Moin,

ihr seid vermutlich meine letzte Hoffnung.
Habe eine Datei geladen, danach fuhr sich mein Pc herunter und startete neu, seitdem bringt er immer eine "blaue Fehlermeldung" nach der Kennworteingabe.

Abgesicherter Modus geht.


So,

jetzt alles nach und nach:

Erstmal das Malwarebites Log:

Malwarebytes' Anti-Malware 1.33
Datenbank Version: 1742
Windows 6.0.6001 Service Pack 1

2009-02-09 21:54:17
mbam-log-2009-02-09 (21-54-17).txt

Scan-Methode: Quick-Scan
Durchsuchte Objekte: 52162
Laufzeit: 3 minute(s), 22 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 1
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\asc3550p (Rootkit.Agent) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Windows\System32\drivers\asc3550p.sys (Rootkit.Agent) -> Quarantined and deleted successfully.

Danach das Combofix-Log:

[i]ComboFix 09-02-08.02 - User 2009-02-09 22:28:44.1 - NTFSx86 NETWORK
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1031.18.2039.1572 [GMT 1:00]
ausgeführt von:: c:\users\User\Desktop\ComboFix.exe
AV: Avira AntiVir PersonalEdition *On-access scanning enabled* (Outdated)
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\User\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Videos.url
c:\users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Videos.url
c:\users\User\FAVORI~1\Videos.url
c:\users\User\Favorites\Videos.url
c:\windows\system32\drivers\asc3550p.sys
c:\windows\system32\x64
F:\Autorun.inf

.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_asc3550p


((((((((((((((((((((((( Dateien erstellt von 2009-01-09 bis 2009-02-09 ))))))))))))))))))))))))))))))
.

2009-02-09 21:57 . 2009-02-09 21:57 200,567,412 --a------ c:\windows\MEMORY.DMP
2009-02-09 21:45 . 2009-02-09 21:45 <DIR> d-------- c:\users\User\AppData\Roaming\Malwarebytes
2009-02-09 21:45 . 2009-02-09 21:45 <DIR> d-------- c:\users\All Users\Malwarebytes
2009-02-09 21:45 . 2009-02-09 21:49 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware
2009-02-09 21:45 . 2009-02-09 21:45 <DIR> d-------- c:\progra~2\Malwarebytes
2009-02-09 21:45 . 2009-01-14 16:11 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys
2009-02-09 21:45 . 2009-01-14 16:11 15,504 --a------ c:\windows\System32\drivers\mbam.sys
2009-02-09 16:08 . 2009-02-09 16:08 <DIR> d-------- c:\program files\Trend Micro
2009-01-25 14:51 . 2009-02-09 13:50 <DIR> dr------- c:\users\User\Documents
2009-01-22 14:16 . 2009-01-22 14:36 <DIR> d-------- c:\users\All Users\Spybot - Search & Destroy
2009-01-22 14:16 . 2009-01-22 14:16 <DIR> d-------- c:\program files\Spybot - Search & Destroy
2009-01-22 14:16 . 2009-01-22 14:36 <DIR> d-------- c:\progra~2\Spybot - Search & Destroy
2009-01-22 11:59 . 2009-02-06 22:38 <DIR> d-------- c:\program files\Full Tilt Poker
2009-01-21 09:05 . 2009-01-23 13:48 <DIR> d-------- c:\program files\PokerStars
2009-01-17 16:04 . 2009-01-17 16:04 <DIR> d-------- C:\Programs
2009-01-16 14:34 . 2009-01-16 14:34 40 --a------ c:\windows\ujf635.bin
2009-01-16 14:25 . 2009-01-16 14:31 <DIR> d--h----- c:\windows\msdownld.tmp
2009-01-16 14:24 . 2009-01-16 14:24 <DIR> d-------- c:\users\User\AppData\Roaming\Betfair
2009-01-16 14:24 . 2009-01-16 14:24 <DIR> d-------- c:\program files\Betfair
2009-01-14 05:26 . 2008-12-16 03:42 288,768 --a------ c:\windows\System32\drivers\srv.sys
2009-01-13 14:24 . 2009-01-18 01:17 410,984 --a------ c:\windows\System32\deploytk.dll
2009-01-12 14:48 . 2009-01-12 14:48 <DIR> d-------- c:\program files\Common Files\Steam

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-09 21:35 0 ----a-w c:\windows\system32\drivers\lvuvc.hs
2009-02-09 14:27 42,688 ----a-w c:\windows\system32\drivers\secdrv.sys
2009-02-09 13:40 --------- d-----w c:\users\User\AppData\Roaming\Skype
2009-02-09 12:45 --------- d--h--w c:\program files\InstallShield Installation Information
2009-02-08 13:13 --------- d-----w c:\users\User\AppData\Roaming\OpenOffice.org2
2009-01-30 02:01 --------- d-----w c:\program files\Microsoft SQL Server
2009-01-18 00:17 --------- d-----w c:\program files\Java
2009-01-15 02:05 --------- d-----w c:\program files\Windows Mail
2009-01-15 02:05 --------- d-----w c:\progra~2\Microsoft Help
2009-01-06 18:30 --------- d-----w c:\program files\Betsson
2009-01-02 08:03 --------- d-----w c:\program files\Google
2009-01-01 14:10 --------- d-----w c:\program files\Common Files\InterVideo
2009-01-01 14:05 --------- d-----w c:\users\User\AppData\Roaming\Samsung
2008-12-31 14:30 --------- d-----w c:\progra~2\No23 Recorder
2008-12-31 14:12 --------- d-----w c:\program files\Video mp3 Extractor
2008-12-29 17:03 --------- d---a-w c:\progra~2\TEMP
2008-12-29 16:31 --------- d-----w c:\program files\MyPhoneExplorer
2008-12-29 16:18 --------- d-----w c:\users\User\AppData\Roaming\MyPhoneExplorer
2008-12-29 16:03 --------- d-----w c:\users\User\AppData\Roaming\Sony
2008-12-29 16:03 --------- d-----w c:\progra~2\Sony
2008-12-29 16:02 --------- d-----w c:\program files\Common Files\Sony Shared
2008-12-29 16:01 --------- d-----w c:\program files\Sony Ericsson
2008-12-29 16:01 --------- d-----w c:\program files\Sony
2008-12-29 15:59 --------- d-----w c:\program files\Avanquest update
2008-12-29 15:59 --------- d-----w c:\progra~2\BVRP Software
2008-12-29 15:50 --------- d-----w c:\progra~2\Sony Ericsson
2008-12-25 14:09 --------- d-----w c:\program files\Avi2Dvd
2008-12-22 18:11 --------- d-----w c:\program files\AviSynth 2.5
2008-12-22 17:34 --------- d-----w c:\progra~2\Ulead Systems
2008-12-19 13:42 --------- d-----w c:\users\User\AppData\Roaming\AOMrec
2008-12-19 13:42 --------- d-----w c:\program files\AOMrecord
2008-12-16 22:43 --------- d-----w c:\users\User\AppData\Roaming\SampleView
2008-12-14 22:18 --------- d-----w c:\users\User\AppData\Roaming\concept design
2008-12-11 12:34 --------- d-----w c:\program files\Hp
2008-08-19 06:28 174 --sha-w c:\program files\desktop.ini
2008-08-03 10:32 56 ---ha-w c:\users\All Users\ezsidmv.dat
2008-08-03 10:32 56 ---ha-w c:\progra~2\ezsidmv.dat
.

(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" [2008-07-02 397312]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 2156368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-06-13 138008]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-06-13 154392]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-06-13 133912]
"PDF Complete"="c:\program files\PDF Complete\pdfsty.exe" [2007-05-08 331552]
"PTHOSTTR"="c:\program files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2007-01-09 145184]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-06-07 833072]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-05-11 472632]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 317128]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2007-06-05 71176]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-06-11 163840]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-03-28 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-03-30 267048]
"VX3000"="c:\windows\vVX3000.exe" [2007-04-10 709992]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-10-25 563984]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2007-10-25 2178832]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-02-21 1183744]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-18 136600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]
"ST Recovery Launcher"="c:\windows\SMINST\launcher.exe" [2007-06-06 44168]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2009-01-14 399504]
" Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-01-14 1273488]

c:\users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 2.4.lnk - c:\program files\OpenOffice.org 2.4\program\quickstart.exe [2008-01-21 393216]

c:\progra~2\MICROS~1\Windows\STARTM~1\Programs\Startup\
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-03-29 719664]
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2008-07-10 66864]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DeviceNP]
2007-06-08 08:04 49152 c:\windows\System32\DeviceNP.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.i420"= i420vfw.dll
"msacm.l3acm"= c:\windows\system32\l3codecp.acm
"vidc.iv41"= ir41_32.dll
"msacm.l3codec"= c:\windows\system32\l3codecp.acm
"msacm.dvacm"= c:\progra~1\COMMON~1\ULEADS~1\vio\dvacm.acm

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-541896751-2603982565-2210685789-1006]
"EnableNotificationsRef"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{0C28089D-DBC4-4546-8150-7448B7474589}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{53D09725-B1F8-45FF-9368-593AE609C4B5}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{6643EEE8-D5B4-43B6-A8E3-F49063D6FA1A}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{3F81F72C-059A-404B-B0CC-870DB52183E7}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{E3BECB8C-3FAD-4072-8AD4-D959B4094DBC}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{6765A7BC-B890-42D0-9208-998C13739EBC}"= UDP:c:\program files\Grisoft\AVG7\avginet.exe:avginet.exe
"{CB095358-772C-4DA0-8D4E-494BCEA7EBD9}"= TCP:c:\program files\Grisoft\AVG7\avginet.exe:avginet.exe
"{160E65BC-666F-422D-BAF2-1A88E14DDC47}"= UDP:c:\program files\Grisoft\AVG7\avgamsvr.exe:avgamsvr.exe
"{EA2ACE0A-BCCD-4E5F-8AAA-BBA9F682D52C}"= TCP:c:\program files\Grisoft\AVG7\avgamsvr.exe:avgamsvr.exe
"{71EF26F7-AE3D-4730-A505-FF2CF93133C9}"= UDP:c:\program files\Grisoft\AVG7\avgcc.exe:avgcc.exe
"{35293726-DABC-4EDE-9521-60BDEE57B63B}"= TCP:c:\program files\Grisoft\AVG7\avgcc.exe:avgcc.exe
"TCP Query User{3C48C3FD-8F33-43A0-9E9E-7BB92BC9342D}c:\\program files\\icq6\\icq.exe"= UDP:c:\program files\icq6\icq.exe:ICQ Library
"UDP Query User{67E4220D-E156-4A60-92C3-2055755B6C5F}c:\\program files\\icq6\\icq.exe"= TCP:c:\program files\icq6\icq.exe:ICQ Library
"{D3B0B678-A75B-4E3A-855C-BAF10EC044E6}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{57174051-7B6A-4118-91B3-97C82CEB94A7}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{5408ED7A-3E7E-408E-A85B-F1C1A18528F4}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{DD302CC1-6E4F-4704-A0F1-2F982ED6765E}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{18BA8BA8-12C3-49DE-8675-F36B4214ED1A}"= UDP:Profile=Private|Profile=Public|c:\program files\Tobit ClipInc\Server\ClipInc-Server.exe:ClipInc Server
"{BB9341B0-0002-49FE-BCFD-C3D885C54BC6}"= TCP:Profile=Private|Profile=Public|c:\program files\Tobit ClipInc\Server\ClipInc-Server.exe:ClipInc Server
"{A6866E3E-8C4A-40E4-8094-A10F5F0C321E}"= UDP:Profile=Private|Profile=Public|c:\program files\Tobit ClipInc\Player\ClipInc-Player.exe:ClipInc Player
"{C1A0F6AE-95A5-41F7-9FAB-4927C3BE8787}"= TCP:Profile=Private|Profile=Public|c:\program files\Tobit ClipInc\Player\ClipInc-Player.exe:ClipInc Player
"TCP Query User{69EE74DC-B14A-49AC-80F5-E2D8DABC5644}c:\\program files\\webmoney\\webmoney.exe"= UDP:c:\program files\webmoney\webmoney.exe:WebMoney Keeper Classic Runner Module
"UDP Query User{F963B994-B435-4C70-8553-E7FB094EBB29}c:\\program files\\webmoney\\webmoney.exe"= TCP:c:\program files\webmoney\webmoney.exe:WebMoney Keeper Classic Runner Module
"TCP Query User{3C8EC9E0-6003-4014-BAB9-549F5B05CBD3}c:\\program files\\zattoo\\zattood.exe"= UDP:c:\program files\zattoo\zattood.exe:zattood
"UDP Query User{AE56A2D5-4D21-4261-B346-A931022A516E}c:\\program files\\zattoo\\zattood.exe"= TCP:c:\program files\zattoo\zattood.exe:zattood
"TCP Query User{049CDB03-E875-4DAD-8656-C097ED935CD7}c:\\program files\\zattoo\\zattoo.exe"= UDP:c:\program files\zattoo\zattoo.exe:
"UDP Query User{6743AACB-BE45-4FF3-AB42-3675399E5D79}c:\\program files\\zattoo\\zattoo.exe"= TCP:c:\program files\zattoo\zattoo.exe:
"TCP Query User{D6E33D08-FEAF-48AA-9B5C-BC073733B8D1}c:\\program files\\joost\\xulrunner\\tvprunner.exe"= UDP:c:\program files\joost\xulrunner\tvprunner.exe:tvprunner
"UDP Query User{E9252ABF-DDE5-4530-9A53-E43AED3A5F87}c:\\program files\\joost\\xulrunner\\tvprunner.exe"= TCP:c:\program files\joost\xulrunner\tvprunner.exe:tvprunner
"{6919FD41-964E-44DF-BB47-C0C3857E72DB}"= UDP:c:\program files\Microsoft LifeCam\LifeExp.exe:LifeExp.exe
"{6E0D3589-4D89-4B4A-8186-85EC3171F5BC}"= TCP:c:\program files\Microsoft LifeCam\LifeExp.exe:LifeExp.exe
"{EB4EBF3B-16C9-4BA0-9B3C-145C9236B13C}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{9D4DF546-156A-48E6-B708-97964F69A69A}"= UDP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{DB6659FD-E8E6-49C4-9198-42857952A8D6}"= TCP:c:\program files\Yahoo!\Messenger\YahooMessenger.exe:Yahoo! Messenger
"{30EB346E-AF85-409B-AAE9-B5DBC067149B}"= UDP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"{AF2011E0-6DDA-4E06-9A82-50CEB4E0B131}"= TCP:c:\program files\Yahoo!\Messenger\YServer.exe:Yahoo! FT Server
"TCP Query User{B67C14E7-EFA9-4289-A8CF-A92B1E6D16F6}c:\\program files\\mozilla firefox\\firefox.exe"= UDP:c:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{16089949-0E27-490B-BA2E-A3ED4A7250E2}c:\\program files\\mozilla firefox\\firefox.exe"= TCP:c:\program files\mozilla firefox\firefox.exe:Firefox
"TCP Query User{EDF88F45-C357-4080-932C-3B21A581F65D}c:\\program files\\icq6\\icq.exe"= UDP:c:\program files\icq6\icq.exe:ICQ Library
"UDP Query User{4C2D7040-65DB-4B45-9409-8AFA176AF92D}c:\\program files\\icq6\\icq.exe"= TCP:c:\program files\icq6\icq.exe:ICQ Library
"TCP Query User{9C2D0D76-8D6E-487A-BB03-25A1E2419966}c:\\program files\\yahoo!\\messenger\\yahoomessenger.exe"= UDP:c:\program files\yahoo!\messenger\yahoomessenger.exe:Yahoo! Messenger
"UDP Query User{904E7834-712C-4B4E-9206-E12FE3996286}c:\\program files\\yahoo!\\messenger\\yahoomessenger.exe"= TCP:c:\program files\yahoo!\messenger\yahoomessenger.exe:Yahoo! Messenger
"{2BB90555-2954-43E9-A97B-2EBD189C883D}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger
"{B5C5BA5F-8DB7-4E68-929D-EE74A459E0DE}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger
"{53180D24-B339-4512-BDC7-F765D2CE5530}"= c:\program files\Skype\Phone\Skype.exe:Skype
"{D7FE18F7-BDDE-47F4-8E03-BE80F56FA078}"= UDP:63331:Windows Live OneCare
"TCP Query User{7F19279A-0F48-4CAF-B773-ACA4B72A7710}c:\\program files\\mozilla firefox\\firefox.exe"= UDP:c:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{059A4E28-4E1D-483F-BB1F-12286A8A746C}c:\\program files\\mozilla firefox\\firefox.exe"= TCP:c:\program files\mozilla firefox\firefox.exe:Firefox
"TCP Query User{27899D13-6E02-4F8F-8354-80106129A313}c:\\program files\\tvuplayer\\tvuplayer.exe"= UDP:c:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
"UDP Query User{501DB895-1C5E-480B-A1B2-8C96FD1C5B72}c:\\program files\\tvuplayer\\tvuplayer.exe"= TCP:c:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
"{8E025F29-D305-4F76-97F8-63341F8D6F89}"= UDP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger
"{8CE72675-1730-4E48-B834-65CF6A911945}"= TCP:c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:Logitech Desktop Messenger
"TCP Query User{FDD0BF9A-E075-44DF-95ED-A52C189F3BE4}c:\\program files\\zattoo\\zattood.exe"= UDP:c:\program files\zattoo\zattood.exe:zattood
"UDP Query User{09752DE8-887C-4AA0-BF62-79F54F4219C2}c:\\program files\\zattoo\\zattood.exe"= TCP:c:\program files\zattoo\zattood.exe:zattood
"TCP Query User{2B4BB5BF-DAF2-46E4-BA67-FE9C02A32EBA}c:\\program files\\sopcast\\adv\\sopadver.exe"= UDP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"UDP Query User{E3052EB0-81FF-44C0-AFDC-7B4EC6D6F691}c:\\program files\\sopcast\\adv\\sopadver.exe"= TCP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"TCP Query User{2D2BDF6D-6416-43C8-86E8-2169ED24CECC}c:\\program files\\sopcast\\sopcast.exe"= UDP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"UDP Query User{EBC27707-968E-49C8-AFD2-839737F6CED6}c:\\program files\\sopcast\\sopcast.exe"= TCP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"TCP Query User{1749EDA7-9D72-4ED8-A944-B53A3E309112}c:\\program files\\mirc\\mirc.exe"= UDP:c:\program files\mirc\mirc.exe:mIRC
"UDP Query User{8E75833B-26AE-4884-A07B-45777C2963A8}c:\\program files\\mirc\\mirc.exe"= TCP:c:\program files\mirc\mirc.exe:mIRC
"TCP Query User{33386AFF-AC5B-4BEB-9CDE-7D483984FEE1}c:\\program files\\anonymizer\\anonymizer software\\common\\anonproxy.exe"= UDP:c:\program files\anonymizer\anonymizer software\common\anonproxy.exe:AnonProxy
"UDP Query User{7823E32B-D410-4B6C-84A9-89B402AD0C1E}c:\\program files\\anonymizer\\anonymizer software\\common\\anonproxy.exe"= TCP:c:\program files\anonymizer\anonymizer software\common\anonproxy.exe:AnonProxy
"TCP Query User{0A0B2B98-87B7-4F6F-831E-2A12FDF7C6E3}c:\\program files\\zattoo\\zattoo2.exe"= UDP:c:\program files\zattoo\zattoo2.exe:
"UDP Query User{6E4CE641-05DD-43BC-B368-40558FBEBEB5}c:\\program files\\zattoo\\zattoo2.exe"= TCP:c:\program files\zattoo\zattoo2.exe:
"TCP Query User{3E4C29E3-8329-4248-A262-F007FE8117AE}c:\\program files\\sopcast\\adv\\sopadver.exe"= UDP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"UDP Query User{59CEFDE1-9FB7-41A3-8B97-BD504EF95E28}c:\\program files\\sopcast\\adv\\sopadver.exe"= TCP:c:\program files\sopcast\adv\sopadver.exe:SopCast Adver
"TCP Query User{4C9C31B3-5820-411E-9964-778DF1DD9C19}c:\\program files\\tvuplayer\\tvuplayer.exe"= UDP:c:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
"UDP Query User{EE979F3C-0EBE-45A4-A8FD-5DA781B96813}c:\\program files\\tvuplayer\\tvuplayer.exe"= TCP:c:\program files\tvuplayer\tvuplayer.exe:TVUPlayer Component
"TCP Query User{DAFDC67F-B0C9-41D0-8930-E1B368104C26}c:\\program files\\sopcast\\sopcast.exe"= UDP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"UDP Query User{31173C57-3BE3-4A06-A28A-185F73788836}c:\\program files\\sopcast\\sopcast.exe"= TCP:c:\program files\sopcast\sopcast.exe:SopCast Main Application
"{4B756D5A-6C5B-4B8A-A0A9-BC9A76E9540D}"= UDP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:Sony Ericsson Media Manager 1.2
"{47AC4E11-DCB1-40F8-A01F-33C536F39230}"= TCP:c:\program files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:Sony Ericsson Media Manager 1.2
"TCP Query User{56E178B4-50C1-45E6-95A2-2CB0838191CD}c:\\program files\\valve\\steam\\steamapps\\killer_bear\\counter-strike source\\hl2.exe"= UDP:c:\program files\valve\steam\steamapps\killer_bear\counter-strike source\hl2.exe:hl2
"UDP Query User{4D366F1D-C230-4293-BC45-EEC7D90313A0}c:\\program files\\valve\\steam\\steamapps\\killer_bear\\counter-strike source\\hl2.exe"= TCP:c:\program files\valve\steam\steamapps\killer_bear\counter-strike source\hl2.exe:hl2

S2 BcmSqlStartupSvc;SQL Server-Startdienst für Business Contact Manager;c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-16 30312]
S2 pdfcDispatcher;PDF Document Manager;c:\program files\PDF Complete\pdfsvc.exe [2007-07-31 540448]
S3 DAMDrv;DAMDrv;c:\windows\System32\drivers\DAMDrv.sys [2007-07-31 30008]
S3 FLCDLOCK;HP ProtectTools Gerätesperre/Überwachung;c:\windows\System32\flcdlock.exe [2007-06-08 172131]
S3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-08-05 29184016]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\System32\drivers\s1018bus.sys [2008-12-29 90408]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\System32\drivers\s1018mdfl.sys [2008-12-29 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\System32\drivers\s1018mdm.sys [2008-12-29 122024]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s1018mgmt.sys [2008-12-29 115368]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\System32\drivers\s1018nd5.sys [2008-12-29 25768]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\System32\drivers\s1018obex.sys [2008-12-29 111784]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\System32\drivers\s1018unic.sys [2008-12-29 117544]
S3 tap0901;TAP-Win32 Adapter V9;c:\windows\System32\drivers\tap0901.sys [2008-11-08 25216]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1493668c-6f4d-11dd-bece-001a6be24be0}]
\shell\AutoRun\command - G:\
\shell\open\Command - rundll32.exe .\desktop.dll,InstallM

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2c5f954c-b516-11dd-8272-001a6be24be0}]
\shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e2363011-e290-11dd-a5d0-001a6be24be0}]
\shell\AutoRun\command - G:\nq0cq.cmd
\shell\explore\Command - G:\nq0cq.cmd
\shell\open\Command - G:\nq0cq.cmd

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\program files\Common Files\LightScribe\LSRunOnce.exe"
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -

WebBrowser-{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - (no file)
HKLM-RunOnce-<NO NAME> - (no file)

.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://google.mini20.com
mStart Page = hxxp://www.hp.com
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0azqnqof.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2046651&SearchSource=3&q=
FF - prefs.js: browser.startup.homepage - hxxp://www.web.de/
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2046651&q=
FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\users\User\AppData\Roaming\Mozilla\Firefox\Profiles\0azqnqof.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-09 22:36:45
Windows 6.0.6001 Service Pack 1 NTFS

Scanne versteckte Prozesse...

Scanne versteckte Autostarteinträge...

Scanne versteckte Dateien...

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

- - - - - - - > 'Explorer.exe'(1532)
c:\windows\system32\btncopy.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\System32\wbem\unsecapp.exe
c:\windows\HelpPane.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2009-02-09 22:41:50 - PC wurde neu gestartet [User]
ComboFix-quarantined-files.txt 2009-02-09 21:41:31

Vor Suchlauf: 22 Verzeichnis(se), 56,851,234,816 Bytes frei
Nach Suchlauf: 21 Verzeichnis(se), 56,742,477,824 Bytes frei

301 --- E O F --- 2009-02-05 20:22:55[/i]

Und zu guter Letzt (Hijackthis):

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:48:25, on 09.02.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Safe mode with network support

Running processes:
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\Explorer.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.mini20.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [PDF Complete] "C:\Program Files\PDF Complete\pdfsty.exe"
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [VX3000] C:\Windows\vVX3000.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\RunOnce: [ST Recovery Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKLM\..\RunOnce: [GrpConv] grpconv -o
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKLM\..\RunOnce: [ Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O13 - Gopher Prefix:
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: DeviceNP - C:\Windows\SYSTEM32\DeviceNP.dll
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: HP ProtectTools Gerätesperre/Überwachung (FLCDLOCK) - Hewlett-Packard Ltd - C:\Windows\system32\flcdlock.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 8922 bytes



Neu starten geht immer noch nicht!
Was ist da los?

Ihr seid meine letzte Hoffnung!

Desweiteren habe ich noch 2,3 kleine Anmerkungen:


Das Feld welches sich nach dem Windows-Kennwort eingeben öffnet ist irgendwie blau und beschreibt (sinngemäß) dass ein Problem vorliegt, welches Windows so nicht starten lässt. Leider geht es nach ca 3-4 Sekunden immer wieder weg und der PC fährt sich herunter, bzw. startet sich neu.


Was für mich wichtig ist, wenn ihr mir vielleicht nicht helfen könnte:
Wie bekomme ich meine Webcam und meinen Ton im abgesicherten Modus zum laufen? Welchen Modus muss ich wählen? Abgesicherter Modus mit Netzwerkzugriff, oder? Bei "Abg. Mod. mit Eingabeaufforderung" komme ich gar nicht rein, da dann "cmd.exe" kommt (???!!!) und ich irgendwas eingeben soll ...

Gibt es irgendein Anti-Viren Programm (gerne auch kostenpflichtig) was ihr mir absolut ans Herz legen würdet?! Welches sowas im Nachhinein noch finden kann? Hatte über Norton Inet Security 2009 nachgedacht, aber sichert das nur meinen PC, oder kann das Probleme im Nachhinein noch finden?


Leute ich bin so hilflos

Kann mir den niemand helfen?

Hier mal das Malwarebites-Log mit ausgeschaltetem TeaTimer (Spybot):

Malwarebytes' Anti-Malware 1.33
Datenbank Version: 1742
Windows 6.0.6001 Service Pack 1

10.02.2009 13:43:43
mbam-log-2009-02-10 (13-43-43).txt

Scan-Methode: Quick-Scan
Durchsuchte Objekte: 51823
Laufzeit: 3 minute(s), 36 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)