Trojaner-Board - Hilfestellung bei TR/TDss.145

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Hilfestellung bei TR/TDss.145 (https://www.trojaner-board.de/81101-hilfestellung-tr-tdss-145-a.html)

Hi Angel21 =)

Hier die Logfile von Avenger :

Zitat:

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows Vista

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

Error: could not open driver "a4588nv4.sys"
Disablement of driver "a4588nv4.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist

Error: registry key "\Registry\Machine\System\CurrentControlSet\Services\a4588nv4.sys" not

found!
Deletion of driver "a4588nv4.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist

Error: file "C:\Windows\system32\drivers\a4588nv4.sys" not found!
Deletion of file "C:\Windows\system32\drivers\a4588nv4.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist

Completed script processing.

*******************

Finished! Terminate.

Zitat:

C:\Windows\System32\Drivers\sppy.sys
C:\Windows\System32\Drivers\adjw7w87.SYS

Die zwei oben genannten .sys Dateien konnte ich leider nicht finden.
Die Suchoption von Windows konnte auch keine der beiden genannten Dateien finden.

Ist das jetzt gut oder schlecht ?

Neues RSIT Logfile bitte (nur Log.txt)

Wie geht es deinem PC zur Zeit?

Hi Angel21 =)

:dankeschoen:

Hier die Logfile :

Zitat:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Varim Sandauge at 2010-01-06 08:42:01
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 19 GB (24%) free of 80 GB
Total RAM: 3070 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:42:10, on 06.01.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\system32\wuauclt.exe
C:\Users\Varim Sandauge\Downloads\RSIT\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Varim Sandauge.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comodo.com/search/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O13 - Gopher Prefix:
O16 - DPF: {2EDF75C0-5ABD-49f9-BAB6-220476A32034} (System Requirements Lab) - http://intel-drv-cdn.systemrequirementslab.com/audio/bin/sysreqlab_srlx.cab
O16 - DPF: {5727FF4C-EF4E-4d96-A96C-03AD91910448} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_ind.cab
O20 - AppInit_DLLs:
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Dragon Age: Origins - Inhaltsupdater (DAUpdaterSvc) - BioWare - G:\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

--
End of file - 4363 bytes

======Scheduled tasks folder======

C:\Windows\tasks\1-Klick-Wartung.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-04-13 69632]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-04-17 196608]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-12-16 2002160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cdf13488-3bcf-11dd-b547-806e6f6e6963}]
shell\AutoRun\command - D:\Installer.exe

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-01-05 17:34:43 ----D---- C:\Avenger
2010-01-05 17:34:43 ----A---- C:\avenger.txt
2010-01-01 21:24:13 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2010-01-01 21:23:27 ----D---- C:\Users\Varim Sandauge\AppData\Roaming\SUPERAntiSpyware.com
2010-01-01 21:23:27 ----D---- C:\Program Files\SUPERAntiSpyware
2010-01-01 17:07:25 ----D---- C:\rsit
2010-01-01 15:52:29 ----D---- C:\Users\Varim Sandauge\AppData\Roaming\Malwarebytes
2010-01-01 15:52:24 ----D---- C:\ProgramData\Malwarebytes
2010-01-01 15:52:24 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-27 09:04:40 ----A---- C:\ProgramData\sysReserve.ini
2009-12-26 17:44:39 ----D---- C:\Program Files\Windows Portable Devices
2009-12-26 16:04:35 ----A---- C:\Windows\system32\tzres.dll
2009-12-26 16:04:11 ----A---- C:\Windows\system32\UIRibbonRes.dll
2009-12-26 16:04:11 ----A---- C:\Windows\system32\UIRibbon.dll
2009-12-26 16:04:11 ----A---- C:\Windows\system32\UIAnimation.dll
2009-12-26 16:03:44 ----A---- C:\Windows\system32\WMPhoto.dll
2009-12-26 16:03:43 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-12-26 16:03:43 ----A---- C:\Windows\system32\d3d10warp.dll
2009-12-26 16:03:43 ----A---- C:\Windows\system32\cdd.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\xpsservices.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\XpsRasterService.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\XpsPrint.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-12-26 16:03:42 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\OpcServices.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\FntCache.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\dxgi.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\dxdiagn.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\dxdiag.exe
2009-12-26 16:03:42 ----A---- C:\Windows\system32\DWrite.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d11.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d10level9.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d10core.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d10_1core.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d10_1.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d10.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d2d1.dll
2009-12-26 16:03:15 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
2009-12-26 16:03:15 ----A---- C:\Windows\system32\wpdbusenum.dll
2009-12-26 16:03:15 ----A---- C:\Windows\system32\BthMtpContextHandler.dll
2009-12-26 16:03:13 ----A---- C:\Windows\system32\PortableDeviceConnectApi.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\WPDSp.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\wpdshext.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\wpd_ci.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-12-26 16:02:29 ----A---- C:\Windows\system32\UIAutomationCore.dll
2009-12-26 16:02:29 ----A---- C:\Windows\system32\oleaccrc.dll
2009-12-26 16:02:29 ----A---- C:\Windows\system32\oleacc.dll
2009-12-26 16:01:04 ----A---- C:\Windows\system32\nshhttp.dll
2009-12-26 16:01:03 ----A---- C:\Windows\system32\httpapi.dll
2009-12-26 15:56:45 ----A---- C:\Windows\system32\mshtml.dll
2009-12-26 15:56:44 ----A---- C:\Windows\system32\ieframe.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\wininet.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\urlmon.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\occache.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\msfeeds.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\ieui.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\iertutil.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\iedkcs32.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\msfeedssync.exe
2009-12-26 15:56:42 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\jsproxy.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\ieUnatt.exe
2009-12-26 15:56:42 ----A---- C:\Windows\system32\iesysprep.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\iesetup.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\iernonce.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\iepeers.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\ie4uinit.exe
2009-12-26 15:51:14 ----A---- C:\Windows\system32\msxml6.dll
2009-12-26 15:51:13 ----A---- C:\Windows\system32\msxml3.dll
2009-12-26 15:50:45 ----A---- C:\Windows\system32\winhttp.dll
2009-12-26 15:49:49 ----A---- C:\Windows\system32\rastls.dll
2009-12-26 15:49:37 ----A---- C:\Windows\system32\WSDApi.dll

======List of files/folders modified in the last 1 months======

2010-01-06 08:41:57 ----D---- C:\Windows\Temp
2010-01-06 08:37:08 ----D---- C:\ProgramData\NVIDIA
2010-01-05 17:34:52 ----D---- C:\Windows\Minidump
2010-01-05 17:34:48 ----D---- C:\Windows
2010-01-05 17:34:43 ----D---- C:\Windows\system32\drivers
2010-01-05 17:34:43 ----D---- C:\Windows\System32
2010-01-05 17:32:40 ----D---- C:\Windows\Prefetch
2010-01-05 12:04:33 ----D---- C:\Windows\tracing
2010-01-04 09:41:08 ----SHD---- C:\System Volume Information
2010-01-04 07:44:58 ----D---- C:\Windows\inf
2010-01-04 07:44:58 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-01-01 21:24:13 ----HD---- C:\ProgramData
2010-01-01 21:23:31 ----SHD---- C:\Windows\Installer
2010-01-01 21:23:27 ----RD---- C:\Program Files
2010-01-01 21:22:48 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-01-01 15:47:44 ----D---- C:\Windows\Debug
2009-12-26 18:03:04 ----D---- C:\Windows\rescache
2009-12-26 17:57:59 ----D---- C:\Windows\winsxs
2009-12-26 17:48:13 ----D---- C:\Windows\system32\Tasks
2009-12-26 17:47:52 ----D---- C:\Windows\system32\catroot
2009-12-26 17:44:41 ----D---- C:\Windows\system32\de-DE
2009-12-26 17:44:39 ----D---- C:\Windows\system32\wbem
2009-12-26 17:44:37 ----D---- C:\Windows\system32\zh-HK
2009-12-26 17:44:37 ----D---- C:\Windows\system32\uk-UA
2009-12-26 17:44:37 ----D---- C:\Windows\system32\sl-SI
2009-12-26 17:44:37 ----D---- C:\Windows\system32\pt-PT
2009-12-26 17:44:37 ----D---- C:\Windows\system32\pt-BR
2009-12-26 17:44:37 ----D---- C:\Windows\system32\pl-PL
2009-12-26 17:44:37 ----D---- C:\Windows\system32\nl-NL
2009-12-26 17:44:37 ----D---- C:\Windows\system32\ko-KR
2009-12-26 17:44:37 ----D---- C:\Windows\system32\it-IT
2009-12-26 17:44:37 ----D---- C:\Windows\system32\hu-HU
2009-12-26 17:44:37 ----D---- C:\Windows\system32\hr-HR
2009-12-26 17:44:37 ----D---- C:\Windows\system32\he-IL
2009-12-26 17:44:37 ----D---- C:\Windows\system32\el-GR
2009-12-26 17:44:37 ----D---- C:\Windows\system32\bg-BG
2009-12-26 17:44:36 ----D---- C:\Windows\system32\zh-TW
2009-12-26 17:44:36 ----D---- C:\Windows\system32\zh-CN
2009-12-26 17:44:36 ----D---- C:\Windows\system32\tr-TR
2009-12-26 17:44:36 ----D---- C:\Windows\system32\th-TH
2009-12-26 17:44:36 ----D---- C:\Windows\system32\sv-SE
2009-12-26 17:44:36 ----D---- C:\Windows\system32\sr-Latn-CS
2009-12-26 17:44:36 ----D---- C:\Windows\system32\sk-SK
2009-12-26 17:44:36 ----D---- C:\Windows\system32\ru-RU
2009-12-26 17:44:36 ----D---- C:\Windows\system32\ro-RO
2009-12-26 17:44:36 ----D---- C:\Windows\system32\nb-NO
2009-12-26 17:44:36 ----D---- C:\Windows\system32\lv-LV
2009-12-26 17:44:36 ----D---- C:\Windows\system32\lt-LT
2009-12-26 17:44:36 ----D---- C:\Windows\system32\ja-JP
2009-12-26 17:44:36 ----D---- C:\Windows\system32\fr-FR
2009-12-26 17:44:36 ----D---- C:\Windows\system32\fi-FI
2009-12-26 17:44:36 ----D---- C:\Windows\system32\et-EE
2009-12-26 17:44:36 ----D---- C:\Windows\system32\es-ES
2009-12-26 17:44:36 ----D---- C:\Windows\system32\en-US
2009-12-26 17:44:36 ----D---- C:\Windows\system32\da-DK
2009-12-26 17:44:36 ----D---- C:\Windows\system32\cs-CZ
2009-12-26 17:44:36 ----D---- C:\Windows\system32\ar-SA
2009-12-26 17:44:35 ----D---- C:\Windows\system32\migration
2009-12-26 17:44:34 ----D---- C:\Program Files\Windows Mail
2009-12-26 17:44:34 ----D---- C:\Program Files\Internet Explorer
2009-12-26 16:04:59 ----D---- C:\Windows\system32\catroot2
2009-12-25 18:33:48 ----D---- C:\Program Files\Mozilla Firefox
2009-12-22 19:17:59 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-22 19:17:13 ----D---- C:\Program Files\Steam

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2009-12-16 9968]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys [2009-12-16 74480]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2009-10-10 281760]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-12-09 56816]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2009-10-10 25888]
R3 cmuda3;C-Media PCI Audio Interface; C:\Windows\system32\drivers\cmudax3.sys [2008-03-03 1406784]
R3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-08-16 9545152]
R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [2009-12-16 7408]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-12-06 298496]
S3 agwu28oe;agwu28oe; C:\Windows\system32\drivers\agwu28oe.sys []
S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 FETNDIS;VIA Rhine-Familie--Fast-Ethernet-Adaptertreiberdienst; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]
S3 Inspect;Comodo Firewall Network Driver; C:\Windows\system32\DRIVERS\inspect.sys []
S3 LGDDCDevice;LGDDCDevice; \??\C:\Program Files\LG Soft India\forteManager\bin\I2CDriver.sys [2008-12-12 14336]
S3 LGII2CDevice;LGII2CDevice; \??\C:\Program Files\LG Soft India\forteManager\bin\PII2CDriver.sys [2008-12-12 18432]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-07 185089]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-08-17 215584]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-08-17 239648]
R2 TuneUp.ProgramStatisticsSvc;@%SystemRoot%\System32\TUProgSt.exe,-1; C:\Windows\System32\TUProgSt.exe [2009-09-15 604488]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-19 21504]
S3 aspnet_state;ASP.NET-Zustandsdienst; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 DAUpdaterSvc;Dragon Age: Origins - Inhaltsupdater; G:\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-08-29 316664]
S3 TuneUp.Defrag;@%SystemRoot%\System32\TuneUpDefragService.exe,-1; C:\Windows\System32\TuneUpDefragService.exe [2009-09-15 361288]
S3 usprserv;User Privilege Service; C:\Windows\System32\svchost.exe [2008-01-19 21504]

-----------------EOF-----------------

Ab und zu habe ich das empfinden,
das mein PC etwas langsamer Arbeitet als gewohnt.
Aber ich kann mich da auch täuschen.
Und ein einziges mal ließ er sich erst nach dem 3ten Neustart Hochfahren.
Er hing sich quasi beim Hochfahren auf.

Alles weitere läuft wie gewohnt.

Zitat:

Du hast wie ich sehe Tune Up Utilities - Ich rate von solchen Tools ab, da sie die Leistung des PCs nicht erhöhen, sondern eher mit der Zeit minimieren.
Ich würde dir anraten es zu deinstallieren. Es hilft nicht wirklich etwas und trägt nicht wirklich zur Leistung des rechners bei.

Panda Active Scan

Folgende Seite führt dich durch die Installation: PandaActiveScan2.0 Installation

Drücke auf Jetzt Scannen!

Eine Registrierung ist nicht erforderlich!

Nachdem der Scan abgeschlossen ist drücke auf das Text-Icon Export und speichere das log auf dem Desktop.
Öffne die Datei ActiveScan.txt die sich nun auf deinem Desktop befindet und poste uns den Inhalt.

Hi Angel21,

Tune Up Utilities wird gleich deinstalliert,
die 30 Tage der Testversion sind verbraucht.

Hier nun die Logfile :

Zitat:

;***************************************************************************************************************************************************** ******************************
ANALYSIS: 2010-01-06 18:00:32
PROTECTIONS: 1
MALWARE: 1
SUSPECTS: 0
;***************************************************************************************************************************************************** ******************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================== ==============================
AntiVir Desktop Yes Yes
;===================================================================================================================================================== ==============================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================== ==============================
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No c:\users\varim sandauge\appdata\roaming\microsoft\windows\cookies\varim_sandauge@atdmt[2].txt
;===================================================================================================================================================== ==============================
SUSPECTS
Sent Location
;===================================================================================================================================================== ==============================
;===================================================================================================================================================== ==============================
VULNERABILITIES
Id Severity Description
;===================================================================================================================================================== ==============================
;===================================================================================================================================================== ==============================

Bedrohungen, die mit der kostenpflichtigen Version entfernt werden können (1)
Niedrige Gefährdungsstufe (1)

1. c:\users\varim sandauge\appdata\roaming\micro...cookies\varim_sandauge@atdmt[2].txt

What is Cookie Atlas DMT. Encyclopedia. Panda Security

Das ist nur ein Tracking Cookie, kannst du auch mit Tools wie CCleaner löschen oder über den Browser direkt.

ESET Online Scanner
- Anmerkung für Vista-User: Bitte den Browser unbedingt als Administrator starten.
- Button "ESET Online Scanner" drücken.
- Firefox-User müssen ein zusätzliches Addon (esetsmartinstaller_enu.exe) installieren.
- Das Firefox-Addon auf dem Desktop speichern und dann installieren.
- IE-User müssen das Installieren eines ActiveX Elements erlauben.
- Einen Haken bei "Remove found threads" und "Scan archives" machen.
- Start drücken.
- Der Scan beginnt automatisch.
- Finish drücken.
- Browser schließen.
- Explorer öffnen.
- C:\Programme\Eset\EsetOnlineScanner\log.txt suchen und mit Deinem Editor öffnen.
- Logfile hier posten.
- Deinstallation: Systemsteuerung => Software => Eset Online Scanner V3 entfernen.
- Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset
- IE-User zusätzlich: mit HJT folgenden Eintrag fixen:
- O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control)

Hi Angel21,

Der Keks wurde entfernt =) ( Super Anti Spyware )

Hier nun die Logfile :

Zitat:

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=cc75890188625940bbe58f8da163af4f
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2010-01-07 06:18:50
# local_time=2010-01-07 07:18:50 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=512 16777215 100 0 39868673 39868673 0 0
# compatibility_mode=1797 16775165 100 100 178377 62375857 8477 0
# compatibility_mode=5892 16776573 100 100 22585 100416724 0 0
# compatibility_mode=8192 67108863 100 0 4243 4243 0 0
# scanned=133712
# found=0
# cleaned=0
# scan_time=4334

Hallo, poste ein neues RSIT Logfile (nur Log.txt)
Wie funktioniert dein PC? Gibt es irgendwo noch Komplikationen?

Hi Angel21,

Hier die Logfile :

Zitat:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Varim Sandauge at 2010-01-07 23:41:16
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 22 GB (28%) free of 80 GB
Total RAM: 3070 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:41:21, on 07.01.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conime.exe
C:\Users\Varim Sandauge\Downloads\RSIT\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Varim Sandauge.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comodo.com/search/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O13 - Gopher Prefix:
O16 - DPF: {2EDF75C0-5ABD-49f9-BAB6-220476A32034} (System Requirements Lab) - http://intel-drv-cdn.systemrequirementslab.com/audio/bin/sysreqlab_srlx.cab
O16 - DPF: {5727FF4C-EF4E-4d96-A96C-03AD91910448} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_ind.cab
O20 - AppInit_DLLs:
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Dragon Age: Origins - Inhaltsupdater (DAUpdaterSvc) - BioWare - G:\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

--
End of file - 4339 bytes

======Scheduled tasks folder======

C:\Windows\tasks\1-Klick-Wartung.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-04-13 69632]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-04-17 196608]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-12-16 2002160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cdf13488-3bcf-11dd-b547-806e6f6e6963}]
shell\AutoRun\command - D:\Installer.exe

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-01-07 17:55:53 ----D---- C:\Program Files\ESET
2010-01-06 16:44:14 ----D---- C:\Program Files\Panda Security
2010-01-05 17:34:43 ----D---- C:\Avenger
2010-01-05 17:34:43 ----A---- C:\avenger.txt
2010-01-01 21:24:13 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2010-01-01 21:23:27 ----D---- C:\Users\Varim Sandauge\AppData\Roaming\SUPERAntiSpyware.com
2010-01-01 21:23:27 ----D---- C:\Program Files\SUPERAntiSpyware
2010-01-01 17:07:25 ----D---- C:\rsit
2010-01-01 15:52:29 ----D---- C:\Users\Varim Sandauge\AppData\Roaming\Malwarebytes
2010-01-01 15:52:24 ----D---- C:\ProgramData\Malwarebytes
2010-01-01 15:52:24 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-27 09:04:40 ----A---- C:\ProgramData\sysReserve.ini
2009-12-26 17:44:39 ----D---- C:\Program Files\Windows Portable Devices
2009-12-26 16:04:35 ----A---- C:\Windows\system32\tzres.dll
2009-12-26 16:04:11 ----A---- C:\Windows\system32\UIRibbonRes.dll
2009-12-26 16:04:11 ----A---- C:\Windows\system32\UIRibbon.dll
2009-12-26 16:04:11 ----A---- C:\Windows\system32\UIAnimation.dll
2009-12-26 16:03:44 ----A---- C:\Windows\system32\WMPhoto.dll
2009-12-26 16:03:43 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2009-12-26 16:03:43 ----A---- C:\Windows\system32\d3d10warp.dll
2009-12-26 16:03:43 ----A---- C:\Windows\system32\cdd.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\xpsservices.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\XpsRasterService.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\XpsPrint.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\WindowsCodecs.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2009-12-26 16:03:42 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\OpcServices.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\FntCache.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\dxgi.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\dxdiagn.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\dxdiag.exe
2009-12-26 16:03:42 ----A---- C:\Windows\system32\DWrite.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d11.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d10level9.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d10core.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d10_1core.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d10_1.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d3d10.dll
2009-12-26 16:03:42 ----A---- C:\Windows\system32\d2d1.dll
2009-12-26 16:03:15 ----A---- C:\Windows\system32\WPDShextAutoplay.exe
2009-12-26 16:03:15 ----A---- C:\Windows\system32\wpdbusenum.dll
2009-12-26 16:03:15 ----A---- C:\Windows\system32\BthMtpContextHandler.dll
2009-12-26 16:03:13 ----A---- C:\Windows\system32\PortableDeviceConnectApi.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\WPDSp.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\WPDShServiceObj.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\wpdshext.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\wpd_ci.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\PortableDeviceWMDRM.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\PortableDeviceTypes.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\PortableDeviceClassExtension.dll
2009-12-26 16:03:12 ----A---- C:\Windows\system32\PortableDeviceApi.dll
2009-12-26 16:02:29 ----A---- C:\Windows\system32\UIAutomationCore.dll
2009-12-26 16:02:29 ----A---- C:\Windows\system32\oleaccrc.dll
2009-12-26 16:02:29 ----A---- C:\Windows\system32\oleacc.dll
2009-12-26 16:01:04 ----A---- C:\Windows\system32\nshhttp.dll
2009-12-26 16:01:03 ----A---- C:\Windows\system32\httpapi.dll
2009-12-26 15:56:45 ----A---- C:\Windows\system32\mshtml.dll
2009-12-26 15:56:44 ----A---- C:\Windows\system32\ieframe.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\wininet.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\urlmon.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\occache.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\msfeeds.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\ieui.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\iertutil.dll
2009-12-26 15:56:43 ----A---- C:\Windows\system32\iedkcs32.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\msfeedssync.exe
2009-12-26 15:56:42 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\jsproxy.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\ieUnatt.exe
2009-12-26 15:56:42 ----A---- C:\Windows\system32\iesysprep.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\iesetup.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\iernonce.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\iepeers.dll
2009-12-26 15:56:42 ----A---- C:\Windows\system32\ie4uinit.exe
2009-12-26 15:51:14 ----A---- C:\Windows\system32\msxml6.dll
2009-12-26 15:51:13 ----A---- C:\Windows\system32\msxml3.dll
2009-12-26 15:50:45 ----A---- C:\Windows\system32\winhttp.dll
2009-12-26 15:49:49 ----A---- C:\Windows\system32\rastls.dll
2009-12-26 15:49:37 ----A---- C:\Windows\system32\WSDApi.dll

======List of files/folders modified in the last 1 months======

2010-01-07 23:41:21 ----D---- C:\Windows\Prefetch
2010-01-07 23:41:18 ----D---- C:\Windows\Temp
2010-01-07 23:40:45 ----D---- C:\Windows\tracing
2010-01-07 20:17:08 ----D---- C:\Program Files\Mozilla Firefox
2010-01-07 17:55:53 ----RD---- C:\Program Files
2010-01-07 12:50:06 ----SHD---- C:\System Volume Information
2010-01-07 11:10:09 ----D---- C:\ProgramData\NVIDIA
2010-01-06 16:54:09 ----D---- C:\Windows\system32\drivers
2010-01-05 17:34:52 ----D---- C:\Windows\Minidump
2010-01-05 17:34:48 ----D---- C:\Windows
2010-01-05 17:34:43 ----D---- C:\Windows\System32
2010-01-04 07:44:58 ----D---- C:\Windows\inf
2010-01-04 07:44:58 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-01-01 21:24:13 ----HD---- C:\ProgramData
2010-01-01 21:23:31 ----SHD---- C:\Windows\Installer
2010-01-01 21:22:48 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-01-01 15:47:44 ----D---- C:\Windows\Debug
2009-12-26 18:03:04 ----D---- C:\Windows\rescache
2009-12-26 17:57:59 ----D---- C:\Windows\winsxs
2009-12-26 17:48:13 ----D---- C:\Windows\system32\Tasks
2009-12-26 17:47:52 ----D---- C:\Windows\system32\catroot
2009-12-26 17:44:41 ----D---- C:\Windows\system32\de-DE
2009-12-26 17:44:39 ----D---- C:\Windows\system32\wbem
2009-12-26 17:44:37 ----D---- C:\Windows\system32\zh-HK
2009-12-26 17:44:37 ----D---- C:\Windows\system32\uk-UA
2009-12-26 17:44:37 ----D---- C:\Windows\system32\sl-SI
2009-12-26 17:44:37 ----D---- C:\Windows\system32\pt-PT
2009-12-26 17:44:37 ----D---- C:\Windows\system32\pt-BR
2009-12-26 17:44:37 ----D---- C:\Windows\system32\pl-PL
2009-12-26 17:44:37 ----D---- C:\Windows\system32\nl-NL
2009-12-26 17:44:37 ----D---- C:\Windows\system32\ko-KR
2009-12-26 17:44:37 ----D---- C:\Windows\system32\it-IT
2009-12-26 17:44:37 ----D---- C:\Windows\system32\hu-HU
2009-12-26 17:44:37 ----D---- C:\Windows\system32\hr-HR
2009-12-26 17:44:37 ----D---- C:\Windows\system32\he-IL
2009-12-26 17:44:37 ----D---- C:\Windows\system32\el-GR
2009-12-26 17:44:37 ----D---- C:\Windows\system32\bg-BG
2009-12-26 17:44:36 ----D---- C:\Windows\system32\zh-TW
2009-12-26 17:44:36 ----D---- C:\Windows\system32\zh-CN
2009-12-26 17:44:36 ----D---- C:\Windows\system32\tr-TR
2009-12-26 17:44:36 ----D---- C:\Windows\system32\th-TH
2009-12-26 17:44:36 ----D---- C:\Windows\system32\sv-SE
2009-12-26 17:44:36 ----D---- C:\Windows\system32\sr-Latn-CS
2009-12-26 17:44:36 ----D---- C:\Windows\system32\sk-SK
2009-12-26 17:44:36 ----D---- C:\Windows\system32\ru-RU
2009-12-26 17:44:36 ----D---- C:\Windows\system32\ro-RO
2009-12-26 17:44:36 ----D---- C:\Windows\system32\nb-NO
2009-12-26 17:44:36 ----D---- C:\Windows\system32\lv-LV
2009-12-26 17:44:36 ----D---- C:\Windows\system32\lt-LT
2009-12-26 17:44:36 ----D---- C:\Windows\system32\ja-JP
2009-12-26 17:44:36 ----D---- C:\Windows\system32\fr-FR
2009-12-26 17:44:36 ----D---- C:\Windows\system32\fi-FI
2009-12-26 17:44:36 ----D---- C:\Windows\system32\et-EE
2009-12-26 17:44:36 ----D---- C:\Windows\system32\es-ES
2009-12-26 17:44:36 ----D---- C:\Windows\system32\en-US
2009-12-26 17:44:36 ----D---- C:\Windows\system32\da-DK
2009-12-26 17:44:36 ----D---- C:\Windows\system32\cs-CZ
2009-12-26 17:44:36 ----D---- C:\Windows\system32\ar-SA
2009-12-26 17:44:35 ----D---- C:\Windows\system32\migration
2009-12-26 17:44:34 ----D---- C:\Program Files\Windows Mail
2009-12-26 17:44:34 ----D---- C:\Program Files\Internet Explorer
2009-12-26 16:04:59 ----D---- C:\Windows\system32\catroot2
2009-12-22 19:17:59 ----HD---- C:\Program Files\InstallShield Installation Information
2009-12-22 19:17:13 ----D---- C:\Program Files\Steam

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2009-12-16 9968]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys [2009-12-16 74480]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2009-10-10 281760]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-12-09 56816]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2009-10-10 25888]
R3 cmuda3;C-Media PCI Audio Interface; C:\Windows\system32\drivers\cmudax3.sys [2008-03-03 1406784]
R3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-08-16 9545152]
R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [2009-12-16 7408]
R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2007-12-06 298496]
S3 av6u37ip;av6u37ip; C:\Windows\system32\drivers\av6u37ip.sys []
S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 FETNDIS;VIA Rhine-Familie--Fast-Ethernet-Adaptertreiberdienst; C:\Windows\system32\DRIVERS\fetnd5.sys [2006-11-02 45568]
S3 Inspect;Comodo Firewall Network Driver; C:\Windows\system32\DRIVERS\inspect.sys []
S3 LGDDCDevice;LGDDCDevice; \??\C:\Program Files\LG Soft India\forteManager\bin\I2CDriver.sys [2008-12-12 14336]
S3 LGII2CDevice;LGII2CDevice; \??\C:\Program Files\LG Soft India\forteManager\bin\PII2CDriver.sys [2008-12-12 18432]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 R300;R300; C:\Windows\system32\DRIVERS\atikmdag.sys [2006-11-02 2028032]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-07 185089]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-08-17 215584]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-08-17 239648]
R2 TuneUp.ProgramStatisticsSvc;@%SystemRoot%\System32\TUProgSt.exe,-1; C:\Windows\System32\TUProgSt.exe [2009-09-15 604488]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-19 21504]
S3 aspnet_state;ASP.NET-Zustandsdienst; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-03-30 31048]
S3 DAUpdaterSvc;Dragon Age: Origins - Inhaltsupdater; G:\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2009-08-29 316664]
S3 TuneUp.Defrag;@%SystemRoot%\System32\TuneUpDefragService.exe,-1; C:\Windows\System32\TuneUpDefragService.exe [2009-09-15 361288]
S3 usprserv;User Privilege Service; C:\Windows\System32\svchost.exe [2008-01-19 21504]

-----------------EOF-----------------

Es läuft alles, und Besondere Vorkommnisse gibt es keine zu melden.

Öffne die Hijackthis.exe von Dir:
Open the Misc Tool Section -> Open Uninstall manager -> Save List -> Liste hier in deinen Thread stellen.

Wird gemacht =)

Hier nun die Liste :

Zitat:

Adobe Flash Player 10 Plugin
Adobe Flash Player ActiveX
Adobe Photoshop 7.0
Adobe Reader 9.2 - Deutsch
Age of Conan Quick Start 2.7.0
Age of Conan: Hyborian Adventures
AusLogics Disk Defrag
Avira AntiVir Personal - Free Antivirus
CamStudio
CCleaner
C-Media PCI Audio Device
Dead Space™
DER HERR DER RINGE ONLINE: Die Minen Von Moria v02.01.03.4020
DH Driver Cleaner Professional Edition
Dragon Age: Origins
Dragon Age: Origins Character Creator
EA Download Manager
EVEREST Ultimate Edition v4.60
forteManager
GIMP 2.4.6
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB953297)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Games for Windows - LIVE
Microsoft Games for Windows - LIVE Redistributable
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Mozilla Firefox (3.0.17)
NCsoft Launcher
NVIDIA Drivers
NVIDIA PhysX
NVIDIA Stereoscopic 3D Driver
OpenAL
Panda ActiveScan 2.0
PC Wizard 2008.1.84
Peggle Deluxe Demo
Plants Vs Zombies
Plants vs. Zombies
Puzzle Quest
RealPlayer
Security Task Manager 1.7g
ShrinkTo5Basic
Steam
SUPERAntiSpyware Free Edition
System Requirements Lab
System Requirements Lab
TeamSpeak 2 RC2
TuneUp Utilities 2009
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
VideoLAN VLC media player 0.8.6h
VistaBootPRO 3.3
Warhammer 40,000: Dawn of War II
Winamp
Windows Media Player Firefox Plugin
WinRAR
World of Warcraft

Bitte mal den Cleaner verwenden. Fehler beheben und alles cleanen lassen. Danach ein neues HJT Log und die Sichtweise von dir, wie es deinem PC geht.

CCleaner wurde ausgeführt, und eine neue Logfile mit HJT erstellt.

Hier nun die Logfile :

Zitat:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:01:14, on 08.01.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Windows Mail\WinMail.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.comodo.com/search/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O13 - Gopher Prefix:
O16 - DPF: {2EDF75C0-5ABD-49f9-BAB6-220476A32034} (System Requirements Lab) - http://intel-drv-cdn.systemrequireme...eqlab_srlx.cab
O16 - DPF: {5727FF4C-EF4E-4d96-A96C-03AD91910448} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_ind.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8B36294B-B11D-43AA-BA39-6C3D30E23061}: NameServer = 217.0.43.177 217.0.43.161
O20 - AppInit_DLLs:
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Dragon Age: Origins - Inhaltsupdater (DAUpdaterSvc) - BioWare - G:\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

--
End of file - 4463 bytes

Es scheint alles ganz Normal zu laufen.
Weiterhin sind keine unerwünschten Vorkommnisse zu melden.

Okay, deinstalliere alle Tools die wir installiert hatten. Beziehungsweise lösche sie.
Deaktiviere kurz die Systemwiederherstellung in Vista und aktiviere sie wieder. Grund, da bei alten Systemwiederherstellungspunkten sonst die Malware deinen PC REinfizieren könnte.

Hi Angel21,

vielen vielen Dank für deine Hilfe =)
Den Rest werde ich Morgen in Angriff nehmen.