Trojaner-Board - Antimalware Doctor auf meinem PC; Forumsanleitung befolgt, jetzt k?

Also,

wie schon geschildert ging bei Schritt 1 das mit dem "cleanmgr" nicht so richtig.
Das andere Klappte.

2 klappte.

Nach dem durchführen von Schritt 3 ist der PC leicht hängen geblieben.
Musste ihn mit "Reset" neustarten.
Hab dann den Scan nochmal gemacht, da das alte Log weg war.

Beim 4ten Schritt hat er nur bei Drivers was gefunden..

Die Logs folgen:

Code:



GMER Logfile:
 

        Code:


        
GMER 1.0.15.15281 - hxxp://www.gmer.net

Rootkit scan 2010-08-31 15:30:08

Windows 5.1.2600 Service Pack 3

Running: 5chgke1u.exe; Driver: C:\DOKUME~1\Fuchs\LOKALE~1\Temp\kwrcypow.sys
 
 

---- Kernel code sections - GMER 1.0.15 ----
 

.text   C:\WINXP\system32\DRIVERS\ati2mtag.sys                                                      section is writeable [0xB79DD000, 0x1C5D38, 0xE8000020]

.rsrc   C:\WINXP\System32\DRIVERS\RDPCDD.sys                                                        entry point in ".rsrc" section [0xBA5CEC14]
 

---- User code sections - GMER 1.0.15 ----
 

.text   C:\WINXP\System32\svchost.exe[1040] USER32.dll!GetCursorPos                                 7E37974E 5 Bytes  JMP 00DA000A 

.text   C:\WINXP\System32\svchost.exe[1040] ole32.dll!CoCreateInstance                              774D057E 3 Bytes  JMP 00D9000A 

.text   C:\WINXP\System32\svchost.exe[1040] ole32.dll!CoCreateInstance + 4                          774D0582 1 Byte  [89]

.text   C:\WINXP\Explorer.EXE[1664] kernel32.dll!CreateProcessInternalW                             7C81979C 5 Bytes  JMP 00B6874A 
 

---- User IAT/EAT - GMER 1.0.15 ----
 

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\Explorer.EXE [KERNEL32.dll!GetProcAddress]           [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]  [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress]    [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\Secur32.dll [KERNEL32.dll!GetProcAddress]   [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]     [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\USER32.dll [KERNEL32.dll!GetProcAddress]    [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress]    [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\ole32.dll [KERNEL32.dll!GetProcAddress]     [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]   [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]   [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress]  [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\WININET.dll [KERNEL32.dll!GetProcAddress]   [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress]   [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\USERENV.dll [KERNEL32.dll!GetProcAddress]   [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress]    [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\WS2HELP.dll [KERNEL32.dll!GetProcAddress]   [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\PSAPI.DLL [KERNEL32.dll!GetProcAddress]     [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)

IAT     C:\WINXP\Explorer.EXE[1664] @ C:\WINXP\system32\iphlpapi.dll [KERNEL32.dll!GetProcAddress]  [5CF07774] C:\WINXP\system32\ShimEng.dll (Shim Engine DLL/Microsoft Corporation)
 

---- Devices - GMER 1.0.15 ----
 

Device   -> \Driver\atapi \Device\Harddisk0\DR0                                                     89438EC5
 

---- Files - GMER 1.0.15 ----
 

File    C:\WINXP\System32\DRIVERS\RDPCDD.sys                                                        suspicious modification

File    C:\WINXP\system32\drivers\atapi.sys                                                         suspicious modification
 

---- EOF - GMER 1.0.15 ----

 
--- --- ---

Code:



ROOTREPEAL (c) AD, 2007-2009

==================================================

Scan Start Time:                2010/08/31 16:35

Program Version:                Version 1.3.5.0

Windows Version:                Windows XP SP3

==================================================
 

Drivers

-------------------

Name: ACPI.sys

Image Path: ACPI.sys

Address: 0xB9F78000        Size: 188800        File Visible: -        Signed: -

Status: -
 

Name: ACPI_HAL

Image Path: \Driver\ACPI_HAL

Address: 0x804D7000        Size: 2154496        File Visible: -        Signed: -

Status: -
 

Name: afd.sys

Image Path: C:\WINXP\System32\drivers\afd.sys

Address: 0xAADBE000        Size: 138496        File Visible: -        Signed: -

Status: -
 

Name: atapi.sys

Image Path: atapi.sys

Address: 0xB9F0A000        Size: 96512        File Visible: -        Signed: -

Status: -
 

Name: ati2cqag.dll

Image Path: C:\WINXP\System32\ati2cqag.dll

Address: 0xBF065000        Size: 626688        File Visible: -        Signed: -

Status: -
 

Name: ati2dvag.dll

Image Path: C:\WINXP\System32\ati2dvag.dll

Address: 0xBF012000        Size: 339968        File Visible: -        Signed: -

Status: -
 

Name: ati2mtag.sys

Image Path: C:\WINXP\system32\DRIVERS\ati2mtag.sys

Address: 0xB79DC000        Size: 3891200        File Visible: -        Signed: -

Status: -
 

Name: ati3duag.dll

Image Path: C:\WINXP\System32\ati3duag.dll

Address: 0xBF1CD000        Size: 3821568        File Visible: -        Signed: -

Status: -
 

Name: atikvmag.dll

Image Path: C:\WINXP\System32\atikvmag.dll

Address: 0xBF0FE000        Size: 540672        File Visible: -        Signed: -

Status: -
 

Name: atiok3x2.dll

Image Path: C:\WINXP\System32\atiok3x2.dll

Address: 0xBF182000        Size: 307200        File Visible: -        Signed: -

Status: -
 

Name: ativvaxx.dll

Image Path: C:\WINXP\System32\ativvaxx.dll

Address: 0xBF572000        Size: 2674688        File Visible: -        Signed: -

Status: -
 

Name: audstub.sys

Image Path: C:\WINXP\system32\DRIVERS\audstub.sys

Address: 0xBA6FA000        Size: 3072        File Visible: -        Signed: -

Status: -
 

Name: avgldx86.sys

Image Path: C:\WINXP\System32\Drivers\avgldx86.sys

Address: 0xAACEF000        Size: 209664        File Visible: -        Signed: -

Status: -
 

Name: avgmfx86.sys

Image Path: C:\WINXP\System32\Drivers\avgmfx86.sys

Address: 0xBA478000        Size: 22848        File Visible: -        Signed: -

Status: -
 

Name: avgtdix.sys

Image Path: C:\WINXP\System32\Drivers\avgtdix.sys

Address: 0xAAE2E000        Size: 236288        File Visible: -        Signed: -

Status: -
 

Name: Beep.SYS

Image Path: C:\WINXP\System32\Drivers\Beep.SYS

Address: 0xBA5C8000        Size: 4224        File Visible: -        Signed: -

Status: -
 

Name: BOOTVID.dll

Image Path: C:\WINXP\system32\BOOTVID.dll

Address: 0xBA4B8000        Size: 12288        File Visible: -        Signed: -

Status: -
 

Name: Cdfs.SYS

Image Path: C:\WINXP\System32\Drivers\Cdfs.SYS

Address: 0xB74BA000        Size: 63744        File Visible: -        Signed: -

Status: -
 

Name: cdrom.sys

Image Path: C:\WINXP\system32\DRIVERS\cdrom.sys

Address: 0xBA1D8000        Size: 62976        File Visible: -        Signed: -

Status: -
 

Name: CLASSPNP.SYS

Image Path: C:\WINXP\system32\DRIVERS\CLASSPNP.SYS

Address: 0xBA0E8000        Size: 53248        File Visible: -        Signed: -

Status: -
 

Name: disk.sys

Image Path: disk.sys

Address: 0xBA0D8000        Size: 36352        File Visible: -        Signed: -

Status: -
 

Name: dmio.sys

Image Path: dmio.sys

Address: 0xB9F22000        Size: 154112        File Visible: -        Signed: -

Status: -
 

Name: dmload.sys

Image Path: dmload.sys

Address: 0xBA5AC000        Size: 5888        File Visible: -        Signed: -

Status: -
 

Name: drmk.sys

Image Path: C:\WINXP\system32\drivers\drmk.sys

Address: 0xBA2B8000        Size: 61440        File Visible: -        Signed: -

Status: -
 

Name: Dxapi.sys

Image Path: C:\WINXP\System32\drivers\Dxapi.sys

Address: 0xAAF3C000        Size: 12288        File Visible: -        Signed: -

Status: -
 

Name: dxg.sys

Image Path: C:\WINXP\System32\drivers\dxg.sys

Address: 0xBF000000        Size: 73728        File Visible: -        Signed: -

Status: -
 

Name: dxgthk.sys

Image Path: C:\WINXP\System32\drivers\dxgthk.sys

Address: 0xBA761000        Size: 4096        File Visible: -        Signed: -

Status: -
 

Name: Fips.SYS

Image Path: C:\WINXP\System32\Drivers\Fips.SYS

Address: 0xBA2F8000        Size: 44672        File Visible: -        Signed: -

Status: -
 

Name: fltMgr.sys

Image Path: fltMgr.sys

Address: 0xB9EEA000        Size: 129792        File Visible: -        Signed: -

Status: -
 

Name: Fs_Rec.SYS

Image Path: C:\WINXP\System32\Drivers\Fs_Rec.SYS

Address: 0xBA5C6000        Size: 7936        File Visible: -        Signed: -

Status: -
 

Name: ftdisk.sys

Image Path: ftdisk.sys

Address: 0xB9F48000        Size: 126336        File Visible: -        Signed: -

Status: -
 

Name: GEARAspiWDM.sys

Image Path: C:\WINXP\system32\DRIVERS\GEARAspiWDM.sys

Address: 0xBA400000        Size: 21120        File Visible: -        Signed: -

Status: -
 

Name: hal.dll

Image Path: C:\WINXP\system32\hal.dll

Address: 0x806E5000        Size: 134400        File Visible: -        Signed: -

Status: -
 

Name: HDAudBus.sys

Image Path: C:\WINXP\system32\DRIVERS\HDAudBus.sys

Address: 0xB7959000        Size: 163840        File Visible: -        Signed: -

Status: -
 

Name: HIDCLASS.SYS

Image Path: C:\WINXP\system32\DRIVERS\HIDCLASS.SYS

Address: 0xBA2C8000        Size: 36864        File Visible: -        Signed: -

Status: -
 

Name: HIDPARSE.SYS

Image Path: C:\WINXP\system32\DRIVERS\HIDPARSE.SYS

Address: 0xBA458000        Size: 28672        File Visible: -        Signed: -

Status: -
 

Name: hidusb.sys

Image Path: C:\WINXP\system32\DRIVERS\hidusb.sys

Address: 0xBA554000        Size: 10368        File Visible: -        Signed: -

Status: -
 

Name: HTTP.sys

Image Path: C:\WINXP\System32\Drivers\HTTP.sys

Address: 0xA508C000        Size: 264832        File Visible: -        Signed: -

Status: -
 

Name: i8042prt.sys

Image Path: C:\WINXP\system32\DRIVERS\i8042prt.sys

Address: 0xBA208000        Size: 52992        File Visible: -        Signed: -

Status: -
 

Name: imapi.sys

Image Path: C:\WINXP\system32\DRIVERS\imapi.sys

Address: 0xBA1C8000        Size: 42112        File Visible: -        Signed: -

Status: -
 

Name: ipnat.sys

Image Path: C:\WINXP\system32\DRIVERS\ipnat.sys

Address: 0xAAE08000        Size: 152832        File Visible: -        Signed: -

Status: -
 

Name: ipsec.sys

Image Path: C:\WINXP\system32\DRIVERS\ipsec.sys

Address: 0xAAEC1000        Size: 75264        File Visible: -        Signed: -

Status: -
 

Name: isapnp.sys

Image Path: isapnp.sys

Address: 0xBA0A8000        Size: 37632        File Visible: -        Signed: -

Status: -
 

Name: kbdclass.sys

Image Path: C:\WINXP\system32\DRIVERS\kbdclass.sys

Address: 0xBA408000        Size: 25216        File Visible: -        Signed: -

Status: -
 

Name: KDCOM.DLL

Image Path: C:\WINXP\system32\KDCOM.DLL

Address: 0xBA5A8000        Size: 8192        File Visible: -        Signed: -

Status: -
 

Name: ks.sys

Image Path: C:\WINXP\system32\DRIVERS\ks.sys

Address: 0xB7981000        Size: 143360        File Visible: -        Signed: -

Status: -
 

Name: KSecDD.sys

Image Path: KSecDD.sys

Address: 0xB9EC1000        Size: 92288        File Visible: -        Signed: -

Status: -
 

Name: mnmdd.SYS

Image Path: C:\WINXP\System32\Drivers\mnmdd.SYS

Address: 0xBA5CA000        Size: 4224        File Visible: -        Signed: -

Status: -
 

Name: mouclass.sys

Image Path: C:\WINXP\system32\DRIVERS\mouclass.sys

Address: 0xBA430000        Size: 23552        File Visible: -        Signed: -

Status: -
 

Name: mouhid.sys

Image Path: C:\WINXP\system32\DRIVERS\mouhid.sys

Address: 0xB78E9000        Size: 12288        File Visible: -        Signed: -

Status: -
 

Name: MountMgr.sys

Image Path: MountMgr.sys

Address: 0xBA0B8000        Size: 42368        File Visible: -        Signed: -

Status: -
 

Name: mrxdav.sys

Image Path: C:\WINXP\system32\DRIVERS\mrxdav.sys

Address: 0xA5A1A000        Size: 180608        File Visible: -        Signed: -

Status: -
 

Name: mrxsmb.sys

Image Path: C:\WINXP\system32\DRIVERS\mrxsmb.sys

Address: 0xAAD23000        Size: 456576        File Visible: -        Signed: -

Status: -
 

Name: Msfs.SYS

Image Path: C:\WINXP\System32\Drivers\Msfs.SYS

Address: 0xBA460000        Size: 19072        File Visible: -        Signed: -

Status: -
 

Name: msgpc.sys

Image Path: C:\WINXP\system32\DRIVERS\msgpc.sys

Address: 0xBA248000        Size: 35072        File Visible: -        Signed: -

Status: -
 

Name: mssmbios.sys

Image Path: C:\WINXP\system32\DRIVERS\mssmbios.sys

Address: 0xBA580000        Size: 15488        File Visible: -        Signed: -

Status: -
 

Name: Mup.sys

Image Path: Mup.sys

Address: 0xB9DDA000        Size: 105344        File Visible: -        Signed: -

Status: -
 

Name: NDIS.sys

Image Path: NDIS.sys

Address: 0xB9DF4000        Size: 182656        File Visible: -        Signed: -

Status: -
 

Name: ndistapi.sys

Image Path: C:\WINXP\system32\DRIVERS\ndistapi.sys

Address: 0xBA560000        Size: 10112        File Visible: -        Signed: -

Status: -
 

Name: ndisuio.sys

Image Path: C:\WINXP\system32\DRIVERS\ndisuio.sys

Address: 0xA5C03000        Size: 14592        File Visible: -        Signed: -

Status: -
 

Name: ndiswan.sys

Image Path: C:\WINXP\system32\DRIVERS\ndiswan.sys

Address: 0xB792E000        Size: 91520        File Visible: -        Signed: -

Status: -
 

Name: NDProxy.SYS

Image Path: C:\WINXP\System32\Drivers\NDProxy.SYS

Address: 0xBA278000        Size: 40576        File Visible: -        Signed: -

Status: -
 

Name: netbios.sys

Image Path: C:\WINXP\system32\DRIVERS\netbios.sys

Address: 0xBA2E8000        Size: 34688        File Visible: -        Signed: -

Status: -
 

Name: netbt.sys

Image Path: C:\WINXP\system32\DRIVERS\netbt.sys

Address: 0xAADE0000        Size: 162816        File Visible: -        Signed: -

Status: -
 

Name: Npfs.SYS

Image Path: C:\WINXP\System32\Drivers\Npfs.SYS

Address: 0xBA470000        Size: 30848        File Visible: -        Signed: -

Status: -
 

Name: Ntfs.sys

Image Path: Ntfs.sys

Address: 0xB9E21000        Size: 574976        File Visible: -        Signed: -

Status: -
 

Name: ntkrnlpa.exe

Image Path: C:\WINXP\system32\ntkrnlpa.exe

Address: 0x804D7000        Size: 2154496        File Visible: -        Signed: -

Status: -
 

Name: Null.SYS

Image Path: C:\WINXP\System32\Drivers\Null.SYS

Address: 0xBA689000        Size: 2944        File Visible: -        Signed: -

Status: -
 

Name: parport.sys

Image Path: C:\WINXP\system32\DRIVERS\parport.sys

Address: 0xB7945000        Size: 80384        File Visible: -        Signed: -

Status: -
 

Name: PartMgr.sys

Image Path: PartMgr.sys

Address: 0xBA330000        Size: 19712        File Visible: -        Signed: -

Status: -
 

Name: ParVdm.SYS

Image Path: C:\WINXP\System32\Drivers\ParVdm.SYS

Address: 0xBA660000        Size: 7040        File Visible: -        Signed: -

Status: -
 

Name: pci.sys

Image Path: pci.sys

Address: 0xB9F67000        Size: 68224        File Visible: -        Signed: -

Status: -
 

Name: pciide.sys

Image Path: pciide.sys

Address: 0xBA670000        Size: 3328        File Visible: -        Signed: -

Status: -
 

Name: PCIIDEX.SYS

Image Path: C:\WINXP\system32\DRIVERS\PCIIDEX.SYS

Address: 0xBA328000        Size: 28672        File Visible: -        Signed: -

Status: -
 

Name: PnpManager

Image Path: \Driver\PnpManager

Address: 0x804D7000        Size: 2154496        File Visible: -        Signed: -

Status: -
 

Name: portcls.sys

Image Path: C:\WINXP\system32\drivers\portcls.sys

Address: 0xAAF44000        Size: 147456        File Visible: -        Signed: -

Status: -
 

Name: processr.sys

Image Path: C:\WINXP\system32\DRIVERS\processr.sys

Address: 0xBA1B8000        Size: 39936        File Visible: -        Signed: -

Status: -
 

Name: psched.sys

Image Path: C:\WINXP\system32\DRIVERS\psched.sys

Address: 0xB791D000        Size: 69120        File Visible: -        Signed: -

Status: -
 

Name: ptilink.sys

Image Path: C:\WINXP\system32\DRIVERS\ptilink.sys

Address: 0xBA420000        Size: 17792        File Visible: -        Signed: -

Status: -
 

Name: PxHelp20.sys

Image Path: PxHelp20.sys

Address: 0xBA0F8000        Size: 37376        File Visible: -        Signed: -

Status: -
 

Name: rasacd.sys

Image Path: C:\WINXP\system32\DRIVERS\rasacd.sys

Address: 0xB78D1000        Size: 8832        File Visible: -        Signed: -

Status: -
 

Name: rasl2tp.sys

Image Path: C:\WINXP\system32\DRIVERS\rasl2tp.sys

Address: 0xBA218000        Size: 51328        File Visible: -        Signed: -

Status: -
 

Name: raspppoe.sys

Image Path: C:\WINXP\system32\DRIVERS\raspppoe.sys

Address: 0xBA228000        Size: 41472        File Visible: -        Signed: -

Status: -
 

Name: raspptp.sys

Image Path: C:\WINXP\system32\DRIVERS\raspptp.sys

Address: 0xBA238000        Size: 48384        File Visible: -        Signed: -

Status: -
 

Name: raspti.sys

Image Path: C:\WINXP\system32\DRIVERS\raspti.sys

Address: 0xBA428000        Size: 16512        File Visible: -        Signed: -

Status: -
 

Name: RAW

Image Path: \FileSystem\RAW

Address: 0x804D7000        Size: 2154496        File Visible: -        Signed: -

Status: -
 

Name: rdbss.sys

Image Path: C:\WINXP\system32\DRIVERS\rdbss.sys

Address: 0xAAD93000        Size: 175744        File Visible: -        Signed: -

Status: -
 

Name: RDPCDD.sys

Image Path: C:\WINXP\System32\DRIVERS\RDPCDD.sys

Address: 0xBA5CC000        Size: 4224        File Visible: -        Signed: -

Status: -
 

Name: rdpdr.sys

Image Path: C:\WINXP\system32\DRIVERS\rdpdr.sys

Address: 0xB78ED000        Size: 196224        File Visible: -        Signed: -

Status: -
 

Name: redbook.sys

Image Path: C:\WINXP\system32\DRIVERS\redbook.sys

Address: 0xBA1E8000        Size: 57728        File Visible: -        Signed: -

Status: -
 

Name: rootrepeal.sys

Image Path: C:\WINXP\system32\drivers\rootrepeal.sys

Address: 0xA52DD000        Size: 49152        File Visible: No        Signed: -

Status: -
 

Name: RtkHDAud.sys

Image Path: C:\WINXP\system32\drivers\RtkHDAud.sys

Address: 0xAAF68000        Size: 4751360        File Visible: -        Signed: -

Status: -
 

Name: RTL8139.SYS

Image Path: C:\WINXP\system32\DRIVERS\RTL8139.SYS

Address: 0xBA410000        Size: 20992        File Visible: -        Signed: -

Status: -
 

Name: serenum.sys

Image Path: C:\WINXP\system32\DRIVERS\serenum.sys

Address: 0xBA55C000        Size: 15744        File Visible: -        Signed: -

Status: -
 

Name: serial.sys

Image Path: C:\WINXP\system32\DRIVERS\serial.sys

Address: 0xBA1F8000        Size: 65536        File Visible: -        Signed: -

Status: -
 

Name: sr.sys

Image Path: sr.sys

Address: 0xB9ED8000        Size: 73472        File Visible: -        Signed: -

Status: -
 

Name: srv.sys

Image Path: C:\WINXP\system32\DRIVERS\srv.sys

Address: 0xA5900000        Size: 334848        File Visible: -        Signed: -

Status: -
 

Name: swenum.sys

Image Path: C:\WINXP\system32\DRIVERS\swenum.sys

Address: 0xBA5C0000        Size: 4352        File Visible: -        Signed: -

Status: -
 

Name: sysaudio.sys

Image Path: C:\WINXP\system32\drivers\sysaudio.sys

Address: 0xA5818000        Size: 60800        File Visible: -        Signed: -

Status: -
 

Name: tcpip.sys

Image Path: C:\WINXP\system32\DRIVERS\tcpip.sys

Address: 0xAAE68000        Size: 361600        File Visible: -        Signed: -

Status: -
 

Name: TDI.SYS

Image Path: C:\WINXP\system32\DRIVERS\TDI.SYS

Address: 0xBA418000        Size: 20480        File Visible: -        Signed: -

Status: -
 

Name: termdd.sys

Image Path: C:\WINXP\system32\DRIVERS\termdd.sys

Address: 0xBA258000        Size: 40704        File Visible: -        Signed: -

Status: -
 

Name: update.sys

Image Path: C:\WINXP\system32\DRIVERS\update.sys

Address: 0xB7867000        Size: 384768        File Visible: -        Signed: -

Status: -
 

Name: USBD.SYS

Image Path: C:\WINXP\system32\DRIVERS\USBD.SYS

Address: 0xBA5C2000        Size: 8192        File Visible: -        Signed: -

Status: -
 

Name: usbehci.sys

Image Path: C:\WINXP\system32\DRIVERS\usbehci.sys

Address: 0xBA3F8000        Size: 30208        File Visible: -        Signed: -

Status: -
 

Name: usbhub.sys

Image Path: C:\WINXP\system32\DRIVERS\usbhub.sys

Address: 0xBA2A8000        Size: 59520        File Visible: -        Signed: -

Status: -
 

Name: usbohci.sys

Image Path: C:\WINXP\system32\DRIVERS\usbohci.sys

Address: 0xBA3F0000        Size: 17152        File Visible: -        Signed: -

Status: -
 

Name: USBPORT.SYS

Image Path: C:\WINXP\system32\DRIVERS\USBPORT.SYS

Address: 0xB79A4000        Size: 147456        File Visible: -        Signed: -

Status: -
 

Name: vga.sys

Image Path: C:\WINXP\System32\drivers\vga.sys

Address: 0xBA450000        Size: 20992        File Visible: -        Signed: -

Status: -
 

Name: VIDEOPRT.SYS

Image Path: C:\WINXP\system32\DRIVERS\VIDEOPRT.SYS

Address: 0xB79C8000        Size: 81920        File Visible: -        Signed: -

Status: -
 

Name: VolSnap.sys

Image Path: VolSnap.sys

Address: 0xBA0C8000        Size: 53760        File Visible: -        Signed: -

Status: -
 

Name: wanarp.sys

Image Path: C:\WINXP\system32\DRIVERS\wanarp.sys

Address: 0xBA2D8000        Size: 34560        File Visible: -        Signed: -

Status: -
 

Name: watchdog.sys

Image Path: C:\WINXP\System32\watchdog.sys

Address: 0xBA3A8000        Size: 20480        File Visible: -        Signed: -

Status: -
 

Name: wdmaud.sys

Image Path: C:\WINXP\system32\drivers\wdmaud.sys

Address: 0xA566B000        Size: 83072        File Visible: -        Signed: -

Status: -
 

Name: Win32k

Image Path: \Driver\Win32k

Address: 0xBF800000        Size: 1847296        File Visible: -        Signed: -

Status: -
 

Name: win32k.sys

Image Path: C:\WINXP\System32\win32k.sys

Address: 0xBF800000        Size: 1847296        File Visible: -        Signed: -

Status: -
 

Name: WMILIB.SYS

Image Path: C:\WINXP\system32\DRIVERS\WMILIB.SYS

Address: 0xBA5AA000        Size: 8192        File Visible: -        Signed: -

Status: -
 

Name: WMIxWDM

Image Path: \Driver\WMIxWDM

Address: 0x804D7000        Size: 2154496        File Visible: -        Signed: -

Status: -
 

Name: WudfPf.sys

Image Path: WudfPf.sys

Address: 0xB9EAE000        Size: 77696        File Visible: -        Signed: -

Status: -

habe die Logfiles eingefügt, erleichtert mir die Arbeit:
RSIT Logfile:

Code:

Logfile of random's system information tool 1.08 (written by random/random)

Run by Fuchs at 2010-08-26 12:03:33

Microsoft Windows XP Professional Service Pack 3

System drive C: has 45 GB (86%) free of 53 GB

Total RAM: 2047 MB (57% free)
 

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 12:03:44, on 26.08.2010

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16705)

Boot mode: Normal
 

Running processes:

C:\WINXP\System32\smss.exe

C:\WINXP\system32\winlogon.exe

C:\WINXP\system32\services.exe

C:\WINXP\system32\lsass.exe

C:\WINXP\system32\Ati2evxx.exe

C:\WINXP\system32\svchost.exe

C:\WINXP\System32\svchost.exe

C:\WINXP\system32\svchost.exe

C:\WINXP\system32\Ati2evxx.exe

C:\Programme\AVG\AVG9\avgchsvx.exe

C:\Programme\AVG\AVG9\avgrsx.exe

C:\Programme\AVG\AVG9\avgcsrvx.exe

C:\WINXP\system32\spoolsv.exe

C:\WINXP\Explorer.EXE

C:\WINXP\RTHDCPL.EXE

C:\PROGRA~1\AVG\AVG9\avgtray.exe

C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe

C:\Programme\iTunes\iTunesHelper.exe

C:\WINXP\system32\ctfmon.exe

C:\Programme\Windows Live\Messenger\msnmsgr.exe

C:\Programme\Messenger\msmsgs.exe

D:\Jan\Nokia PC Suite 7\PCSuite.exe

C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Programme\ICQ7.0\ICQ.exe

C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Programme\AVG\AVG9\avgwdsvc.exe

C:\Programme\Bonjour\mDNSResponder.exe

C:\Programme\AVG\AVG9\avgnsx.exe

C:\Programme\Java\jre6\bin\jqs.exe

C:\Programme\CDBurnerXP\NMSAccessU.exe

C:\WINXP\system32\svchost.exe

C:\Programme\AVG\AVG9\avgemc.exe

C:\Programme\AVG\AVG9\avgcsrvx.exe

C:\Programme\Windows Live\Contacts\wlcomm.exe

C:\Programme\iPod\bin\iPodService.exe

C:\Programme\PC Connectivity Solution\ServiceLayer.exe

C:\Programme\PC Connectivity Solution\Transports\NclUSBSrv.exe

C:\Programme\PC Connectivity Solution\Transports\NclRSSrv.exe

C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe

C:\WINXP\system32\wuauclt.exe

C:\Programme\Mozilla Firefox\firefox.exe

C:\Programme\Mozilla Firefox\plugin-container.exe

C:\Dokumente und Einstellungen\Fuchs\Desktop\RSIT.exe

C:\Programme\trend micro\Fuchs.exe
 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programme\AVG\AVG9\avgssie.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINXP\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [PC Suite Tray] "D:\Jan\Nokia PC Suite 7\PCSuite.exe" -onlytray

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'LOKALER DIENST')

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOKALER DIENST')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'NETZWERKDIENST')

O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETZWERKDIENST')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')

O4 - Startup: ICQ7.lnk = C:\Programme\ICQ7.0\ICQ.exe

O4 - Startup: iTunes.lnk = ?

O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Programme\ICQ7.0\ICQ.exe

O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Programme\ICQ7.0\ICQ.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG9\avgpp.dll

O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)

O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINXP\system32\browseui.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINXP\system32\browseui.dll

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINXP\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINXP\system32\ati2sgag.exe

O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Programme\AVG\AVG9\avgemc.exe

O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Programme\AVG\AVG9\avgwdsvc.exe

O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Programme\Bonjour\mDNSResponder.exe

O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe

O23 - Service: NMSAccess - Unknown owner - C:\Programme\CDBurnerXP\NMSAccessU.exe

O23 - Service: ServiceLayer - Nokia - C:\Programme\PC Connectivity Solution\ServiceLayer.exe
 

--

End of file - 7816 bytes
 

======Registry dump======
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

AVG Safe Search - C:\Programme\AVG\AVG9\avgssie.dll [2010-07-24 1619296]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live Anmelde-Hilfsprogramm - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2010-03-11 41760]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]

JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-11 73728]
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"=C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-07-21 61440]

"RTHDCPL"=C:\WINXP\RTHDCPL.EXE [2007-08-10 16384000]

"Alcmtr"=C:\WINXP\ALCMTR.EXE [2005-05-04 69632]

"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-07-24 2065760]

"Adobe Reader Speed Launcher"=C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-21 35760]

"Adobe ARM"=C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

"AppleSyncNotifier"=C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe [2010-04-13 47392]

"QuickTime Task"=C:\Programme\QuickTime\qttask.exe [2010-03-18 421888]

"iTunesHelper"=C:\Programme\iTunes\iTunesHelper.exe [2010-06-15 141624]
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"=C:\WINXP\system32\ctfmon.exe [2008-04-14 15360]

"msnmsgr"=C:\Programme\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883840]

"MSMSGS"=C:\Programme\Messenger\msmsgs.exe [2008-04-14 1695232]

"PC Suite Tray"=D:\Jan\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]
 

C:\Dokumente und Einstellungen\Fuchs\Startmenü\Programme\Autostart

ICQ7.lnk - C:\Programme\ICQ7.0\ICQ.exe

iTunes.lnk - C:\WINXP\Installer\{F439D7AF-03F3-4F8E-AEC4-571BFE977C61}\iTunesIco.exe
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

C:\WINXP\system32\Ati2evxx.dll [2009-07-21 155648]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]

C:\WINXP\system32\avgrsstx.dll [2010-07-24 12536]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

C:\WINXP\system32\WgaLogon.dll [2008-08-27 3584]
 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINXP\system32\wpdshserviceobj.dll [2008-07-08 133632]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
 

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1
 

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Programme\ICQ7.0\ICQ.exe"="C:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"

"C:\Programme\ICQ7.0\aolload.exe"="C:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

"C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

"C:\Programme\Java\jre6\bin\javaw.exe"="C:\Programme\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"

"C:\Programme\AVG\AVG9\avgemc.exe"="C:\Programme\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe"

"C:\Programme\AVG\AVG9\avgupd.exe"="C:\Programme\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"

"C:\Programme\AVG\AVG9\avgnsx.exe"="C:\Programme\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"

"C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\Programme\Mozilla Firefox\firefox.exe"="C:\Programme\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"

"C:\Programme\Bonjour\mDNSResponder.exe"="C:\Programme\Bonjour\mDNSResponder.exe:*:Enabled:Dienst "Bonjour""

"C:\Programme\iTunes\iTunes.exe"="C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes"

"C:\WINXP\explorer.exe"="C:\WINXP\explorer.exe:*:Disabled:Windows Explorer"

"C:\Programme\SopCast\adv\SopAdver.exe"="C:\Programme\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver"

"C:\Programme\SopCast\SopCast.exe"="C:\Programme\SopCast\SopCast.exe:*:Enabled:SopCast Main Application"
 

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Programme\ICQ7.0\ICQ.exe"="C:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"

"C:\Programme\ICQ7.0\aolload.exe"="C:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

"C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

"C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
 

======List of files/folders created in the last 1 months======
 

2010-08-26 12:03:34 ----D---- C:\Programme\trend micro

2010-08-26 12:03:33 ----D---- C:\rsit

2010-08-25 23:16:56 ----D---- C:\Dokumente und Einstellungen\Fuchs\Anwendungsdaten\Malwarebytes

2010-08-25 23:16:48 ----A---- C:\WINXP\system32\drivers\mbamswissarmy.sys

2010-08-25 23:16:47 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

2010-08-25 23:16:46 ----D---- C:\Programme\Malwarebytes' Anti-Malware

2010-08-25 23:16:46 ----A---- C:\WINXP\system32\drivers\mbam.sys

2010-08-25 22:57:47 ----D---- C:\Dokumente und Einstellungen\Fuchs\Anwendungsdaten\9D2EE4609EF61D24760C2CB20B31A3B1

2010-08-23 20:18:01 ----D---- C:\Programme\SopCast

2010-08-21 10:13:25 ----HD---- C:\$AVG
 

======List of files/folders modified in the last 1 months======
 

2010-08-26 12:03:38 ----D---- C:\WINXP\Prefetch

2010-08-26 12:03:34 ----RD---- C:\Programme

2010-08-26 11:58:35 ----D---- C:\WINXP\Temp

2010-08-26 10:42:04 ----SHD---- C:\System Volume Information

2010-08-26 10:42:04 ----D---- C:\WINXP\system32\Restore

2010-08-26 10:38:34 ----D---- C:\WINXP\system32\drivers

2010-08-26 10:38:34 ----D---- C:\WINXP\repair

2010-08-26 10:37:59 ----A---- C:\WINXP\SchedLgU.Txt

2010-08-26 10:24:54 ----D---- C:\WINXP

2010-08-26 08:57:15 ----D---- C:\WINXP\system32\drivers\Avg

2010-08-26 08:37:05 ----D---- C:\WINXP\system32\config

2010-08-25 23:05:54 ----D---- C:\Dokumente und Einstellungen\Fuchs\Anwendungsdaten\vlc

2010-08-25 22:59:18 ----RSHDC---- C:\WINXP\system32\dllcache

2010-08-25 22:58:00 ----D---- C:\WINXP\system32

2010-08-24 12:54:46 ----D---- C:\Dokumente und Einstellungen\Fuchs\Anwendungsdaten\ICQ

2010-08-21 10:13:25 ----D---- C:\Dokumente und Einstellungen\Fuchs\Anwendungsdaten\Arme

2010-08-21 01:14:35 ----D---- C:\Dokumente und Einstellungen\Fuchs\Anwendungsdaten\Efxan

2010-08-20 09:36:08 ----D---- C:\WINXP\system32\CatRoot2

2010-08-14 13:20:20 ----SD---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft

2010-08-01 21:40:20 ----HD---- C:\WINXP\inf

2010-08-01 21:40:18 ----D---- C:\Programme\MSN
 

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R0 PxHelp20;PxHelp20; C:\WINXP\System32\Drivers\PxHelp20.sys [2009-04-28 44944]

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINXP\system32\DRIVERS\WudfPf.sys [2008-01-18 77696]

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINXP\System32\Drivers\avgldx86.sys [2010-07-24 216400]

R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINXP\System32\Drivers\avgmfx86.sys [2010-06-02 29584]

R1 AvgTdiX;AVG Free Network Redirector; C:\WINXP\System32\Drivers\avgtdix.sys [2010-07-24 243024]

R3 ati2mtag;ati2mtag; C:\WINXP\system32\DRIVERS\ati2mtag.sys [2009-07-21 3565056]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINXP\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]

R3 HDAudBus;Microsoft UAA-Bustreiber für High Definition Audio; C:\WINXP\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]

R3 hidusb;Microsoft HID Class-Treiber; C:\WINXP\system32\DRIVERS\hidusb.sys [2008-04-14 10368]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINXP\system32\drivers\RtkHDAud.sys [2007-08-10 4603904]

R3 mouhid;Maus-HID-Treiber; C:\WINXP\system32\DRIVERS\mouhid.sys [2008-04-14 12288]

R3 rtl8139;NT-Treiber für Realtek RTL8139(A/B/C)-basierten PCI-Fast Ethernet-Adapter; C:\WINXP\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]

S3 nmwcd;Nokia USB Phone Parent; C:\WINXP\system32\drivers\ccdcmb.sys [2009-10-06 17664]

S3 nmwcdc;Nokia USB Generic; C:\WINXP\system32\drivers\ccdcmbo.sys [2009-10-06 22016]

S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINXP\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]

S3 StarOpen;StarOpen; C:\WINXP\system32\drivers\StarOpen.sys [2009-11-12 7168]

S3 upperdev;upperdev; C:\WINXP\system32\DRIVERS\usbser_lowerflt.sys [2009-10-06 7936]

S3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINXP\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]

S3 usbprint;Microsoft USB-Druckerklasse; C:\WINXP\system32\DRIVERS\usbprint.sys [2008-04-14 25856]

S3 usbser;USB Modem Driver; C:\WINXP\system32\drivers\usbser.sys [2008-04-13 26112]

S3 UsbserFilt;UsbserFilt; C:\WINXP\system32\DRIVERS\usbser_lowerfltj.sys [2009-10-06 7936]

S3 USBSTOR;USB-Massenspeichertreiber; C:\WINXP\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINXP\System32\Drivers\wdf01000.sys [2008-03-27 503008]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINXP\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]
 

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 

R2 Apple Mobile Device;Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINXP\system32\Ati2evxx.exe [2009-07-21 602112]

R2 avg9emc;AVG Free E-mail Scanner; C:\Programme\AVG\AVG9\avgemc.exe [2010-07-24 921952]

R2 avg9wd;AVG Free WatchDog; C:\Programme\AVG\AVG9\avgwdsvc.exe [2010-07-24 308136]

R2 Bonjour Service;Dienst "Bonjour"; C:\Programme\Bonjour\mDNSResponder.exe [2010-05-18 345376]

R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2010-03-11 153376]

R2 NMSAccess;NMSAccess; C:\Programme\CDBurnerXP\NMSAccessU.exe [2010-03-04 71096]

R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINXP\system32\svchost.exe [2008-04-14 14336]

R3 iPod Service;iPod-Dienst; C:\Programme\iPod\bin\iPodService.exe [2010-06-15 540472]

R3 ServiceLayer;ServiceLayer; C:\Programme\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]

S2 ATI Smart;ATI Smart; C:\WINXP\system32\ati2sgag.exe [2009-07-21 593920]

S3 aspnet_state;ASP.NET State Service; C:\WINXP\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINXP\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]

S3 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576]
 

-----------------EOF-----------------

--- --- ---

[/code]

[code]info.txtRSIT Logfile:

Code:

logfile of random's system information tool 1.08 2010-08-26 12:03:45
 

======Uninstall list======
 

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINXP\INF\PCHealth.inf

Adobe Flash Player 10 ActiveX-->C:\WINXP\system32\Macromed\Flash\uninstall_activeX.exe

Adobe Flash Player 10 Plugin-->C:\WINXP\system32\Macromed\Flash\FlashUtil10i_Plugin.exe -maintain plugin

Adobe Reader 9.3 - Deutsch-->MsiExec.exe /I{AC76BA86-7AD7-1031-7B44-A93000000001}

AIMP2-->C:\Programme\AIMP2\Uninstall.exe

Apple Application Support-->MsiExec.exe /I{B2D328BE-45AD-4D92-96F9-2151490A203E}

Apple Mobile Device Support-->MsiExec.exe /I{85991ED2-010C-4930-96FA-52F43C2CE98A}

Apple Software Update-->MsiExec.exe /I{C41300B9-185D-475E-BFEC-39EF732F19B1}

ATI - Software Uninstall Utility-->C:\Programme\ATI Technologies\UninstallAll\AtiCimUn.exe

ATI Catalyst Control Center-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{055EE59D-217B-43A7-ABFF-507B966405D8}\setup.exe" -l0x0 

ATI Display Driver-->rundll32 C:\WINXP\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

AVG Free 9.0-->C:\Programme\AVG\AVG9\setup.exe /UNINSTALL

Bonjour-->MsiExec.exe /X{0CB9668D-F979-4F31-B8B8-67FE90F929F8}

Catalyst Control Center - Branding-->MsiExec.exe /I{D9D93D74-107D-4BD3-87D0-AABCF7C98BD5}

CDBurnerXP-->"C:\Programme\CDBurnerXP\unins000.exe"

Driver Whiz-->MsiExec.exe /X{97BBECCF-B1FD-4010-8D4B-EFC9E3CCEECF}

Free M4a to MP3 Converter 6.1-->"C:\Programme\Free M4a to MP3 Converter\unins000.exe"

Goodnight Timer 1.0-->"C:\Programme\Goodnight Timer\unins000.exe"

ICQ7-->"C:\Programme\InstallShield Installation Information\{88EB38EF-4D2C-436D-ABD3-56B232674062}\ICQ7.exe" -runfromtemp -l0x0009 -removeonly

iTunes-->MsiExec.exe /I{7AB3A249-FB81-416B-917A-A2A10E74C503}

Java(TM) 6 Update 15-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216015FF}

JDownloader-->D:\Eigene Dateien\JDownloader\uninstall.exe

Malwarebytes' Anti-Malware-->"C:\Programme\Malwarebytes' Anti-Malware\unins000.exe"

Microsoft .NET Framework 2.0-->C:\WINXP\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe

Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}

Microsoft Kernel-Mode Driver Framework Feature Pack 1.7-->"C:\WINXP\$NtUninstallWdf01007$\spuninst\spuninst.exe"

Microsoft User-Mode Driver Framework Feature Pack 1.7-->"C:\WINXP\$NtUninstallWudf01007$\spuninst\spuninst.exe"

Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}

MobileMe Control Panel-->MsiExec.exe /I{BA165460-FCF7-4D6C-A7A2-F2321700720F}

Mozilla Firefox (3.6.8)-->C:\Programme\Mozilla Firefox\uninstall\helper.exe

MSVC80_x86_v2-->MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}

MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}

Nokia Connectivity Cable Driver-->MsiExec.exe /I{C50EF365-2898-489A-B6C7-30DAA466E9A2}

Nokia PC Suite-->C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Nokia_PC_Suite_ger_web.exe

Nokia PC Suite-->MsiExec.exe /I{19DC9559-9C20-4A46-A67D-7ECBA52A2788}

OpenOffice.org 3.2-->MsiExec.exe /I{2217B0B4-35CB-48C6-B640-864DF2F30F99}

PC Connectivity Solution-->MsiExec.exe /I{6E0352EE-6F0D-4FBC-B1B8-4FF032C78BE0}

QuickTime-->MsiExec.exe /I{3D9892BB-A751-4E48-ADC8-E4289956CE1D}

Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x7  -removeonly

Safari-->MsiExec.exe /I{AFAC914D-9E83-4A89-8ABE-427521C82CCF}

Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}

Sicherheitsupdate für Windows XP (KB923789)-->C:\WINXP\system32\MacroMed\Flash\genuinst.exe C:\WINXP\system32\MacroMed\Flash\KB923789.inf

SopCast 3.2.9-->C:\Programme\SopCast\uninst.exe

Veetle TV 0.9.17-->C:\Programme\Veetle\UninstallVeetleTV.exe

VLC media player 1.0.5-->C:\Programme\VideoLAN\VLC\uninstall.exe

Winamp-->"C:\Programme\Winamp\UninstWA.exe"

Windows Live Anmelde-Assistent-->MsiExec.exe /I{52B97218-98CB-4B8B-9283-D213C85E1AA4}

Windows Live Call-->MsiExec.exe /I{5FC68772-6D56-41C6-9DF1-24E868198AE6}

Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}

Windows Live Essentials-->C:\Programme\Windows Live\Installer\wlarp.exe

Windows Live Essentials-->MsiExec.exe /I{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}

Windows Live Messenger-->MsiExec.exe /X{41E654A9-26D0-4EAC-854B-0FA824FFFABB}

Windows Live-Uploadtool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}

Windows-Treiberpaket - Nokia Modem  (06/01/2009 7.01.0.4)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINXP\system32\DRVSTORE\nokbtmdm_0777326F40B753DD4E385F058ADB286B70A301FE\nokbtmdm.inf

Windows-Treiberpaket - Nokia Modem  (10/05/2009 4.2)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINXP\system32\DRVSTORE\nokia_blue_AAB746D5658CCF4CAE7A35CED5F0ADA3C447A973\nokia_bluetooth.inf

Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0)-->C:\PROGRA~1\DIFX\B4723E9A0713E5B1\dpinst.exe /u C:\WINXP\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.inf

WinRAR-->C:\Programme\WinRAR\uninstall.exe
 

======Hosts File======
 

127.0.0.1 im.adtech.de

127.0.0.1 adserver.adtech.de

127.0.0.1 adtech.de

127.0.0.1 ar.atwola.com

127.0.0.1 atwola.com

127.0.0.1 adserver.71i.de

127.0.0.1 adicqserver.71i.de

127.0.0.1 71i.de
 

======Security center information======
 

AV: AVG Anti-Virus Free
 

======System event log======
 

Computer Name: FUCHSBAU

Event Code: 6006

Message: Der Ereignisprotokolldienst wurde beendet.
 

Record Number: 2516

Source Name: EventLog

Time Written: 20100527003654.000000+120

Event Type: Informationen

User: 
 

Computer Name: FUCHSBAU

Event Code: 7036

Message: Dienst "Ati HotKey Poller" befindet sich jetzt im Status "Beendet".
 

Record Number: 2515

Source Name: Service Control Manager

Time Written: 20100527003642.000000+120

Event Type: Informationen

User: 
 

Computer Name: FUCHSBAU

Event Code: 7036

Message: Dienst "ServiceLayer" befindet sich jetzt im Status "Ausgeführt".
 

Record Number: 2514

Source Name: Service Control Manager

Time Written: 20100526183443.000000+120

Event Type: Informationen

User: 
 

Computer Name: FUCHSBAU

Event Code: 7035

Message: Der Steuerbefehl "starten" wurde erfolgreich an den Dienst "ServiceLayer" gesendet.
 

Record Number: 2513

Source Name: Service Control Manager

Time Written: 20100526183443.000000+120

Event Type: Informationen

User: NT-AUTORITÄT\SYSTEM
 

Computer Name: FUCHSBAU

Event Code: 7036

Message: Dienst "IMAPI-CD-Brenn-COM-Dienste" befindet sich jetzt im Status "Beendet".
 

Record Number: 2512

Source Name: Service Control Manager

Time Written: 20100526183415.000000+120

Event Type: Informationen

User: 
 

=====Application event log=====
 

Computer Name: FUCHSBAU

Event Code: 1000

Message: Die Leistungsindikatoren für den Dienst MSDTC (MSDTC) wurden geladen.

Die Daten enthalten die dem Dienst zugeordneten neuen Indexwerte.
 

Record Number: 5

Source Name: LoadPerf

Time Written: 20100311145803.000000+060

Event Type: Informationen

User: 
 

Computer Name: FUCHSBAU

Event Code: 1000

Message: Die Leistungsindikatoren für den Dienst TermService (Terminaldienste) wurden geladen.

Die Daten enthalten die dem Dienst zugeordneten neuen Indexwerte.
 

Record Number: 4

Source Name: LoadPerf

Time Written: 20100311145759.000000+060

Event Type: Informationen

User: 
 

Computer Name: FUCHSBAU

Event Code: 1000

Message: Die Leistungsindikatoren für den Dienst RemoteAccess (Routing und RAS) wurden geladen.

Die Daten enthalten die dem Dienst zugeordneten neuen Indexwerte.
 

Record Number: 3

Source Name: LoadPerf

Time Written: 20100311145501.000000+060

Event Type: Informationen

User: 
 

Computer Name: FUCHSBAU

Event Code: 1000

Message: Die Leistungsindikatoren für den Dienst PSched (PSched) wurden geladen.

Die Daten enthalten die dem Dienst zugeordneten neuen Indexwerte.
 

Record Number: 2

Source Name: LoadPerf

Time Written: 20100311145428.000000+060

Event Type: Informationen

User: 
 

Computer Name: FUCHSBAU

Event Code: 1000

Message: Die Leistungsindikatoren für den Dienst RSVP (QoS-RSVP) wurden geladen.

Die Daten enthalten die dem Dienst zugeordneten neuen Indexwerte.
 

Record Number: 1

Source Name: LoadPerf

Time Written: 20100311145427.000000+060

Event Type: Informationen

User: 
 

======Environment variables======
 

"ComSpec"=%SystemRoot%\system32\cmd.exe

"Path"=C:\Programme\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Programme\ATI Technologies\ATI.ACE\Core-Static;C:\Programme\QuickTime\QTSystem\

"windir"=%SystemRoot%

"FP_NO_HOST_CHECK"=NO

"OS"=Windows_NT

"PROCESSOR_ARCHITECTURE"=x86

"PROCESSOR_LEVEL"=15

"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 107 Stepping 2, AuthenticAMD

"PROCESSOR_REVISION"=6b02

"NUMBER_OF_PROCESSORS"=2

"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

"TEMP"=%SystemRoot%\TEMP

"TMP"=%SystemRoot%\TEMP

"asl.log"=Destination=file;OnFirstLog=command,environment

"CLASSPATH"=.;C:\Programme\Java\jre6\lib\ext\QTJava.zip

"QTJAVA"=C:\Programme\Java\jre6\lib\ext\QTJava.zip
 

-----------------EOF-----------------

--- --- ---

Code:

Adobe Flash Player 10 ActiveX        Adobe Systems Incorporated        10.0.45.2

Adobe Flash Player 10 Plugin        Adobe Systems Incorporated        10.1.82.76

Adobe Reader 9.3 - Deutsch        Adobe Systems Incorporated        9.3.0

AIMP2        AIMP DevTeam        

Apple Application Support        Apple Inc.        1.3.0

Apple Mobile Device Support        Apple Inc.        3.1.0.62

Apple Software Update        Apple Inc.        2.1.2.120

ATI - Software Uninstall Utility                6.14.10.1016

ATI Catalyst Control Center                2.009.0721.1106

ATI Display Driver                8.593.100.2-090721a-085695C-ATI

AVG Free 9.0        AVG Technologies        

Bonjour        Apple Inc.        2.0.2.0

CCleaner        Piriform        2.35

CDBurnerXP        CDBurnerXP        4.3.2.2140

Driver Whiz        Driver Whiz        8.0.1

Free M4a to MP3 Converter 6.1        ManiacTools.com        

Goodnight Timer 1.0        Sebastian Fritsch        

ICQ7        ICQ        7.0

iTunes        Apple Inc.        9.2.0.61

Java(TM) 6 Update 15        Sun Microsystems, Inc.        6.0.150

JDownloader        AppWork UG (haftungsbeschränkt)        0.89

Malwarebytes' Anti-Malware        Malwarebytes Corporation        

Microsoft .NET Framework 2.0        Microsoft Corporation        

Microsoft User-Mode Driver Framework Feature Pack 1.7        Microsoft Corporation        

Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        8.0.59193

MobileMe Control Panel        Apple Inc.        3.0.1.1

Mozilla Firefox (3.6.8)        Mozilla        3.6.8 (de)

Nokia Connectivity Cable Driver        Nokia        7.1.23.0

Nokia PC Suite        Nokia        7.1.40.6

OpenOffice.org 3.2        OpenOffice.org        3.2.9483

PC Connectivity Solution        Nokia        9.44.0.3

QuickTime        Apple Inc.        7.66.73.0

Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        5.10.0.5464

Safari        Apple Inc.        5.33.16.0

SopCast 3.2.9        www.sopcast.com        3.2.9

Veetle TV 0.9.17        Veetle, Inc        0.9.17

VLC media player 1.0.5        VideoLAN Team        1.0.5

Winamp        Nullsoft, Inc        5.572 

Winamp Anwendungserkennung        Nullsoft, Inc        1.0.0.1

Windows Live Anmelde-Assistent        Microsoft Corporation        5.000.818.5

Windows Live Essentials        Microsoft Corporation        14.0.8089.0726

Windows Live-Uploadtool        Microsoft Corporation        14.0.8014.1029

Windows-Treiberpaket - Nokia Modem  (06/01/2009 7.01.0.4)        Nokia        06/01/2009 7.01.0.4

Windows-Treiberpaket - Nokia Modem  (10/05/2009 4.2)        Nokia        10/05/2009 4.2

Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0)        Nokia        08/22/2008 7.0.0.0

WinRAR