Trojaner-Board - Firefox leitet auf fremde Seiten um

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Firefox leitet auf fremde Seiten um (https://www.trojaner-board.de/72954-firefox-leitet-fremde-seiten-um.html)

Ist aktuell. Ich glaube meine MB-Batterie ist ein wenig schwach. Wenn der Rechner zu lange aus war, läuft die Uhr nicht mehr weiter. Das hab ich schon, seit ich das neue MB hab und war zu faul das auszutauschen.:Boogie:

Gruß
Raketenmann

Edit:
Im Moment hab ich keine redirects. Bin ich geheilt?

Edit2:

Zitat:

Zitat von john.doe (Beitrag 435271)

p.s.: Klick nochmal auf Editieren, sonst sage ich allen, dass du Heino heißt. :)

ist geschehen.

Zitat:

Das hab ich schon, seit ich das neue MB hab und war zu faul das auszutauschen.

Mir geht es nicht um die Uhrzeit als solche, sondern darum, das Bonjour noch zu sehen ist, dass du deinstallieren solltest. :aufsmaul:

Zitat:

Im Moment hab ich keine redirects. Bin ich geheilt?

Träum weiter. :lach:

Also kontrolliere nochmal deine Liste und poste ein neues HJT-Log.

ciao, andreas

Zitat:

Zitat von john.doe (Beitrag 435281)

Mir geht es nicht um die Uhrzeit als solche, sondern darum, das Bonjour noch zu sehen ist, dass du deinstallieren solltest. :aufsmaul:

Oh, stimmt. Hmm.. Ich hatte das über Systemeinstellungen->Software entfernt, das weiss ich. Keine Ahnung, warum es jetzt wieder da ist. Ich bin im Moment bei der Arbeit und werde heute abend dann nochmal versuchen, es weg zu bekommen.

Grüße vom Raketenmann

OK, 2 Minuten warte ich noch. :D

ciao, andreas

In der Systemsteuerung->Software ist Bonjour nicht mehr zu finden. Soll ich es vielleicht mal so versuchen wie hier
How To Uninstall or Remove Bonjour mDNSResponder.exe Raymond.CC Blog
beschrieben?

Gruß
Raketenmann

Das ist eine Möglichkeit, die zweite ist Au revoir bonjour.exe

Ist zwar französisch, aber zwei Knöpfe zu drücken bekommt man auch ohne französich hin. :)

ciao, andreas

Hab Bonjour mit dem französischen Tool entfernt.
HJT sagt jetzt:

Code:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:22:28, on 10.05.2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16827)

Boot mode: Normal
 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

F:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\Programme\Gemeinsame Dateien\AccSys\AccWLSvc.exe

C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Programme\Java\jre6\bin\jqs.exe

C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe

C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\Programme\Gemeinsame Dateien\Microsoft Shared\DirectX Extensions\DXDebugService.exe

C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\Explorer.EXE

C:\Programme\TortoiseSVN\bin\TSVNCache.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\winsys2.exe

C:\WINDOWS\system32\rundll32.exe

F:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\WINDOWS\RTHDCPL.EXE

G:\Programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Programme\iTunes\iTunesHelper.exe

C:\Programme\Java\jre6\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programme\Microsoft ActiveSync\wcescomm.exe

C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\Programme\Octoshape Streaming Services\*MeinName*\OctoshapeClient.exe

F:\spiele\ncsoft\launcher\NCLauncher.exe

C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

C:\Programme\Electronic Arts\EADM\Core.exe

C:\PROGRA~1\MI3AA1~1\rapimgr.exe

C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Programme\Skype\Phone\Skype.exe

C:\Programme\Logitech\SetPoint\SetPoint.exe

C:\Programme\Gemeinsame Dateien\Logitech\KHAL\KHALMNPR.EXE

C:\Programme\iPod\bin\iPodService.exe

C:\Programme\Skype\Plugin Manager\skypePM.exe

C:\Programme\HijackThis\HiJackThis.exe

C:\Programme\Mozilla Firefox\firefox.exe
 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.arcor.de

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.1.1:80

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - G:\Programme\Adobe\/Adobe Contribute CS3/contributeieplugin.dll

O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe

O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe

O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe

O4 - HKLM\..\Run: [amd_dc_opt] C:\Programme\AMD\Dual-Core Optimizer\amd_dc_opt.exe

O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [avgnt] "F:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "G:\Programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"

O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\GEMEIN~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\wcescomm.exe"

O4 - HKCU\..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Programme\Octoshape Streaming Services\*MeinName*\OctoshapeClient.exe" -inv:bootrun

O4 - HKCU\..\Run: [PlayNC Launcher] F:\spiele\ncsoft\launcher\NCLauncher.exe /Minimized

O4 - HKCU\..\Run: [EA Core] "C:\Programme\Electronic Arts\EADM\Core.exe" -silent

O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - S-1-5-18 Startup: ChkDisk.lnk = ? (User 'SYSTEM')

O4 - .DEFAULT Startup: ChkDisk.lnk = ? (User 'Default user')

O4 - Startup: ChkDisk.lnk = ?

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: Append to existing PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert link target to Adobe PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert link target to existing PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert selected links to Adobe PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convert selected links to existing PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Convert selection to Adobe PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert selection to existing PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert to Adobe PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O10 - Broken Internet access because of LSP provider 'c:\programme\bonjour\mdnsnsp.dll' missing

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1198742957078

O17 - HKLM\System\CCS\Services\Tcpip\..\{89E18BB3-1B35-4F74-A3A0-41BC2D168F0C}: NameServer = 192.168.2.1

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Programme\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: AccSys WiFi Server (AccWLSvc) - AccSys GmbH - C:\Programme\Gemeinsame Dateien\AccSys\AccWLSvc.exe

O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Programme\Gemeinsame Dateien\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe

O23 - Service: Avira AntiVir Personal – Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - F:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - F:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe

O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: TVersityMediaServer - Unknown owner - F:\Programme\Media Server\MediaServer.exe
 

--

End of file - 11492 bytes

Poste bitte ein aktuelles Rsit- und Combofix-Log, wir haben soviel gelöscht, das ich nicht mehr weiß, was da überhaupt noch ist.

Du hast da einige Tools zum Übertakten installiert. Brauchst du die überhaupt?

ciao, andreas

Übertacktungstools? Hab ich noch nie wissentlich installiert.
RSIT log:

Code:

Logfile of random's system information tool 1.06 (written by random/random)

Run by *MeinName* at 2009-05-10 11:01:31

Microsoft Windows XP Home Edition Service Pack 3

System drive C: has 4 GB (13%) free of 33 GB

Total RAM: 3071 MB (80% free)
 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 11:01:36, on 10.05.2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16827)

Boot mode: Normal
 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

F:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\Programme\Gemeinsame Dateien\AccSys\AccWLSvc.exe

C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Programme\Java\jre6\bin\jqs.exe

C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe

C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\Programme\Gemeinsame Dateien\Microsoft Shared\DirectX Extensions\DXDebugService.exe

C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\Explorer.EXE

C:\Programme\TortoiseSVN\bin\TSVNCache.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\winsys2.exe

C:\WINDOWS\system32\rundll32.exe

F:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\WINDOWS\RTHDCPL.EXE

G:\Programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Programme\iTunes\iTunesHelper.exe

C:\Programme\Java\jre6\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programme\Microsoft ActiveSync\wcescomm.exe

C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\Programme\Octoshape Streaming Services\*MeinName*\OctoshapeClient.exe

F:\spiele\ncsoft\launcher\NCLauncher.exe

C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

C:\Programme\Electronic Arts\EADM\Core.exe

C:\PROGRA~1\MI3AA1~1\rapimgr.exe

C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Programme\Skype\Phone\Skype.exe

C:\Programme\Logitech\SetPoint\SetPoint.exe

C:\Programme\Gemeinsame Dateien\Logitech\KHAL\KHALMNPR.EXE

C:\Programme\iPod\bin\iPodService.exe

C:\Programme\Skype\Plugin Manager\skypePM.exe

C:\Dokumente und Einstellungen\*MeinName*\Desktop\RSIT.exe

C:\Programme\HijackThis\*MeinName*.exe
 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.arcor.de

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.1.1:80

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - G:\Programme\Adobe\/Adobe Contribute CS3/contributeieplugin.dll

O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe

O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe

O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe

O4 - HKLM\..\Run: [amd_dc_opt] C:\Programme\AMD\Dual-Core Optimizer\amd_dc_opt.exe

O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [avgnt] "F:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "G:\Programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"

O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\GEMEIN~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre6\bin\jusched.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\wcescomm.exe"

O4 - HKCU\..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Programme\Octoshape Streaming Services\*MeinName*\OctoshapeClient.exe" -inv:bootrun

O4 - HKCU\..\Run: [PlayNC Launcher] F:\spiele\ncsoft\launcher\NCLauncher.exe /Minimized

O4 - HKCU\..\Run: [EA Core] "C:\Programme\Electronic Arts\EADM\Core.exe" -silent

O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - S-1-5-18 Startup: ChkDisk.lnk = ? (User 'SYSTEM')

O4 - .DEFAULT Startup: ChkDisk.lnk = ? (User 'Default user')

O4 - Startup: ChkDisk.lnk = ?

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: Append to existing PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert link target to Adobe PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert link target to existing PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert selected links to Adobe PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convert selected links to existing PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Convert selection to Adobe PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert selection to existing PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert to Adobe PDF - res://G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O10 - Broken Internet access because of LSP provider 'c:\programme\bonjour\mdnsnsp.dll' missing

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1198742957078

O17 - HKLM\System\CCS\Services\Tcpip\..\{89E18BB3-1B35-4F74-A3A0-41BC2D168F0C}: NameServer = 192.168.2.1

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: !SASWinLogon - C:\Programme\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: AccSys WiFi Server (AccWLSvc) - AccSys GmbH - C:\Programme\Gemeinsame Dateien\AccSys\AccWLSvc.exe

O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Programme\Gemeinsame Dateien\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe

O23 - Service: Avira AntiVir Personal – Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - F:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - F:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe

O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: TVersityMediaServer - Unknown owner - F:\Programme\Media Server\MediaServer.exe
 

--

End of file - 11520 bytes

Code:

======Registry dump======
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2009-05-10 35840]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]

JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-05-10 73728]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - G:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10 321120]

{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - G:\Programme\Adobe\/Adobe Contribute CS3/contributeieplugin.dll [2007-03-16 118784]
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Logitech Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2004-12-10 49152]

"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2008-11-12 13672448]

"nwiz"=nwiz.exe /install []

"SW20"=C:\WINDOWS\system32\sw20.exe [2006-12-15 208896]

"SW24"=C:\WINDOWS\system32\sw24.exe [2006-12-15 69632]

"WinSys2"=C:\WINDOWS\system32\winsys2.exe [2006-12-15 217088]

"amd_dc_opt"=C:\Programme\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2006-11-17 77824]

"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []

"avgnt"=F:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-07-17 266497]

"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-07-05 16380416]

"Acrobat Assistant 8.0"=G:\Programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [2008-01-11 623992]

"Adobe_ID0EYTHM"=C:\PROGRA~1\GEMEIN~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2007-03-20 1884160]

"AppleSyncNotifier"=C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-03-06 177472]

"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2008-11-12 86016]

"QuickTime Task"=C:\Programme\QuickTime\QTTask.exe [2009-01-05 413696]

"iTunesHelper"=C:\Programme\iTunes\iTunesHelper.exe [2009-04-02 342312]

"SunJavaUpdateSched"=C:\Programme\Java\jre6\bin\jusched.exe [2009-05-10 148888]
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

"H/PC Connection Agent"=C:\Programme\Microsoft ActiveSync\wcescomm.exe [2005-08-05 1200128]

"LDM"=C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2007-02-24 67128]

"Octoshape Streaming Services"=C:\Programme\Octoshape Streaming Services\*MeinName*\OctoshapeClient.exe [2006-02-13 214648]

"PlayNC Launcher"=F:\spiele\ncsoft\launcher\NCLauncher.exe [2009-04-19 38136]

"EA Core"=C:\Programme\Electronic Arts\EADM\Core.exe [2009-02-06 3325952]

"SUPERAntiSpyware"=C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-04-28 1830128]

"Skype"=C:\Programme\Skype\Phone\Skype.exe [2009-04-16 24264488]
 

C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart

Logitech Desktop Messenger.lnk - C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

Logitech SetPoint.lnk - C:\Programme\Logitech\SetPoint\SetPoint.exe

Microsoft Office.lnk - C:\Programme\Microsoft Office\Office10\OSA.EXE
 

C:\Dokumente und Einstellungen\*MeinName*\Startmenü\Programme\Autostart

ChkDisk.lnk - C:\WINDOWS\system32\rundll32.exe 
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]

C:\Programme\SUPERAntiSpyware\SASWINLO.dll [2008-12-22 356352]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Programme\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=323

"NoDriveAutoRun"=67108863

"NoDrives"=0
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"HonorAutoRunSetting"=

"NoDriveAutoRun"=

"NoDriveTypeAutoRun"=

"NoDrives"=
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"

"F:\Spiele\Valve\Steam\Steam.exe"="F:\Spiele\Valve\Steam\Steam.exe:*:Enabled:Steam"

"F:\Spiele\Valve\Steam\SteamApps\raketenmann81\counter-strike source\hl2.exe"="F:\Spiele\Valve\Steam\SteamApps\raketenmann81\counter-strike source\hl2.exe:*:Enabled:hl2"

"C:\Programme\Sony\Station\Launchpad\LaunchPad.exe"="C:\Programme\Sony\Station\Launchpad\LaunchPad.exe:*:Enabled:LaunchPad"

"C:\Program Files\WS_FTP Pro\ftp95pro.exe"="C:\Program Files\WS_FTP Pro\ftp95pro.exe:*:Enabled:WS_FTP 95"

"C:\Programme\BitTorrent\btdownloadgui.exe"="C:\Programme\BitTorrent\btdownloadgui.exe:*:Enabled:btdownloadgui"

"C:\Programme\Java\jdk1.5.0_05\bin\java.exe"="C:\Programme\Java\jdk1.5.0_05\bin\java.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"

"F:\Spiele\Valve\Steam\SteamApps\raketenmann81\half-life 2\hl2.exe"="F:\Spiele\Valve\Steam\SteamApps\raketenmann81\half-life 2\hl2.exe:*:Enabled:hl2"

"F:\Spiele\Gamespy\Aphex.exe"="F:\Spiele\Gamespy\Aphex.exe:*:Enabled:GameSpy Arcade"

"C:\WINDOWS\system32\javaw.exe"="C:\WINDOWS\system32\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"

"C:\Programme\Microsoft ActiveSync\rapimgr.exe"="C:\Programme\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"

"C:\Programme\Microsoft ActiveSync\wcescomm.exe"="C:\Programme\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"

"C:\Programme\Microsoft ActiveSync\WCESMgr.exe"="C:\Programme\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

"C:\Dokumente und Einstellungen\*MeinName*\Eigene Dateien\Xfire\Xfire.exe"="C:\Dokumente und Einstellungen\*MeinName*\Eigene Dateien\Xfire\Xfire.exe:*:Enabled:Xfire"

"F:\Programme\Firefox\firefox.exe"="F:\Programme\Firefox\firefox.exe:*:Enabled:Firefox"

"F:\Programme\Trillian\trillian.exe"="F:\Programme\Trillian\trillian.exe:*:Enabled:Trillian"

"E:\Projekte\EMP3\MusicMiner_23-7\MusicMiner_23-7\MusicMiner_23-7\MusicMiner\bin\Release\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_23-7\MusicMiner_23-7\MusicMiner_23-7\MusicMiner\bin\Release\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"E:\Projekte\EMP3\MusicMiner_24-7\MusicMiner_24-7\MusicMiner\bin\Release\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_24-7\MusicMiner_24-7\MusicMiner\bin\Release\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"E:\Projekte\EMP3\MusicMiner_25-7b\MusicMiner_25-7\MusicMiner\bin\Release\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_25-7b\MusicMiner_25-7\MusicMiner\bin\Release\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"E:\Projekte\EMP3\MusicMiner_26-7\MusicMiner_26-7\MusicMiner\bin\Release\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_26-7\MusicMiner_26-7\MusicMiner\bin\Release\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"E:\Projekte\EMP3\MusicMiner_28-7\MusicMiner_28-7\MusicMiner\bin\Release\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_28-7\MusicMiner_28-7\MusicMiner\bin\Release\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"E:\Projekte\EMP3\MusicMiner_03-8\MusicMiner\bin\Debug\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_03-8\MusicMiner\bin\Debug\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"E:\Projekte\EMP3\MusicMiner_08-8v2\MusicMiner\bin\Debug\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_08-8v2\MusicMiner\bin\Debug\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"E:\Projekte\EMP3\MusicMiner_13-8\MusicMiner_13-8\MusicMiner\bin\Release\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_13-8\MusicMiner_13-8\MusicMiner\bin\Release\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"E:\Projekte\EMP3\MusicMiner_13-8v2\MusicMiner_13-8v2\MusicMiner\bin\Release\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_13-8v2\MusicMiner_13-8v2\MusicMiner\bin\Release\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"E:\Projekte\EMP3\MusicMiner_15-8\MusicMiner\bin\Release\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_15-8\MusicMiner\bin\Release\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"E:\Projekte\EMP3\MusicMiner_23-8\MusicMiner\bin\Debug\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_23-8\MusicMiner\bin\Debug\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"E:\Projekte\EMP3\MusicMiner_28-8\MusicMiner\bin\Debug\MusicMiner.vshost.exe"="E:\Projekte\EMP3\MusicMiner_28-8\MusicMiner\bin\Debug\MusicMiner.vshost.exe:*:Enabled:vshost.exe"

"F:\Spiele\Valve\Steam\SteamApps\raketenmann81\dark messiah multiplayer open beta\mm.exe"="F:\Spiele\Valve\Steam\SteamApps\raketenmann81\dark messiah multiplayer open beta\mm.exe:*:Enabled:mm"

"E:\Projekte\battleworlds\work\programm\current\battleworld.exe"="E:\Projekte\battleworlds\work\programm\current\battleworld.exe:*:Enabled:battleworld"

"F:\Spiele\World of Warcraft\BackgroundDownloader.exe"="F:\Spiele\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"

"C:\Programme\Octoshape Streaming Services\*MeinName*\OctoshapeClient.exe"="C:\Programme\Octoshape Streaming Services\*MeinName*\OctoshapeClient.exe:*:Enabled:OctoshapeClient"

"C:\Programme\Microsoft XNA\XNA Game Studio\v2.0\Bin\XnaTrans.exe"="C:\Programme\Microsoft XNA\XNA Game Studio\v2.0\Bin\XnaTrans.exe:LocalSubNet:Enabled:XNA Game Studio 2.0 Transport"

"C:\Programme\Microsoft XNA\XNA Game Studio\v2.0\Bin\XnaLiveProxy.exe"="C:\Programme\Microsoft XNA\XNA Game Studio\v2.0\Bin\XnaLiveProxy.exe:LocalSubNet:Enabled:XNA Framework Games for Windows – LIVE"

"F:\Spiele\Valve\Steam\SteamApps\raketenmann81\team fortress 2\hl2.exe"="F:\Spiele\Valve\Steam\SteamApps\raketenmann81\team fortress 2\hl2.exe:*:Enabled:hl2"

"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"

"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"

"E:\Projekte\kAGE\build\debug\kAGE.exe"="E:\Projekte\kAGE\build\debug\kAGE.exe:*:Enabled:kAGE"

"E:\Projekte\kAGE\build\release\kAGE.exe"="E:\Projekte\kAGE\build\release\kAGE.exe:*:Enabled:kAGE"

"G:\Spiele\Mass Effect\Binaries\MassEffect.exe"="G:\Spiele\Mass Effect\Binaries\MassEffect.exe:*:Enabled:Mass Effect Game"

"G:\Spiele\Mass Effect\MassEffectLauncher.exe"="G:\Spiele\Mass Effect\MassEffectLauncher.exe:*:Enabled:Mass Effect Launcher"

"C:\Programme\Gemeinsame Dateien\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe"="C:\Programme\Gemeinsame Dateien\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe:*:Enabled:Adobe Version Cue CS3 Server"

"C:\Programme\Electronic Arts\EADM\Core.exe"="C:\Programme\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"

"G:\Spiele\Demos\Sacred2\system\s2gs.exe"="G:\Spiele\Demos\Sacred2\system\s2gs.exe:*:Enabled:Sacred 2 Game Server"

"G:\Spiele\Demos\Sacred2\system\sacred2.exe"="G:\Spiele\Demos\Sacred2\system\sacred2.exe:*:Enabled:Sacred 2"

"F:\Programme\Media Server\MediaServer.exe"="F:\Programme\Media Server\MediaServer.exe:*:Enabled:TVersity Media Server"

"G:\bout_release\kAGE.exe"="G:\bout_release\kAGE.exe:*:Enabled:kAGE"

"F:\Spiele\World of Warcraft\Launcher.exe"="F:\Spiele\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"

"C:\Programme\Bonjour\mDNSResponder.exe"="C:\Programme\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"

"F:\Spiele\Valve\Steam\SteamApps\common\tom clancy's h.a.w.x - demo\HAWX.exe"="F:\Spiele\Valve\Steam\SteamApps\common\tom clancy's h.a.w.x - demo\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X - Demo"

"F:\Programme\Curse\CurseClient.exe"="F:\Programme\Curse\CurseClient.exe:*:Enabled:Curse Client"

"G:\Spiele\Battleforge\Bootstrapper.exe"="G:\Spiele\Battleforge\Bootstrapper.exe:*:Enabled:BattleForge™ Launcher"

"G:\Spiele\Battleforge\BattleForge.exe"="G:\Spiele\Battleforge\BattleForge.exe:*:Enabled:BattleForge™"

"C:\Programme\iTunes\iTunes.exe"="C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes"

"F:\Programme\Skype\Skype.exe"="F:\Programme\Skype\Skype.exe:*:Enabled:Skype"

"F:\Spiele\Valve\Steam\SteamApps\common\left 4 dead\left4dead.exe"="F:\Spiele\Valve\Steam\SteamApps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead"

"C:\Programme\Skype\Phone\Skype.exe"="C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype"
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Programme\Microsoft ActiveSync\rapimgr.exe"="C:\Programme\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"

"C:\Programme\Microsoft ActiveSync\wcescomm.exe"="C:\Programme\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"

"C:\Programme\Microsoft ActiveSync\WCESMgr.exe"="C:\Programme\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
 

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\D]

shell\AutoRun\command - D:\setup.exe
 
 

======List of files/folders created in the last 1 months======
 

2009-05-10 07:45:59 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$

2009-05-10 07:06:17 ----D---- C:\Dokumente und Einstellungen\*MeinName*\Anwendungsdaten\skypePM

2009-05-10 07:06:06 ----D---- C:\Programme\Gemeinsame Dateien\Skype

2009-05-10 07:06:04 ----RD---- C:\Programme\Skype

2009-05-10 06:58:51 ----A---- C:\WINDOWS\system32\javaws.exe

2009-05-10 06:58:51 ----A---- C:\WINDOWS\system32\javaw.exe

2009-05-10 06:58:51 ----A---- C:\WINDOWS\system32\java.exe

2009-05-10 06:58:51 ----A---- C:\WINDOWS\system32\deploytk.dll

2009-05-10 06:57:17 ----D---- C:\Dokumente und Einstellungen\*MeinName*\Anwendungsdaten\Foxit

2009-05-10 06:53:06 ----A---- C:\WINDOWS\OEWABLog.txt

2009-05-10 06:50:04 ----D---- C:\WINDOWS\Prefetch

2009-05-10 06:46:54 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$

2009-05-10 06:46:27 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$

2009-05-10 06:46:06 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$

2009-05-10 06:45:44 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$

2009-05-10 06:45:18 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$

2009-05-10 06:44:54 ----HDC---- C:\WINDOWS\$NtUninstallKB958690$

2009-05-10 06:44:30 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$

2009-05-10 06:44:07 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$

2009-05-10 06:43:46 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$

2009-05-10 06:43:25 ----HDC---- C:\WINDOWS\$NtUninstallKB957095$

2009-05-10 06:43:08 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$

2009-05-10 06:42:46 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$

2009-05-10 06:42:25 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$

2009-05-10 06:41:51 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$

2009-05-10 06:41:26 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$

2009-05-10 06:41:06 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$

2009-05-10 06:40:45 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$

2009-05-10 06:40:20 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$

2009-05-10 06:40:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$

2009-05-10 06:39:40 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$

2009-05-10 06:39:16 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$

2009-05-10 06:38:51 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$

2009-05-10 06:38:30 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$

2009-05-10 06:38:10 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$

2009-05-10 06:37:48 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$

2009-05-10 06:37:24 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$

2009-05-10 06:37:04 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$

2009-05-10 06:36:43 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$

2009-05-10 06:36:24 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$

2009-05-10 06:35:52 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$

2009-05-10 06:34:02 ----A---- C:\WINDOWS\setuplog.txt

2009-05-10 06:33:30 ----N---- C:\WINDOWS\system32\bitsprx4.dll

2009-05-10 06:33:30 ----N---- C:\WINDOWS\system32\azroles.dll

2009-05-10 06:33:30 ----N---- C:\WINDOWS\system32\ativvaxx.dll

2009-05-10 06:33:30 ----N---- C:\WINDOWS\system32\ativtmxx.dll

2009-05-10 06:33:30 ----N---- C:\WINDOWS\system32\ati3duag.dll

2009-05-10 06:33:30 ----N---- C:\WINDOWS\system32\ati3d1ag.dll

2009-05-10 06:33:30 ----N---- C:\WINDOWS\system32\ati2dvag.dll

2009-05-10 06:33:30 ----N---- C:\WINDOWS\system32\ati2dvaa.dll

2009-05-10 06:33:30 ----N---- C:\WINDOWS\system32\ati2cqag.dll

2009-05-10 06:33:30 ----N---- C:\WINDOWS\system32\aaclient.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\kbdbhc.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\hsfcisp2.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\eapsvc.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\eapqec.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\eappprxy.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\eapphost.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\eappgnui.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\eappcfg.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\eapp3hst.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\eapolqec.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\dot3ui.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\dot3svc.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\dot3msm.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\dot3dlg.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\dot3cfg.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\dot3api.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\dimsroam.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\dimsntfy.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\dhcpqec.dll

2009-05-10 06:33:29 ----N---- C:\WINDOWS\system32\credssp.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\setupn.exe

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\s3gnb.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\rhttpaa.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\rasqec.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\qutil.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\qcliprov.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\qagentrt.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\qagent.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\onex.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\napstat.exe

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\napmontr.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\napipsec.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\mtxparhd.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\msshavmsg.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\mssha.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\mmcperf.exe

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\mmcex.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\mdmxsdk.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\l2gpstore.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\kmsvc.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\kbdpash.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\kbdnepr.dll

2009-05-10 06:33:28 ----N---- C:\WINDOWS\system32\kbdiultn.dll

2009-05-10 06:33:27 ----N---- C:\WINDOWS\system32\tspkg.dll

2009-05-10 06:33:27 ----N---- C:\WINDOWS\system32\tsgqec.dll

2009-05-10 06:33:27 ----N---- C:\WINDOWS\system32\slrundll.exe

2009-05-10 06:33:26 ----N---- C:\WINDOWS\system32\wlanapi.dll

2009-05-10 06:33:26 ----D---- C:\WINDOWS\system32\de

2009-05-10 06:33:26 ----D---- C:\WINDOWS\l2schemas

2009-05-10 06:33:25 ----D---- C:\WINDOWS\system32\bits

2009-05-10 06:32:40 ----D---- C:\WINDOWS\ServicePackFiles

2009-05-10 06:31:14 ----A---- C:\WINDOWS\imsins.BAK

2009-05-10 06:31:14 ----A---- C:\WINDOWS\002994_.tmp

2009-05-10 06:29:51 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$

2009-05-10 06:29:50 ----D---- C:\WINDOWS\EHome

2009-05-10 05:07:22 ----SHD---- C:\RECYCLER

2009-05-10 03:55:27 ----D---- C:\WINDOWS\temp

2009-05-10 03:55:26 ----A---- C:\ComboFix.txt

2009-05-10 03:37:34 ----A---- C:\Boot.bak

2009-05-10 03:37:32 ----RASHD---- C:\cmdcons

2009-05-10 03:34:35 ----A---- C:\WINDOWS\zip.exe

2009-05-10 03:34:35 ----A---- C:\WINDOWS\vFind.exe

2009-05-10 03:34:35 ----A---- C:\WINDOWS\SWXCACLS.exe

2009-05-10 03:34:35 ----A---- C:\WINDOWS\SWSC.exe

2009-05-10 03:34:35 ----A---- C:\WINDOWS\SWREG.exe

2009-05-10 03:34:35 ----A---- C:\WINDOWS\sed.exe

2009-05-10 03:34:35 ----A---- C:\WINDOWS\NIRCMD.exe

2009-05-10 03:34:35 ----A---- C:\WINDOWS\grep.exe

2009-05-08 19:29:19 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com

2009-05-08 19:29:14 ----D---- C:\Programme\SUPERAntiSpyware

2009-05-08 19:29:14 ----D---- C:\Dokumente und Einstellungen\*MeinName*\Anwendungsdaten\SUPERAntiSpyware.com

2009-05-08 18:41:47 ----D---- C:\cf

2009-05-08 18:40:12 ----D---- C:\WINDOWS\ERDNT

2009-05-08 18:40:11 ----D---- C:\Qoobox

2009-05-08 17:57:45 ----D---- C:\rsit

2009-05-03 13:13:16 ----A---- C:\WINDOWS\esasvn.txt

2009-05-02 11:17:06 ----D---- C:\Programme\CCleaner

2009-05-02 09:17:23 ----D---- C:\Dokumente und Einstellungen\*MeinName*\Anwendungsdaten\Malwarebytes

2009-05-02 09:17:19 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

2009-05-02 09:17:18 ----D---- C:\Programme\Malwarebytes' Anti-Malware

2009-05-02 09:07:01 ----D---- C:\Programme\HijackThis

2009-04-19 20:45:01 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$

2009-04-19 20:44:52 ----HDC---- C:\WINDOWS\$NtUninstallKB961373_0$

2009-04-19 20:43:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$

2009-04-19 20:42:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$

2009-04-19 20:42:42 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$

2009-04-19 20:42:30 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$

2009-04-14 18:53:57 ----D---- C:\Dokumente und Einstellungen\*MeinName*\Anwendungsdaten\Braid

RSIT letzter Teil

Code:

======List of files/folders modified in the last 1 months======
 

2009-05-10 10:52:02 ----D---- C:\Dokumente und Einstellungen\*MeinName*\Anwendungsdaten\Skype

2009-05-10 10:22:07 ----D---- C:\Programme\Mozilla Firefox

2009-05-10 10:21:41 ----RD---- C:\Programme

2009-05-10 10:19:17 ----D---- C:\WINDOWS

2009-05-10 10:14:37 ----A---- C:\WINDOWS\SchedLgU.Txt

2009-05-10 07:46:02 ----HD---- C:\WINDOWS\inf

2009-05-10 07:45:59 ----D---- C:\WINDOWS\WinSxS

2009-05-10 07:45:59 ----D---- C:\WINDOWS\system32

2009-05-10 07:06:10 ----SHD---- C:\WINDOWS\Installer

2009-05-10 07:06:06 ----D---- C:\Programme\Gemeinsame Dateien

2009-05-10 07:06:04 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype

2009-05-10 06:58:39 ----D---- C:\Programme\Java

2009-05-10 06:51:56 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

2009-05-10 06:50:50 ----D---- C:\WINDOWS\Debug

2009-05-10 06:50:33 ----D---- C:\WINDOWS\system32\CatRoot2

2009-05-10 06:49:31 ----D---- C:\WINDOWS\system32\wbem

2009-05-10 06:49:31 ----D---- C:\WINDOWS\system32\Setup

2009-05-10 06:49:31 ----D---- C:\WINDOWS\AppPatch

2009-05-10 06:49:30 ----RSD---- C:\WINDOWS\Fonts

2009-05-10 06:49:28 ----D---- C:\WINDOWS\system32\drivers

2009-05-10 06:49:01 ----D---- C:\WINDOWS\security

2009-05-10 06:47:15 ----RSHDC---- C:\WINDOWS\system32\dllcache

2009-05-10 06:47:15 ----D---- C:\WINDOWS\system32\CatRoot

2009-05-10 06:36:58 ----D---- C:\Programme\Messenger

2009-05-10 06:33:31 ----D---- C:\WINDOWS\network diagnostic

2009-05-10 06:33:31 ----D---- C:\WINDOWS\ime

2009-05-10 06:33:31 ----D---- C:\WINDOWS\Help

2009-05-10 06:33:26 ----D---- C:\WINDOWS\system32\usmt

2009-05-10 06:33:26 ----D---- C:\WINDOWS\system32\de-de

2009-05-10 06:33:25 ----D---- C:\WINDOWS\PeerNet

2009-05-10 06:33:25 ----D---- C:\Programme\Movie Maker

2009-05-10 06:32:39 ----D---- C:\WINDOWS\system32\Restore

2009-05-10 06:32:39 ----D---- C:\WINDOWS\system32\npp

2009-05-10 06:32:39 ----D---- C:\WINDOWS\msagent

2009-05-10 06:32:38 ----D---- C:\WINDOWS\srchasst

2009-05-10 06:32:38 ----D---- C:\Programme\NetMeeting

2009-05-10 06:32:37 ----D---- C:\WINDOWS\system32\Com

2009-05-10 06:32:37 ----D---- C:\Programme\Windows NT

2009-05-10 06:32:37 ----D---- C:\Programme\Windows Media Player

2009-05-10 06:32:37 ----D---- C:\Programme\Outlook Express

2009-05-10 06:32:36 ----D---- C:\Programme\Gemeinsame Dateien\System

2009-05-10 06:32:30 ----D---- C:\WINDOWS\system32\oobe

2009-05-10 06:32:30 ----D---- C:\WINDOWS\system

2009-05-10 04:35:09 ----SD---- C:\WINDOWS\Tasks

2009-05-10 03:45:53 ----A---- C:\WINDOWS\system.ini

2009-05-10 03:43:11 ----D---- C:\WINDOWS\system32\config

2009-05-10 03:37:34 ----RASH---- C:\boot.ini

2009-05-08 19:28:50 ----D---- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard

2009-05-03 11:33:05 ----D---- C:\Dokumente und Einstellungen

2009-05-02 11:21:29 ----D---- C:\WINDOWS\Minidump

2009-04-26 13:48:36 ----D---- C:\Dokumente und Einstellungen\*MeinName*\Anwendungsdaten\OpenOffice.org2

2009-04-21 19:33:15 ----D---- C:\Programme\Microsoft ActiveSync

2009-04-19 20:44:30 ----D---- C:\Programme\Internet Explorer

2009-04-19 20:43:09 ----HD---- C:\WINDOWS\$hf_mig$

2009-04-14 18:53:53 ----D---- C:\WINDOWS\system32\DirectX
 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R1 AmdK8;AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 36352]

R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2005-12-22 5685]

R1 avgio;avgio; \??\F:\Programme\Avira\AntiVir PersonalEdition Classic\avgio.sys []

R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2008-11-11 75072]

R1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]

R1 SASDIFSV;SASDIFSV; \??\C:\Programme\SUPERAntiSpyware\SASDIFSV.SYS []

R1 SASKUTIL;SASKUTIL; \??\C:\Programme\SUPERAntiSpyware\SASKUTIL.sys []

R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]

R1 WS2IFSL;Windows Socket 2.0 Non-IFS-Dienstanbieter-Unterstützungsumgebung; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-04 12032]

R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2008-10-02 278984]

R2 enodpl;enodpl; C:\WINDOWS\System32\drivers\enodpl.sys [2003-03-02 7552]

R2 irda;IrDA-Protokoll; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]

R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2006-05-19 18048]

R2 tandpl;tandpl; C:\WINDOWS\System32\drivers\tandpl.sys [2003-04-19 4736]

R3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys [2006-11-01 33280]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2009-03-19 23400]

R3 HDAudBus;Microsoft UAA-Bustreiber für High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]

R3 HidUsb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-07-10 4449280]

R3 irsir;Microsoft serieller Infrarottreiber; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]

R3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2004-12-10 24704]

R3 LHidUsbK;Logitech SetPoint USB Receiver device driver; C:\WINDOWS\System32\Drivers\LHidUsbK.Sys [2004-12-10 36480]

R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\System32\Drivers\LMouKE.sys [2004-12-10 68992]

R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-18 12288]

R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-11-12 6188320]

R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-03-22 52736]

R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-03-22 18944]

R3 Rasirda;WAN-Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]

R3 SASENUM;SASENUM; \??\C:\Programme\SUPERAntiSpyware\SASENUM.SYS []

R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]

R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]

R3 usbhub;Microsoft USB-Standardhubtreiber; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]

R3 usbohci;Miniporttreiber für Microsoft USB Open Host-Controller; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152]

S2 VPCAppSv;Virtual PC Application Services; C:\WINDOWS\system32\DRIVERS\VPCAppSv.sys [2002-05-21 10374]

S3 accwldrv;AccSys WiFi Protokoll; C:\WINDOWS\system32\DRIVERS\accwldrv.sys [2005-02-15 12032]

S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-11-17 2297664]

S3 Arp1394;1394-ARP-Clientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]

S3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\system32\ASNDIS5.SYS []

S3 Asymddayqnss;Asymddayqnss; C:\WINDOWS\system32\drivers\Asymddayqnss.sys []

S3 avgntflt;avgntflt; \??\F:\Programme\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []

S3 BthEnum;Bluetooth-Auflistungsdienst; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]

S3 BthPan;Bluetooth-Gerät (PAN); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]

S3 BTHPORT;Bluetooth-Porttreiber; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 273024]

S3 BTHUSB;USB-Treiber für Bluetooth-Funkgerät; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]

S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []

S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Programme\Lavalys\EVEREST Home Edition\kerneld.wnt []

S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []

S3 HidBth;Microsoft Bluetooth-HID-Miniport; C:\WINDOWS\system32\DRIVERS\hidbth.sys [2008-04-14 25856]

S3 ISNDPM00;ISNDPM00; \??\C:\WINDOWS\system32\ISNDPM.sys []

S3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2004-12-10 13056]

S3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\System32\Drivers\L8042mou.sys [2004-12-10 52992]

S3 MODEMCSA;Unimodem-Datenstromfiltergerät; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]

S3 ms_mpu401;Microsoft MPU-401 MIDI UART-Treiber; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]

S3 Mtlmnt5;Mtlmnt5; C:\WINDOWS\system32\DRIVERS\Mtlmnt5.sys [2004-08-03 126686]

S3 Mtlstrm;Mtlstrm; C:\WINDOWS\system32\DRIVERS\Mtlstrm.sys [2004-08-03 1309184]

S3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]

S3 NIC1394;1394-Netzwerktreiber; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]

S3 NtMtlFax;NtMtlFax; C:\WINDOWS\system32\DRIVERS\NtMtlFax.sys [2004-08-03 180360]

S3 RFCOMM;Bluetooth-Gerät (RFCOMM-Protokoll-TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]

S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-04 5888]

S3 RT73;Belkin USB Network Adapter; C:\WINDOWS\system32\DRIVERS\rt73.sys [2005-08-02 232192]

S3 Slnt7554;USB Soft Modem Driver; C:\WINDOWS\system32\DRIVERS\slnt7554.sys [2004-08-03 129535]

S3 SlNtHal;SlNtHal; C:\WINDOWS\system32\DRIVERS\Slnthal.sys [2004-08-03 95424]

S3 SlWdmSup;SlWdmSup; C:\WINDOWS\system32\DRIVERS\SlWdmSup.sys [2004-08-03 13240]

S3 SONYPVU1;Sony USB-Filtertreiber (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]

S3 usb_rndisx;USB-RNDIS-Adapter; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2008-04-14 12800]

S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-03-06 36864]

S3 usbaudio;USB-Audiotreiber (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]

S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

S3 VPCNetS2;Virtual Machine Network Services Driver; C:\WINDOWS\system32\DRIVERS\VMNetSrv.sys [2005-01-10 45056]

S3 W8100PCI;ASUS 802.11b/g Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\mrv8k51.sys [2003-12-24 256512]

S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R2 AccWLSvc;AccSys WiFi Server; C:\Programme\Gemeinsame Dateien\AccSys\AccWLSvc.exe [2005-03-15 180224]

R2 AntiVirScheduler;Avira AntiVir Personal – Free Antivirus Planer; F:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-24 68865]

R2 Apple Mobile Device;Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-03-06 132424]

R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

R2 DXDebug;DirectX Debug Service; C:\Programme\Gemeinsame Dateien\Microsoft Shared\DirectX Extensions\DXDebugService.exe [2007-01-08 88272]

R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe [2006-03-30 143360]

R2 ForcewareWebInterface;Forceware Web Interface; C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2006-02-07 20543]

R2 Irmon;Infrarotüberwachung; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-05-10 152984]

R2 MDM;Machine Debug Manager; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe [2003-03-19 335872]

R2 nSvcIp;ForceWare IP service; C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2006-03-30 131131]

R2 nSvcLog;ForceWare user log service; C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2006-03-30 65599]

R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2008-11-12 163908]

R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2008-06-22 66872]

R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-08-28 654848]

R3 iPod Service;iPod-Dienst; C:\Programme\iPod\bin\iPodService.exe [2009-04-02 656168]

S3 Adobe Version Cue CS3;Adobe Version Cue CS3; C:\Programme\Gemeinsame Dateien\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe [2007-03-20 153792]

S3 AntiVirService;Avira AntiVir Personal – Free Antivirus Guard; F:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-24 151297]

S3 aspnet_state;ASP.NET-Zustandsdienst; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864]

S3 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]

S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256]

S3 TVersityMediaServer;TVersityMediaServer; F:\Programme\Media Server\MediaServer.exe [2008-10-24 827392]

S3 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576]

S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

S4 msvsmon80;Visual Studio 2005 Remote Debugger; F:\Programme\VS2005beta\Common7\IDE\Remote Debugger\x86\msvsmon.exe [2006-12-02 2805000]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880]
 

-----------------EOF-----------------

ComboFix log, erster Teil

Code:

ComboFix 09-05-11.08 - *MeinName* 12.05.2009 20:04.2 - NTFSx86

Microsoft Windows XP Home Edition  5.1.2600.3.1252.49.1031.18.3071.2353 [GMT 2:00]

ausgeführt von:: c:\dokumente und einstellungen\*MeinName*\Desktop\ComboFix.exe

Benutzte Befehlsschalter :: combofix.exe

AV: Avira AntiVir PersonalEdition *On-access scanning disabled* (Updated)

FW: ActiveArmor Firewall *enabled*

 * Neuer Wiederherstellungspunkt wurde erstellt

.
 

(((((((((((((((((((((((   Dateien erstellt von 2009-04-12 bis 2009-05-12  ))))))))))))))))))))))))))))))

.
 

2009-05-10 05:06 . 2009-05-10 05:06        56        ---ha-w        c:\windows\system32\ezsidmv.dat

2009-05-10 05:06 . 2009-05-10 07:16        --------        d-----w        c:\dokumente und einstellungen\*MeinName*\Anwendungsdaten\skypePM

2009-05-10 05:06 . 2009-05-10 05:06        --------        d-----w        c:\programme\Gemeinsame Dateien\Skype

2009-05-10 05:06 . 2009-05-10 05:06        --------        d-----r        c:\programme\Skype

2009-05-10 04:58 . 2009-05-10 04:58        410984        ----a-w        c:\windows\system32\deploytk.dll

2009-05-10 04:57 . 2009-05-10 04:57        --------        d-----w        c:\dokumente und einstellungen\*MeinName*\Anwendungsdaten\Foxit

2009-05-10 04:32 . 2008-04-14 05:52        4255        ------w        c:\windows\system32\drivers\adv01nt5.dll

2009-05-10 04:29 . 2009-05-10 04:29        --------        d-----w        c:\windows\EHome

2009-05-08 17:29 . 2009-05-08 17:29        --------        d-----w        c:\dokumente und einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com

2009-05-08 17:29 . 2009-05-08 17:29        --------        d-----w        c:\programme\SUPERAntiSpyware

2009-05-08 17:29 . 2009-05-08 17:29        --------        d-----w        c:\dokumente und einstellungen\*MeinName*\Anwendungsdaten\SUPERAntiSpyware.com

2009-05-08 16:41 . 2009-05-08 16:41        --------        d-----w        C:\cf

2009-05-08 15:57 . 2009-05-08 15:58        --------        d-----w        C:\rsit

2009-05-03 11:13 . 2009-05-03 11:13        61440        ----a-w        c:\windows\system32\drivers\mcfmfli.sys

2009-05-03 09:30 . 2005-01-23 06:12        --------        d--h--r        c:\dokumente und einstellungen\Administrator\Anwendungsdaten

2009-05-03 09:30 . 2005-01-23 06:12        --------        d--h--w        c:\dokumente und einstellungen\Administrator\Druckumgebung

2009-05-03 09:30 . 2005-01-23 06:12        --------        d-----w        c:\dokumente und einstellungen\Administrator\Favoriten

2009-05-03 09:30 . 2005-01-23 06:12        --------        d--h--w        c:\dokumente und einstellungen\Administrator\Lokale Einstellungen

2009-05-03 09:30 . 2005-01-23 06:12        --------        d--h--w        c:\dokumente und einstellungen\Administrator\Netzwerkumgebung

2009-05-03 09:30 . 2005-01-23 06:12        --------        d-----r        c:\dokumente und einstellungen\Administrator\Startmenü

2009-05-03 09:30 . 2005-01-22 23:19        --------        d--h--w        c:\dokumente und einstellungen\Administrator\Vorlagen

2009-05-03 09:30 . 2009-05-03 09:30        --------        d-----w        c:\dokumente und einstellungen\Administrator

2009-05-02 09:17 . 2009-05-02 09:17        --------        d-----w        c:\programme\CCleaner

2009-05-02 07:17 . 2009-05-02 07:17        --------        d-----w        c:\dokumente und einstellungen\*MeinName*\Anwendungsdaten\Malwarebytes

2009-05-02 07:17 . 2009-04-06 13:32        15504        ----a-w        c:\windows\system32\drivers\mbam.sys

2009-05-02 07:17 . 2009-04-06 13:32        38496        ----a-w        c:\windows\system32\drivers\mbamswissarmy.sys

2009-05-02 07:17 . 2009-05-02 07:17        --------        d-----w        c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes

2009-05-02 07:17 . 2009-05-02 07:17        --------        d-----w        c:\programme\Malwarebytes' Anti-Malware

2009-04-19 12:14 . 2009-04-19 15:12        --------        d-----w        c:\dokumente und einstellungen\*MeinName*\.gnubg

2009-04-19 11:33 . 2009-02-06 10:10        227840        -c----w        c:\windows\system32\dllcache\wmiprvse.exe

2009-04-19 11:33 . 2009-02-09 11:21        2191360        -c----w        c:\windows\system32\dllcache\ntoskrnl.exe

2009-04-19 11:33 . 2009-03-06 14:19        286720        -c----w        c:\windows\system32\dllcache\pdh.dll

2009-04-19 11:33 . 2009-02-09 11:21        111104        -c----w        c:\windows\system32\dllcache\services.exe

2009-04-19 11:33 . 2009-02-09 10:51        401408        -c----w        c:\windows\system32\dllcache\rpcss.dll

2009-04-19 11:33 . 2009-02-09 10:51        473600        -c----w        c:\windows\system32\dllcache\fastprox.dll

2009-04-19 11:33 . 2009-02-09 10:51        678400        -c----w        c:\windows\system32\dllcache\advapi32.dll

2009-04-19 11:33 . 2009-02-09 10:51        736768        -c----w        c:\windows\system32\dllcache\lsasrv.dll

2009-04-19 11:33 . 2009-02-09 10:51        453120        -c----w        c:\windows\system32\dllcache\wmiprvsd.dll

2009-04-19 11:33 . 2009-02-09 10:51        740352        -c----w        c:\windows\system32\dllcache\ntdll.dll

2009-04-19 11:33 . 2009-02-09 11:21        2147840        -c----w        c:\windows\system32\dllcache\ntkrnlmp.exe

2009-04-19 11:32 . 2009-02-09 11:21        2026496        -c----w        c:\windows\system32\dllcache\ntkrpamp.exe

2009-04-19 11:30 . 2008-04-21 21:13        217600        -c----w        c:\windows\system32\dllcache\wordpad.exe

2009-04-14 16:53 . 2009-04-14 16:55        --------        d-----w        c:\dokumente und einstellungen\*MeinName*\Anwendungsdaten\Braid
 

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-05-10 04:58 . 2005-08-10 09:05        --------        d-----w        c:\programme\Java

2009-05-10 04:54 . 2005-01-23 21:21        27128        ----a-w        c:\dokumente und einstellungen\*MeinName*\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT

2009-05-10 04:51 . 2004-08-04 12:00        97860        ----a-w        c:\windows\system32\perfc007.dat

2009-05-10 04:51 . 2004-08-04 12:00        490430        ----a-w        c:\windows\system32\perfh007.dat

2009-05-10 04:34 . 2005-01-22 23:22        76487        ----a-w        c:\windows\pchealth\helpctr\OfflineCache\index.dat

2009-05-08 17:28 . 2007-12-30 13:20        --------        d-----w        c:\programme\Gemeinsame Dateien\Wise Installation Wizard

2009-04-21 17:33 . 2006-01-04 15:17        --------        d-----w        c:\programme\Microsoft ActiveSync

2009-04-10 11:57 . 2009-04-10 11:57        --------        d-----w        c:\programme\iTunes

2009-04-10 11:57 . 2009-04-10 11:57        --------        d-----w        c:\programme\iPod

2009-04-10 11:57 . 2007-12-15 07:37        --------        d-----w        c:\programme\Gemeinsame Dateien\Apple

2009-03-24 11:34 . 2005-01-23 08:33        --------        d-----w        c:\programme\NVIDIA Corporation

2009-03-24 11:19 . 2007-12-30 13:20        --------        d-----w        c:\programme\AGEIA Technologies

2009-03-19 14:32 . 2008-01-29 10:01        23400        ----a-w        c:\windows\system32\drivers\GEARAspiWDM.sys

2009-03-18 19:07 . 2005-12-30 10:28        --------        d-----w        c:\programme\QuickTime

2009-03-18 18:58 . 2008-04-12 15:10        --------        d-----w        c:\programme\Safari

2009-03-14 09:58 . 2005-12-06 14:07        413696        ----a-w        c:\windows\system32\wrap_oal.dll

2009-03-14 09:58 . 2005-12-06 14:07        110592        ----a-w        c:\windows\system32\OpenAL32.dll

2009-03-07 09:46 . 2009-03-07 09:46        1340416        ----a-w        c:\windows\system32\ISTWL.dll

2009-03-06 14:19 . 2004-08-04 12:00        286720        ----a-w        c:\windows\system32\pdh.dll

2009-03-05 22:59 . 2009-03-18 19:03        1900544        ----a-w        c:\windows\system32\usbaaplrc.dll

2009-03-05 22:59 . 2007-12-15 07:38        36864        ----a-w        c:\windows\system32\drivers\usbaapl.sys

2009-03-03 00:03 . 2004-08-04 12:00        826368        ----a-w        c:\windows\system32\wininet.dll

2009-02-20 16:49 . 2004-08-04 12:00        78336        ----a-w        c:\windows\system32\ieencode.dll

.

Beim ComboFix-Log fehlt die Hälfte. :)

ciao, andreas

Hmm... der Rest des files ist 420599 Zeichen lang. Da ich in jeden Post nur 25k Zeichen einfügen kann, sind das 17 posts....
Soll ich das log vielleicht zippen und anhängen, verschicken oder nur einen bestimmten ausschnitt posten?

Gruß
Raketenmann

Edit 1

Zitat:

Zitat von john.doe (Beitrag 435476)

Beim ComboFix-Log fehlt die Hälfte. :)

ciao, andreas

Deswegen auch "Erster Teil" :-)

Lade es bei einem Filehoster hoch und poste den Link.

ciao, andreas