Ich habe mir einen Virus eingefangen

der meldet mir im Windowssicherheitsfenster: Windows Sekuritäts Warnzeichen (ein Fenster das sich alle 2 min rechts einblendet)
und warnt mich im schlechten Deutsch (Ihr Komputer von den Internet virren...) vor Virus etc.



Im internet hab ich Anleitungen gefunden, die mich zum Schluss aber zu einer kostenpflichtigen Seite führen:

HILFE: noch dazu bin ich ziemlicher Laie was PC anbelangt!

ich hänge hier nun die Logs an.....

Malwarebytes' Anti-Malware 1.41
Datenbank Version: 2775
Windows 5.1.2600 Service Pack 3

14.11.2009 04:39:07
mbam-log-2009-11-14 (04-39-07).txt

Scan-Methode: Quick-Scan
Durchsuchte Objekte: 101779
Laufzeit: 10 minute(s), 37 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Hijack 1 von 2

Logfile of random's system information tool 1.06 (written by random/random)
Run by *** at 2009-11-14 15:01:14
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 4 GB (10%) free of 37 GB
Total RAM: 1022 MB (46% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:01:24, on 14.11.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Intel\Wireless\Bin\EvtEng.exe
C:\Programme\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
c:\programme\gemeinsame dateien\logitech\lvmvfm\LVPrcSrv.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\a-squared Free\a2service.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programme\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Programme\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\Programme\Intel\Wireless\Bin\RegSrvc.exe
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\Programme\Synaptics\SynTP\SynTPLpr.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\Programme\Arcade\PCMService.exe
C:\Programme\QuickTime\qttask.exe
C:\acer\epm\epm-dm.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
C:\Programme\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Programme\Gemeinsame Dateien\Logitech\LComMgr\Communications_Helper.exe
C:\Programme\Logitech\QuickCam10\QuickCam10.exe
C:\Programme\Gemeinsame Dateien\Logitech\LComMgr\LVComSX.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Windows Live\Messenger\msnmsgr.exe
C:\Programme\Skype\Phone\Skype.exe
C:\Programme\acer\eRecovery\Monitor.exe
C:\WINDOWS\system32\lsf2f4f5.exe
C:\Programme\Gemeinsame Dateien\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programme\Skype\Plugin Manager\skypePM.exe
C:\Programme\Spyware Doctor\BDT\BDTUpdateService.exe
C:\Programme\Spyware Doctor\pctsAuxs.exe
C:\Programme\Spyware Doctor\pctsSvc.exe
C:\Programme\Spyware Doctor\pctsTray.exe
C:\Programme\Spyware Doctor\pctsGui.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Programme\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programme\Messenger\msmsgs.exe
C:\Dokumente und Einstellungen\***\Desktop\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Dokumente und Einstellungen\***\Eigene Dateien\***.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Programme\Spyware Doctor\BDT\PCTBrowserDefender.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Programme\Spyware Doctor\BDT\PCTBrowserDefender.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PCMService] "C:\Programme\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [ccApp] C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [ccRegVfy] C:\Programme\Gemeinsame Dateien\Symantec Shared\ccRegVfy.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [mmtask] "C:\Programme\Musicmatch\Musicmatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Programme\Gemeinsame Dateien\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Programme\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [LVCOMSX] "C:\Programme\Gemeinsame Dateien\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SpyHunter Security Suite] C:\Programme\Enigma Software Group\SpyHunter\SpyHunter3.exe
O4 - HKLM\..\Run: [ISTray] "C:\Programme\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [NBJ] "C:\Programme\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [lsf2f4f5.exe] C:\WINDOWS\system32\lsf2f4f5.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programme\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/DigWXMSN.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Programme\a-squared Free\a2service.exe
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - C:\Programme\Spyware Doctor\BDT\BDTUpdateService.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe
O23 - Service: EvtEng - Intel Corporation - C:\Programme\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\programme\gemeinsame dateien\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Programme\Gemeinsame Dateien\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Programme\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Programme\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: RegSrvc - Intel Corporation - C:\Programme\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Programme\WinPcap\rpcapd.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Programme\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Programme\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Programme\Spyware Doctor\pctsSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe

--
End of file - 10796 bytes

Hijack 2/2

======Scheduled tasks folder======

C:\WINDOWS\tasks\Norton SystemWorks One Button Checkup.job
C:\WINDOWS\tasks\Norton AntiVirus - Scan my computer.job
C:\WINDOWS\tasks\Symantec NetDetect.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
PC Tools Browser Guard BHO - C:\Programme\Spyware Doctor\BDT\PCTBrowserDefender.dll [2009-10-08 395216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Anmelde-Hilfsprogramm - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{472734EA-242A-422B-ADF8-83D1E48CC825} - PC Tools Browser Guard - C:\Programme\Spyware Doctor\BDT\PCTBrowserDefender.dll [2009-10-08 395216]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-02-07 126976]
"SynTPLpr"=C:\Programme\Synaptics\SynTP\SynTPLpr.exe [2004-10-07 98394]
"SynTPEnh"=C:\Programme\Synaptics\SynTP\SynTPEnh.exe [2004-10-07 688218]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2004-08-04 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2004-08-04 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2004-08-04 455168]
"PCMService"=C:\Programme\Arcade\PCMService.exe [2005-03-09 49152]
"QuickTime Task"=C:\Programme\QuickTime\qttask.exe [2006-09-01 282624]
"EPM-DM"=c:\acer\epm\epm-dm.exe [2005-03-28 188416]
"ePowerManagement"=C:\Acer\ePM\ePM.exe [2005-03-24 2880512]
"eRecoveryService"=C:\Windows\System32\Check.exe [2005-03-23 245760]
"ccApp"=C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe [2002-08-19 50880]
"ccRegVfy"=C:\Programme\Gemeinsame Dateien\Symantec Shared\ccRegVfy.exe [2002-08-19 34504]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"SunJavaUpdateSched"=C:\Programme\Java\jre1.5.0_06\bin\jusched.exe [2005-11-10 36975]
"mmtask"=C:\Programme\Musicmatch\Musicmatch Jukebox\mmtask.exe [2006-01-17 53248]
"LogitechCommunicationsManager"=C:\Programme\Gemeinsame Dateien\Logitech\LComMgr\Communications_Helper.exe [2006-10-31 284184]
"LogitechQuickCamRibbon"=C:\Programme\Logitech\QuickCam10\QuickCam10.exe [2006-11-15 746520]
"LVCOMSX"=C:\Programme\Gemeinsame Dateien\Logitech\LComMgr\LVComSX.exe [2006-11-15 244512]
"avgnt"=C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-07-18 266497]
"Adobe Reader Speed Launcher"=C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [2008-06-12 34672]
"SpyHunter Security Suite"=C:\Programme\Enigma Software Group\SpyHunter\SpyHunter3.exe [2009-09-30 866200]
"ISTray"=C:\Programme\Spyware Doctor\pctsTray.exe [2009-09-22 1243088]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MsnMsgr"=C:\Programme\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883840]
"NBJ"=C:\Programme\Ahead\Nero BackItUp\NBJ.exe [2004-07-26 1867776]
"Skype"=C:\Programme\Skype\\Phone\Skype.exe [2009-10-09 25623336]
"lsf2f4f5.exe"=C:\WINDOWS\system32\lsf2f4f5.exe [2009-11-13 373760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-02-08 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-02-07 348160]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SYMTDI]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\System32\dpvsetup.exe"="C:\WINDOWS\System32\dpvsetup.exe:*isabled:Microsoft DirectPlay Voice Test"
"C:\Programme\Messenger\MSMSGS.EXE"="C:\Programme\Messenger\MSMSGS.EXE:*:Enabled:Windows Messenger"
"C:\Programme\Vuze\Azureus.exe"="C:\Programme\Vuze\Azureus.exe:*:Enabled:Azureus"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programme\eMule\emule.exe"="C:\Programme\eMule\emule.exe:*:Enabled:eMule"
"C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Programme\Skype\Plugin Manager\skypePM.exe"="C:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Programme\SPSSInc\Statistics17\statistics.com"="C:\Programme\SPSSInc\Statistics17\statistics.com:*isabled:Statistics17:com"
"C:\Programme\SPSSInc\Statistics17\SPSSWinWrapIDE.exe"="C:\Programme\SPSSInc\Statistics17\SPSSWinWrapIDE.exe:*isabled:SPSS Basic Script Editor"
"C:\Programme\SPSSInc\Statistics17\statistics.exe"="C:\Programme\SPSSInc\Statistics17\statistics.exe:*isabled:Statistics17:exe"
"C:\Programme\Skype\Phone\Skype.exe"="C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\Gemeinsame Dateien\aol\ACS\AOLDial.exe"="C:\Programme\Gemeinsame Dateien\aol\ACS\AOLDial.exe:*:Enabled:AOL"
"C:\Programme\Gemeinsame Dateien\aol\ACS\AOLacsd.exe"="C:\Programme\Gemeinsame Dateien\aol\ACS\AOLacsd.exe:*:Enabled:AOL"
"C:\Programme\AOL 9.0\waol.exe"="C:\Programme\AOL 9.0\waol.exe:*:Enabled:AOL 9.0"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{087d3f32-71ef-11dd-a54e-00c09fc1084b}]
shell\AutoRun\command - F:\RECYCLER\S-51-9-25-3434476501-1644491933-601013352-1214\CphF.exe
shell\open\command - F:\RECYCLER\S-51-9-25-3434476501-1644491933-601013352-1214\CphF.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2dd1689a-1e9b-11de-a6c8-00c09fc1084b}]
shell\AutoRun\command - F:\SYSTEM\G-923-321232-3232-32211-23\memory.exe
shell\open\command - F:\SYSTEM\G-923-321232-3232-32211-23\memory.exe


======List of files/folders created in the last 1 months======

2009-12-27 01:58:29 ----A---- C:\WINDOWS\system32\22124hacz5o9l555.exe
2009-12-25 13:33:47 ----A---- C:\WINDOWS\289faddwarz3951.exe
2009-12-20 21:59:43 ----A---- C:\WINDOWS\system32\3az9steal5911.exe
2009-12-19 18:09:43 ----A---- C:\WINDOWS\system32\393zp55a8.exe
2009-12-19 01:28:08 ----A---- C:\WINDOWS\345v9rzs49d5.dll
2009-12-18 16:43:20 ----A---- C:\WINDOWS\13023s9azbot5c55.dll
2009-12-17 18:03:44 ----A---- C:\WINDOWS\7693threzt35769.exe
2009-12-17 05:41:15 ----A---- C:\WINDOWS\z1696wo5m93.dll
2009-12-05 02:46:16 ----A---- C:\WINDOWS\system32\4794hacztoo915f.exe
2009-12-05 00:21:32 ----A---- C:\WINDOWS\system32\554z9troj9f9.dll
2009-12-02 16:09:00 ----A---- C:\WINDOWS\system32\6ee9vir25z9.dll
2009-12-01 08:49:10 ----A---- C:\WINDOWS\65e9thzeat17440.dll
2009-11-26 01:10:55 ----A---- C:\WINDOWS\system32\4167not5a-v9rus3b3z.dll
2009-11-24 18:50:56 ----A---- C:\WINDOWS\24435s9ambzt6dc.dll
2009-11-21 03:54:32 ----A---- C:\WINDOWS\system32\9999vizus555.exe
2009-11-20 12:05:18 ----A---- C:\WINDOWS\9557tr5j285z.dll
2009-11-16 01:37:38 ----A---- C:\WINDOWS\system32\5z5419ot-a-virus4cc.exe
2009-11-15 12:51:08 ----A---- C:\WINDOWS\7dc29ddwaze258.exe
2009-11-14 14:31:40 ----D---- C:\Programme\CCleaner
2009-11-14 13:57:21 ----A---- C:\WINDOWS\BDTSupport.dll
2009-11-14 13:57:20 ----A---- C:\WINDOWS\SGDetectionTool.dll
2009-11-14 13:57:20 ----A---- C:\WINDOWS\PCTBDRes.dll
2009-11-14 13:57:20 ----A---- C:\WINDOWS\PCTBDCore.dll
2009-11-14 13:52:50 ----D---- C:\Programme\Spyware Doctor
2009-11-14 13:52:50 ----D---- C:\Programme\Gemeinsame Dateien\PC Tools
2009-11-14 13:52:50 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\PC Tools
2009-11-14 13:52:50 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Tools
2009-11-14 13:52:34 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
2009-11-14 04:51:01 ----D---- C:\Programme\a-squared Free
2009-11-14 04:37:43 ----D---- C:\Programme\Enigma Software Group
2009-11-13 23:57:54 ----A---- C:\WINDOWS\z6529wo9m58c.dll
2009-11-13 17:16:05 ----A---- C:\WINDOWS\system32\28995not-a-vi9us25z.dll
2009-11-13 17:16:04 ----A---- C:\WINDOWS\system32\285189ir5z107.exe
2009-11-13 17:16:03 ----A---- C:\WINDOWS\5250hacztoo97b.dll
2009-11-13 17:16:01 ----A---- C:\WINDOWS\system32\z2559wormaf9.exe
2009-11-13 17:16:01 ----A---- C:\WINDOWS\system32\739dd5wnloa9erz088.exe
2009-11-13 17:16:01 ----A---- C:\WINDOWS\system32\442z95r1656.exe
2009-11-13 17:16:01 ----A---- C:\WINDOWS\5aethizf1996.exe
2009-11-13 17:16:01 ----A---- C:\WINDOWS\1705add9arz3149.dll
2009-11-13 17:16:00 ----A---- C:\WINDOWS\7543not-a-v9rzs59a.exe
2009-11-13 17:16:00 ----A---- C:\WINDOWS\24dfbackdoo5145z9.exe
2009-11-13 17:15:56 ----A---- C:\WINDOWS\system32\6ce9thizf1517.dll
2009-11-13 17:15:56 ----A---- C:\WINDOWS\system32\16599spy76z.dll
2009-11-13 17:15:56 ----A---- C:\WINDOWS\system32\11488z9oj757.exe
2009-11-13 17:15:56 ----A---- C:\WINDOWS\500z9ir5865.exe
2009-11-13 17:15:56 ----A---- C:\WINDOWS\24605spam9ot1z5.exe
2009-11-13 17:15:55 ----A---- C:\WINDOWS\system32\52999p5wzre973.exe
2009-11-13 17:15:55 ----A---- C:\WINDOWS\system32\1190s5arsez3299.exe
2009-11-13 17:15:54 ----A---- C:\WINDOWS\22987v5rzs747.dll
2009-11-13 17:15:54 ----A---- C:\WINDOWS\19bcdownloaze52649.exe
2009-11-13 17:15:54 ----A---- C:\WINDOWS\18505ziru94f2.exe
2009-11-13 17:15:53 ----A---- C:\WINDOWS\system32\58z8not5a-v9rus4d.dll
2009-11-13 17:15:53 ----A---- C:\WINDOWS\system32\23b6sparsez599.dll
2009-11-13 17:15:53 ----A---- C:\WINDOWS\6549backdoor197z.exe
2009-11-13 17:15:53 ----A---- C:\WINDOWS\222439ot5z-virus71c.exe
2009-11-13 17:15:52 ----A---- C:\WINDOWS\system32\1970haz5tool47a.exe
2009-11-13 17:15:52 ----A---- C:\WINDOWS\93328w5rm3ze.dll
2009-11-13 17:15:52 ----A---- C:\WINDOWS\4dc2downloader599z.dll
2009-11-13 17:15:51 ----A---- C:\WINDOWS\7092szeal3335.dll
2009-11-13 17:15:50 ----A---- C:\WINDOWS\system32\75dfzhief919.dll
2009-11-13 17:15:50 ----A---- C:\WINDOWS\system32\5745vzrus3d9.dll
2009-11-13 17:15:50 ----A---- C:\WINDOWS\system32\1454z9reat27535.exe
2009-11-13 17:15:50 ----A---- C:\WINDOWS\53b1backd9or728z.exe
2009-11-13 17:15:48 ----A---- C:\WINDOWS\1055thie93z0.dll
2009-11-13 17:15:47 ----A---- C:\WINDOWS\system32\z6695viru947c.dll
2009-11-13 17:15:47 ----A---- C:\WINDOWS\system32\a5zsteal9165.dll
2009-11-13 17:15:47 ----A---- C:\WINDOWS\system32\11e59ackdoor2537z.dll
2009-11-13 17:15:47 ----A---- C:\WINDOWS\297azpar5e909.exe
2009-11-13 17:15:44 ----A---- C:\WINDOWS\system32\4949a5dwarez90.dll
2009-11-13 17:15:44 ----A---- C:\WINDOWS\ac0spa9z51544.exe
2009-11-13 17:15:43 ----A---- C:\WINDOWS\system32\4c495hzeat15929.dll
2009-11-13 17:15:43 ----A---- C:\WINDOWS\512dth9ef5z2.exe
2009-11-13 17:15:42 ----A---- C:\WINDOWS\system32\z4095pambot364.dll
2009-11-13 17:15:42 ----A---- C:\WINDOWS\system32\25508sp9m5ot7zf.exe
2009-11-13 17:15:42 ----A---- C:\WINDOWS\5fbesp5za9e880.exe
2009-11-13 17:15:42 ----A---- C:\WINDOWS\5eb5thiez2939.dll
2009-11-13 17:15:41 ----A---- C:\WINDOWS\392fzddware23085.exe
2009-11-13 17:15:39 ----A---- C:\WINDOWS\system32\24725ackzoo946c.dll
2009-11-13 17:15:38 ----A---- C:\WINDOWS\system32\3c59zparse2645.exe
2009-11-13 17:15:38 ----A---- C:\WINDOWS\9d50spzware9125.dll
2009-11-13 17:15:37 ----A---- C:\WINDOWS\5c189parsz392.dll
2009-11-13 17:15:37 ----A---- C:\WINDOWS\30993virus59z.exe
2009-11-13 17:15:36 ----A---- C:\WINDOWS\394ztroj5b.exe
2009-11-13 17:15:35 ----A---- C:\WINDOWS\system32\29959not5azvirus87.dll
2009-11-13 17:15:34 ----A---- C:\WINDOWS\system32\7635spyza9e49.dll
2009-11-13 17:15:34 ----A---- C:\WINDOWS\587zth5eat94541.exe
2009-11-13 17:15:34 ----A---- C:\WINDOWS\490dsteal5z95.exe
2009-11-13 17:15:33 ----A---- C:\WINDOWS\system32\ze8s9ywa5e199.exe
2009-11-13 17:15:31 ----A---- C:\WINDOWS\system32\3230t9oz251.dll
2009-11-13 17:15:31 ----A---- C:\WINDOWS\22914hacktozl25c.dll
2009-11-13 17:15:29 ----A---- C:\WINDOWS\4994vzr1285.dll
2009-11-13 17:15:28 ----A---- C:\WINDOWS\system32\lsf2f4f5.exe
2009-11-13 17:15:28 ----A---- C:\WINDOWS\system32\5e58ste9l2468z.dll
2009-11-13 17:11:02 ----D---- C:\Dokumente und Einstellungen\Netzer\Anwendungsdaten\vlc
2009-11-13 17:10:02 ----D---- C:\Programme\VideoLAN
2009-11-12 10:13:58 ----HD---- C:\WINDOWS\$NtUninstallKB969947$
2009-11-11 13:35:09 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SafeNet Sentinel
2009-11-11 13:34:40 ----D---- C:\Programme\Gemeinsame Dateien\SPSS
2009-11-11 13:34:40 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SPSS
2009-11-11 13:33:12 ----D---- C:\Programme\SPSSInc
2009-11-11 13:32:52 ----A---- C:\WINDOWS\system32\sysprs7.dll
2009-11-11 13:32:52 ----A---- C:\WINDOWS\system32\lsprst7.dll
2009-11-09 13:49:34 ----A---- C:\WINDOWS\system32\17184not-a-vzrus295.exe
2009-11-06 20:00:00 ----A---- C:\WINDOWS\16930s5y5ze.dll
2009-11-06 12:37:25 ----D---- C:\Programme\Gemeinsame Dateien\Skype
2009-11-05 17:30:42 ----A---- C:\WINDOWS\2z165worm5e9.exe
2009-11-05 01:06:10 ----A---- C:\WINDOWS\7957spz970.exe
2009-11-04 11:27:23 ----A---- C:\WINDOWS\system32\15z60spambo94b4.exe
2009-11-04 09:16:36 ----D---- C:\Programme\MSECache
2009-11-04 09:01:03 ----HD---- C:\WINDOWS\$NtUninstallKB976749$
2009-11-01 02:47:13 ----A---- C:\WINDOWS\system32\55b8threat28957z.exe
2009-10-26 03:50:15 ----A---- C:\WINDOWS\786cvir55z9.dll
2009-10-25 20:31:01 ----A---- C:\WINDOWS\system32\495asparsz1917.exe
2009-10-25 19:07:27 ----A---- C:\WINDOWS\system32\4d95zackdoor1935.exe
2009-10-19 17:30:16 ----A---- C:\WINDOWS\5z5abackd59r1662.exe
2009-10-19 04:50:09 ----A---- C:\WINDOWS\system32\9z1bdownl5ader2454.exe
2009-10-18 21:35:38 ----A---- C:\WINDOWS\93bdown5o9dez681.exe
2009-10-17 04:48:36 ----HD---- C:\WINDOWS\$NtUninstallKB974455$
2009-10-17 04:48:28 ----HD---- C:\WINDOWS\$NtUninstallKB958869$
2009-10-17 04:46:20 ----HD---- C:\WINDOWS\$NtUninstallKB969059$
2009-10-17 04:45:57 ----HD---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2009-10-17 04:45:53 ----HD---- C:\WINDOWS\$NtUninstallKB974112$
2009-10-17 04:45:47 ----HD---- C:\WINDOWS\$NtUninstallKB975025$
2009-10-17 04:45:42 ----HD---- C:\WINDOWS\$NtUninstallKB974571$
2009-10-17 04:45:05 ----HD---- C:\WINDOWS\$NtUninstallKB971486$
2009-10-17 04:44:50 ----HD---- C:\WINDOWS\$NtUninstallKB973525$
2009-10-17 04:44:11 ----HD---- C:\WINDOWS\$NtUninstallKB975467$
2009-10-17 02:06:23 ----A---- C:\WINDOWS\system32\2091zspa95ot580.exe

doch 3 teile nötig

======List of files/folders modified in the last 1 months======

2009-11-14 13:40:10 ----A---- C:\WINDOWS\system32\eRLog.ini
2009-11-14 13:38:54 ----A---- C:\WINDOWS\ModemLog_SoftV92 Data Fax Modem with SmartCP.txt
2009-11-14 04:56:10 ----N---- C:\WINDOWS\SchedLgU.Txt
2009-11-13 17:12:46 ----A---- C:\WINDOWS\winamp.ini
2009-11-13 12:07:00 ----A---- C:\WINDOWS\NeroDigital.ini
2009-11-12 13:00:56 ----A---- C:\WINDOWS\win.ini
2009-11-05 18:36:22 ----A---- C:\WINDOWS\system32\MRT.exe
2009-10-20 00:51:40 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-10-17 04:51:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-05-28 75096]
R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2008-04-21 21248]
R1 UBHelper;UBHelper; C:\WINDOWS\system32\drivers\UBHelper.sys [2004-12-17 13952]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.1.6.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2005-09-03 17119]
R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2005-03-31 8552]
R2 EpmPsd;Acer EPM Power Scheme Driver; \??\C:\WINDOWS\system32\drivers\epm-psd.sys []
R2 EpmShd;Acer EPM System Hardware Driver; \??\C:\WINDOWS\system32\drivers\epm-shd.sys []
R2 irda;IrDA-Protokoll; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-03-16 13059]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2004-10-15 11354]
R2 SAVRTPEL;SAVRTPEL; \??\C:\WINDOWS\system32\Drivers\SAVRTPEL.SYS []
R2 SYMTDI;SYMTDI; \??\C:\WINDOWS\system32\Drivers\SYMTDI.SYS []
R3 Arp1394;1394-ARP-Clientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-02-08 970240]
R3 avgntflt;avgntflt; \??\C:\Programme\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2003-05-21 175360]
R3 CAMCAUD;Conexant AMC Audio; C:\WINDOWS\system32\drivers\camcaud.sys [2004-06-24 34048]
R3 CAMCHALA;CAMCHALA; C:\WINDOWS\system32\drivers\camchal.sys [2004-06-24 276480]
R3 CmBatt;Treiber für Microsoft-ACPI-Kontrollmethodenkompatible Batterie; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-01-24 1038208]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2005-01-24 207616]
R3 int15.sys;int15.sys; \??\C:\Programme\acer\eRecovery\int15.sys []
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2006-11-15 24736]
R3 NAVENG;NAVENG; \??\C:\PROGRA~1\GEMEIN~1\SYMANT~1\VIRUSD~1\20060601.019\NAVENG.Sys []
R3 NAVEX15;NAVEX15; \??\C:\PROGRA~1\GEMEIN~1\SYMANT~1\VIRUSD~1\20060601.019\NavEx15.Sys []
R3 NIC1394;1394-Netzwerktreiber; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 NPDriver;Norton Unerase Protection Driver; \??\C:\WINDOWS\system32\Drivers\NPDRIVER.SYS []
R3 NSCIRDA;NSC-Infrarotgerätetreiber; C:\WINDOWS\system32\DRIVERS\nscirda.sys [2008-04-13 28672]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2005-03-31 6144]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-12-05 10368]
R3 Rasirda;WAN-Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SAVRT;SAVRT; \??\C:\WINDOWS\system32\Drivers\SAVRT.SYS []
R3 SymEvent;SymEvent; \??\C:\Programme\Symantec\SYMEVENT.SYS []
R3 SYMREDRV;SYMREDRV; \??\C:\WINDOWS\system32\Drivers\SYMREDRV.SYS []
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2004-10-07 185824]
R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Microsoft USB-Standardhubtreiber; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-01-24 703616]
S3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2005-01-10 449888]
S3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller XP Driver; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2003-09-25 44032]
S3 catchme;catchme; \??\C:\DOKUME~1\Netzer\LOKALE~1\Temp\catchme.sys []
S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 G3GRUMDM;G3G R USB Modem; C:\WINDOWS\system32\DRIVERS\g3grumdm.sys [2005-02-21 26496]
S3 G3GRUSER;G3G R USB Serial; C:\WINDOWS\system32\DRIVERS\g3gruser.sys [2005-02-21 23296]
S3 HidUsb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2007-07-11 101120]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-02-07 804572]
S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2006-11-15 1678368]
S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys [2006-11-15 1962912]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2006-11-11 40352]
S3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-18 12288]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2006-11-11 487328]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SONYPVU1;Sony USB-Filtertreiber (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA-IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys []
S3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbohci;Miniporttreiber für Microsoft USB Open Host-Controller; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
S3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB-Scannertreiber; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 w200bus;Sony Ericsson W200 driver (WDM); C:\WINDOWS\system32\DRIVERS\w200bus.sys [2006-11-07 61504]
S3 w29n51;Intel(R) PRO/Wireless 2200BG Netzwerkverbindungstreiber für Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2004-10-29 3222784]
S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys []
S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 a2free;a-squared Free Service; C:\Programme\a-squared Free\a2service.exe [2009-10-01 1858144]
R2 AntiVirScheduler;AntiVir PersonalEdition Classic Planer; C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-24 68865]
R2 AntiVirService;AntiVir PersonalEdition Classic Guard; C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-24 151297]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-02-08 348160]
R2 Browser Defender Update Service;Browser Defender Update Service; C:\Programme\Spyware Doctor\BDT\BDTUpdateService.exe [2009-10-08 112592]
R2 ccEvtMgr;Symantec Event Manager; C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe [2002-08-08 308936]
R2 EvtEng;EvtEng; C:\Programme\Intel\Wireless\Bin\EvtEng.exe [2004-10-15 86016]
R2 Irmon;Infrarotüberwachung; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 LVPrcSrv;Process Monitor; c:\programme\gemeinsame dateien\logitech\lvmvfm\LVPrcSrv.exe [2006-11-15 109344]
R2 MDM;Machine Debug Manager; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 navapsvc;Norton AntiVirus Auto Protect Service; C:\Programme\Norton SystemWorks\Norton AntiVirus\navapsvc.exe [2002-08-19 116336]
R2 NProtectService;Norton Unerase Protection; C:\Programme\Norton SystemWorks\Norton Utilities\NPROTECT.EXE [2002-08-14 135168]
R2 RegSrvc;RegSrvc; C:\Programme\Intel\Wireless\Bin\RegSrvc.exe [2004-10-15 139264]
R2 S24EventMonitor;Spectrum24 Event Monitor; C:\Programme\Intel\Wireless\Bin\S24EvMon.exe [2004-10-15 360521]
R2 sdAuxService;PC Tools Auxiliary Service; C:\Programme\Spyware Doctor\pctsAuxs.exe [2009-09-23 358600]
R2 sdCoreService;PC Tools Security Service; C:\Programme\Spyware Doctor\pctsSvc.exe [2009-09-23 1141200]
R2 Speed Disk service;Speed Disk service; C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe [2002-08-14 172065]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 LVSrvLauncher;LVSrvLauncher; C:\Programme\Gemeinsame Dateien\Logitech\SrvLnch\SrvLnch.exe [2006-11-15 101152]
S2 SBService;ScriptBlocking Service; C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe [2001-08-13 54408]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 ccPwdSvc;Symantec Password Validation Service; C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe [2002-08-19 63176]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Updater Service; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-01-04 136120]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 rpcapd;Remote Packet Capture Protocol v.0 (experimental); C:\Programme\WinPcap\rpcapd.exe [2003-04-04 77824]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------



wenn etwas fehlt antworte ich so schnell es geht.

Hallo,

14.11.2009 04:39:07
mbam-log-2009-11-14 (04-39-07).txt

Scan-Methode: Quick-Scan
Durchsuchte Objekte: 101779
Laufzeit: 10 minute(s), 37 second(s)

Mach bitte den vollständigen Scan mit MalwareBytes!

danke, habe aber mittlerweile meinen computer neu aufgesetzt,... er war zu nix mehr zu gebrauchen, hat alles gestreikt....

Ok, danke für die Rückmeldung
War auch eine gute Entscheidung, das Logfile enthüllte viele Dateien, die ich lieber nicht auf meinen System haben wollte