Lautstärke-Trojaner nach System Recovery nicht verschwunden

YukineChris

Hallo Leute!

Ich habe mir nichts weiteres zu schulden kommen lassen, als wöchentlich meine Lieblingsserien in Online-Streams anzuschauen und mir dabei den berühmt berüchtigten Lautstärke-Trojaner geholt, der permanent die Lautstärke auf Maximum dreht.

Ich besitze einen Packard Bell PC mit Windows 7 als Betriebssystem, welches ich schon mehrmals neu aufgesetzt habe, aber dieser biestige Trojaner ist immer noch da.
Problem: Da Packard Bell eine undurchsichtige Menüführung beim Neuinstallieren hat, steige ich nicht dahinter, wie man Volume:C komplett plattmacht.
Frage 1: Würde mir jemand erklären, wie das manuell geht?
Frage 2: Würde das Plattmachen den Trojaner eliminieren?
Frage 3: Wenn nicht, könnt ihr mir leicht verständlich erklären, wie ich den loswerde, ohne den Laptop aus dem Fenster werfen zu müssen? ^^

Hier die Logfiles:

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385
Run by Anne at 23:58:06 on 2012-02-27
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.49.1031.18.3948.2736 [GMT 1:00]
.
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Launch Manager\dsiwmis.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Elantech\ETDCtrl.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Windows\system32\igfxext.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Elantech\ETDCtrlHelper.exe
C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccSvcHst.exe
C:\Windows\system32\taskeng.exe
C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Windows\system32\sppsvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://packardbell.msn.com
uDefault_Page_URL = hxxp://packardbell.msn.com
mDefault_Page_URL = hxxp://packardbell.msn.com
mStart Page = hxxp://packardbell.msn.com
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll
BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\IPS\IPSBHO.DLL
BHO: Windows Live ID-Anmelde-Hilfsprogramm: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\coIEPlg.dll
mRun: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun: [BackupManagerTray] "C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
mRun: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{A820A1CB-A96C-459C-8F66-04DD233DFBFB} : DhcpNameServer = 192.168.2.1
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
{18DF081C-E8AD-4283-A596-FA578C2EBDC3}
{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}
{6D53EC84-6AAE-4787-AEEE-F4628F01010C}
{9030D464-4C02-4ABF-8ECC-5164760863C6}
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
mRun-x64: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
mRun-x64: [BackupManagerTray] "C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe" -h -k
mRun-x64: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
mRun-x64: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
AppInit_DLLs-X64: C:\Windows\SysWOW64\nvinit.dll
.
============= SERVICES / DRIVERS ===============
.
R0 nvpciflt;nvpciflt;C:\Windows\system32\DRIVERS\nvpciflt.sys --> C:\Windows\system32\DRIVERS\nvpciflt.sys [?]
R0 PxHlpa64;PxHlpa64;C:\Windows\system32\Drivers\PxHlpa64.sys --> C:\Windows\system32\Drivers\PxHlpa64.sys [?]
R0 SymDS;Symantec Data Store;C:\Windows\system32\drivers\NISx64\1206000.01D\SYMDS64.SYS --> C:\Windows\system32\drivers\NISx64\1206000.01D\SYMDS64.SYS [?]
R0 SymEFA;Symantec Extended File Attributes;C:\Windows\system32\drivers\NISx64\1206000.01D\SYMEFA64.SYS --> C:\Windows\system32\drivers\NISx64\1206000.01D\SYMEFA64.SYS [?]
R1 BHDrvx64;BHDrvx64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20120215.001\BHDrvx64.sys [2012-2-15 1157240]
R1 IDSVia64;IDSVia64;C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20120224.002\IDSviA64.sys [2012-2-24 488568]
R1 SymIRON;Symantec Iron Driver;C:\Windows\system32\drivers\NISx64\1206000.01D\Ironx64.SYS --> C:\Windows\system32\drivers\NISx64\1206000.01D\Ironx64.SYS [?]
R1 SymNetS;Symantec Network Security WFP Driver;C:\Windows\system32\Drivers\NISx64\1206000.01D\SYMNETS.SYS --> C:\Windows\system32\Drivers\NISx64\1206000.01D\SYMNETS.SYS [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-12-10 311376]
R2 ePowerSvc;Acer ePower Service;C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2010-12-3 868224]
R2 GREGService;GREGService;C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [2010-1-8 23584]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-12-3 13336]
R2 NIS;Norton Internet Security;C:\Program Files (x86)\Norton Internet Security\Engine\18.6.0.29\ccsvchst.exe [2012-2-27 130008]
R2 NOBU;Norton Online Backup;C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-6-2 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe [2010-11-12 257344]
R2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2012-2-27 1997416]
R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\system32\DRIVERS\TurboB.sys --> C:\Windows\system32\DRIVERS\TurboB.sys [?]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-2-27 2656280]
R2 Updater Service;Updater Service;C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2010-12-3 243232]
R3 b57xdbd;Broadcom xD Picture Bus Driver Service;C:\Windows\system32\DRIVERS\b57xdbd.sys --> C:\Windows\system32\DRIVERS\b57xdbd.sys [?]
R3 b57xdmp;Broadcom xD Picture vstorp client drv;C:\Windows\system32\DRIVERS\b57xdmp.sys --> C:\Windows\system32\DRIVERS\b57xdmp.sys [?]
R3 bScsiMSa;bScsiMSa;C:\Windows\system32\DRIVERS\bScsiMSa.sys --> C:\Windows\system32\DRIVERS\bScsiMSa.sys [?]
R3 bScsiSDa;bScsiSDa;C:\Windows\system32\DRIVERS\bScsiSDa.sys --> C:\Windows\system32\DRIVERS\bScsiSDa.sys [?]
R3 ETD;ELAN PS/2 Port Input Device;C:\Windows\system32\DRIVERS\ETD.sys --> C:\Windows\system32\DRIVERS\ETD.sys [?]
R3 IntcDAud;Intel(R) Display-Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\k57nd60a.sys --> C:\Windows\system32\DRIVERS\k57nd60a.sys [?]
R3 MEIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;C:\Windows\system32\DRIVERS\nusb3hub.sys --> C:\Windows\system32\DRIVERS\nusb3hub.sys [?]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;C:\Windows\system32\DRIVERS\nusb3xhc.sys --> C:\Windows\system32\DRIVERS\nusb3xhc.sys [?]
S3 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-10-9 169312]
S3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-10-8 150016]
S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184]
.
=============== Created Last 30 ================
.
2012-02-28 06:07:55 2560 ----a-w- C:\Windows\System32\drivers\de-DE\qwavedrv.sys.mui
2012-02-28 06:03:05 -------- d-----w- C:\Windows\NAPP_Dism_Log
2012-02-27 22:34:37 912504 ----a-w- C:\Windows\System32\drivers\NISx64\1206000.01D\symefa64.sys
2012-02-27 22:34:37 744568 ----a-w- C:\Windows\System32\drivers\NISx64\1206000.01D\srtsp64.sys
2012-02-27 22:34:37 450680 ----a-w- C:\Windows\System32\drivers\NISx64\1206000.01D\symds64.sys
2012-02-27 22:34:37 40568 ----a-w- C:\Windows\System32\drivers\NISx64\1206000.01D\srtspx64.sys
2012-02-27 22:34:37 382584 ----a-w- C:\Windows\System32\drivers\NISx64\1206000.01D\symnets.sys
2012-02-27 22:34:37 171128 ----a-w- C:\Windows\System32\drivers\NISx64\1206000.01D\ironx64.sys
2012-02-27 22:34:32 -------- d-----w- C:\Windows\System32\drivers\NISx64\1206000.01D
2012-02-27 22:16:31 174200 ----a-w- C:\Windows\System32\drivers\SYMEVENT64x86.SYS
2012-02-27 22:16:31 -------- d-----w- C:\Users\Anne\AppData\Roaming\Intel Corporation
2012-02-27 22:16:31 -------- d-----w- C:\Program Files\Symantec
2012-02-27 22:16:31 -------- d-----w- C:\Program Files\Common Files\Symantec Shared
2012-02-27 22:15:05 -------- d-----w- C:\Users\Anne\AppData\Local\VirtualStore
2012-02-27 22:13:47 -------- d-sh--we C:\Programme
2012-02-27 22:13:47 -------- d-sh--we C:\ProgramData\Vorlagen
2012-02-27 22:13:47 -------- d-sh--we C:\Program Files\Gemeinsame Dateien
2012-02-27 22:13:47 -------- d-sh--w- C:\Recovery
2012-02-27 22:13:46 -------- d-sh--we C:\ProgramData\Startmenü
2012-02-27 22:13:46 -------- d-sh--we C:\ProgramData\Favoriten
2012-02-27 22:13:46 -------- d-sh--we C:\ProgramData\Dokumente
2012-02-27 22:13:46 -------- d-sh--we C:\ProgramData\Anwendungsdaten
2012-02-27 22:13:46 -------- d-sh--we C:\Dokumente und Einstellungen
2012-02-27 22:01:14 -------- d-----w- C:\ProgramData\boost_interprocess
2012-02-27 22:00:51 -------- d-----w- C:\Windows\SysWow64\NV
2012-02-27 22:00:51 -------- d-----w- C:\Windows\System32\NV
2012-02-27 21:57:42 -------- d-----w- C:\Program Files (x86)\Video Web Camera
2012-02-27 21:56:33 -------- d-----w- C:\Windows\de
2012-02-27 21:56:14 -------- d-----w- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2012-02-27 21:53:54 -------- d-----w- C:\Program Files (x86)\Common Files\Macrovision Shared
2012-02-27 21:53:44 55024 ------w- C:\Windows\System32\drivers\PxHlpa64.sys
2012-02-27 21:52:26 -------- d-----w- C:\Program Files (x86)\Common Files\Sonic Shared
2012-02-27 21:52:25 -------- d-----w- C:\Program Files (x86)\Common Files\PX Storage Engine
2012-02-27 21:51:09 1825280 ----a-w- C:\ProgramData\Microsoft\OEMOffice14\Office14\Word.de-de\WordMUI.msi
2012-02-27 21:45:59 2197608 ----a-w- C:\Windows\System32\nvapi64.dll
2012-02-27 21:45:59 1962600 ----a-w- C:\Windows\SysWow64\nvapi.dll
2012-02-27 21:45:59 18580072 ----a-w- C:\Windows\System32\nvcompiler.dll
2012-02-27 21:45:59 13011560 ----a-w- C:\Windows\SysWow64\nvcompiler.dll
2012-02-27 21:45:59 11240 ----a-w- C:\Windows\System32\drivers\nvBridge.kmd
2012-02-27 21:45:55 -------- d-----w- C:\Program Files\NVIDIA Corporation
2012-02-27 21:45:18 8192 ----a-w- C:\Windows\System32\drivers\IntelMEFWVer.dll
2012-02-27 21:45:15 -------- d-----w- C:\Program Files (x86)\Common Files\postureAgent
2012-02-27 21:44:37 -------- d-----w- C:\Program Files\Elantech
2012-02-27 21:43:48 -------- d-----w- C:\Program Files (x86)\Launch Manager
2012-02-27 21:38:45 2578576 ----a-w- C:\Windows\System32\WavesGUILib.dll
2012-02-27 21:38:44 608768 ----a-w- C:\Windows\System32\RCoRes64.dat
2012-02-27 21:38:44 2828392 ----a-w- C:\Windows\System32\RtkAPO64.dll
2012-02-27 21:38:44 2688488 ----a-w- C:\Windows\System32\drivers\RTKVHD64.sys
2012-02-27 21:38:44 2328168 ----a-w- C:\Windows\System32\RtPgEx64.dll
2012-02-27 21:38:44 1868944 ----a-w- C:\Windows\System32\MaxxAudioRealtek.dll
2012-02-27 21:37:23 -------- d-----w- C:\Program Files (x86)\Renesas Electronics
2012-02-27 21:34:06 7680 ----a-w- C:\Program Files\Internet Explorer\iecompat.dll
2012-02-27 21:34:06 7680 ----a-w- C:\Program Files (x86)\Internet Explorer\iecompat.dll
2012-02-27 21:33:43 2048 ----a-w- C:\Windows\SysWow64\tzres.dll
2012-02-27 21:33:43 2048 ----a-w- C:\Windows\System32\tzres.dll
2012-02-27 21:33:25 112000 ----a-w- C:\Windows\System32\consent.exe
2012-02-27 21:33:06 3124224 ----a-w- C:\Windows\System32\win32k.sys
2012-02-27 21:31:51 524288 ----a-w- C:\Windows\System32\wmicmiplugin.dll
2012-02-27 21:30:51 258560 ----a-w- C:\Windows\System32\mpg2splt.ax
2012-02-27 21:30:50 961024 ----a-w- C:\Windows\System32\CPFilters.dll
2012-02-27 21:30:50 641536 ----a-w- C:\Windows\SysWow64\CPFilters.dll
2012-02-27 21:30:50 552960 ----a-w- C:\Windows\System32\msdri.dll
2012-02-27 21:30:50 288256 ----a-w- C:\Windows\System32\MSNP.ax
2012-02-27 21:30:50 204288 ----a-w- C:\Windows\SysWow64\MSNP.ax
2012-02-27 21:30:50 199680 ----a-w- C:\Windows\SysWow64\mpg2splt.ax
2012-02-27 21:30:37 27008 ----a-w- C:\Windows\System32\drivers\Diskdump.sys
2012-02-27 21:29:35 -------- d---a-w- C:\book
2012-02-27 21:25:38 -------- d-----w- C:\Program Files\Common Files\Intel
2012-02-27 21:25:37 -------- d-----w- C:\Program Files (x86)\Common Files\Intel
.
==================== Find3M ====================
.
2012-02-28 06:07:56 2560 ----a-w- C:\Windows\SysWow64\drivers\de-DE\qwavedrv.sys.mui
2012-02-28 06:07:43 5632 ----a-w- C:\Windows\SysWow64\drivers\de-DE\ndiscap.sys.mui
2012-02-28 06:07:43 2560 ----a-w- C:\Windows\SysWow64\drivers\de-DE\scfilter.sys.mui
2012-02-28 06:07:40 51712 ----a-w- C:\Windows\SysWow64\drivers\de-DE\tcpip.sys.mui
2012-02-28 06:07:37 29696 ----a-w- C:\Windows\SysWow64\drivers\de-DE\bfe.dll.mui
2012-02-28 06:07:37 16896 ----a-w- C:\Windows\SysWow64\drivers\de-DE\pacer.sys.mui
2012-02-27 21:27:06 6 ----a-w- C:\Windows\System32\PLD_Framework.cmd
.
============= FINISH: 23:58:43,59 ===============



.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume2
Install Date: 27.02.2012 23:14:00
System Uptime: 27.02.2012 23:53:58 (0 hours ago)
.
Motherboard: Packard Bell | | SJV50_HR
Processor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz | CPU1 | 2301/1333mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 450 GiB total, 422,515 GiB free.
D: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
No restore point in system.
.
==== Installed Programs ======================
.
7-Zip 9.20
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Photoshop Elements 8.0
Adobe Reader 9.1 MUI
Advertising Center
Agatha Christie - Death on the Nile
Backup Manager V3
Bejeweled 2 Deluxe
Build-a-lot 2
Chuzzle Deluxe
CyberLink MediaEspresso
D3DX10
Diner Dash 2 Restaurant Rescue
eBay Worldwide
Farm Frenzy
FATE
Final Drive Nitro
HomeMedia
Identity Card
ImagXpress
Insaniquarium Deluxe
Intel(R) Control Center
Intel(R) Management Engine Components
Intel(R) Processor Graphics
Intel(R) Rapid Storage Technology
Jewel Quest Solitaire 2
John Deere Drive Green
Junk Mail filter update
Launch Manager
Mesh Runtime
Microsoft Office 2010
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
MSVCRT
MSVCRT_amd64
Nero 9 Essentials
Nero ControlCenter
Nero DiscSpeed
Nero DiscSpeed Help
Nero DriveSpeed
Nero DriveSpeed Help
Nero Express Help
Nero InfoTool
Nero InfoTool Help
Nero Installer
Nero Online Upgrade
Nero StartSmart
Nero StartSmart Help
Nero StartSmart OEM
NeroExpress
neroxml
Norton Internet Security
Norton Online Backup
Packard Bell Game Console
Packard Bell Games
Packard Bell MyBackup
Packard Bell Power Management
Packard Bell Recovery Management
Packard Bell Registration
Packard Bell ScreenSaver
Packard Bell Social Networks
Packard Bell Updater
Penguins!
Plants vs. Zombies
Polar Bowler
Polar Golfer
Realtek High Definition Audio Driver
Renesas Electronics USB 3.0 Host Controller Driver
Video Web Camera
Virtual Villagers 4 - The Tree of Life
Welcome Center
Windows Live Communications Platform
Windows Live Essentials
Windows Live Fotogalerie
Windows Live Installer
Windows Live Mail
Windows Live Mesh
Windows Live Mesh ActiveX control for remote connections
Windows Live Messenger
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
Zuma's Revenge
.
==== End Of File ===========================


GMER mit ausgeschaltetem Internet / Virenschutz:

GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-02-28 00:09:57
Windows 6.1.7600
Running: 750v089o.exe


---- Files - GMER 1.0.15 ----

File C:\Windows\SoftwareDistribution\DataStore\Logs\tmp.edb 0 bytes

---- EOF - GMER 1.0.15 ----

GMER mit angeschaltetem Internet / Virenschutz:

GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-02-27 23:50:40
Windows 6.1.7600
Running: 750v089o.exe


---- Files - GMER 1.0.15 ----

File C:\Windows\System32\wbem\Performance\WmiApRpl_new.ini 50088 bytes

---- EOF - GMER 1.0.15 ----