| |
| |||||||
Log-Analyse und Auswertung: Plötzliche Computer AbstürzeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
26.09.2011, 21:00
| #16 |
 |  Plötzliche Computer Abstürze ComboFix.txt: Code:
ATTFilter Combofix Logfile: |
|
27.09.2011, 10:23
| #17 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Plötzliche Computer Abstürze Ok. Bitte nun Logs mit GMER und OSAM erstellen und posten.
__________________GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen. Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst. Hinweis: Zum Entpacken von OSAM bitte WinRAR oder 7zip verwenden! Stell auch unbedingt den Virenscanner ab, besonders der Scanner von McAfee meldet oft einen Fehalarm in OSAM! Downloade dir bitte  aswMBR.exe und speichere die Datei auf deinem Desktop.
Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).
__________________ |
|
27.09.2011, 14:14
| #18 |
| | Plötzliche Computer Abstürze So, natürlich funktionierte bei mir GMER nicht, da es während der Überprüfung ''nicht mehr funktioniert''.
__________________Das Log von OSAM: Code:
ATTFilter <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html lang="en"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>Report of OSAM: Autorun Manager v5.0.11926.0</title> <style type="text/css"> body { margin : 10px 10px 10px 20px; color : #000000; background-color : #fffbf0; font : 10pt Tahoma, Verdana, Arial, Helvetica, sans-serif; scrollbar-3dlight-color : #fffbf0; scrollbar-arrow-color : #000000; scrollbar-darkshadow-color: #000000; scrollbar-face-color : #fffbf0; scrollbar-highlight-color : #000000; scrollbar-shadow-color : #fffbf0; scrollbar-track-color : #fffbf0; } a:link { color: #e15616; } a:visited { color: #e15616; } a:hover { color: #e4743f; } a:active { color: #e4743f; } .header1 { font-size : 115%; font-weight: bold; margin-left: 0px; } table { border-collapse: collapse; border : 1px solid #000000; cellpadding : 0; cellspacing : 0; width : 90%; } td,th { font-size : 12px; color : #000000; background : #fffbf0; border : 1px solid #000000; text-align : left; vertical-align: top; padding : 2px 4px 2px 4px; } .cap { font-weight: bold; font-size : 10pt; padding : 2px 4px 2px 4px; border : 1px solid #000000; } .group { font-weight: bold; font-size : 10pt; padding : 2px 4px 2px 4px; text-align : center; } .reg { font-weight: bold; font-size : 10pt; border : 0px none; padding : 2px 4px 2px 4px; } .notfound { background-color: #B3DDFF; } .blocked { background-color: #FF96EB; } .nodetails { background-color: #FFFF75; } .trusted { background-color: #C8FFC8; } .rootkit { background-color: #FF8696; } td.rs { text-align: center; vertical-align: center; font-family: courier; } td.rs.rm { background: #F90424; title: "Malware"; } td.rs.ri { background: #F90424; title: "Infected"; color: #21F411; } td.rs.rw { background: #F90424; title: "Unwanted"; } td.rs.rs { background: #F90424; title: "Suspicious"; } td.rs.rt { background: #21F411; title: "Trusted"; } td.rs.rc { background: #21F411; title: "Checked"; } td.rs.ry { background: #21F411; title: "Up-to-You"; } td.rs.rr { background: #F6EB13; title: "Riskware"; } td.rs.ru { background: #D4D0C8; title: "Unknown"; } td.rs.rn { background: #FFFFFF; title: "Not checked"; } </style> </head> <body> <p><span class="header1">Report of OSAM: Autorun Manager v5.0.11926.0</span><br> <a href="hxxp://www.online-solutions.ru/en/" target="_blank">hxxp://www.online-solutions.ru/en/</a><br> Saved at 14:42:39 on 27.09.2011</p> <b>OS</b>: Windows Vista Home Premium Edition Service Pack 2 (Build 6002), 32-bit<br> <b>Default Browser</b>: Opera Software Opera Internet Browser 11.51<br> <br><b>Scanner Settings</b><br> <input type="checkbox" disabled checked>Rootkits detection (hidden registry)<br> <input type="checkbox" disabled checked>Rootkits detection (hidden files)<br> <input type="checkbox" disabled checked>Retrieve files information<br> <input type="checkbox" disabled checked>Check Microsoft signatures<br> <br><b>Filters</b><br> <input type="checkbox" disabled>Trusted entries<br> <input type="checkbox" disabled>Empty entries<br> <input type="checkbox" disabled checked>Hidden registry entries (rootkit activity)<br> <input type="checkbox" disabled checked>Exclusively opened files<br> <input type="checkbox" disabled checked>Not found files<br> <input type="checkbox" disabled checked>Files without detailed information<br> <input type="checkbox" disabled checked>Existing files<br> <input type="checkbox" disabled>Non-startable services<br> <input type="checkbox" disabled>Non-startable drivers<br> <input type="checkbox" disabled checked>Active entries<br> <input type="checkbox" disabled checked>Disabled entries<br> <br> <table border="1" cellpadding="0" cellspacing="0"> <tr> <th class="cap" width="20"> </th> <th class="cap">Risk</th> <th class="cap">Name</th> <th class="cap">Publisher</th> <th class="cap">Full Path</th> <th class="cap">Status</th> </tr> <tr> <td class="group" colspan="6">Common</td> </tr> <tr> <td class="reg" colspan="6">%SystemRoot%\Tasks</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"GoogleUpdateTaskMachineCore.job"</td> <td>"Google Inc."</td> <td>C:\Program Files\Google\Update\GoogleUpdate.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"GoogleUpdateTaskMachineUA.job"</td> <td>"Google Inc."</td> <td>C:\Program Files\Google\Update\GoogleUpdate.exe</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Control Panel Objects</td> </tr> <tr> <td class="reg" colspan="6">%SystemRoot%\system32</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"FlashPlayerCPLApp.cpl"</td> <td>"Adobe Systems Incorporated"</td> <td>C:\Windows\system32\FlashPlayerCPLApp.cpl</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Adobe Gamma"</td> <td>"Adobe Systems, Inc."</td> <td>C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"mlcfg32.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\MICROS~4\Office12\MLCFG32.CPL</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Pando"</td> <td>"Pando Networks"</td> <td>C:\Program Files\Pando Networks\Media Booster\PMB.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"QuickTime"</td> <td>"Apple Inc."</td> <td>C:\Program Files\QuickTime\QTSystem\QuickTime.cpl</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Drivers</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services</td> </tr> <tr> <td class="rootkit"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="rootkit">"a4h2sb7e" (a4h2sb7e)</td> <td class="rootkit"></td> <td class="rootkit">C:\Windows\system32\drivers\a4h2sb7e.sys</td> <td class="rootkit">Hidden registry entry, rootkit activity | File not found</td> </tr> <tr> <td class="rootkit"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="rootkit">"aswMBR" (aswMBR)</td> <td class="rootkit"></td> <td class="rootkit">C:\Users\ENRICO~1\AppData\Local\Temp\aswMBR.sys</td> <td class="rootkit">Hidden registry entry, rootkit activity | File not found</td> </tr> <tr> <td class="nodetails"><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td class="nodetails">"atksgt" (atksgt)</td> <td class="nodetails"></td> <td class="nodetails">C:\Windows\System32\DRIVERS\atksgt.sys</td> <td class="nodetails">File found, but it contains no detailed information</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"avgio" (avgio)</td> <td>"Avira GmbH"</td> <td>C:\Program Files\Avira\AntiVir Desktop\avgio.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"avgntflt" (avgntflt)</td> <td>"Avira GmbH"</td> <td>C:\Windows\System32\DRIVERS\avgntflt.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"avipbb" (avipbb)</td> <td>"Avira GmbH"</td> <td>C:\Windows\System32\DRIVERS\avipbb.sys</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"catchme" (catchme)</td> <td class="notfound"></td> <td class="notfound">C:\ComboFix\catchme.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"DgiVecp" (DgiVecp)</td> <td class="notfound"></td> <td class="notfound">C:\Windows\system32\Drivers\DgiVecp.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"GEARAspiWDM" (GEARAspiWDM)</td> <td>"GEAR Software Inc."</td> <td>C:\Windows\System32\Drivers\GEARAspiWDM.sys</td> <td>File exists</td> </tr> <tr> <td class="nodetails"><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td class="nodetails">"giveio" (giveio)</td> <td class="nodetails"></td> <td class="nodetails">C:\Windows\System32\giveio.sys</td> <td class="nodetails">File found, but it contains no detailed information</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"IP in IP Tunnel Driver" (IpInIp)</td> <td class="notfound"></td> <td class="notfound">C:\Windows\System32\DRIVERS\ipinip.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"IPX Traffic Filter Driver" (NwlnkFlt)</td> <td class="notfound"></td> <td class="notfound">C:\Windows\System32\DRIVERS\nwlnkflt.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"IPX Traffic Forwarder Driver" (NwlnkFwd)</td> <td class="notfound"></td> <td class="notfound">C:\Windows\System32\DRIVERS\nwlnkfwd.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"Lavasoft helper driver" (Lavasoft Kernexplorer)</td> <td class="notfound"></td> <td class="notfound">C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td class="nodetails"><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td class="nodetails">"lirsgt" (lirsgt)</td> <td class="nodetails"></td> <td class="nodetails">C:\Windows\System32\DRIVERS\lirsgt.sys</td> <td class="nodetails">File found, but it contains no detailed information</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"MBAMSwissArmy" (MBAMSwissArmy)</td> <td class="notfound"></td> <td class="notfound">C:\Windows\system32\drivers\mbamswissarmy.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rr">||||||</td> <td>"NetGroup Packet Filter Driver (devolo)" (NPF_devolo)</td> <td>"CACE Technologies"</td> <td>C:\Windows\system32\drivers\npf_devolo.sys</td> <td>File exists</td> </tr> <tr> <td class="rootkit"><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td class="rootkit">"pwdiypod" (pwdiypod)</td> <td class="rootkit">"GMER"</td> <td class="rootkit">C:\pwdiypod.sys</td> <td class="rootkit">Hidden registry entry, rootkit activity</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"RT2870 USB Wireless LAN Card Driver for Vista" (netr28u)</td> <td>"Ralink Technology Corp."</td> <td>C:\Windows\System32\DRIVERS\netr28u.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"speedfan" (speedfan)</td> <td>"Almico Software"</td> <td>C:\Windows\System32\speedfan.sys</td> <td>File exists</td> </tr> <tr> <td class="blocked"><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td class="blocked">"sptd" (sptd)</td> <td class="blocked">"Duplex Secure Ltd."</td> <td class="blocked">C:\Windows\System32\Drivers\sptd.sys</td> <td class="blocked">File is exclusively opened, access blocked</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ssmdrv" (ssmdrv)</td> <td>"Avira GmbH"</td> <td>C:\Windows\System32\DRIVERS\ssmdrv.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"SSPORT" (SSPORT)</td> <td>"Samsung Electronics"</td> <td>C:\Windows\system32\Drivers\SSPORT.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rc">|| </td> <td>"TP-LINK TL-WN821N 11N Wireless device driver" (arusb_lh)</td> <td>"Atheros Communications, Inc."</td> <td>C:\Windows\System32\DRIVERS\arusb_lh.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"TuneUpUtilitiesDrv" (TuneUpUtilitiesDrv)</td> <td>"TuneUp Software"</td> <td>C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Explorer</td> </tr> <tr> <td class="reg" colspan="6">HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Classes\Folder\shellex\ColumnHandlers</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension"</td> <td>"Adobe Systems, Inc."</td> <td>C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}"</td> <td></td> <td>C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Classes\Protocols\Filter</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Classes\Protocols\Handler</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class"</td> <td>"Microsoft Corporation"</td> <td>C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>{828030A1-22C1-4009-854F-8E305202313F} "livecall"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{88FED34C-F0CA-4636-A375-3CB6248B04CD} "Local Groove Web Services Protocol"</td> <td>"Microsoft Corporation"</td> <td>C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0"</td> <td>"Microsoft Corporation"</td> <td>C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>{828030A1-22C1-4009-854F-8E305202313F} "msnim"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{23170F69-40C1-278A-1000-000100020000} "7-Zip Shell Extension"</td> <td>"Igor Pavlov"</td> <td>C:\Program Files\7-Zip\7-zip.dll</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{A70C977A-BF00-412C-90B7-034C51DA2439} "DesktopContext Class"</td> <td>"NVIDIA Corporation"</td> <td>C:\Program Files\NVIDIA Corporation\Display\nvui.dll</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{99FD978C-D287-4F50-827F-B2C658EDA8E7} "Groove Explorer Icon Overlay 1 (GFS Unread Stub)"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} "Groove Explorer Icon Overlay 2 (GFS Stub)"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{920E6DB1-9907-4370-B3A0-BAFC03D81399} "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{16F3DD56-1AF5-4347-846D-7C10C4192619} "Groove Explorer Icon Overlay 3 (GFS Folder)"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{2916C86E-86A6-43FE-8112-43ABE6BF8DCC} "Groove Explorer Icon Overlay 4 (GFS Unread Mark)"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{6C467336-8281-4E60-8204-430CED96822D} "Groove GFS Context Menu Handler"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{2A541AE1-5BF6-4665-A8A3-CFA9672E4291} "Groove GFS Explorer Bar"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{A449600E-1DC6-4232-B948-9BD794D62056} "Groove GFS Stub Icon Handler"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{387E725D-DC16-4D76-B310-2C93ED4752A0} "Groove XML Icon Handler"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} "IE User Assist"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\Program Files\Microsoft Office\OFFICE11\msohev.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\MICROS~4\Office12\ONFILTER.DLL</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{00020d75-0000-0000-c000-000000000046} "Microsoft Office Outlook"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\MICROS~4\Office12\MLSHEXT.DLL</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} "NVIDIA CPL Context Menu Extension"</td> <td>"NVIDIA Corporation"</td> <td>C:\Windows\system32\nvshext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler"</td> <td></td> <td>C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler"</td> <td></td> <td>C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler"</td> <td></td> <td>C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer"</td> <td></td> <td>C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\MICROS~4\Office12\OLKFSTUB.DLL</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning"</td> <td>"Avira GmbH"</td> <td>C:\Program Files\Avira\AntiVir Desktop\shlext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{4838CD50-7E5D-4811-9B17-C47A85539F28} "TuneUp Disk Space Explorer Shell Extension"</td> <td>"TuneUp Software"</td> <td>C:\Program Files\TuneUp Utilities 2010\DseShExt-x86.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{4858E7D9-8E12-45a3-B6A3-1CD128C9D403} "TuneUp Shredder Shell Extension"</td> <td>"TuneUp Software"</td> <td>C:\Program Files\TuneUp Utilities 2010\SDShelEx-win32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{44440D00-FF19-4AFC-B765-9A0970567D97} "TuneUp Theme Extension"</td> <td>"TuneUp Software"</td> <td>C:\Windows\System32\uxtuneup.dll</td> <td>File exists</td> </tr> <tr> <td class="nodetails"><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td class="nodetails">{DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} "UnlockerShellExtension"</td> <td class="nodetails"></td> <td class="nodetails">C:\Program Files\Unlocker\UnlockerCOM.dll</td> <td class="nodetails">File found, but it contains no detailed information</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR"</td> <td>"Alexander Roshal"</td> <td>C:\Program Files\WinRAR\rarext.dll</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Internet Explorer</td> </tr> <tr> <td class="reg" colspan="6">HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">ITBar7Height "ITBar7Height"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound"><binary data> "ITBar7Layout"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_26"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab</td> <td>"Sun Microsystems, Inc."</td> <td>C:\Program Files\Java\jre6\bin\jp2iexp.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} "Java Plug-in 1.6.0_26"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab</td> <td>"Sun Microsystems, Inc."</td> <td>C:\Program Files\Java\jre6\bin\jp2iexp.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_26"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab</td> <td>"Sun Microsystems, Inc."</td> <td>C:\Program Files\Java\jre6\bin\npjpi160_26.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object"<br>hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab</td> <td>"Adobe Systems, Inc."</td> <td>C:\Windows\system32\Macromed\Flash\Flash10w.ocx</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{53707962-6F74-2D53-2644-206D7942484F} "ClsidExtension"</td> <td>"Safer Networking Limited"</td> <td>C:\Program Files\Spybot - Search & Destroy\SDHelper.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"ICQ7"</td> <td>"ICQ, LLC."</td> <td>C:\Program Files\ICQ7.0\ICQ.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper"</td> <td>"Adobe Systems Incorporated"</td> <td>C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper"</td> <td>"Sun Microsystems, Inc."</td> <td>C:\Program Files\Java\jre6\bin\jp2ssv.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{53707962-6F74-2D53-2644-206D7942484F} "Spybot-S&D IE Protection"</td> <td>"Safer Networking Limited"</td> <td>C:\Program Files\Spybot - Search & Destroy\SDHelper.dll</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Logon</td> </tr> <tr> <td class="reg" colspan="6">%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"Adobe Gamma.lnk"</td> <td>"Adobe Systems, Inc."</td> <td>C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe</td> <td>Shortcut exists | File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td>"CurseClientStartup.ccip"</td> <td></td> <td>C:\Users\Enrico 3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"desktop.ini"</td> <td></td> <td>C:\Users\Enrico 3\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Dropbox.lnk"</td> <td>"Dropbox, Inc."</td> <td>C:\Users\Enrico 3\AppData\Roaming\Dropbox\bin\Dropbox.exe</td> <td>Shortcut exists | File exists</td> </tr> <tr> <td class="reg" colspan="6">%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"desktop.ini"</td> <td></td> <td>C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"StartupPrograms"</td> <td class="notfound"></td> <td class="notfound">rdpclip</td> <td class="notfound">File not found</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Run</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"avgnt"</td> <td>"Avira GmbH"</td> <td>"C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Print Monitors</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors</td> </tr> <tr> <td class="nodetails"><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td class="nodetails">"Redirected Port"</td> <td class="nodetails"></td> <td class="nodetails">C:\Windows\system32\redmonnt.dll</td> <td class="nodetails">File found, but it contains no detailed information</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Send To Microsoft OneNote Monitor"</td> <td>"Microsoft Corporation"</td> <td>C:\Windows\system32\msonpmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"SST3C Langmon"</td> <td></td> <td>C:\Windows\system32\sst3cl3.dll</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Services</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"@%SystemRoot%\System32\uxtuneup.dll,-4096" (UxTuneUp)</td> <td>"TuneUp Software"</td> <td>C:\Windows\System32\uxtuneup.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"@C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1" (TuneUp.Defrag)</td> <td>"TuneUp Software"</td> <td>C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100" (WPFFontCache_v0400)</td> <td>"Microsoft Corporation"</td> <td>C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rc">|| </td> <td>"Adobe Acrobat Update Service" (AdobeARMservice)</td> <td>"Adobe Systems Incorporated"</td> <td>C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Adobe LM Service" (Adobe LM Service)</td> <td>"Adobe Systems"</td> <td>C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Avira AntiVir Guard" (AntiVirService)</td> <td>"Avira GmbH"</td> <td>C:\Program Files\Avira\AntiVir Desktop\avguard.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Avira AntiVir Planer" (AntiVirSchedulerService)</td> <td>"Avira GmbH"</td> <td>C:\Program Files\Avira\AntiVir Desktop\sched.exe</td> <td>File exists</td> </tr> <tr> <td class="nodetails"><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td class="nodetails">"devolo Network Service" (DevoloNetworkService)</td> <td class="nodetails"></td> <td class="nodetails">C:\Program Files\devolo\dlan\devolonetsvc.exe</td> <td class="nodetails">File found, but it contains no detailed information</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rc">|| </td> <td>"GameConsoleService" (GameConsoleService)</td> <td>"WildTangent, Inc."</td> <td>C:\Program Files\WildGames\Game Console - WildGames\GameConsoleService.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"Google Update Service (gupdate)" (gupdate)</td> <td>"Google Inc."</td> <td>C:\Program Files\Google\Update\GoogleUpdate.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"Google Update-Dienst (gupdatem)" (gupdatem)</td> <td>"Google Inc."</td> <td>C:\Program Files\Google\Update\GoogleUpdate.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rc">|| </td> <td>"ICQ Service" (ICQ Service)</td> <td></td> <td>C:\Program Files\ICQ6Toolbar\ICQ Service.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"InstallDriver Table Manager" (IDriverT)</td> <td>"Macrovision Corporation"</td> <td>C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32)</td> <td>"Microsoft Corporation"</td> <td>C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Office Diagnostics Service" (odserv)</td> <td>"Microsoft Corporation"</td> <td>C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Office Groove Audit Service" (Microsoft Office Groove Audit Service)</td> <td>"Microsoft Corporation"</td> <td>C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NVIDIA Display Driver Service" (nvsvc)</td> <td>"NVIDIA Corporation"</td> <td>C:\Windows\system32\nvvsvc.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NVIDIA Stereoscopic 3D Driver Service" (Stereo Service)</td> <td>"NVIDIA Corporation"</td> <td>C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NVIDIA Update Service Daemon" (nvUpdatusService)</td> <td>"NVIDIA Corporation"</td> <td>C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Office Source Engine" (ose)</td> <td>"Microsoft Corporation"</td> <td>C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE</td> <td>File exists</td> </tr> <tr> <td class="nodetails"><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td class="nodetails">"PnkBstrA" (PnkBstrA)</td> <td class="nodetails"></td> <td class="nodetails">C:\Windows\system32\PnkBstrA.exe</td> <td class="nodetails">File found, but it contains no detailed information</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"SBSD Security Center Service" (SBSDWSCService)</td> <td>"Safer Networking Ltd."</td> <td>C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"StarWind AE Service" (StarWindServiceAE)</td> <td class="notfound"></td> <td class="notfound">C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe</td> <td class="notfound">File not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"StarWind iSCSI Service" (StarWindService)</td> <td class="notfound"></td> <td class="notfound">C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Steam Client Service" (Steam Client Service)</td> <td>"Valve Corporation"</td> <td>C:\Program Files\Common Files\Steam\SteamService.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rr">||||||</td> <td>"TeamViewer 5" (TeamViewer5)</td> <td>"TeamViewer GmbH"</td> <td>C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"TeamViewer 6" (TeamViewer6)</td> <td>"TeamViewer GmbH"</td> <td>C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"TuneUp Utilities Service" (TuneUp.UtilitiesSvc)</td> <td>"TuneUp Software"</td> <td>C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"X10 Device Network Service" (x10nets)</td> <td>"X10"</td> <td>C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe</td> <td>File exists</td> </tr> </table> <p>If You have questions or want to get some help, You can visit <a href="hxxp://forum.online-solutions.ru" target="_blank">hxxp://forum.online-solutions.ru</a></p> </body></html> Code:
ATTFilter aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-09-27 14:43:30
-----------------------------
14:43:30.330 OS Version: Windows 6.0.6002 Service Pack 2
14:43:30.331 Number of processors: 4 586 0xF0B
14:43:30.331 ComputerName: ENRICO-PC UserName: Enrico 3
14:43:32.231 Initialize success
14:43:35.722 AVAST engine defs: 11092700
14:43:41.443 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0
14:43:41.448 Disk 0 Vendor: WDC_WD5000AACS-00ZUB0 01.01B01 Size: 476940MB BusType: 3
14:43:43.514 Disk 0 MBR read successfully
14:43:43.519 Disk 0 MBR scan
14:43:43.524 Disk 0 Windows VISTA default MBR code
14:43:43.529 Disk 0 scanning sectors +976768065
14:43:43.629 Disk 0 scanning C:\Windows\system32\drivers
14:43:56.584 Service scanning
14:43:57.643 Service sptd C:\Windows\System32\Drivers\sptd.sys **LOCKED** 32
14:43:58.172 Modules scanning
14:44:03.218 Disk 0 trace - called modules:
14:44:03.228 ntkrnlpa.exe CLASSPNP.SYS disk.sys acpi.sys hal.dll >>UNKNOWN [0x8662c1f8]<<
14:44:03.233 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8708d380]
14:44:03.238 3 CLASSPNP.SYS[8b3a58b3] -> nt!IofCallDriver -> [0x866a6838]
14:44:03.243 5 acpi.sys[807c06bc] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-0[0x8666ab98]
14:44:03.253 \Driver\atapi[0x86679030] -> IRP_MJ_CREATE -> 0x8662c1f8
14:44:05.194 AVAST engine scan C:\Windows
14:44:10.528 AVAST engine scan C:\Windows\system32
14:46:39.288 AVAST engine scan C:\Windows\system32\drivers
14:46:54.470 AVAST engine scan C:\Users\Enrico 3
15:04:43.681 AVAST engine scan C:\ProgramData
15:09:04.380 Scan finished successfully
15:09:57.533 Disk 0 MBR has been saved successfully to "C:\Users\Enrico 3\Desktop\MBR.dat"
15:09:57.538 The log file has been saved successfully to "C:\Users\Enrico 3\Desktop\aswMBR.txt"
Mein Pc ist seit Sonntag nicht mehr abgestürzt, aber nur, weil ich keine Spiele und Videos offen hatte. |
|
27.09.2011, 15:01
| #20 |
| | Plötzliche Computer Abstürze So jetzt aber, war etwas irritiert was mit der Online Abfrage gemeint sein sollte. Code:
ATTFilter OSAM Logfile: |
|
27.09.2011, 15:13
| #21 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Plötzliche Computer Abstürze Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs. Denk dran beide Tools zu updaten vor dem Scan!! Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ --> Plötzliche Computer Abstürze |
|
27.09.2011, 15:56
| #22 |
| | Plötzliche Computer Abstürze Habe eben mal etwas gespielt, lief Reibungslos, mal schauen wie es bleibt. Die Kontroll Scans mache ich Morgen, da ich heute keine Zeit mehr dazu habe. Danke für die Hilfe  |
|
28.09.2011, 19:15
| #23 |
| | Plötzliche Computer Abstürze Im Moment läuft alles ziemlich gut, außer dass er gestern bei einem Youtube Video wieder Abstürzte. Malwarebytes log: Code:
ATTFilter Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org
Datenbank Version: 7817
Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421
28.09.2011 20:12:40
mbam-log-2011-09-28 (20-12-40).txt
Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 701096
Laufzeit: 3 Stunde(n), 12 Minute(n), 5 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
|
|
| Themen zu Plötzliche Computer Abstürze |
| acrobat update, adobe, antivir, antivir guard, avg, avira, bho, bildschirm, browser, computer, conduit, defender, desktop, explorer, fehlermeldung, hijack, hijackthis, internet, internet explorer, nvidia update, object, plug-in, plötzliche pc abstürze, problem, safer networking, security, senden, software, system, vista, windows |
Linear-Darstellung
