Programme\HP\Digital Imaging\bin\hpqcxs08.dll
"InstallDriver Table Manager" (IDriverT) - "Macrovision Corporation" - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
"Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe
"SeaPort" (SeaPort) - "Microsoft Corporation" - C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
"T-Online Dialerschutz Dienst" (DFSVC) - "T-Systems Enterprise Services GmbH" - C:\Programme\T-Online\Dialerschutz-Software\DFInject.exe
"T-Online WLAN Adapter Steuerungsdienst" (MZCCntrl) - "Deutsche Telekom AG, Marmiko IT-Solutions GmbH" - C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
"TomTomHOMEService" (TomTomHOMEService) - "TomTom" - C:\Programme\TomTom HOME 2\TomTomHOMEService.exe
"Windows CardSpace" (idsvc) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

[Winlogon]
-----( HKCU\Control Panel\IOProcs )-----
"MVB" - ? - mvfs32.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions )-----
{c6dc5466-785a-11d2-84d0-00c04fb169f7} "Softwareinstallation" - ? - appmgmts.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )-----
"WgaLogon" - "Microsoft Corporation" - C:\WINDOWS\system32\WgaLogon.dll

===[ Logfile end ]=========================================[ Logfile end ]===
         

--- --- ---

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru


gruß luna

und der MBRCheck


MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows XP Home Edition
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x000007fc

Kernel Drivers (total 126):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806D1000 \WINDOWS\system32\hal.dll
0xF8B28000 \WINDOWS\system32\KDCOM.DLL
0xF8A38000 \WINDOWS\system32\BOOTVID.dll
0xF84F8000 ACPI.sys
0xF8B2A000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xF84E7000 pci.sys
0xF8628000 isapnp.sys
0xF8BF0000 PCIIde.sys
0xF88A8000 \WINDOWS\System32\Drivers\PCIIDEX.SYS
0xF8B2C000 intelide.sys
0xF8638000 MountMgr.sys
0xF84C8000 ftdisk.sys
0xF88B0000 PartMgr.sys
0xF8648000 VolSnap.sys
0xF84B0000 atapi.sys
0xF8658000 disk.sys
0xF8668000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xF8490000 fltmgr.sys
0xF847E000 sr.sys
0xF8678000 PxHelp20.sys
0xF8467000 KSecDD.sys
0xF8454000 WudfPf.sys
0xF83C7000 Ntfs.sys
0xF839A000 NDIS.sys
0xF82E2000 WDMCAPI.sys
0xF8B2E000 sfhlp01.sys
0xF8B30000 prosync1.sys
0xF82CA000 \WINDOWS\System32\drivers\SCSIPORT.SYS
0xF82AE000 prohlp02.sys
0xF8294000 Mup.sys
0xF8778000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xF8990000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xF792D000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xF8998000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xF89A0000 \SystemRoot\system32\DRIVERS\RTL8139.SYS
0xF76F7000 \SystemRoot\system32\drivers\ALCXWDM.SYS
0xF76D3000 \SystemRoot\system32\drivers\portcls.sys
0xF8788000 \SystemRoot\system32\drivers\drmk.sys
0xF76B0000 \SystemRoot\system32\drivers\ks.sys
0xF89A8000 \SystemRoot\system32\DRIVERS\fdc.sys
0xF8798000 \SystemRoot\system32\DRIVERS\serial.sys
0xF8ADC000 \SystemRoot\system32\DRIVERS\serenum.sys
0xF769C000 \SystemRoot\system32\DRIVERS\parport.sys
0xF87A8000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0xF89B0000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xF89B8000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xF87B8000 \SystemRoot\system32\DRIVERS\imapi.sys
0xF8AE0000 \SystemRoot\system32\drivers\pfc.sys
0xF87C8000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xF87D8000 \SystemRoot\system32\DRIVERS\redbook.sys
0xF8D70000 \SystemRoot\system32\DRIVERS\audstub.sys
0xF89C0000 \SystemRoot\system32\DRIVERS\rasirda.sys
0xF89C8000 \SystemRoot\system32\DRIVERS\TDI.SYS
0xF87E8000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xF8AF0000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xF7685000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xF79E1000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xF79D1000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xF7674000 \SystemRoot\system32\DRIVERS\psched.sys
0xF79C1000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xF89D8000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xF89E0000 \SystemRoot\system32\DRIVERS\raspti.sys
0xF79B1000 \SystemRoot\system32\DRIVERS\termdd.sys
0xF8B5E000 \SystemRoot\system32\DRIVERS\swenum.sys
0xF7616000 \SystemRoot\system32\DRIVERS\update.sys
0xF8AFC000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xF8B00000 \SystemRoot\system32\DRIVERS\SipIMNDI.sys
0xF89E8000 \SystemRoot\system32\DRIVERS\wdmwanmp.sys
0xF7991000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xF7981000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xF8B62000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xF8A20000 \SystemRoot\system32\DRIVERS\usbprint.sys
0xF74DA000 \??\C:\WINDOWS\system32\drivers\SSHDRV64.sys
0xF8B64000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xF8D52000 \SystemRoot\System32\Drivers\Null.SYS
0xF8B66000 \SystemRoot\System32\Drivers\Beep.SYS
0xF8A30000 \SystemRoot\System32\drivers\vga.sys
0xF74C6000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0xF8B68000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xF8B6A000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xF88D8000 \SystemRoot\System32\Drivers\Msfs.SYS
0xF88E0000 \SystemRoot\System32\Drivers\Npfs.SYS
0xF7D91000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xF7493000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xF743A000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xF7412000 \SystemRoot\system32\DRIVERS\netbt.sys
0xF73F0000 \SystemRoot\System32\drivers\afd.sys
0xF87F8000 \SystemRoot\system32\DRIVERS\netbios.sys
0xF88E8000 \SystemRoot\system32\DRIVERS\ssmdrv.sys
0xF73C5000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xF73B1000 \SystemRoot\System32\drivers\prodrv06.sys
0xF7341000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xF8808000 \SystemRoot\System32\Drivers\Fips.SYS
0xF731B000 \SystemRoot\system32\DRIVERS\avipbb.sys
0xF8858000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xF8B70000 \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys
0xF72CF000 \SystemRoot\System32\Drivers\Fastfat.SYS
0xF8908000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xF72B7000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xF8BB6000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xF7501000 \SystemRoot\System32\drivers\Dxapi.sys
0xF8948000 \SystemRoot\System32\watchdog.sys
0xBF000000 \SystemRoot\System32\drivers\dxg.sys
0xF8D65000 \SystemRoot\System32\drivers\dxgthk.sys
0xBFF70000 \SystemRoot\System32\framebuf.dll
0xBF012000 \SystemRoot\System32\ATMFD.DLL
0xF6D8A000 \SystemRoot\system32\DRIVERS\avgntflt.sys
0xF6C34000 \SystemRoot\system32\DRIVERS\irda.sys
0xF6C23000 \SystemRoot\system32\DRIVERS\EAPPkt.sys
0xF6D5E000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xF6A8E000 \SystemRoot\system32\DRIVERS\mrxdav.sys
0xF8928000 \SystemRoot\System32\drivers\BrPar.sys
0xF8BC4000 \SystemRoot\System32\Drivers\ParVdm.SYS
0xF6A23000 \??\C:\WINDOWS\system32\drivers\acedrv11.sys
0xF6ADF000 \??\C:\WINDOWS\system32\drivers\CdaD10BA.SYS
0xF6903000 \SystemRoot\system32\DRIVERS\srv.sys
0xF6696000 \SystemRoot\system32\drivers\wdmaud.sys
0xF670B000 \SystemRoot\system32\drivers\sysaudio.sys
0xF6456000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xF89D0000 \??\C:\PROGRA~1\GEMEIN~1\MARMIK~1\MACNDIS5.SYS
0xF5FA3000 \SystemRoot\System32\Drivers\HTTP.sys
0xF8BB4000 \??\C:\WINDOWS\system32\Drivers\PROCEXP113.SYS
0xF8958000 \??\C:\DOKUME~1\MIRCOP~1\LOKALE~1\Temp\catchme.sys
0x7C910000 \WINDOWS\system32\ntdll.dll

Processes (total 43):
0 System Idle Process
4 System
768 C:\WINDOWS\system32\smss.exe
884 csrss.exe
908 C:\WINDOWS\system32\winlogon.exe
952 C:\WINDOWS\system32\services.exe
964 C:\WINDOWS\system32\lsass.exe
1128 C:\WINDOWS\system32\svchost.exe
1188 svchost.exe
1284 C:\WINDOWS\system32\svchost.exe
1316 C:\WINDOWS\system32\svchost.exe
1464 svchost.exe
1628 svchost.exe
1788 C:\WINDOWS\system32\spoolsv.exe
1836 C:\Programme\Avira\AntiVir Desktop\sched.exe
1908 svchost.exe
1968 C:\Programme\Avira\AntiVir Desktop\avguard.exe
1984 C:\Programme\Gemeinsame Dateien\DATA BECKER Shared\DBService.exe
2004 C:\Programme\T-Online\Dialerschutz-Software\DFInject.exe
2040 C:\Programme\Java\jre6\bin\jqs.exe
128 C:\Programme\Gemeinsame Dateien\Marmiko Shared\MZCCntrl.exe
188 C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
292 C:\WINDOWS\system32\svchost.exe
384 C:\Programme\TomTom HOME 2\TomTomHOMEService.exe
828 C:\Programme\Avira\AntiVir Desktop\avshadow.exe
1648 C:\WINDOWS\system32\wscntfy.exe
804 C:\Programme\QuickTime\qttask.exe
1172 C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
1236 C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
1260 C:\Programme\ScanSoft\OmniPageSE2.0\opwareSE2.exe
272 C:\Programme\HP\HP Software Update\hpwuSchd2.exe
1356 C:\Programme\Avira\AntiVir Desktop\avgnt.exe
1436 C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe
1608 C:\WINDOWS\system32\ctfmon.exe
1844 C:\Programme\Skype\Phone\Skype.exe
2084 C:\Programme\TomTom HOME 2\TomTomHOMERunner.exe
2464 C:\WINDOWS\system32\svchost.exe
2308 C:\Programme\Skype\Plugin Manager\skypePM.exe
2832 C:\Programme\Gemeinsame Dateien\Java\Java Update\jucheck.exe
2772 C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis2\PROFIL~1.EXE
3584 C:\WINDOWS\explorer.exe
1740 C:\Programme\Gemeinsame Dateien\Marmiko Shared\MInfraIS\MInfraIS.exe
3740 C:\Dokumente und Einstellungen\***\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000012`b5665000 (NTFS)
\\.\E: --> \\.\PhysicalDrive0 at offset 0x00000023`cc088600 (FAT32)

PhysicalDrive0 Model Number: ST3160023AS, Rev: 3.00

Size Device Name MBR Status
--------------------------------------------
149 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: ADFE55CD0C6ED2E00B22375835E4C2736CE9AD11


Done!


Gruß luna