problem mit TR/Dldr.Tracur.b.35

NeoMaster

Ich hab da ein kleines Problem mit einem Trojaner der seit einiger Zeit auf meinem Rechner herumschwirrt .....

Da mir Avira nur selten eine Warnung gab hab ich mir nichts weiter gedacht und mich auch nicht weiter darum gekümmert. Aber nun ist des ganze extrem nervig geworden weil wenn ich des "Achtung Fund" Fenster schließe kommt sofort wieder ein neues .......

Ich hab jetzt die letzten 2 Stunden damit verbracht meinen "Freund" im Internet zu finden aber da kommen immer nur TR/Dldr.Tracur.b.9 und 7 und so und hab bis jetzt nie meinen gefunden der sitzt in der datei

C:\Windows\system32\eapolqec32.dll

und auch wenn ich die Datei löschen will kommt die immer wieder .....

bitte um schnelle Hilfe hab auch schon mal HiJack drüberlaufen lassen .... hier der Bericht:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Benjamin at 2010-01-21 02:35:40
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 11 GB (28%) free of 39 GB
Total RAM: 1535 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:35:46, on 21.01.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Programme\Java\jre1.6.0_07\bin\jusched.exe
C:\Programme\Microsoft LifeChat\LifeChat.exe
C:\Programme\avmwlanstick\FRITZWLANMini.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\DNA\btdna.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\LogMeIn Hamachi\hamachi-2.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\Java\jre1.6.0_07\bin\jucheck.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avnotify.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\GUARDGUI.EXE
C:\Programme\Avira\AntiVir PersonalEdition Classic\GUARDGUI.EXE
C:\Programme\Avira\AntiVir PersonalEdition Classic\GUARDGUI.EXE
C:\Programme\Avira\AntiVir PersonalEdition Classic\GUARDGUI.EXE
C:\Programme\Spyware Doctor\pctsAuxs.exe
C:\Programme\Spyware Doctor\BDT\BDTUpdateService.exe
C:\Programme\Spyware Doctor\pctsTray.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\Benjamin\Eigene Dateien\Downloads\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Programme\trend micro\Benjamin.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: (no name) - {014A67C9-069B-4A10-BF97-EDDF771A7E71} - C:\WINDOWS\System32\dmstyle32.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll (file missing)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Programme\Spyware Doctor\BDT\PCTBrowserDefender.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Programme\Spyware Doctor\BDT\PCTBrowserDefender.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [LifeChat] "c:\Programme\Microsoft LifeChat\LifeChat.exe"
O4 - HKLM\..\Run: [AVMWlanClient] C:\Programme\avmwlanstick\FRITZWLANMini.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Weather] C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Programme\DNA\btdna.exe"
O4 - HKCU\..\Run: [Pando Media Booster] C:\Programme\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing)
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\System32\eapolqec32.dll
O20 - Winlogon Notify: 5c2d88fa716 - C:\WINDOWS\System32\eapolqec32.dll
O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - C:\Programme\Spyware Doctor\BDT\BDTUpdateService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Programme\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Programme\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Programme\Spyware Doctor\pctsSvc.exe
O24 - Desktop Component 0: (no name) - file:///D:/Tools/Wallpapers/1024x768/images/wallpaper_dragonshard_04_1024.jpg

--
End of file - 8422 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Norton Security Scan for Benjamin.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{014A67C9-069B-4A10-BF97-EDDF771A7E71}]
C:\WINDOWS\System32\dmstyle32.dll [2010-01-21 192000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
&Yahoo! Toolbar Helper - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class - C:\PROGRA~1\ICQTOO~1\toolbaru.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
PC Tools Browser Guard BHO - C:\Programme\Spyware Doctor\BDT\PCTBrowserDefender.dll [2009-11-10 395216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Anmelde-Hilfsprogramm - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll []
{472734EA-242A-422B-ADF8-83D1E48CC825} - PC Tools Browser Guard - C:\Programme\Spyware Doctor\BDT\PCTBrowserDefender.dll [2009-11-10 395216]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Programme\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784]
"avgnt"=C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe [2008-06-12 266497]
"LifeChat"=c:\Programme\Microsoft LifeChat\LifeChat.exe [2008-08-21 267296]
"AVMWlanClient"=C:\Programme\avmwlanstick\FRITZWLANMini.exe [2007-02-02 283136]
"Adobe Reader Speed Launcher"=C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Weather"=C:\PROGRA~1\AWS\WEATHE~1\Weather.exe 1 []
"MSMSGS"=C:\Programme\Messenger\msmsgs.exe /background []
"BitTorrent DNA"=C:\Programme\DNA\btdna.exe [2009-10-06 323392]
"Pando Media Booster"=C:\Programme\Pando Networks\Media Booster\PMB.exe [2009-12-25 2935480]
"Skype"=C:\Programme\Skype\Phone\Skype.exe [2009-10-09 25623336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\WINDOWS\System32\eapolqec32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\5c2d88fa716]
C:\WINDOWS\System32\eapolqec32.dll [2010-01-21 122368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"\\Name-fa749761de\Metin2_Germany\metin2.bin"="\\Name-fa749761de\Metin2_Germany\metin2.bin:*:Enabled:metin2.bin"
"C:\Dokumente und Einstellungen\Benjamin\Eigene Dateien\Metin2_Germany\metin2.bin"="C:\Dokumente und Einstellungen\Benjamin\Eigene Dateien\Metin2_Germany\metin2.bin:*:Enabled:metin2"
"C:\Programme\LimeWire\LimeWire.exe"="C:\Programme\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Programme\GameSpy Arcade\Aphex.exe"="C:\Programme\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade"
"C:\Sierra\Empire Earth\Empire Earth.exe"="C:\Sierra\Empire Earth\Empire Earth.exe:*:Enabled:Empire Earth"
"E:\Spiele\Call of Duty 2\CoD2MP_s.exe"="E:\Spiele\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Assistent zum Übertragen von Dateien und Einstellungen"
"C:\Programme\Sierra\Empire Earth II\EE2X.exe"="C:\Programme\Sierra\Empire Earth II\EE2X.exe:*:Enabled:Empire Earth II: The Art of Supremacy"
"C:\Programme\Valve\Steam\SteamApps\2bking512\condition zero\hl.exe"="C:\Programme\Valve\Steam\SteamApps\2bking512\condition zero\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Programme\Valve\Steam\SteamApps\2bking512\counter-strike\hl.exe"="C:\Programme\Valve\Steam\SteamApps\2bking512\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Dokumente und Einstellungen\Daniel\Desktop\Valve\Steam\SteamApps\2bking512\counter-strike\hl.exe"="C:\Dokumente und Einstellungen\Daniel\Desktop\Valve\Steam\SteamApps\2bking512\counter-strike\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Dokumente und Einstellungen\Benjamin\Desktop\Metin2_Germany\metin2.bin"="C:\Dokumente und Einstellungen\Benjamin\Desktop\Metin2_Germany\metin2.bin:*:Enabled:metin2"
"C:\Programme\TmNationsForever\TmForever.exe"="C:\Programme\TmNationsForever\TmForever.exe:*:Enabled:TmForever"
"C:\Programme\Metin2_Germany\metin2.bin"="C:\Programme\Metin2_Germany\metin2.bin:*:Enabled:metin2"
"C:\Programme\Gameforge4D\AirRivalsDe\Launcher.atm"="C:\Programme\Gameforge4D\AirRivalsDe\Launcher.atm:Enabled:GameExe2"
"C:\Programme\Gameforge4D\AirRivalsDe\Res-Voip\SCVoIP.exe"="C:\Programme\Gameforge4D\AirRivalsDe\Res-Voip\SCVoIP.exe:Enabled:GameVoIP"
"C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Programme\Windows Live\Sync\WindowsLiveSync.exe"="C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Programme\Xfire\Xfire.exe"="C:\Programme\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\Programme\eMule\emule.exe"="C:\Programme\eMule\emule.exe:*:Enabled:eMule"
"C:\Dokumente und Einstellungen\Benjamin\Eigene Dateien\Alles\Metin2_Germany\metin2.bin"="C:\Dokumente und Einstellungen\Benjamin\Eigene Dateien\Alles\Metin2_Germany\metin2.bin:*isabled:metin2"
"C:\Sierra\EE-ZDE\EE-AOC.exe"="C:\Sierra\EE-ZDE\EE-AOC.exe:*:Enabled:EE-AOC"
"C:\Programme\Rockstar Games\Midnight Club II\mc2.exe"="C:\Programme\Rockstar Games\Midnight Club II\mc2.exe:*:Enabled:mc2"
"C:\Dokumente und Einstellungen\Benjamin\Eigene Dateien\Eigene Musik\Metin2_Germany\metin2.bin"="C:\Dokumente und Einstellungen\Benjamin\Eigene Dateien\Eigene Musik\Metin2_Germany\metin2.bin:*isabled:metin2"
"C:\Dokumente und Einstellungen\Benjamin\Eigene Dateien\Alles\WOW\World of Warcraft Installer\World of Warcraft\Launcher.exe"="C:\Dokumente und Einstellungen\Benjamin\Eigene Dateien\Alles\WOW\World of Warcraft Installer\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Dokumente und Einstellungen\Benjamin\Desktop\UrbanTerror_41_FULL\UrbanTerror\ioUrTded.exe"="C:\Dokumente und Einstellungen\Benjamin\Desktop\UrbanTerror_41_FULL\UrbanTerror\ioUrTded.exe:*:Enabled:ioUrTded"
"C:\Programme\UrbanTerror\ioUrTded.exe"="C:\Programme\UrbanTerror\ioUrTded.exe:*isabled:ioUrTded"
"C:\Programme\DNA\btdna.exe"="C:\Programme\DNA\btdna.exe:*:EnabledNA"
"C:\Programme\Skype\Plugin Manager\skypePM.exe"="C:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Programme\World of Warcraft\WoW-3.2.0-deDE-downloader.exe"="C:\Programme\World of Warcraft\WoW-3.2.0-deDE-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Programme\World of Warcraft\Launcher.exe"="C:\Programme\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Programme\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-deDE-downloader.exe"="C:\Programme\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-deDE-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Programme\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-deDE-downloader.exe"="C:\Programme\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-deDE-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Programme\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-deDE-downloader.exe"="C:\Programme\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-deDE-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Programme\World of Warcraft\BackgroundDownloader.exe"="C:\Programme\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Programme\Max p-server\mc.exe"="C:\Programme\Max p-server\mc.exe:*:Enabled:mc"
"C:\Programme\Max p-server\metin2.bin"="C:\Programme\Max p-server\metin2.bin:*:Enabled:metin2"
"C:\Dokumente und Einstellungen\Benjamin\Desktop\yannik p-server\mc.exe"="C:\Dokumente und Einstellungen\Benjamin\Desktop\yannik p-server\mc.exe:*:Enabled:mc"
"C:\Dokumente und Einstellungen\Benjamin\Desktop\yannik p-server\metin2.bin"="C:\Dokumente und Einstellungen\Benjamin\Desktop\yannik p-server\metin2.bin:*:Enabled:metin2"
"C:\Dokumente und Einstellungen\Benjamin\Desktop\p-server\mc.exe"="C:\Dokumente und Einstellungen\Benjamin\Desktop\p-server\mc.exe:*:Enabled:mc"
"C:\Dokumente und Einstellungen\Benjamin\Desktop\P-Server\metin2.bin"="C:\Dokumente und Einstellungen\Benjamin\Desktop\P-Server\metin2.bin:*:Enabled:metin2"
"C:\Programme\ANNO1602\1602.EXE"="C:\Programme\ANNO1602\1602.EXE:*:Enabled:1602"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Programme\TeamViewer\Version5\TeamViewer.exe"="C:\Programme\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Dokumente und Einstellungen\Benjamin\temp\TeamViewer\Version5\TeamViewer.exe"="C:\Dokumente und Einstellungen\Benjamin\temp\TeamViewer\Version5\TeamViewer.exe:*:Enabled:TeamViewer"
"C:\Programme\Pando Networks\Media Booster\PMB.exe"="C:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Programme\Metin2\metin2.bin"="C:\Programme\Metin2\metin2.bin:*:Enabled:metin2"
"C:\Programme\ANNO 1602 Königs-Edition\1602.exe"="C:\Programme\ANNO 1602 Königs-Edition\1602.exe:*:Enabled:1602"
"C:\Dokumente und Einstellungen\Benjamin\Desktop\lol\mc.exe"="C:\Dokumente und Einstellungen\Benjamin\Desktop\lol\mc.exe:*:Enabled:mc"
"C:\Programme\Skype\Phone\Skype.exe"="C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Windows Shell"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Programme\Windows Live\Sync\WindowsLiveSync.exe"="C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{40ce6183-31d5-11d7-82c7-806d6172696f}]
shell\AutoRun\command - D:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ebeba344-ee06-11de-a540-001f3f025673}]
shell\AutoRun\command - F:\Startme.exe


======List of files/folders created in the last 1 months======

2010-01-21 02:35:40 ----D---- C:\rsit
2010-01-21 02:35:40 ----D---- C:\Programme\trend micro
2010-01-21 02:05:10 ----D---- C:\Programme\CCleaner
2010-01-21 01:55:50 ----A---- C:\WINDOWS\SGDetectionTool.dll
2010-01-21 01:55:50 ----A---- C:\WINDOWS\BDTSupport.dll
2010-01-21 01:55:49 ----A---- C:\WINDOWS\PCTBDRes.dll
2010-01-21 01:55:49 ----A---- C:\WINDOWS\PCTBDCore.dll
2010-01-21 01:52:50 ----D---- C:\Programme\Spyware Doctor
2010-01-21 01:52:50 ----D---- C:\Programme\Gemeinsame Dateien\PC Tools
2010-01-21 01:52:50 ----D---- C:\Dokumente und Einstellungen\Benjamin\Anwendungsdaten\PC Tools
2010-01-21 01:52:50 ----D---- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\PC Tools
2010-01-21 00:37:31 ----A---- C:\WINDOWS\system32\dmstyle32.dll
2010-01-21 00:37:31 ----A---- C:\WINDOWS\system32\29JddpSwYgQDV.vbs
2010-01-20 16:55:17 ----D---- C:\Programme\Gamigo Games
2010-01-20 14:31:27 ----A---- C:\WINDOWS\system32\dhcpqec32.dll
2010-01-20 14:31:26 ----A---- C:\WINDOWS\system32\iqDvRCT.vbs
2010-01-19 18:59:41 ----D---- C:\Dokumente und Einstellungen\Benjamin\Anwendungsdaten\Friday's games
2010-01-19 18:06:45 ----A---- C:\WINDOWS\system32\EOGCPECR90GpXhw.vbs
2010-01-19 18:06:45 ----A---- C:\WINDOWS\system32\dciman3232.dll
2010-01-19 13:05:26 ----A---- C:\WINDOWS\system32\D5WEBeOVjUnKOUo.vbs
2010-01-19 13:05:26 ----A---- C:\WINDOWS\system32\cryptui32.dll
2010-01-19 08:35:34 ----A---- C:\WINDOWS\system32\YIKsu1WDZjrkwKW.vbs
2010-01-19 08:35:34 ----A---- C:\WINDOWS\system32\dnsrslvr32.dll
2010-01-19 00:20:37 ----A---- C:\WINDOWS\system32\dhcpmon32.dll
2010-01-19 00:20:37 ----A---- C:\WINDOWS\system32\4CwJ9diTQ25RjtI.vbs
2010-01-18 15:38:29 ----A---- C:\WINDOWS\system32\oi08dfPAkBzFFY2.vbs
2010-01-18 15:38:29 ----A---- C:\WINDOWS\system32\dmsynth32.dll
2010-01-17 22:28:33 ----D---- C:\Programme\Gemeinsame Dateien\Blizzard Entertainment
2010-01-17 22:28:30 ----D---- C:\Programme\World of Warcraft Trial
2010-01-17 22:22:36 ----A---- C:\WINDOWS\system32\Pyutf2pzhplMZ.vbs
2010-01-17 22:22:36 ----A---- C:\WINDOWS\system32\diactfrm32.dll
2010-01-17 21:49:38 ----ASH---- C:\WINDOWS\system32\2.tmp
2010-01-17 20:15:13 ----D---- C:\Programme\Gameforge4D
2010-01-17 18:19:51 ----D---- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\DivoGames
2010-01-15 14:40:17 ----D---- C:\Dokumente und Einstellungen\Benjamin\Anwendungsdaten\Skype
2010-01-15 14:39:53 ----D---- C:\Programme\Gemeinsame Dateien\Skype
2010-01-15 14:39:44 ----RD---- C:\Programme\Skype
2010-01-15 11:44:02 ----A---- C:\WINDOWS\iPlayer.INI
2010-01-14 01:44:34 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-14 01:43:45 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-13 01:38:06 ----A---- C:\WINDOWS\system32\CmdLineExt03.dll
2010-01-12 14:39:48 ----D---- C:\Sierra
2010-01-11 00:14:18 ----A---- C:\WINDOWS\system32\WGN0DsaGqCsTb.vbs
2010-01-10 23:17:26 ----A---- C:\WINDOWS\system32\d3dx9_3032.dll
2010-01-10 23:17:25 ----A---- C:\WINDOWS\system32\GCRFSms.vbs
2010-01-10 16:44:27 ----A---- C:\WINDOWS\system32\mCbIwOK9zUmHRD0.vbs
2010-01-10 16:44:27 ----A---- C:\WINDOWS\system32\dplay32.dll
2010-01-10 08:33:24 ----A---- C:\WINDOWS\system32\lPpVc3hyUsoodrk.vbs
2010-01-10 08:33:24 ----A---- C:\WINDOWS\system32\dhcpsapi32.dll
2010-01-09 23:57:58 ----A---- C:\WINDOWS\system32\SuzdDqnaNT49m.vbs
2010-01-09 23:57:58 ----A---- C:\WINDOWS\system32\ieui32.dll
2010-01-09 23:28:12 ----A---- C:\WINDOWS\system32\d3dx10_3732.dll
2010-01-09 23:28:11 ----A---- C:\WINDOWS\system32\gMXk6.vbs
2010-01-09 17:54:05 ----A---- C:\WINDOWS\system32\diskcopy32.dll
2010-01-09 17:54:03 ----A---- C:\WINDOWS\system32\ofBpc.vbs
2010-01-09 10:38:11 ----A---- C:\WINDOWS\system32\dbnetlib32.dll
2010-01-09 10:38:11 ----A---- C:\WINDOWS\system32\DaXQGXw.vbs
2010-01-08 16:12:39 ----A---- C:\WINDOWS\system32\jOnC3uRAxiCrSwo.vbs
2010-01-08 16:12:39 ----A---- C:\WINDOWS\system32\deskmon32.dll
2010-01-08 12:46:42 ----A---- C:\WINDOWS\system32\encapi32.dll
2010-01-08 12:46:42 ----A---- C:\WINDOWS\system32\82iiisO.vbs
2010-01-08 01:25:45 ----A---- C:\WINDOWS\system32\fi6B5CYFhZXKd.vbs
2010-01-08 01:25:45 ----A---- C:\WINDOWS\system32\dpmodemx32.dll
2010-01-08 01:08:54 ----D---- C:\WINDOWS\pss
2010-01-08 00:54:39 ----D---- C:\Programme\Teamspeak2_RC2
2010-01-08 00:18:09 ----A---- C:\WINDOWS\system32\console32.dll
2010-01-08 00:18:08 ----A---- C:\WINDOWS\system32\eeVao.vbs
2010-01-08 00:18:02 ----A---- C:\WINDOWS\system32\10.tmp
2010-01-08 00:05:26 ----D---- C:\Programme\ANNO 1503 GOLD
2010-01-07 15:54:16 ----A---- C:\WINDOWS\system32\P6G7k9B9sfloQ.vbs
2010-01-07 15:54:16 ----A---- C:\WINDOWS\system32\dpnaddr32.dll
2010-01-07 11:51:31 ----A---- C:\WINDOWS\system32\qppCUBn.vbs
2010-01-07 11:51:31 ----A---- C:\WINDOWS\system32\dxtmeta232.dll
2010-01-06 17:33:07 ----A---- C:\WINDOWS\system32\Lx7Rjo0.vbs
2010-01-06 17:33:07 ----A---- C:\WINDOWS\system32\d3dx932.dll
2010-01-06 13:43:04 ----A---- C:\WINDOWS\system32\dbgeng32.dll
2010-01-06 13:43:04 ----A---- C:\WINDOWS\system32\aVmD5aSL5fARDap.vbs
2010-01-04 20:29:56 ----D---- C:\Programme\ANNO 1602 Königs-Edition
2010-01-03 07:03:00 ----ASH---- C:\WINDOWS\system32\15A.tmp
2010-01-03 00:23:37 ----D---- C:\Programme\Purplehills
2010-01-02 23:46:48 ----D---- C:\Dokumente und Einstellungen\Benjamin\Anwendungsdaten\V-Games
2009-12-29 13:46:30 ----D---- C:\Programme\Metin2
2009-12-27 14:52:25 ----D---- C:\Program Files
2009-12-25 08:26:16 ----D---- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\PMB Files
2009-12-25 08:25:56 ----D---- C:\Programme\Pando Networks
2009-12-22 17:29:43 ----D---- C:\Programme\TmNationsForever

======List of files/folders modified in the last 1 months======

2010-01-21 02:35:40 ----RD---- C:\Programme
2010-01-21 02:26:34 ----D---- C:\Dokumente und Einstellungen\Benjamin\Anwendungsdaten\DNA
2010-01-21 02:19:20 ----D---- C:\Programme\Mozilla Firefox
2010-01-21 02:17:46 ----D---- C:\WINDOWS\Minidump
2010-01-21 02:17:46 ----D---- C:\WINDOWS\Debug
2010-01-21 02:17:46 ----D---- C:\WINDOWS
2010-01-21 02:17:42 ----D---- C:\WINDOWS\Temp
2010-01-21 02:15:13 ----AD---- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP
2010-01-21 01:53:16 ----D---- C:\WINDOWS\system32\drivers
2010-01-21 01:53:14 ----SHD---- C:\WINDOWS\Installer
2010-01-21 01:53:09 ----D---- C:\WINDOWS\WinSxS
2010-01-21 01:53:04 ----D---- C:\Programme\Gemeinsame Dateien\Microsoft Shared
2010-01-21 01:52:50 ----D---- C:\Programme\Gemeinsame Dateien
2010-01-21 01:02:44 ----D---- C:\WINDOWS\system32
2010-01-21 01:02:44 ----A---- C:\WINDOWS\system32\eapolqec32.dll
2010-01-21 00:36:56 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-21 00:36:55 ----D---- C:\WINDOWS\system32\ias
2010-01-21 00:36:54 ----A---- C:\WINDOWS\ModemLog_Kommunikationskabel zwischen zwei Computern.txt
2010-01-21 00:36:23 ----D---- C:\Programme\DNA
2010-01-21 00:36:11 ----D---- C:\Programme\Microsoft Silverlight
2010-01-20 23:32:43 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-01-20 16:10:11 ----D---- C:\Dokumente und Einstellungen\Benjamin\Anwendungsdaten\skypePM
2010-01-20 15:55:09 ----D---- C:\Dokumente und Einstellungen\Benjamin\Anwendungsdaten\vlc
2010-01-20 15:33:56 ----HD---- C:\WINDOWS\inf
2010-01-20 15:32:18 ----D---- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TrackMania
2010-01-19 18:57:28 ----D---- C:\WINDOWS\Prefetch
2010-01-17 18:01:30 ----A---- C:\WINDOWS\GnuHashes.ini
2010-01-17 17:54:33 ----SHD---- C:\WINDOWS\system32\SysWoW32
2010-01-17 17:54:31 ----D---- C:\WINDOWS\system32\1847586717
2010-01-17 16:50:36 ----AT---- C:\WINDOWS\system32\SIntfNT.dll
2010-01-17 16:50:36 ----AT---- C:\WINDOWS\system32\SIntf32.dll
2010-01-17 16:50:36 ----AT---- C:\WINDOWS\system32\SIntf16.dll
2010-01-15 14:39:43 ----D---- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Skype
2010-01-15 11:44:54 ----D---- C:\Dokumente und Einstellungen\Benjamin\Anwendungsdaten\dvdcss
2010-01-14 12:25:30 ----D---- C:\WINDOWS\AppPatch
2010-01-14 01:44:37 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-01-14 01:44:33 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-13 01:46:51 ----A---- C:\WINDOWS\SIERRA.INI
2010-01-12 20:17:40 ----HD---- C:\Programme\InstallShield Installation Information
2010-01-08 01:10:27 ----SH---- C:\boot.ini
2010-01-08 01:10:27 ----A---- C:\WINDOWS\win.ini
2010-01-08 01:10:27 ----A---- C:\WINDOWS\system.ini
2010-01-08 00:54:50 ----D---- C:\Dokumente und Einstellungen\Benjamin\Anwendungsdaten\teamspeak2
2010-01-06 17:08:23 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2010-01-05 01:17:46 ----A---- C:\WINDOWS\system32\MRT.exe
2010-01-04 19:11:15 ----D---- C:\WINDOWS\system32\DirectX
2010-01-04 19:00:01 ----D---- C:\Programme\Rockstar Games
2009-12-22 17:33:55 ----RSD---- C:\WINDOWS\assembly

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir PersonalEdition Classic\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-05-27 75096]
R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]
R1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 kbfilter;Keyboard Filter Driver; C:\WINDOWS\system32\drivers\kbfilter.sys [2007-03-15 12288]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2007-11-08 21248]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2009-01-09 21035]
R2 ithsgt;ithsgt; C:\WINDOWS\system32\DRIVERS\ithsgt.sys [2009-11-10 162432]
R2 lilsgt;lilsgt; C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2009-11-10 12032]
R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS-kompatibles Transportprotokoll; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-14 88320]
R2 NwlnkNb;NWLink-NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2008-04-14 63232]
R2 NwlnkSpx;NWLink SPX/SPXII-Protokoll; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2008-04-14 55936]
R3 avgntflt;avgntflt; \??\C:\Programme\Avira\AntiVir PersonalEdition Classic\avgntflt.sys []
R3 cmpci;Aureon 5.1 Fun Audio Driver; C:\WINDOWS\system32\drivers\cmaudio.sys [2002-04-30 378314]
R3 FWLANUSB;AVM FRITZ!WLAN; C:\WINDOWS\system32\DRIVERS\fwlanusb.sys [2007-01-26 265088]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
R3 HidUsb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-18 12288]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-04-13 1897408]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2008-04-14 5888]
R3 rtl8139;NT-Treiber für Realtek RTL8139(A/B/C)-basierten PCI-Fast Ethernet-Adapter; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;USB2-aktivierter Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\system32\ASNDIS5.SYS []
S3 avmeject;AVM Eject; C:\WINDOWS\system32\drivers\avmeject.sys [2007-01-26 4352]
S3 dump_wmimmc;dump_wmimmc; \??\C:\Programme\Gameforge4D\CABAL Online\GameGuard\dump_wmimmc.sys []
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 K3803Fltr;Game Keyboard; C:\WINDOWS\System32\Drivers\K3803Fltr.sys [2007-07-13 16640]
S3 netr73;ASUS USB Wireless LAN Card Driver for Vista; C:\WINDOWS\system32\DRIVERS\netr73.sys [2007-05-11 329728]
S3 NPPTNT2;NPPTNT2; \??\C:\WINDOWS\system32\npptNT2.sys []
S3 RT73;ASUS USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\rt73.sys [2006-06-08 344064]
S3 RTLWUSB;11g Wireless USB Adapter; C:\WINDOWS\system32\DRIVERS\RTL8187.sys []
S3 s1029bus;Sony Ericsson Device 1029 driver (WDM); C:\WINDOWS\system32\DRIVERS\s1029bus.sys [2009-05-25 86568]
S3 s1029mdfl;Sony Ericsson Device 1029 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s1029mdfl.sys [2009-05-25 15016]
S3 s1029mdm;Sony Ericsson Device 1029 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s1029mdm.sys [2009-05-25 114472]
S3 s1029mgmt;Sony Ericsson Device 1029 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s1029mgmt.sys [2009-05-25 108200]
S3 s1029nd5;Sony Ericsson Device 1029 USB Ethernet Emulation (NDIS); C:\WINDOWS\system32\DRIVERS\s1029nd5.sys [2009-05-25 26024]
S3 s1029obex;Sony Ericsson Device 1029 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s1029obex.sys [2009-05-25 104488]
S3 s1029unic;Sony Ericsson Device 1029 USB Ethernet Emulation (WDM); C:\WINDOWS\system32\DRIVERS\s1029unic.sys [2009-05-25 109480]
S3 SjyPkt;SjyPkt; \??\C:\WINDOWS\System32\Drivers\SjyPkt.sys []
S3 usbaudio;USB-Audiotreiber (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;USB-Scannertreiber; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbstor;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirScheduler;Avira AntiVir Personal - Free Antivirus Planer; C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe [2008-10-24 68865]
R2 AntiVirService;Avira AntiVir Personal - Free Antivirus Guard; C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe [2008-10-24 151297]
R2 Browser Defender Update Service;Browser Defender Update Service; C:\Programme\Spyware Doctor\BDT\BDTUpdateService.exe [2009-11-10 112592]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Programme\LogMeIn Hamachi\hamachi-2.exe [2009-10-29 1074568]
R2 MDM;Machine Debug Manager; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NwSapAgent;SAP-Agent; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 sdAuxService;PC Tools Auxiliary Service; C:\Programme\Spyware Doctor\pctsAuxs.exe [2009-10-30 359624]
R2 SeaPort;SeaPort; C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2009-06-28 3100060]
S3 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 sdCoreService;PC Tools Security Service; C:\Programme\Spyware Doctor\pctsSvc.exe [2009-11-06 1141712]
S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------



hoffe das es lesbar ist und das man mir helfen kann .....

MFG
Neo