Trojaner-Board - Massenhafter Prozessabsturz, Arbeitsspeicherfraß, Verlinkungen falsch

GMER hat sich jetzt mehrfach aufgehängt, darauf habe ich keine Lust mehr. Ich poste mal was OSAM und MBRCheck ausgespuckt haben:

Code:

MBRCheck, version 1.2.3

(c) 2010, AD
 

Command-line:                        

Windows Version:                Windows Vista Home Premium Edition

Windows Information:                Service Pack 2 (build 6002), 32-bit

Base Board Manufacturer:        Sony Corporation

BIOS Manufacturer:                American Megatrends Inc.

System Manufacturer:                Sony Corporation

System Product Name:                VGN-NW11S_T

Logical Drives Mask:                0x0001007c
 

Kernel Drivers (total 172):

  0x82C04000 \SystemRoot\system32\ntkrnlpa.exe

  0x82FBE000 \SystemRoot\system32\hal.dll

  0x80405000 \SystemRoot\system32\kdcom.dll

  0x8040C000 \SystemRoot\system32\mcupdate_GenuineIntel.dll

  0x8047C000 \SystemRoot\system32\PSHED.dll

  0x8048D000 \SystemRoot\system32\BOOTVID.dll

  0x80495000 \SystemRoot\system32\CLFS.SYS

  0x804D6000 \SystemRoot\system32\CI.dll

  0x8060E000 \SystemRoot\system32\drivers\Wdf01000.sys

  0x8068A000 \SystemRoot\system32\drivers\WDFLDR.SYS

  0x80697000 \SystemRoot\System32\Drivers\spfs.sys

  0x8078A000 \SystemRoot\System32\Drivers\WMILIB.SYS

  0x80793000 \SystemRoot\System32\Drivers\SCSIPORT.SYS

  0x807B9000 \SystemRoot\system32\drivers\acpi.sys

  0x80600000 \SystemRoot\system32\drivers\msisadrv.sys

  0x805B6000 \SystemRoot\system32\drivers\pci.sys

  0x805DD000 \SystemRoot\System32\drivers\partmgr.sys

  0x80608000 \SystemRoot\system32\DRIVERS\compbatt.sys

  0x805EC000 \SystemRoot\system32\DRIVERS\BATTC.SYS

  0x8320C000 \SystemRoot\system32\drivers\volmgr.sys

  0x8321B000 \SystemRoot\System32\drivers\volmgrx.sys

  0x83265000 \SystemRoot\System32\drivers\mountmgr.sys

  0x83275000 \SystemRoot\system32\DRIVERS\iaStor.sys

  0x83343000 \SystemRoot\system32\drivers\fltmgr.sys

  0x83375000 \SystemRoot\system32\drivers\fileinfo.sys

  0x83385000 \SystemRoot\System32\Drivers\PxHelp20.sys

  0x8338F000 \SystemRoot\System32\Drivers\ksecdd.sys

  0x8AE04000 \SystemRoot\system32\drivers\ndis.sys

  0x8AF0F000 \SystemRoot\system32\drivers\msrpc.sys

  0x8AF3A000 \SystemRoot\system32\drivers\NETIO.SYS

  0x8AF75000 \SystemRoot\system32\DRIVERS\timntr.sys

  0x8B004000 \SystemRoot\System32\Drivers\Ntfs.sys

  0x8B114000 \SystemRoot\system32\drivers\volsnap.sys

  0x8B14D000 \SystemRoot\system32\DRIVERS\tdrpman.sys

  0x8B1A6000 \SystemRoot\System32\Drivers\spldr.sys

  0x8B1AE000 \SystemRoot\system32\DRIVERS\snapman.sys

  0x8B1CD000 \SystemRoot\System32\Drivers\mup.sys

  0x8B207000 \SystemRoot\System32\drivers\ecache.sys

  0x8B22E000 \SystemRoot\system32\drivers\disk.sys

  0x8B23F000 \SystemRoot\system32\drivers\CLASSPNP.SYS

  0x8B260000 \SystemRoot\system32\drivers\crcdisk.sys

  0x8B344000 \SystemRoot\system32\DRIVERS\tunnel.sys

  0x8B34F000 \SystemRoot\system32\DRIVERS\tunmp.sys

  0x8F608000 \SystemRoot\system32\DRIVERS\atikmdag.sys

  0x8FA75000 \SystemRoot\System32\drivers\dxgkrnl.sys

  0x8FB15000 \SystemRoot\System32\drivers\watchdog.sys

  0x8FB21000 \SystemRoot\system32\DRIVERS\HDAudBus.sys

  0x8FBAE000 \SystemRoot\system32\DRIVERS\usbuhci.sys

  0x8FBB9000 \SystemRoot\system32\DRIVERS\USBPORT.SYS

  0x8B358000 \SystemRoot\system32\DRIVERS\usbehci.sys

  0x8B367000 \SystemRoot\system32\DRIVERS\yk60x86.sys

  0x8FE0C000 \SystemRoot\system32\DRIVERS\NETw5v32.sys

  0x90194000 \SystemRoot\system32\DRIVERS\ohci1394.sys

  0x901A4000 \SystemRoot\system32\DRIVERS\1394BUS.SYS

  0x901B2000 \SystemRoot\system32\DRIVERS\risdptsk.sys

  0x901C3000 \SystemRoot\system32\DRIVERS\rimsptsk.sys

  0x901DD000 \SystemRoot\system32\DRIVERS\i8042prt.sys

  0x901F0000 \SystemRoot\system32\DRIVERS\kbdclass.sys

  0x8B3B7000 \SystemRoot\system32\DRIVERS\Apfiltr.sys

  0x8FE00000 \SystemRoot\system32\DRIVERS\mouclass.sys

  0x901FB000 \SystemRoot\system32\DRIVERS\SFEP.sys

  0x8B3E5000 \SystemRoot\system32\DRIVERS\cdrom.sys

  0x9040B000 \SystemRoot\System32\Drivers\a0qjg3fo.SYS

  0x90444000 \SystemRoot\system32\DRIVERS\intelppm.sys

  0x90453000 \SystemRoot\system32\DRIVERS\CmBatt.sys

  0x90457000 \SystemRoot\system32\DRIVERS\dne2000.sys

  0x90476000 \SystemRoot\system32\DRIVERS\msiscsi.sys

  0x904A5000 \SystemRoot\system32\DRIVERS\storport.sys

  0x904E6000 \SystemRoot\system32\DRIVERS\TDI.SYS

  0x904F1000 \SystemRoot\system32\drivers\srs_sscfilter_i386.sys

  0x90532000 \SystemRoot\system32\drivers\ks.sys

  0x9055C000 \SystemRoot\system32\DRIVERS\rasl2tp.sys

  0x90573000 \SystemRoot\system32\DRIVERS\ndistapi.sys

  0x9057E000 \SystemRoot\system32\DRIVERS\ndiswan.sys

  0x905A1000 \SystemRoot\system32\DRIVERS\raspppoe.sys

  0x905B0000 \SystemRoot\system32\DRIVERS\raspptp.sys

  0x905C4000 \SystemRoot\system32\DRIVERS\rassstp.sys

  0x905D9000 \SystemRoot\system32\DRIVERS\termdd.sys

  0x905E9000 \SystemRoot\system32\DRIVERS\swenum.sys

  0x905EB000 \SystemRoot\system32\DRIVERS\mssmbios.sys

  0x8B1DC000 \SystemRoot\system32\DRIVERS\umbus.sys

  0x9060B000 \SystemRoot\system32\DRIVERS\usbhub.sys

  0x90640000 \SystemRoot\System32\Drivers\NDProxy.SYS

  0x90651000 \SystemRoot\system32\drivers\RtHDMIV.sys

  0x90676000 \SystemRoot\system32\drivers\portcls.sys

  0x906A3000 \SystemRoot\system32\drivers\drmk.sys

  0x9100E000 \SystemRoot\system32\drivers\RTKVHDA.sys

  0x91234000 \SystemRoot\system32\DRIVERS\HSXHWAZL.sys

  0x91271000 \SystemRoot\system32\DRIVERS\HSX_DPV.sys

  0x906C8000 \SystemRoot\system32\DRIVERS\HSX_CNXT.sys

  0x91374000 \SystemRoot\system32\drivers\modem.sys

  0x91381000 \SystemRoot\system32\DRIVERS\usbccgp.sys

  0x91398000 \SystemRoot\system32\DRIVERS\USBD.SYS

  0x9139A000 \SystemRoot\System32\Drivers\usbvideo.sys

  0x913BB000 \SystemRoot\system32\DRIVERS\ArcSoftKsUFilter.sys

  0x913C4000 \SystemRoot\System32\Drivers\Fs_Rec.SYS

  0x913CD000 \SystemRoot\System32\Drivers\Null.SYS

  0x913D4000 \SystemRoot\System32\Drivers\Beep.SYS

  0x913DB000 \SystemRoot\System32\drivers\vga.sys

  0x9077C000 \SystemRoot\System32\drivers\VIDEOPRT.SYS

  0x913E7000 \SystemRoot\System32\DRIVERS\RDPCDD.sys

  0x913EF000 \SystemRoot\system32\drivers\rdpencdd.sys

  0x91000000 \SystemRoot\System32\Drivers\Msfs.SYS

  0x9079D000 \SystemRoot\System32\Drivers\Npfs.SYS

  0x913F7000 \SystemRoot\System32\DRIVERS\rasacd.sys

  0x9160A000 \SystemRoot\System32\drivers\tcpip.sys

  0x916F4000 \SystemRoot\System32\drivers\fwpkclnt.sys

  0x91721000 \SystemRoot\system32\DRIVERS\tdx.sys

  0x91737000 \SystemRoot\system32\DRIVERS\hidusb.sys

  0x91740000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS

  0x91750000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS

  0x91757000 \SystemRoot\system32\DRIVERS\smb.sys

  0x9176B000 \SystemRoot\system32\drivers\afd.sys

  0x917B3000 \SystemRoot\System32\DRIVERS\netbt.sys

  0x917E5000 \SystemRoot\system32\DRIVERS\pacer.sys

  0x907AB000 \SystemRoot\system32\DRIVERS\netbios.sys

  0x907B9000 \SystemRoot\system32\DRIVERS\wanarp.sys

  0x91600000 \SystemRoot\system32\DRIVERS\ssmdrv.sys

  0x907CC000 \??\C:\Windows\system32\drivers\Sleen16.sys

  0x91804000 \SystemRoot\system32\DRIVERS\rdbss.sys

  0x91840000 \SystemRoot\system32\DRIVERS\mouhid.sys

  0x91848000 \SystemRoot\system32\drivers\nsiproxy.sys

  0x91852000 \SystemRoot\system32\DRIVERS\DMICall.sys

  0x91853000 \SystemRoot\System32\Drivers\dfsc.sys

  0x9186A000 \SystemRoot\system32\DRIVERS\avipbb.sys

  0x91890000 \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys

  0x91892000 \SystemRoot\system32\DRIVERS\cdfs.sys

  0x918A8000 \SystemRoot\System32\Drivers\crashdmp.sys

  0x918B5000 \SystemRoot\System32\Drivers\dump_iaStor.sys

  0x9A250000 \SystemRoot\System32\win32k.sys

  0x91983000 \SystemRoot\System32\drivers\Dxapi.sys

  0x9198D000 \SystemRoot\system32\DRIVERS\monitor.sys

  0x9A470000 \SystemRoot\System32\TSDDD.dll

  0x9A490000 \SystemRoot\System32\cdd.dll

  0x9199C000 \SystemRoot\system32\drivers\luafv.sys

  0x919B7000 \SystemRoot\system32\DRIVERS\avgntflt.sys

  0x919CC000 \SystemRoot\system32\DRIVERS\tifsfilt.sys

  0x919D6000 \??\C:\Program Files\Microsoft Application Virtualization Client\drivers\sftvollh.sys

  0x8B269000 \SystemRoot\system32\drivers\spsys.sys

  0x919DD000 \SystemRoot\system32\DRIVERS\lltdio.sys

  0x8B319000 \SystemRoot\system32\DRIVERS\nwifi.sys

  0x919ED000 \SystemRoot\system32\DRIVERS\ndisuio.sys

  0x907DE000 \SystemRoot\system32\DRIVERS\rspndr.sys

  0x9E20E000 \SystemRoot\system32\drivers\HTTP.sys

  0x9E27B000 \SystemRoot\System32\DRIVERS\srvnet.sys

  0x9E298000 \SystemRoot\system32\DRIVERS\bowser.sys

  0x9E2B1000 \SystemRoot\System32\drivers\mpsdrv.sys

  0x9E2C6000 \SystemRoot\system32\drivers\mrxdav.sys

  0x9E2E7000 \SystemRoot\system32\DRIVERS\mrxsmb.sys

  0x9E306000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys

  0x9E33F000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys

  0x9E357000 \SystemRoot\System32\DRIVERS\srv2.sys

  0x9E37F000 \SystemRoot\System32\DRIVERS\srv.sys

  0x9EC03000 \SystemRoot\system32\DRIVERS\atksgt.sys

  0x9EC46000 \??\C:\Windows\system32\Drivers\CVPNDRVA.sys

  0x9ECD6000 \SystemRoot\system32\DRIVERS\lirsgt.sys

  0x9ECDB000 \SystemRoot\system32\DRIVERS\mdmxsdk.sys

  0x9ECDF000 \SystemRoot\system32\drivers\peauth.sys

  0x9EDBD000 \SystemRoot\system32\drivers\regi.sys

  0x9EDBF000 \SystemRoot\System32\Drivers\secdrv.SYS

  0xA1008000 \??\C:\Program Files\Microsoft Application Virtualization Client\drivers\sftfslh.sys

  0xA1093000 \??\C:\Program Files\Microsoft Application Virtualization Client\drivers\sftplaylh.sys

  0xA10C8000 \SystemRoot\System32\drivers\tcpipreg.sys

  0xA10D4000 \SystemRoot\system32\DRIVERS\WUDFRd.sys

  0xA10E9000 \SystemRoot\system32\DRIVERS\WUDFPf.sys

  0xA10FB000 \SystemRoot\system32\DRIVERS\xaudio.sys

  0xA1103000 \SystemRoot\system32\DRIVERS\Sftredirlh.sys

  0xA110C000 \SystemRoot\system32\drivers\usbaudio.sys

  0xA111E000 \SystemRoot\system32\DRIVERS\udfs.sys

  0x9A4A0000 \SystemRoot\System32\ATMFD.DLL

  0x77D50000 \Windows\System32\ntdll.dll

  0x10000000 \Program Files\DAEMON Tools Lite\Engine.dll
 

Processes (total 102):

       0 System Idle Process

       4 System

     696 C:\Windows\System32\smss.exe

     828 csrss.exe

     892 C:\Windows\System32\wininit.exe

     900 csrss.exe

     936 C:\Windows\System32\services.exe

     964 C:\Windows\System32\lsass.exe

     976 C:\Windows\System32\lsm.exe

    1012 C:\Windows\System32\winlogon.exe

    1160 C:\Windows\System32\svchost.exe

    1240 C:\Windows\System32\svchost.exe

    1280 C:\Windows\System32\svchost.exe

    1372 C:\Windows\System32\Ati2evxx.exe

    1404 C:\Windows\System32\svchost.exe

    1460 C:\Windows\System32\svchost.exe

    1480 C:\Windows\System32\svchost.exe

    1536 C:\Windows\System32\audiodg.exe

    1564 C:\Windows\System32\SLsvc.exe

    1600 C:\Windows\System32\svchost.exe

    1696 C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe

    1760 C:\Windows\System32\svchost.exe

    1812 C:\Windows\System32\svchost.exe

    1916 C:\Windows\System32\Ati2evxx.exe

    2024 C:\Windows\System32\wlanext.exe

     476 C:\Windows\System32\spoolsv.exe

     620 C:\Program Files\Avira\AntiVir Desktop\sched.exe

     720 C:\Windows\System32\svchost.exe

     956 C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe

    1556 C:\Program Files\Avira\AntiVir Desktop\avguard.exe

    2060 C:\Windows\System32\svchost.exe

    2096 C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

    2132 C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe

    2152 C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

    2176 C:\Program Files\Intel\WiFi\bin\EvtEng.exe

    2284 C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

    2384 C:\PROGRA~1\WinTV\TVServer\HAUPPA~1.EXE

    2408 C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe

    2468 C:\Program Files\sony\Network Utility\NSUService.exe

    2548 C:\Windows\System32\svchost.exe

    2576 C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

    2876 C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe

    2908 C:\Windows\System32\svchost.exe

    2968 C:\Program Files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

    3044 C:\Program Files\sony\VAIO Event Service\VESMgr.exe

    3088 C:\Program Files\sony\VAIO Power Management\SPMService.exe

    3176 dllhost.exe

    3224 C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

    3252 C:\Program Files\sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

    3268 C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe

    3292 C:\Windows\System32\svchost.exe

    3316 C:\Windows\System32\SearchIndexer.exe

    3372 WUDFHost.exe

    3548 C:\Program Files\sony\VAIO Event Service\VESMgrSub.exe

    3636 dllhost.exe

    3680 WmiPrvSE.exe

    4092 C:\Windows\System32\drivers\XAudio.exe

    2888 C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe

    3740 C:\Windows\System32\taskeng.exe

     156 C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE

    4812 C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe

    5496 C:\Windows\System32\svchost.exe

    5636 C:\Windows\System32\svchost.exe

    5612 C:\Windows\System32\dwm.exe

    5652 C:\Windows\explorer.exe

    1168 C:\Windows\System32\taskeng.exe

    5992 C:\Program Files\sony\VAIO Power Management\SPMgr.exe

    5032 C:\Program Files\Apoint\Apoint.exe

    1648 C:\Program Files\sony\ISB Utility\ISBMgr.exe

    5440 C:\Program Files\sony\Marketing Tools\MarketingTools.exe

    4564 C:\Windows\WindowsMobile\wmdSync.exe

    5756 C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    3828 C:\Program Files\Winamp\winampa.exe

    2536 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

    4016 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

    1424 C:\Program Files\DivX\DivX Update\DivXUpdate.exe

    2008 C:\Program Files\Steganos Safe OEM\SteganosHotKeyService.exe

    2960 C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe

    4172 C:\Program Files\Apoint\ApMsgFwd.exe

    2720 C:\Program Files\Common Files\Java\Java Update\jusched.exe

    5712 C:\Program Files\sony\Network Utility\LANUtil.exe

    5488 C:\Windows\ehome\ehtray.exe

    4388 C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

    4900 C:\Program Files\Apoint\ApntEx.exe

    5596 C:\Program Files\Apoint\Apvfb.exe

    5760 C:\Program Files\WinTV\WinTV7\WinTVTray.exe

    5264 C:\Program Files\OpenOffice.org 3\program\soffice.exe

    2444 C:\Program Files\sony\VAIO Update 5\VAIOUpdt.exe

    4464 C:\Windows\System32\wbem\unsecapp.exe

    5676 C:\Windows\ehome\ehmsas.exe

    4264 C:\Program Files\OpenOffice.org 3\program\soffice.bin

    4052 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

    5708 C:\Program Files\MirandaFusion\miranda32.exe

    5392 C:\Program Files\MirandaFusion\mfwd.exe

    5452 C:\Program Files\Mozilla Firefox\firefox.exe

    2532 C:\Program Files\Mozilla Firefox\plugin-container.exe

    5564 C:\Windows\System32\SearchProtocolHost.exe

    6508 C:\Windows\System32\SearchFilterHost.exe

    6476 C:\Windows\explorer.exe

    7040 C:\Windows\System32\dllhost.exe

    7076 C:\Users\Golachab\Downloads\MBRCheck.exe

    3124 C:\Windows\System32\conime.exe
 

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000002`8c500000  (NTFS)

\\.\Q: -->  error 5
 

PhysicalDrive0 Model Number: WDCWD3200BEVS-26VAT0, Rev: 11.01A11
 

      Size  Device Name          MBR Status

  --------------------------------------------

    298 GB  \\.\PhysicalDrive0   Windows 2008 MBR code detected

            SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979
 
 

Done!

Code:

Report of OSAM: Autorun Manager v5.0.11926.0

hxxp://www.online-solutions.ru/en/

Saved at 16:18:44 on 09.04.2011
 

OS: Windows Vista Home Premium Edition Service Pack 2 (Build 6002), 32-bit

Default Browser: Microsoft Corporation Internet Explorer 7.00.6000.16386
 

Scanner Settings

[x] Rootkits detection (hidden registry)

[x] Rootkits detection (hidden files)

[x] Retrieve files information

[x] Check Microsoft signatures
 

Filters

[ ] Trusted entries

[ ] Empty entries

[x] Hidden registry entries (rootkit activity)

[x] Exclusively opened files

[x] Not found files

[x] Files without detailed information

[x] Existing files

[ ] Non-startable services

[ ] Non-startable drivers

[x] Active entries

[x] Disabled entries
 
 

[Common]

-----( %SystemRoot%\Tasks )-----

"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe
 

[Control Panel Objects]

-----( %SystemRoot%\system32 )-----

"DivXControlPanelApplet.cpl" - "DivX, Inc." - C:\Windows\system32\DivXControlPanelApplet.cpl

"iproset.cpl" - "Intel(R) Corporation" - C:\Windows\system32\iproset.cpl

"PhysX.cpl" - ? - C:\Windows\system32\PhysX.cpl

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----

"Cm106cpl" - "C-Media Corporation" - C:\Windows\System\cm106.cpl

"PROSet Tools" - "Intel(R) Corporation" - C:\Windows\System32\iPROSet.cpl

"QuickTime" - "Apple Inc." - C:\Program Files\QuickTime\QTSystem\QuickTime.cpl
 

[Drivers]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"a0qjg3fo" (a0qjg3fo) - "Microsoft Corporation" - C:\Windows\system32\drivers\a0qjg3fo.sys  (Hidden registry entry, rootkit activity | File signed by Microsoft)

"Acronis Snapshots Manager" (snapman) - "Acronis" - C:\Windows\System32\DRIVERS\snapman.sys

"Acronis True Image Backup Archive Explorer" (timounter) - "Acronis" - C:\Windows\System32\DRIVERS\timntr.sys

"Acronis True Image FS Filter" (tifsfilter) - "Acronis" - C:\Windows\System32\DRIVERS\tifsfilt.sys

"Acronis Try&Decide and Restore Points filter" (tdrpman) - "Acronis" - C:\Windows\System32\DRIVERS\tdrpman.sys

"atksgt" (atksgt) - ? - C:\Windows\System32\DRIVERS\atksgt.sys  (File found, but it contains no detailed information)

"avgio" (avgio) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avgio.sys

"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys

"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys

"BuddyVM" ({09BB444F-B2E2-4009-BAF2-7B727681223E}) - ? - C:\Program Files\VMLaunch\BuddyVM.sys  (File not found)

"BVRPMPR5 NDIS Protocol Driver" (BVRPMPR5) - "Avanquest Software" - C:\Windows\system32\drivers\BVRPMPR5.SYS

"catchme" (catchme) - ? - C:\cofi\catchme.sys  (File not found)

"Cisco Systems Inc. IPSec Driver" (CVPNDRVA) - "Cisco Systems, Inc." - C:\Windows\system32\Drivers\CVPNDRVA.sys

"igfx" (igfx) - ? - C:\Windows\System32\DRIVERS\igdkmd32.sys  (File not found)

"Intel(R) High Definition Audio HDMI" (IntcHdmiAddService) - ? - C:\Windows\System32\drivers\IntcHdmi.sys  (File not found)

"IP in IP Tunnel Driver" (IpInIp) - ? - C:\Windows\System32\DRIVERS\ipinip.sys  (File not found)

"IPX Traffic Filter Driver" (NwlnkFlt) - ? - C:\Windows\System32\DRIVERS\nwlnkflt.sys  (File not found)

"IPX Traffic Forwarder Driver" (NwlnkFwd) - ? - C:\Windows\System32\DRIVERS\nwlnkfwd.sys  (File not found)

"lirsgt" (lirsgt) - ? - C:\Windows\System32\DRIVERS\lirsgt.sys  (File found, but it contains no detailed information)

"regi" (regi) - "InterVideo" - C:\Windows\System32\drivers\regi.sys

"sftfs" (sftfs) - "Microsoft Corporation" - C:\Program Files\Microsoft Application Virtualization Client\drivers\sftfslh.sys

"sftplay" (sftplay) - "Microsoft Corporation" - C:\Program Files\Microsoft Application Virtualization Client\drivers\sftplaylh.sys

"Sftredir" (Sftredir) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\Sftredirlh.sys

"sftvol" (sftvol) - "Microsoft Corporation" - C:\Program Files\Microsoft Application Virtualization Client\drivers\sftvollh.sys

"Sony DMI Call service" (DMICall) - "Sony Corporation" - C:\Windows\System32\DRIVERS\DMICall.sys

"sptd" (sptd) - "Duplex Secure Ltd." - C:\Windows\System32\Drivers\sptd.sys  (File is exclusively opened, access blocked)

"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys

"Steganos Live Encryption Engine 16 [Driver]" (SLEE_16_DRIVER) - "Softwareentwicklung Remus - ArchiCrypt " - C:\Windows\system32\drivers\Sleen16.sys

"WimFltr" (WimFltr) - "Microsoft Corporation" - C:\Windows\System32\DRIVERS\wimfltr.sys
 

[Explorer]

-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----

{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll

{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

-----( HKLM\Software\Classes\Protocols\Filter )-----

{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

-----( HKLM\Software\Classes\Protocols\Handler )-----

{3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} "AsyncPProt Class" - ? - C:\Program Files\SieMaSoft\Wecker\msdxm.ocx  (File not found)

{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll

{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )-----

{AEB6717E-7E19-11d0-97EE-00C04FD91972} "{AEB6717E-7E19-11d0-97EE-00C04FD91972}" - ? -   (File not found | COM-object registry key not found)

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----

{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? -   (File not found | COM-object registry key not found)

{C539A15A-3AF9-4c92-B771-50CB78F5C751} "Acronis True Image Shell Context Menu Extension" - ? - C:\Program Files\Acronis\TrueImageHome\tishell.dll  (File not found)

{C539A15B-3AF9-4c92-B771-50CB78F5C751} "Acronis True Image Shell Extension" - ? - C:\Program Files\Acronis\TrueImageHome\tishell.dll  (File not found)

{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)

{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)

{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? -   (File not found | COM-object registry key not found)

{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? -   (File not found | COM-object registry key not found)

{00020d75-0000-0000-c000-000000000046} "lnkfile" - ? -   (File not found | COM-object registry key not found)

{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll

{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\ONFILTER.DLL

{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{0875DCB6-C686-4243-9432-ADCCF0B9F2D7} "Microsoft OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office14\ONFILTER.DLL

{7842554E-6BED-11D2-8CDB-B05550C10000} "Monitor Class" - "Broadcom Corporation." - C:\Program Files\WIDCOMM\Bluetooth Software\btncopy.dll

{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{AE424E85-F6DF-4910-A6A9-438797986431} "OpenOffice.org Property Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\propertyhdl.dll

{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{BDAA6E01-669F-4783-8831-1648CEB8A16C} "Phoenix Backup Context Menu Shell Extension" - "SYDATEC" - C:\PROGRA~1\SYDATEC\PHOENI~1\pbshell.dll

{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - C:\Program Files\Real\RealPlayer\rpshell.dll

{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)

{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)

{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll

{5E2121EE-0300-11D4-8D3B-444553540000} "SimpleShlExt Class" - "Advanced Micro Devices, Inc." - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll

{FAE0A3E0-3010-41BA-9DDC-A631394F047F} "SteganosShellExtension" - ? - C:\Program Files\Steganos Safe OEM\ShellExtension.dll  (File found, but it contains no detailed information)

{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -   (File not found | COM-object registry key not found)

{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Program Files\WinRAR\rarext.dll
 

[Internet Explorer]

-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----

<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)

-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----

{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_24" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} "Java Plug-in 1.6.0_24" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_24" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_24.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

{C3F79A2B-B9B4-4A66-B012-3EE46475B072} "MessengerStatsClient Class" - "Microsoft Corporation" - C:\Windows\Downloaded Program Files\MessengerStatsPAClient.dll / hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} "QuickTime Object" - "Apple Inc." - C:\Program Files\QuickTime\QTPlugin.ocx / hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

{5C051655-FCD5-4969-9182-770EA5AA5565} "Solitaire Showdown Class" - "Microsoft Corporation" - C:\Windows\Downloaded Program Files\SolitaireShowdown.dll / hxxp://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----

"@C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015" - ? - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

"ICQ7" - "ICQ, LLC." - C:\Program Files\ICQ7.0\ICQ.exe

{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----

{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll

{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live Anmelde-Hilfsprogramm" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

{5C255C8A-E604-49b4-9D64-90988571CECB} "{5C255C8A-E604-49b4-9D64-90988571CECB}" - ? -   (File not found | COM-object registry key not found)
 

[Logon]

-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\Users\Golachab\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

"OpenOffice.org 3.3.lnk" - ? - C:\Program Files\OpenOffice.org 3\program\quickstart.exe  (Shortcut exists | File found, but it contains no detailed information | File exists)

-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

"AutoStart IR.lnk" - "Hauppauge Computer Works" - C:\Program Files\WinTV\Ir.exe  (Shortcut exists | File exists)

"VPN Client.lnk" - "Cisco Systems, Inc." - C:\Program Files\Cisco Systems\VPN Client\vpngui.exe  (Shortcut exists | File exists)

"Bluetooth.lnk" - "Broadcom Corporation." - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe  (Shortcut exists | File exists)

"WinTV Recording Status..lnk" - "Hauppauge Computer Works, Inc." - C:\Program Files\WinTV\WinTV7\WinTVTray.exe  (Shortcut exists | File exists)

-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----

"DAEMON Tools Lite" - "DT Soft Ltd" - "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun

"msnmsgr" - "Microsoft Corporation" - "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

"NSUFloatingUI" - "Sony Corporation" - "C:\Program Files\Sony\Network Utility\LANUtil.exe"

"Phoenix Backup" - "SYDATEC" - C:\PROGRA~1\SYDATEC\PHOENI~1\pbtray.exe

-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----

"StartupPrograms" - ? - rdpclip  (File not found)

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----

"Acronis Scheduler2 Service" - "Acronis" - "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"

"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

"avgnt" - "Avira GmbH" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

"DivXUpdate" - ? - "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

"ISBMgr.exe" - ? - "C:\Program Files\Sony\ISB Utility\ISBMgr.exe"

"MarketingTools" - "Sony Corporation" - C:\Program Files\Sony\Marketing Tools\MarketingTools.exe

"QuickTime Task" - "Apple Inc." - "C:\Program Files\QuickTime\QTTask.exe" -atboottime

"SAFEOEM HotKeys" - ? - "C:\Program Files\Steganos Safe OEM\SteganosHotKeyService.exe"

"StartCCC" - "Advanced Micro Devices, Inc." - "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

"TkBellExe" - "RealNetworks, Inc." - "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot

"WinampAgent" - ? - "C:\Program Files\Winamp\winampa.exe"  (File found, but it contains no detailed information)
 

[Print Monitors]

-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----

"Brother NetBIOS Port" - "Brother Industries, Ltd." - C:\Windows\system32\brntmnNT.dll

"Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll
 

[Services]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100" (WPFFontCache_v0400) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe

"Acronis Scheduler2 Service" (AcrSch2Svc) - "Acronis" - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe

"Application Virtualization Client" (sftlist) - "Microsoft Corporation" - C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe

"Application Virtualization Service Agent" (sftvsa) - "Microsoft Corporation" - C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe

"ArcSoft Connect Daemon" (ACDaemon) - "ArcSoft Inc." - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\sched.exe

"VAIO Power Management" (VAIO Power Management) - "Sony Corporation" - C:\Program Files\Sony\VAIO Power Management\SPMService.exe

"Bluetooth Service" (btwdins) - "Broadcom Corporation." - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

"CamMonitor" (uCamMonitor) - "ArcSoft, Inc." - C:\Program Files\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

"Cisco Systems, Inc. VPN Service" (CVPND) - "Cisco Systems, Inc." - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe

"Client Virtualization Handler" (cvhsvc) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

"Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

"HauppaugeTVServer" (HauppaugeTVServer) - "Hauppauge Computer Works" - C:\PROGRA~1\WinTV\TVServer\HAUPPA~1.EXE

"Intel® PROSet/Wireless Event Log" (EvtEng) - "Intel(R) Corporation" - C:\Program Files\Intel\WiFi\bin\EvtEng.exe

"Intel® PROSet/Wireless Registry Service" (RegSrvc) - "Intel(R) Corporation" - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

"IviRegMgr" (IviRegMgr) - "InterVideo" - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe

"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

"NSUService" (NSUService) - "Sony Corporation" - C:\Program Files\sony\Network Utility\NSUService.exe

"Office  Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

"Office Software Protection Platform" (osppsvc) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

"PACSPTISVR" (PACSPTISVR) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe

"VAIO Content Folder Watcher" (VCFw) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

"VAIO Content Metadata Intelligent Analyzing Manager" (VcmIAlzMgr) - "Sony Corporation" - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

"VAIO Content Metadata XML Interface" (VcmXmlIfHelper) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe

"VAIO Entertainment Database Service" (VzCdbSvc) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe

"VAIO Entertainment TV Device Arbitration Service" (VAIO Entertainment TV Device Arbitration Service) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe

"VAIO Entertainment UPnP Client Adapter" (Vcsw) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe

"VAIO Event Service" (VAIO Event Service) - "Sony Corporation" - C:\Program Files\sony\VAIO Event Service\VESMgr.exe

"VAIO Media plus Content Importer" (SOHCImp) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\SOHLib\SOHCImp.exe

"VAIO Media plus Database Manager" (SOHDBSvr) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe

"VAIO Media plus Device Searcher" (SOHDs) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDs.exe

"VAIO Media plus Digital Media Server" (SOHDms) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDms.exe

"VAIO Media plus Playlist Manager" (SOHPlMgr) - "Sony Corporation" - C:\Program Files\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe

"VUAgent" (VUAgent) - "Sony Corporation" - C:\Program Files\sony\VAIO Update 5\VUAgent.exe
 

[Winlogon]

-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )-----

"igfxcui" - ? - igfxdev.dll  (File not found)

"VESWinlogon" - "Sony Corporation" - C:\Windows\system32\VESWinlogon.dll
 

===[ Logfile end ]=========================================[ Logfile end ]===
 

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru