Datei geladen, Windows startet von selbst neu! Blaue Fehlermeldung, abges. Mod. mgl!

Pipemountain

Danach das Combofix-Log:

[i]ComboFix 09-02-08.02 - User 2009-02-09 22:28:44.1 - NTFSx86 NETWORK
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1031.18.2039.1572 [GMT 1:00]
ausgeführt von:: c:\users\User\Desktop\ComboFix.exe
AV: Avira AntiVir PersonalEdition *On-access scanning enabled* (Outdated)
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\User\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Videos.url
c:\users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Videos.url
c:\users\User\FAVORI~1\Videos.url
c:\users\User\Favorites\Videos.url
c:\windows\system32\drivers\asc3550p.sys
c:\windows\system32\x64
F:\Autorun.inf

.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_asc3550p


((((((((((((((((((((((( Dateien erstellt von 2009-01-09 bis 2009-02-09 ))))))))))))))))))))))))))))))
.

2009-02-09 21:57 . 2009-02-09 21:57 200,567,412 --a------ c:\windows\MEMORY.DMP
2009-02-09 21:45 . 2009-02-09 21:45 <DIR> d-------- c:\users\User\AppData\Roaming\Malwarebytes
2009-02-09 21:45 . 2009-02-09 21:45 <DIR> d-------- c:\users\All Users\Malwarebytes
2009-02-09 21:45 . 2009-02-09 21:49 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-02-09 21:45 . 2009-02-09 21:45 <DIR> d-------- c:\progra~2\Malwarebytes
2009-02-09 21:45 . 2009-01-14 16:11 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys
2009-02-09 21:45 . 2009-01-14 16:11 15,504 --a------ c:\windows\System32\drivers\mbam.sys
2009-02-09 16:08 . 2009-02-09 16:08 <DIR> d-------- c:\program files\Trend Micro
2009-01-25 14:51 . 2009-02-09 13:50 <DIR> dr------- c:\users\User\Documents
2009-01-22 14:16 . 2009-01-22 14:36 <DIR> d-------- c:\users\All Users\Spybot - Search & Destroy
2009-01-22 14:16 . 2009-01-22 14:16 <DIR> d-------- c:\program files\Spybot - Search & Destroy
2009-01-22 14:16 . 2009-01-22 14:36 <DIR> d-------- c:\progra~2\Spybot - Search & Destroy
2009-01-22 11:59 . 2009-02-06 22:38 <DIR> d-------- c:\program files\Full Tilt Poker
2009-01-21 09:05 . 2009-01-23 13:48 <DIR> d-------- c:\program files\PokerStars
2009-01-17 16:04 . 2009-01-17 16:04 <DIR> d-------- C:\Programs
2009-01-16 14:34 . 2009-01-16 14:34 40 --a------ c:\windows\ujf635.bin
2009-01-16 14:25 . 2009-01-16 14:31 <DIR> d--h----- c:\windows\msdownld.tmp
2009-01-16 14:24 . 2009-01-16 14:24 <DIR> d-------- c:\users\User\AppData\Roaming\Betfair
2009-01-16 14:24 . 2009-01-16 14:24 <DIR> d-------- c:\program files\Betfair
2009-01-14 05:26 . 2008-12-16 03:42 288,768 --a------ c:\windows\System32\drivers\srv.sys
2009-01-13 14:24 . 2009-01-18 01:17 410,984 --a------ c:\windows\System32\deploytk.dll
2009-01-12 14:48 . 2009-01-12 14:48 <DIR> d-------- c:\program files\Common Files\Steam

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-09 21:35 0 ----a-w c:\windows\system32\drivers\lvuvc.hs
2009-02-09 14:27 42,688 ----a-w c:\windows\system32\drivers\secdrv.sys
2009-02-09 13:40 --------- d-----w c:\users\User\AppData\Roaming\Skype
2009-02-09 12:45 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-08 13:13 --------- d-----w c:\users\User\AppData\Roaming\OpenOffice.org2
2009-01-30 02:01 --------- d-----w c:\program files\Microsoft SQL Server
2009-01-18 00:17 --------- d-----w c:\program files\Java
2009-01-15 02:05 --------- d-----w c:\program files\Windows Mail
2009-01-15 02:05 --------- d-----w c:\progra~2\Microsoft Help
2009-01-06 18:30 --------- d-----w c:\program files\Betsson
2009-01-02 08:03 --------- d-----w c:\program files\Google
2009-01-01 14:10 --------- d-----w c:\program files\Common Files\InterVideo
2009-01-01 14:05 --------- d-----w c:\users\User\AppData\Roaming\Samsung
2008-12-31 14:30 --------- d-----w c:\progra~2\No23 Recorder
2008-12-31 14:12 --------- d-----w c:\program files\Video mp3 Extractor
2008-12-29 17:03 --------- d---a-w c:\progra~2\TEMP
2008-12-29 16:31 --------- d-----w c:\program files\MyPhoneExplorer
2008-12-29 16:18 --------- d-----w c:\users\User\AppData\Roaming\MyPhoneExplorer
2008-12-29 16:03 --------- d-----w c:\users\User\AppData\Roaming\Sony
2008-12-29 16:03 --------- d-----w c:\progra~2\Sony
2008-12-29 16:02 --------- d-----w c:\program files\Common Files\Sony Shared
2008-12-29 16:01 --------- d-----w c:\program files\Sony Ericsson
2008-12-29 16:01 --------- d-----w c:\program files\Sony
2008-12-29 15:59 --------- d-----w c:\program files\Avanquest update
2008-12-29 15:59 --------- d-----w c:\progra~2\BVRP Software
2008-12-29 15:50 --------- d-----w c:\progra~2\Sony Ericsson
2008-12-25 14:09 --------- d-----w c:\program files\Avi2Dvd
2008-12-22 18:11 --------- d-----w c:\program files\AviSynth 2.5
2008-12-22 17:34 --------- d-----w c:\progra~2\Ulead Systems
2008-12-19 13:42 --------- d-----w c:\users\User\AppData\Roaming\AOMrec
2008-12-19 13:42 --------- d-----w c:\program files\AOMrecord
2008-12-16 22:43 --------- d-----w c:\users\User\AppData\Roaming\SampleView
2008-12-14 22:18 --------- d-----w c:\users\User\AppData\Roaming\concept design
2008-12-11 12:34 --------- d-----w c:\program files\Hp
2008-08-19 06:28 174 --sha-w c:\program files\desktop.ini
2008-08-03 10:32 56 ---ha-w c:\users\All Users\ezsidmv.dat
2008-08-03 10:32 56 ---ha-w c:\progra~2\ezsidmv.dat
.

(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-07-02 397312]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 2156368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-13 138008]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-13 154392]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-13 133912]
"PDF Complete"="c:\program files\PDF Complete\pdfsty.exe" [2007-05-08 331552]
"PTHOSTTR"="c:\program files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2007-01-09 145184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-06-07 833072]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-05-11 472632]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 317128]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2007-06-05 71176]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-06-11 163840]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-03-28 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-03-30 267048]
"VX3000"="c:\windows\vVX3000.exe" [2007-04-10 709992]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 563984]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 2178832]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-02-21 1183744]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-18 136600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]
"ST Recovery Launcher"="c:\windows\SMINST\launcher.exe" [2007-06-06 44168]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2009-01-14 399504]
" Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-01-14 1273488]

c:\users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 2.4.lnk - c:\program files\OpenOffice.org 2.4\program\quickstart.exe [2008-01-21 393216]

c:\progra~2\MICROS~1\Windows\STARTM~1\Programs\Startup\
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-03-29 719664]
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2008-07-10 66864]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DeviceNP]
2007-06-08 08:04 49152 c:\windows\System32\DeviceNP.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.i420"= i420vfw.dll
"msacm.l3acm"= c:\windows\system32\l3codecp.acm
"vidc.iv41"= ir41_32.dll
"msacm.l3codec"= c:\windows\system32\l3codecp.acm
"msacm.dvacm"= c:\progra~1\COMMON~1\ULEADS~1\vio\dvacm.acm

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-541896751-2603982565-2210685789-1006]
"EnableNotificationsRef"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{0C28089D-DBC4-4546-8150-7448B7474589}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{53D09725-B1F8-45FF-9368-593AE609C4B5}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{6643EEE8-D5B4-43B6-A8E3-F49063D6FA1A}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{3F81F72C-059A-404B-B0CC-870DB52183E7}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{E3BECB8C-3FAD-4072-8AD4-D959B4094DBC}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{6765A7BC-B890-42D0-9208-998C13739EBC}"= UDP:c:\program files\Grisoft\AVG7\avginet.exe:avginet.exe
"{CB095358-772C-4DA0-8D4E-494BCEA7EBD9}"= TCP:c:\program files\Grisoft\AVG7\avginet.exe:avginet.exe
"{160E65BC-666F-422D-BAF2-1A88E14DDC47}"= UDP:c:\program files\Grisoft\AVG7\avgamsvr.exe:avgamsvr.exe
"{EA2ACE0A-BCCD-4E5F-8AAA-BBA9F682D52C}"= TCP:c:\program files\Grisoft\AVG7\avgamsvr.exe:avgamsvr.exe
"{71EF26F7-AE3D-4730-A505-FF2CF93133C9}"= UDP:c:\program files\Grisoft\AVG7\avgcc.exe:avgcc.exe
"{35293726-DABC-4EDE-9521-60BDEE57B63B}"= TCP:c:\program files\Grisoft\AVG7\avgcc.exe:avgcc.exe
"TCP Query User{3C48C3FD-8F33-43A0-9E9E-7BB92BC9342D}c:\\program files\\icq6\\icq.exe"= UDP:c:\program files\icq6\icq.exe:ICQ Library
"UDP Query User{67E4220D-E156-4A60-92C3-2055755B6C5F}c:\\program files\\icq6\\icq.exe"= TCP:c:\program files\icq6\icq.exe:ICQ Library
"{D3B0B678-A75B-4E3A-855C-BAF10EC044E6}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{57174051-7B6A-4118-91B3-97C82CEB94A7}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{5408ED7A-3E7E-408E-A85B-F1C1A18528F4}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{DD302CC1-6E4F-4704-A0F1-2F982ED6765E}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{18BA8BA8-12C3-49DE-8675-F36B4214ED1A}"= UDP:Profile=Private|Profile=Public|c:\program files\Tobit ClipInc\Server\ClipInc-Server.exe:ClipInc Server
"{BB9341B0-0002-49FE-BCFD-C3D885C54BC6}"= TCP:Profile=Private|Profile=Public|c:\program files\Tobit ClipInc\Server\ClipInc-Server.exe:ClipInc Server
"{A6866E3E-8C4A-40E4-8094-A10F5F0C321E}"= UDP:Profile=Private|Profile=Public|c:\program files\Tobit ClipInc\Player\ClipInc-Player.exe:ClipInc Player
"{C1A0F6AE-95A5-41F7-9FAB-4927C3BE8787}"= TCP:Profile=Private|Profile=Public|c:\program files\Tobit ClipInc\Player\ClipInc-Player.exe:ClipInc Player
"TCP Query User{69EE74DC-B14A-49AC-80F5-E2D8DABC5644}c:\\program files\\webmoney\\webmoney.exe"= UDP:c:\program files\webmoney\webmoney.exe:WebMoney Keeper Classic Runner Module
"UDP Query User{F963B994-B435-4C70-8553-E7FB094EBB29}c:\\program files\\webmoney\\webmoney.exe"= TCP:c:\program files\webmoney\webmoney.exe:WebMoney Keeper Classic Runner Module
"TCP Query User{3C8EC9E0-6003-4014-BAB9-549F5B05CBD3}c:\\program files\\zattoo\\zattood.exe"= UDP:c:\program files\zattoo\zattood.exe:zattood
"UDP Query User{AE56A2D5-4D21-4261-B346-A931022A516E}c:\\program files\\zattoo\\zattood.exe"= TCP:c:\program files\zattoo\zattood.exe:zattood
"TCP Query User{049CDB03-E875-4DAD-8656-C097ED935CD7}c:\\program files\\zattoo\\zattoo.exe"= UDP:c:\program files\zattoo\zattoo.exe:
"UDP Query User{6743AACB-BE45-4FF3-AB42-3675399E5D79}c:\\program files\\zattoo\\zattoo.exe"= TCP:c:\program files\zattoo\zattoo.exe:
"TCP Query User{D6E33D08-FEAF-48AA-9B5C-BC073733B8D1}c:\\program files\\joost\\xulrunner\\tvprunner.exe"= UDP:c:\program files\joost\xulrunner\tvprunner.exe:tvprunner
"UDP Query User{E9252ABF-DDE5-4530-9A53-E43AED3A5F87}c:\\program files\\joost\\xulrunner\\tvprunner.exe"= TCP:c:\program files\joost\xulrunner\tvprunner.exe:tvprunner
"{6919FD41-964E-44DF-BB47-C0C3857E72DB}"= UDP:c:\program files\Microsoft LifeCam\LifeExp.exe:LifeExp.exe
"{6E0D3589-4D89-4B4A-8186-85EC3171F5BC}"= TCP:c:\program files\Microsoft LifeCam\LifeExp.exe:LifeExp.exe
"{EB4EBF3B-16C9-4BA0-9B3C-145C9236B13C}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{9D4DF546-156A-48E6-B708-97964F69A69A}"= UDP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{DB6659FD-E8E6-49C4-9198-42857952A8D6}"= TCP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{30EB346E-AF85-409B-AAE9-B5DBC067149B}"= UDP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"{AF2011E0-6DDA-4E06-9A82-50CEB4E0B131}"= TCP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"TCP Query User{B67C14E7-EFA9-4289-A8CF-A92B1E6D16F6}c:\\program files\\mozilla firefox\\firefox.exe"= UDP:c:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{16089949-0E27-490B-BA2E-A3ED4A7250E2}c:\\program files\\mozilla firefox\\firefox.exe"= TCP:c:\program files\mozilla firefox\firefox.exe:Firefox
"TCP Query User{EDF88F45-C357-4080-932C-3B21A581F65D}c:\\program files\\icq6\\icq.exe"= UDP:c:\program files\icq6\icq.exe:ICQ Library
"UDP Query User{4C2D7040-65DB-4B45-9409-8AFA176AF92D}c:\\program files\\icq6\\icq.exe"= TCP:c:\program files\icq6\icq.exe:ICQ Library
"TCP Query User{9C2D0D76-8D6E-487A-BB03-25A1E2419966}c:\\program files\\yahoo!\\messenger\\yahoomessenger.exe"= UDP:c:\program files\yahoo!\messenger\yahoomessenger.exe:Yahoo! Messenger
"UDP Query User{904E7834-712C-4B4E-9206-E12FE3996286}c:\\program files\\yahoo!\\messenger\\yahoomessenger.exe"= TCP:c:\program files\yahoo!\messenger\yahoomessenger.exe:Yahoo! Messenger
"{2BB90555-2954-43E9-A97B-2EBD189C883D}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger
"{B5C5BA5F-8DB7-4E68-929D-EE74A459E0DE}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger
"{53180D24-B339-4512-BDC7-F765D2CE5530}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{D7FE18F7-BDDE-47F4-8E03-BE80F56FA078}"= UDP:63331:Windows Live OneCare
"TCP Query User{7F19279A-0F48-4CAF-B773-ACA4B72A7710}c:\\program files\\mozilla firefox\\firefox.exe"= UDP:c:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{059A4E28-4E1D-483F-BB1F-12286A8A746C}c:\\program files\\mozilla firefox\\firefox.exe"= TCP:c:\program files\mozilla firefox\firefox.exe:Firefox
"TCP Query User{27899D13-6E02-4F8F-8354-80106129A313}c:\\program files\\tvuplayer\\tvuplayer.exe"= UDP:c:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
"UDP Query User{501DB895-1C5E-480B-A1B2-8C96FD1C5B72}c:\\program files\\tvuplayer\\tvuplayer.exe"= TCP:c:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
"{8E025F29-D305-4F76-97F8-63341F8D6F89}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger
"{8CE72675-1730-4E48-B834-65CF6A911945}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger
"TCP Query User{FDD0BF9A-E075-44DF-95ED-A52C189F3BE4}c:\\program files\\zattoo\\zattood.exe"= UDP:c:\program files\zattoo\zattood.exe:zattood
"UDP Query User{09752DE8-887C-4AA0-BF62-79F54F4219C2}c:\\program files\\zattoo\\zattood.exe"= TCP:c:\program files\zattoo\zattood.exe:zattood
"TCP Query User{2B4BB5BF-DAF2-46E4-BA67-FE9C02A32EBA}c:\\program files\\sopcast\\adv\\sopadver.exe"= UDP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"UDP Query User{E3052EB0-81FF-44C0-AFDC-7B4EC6D6F691}c:\\program files\\sopcast\\adv\\sopadver.exe"= TCP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"TCP Query User{2D2BDF6D-6416-43C8-86E8-2169ED24CECC}c:\\program files\\sopcast\\sopcast.exe"= UDP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"UDP Query User{EBC27707-968E-49C8-AFD2-839737F6CED6}c:\\program files\\sopcast\\sopcast.exe"= TCP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"TCP Query User{1749EDA7-9D72-4ED8-A944-B53A3E309112}c:\\program files\\mirc\\mirc.exe"= UDP:c:\program files\mirc\mirc.exe:mIRC
"UDP Query User{8E75833B-26AE-4884-A07B-45777C2963A8}c:\\program files\\mirc\\mirc.exe"= TCP:c:\program files\mirc\mirc.exe:mIRC
"TCP Query User{33386AFF-AC5B-4BEB-9CDE-7D483984FEE1}c:\\program files\\anonymizer\\anonymizer software\\common\\anonproxy.exe"= UDP:c:\program files\anonymizer\anonymizer software\common\anonproxy.exe:AnonProxy
"UDP Query User{7823E32B-D410-4B6C-84A9-89B402AD0C1E}c:\\program files\\anonymizer\\anonymizer software\\common\\anonproxy.exe"= TCP:c:\program files\anonymizer\anonymizer software\common\anonproxy.exe:AnonProxy
"TCP Query User{0A0B2B98-87B7-4F6F-831E-2A12FDF7C6E3}c:\\program files\\zattoo\\zattoo2.exe"= UDP:c:\program files\zattoo\zattoo2.exe:
"UDP Query User{6E4CE641-05DD-43BC-B368-40558FBEBEB5}c:\\program files\\zattoo\\zattoo2.exe"= TCP:c:\program files\zattoo\zattoo2.exe:
"TCP Query User{3E4C29E3-8329-4248-A262-F007FE8117AE}c:\\program files\\sopcast\\adv\\sopadver.exe"= UDP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"UDP Query User{59CEFDE1-9FB7-41A3-8B97-BD504EF95E28}c:\\program files\\sopcast\\adv\\sopadver.exe"= TCP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"TCP Query User{4C9C31B3-5820-411E-9964-778DF1DD9C19}c:\\program files\\tvuplayer\\tvuplayer.exe"= UDP:c:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
"UDP Query User{EE979F3C-0EBE-45A4-A8FD-5DA781B96813}c:\\program files\\tvuplayer\\tvuplayer.exe"= TCP:c:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
"TCP Query User{DAFDC67F-B0C9-41D0-8930-E1B368104C26}c:\\program files\\sopcast\\sopcast.exe"= UDP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"UDP Query User{31173C57-3BE3-4A06-A28A-185F73788836}c:\\program files\\sopcast\\sopcast.exe"= TCP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"{4B756D5A-6C5B-4B8A-A0A9-BC9A76E9540D}"= UDP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:Sony Ericsson Media Manager 1.2
"{47AC4E11-DCB1-40F8-A01F-33C536F39230}"= TCP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:Sony Ericsson Media Manager 1.2
"TCP Query User{56E178B4-50C1-45E6-95A2-2CB0838191CD}c:\\program files\\valve\\steam\\steamapps\\killer_bear\\counter-strike source\\hl2.exe"= UDP:c:\program files\valve\steam\steamapps\killer_bear\counter-strike source\hl2.exe:hl2
"UDP Query User{4D366F1D-C230-4293-BC45-EEC7D90313A0}c:\\program files\\valve\\steam\\steamapps\\killer_bear\\counter-strike source\\hl2.exe"= TCP:c:\program files\valve\steam\steamapps\killer_bear\counter-strike source\hl2.exe:hl2

S2 BcmSqlStartupSvc;SQL Server-Startdienst für Business Contact Manager;c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-16 30312]
S2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2007-07-31 540448]
S3 DAMDrv;DAMDrv;c:\windows\System32\drivers\DAMDrv.sys [2007-07-31 30008]
S3 FLCDLOCK;HP ProtectTools Gerätesperre/Überwachung;c:\windows\System32\flcdlock.exe [2007-06-08 172131]
S3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-08-05 29184016]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\System32\drivers\s1018bus.sys [2008-12-29 90408]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\System32\drivers\s1018mdfl.sys [2008-12-29 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\System32\drivers\s1018mdm.sys [2008-12-29 122024]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s1018mgmt.sys [2008-12-29 115368]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\System32\drivers\s1018nd5.sys [2008-12-29 25768]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\System32\drivers\s1018obex.sys [2008-12-29 111784]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\System32\drivers\s1018unic.sys [2008-12-29 117544]
S3 tap0901;TAP-Win32 Adapter V9;c:\windows\System32\drivers\tap0901.sys [2008-11-08 25216]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1493668c-6f4d-11dd-bece-001a6be24be0}]
\shell\AutoRun\command - G:\
\shell\open\Command - rundll32.exe .\desktop.dll,InstallM

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c5f954c-b516-11dd-8272-001a6be24be0}]
\shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e2363011-e290-11dd-a5d0-001a6be24be0}]
\shell\AutoRun\command - G:\nq0cq.cmd
\shell\explore\Command - G:\nq0cq.cmd
\shell\open\Command - G:\nq0cq.cmd

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -

WebBrowser-{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - (no file)
HKLM-RunOnce-<NO NAME> - (no file)