Problem: JS/Redirector.455 Trojaner

kennys999

Hallo,
hab offentsichtlich den schon bekannten JS/Redirector.455 Trojaner und bin gerade dabei die Programmliste (CCleaner usw.) abzuarbeiten, die in einem anderen Thread genannt wurde. Außerdem bekomme ich dauernd 'ne Meldung von - angeblich - Microsoft und ich solle doch das neuste Virenprogramm installieren, indem ich einfach auf ein rotes Icon in meiner Taskleiste klicken soll.
Erscheint mir aber alles höchst merkwürdig und hab erstmal gar nichts davon installiert...

Vorweg: Ich bin kein geniales PC-Ass, das sich mit allen Programmen und sonstigem auskennt. Also falls jemand so freundlich ist und mir bei meinem Problem hilft, bitte ich diesen, das zu berücksichtigen.

1. Problem: Bei CCleaner erscheint immer wieder der selbe Fehler.

Ich hab mehrfach Fehler suchen und beheben, wie man es soll, gemacht, aber er erscheint einfach immer wieder und ich weiß nicht, ob meine ganzen Bemühungen umsonst sind, solange dieser eine Fehler nicht behoben wird.

Man wird ja freundlich gebeten die Logs in seinem Thread zu posten, also hier der, von der Malwarebyte-Software:

Malwarebytes' Anti-Malware 1.43
Datenbank Version: 3499
Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

06.01.2010 01:43:52
mbam-log-2010-01-06 (01-43-52).txt

Scan-Methode: Vollständiger Scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|)
Durchsuchte Objekte: 171534
Laufzeit: 40 minute(s), 47 second(s)

Infizierte Speicherprozesse: 6
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 8
Infizierte Registrierungswerte: 9
Infizierte Dateiobjekte der Registrierung: 10
Infizierte Verzeichnisse: 1
Infizierte Dateien: 25

Infizierte Speicherprozesse:
C:\WINDOWS\odbn.exe (Trojan.Clicker) -> Unloaded process successfully.
C:\WINDOWS\lsass.exe (Trojan.Clicker) -> Unloaded process successfully.
C:\WINDOWS\system32\winupdate86.exe (Trojan.FakeAlert) -> Unloaded process successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\j7fz0.exe (Trojan.Downloader) -> Unloaded process successfully.
C:\WINDOWS\odbn.exe (Trojan.Clicker) -> Unloaded process successfully.
C:\WINDOWS\odbn.exe (Trojan.Clicker) -> Unloaded process successfully.

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\CLSID\{a5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.Zlob.H) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{a5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{43bf8cd1-c5d5-2230-7bb2-98f22c2b7dc6} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{494e6cec-7483-a4ee-0938-895519a84bc7} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\IS2010 (Rogue.InternetSecurity2010) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{a5bf49a2-94f1-42bd-f434-3604812c807d} (Trojan.Zlob.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\odbny (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lsass (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\winupdate86.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\idstrf (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\winid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\uid (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ygua8e7yhuiesfha876yfauy8fe (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\internet security 2010 (Rogue.InternetSecurity2010) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.FakeAlert) -> Data: c:\windows\system32\winlogon86.exe -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.FakeAlert) -> Data: system32\winlogon86.exe -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.Userinit) -> Bad: (C:\WINDOWS\system32\winlogon86.exe) Good: (Userinit.exe) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\activedesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Infizierte Verzeichnisse:
C:\WINDOWS\system32\lowsec (Stolen.data) -> Quarantined and deleted successfully.

Infizierte Dateien:
C:\WINDOWS\system32\fvbn5f.dll (Trojan.Zlob.H) -> Quarantined and deleted successfully.
C:\WINDOWS\odbn.exe (Trojan.Clicker) -> Delete on reboot.
C:\WINDOWS\lsass.exe (Trojan.Clicker) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winupdate86.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\j7fz0.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\0_11adwara.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\teste1_p.exe (Trojan.Clicker) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\5_odbn.exe (Trojan.Clicker) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\q1.exe (Trojan.Clicker) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winhelper86.dll (Trojan.NHO) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winlogon86.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lowsec\local.ds (Stolen.data) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lowsec\user.ds (Stolen.data) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lowsec\user.ds.lll (Stolen.data) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Internet Security 2010.lnk (Rogue.InternetSecurity2010) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Startmenü\Internet Security 2010.lnk (Rogue.InternetSecurity2010) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\4_pinnew.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\6_ldry3.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\60325cahp25ca0.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\60325cahp25ca1.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\60325cahp25ca2.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\AVR10.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\41.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\e.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Luki\Lokale Einstellungen\Temp\dfgdgdfgrgdgfdrdfs.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

Und jetzt? Ich erkenne da nur Bahnhof, ihr aber hoffentlich nicht.
edit: nach dem Neustart hab ich bis jetzt noch keine Meldung von Antivir bekommen, was mich sehr freudig stimmt.

Ich habe schon zweimal einen Full-Scan mit Antivir gemacht und beim erstenmal einen Neustart gemacht, doch danach war's genau wie davor. Beim zweitenmal hab ich keinen Neustart gemacht und jetzt bekomme ich keine Warnungen von Antivir mehr. Problem etwa schon gelöst? Oder hab ich dann morgen die große Überraschung und die Dinger sind immer noch alle da? . Vor dem 2. Full-Scan hatte ich schon CCleaner laufen lassen.

Hier der Log vom letzten Programm:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Luki at 2010-01-06 01:50:33
Microsoft Windows XP Professional Service Pack 3
System drive C: has 191 GB (80%) free of 238 GB
Total RAM: 2046 MB (76% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:50:37, on 06.01.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\ICO.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Programme\Dell Support Center\bin\sprtcmd.exe
C:\Programme\avmwlanstick\wlangui.exe
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\Programme\Electronic Arts\EADM\Core.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\Programme\Digital Line Detect\DLG.exe
C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programme\avmwlanstick\WlanNetService.exe
C:\Programme\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Dell Support Center\bin\sprtsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programme\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\Luki\Eigene Dateien\Downloads\RSIT.exe
C:\Dokumente und Einstellungen\Luki\Eigene Dateien\Downloads\Luki.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.welt.de/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Programme\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [PMX Daemon] ICO.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IDTSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Programme\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Programme\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter
O4 - HKLM\..\Run: [AVMWlanClient] C:\Programme\avmwlanstick\wlangui.exe
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [EA Core] "C:\Programme\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\Programme\Crawler\Toolbar\ctbr.dll
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVM WLAN Connection Service - AVM Berlin - C:\Programme\avmwlanstick\WlanNetService.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Programme\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Programme\Dell Support Center\bin\sprtsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\WINDOWS\system32\STacSV.exe

--
End of file - 6130 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll [2009-07-23 256112]

{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler Toolbar - C:\Programme\Crawler\Toolbar\ctbr.dll [2009-06-25 1208832]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SigmatelSysTrayApp"=C:\WINDOWS\stsystra.exe [2005-03-22 339968]
"PMX Daemon"=C:\WINDOWS\system32\ICO.EXE [2006-06-09 47104]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-03-31 7561216]
"IDTSysTrayApp"=C:\WINDOWS\sttray.exe [2007-09-05 405504]
"Google Quick Search Box"=C:\Programme\Google\Quick Search Box\GoogleQuickSearchBox.exe [2009-07-23 122368]
"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-08-05 64512]
"dellsupportcenter"=C:\Programme\Dell Support Center\bin\sprtcmd.exe [2009-01-29 206064]
"AVMWlanClient"=C:\Programme\avmwlanstick\wlangui.exe [2008-09-05 1794048]
"avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"Adobe Reader Speed Launcher"=C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"ISUSPM Startup"=C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\isuspm.exe [2005-08-11 249856]
"ISUSScheduler"=C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe [2005-08-11 81920]
"QuickTime Task"=C:\Programme\QuickTime\qttask.exe [2009-09-05 417792]
"iTunesHelper"=C:\Programme\iTunes\iTunesHelper.exe [2009-10-28 141600]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"EA Core"=C:\Programme\Electronic Arts\EADM\Core.exe [2009-09-03 3342336]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart
Digital Line Detect.lnk - C:\Programme\Digital Line Detect\DLG.exe

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=91000000
"NoActiveDesktopChanges"=0
"NoSetActiveDesktop"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoActiveDesktopChanges"=
"NoSetActiveDesktop"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Programme\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programme\Skype\Phone\Skype.exe"="C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Programme\Messenger\msmsgs.exe"="C:\Programme\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Programme\Bonjour\mDNSResponder.exe"="C:\Programme\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Programme\Soldat\Soldat.exe"="C:\Programme\Soldat\Soldat.exe:*:Enabled:http://soldat.pl"
"C:\Programme\Electronic Arts\EADM\Core.exe"="C:\Programme\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"
"C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Programme\iTunes\iTunes.exe"="C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Programme\Microsoft Games\Age of Empires II\EMPIRES2.ICD"="C:\Programme\Microsoft Games\Age of Empires II\EMPIRES2.ICD:*:Enabled:Age of Empires II"
"C:\Programme\Microsoft Games\Age of Empires II\age2_x1\AGE2_X1.ICD"="C:\Programme\Microsoft Games\Age of Empires II\age2_x1\AGE2_X1.ICD:*:Enabled:Age of Empires II Expansion"
"C:\Programme\League of Legends\Air\LolClient.exe"="C:\Programme\League of Legends\Air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Programme\League of Legends\Game\League of Legends.exe"="C:\Programme\League of Legends\Game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"C:\Programme\EA SPORTS\FUSSBALL MANAGER 10\Manager10.exe"="C:\Programme\EA SPORTS\FUSSBALL MANAGER 10\Manager10.exe:*:Enabled:EA SPORTS™ FIFA Manager 10"
"C:\DOKUME~1\Luki\LOKALE~1\Temp\4_pinnew.exe"="C:\DOKUME~1\Luki\LOKALE~1\Temp\4_pinnew.exe:*:Enabled:Enabled"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0d0d3088-77bc-11de-ace4-fe4741c78b61}]
shell\AutoRun\command - K:\pushinst.exe


======List of files/folders created in the last 1 months======

2010-01-06 01:41:54 ----A---- C:\WINDOWS\system32\19169.exe
2010-01-06 01:21:54 ----A---- C:\WINDOWS\system32\26500.exe
2010-01-06 01:09:38 ----D---- C:\rsit
2010-01-06 01:01:53 ----A---- C:\WINDOWS\system32\6334.exe
2010-01-06 01:00:55 ----D---- C:\Dokumente und Einstellungen\Luki\Anwendungsdaten\Malwarebytes
2010-01-06 01:00:47 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2010-01-06 01:00:46 ----D---- C:\Programme\Malwarebytes' Anti-Malware
2010-01-06 00:46:58 ----D---- C:\Programme\CCleaner
2010-01-06 00:44:45 ----A---- C:\lopR.txt
2010-01-06 00:42:35 ----D---- C:\Lop SD
2010-01-06 00:05:19 ----A---- C:\WINDOWS\system32\18467.exe
2010-01-05 23:18:06 ----A---- C:\dypeucmp.exe
2009-12-25 01:00:42 ----RHD---- C:\Dokumente und Einstellungen\Luki\Anwendungsdaten\SecuROM
2009-12-20 02:00:52 ----D---- C:\Dokumente und Einstellungen\Luki\Anwendungsdaten\LolClient.F24C99354F615F3BAB18AE7B93E3F9B9E8784FA6.1
2009-12-20 01:52:08 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2009-12-20 01:52:08 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2009-12-20 01:52:07 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2009-12-20 01:52:07 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2009-12-20 01:52:07 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2009-12-20 01:52:06 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2009-12-20 01:52:06 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2009-12-20 01:52:06 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-12-20 01:52:05 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-12-20 01:52:05 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-12-20 01:52:05 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-12-20 01:52:04 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-12-20 01:52:04 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-12-20 01:52:04 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-12-20 01:52:03 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-12-20 01:52:03 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-12-20 01:52:03 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-12-20 01:52:02 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-12-20 01:52:02 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-12-20 01:52:02 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-12-20 01:52:02 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-12-20 01:52:01 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-12-20 01:52:01 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-12-20 01:52:01 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-12-20 01:52:00 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-12-20 01:52:00 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-12-20 01:52:00 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-12-20 01:52:00 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-12-20 01:52:00 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-12-20 01:51:59 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-12-20 01:51:59 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-12-20 01:51:58 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-12-20 01:51:58 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-12-20 01:51:58 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-12-20 01:51:58 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-12-20 01:51:57 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-12-20 01:51:57 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-12-20 01:51:56 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-12-20 01:51:56 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-12-20 01:51:56 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-12-20 01:51:56 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-12-20 01:51:55 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2009-12-20 01:51:55 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-12-20 01:51:55 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-12-20 01:51:54 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2009-12-20 01:51:54 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2009-12-20 01:51:54 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2009-12-20 01:51:53 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2009-12-20 01:51:52 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2009-12-20 01:51:52 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2009-12-20 01:51:52 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2009-12-20 01:51:51 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2009-12-20 01:51:51 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2009-12-20 01:51:51 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2009-12-20 01:51:50 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2009-12-20 01:51:49 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2009-12-20 01:51:49 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2009-12-20 01:51:48 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2009-12-20 01:51:48 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2009-12-20 01:51:47 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2009-12-20 01:51:47 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2009-12-20 01:51:47 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2009-12-20 01:51:47 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2009-12-20 01:51:46 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2009-12-20 01:51:46 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2009-12-20 01:51:46 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2009-12-20 01:51:46 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2009-12-20 01:51:45 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2009-12-20 01:51:43 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2009-12-20 01:51:43 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2009-12-20 01:51:43 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2009-12-20 01:51:42 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2009-12-20 01:51:42 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2009-12-20 01:51:42 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2009-12-20 01:51:41 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2009-12-20 01:51:41 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2009-12-20 01:51:40 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2009-12-20 01:51:39 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2009-12-20 01:49:15 ----D---- C:\Programme\Gemeinsame Dateien\Adobe AIR
2009-12-20 01:45:17 ----D---- C:\Programme\League of Legends
2009-12-20 01:07:29 ----A---- C:\Programme\loleusetup.exe
2009-12-19 12:20:36 ----D---- C:\Programme\Microsoft Games
2009-12-09 20:15:56 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-09 20:15:51 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-09 20:15:21 ----HDC---- C:\WINDOWS\$NtUninstallKB976325$
2009-12-09 20:15:14 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-09 20:15:09 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-09 20:15:01 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$

======List of files/folders modified in the last 1 months======

2010-01-06 01:49:09 ----D---- C:\Programme\Mozilla Firefox
2010-01-06 01:48:51 ----D---- C:\WINDOWS
2010-01-06 01:48:46 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-06 01:48:43 ----D---- C:\WINDOWS\Temp
2010-01-06 01:48:43 ----D---- C:\WINDOWS\Registration
2010-01-06 01:48:09 ----D---- C:\WINDOWS\system32\drivers
2010-01-06 01:47:47 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-06 01:43:52 ----D---- C:\WINDOWS\system32
2010-01-06 01:00:46 ----RD---- C:\Programme
2010-01-06 00:49:07 ----D---- C:\Programme\Google
2010-01-06 00:49:07 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Google
2010-01-06 00:49:06 ----SHD---- C:\WINDOWS\Installer
2010-01-06 00:49:06 ----SD---- C:\WINDOWS\Tasks
2010-01-06 00:47:34 ----D---- C:\WINDOWS\Debug
2010-01-06 00:03:03 ----D---- C:\Programme\Soldat
2010-01-06 00:02:56 ----RSD---- C:\WINDOWS\Fonts
2010-01-05 23:38:02 ----SHD---- C:\System Volume Information
2010-01-05 23:38:02 ----D---- C:\WINDOWS\system32\Restore
2009-12-26 19:35:21 ----D---- C:\WINDOWS\Prefetch
2009-12-25 01:00:21 ----D---- C:\WINDOWS\system32\DirectX
2009-12-25 01:00:20 ----HD---- C:\WINDOWS\inf
2009-12-24 22:18:53 ----D---- C:\Programme\EA SPORTS
2009-12-20 01:51:45 ----RSD---- C:\WINDOWS\assembly
2009-12-20 01:51:35 ----D---- C:\WINDOWS\Microsoft.NET
2009-12-20 01:49:22 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe
2009-12-20 01:49:21 ----D---- C:\Dokumente und Einstellungen\Luki\Anwendungsdaten\Adobe
2009-12-20 01:49:15 ----D---- C:\Programme\Gemeinsame Dateien
2009-12-09 22:43:34 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-09 20:15:58 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-09 20:15:49 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft Help
2009-12-09 20:15:13 ----HD---- C:\WINDOWS\$hf_mig$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-07-23 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-08 56816]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2005-03-31 180736]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Microsoft UAA-Bustreiber für High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-10 12288]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-03-31 3650144]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2005-11-16 1047816]
R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2-aktivierter Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 avmeject;AVM Eject; C:\WINDOWS\system32\drivers\avmeject.sys [2008-09-05 4352]
S3 FWLANUSB;AVM FRITZ!WLAN; C:\WINDOWS\system32\DRIVERS\fwlanusb.sys [2008-09-05 265088]
S3 MHNDRV;MHN-Treiber; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2009-08-28 40448]
S3 yeddef;YEDDEF driver; C:\WINDOWS\System32\Drivers\yeddef.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;Filtertreiber für Systemwiederherstellung; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73472]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Programme\Avira\AntiVir Desktop\sched.exe [2009-07-23 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2009-08-06 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-07-09 144712]
R2 AVM WLAN Connection Service;AVM WLAN Connection Service; C:\Programme\avmwlanstick\WlanNetService.exe [2008-09-05 364544]
R2 Bonjour Service;Bonjour-Dienst; C:\Programme\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 ehRecvr;Media Center-Empfängerdienst; C:\WINDOWS\eHome\ehRecvr.exe [2005-08-05 235520]
R2 ehSched;Media Center-Planerdienst; C:\WINDOWS\eHome\ehSched.exe [2005-08-05 102912]
R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-05 99328]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-03-31 143436]
R2 sprtsvc_DellSupportCenter;SupportSoft Sprocket Service (DellSupportCenter); C:\Programme\Dell Support Center\bin\sprtsvc.exe [2009-01-29 201968]
R3 iPod Service;iPod-Dienst; C:\Programme\iPod\bin\iPodService.exe [2009-10-28 545568]
S2 STacSV;Audio Service; C:\WINDOWS\system32\STacSV.exe [2007-09-05 204800]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-07-23 182768]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 odserv;Microsoft Office Diagnostics Service; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-08-03 38912]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------


Nehme auch gerne Hilfe per Mail an: lpac14@hotmail.de

Danke schonmal im Voraus!!