Sperrbildschirm Interpol

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-09-2013 01
Ran by SYSTEM on MININT-0FNAOJT on 30-09-2013 18:10:24
Running from G:\
Microsoft Windows XP (X86) OS Language: German Standard
Internet Explorer Version 7
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NeroFilterCheck] - C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [SoundMan] - C:\Windows\SOUNDMAN.EXE [77824 2005-05-17] (Realtek Semiconductor Corp.)
HKLM\...\Run: [ccApp] - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe [51048 2008-10-17] (Symantec Corporation)
HKLM\...\Run: [osCheck] - C:\Programme\Norton Internet Security\osCheck.exe [714608 2007-08-24] (Symantec Corporation)
HKLM\...\Run: [CONNECTScheduler] - C:\Programme\Sony\CONNECTAutoUpdate\CONNECTScheduler.exe [69632 2010-11-07] (Sony Corporation)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe [39792 2008-01-11] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] - C:\Programme\QuickTime\qttask.exe [417792 2010-08-07] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Programme\iTunes\iTunesHelper.exe [141608 2010-02-15] (Apple Inc.)
HKLM\...\Run: [RegistryMonitor1] - C:\WINDOWS\system32\qtplugin.exe
HKLM\...\Winlogon: [Userinit] c:\windows\system32\userinit.exe,,c:\programme\microsoft\desktoplayer.exe,c:\programme\quicktime\qttasksrv.exe
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKLM\...\Policies\Explorer: [NoCDBurning] 0
IMEO\chrome.exe: [Debugger] C:\Programme\Internet Explorer\iexplore.exe
IMEO\navigator.exe: [Debugger] C:\Programme\Internet Explorer\iexplore.exe
IMEO\opera.exe: [Debugger] C:\Programme\Internet Explorer\iexplore.exe
IMEO\safari.exe: [Debugger] C:\Programme\Internet Explorer\iexplore.exe

========================== Services (Whitelisted) =================

S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [520192 2006-06-07] ()
S2 Automatic LiveUpdate Scheduler; C:\Programme\Symantec\LiveUpdate\AluSchedulerSvc.exe [243064 2007-08-31] (Symantec Corporation)
S2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [238888 2008-12-12] (Apple Inc.)
S2 ccEvtMgr; C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe [149352 2008-10-17] (Symantec Corporation)
S2 ccSetMgr; C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe [149352 2008-10-17] (Symantec Corporation)
S2 CLTNetCnService; C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe [149352 2008-10-17] (Symantec Corporation)
S3 comHost; C:\Programme\Gemeinsame Dateien\Symantec Shared\VAScanner\comHost.exe [55640 2007-08-22] (Symantec Corporation)
S2 gupdate; C:\Programme\Google\Update\GoogleUpdate.exe [135664 2010-02-03] (Google Inc.)
S3 gusvc; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [182768 2009-12-30] (Google)
S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2010-08-07] (Macrovision Corporation)
S3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [545576 2010-02-15] (Apple Inc.)
S3 LiveUpdate; C:\Programme\Symantec\LiveUpdate\LuComServer_3_4.EXE [3192184 2007-08-23] (Symantec Corporation)
S2 LiveUpdate Notice; C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe [149352 2008-10-17] (Symantec Corporation)
S2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE [322120 2006-06-01] (Microsoft Corporation)
S3 MSCSPTISRV; C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\MSCSPTISRV.exe [45056 2006-12-14] (Sony Corporation)
S3 ose; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [89136 2006-06-01] (Microsoft Corporation)
S3 PACSPTISVR; C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\PACSPTISVR.exe [57344 2006-12-14] ()
S3 Sony SCSI Helper Service; C:\Programme\Gemeinsame Dateien\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2010-08-07] (Sony Corporation)
S3 SPTISRV; C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\SPTISRV.exe [69632 2010-08-07] (Sony Corporation)
S3 Symantec Core LC; C:\PROGRA~1\GEMEIN~1\SYMANT~1\CCPD-LC\symlcsvc.exe [1251720 2008-03-26] ()
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2010-08-07] (Microsoft Corporation)
S2 RasAutoWMPNetworkSvc; C:\WINDOWS\system32\2052r.exe srv [x]

==================== Drivers (Whitelisted) ====================

S3 3xHybrid; C:\Windows\System32\DRIVERS\3xHybrid.sys [710144 2005-05-03] (Philips Semiconductors GmbH)
S3 61883; C:\Windows\System32\DRIVERS\61883.sys [48128 2004-08-03] (Microsoft Corporation)
S3 ALCXWDM; C:\Windows\System32\drivers\ALCXWDM.SYS [2319680 2005-05-18] (Realtek Semiconductor Corp.)
S1 AmdK8; C:\Windows\System32\DRIVERS\AmdK8.sys [36864 2006-06-18] (Advanced Micro Devices)
S1 BANTExt; C:\Windows\System32\Drivers\BANTExt.sys [3840 2003-03-06] ()
S3 COH_Mon; C:\WINDOWS\system32\Drivers\COH_Mon.sys [23888 2008-07-30] (Symantec Corporation)
S2 CO_Mon; C:\WINDOWS\system32\drivers\CO_Mon.sys [36056 2007-08-08] (Symantec Corporation)
S1 eeCtrl; C:\Programme\Gemeinsame Dateien\Symantec Shared\EENGINE\eeCtrl.sys [371248 2008-09-03] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Programme\Gemeinsame Dateien\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [99376 2008-12-17] (Symantec Corporation)
S3 HPZid412; C:\Windows\System32\DRIVERS\HPZid412.sys [49920 2008-01-25] (HP)
S3 HPZipr12; C:\Windows\System32\DRIVERS\HPZipr12.sys [16496 2008-01-25] (HP)
S3 HPZius12; C:\Windows\System32\DRIVERS\HPZius12.sys [21568 2008-01-25] (HP)
S3 MPE; C:\Windows\System32\DRIVERS\MPE.sys [15360 2004-08-03] (Microsoft Corporation)
S3 NAVENG; C:\PROGRA~1\GEMEIN~1\SYMANT~1\VIRUSD~1\20090122.020\NAVENG.SYS [89104 2008-12-17] (Symantec Corporation)
S3 NAVEX15; C:\PROGRA~1\GEMEIN~1\SYMANT~1\VIRUSD~1\20090122.020\NAVEX15.SYS [876112 2008-12-17] (Symantec Corporation)
S3 NCHSSVAD; C:\Windows\System32\drivers\nchssvad.sys [27136 2009-01-28] (NCH Swift Sound)
S3 NdisIP; C:\Windows\System32\DRIVERS\NdisIP.sys [10880 2004-08-03] (Microsoft Corporation)
S1 prodrv06; C:\Windows\System32\drivers\prodrv06.sys [77184 2004-03-09] (Protection Technology)
S0 prohlp02; C:\Windows\System32\drivers\prohlp02.sys [65504 2004-03-09] (Protection Technology)
S0 prosync1; C:\Windows\System32\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)
S3 RT73; C:\Windows\System32\DRIVERS\rt73.sys [245248 2005-11-24] (Ralink Technology, Corp.)
S3 rtl8139; C:\Windows\System32\DRIVERS\RTL8139.SYS [20992 2004-08-03] (Realtek Semiconductor Corporation)
S0 sfhlp01; C:\Windows\System32\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)
S1 SPBBCDrv; C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCDrv.sys [447024 2008-09-05] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\SRTSP.SYS [279088 2007-11-30] (Symantec Corporation)
S3 SRTSPL; C:\Windows\System32\Drivers\SRTSPL.SYS [317616 2007-11-30] (Symantec Corporation)
S1 SRTSPX; C:\Windows\System32\Drivers\SRTSPX.SYS [43696 2007-11-30] (Symantec Corporation)
S3 SYMDNS; C:\Windows\System32\Drivers\SYMDNS.SYS [13616 2009-02-19] (Symantec Corporation)
S3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT.SYS [124464 2009-01-17] (Symantec Corporation)
S3 SYMFW; C:\Windows\System32\Drivers\SYMFW.SYS [96560 2009-02-19] (Symantec Corporation)
S3 SYMIDS; C:\Windows\System32\Drivers\SYMIDS.SYS [38576 2009-02-19] (Symantec Corporation)
S3 SYMIDSCO; C:\PROGRA~1\GEMEIN~1\SYMANT~1\SymcData\ipsdefs\20090113.002\SymIDSCo.sys [250224 2008-09-12] (Symantec Corporation)
S3 SymIM; C:\Windows\System32\DRIVERS\SymIM.sys [31280 2009-02-19] (Symantec Corporation)
S3 SymIMMP; C:\Windows\System32\DRIVERS\SymIM.sys [31280 2009-02-19] (Symantec Corporation)
S3 SYMNDIS; C:\Windows\System32\Drivers\SYMNDIS.SYS [37424 2009-02-19] (Symantec Corporation)
S3 SYMREDRV; C:\Windows\System32\Drivers\SYMREDRV.SYS [22320 2009-02-19] (Symantec Corporation)
S1 SYMTDI; C:\Windows\System32\Drivers\SYMTDI.SYS [184496 2009-02-19] (Symantec Corporation)
S3 SynasUSB; C:\Windows\System32\drivers\SynasUSB.sys [18432 2006-11-23] (SIA Syncrosoft)
S3 TASCAM_US122144; C:\Windows\System32\Drivers\tascusb2.sys [360448 2007-12-18] (TASCAM)
S3 TASCAM_US144_MIDI; C:\Windows\System32\drivers\tscusb2m.sys [18944 2007-12-18] (TASCAM)
S3 TASCAM_US144_WDM; C:\Windows\System32\drivers\tscusb2a.sys [33792 2007-12-18] (TASCAM)
S3 EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys [x]
S4 IntelIde; No ImagePath
S1 WS2IFSL; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-30 18:10 - 2013-09-30 18:10 - 00000000 ____D C:\FRST

==================== One Month Modified Files and Folders =======

2013-09-30 18:10 - 2013-09-30 18:10 - 00000000 ____D C:\FRST

==================== Known DLLs (Whitelisted) ============


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2006-02-28 13:00] - [2007-06-13 14:10] - 1036288 ____A (Microsoft Corporation) 331ed93570baf3cfe30340298762cd56 

C:\Windows\System32\winlogon.exe
[2006-02-28 13:00] - [2006-02-28 13:00] - 0507392 ____A (Microsoft Corporation) 2b6a0baf33a9918f09442d873848ff72 

C:\Windows\System32\svchost.exe
[2006-02-28 13:00] - [2006-02-28 13:00] - 0014336 ____A (Microsoft Corporation) 65a819b121eb6fdab4400ea42bdffe64 

C:\Windows\System32\services.exe
[2006-02-28 13:00] - [2009-02-09 10:48] - 0111104 ____A (Microsoft Corporation) a07ca23ea361a01e627d911cf139b950 

C:\Windows\System32\User32.dll
[2006-02-28 13:00] - [2007-03-08 16:36] - 0579072 ____A (Microsoft Corporation) 492e166cfd26a50fb9160db536ff7d2b 

C:\Windows\System32\userinit.exe
[2006-02-28 13:00] - [2006-02-28 13:00] - 0025088 ____A (Microsoft Corporation) d1e53dc57143f2584b1dd53b036c0633 

C:\Windows\System32\Drivers\volsnap.sys
[2006-02-28 13:00] - [2006-02-28 13:00] - 0053760 ____A (Microsoft Corporation) d6888520ff56d72a50437e371ca25fc9 


==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points (XP) =====================

RP: -> 2010-11-07 16:23 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP479 

RP: -> 2010-11-05 09:14 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP478 

RP: -> 2010-11-03 08:43 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP477 

RP: -> 2010-11-01 12:51 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP476 

RP: -> 2010-10-24 15:05 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP475 

RP: -> 2010-10-22 17:12 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP474 

RP: -> 2010-10-15 21:40 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP473 

RP: -> 2010-10-14 17:27 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP472 

RP: -> 2010-10-13 16:36 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP471 

RP: -> 2010-10-03 17:01 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP470 

RP: -> 2010-09-26 12:12 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP469 

RP: -> 2010-09-16 16:58 - 028672 _restore{BF827828-817F-4B5F-AD5D-C364FC11CBB3}\RP468 


==================== Memory info =========================== 

Percentage of memory in use: 10%
Total physical RAM: 4095.3 MB
Available physical RAM: 3660.78 MB
Total Pagefile: 4093.58 MB
Available Pagefile: 3651.57 MB
Total Virtual: 2047.88 MB
Available Virtual: 1946.62 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:279.45 GB) (Free:138.48 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (System-reserviert) (Fixed) (Total:0.15 GB) (Free:0.13 GB) NTFS
Drive e: () (Fixed) (Total:465.61 GB) (Free:345.49 GB) NTFS
Drive g: (INTENSO) (Removable) (Total:7.26 GB) (Free:0.01 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 279 GB) (Disk ID: ACE22E9E)
Partition 1: (Active) - (Size=279 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: DA449325)
Partition 1: (Active) - (Size=157 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 7 GB) (Disk ID: 03E8323A)
Partition 1: (Not Active) - (Size=7 GB) - (Type=0B)

==================== End Of Log ============================