Hi.

Bi ziemlich hilflos... Hab das gefühl das jemand ausser mir Zugriff auf meinen Rechner hat!

Was stimmt denn hier nicht?!

Hat jmd. Ahnung?!

Danke vorab.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 00:53:48, on 08.03.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Programme\nobox.de\HS WinPerfect\WinPerfect.exe
C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\avp.exe
C:\Programme\abylonsoft\SAWipe\SAWipe.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Programme\Malwarebytes' Anti-Malware\mbam.exe
C:\Programme\Sophos\Sophos Anti-Rootkit\sargui.exe
C:\Programme1\Mozilla Firefox\firefox.exe
C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\klwtblfs.exe
C:\Programme\Trend Micro\HijackThis\HijackThis.exe
C:\Users\DEFAULT.Heimbeck-PC\AppData\Local\Temp\ctnxhh.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - mscoree.dll (file missing)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\ievkbd.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\klwtbbho.dll
O3 - Toolbar: COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - mscoree.dll (file missing)
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [WinPerfectAutoRun] C:\Programme\nobox.de\HS WinPerfect\WinPerfect.exe -boot
O4 - HKLM\..\Run: [AVP] "C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\avp.exe"
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [D3DOverrider] "C:\Programme\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\Tools\D3DOverrider\D3DOverriderWrapper.exe" /s
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [AtiTrayTools] "C:\Programme\Ray Adams\ATI Tray Tools\atitray.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O4 - Startup: ATITool.lnk = C:\Programme\ATITool\ATITool.exe
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\ie_banner_deny.htm
O9 - Extra button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\klwtbbho.dll
O9 - Extra button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\klwtbbho.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~3\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: apm - SAW control service (apmSAWCtrl) - abylonsoft - Dr. Thomas Klabunde GbR - C:\Programme\abylonsoft\SAWipe\SAWCtrlSer.exe
O23 - Service: Kaspersky Security Suite CBE Win7 (AVP) - Kaspersky Lab - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\avp.exe
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Programme\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Programme\CDBurnerXP\NMSAccessU.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - Logfile of random's system information tool 1.06 (written by random/random)
Run by DEFAULT at 2010-03-08 01:22:59
Microsoft Windows 7 Home Premium
System drive C: has 10 GB (25%) free of 38 GB
Total RAM: 1279 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:24:12, on 08.03.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\avp.exe
C:\Programme\CDBurnerXP\cdbxpp.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\DEFAULT.Heimbeck-PC\Desktop\RSIT.exe
C:\Programme\Trend Micro\HijackThis\DEFAULT.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\ievkbd.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\klwtbbho.dll
O3 - Toolbar: COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - mscoree.dll (file missing)
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AVP] "C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\avp.exe"
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [D3DOverrider] "C:\Programme\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\Tools\D3DOverrider\D3DOverriderWrapper.exe" /s
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [AtiTrayTools] "C:\Programme\Ray Adams\ATI Tray Tools\atitray.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O4 - Startup: ATITool.lnk = C:\Programme\ATITool\ATITool.exe
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\ie_banner_deny.htm
O9 - Extra button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\klwtbbho.dll
O9 - Extra button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\klwtbbho.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~3\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: apm - SAW control service (apmSAWCtrl) - abylonsoft - Dr. Thomas Klabunde GbR - C:\Programme\abylonsoft\SAWipe\SAWCtrlSer.exe
O23 - Service: Kaspersky Security Suite CBE Win7 (AVP) - Kaspersky Lab - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\avp.exe
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Programme\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Programme\CDBurnerXP\NMSAccessU.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Programme\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Update Center Service (UpdateCenterService) - NVIDIA - C:\Programme\NVIDIA Corporation\System Update\UpdateCenterService.exe

--
End of file - 4556 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{5833E72C-EF9E-415C-B5F4-D273AE6BFD58}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\ievkbd.dll [2009-10-28 68112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\klwtbbho.dll [2009-10-28 268816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{353e2a48-6254-4bd3-88f4-3b51a0ca7870} - COMPUTERBILD-Abzockschutz - C:\Windows\system32\mscoree.dll [2009-06-10 278864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2009-09-13 1048392]
"SoundMan"=C:\Windows\SOUNDMAN.EXE [2009-04-14 604704]
"AVP"=C:\Programme\Kaspersky Lab\Kaspersky Security Suite CBE Win7\avp.exe [2009-10-28 361056]
"ATICustomerCare"=C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2009-06-14 307200]
"D3DOverrider"=C:\Programme\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\Tools\D3DOverrider\D3DOverriderWrapper.exe [2009-08-22 40960]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpybotSD TeaTimer"=C:\Programme\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"AtiTrayTools"=C:\Programme\Ray Adams\ATI Tray Tools\atitray.exe [2010-01-31 882688]

C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
ATITool.lnk - C:\Programme\ATITool\ATITool.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~3\KASPER~1\KASPER~1\kloehk.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\Windows\system32\klogon.dll [2009-10-28 219664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppInfo]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AppMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Base]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BFE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Boot file system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\bowser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Browser]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CryptSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DcomLaunch]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\dfsc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dhcp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DnsCache]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Dot3Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Eaphost]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EFS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventLog]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\File system]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HelpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\IKEEXT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ipnat.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\KeyIso]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LanmanWorkstation]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\LmHosts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Messenger]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSDrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MPSSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb10]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mrxsmb20]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NativeWifiP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NDIS Wrapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ndiscap]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Ndisuio]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBIOSGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetBT]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetDDEGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Netlogon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetMan]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\netprofm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Network]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NetworkProvider]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NlaSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Nsi]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nsiproxy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\NTDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PCI Configuration]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PlugPlay]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP Filter]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PNP_TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PolicyAgent]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Power]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Primary disk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ProfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdbss]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdpencdd.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\rdsessmgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcEptMapper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\RpcSs]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sacsvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCardSvr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SCSI Class]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\sermouse.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Streams Drivers]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SWPRV]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\System Bus Extender]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TabletInputService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TBS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Tcpip]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TDI]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\TrustedInstaller]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VaultSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\VDS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vga.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vgasave.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vmms]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgr.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\volmgrx.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinMgmt]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wlansvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{36FC9E60-C465-11CF-8056-444553540000}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E965-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E967-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E969-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96A-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E96F-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E972-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E973-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E974-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E975-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E977-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97B-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E97D-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{4D36E980-E325-11CE-BFC1-08002BE10318}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{50DD5230-BA8A-11D1-BF5D-0000F805F530}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{533C5B84-EC70-11D2-9505-00C04F79DEAF}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{6BDD1FC1-810F-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D48179BE-EC20-11D1-B6B8-00C04FA372A7}]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{D94EE5D8-D189-4994-83D2-F68D7D41B0E6}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"undockwithoutlogon"=1
"ShutdownWithoutLogon"=1
"NoDispCPL"=0
"NoDispSettingsPage"=0
"NoDispScrSavPage"=0
"EnableLUA"=0
"PromptOnSecureDesktop"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=
"NoResolveTrack"=
"NoViewContextMenu"=
"NoFileAssociate"=
"NoRun"=
"NoClose"=
"StartMenuLogoff"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{64216555-24f2-11df-b2cb-edb1f83c99b9}]
shell\AutoRun\command - E:\pushinst.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-03-08 00:36:49 ----D---- C:\rsit
2010-03-08 00:00:18 ----A---- C:\~LSWDBUS.TMP
2010-03-07 23:57:32 ----D---- C:\Program Files\Sophos
2010-03-07 23:54:27 ----D---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\Malwarebytes
2010-03-07 23:53:20 ----D---- C:\ProgramData\Malwarebytes
2010-03-07 23:53:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-03-07 23:51:06 ----D---- C:\Program Files\Ray Adams
2010-03-07 23:34:52 ----D---- C:\Program Files\ATITool
2010-03-07 23:21:22 ----D---- C:\Program Files\ATI Technologies
2010-03-07 23:19:18 ----D---- C:\Program Files\ATI
2010-03-07 21:06:52 ----D---- C:\Program Files\NVIDIA Corporation
2010-03-07 20:42:36 ----D---- C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2010-03-05 19:11:51 ----D---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\Spybot - Search & Destroy
2010-03-05 13:15:26 ----A---- C:\Windows\system32\DfSdkBt.exe
2010-03-03 16:33:02 ----D---- C:\Program Files\Ashampoo
2010-03-03 00:36:52 ----A---- C:\Windows\system32\iupdater.txt
2010-03-02 23:56:53 ----D---- C:\ProgramData\Kaspersky Lab
2010-03-02 23:56:53 ----D---- C:\Program Files\Kaspersky Lab
2010-03-02 23:32:45 ----D---- C:\Program Files\Trend Micro
2010-03-02 01:25:24 ----D---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\FastStone
2010-03-02 01:25:18 ----D---- C:\Program Files\FastStone Capture
2010-03-02 01:24:39 ----D---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\Canneverbe_Limited
2010-03-02 01:24:24 ----D---- C:\Program Files\CDBurnerXP
2010-03-02 01:21:58 ----D---- C:\Program Files\CCleaner
2010-03-02 01:17:04 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-03-02 01:17:04 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-03-01 23:38:40 ----D---- C:\Program Files\NeoSmart Technologies
2010-03-01 23:15:55 ----D---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\vlc
2010-03-01 23:12:50 ----D---- C:\Program Files\VideoLAN
2010-03-01 22:35:47 ----D---- C:\Program Files\nobox.de
2010-03-01 22:13:23 ----D---- C:\ProgramData\Avanquest
2010-03-01 22:12:52 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-01 22:12:52 ----D---- C:\ProgramData\BVRP Software
2010-03-01 22:12:40 ----D---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\InstallShield
2010-03-01 22:07:08 ----D---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\apm
2010-03-01 22:06:14 ----A---- C:\Windows\SAWReg.ini
2010-03-01 22:05:53 ----D---- C:\Program Files\abylonsoft
2010-03-01 21:44:33 ----D---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\AntiBrowserSpy 2009
2010-03-01 21:33:30 ----D---- C:\Program Files\AntiBrowserSpy
2010-03-01 21:03:35 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-03-01 21:03:35 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-03-01 21:03:35 ----A---- C:\Windows\system32\kernel32.dll
2010-03-01 21:03:35 ----A---- C:\Windows\system32\apphelp.dll
2010-03-01 20:41:09 ----A---- C:\Windows\system32\MRT.exe
2010-03-01 20:37:35 ----A---- C:\Windows\explorer.exe
2010-03-01 20:37:34 ----A---- C:\Windows\system32\winlogon.exe
2010-03-01 20:37:30 ----A---- C:\Windows\system32\msasn1.dll
2010-03-01 20:37:25 ----A---- C:\Windows\system32\wmp.dll
2010-03-01 20:37:22 ----A---- C:\Windows\system32\winload.exe
2010-03-01 20:37:22 ----A---- C:\Windows\system32\CertEnroll.dll
2010-03-01 20:37:21 ----A---- C:\Windows\system32\winresume.exe
2010-03-01 20:37:20 ----A---- C:\Windows\system32\wmploc.DLL
2010-03-01 20:37:09 ----A---- C:\Windows\system32\jscript.dll
2010-03-01 20:37:03 ----A---- C:\Windows\system32\t2embed.dll
2010-03-01 20:37:03 ----A---- C:\Windows\system32\fontsub.dll
2010-03-01 20:37:03 ----A---- C:\Windows\system32\atmfd.dll
2010-03-01 20:37:00 ----A---- C:\Windows\system32\quartz.dll
2010-03-01 20:36:59 ----A---- C:\Windows\system32\tsbyuv.dll
2010-03-01 20:36:59 ----A---- C:\Windows\system32\msyuv.dll
2010-03-01 20:36:59 ----A---- C:\Windows\system32\msvidc32.dll
2010-03-01 20:36:59 ----A---- C:\Windows\system32\msrle32.dll
2010-03-01 20:36:59 ----A---- C:\Windows\system32\mciavi32.dll
2010-03-01 20:36:59 ----A---- C:\Windows\system32\iyuv_32.dll
2010-03-01 20:36:59 ----A---- C:\Windows\system32\avifil32.dll
2010-03-01 20:36:55 ----A---- C:\Windows\system32\mshtml.dll
2010-03-01 20:36:53 ----A---- C:\Windows\system32\wininet.dll
2010-03-01 20:36:53 ----A---- C:\Windows\system32\urlmon.dll
2010-03-01 20:36:53 ----A---- C:\Windows\system32\ieframe.dll
2010-03-01 20:36:53 ----A---- C:\Windows\system32\iedkcs32.dll
2010-03-01 20:36:52 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-03-01 20:36:42 ----A---- C:\Windows\system32\msdri.dll
2010-03-01 20:36:42 ----A---- C:\Windows\system32\CPFilters.dll
2010-03-01 20:36:41 ----A---- C:\Windows\system32\psisdecd.dll
2010-03-01 20:36:31 ----A---- C:\Windows\system32\tzres.dll
2010-03-01 20:36:25 ----A---- C:\Windows\system32\secproc_isv.dll
2010-03-01 20:36:24 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-03-01 20:36:24 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-03-01 20:36:24 ----A---- C:\Windows\system32\secproc.dll
2010-03-01 20:36:24 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-03-01 20:36:24 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-03-01 20:36:24 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-03-01 20:36:24 ----A---- C:\Windows\system32\RMActivate.exe
2010-03-01 20:32:47 ----N---- C:\Windows\system32\MpSigStub.exe
2010-03-01 20:19:29 ----D---- C:\Program Files\Microsoft Windows 7 Upgrade Advisor
2010-03-01 19:24:19 ----A---- C:\Windows\system32\msv1_0.dll
2010-03-01 19:21:12 ----D---- C:\Program Files\Microsoft Security Essentials
2010-03-01 19:10:58 ----D---- C:\Program Files\Microsoft Network Monitor 3
2010-03-01 19:09:52 ----D---- C:\Program Files\COMPUTERBILD-Abzockschutz
2010-03-01 19:09:30 ----SHD---- C:\Windows\Installer
2010-03-01 06:39:00 ----A---- C:\Windows\PROTOCOL.INI
2010-03-01 06:38:15 ----A---- C:\Windows\unin0407.exe
2010-03-01 06:36:07 ----D---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\Mozilla
2010-03-01 06:35:56 ----D---- C:\Programme1
2010-03-01 06:26:44 ----D---- C:\Program Files\avmwlanstick
2010-03-01 06:26:42 ----D---- C:\Windows\AVM_Driver
2010-03-01 06:26:42 ----A---- C:\Windows\system32\fwlanci.dll
2010-03-01 06:19:30 ----A---- C:\Windows\system32\nvuide.exe
2010-03-01 06:19:20 ----A---- C:\Windows\system32\nvusmb.exe
2010-03-01 06:19:20 ----A---- C:\Windows\system32\NVUNINST.EXE
2010-03-01 06:05:28 ----D---- C:\NVIDIA
2010-03-01 06:01:56 ----D---- C:\computec
2010-03-01 05:48:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-03-01 05:45:41 ----D---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\Identities
2010-03-01 05:45:15 ----SD---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\Microsoft
2010-03-01 05:45:15 ----D---- C:\Users\DEFAULT.Heimbeck-PC\AppData\Roaming\Media Center Programs
2010-03-01 05:44:58 ----SHD---- C:\Recovery
2010-03-01 05:44:58 ----SHD---- C:\Programme
2010-03-01 05:44:58 ----SHD---- C:\ProgramData\Vorlagen
2010-03-01 05:44:58 ----SHD---- C:\ProgramData\Startmenü
2010-03-01 05:44:58 ----SHD---- C:\ProgramData\Favoriten
2010-03-01 05:44:58 ----SHD---- C:\ProgramData\Dokumente
2010-03-01 05:44:58 ----SHD---- C:\ProgramData\Anwendungsdaten
2010-03-01 05:44:58 ----SHD---- C:\Program Files\Gemeinsame Dateien
2010-03-01 05:44:58 ----SHD---- C:\Dokumente und Einstellungen
2010-03-01 05:38:53 ----D---- C:\Windows\SoftwareDistribution
2010-03-01 05:35:21 ----D---- C:\Windows\Prefetch
2010-03-01 05:35:11 ----SHD---- C:\System Volume Information
2010-03-01 05:34:25 ----D---- C:\Windows\Panther
2010-03-01 05:34:18 ----RASH---- C:\BOOTSECT.BAK
2010-03-01 05:34:16 ----SHD---- C:\Boot

======List of files/folders modified in the last 1 months======

2010-03-08 01:22:57 ----D---- C:\Windows\Temp
2010-03-08 01:16:27 ----D---- C:\Windows\System32
2010-03-08 01:16:27 ----D---- C:\Windows\inf
2010-03-08 01:15:13 ----D---- C:\Windows\system32\config
2010-03-08 01:04:05 ----D---- C:\Program Files\Internet Explorer
2010-03-08 00:20:15 ----D---- C:\Windows\debug
2010-03-07 23:57:32 ----RD---- C:\Program Files
2010-03-07 23:53:23 ----D---- C:\Windows\system32\drivers
2010-03-07 23:53:20 ----HD---- C:\ProgramData
2010-03-07 23:35:39 ----D---- C:\Windows\system32\DriverStore
2010-03-07 23:12:00 ----D---- C:\Windows
2010-03-07 21:16:11 ----D---- C:\Windows\Help
2010-03-07 21:14:23 ----D---- C:\Windows\system32\catroot
2010-03-05 19:30:56 ----D---- C:\Windows\Tasks
2010-03-05 14:55:33 ----D---- C:\Windows\winsxs
2010-03-05 14:49:32 ----D---- C:\Program Files\Common Files\microsoft shared
2010-03-05 14:49:30 ----D---- C:\Windows\system32\spool
2010-03-05 14:49:30 ----D---- C:\Windows\PolicyDefinitions
2010-03-05 14:49:29 ----D---- C:\Windows\system32\wbem
2010-03-05 14:49:29 ----D---- C:\Windows\system32\LogFiles
2010-03-05 14:49:29 ----D---- C:\Windows\system32\de-DE
2010-03-05 14:49:26 ----SD---- C:\ProgramData\Microsoft
2010-03-03 00:56:00 ----D---- C:\Windows\system32\NDF
2010-03-02 22:27:45 ----D---- C:\Program Files\Windows Media Player
2010-03-02 22:19:52 ----D---- C:\Program Files\Common Files\System
2010-03-02 22:19:52 ----D---- C:\Program Files\Common Files
2010-03-01 23:39:23 ----D---- C:\Windows\system32\Tasks
2010-03-01 23:39:21 ----RSD---- C:\Windows\assembly
2010-03-01 23:14:55 ----D---- C:\Windows\Logs
2010-03-01 21:04:01 ----D---- C:\Windows\AppPatch
2010-03-01 21:03:55 ----D---- C:\Windows\system32\catroot2
2010-03-01 20:50:02 ----D---- C:\Windows\Microsoft.NET
2010-03-01 20:43:18 ----D---- C:\Windows\system32\Boot
2010-03-01 20:43:17 ----D---- C:\Windows\ehome
2010-03-01 15:52:40 ----D---- C:\Windows\system32\restore
2010-03-01 15:29:09 ----D---- C:\Windows\system32\wdi
2010-03-01 06:05:28 ----RD---- C:\Users
2010-03-01 05:50:06 ----D---- C:\Windows\system32\CodeIntegrity
2010-03-01 05:46:36 ----D---- C:\Windows\rescache
2010-03-01 05:45:36 ----SHD---- C:\$Recycle.Bin
2010-03-01 05:44:58 ----D---- C:\Program Files\Windows NT
2010-03-01 05:38:25 ----D---- C:\Windows\system32\sysprep

C:\Programme\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Update Center Service (UpdateCenterService) - NVIDIA - C:\Programme\NVIDIA Corporation\System Update\UpdateCenterService.exe

--
End of file - 5265 bytes

...

Hier noch der RSIT - LOG.txt

Ja aber wie viele Antivirus Tools hast du denn?
Mehr ist nicht unbedingt besser.
Welches Betriebssystem hast du?
Hast du eine Routerfirewall?
Die Datei Dvm.exe ist bei mir schon mal nicht zu finden.
Wenn du mir die Fragen beantwortest hast,
kann ich es dir sagen.

Platform: Unknown Windows (WinNT 6.01.3504)

OS = Windows 7 (NT 6.1)

Zitat von Computerfan

Die Datei Dvm.exe ist bei mir schon mal nicht zu finden.

Du meinst dwm => dwm.exe Windows Prozess - Was ist das?

Hi!

Ja das ist alles ein wenig merkwürdig oder nicht?! Ich hab ne Windows 7 Home Premium Version installiert und es sieht auch aus wie WIN7 aber ich bekomme als Versionsnamen den NT 6.1...

Ist das ok?!

Auch wenn ich mein System neu formatiere und bekomme vor der Neuinstallation nach formatierung die möglichkeit : Windows mit der Wiederherstellungskonsole reparieren! Wenn ich das verrsuche hab ich ein LW: X: was ich sonst nie habe mit Windows Dateien

HElp und THX!

Zitat von cosinus

OS = Windows 7 (NT 6.1)


Du meinst dwm => dwm.exe Windows Prozess - Was ist das?

Zitat von bempel

und es sieht auch aus wie WIN7 aber ich bekomme als Versionsnamen den NT 6.1... Ist das ok?!

Ist so ok...
Win7 = NT 6.1

Wenn ich das verrsuche hab ich ein LW: X: was ich sonst nie habe mit Windows Dateien

Klingt alles sehr konfus was Du da schreibst. An für sich ist es völlig egal, ob Du ein Laufwerk über C:, D:, X: oder Y: ansprichst, von daher versteh ich die Aufregung über das Laufwerk X: bei Dir überhaupt nicht.
Was willst Du mit der Wiederherstellungskonsole wenn Du eh neu aufsetzen willst?

Hi.

Ist es denn nicht merkwürdig, das ich nach der Formatierung ( wenn die Platte platt ist ) immernoch die möglichkeit zur Wiederherstellung bekomme?!

Ich hab gestern das UBCD ( Ultimate Boot CD ) runtergeladen und heute per Bootdisk einige Programme laufen lassen. Die sind aber auch wieder fehlerhaft!

Ich hab meine 2 Festplatten komplett gelöscht und formatiert und sauber geputzt! Hierbei hab ich noch ein Floppy LW (A entdeckt wobei ich im BIOS das Floppy deaktiviert habe. Das gefundene LW A: hab ich mehrmals formatiert aber bei den nächsten neustarts über die Boot CD ist es immer wieder da... ( Und es sind nicht die dateien der boot C! )

Kannste helfen?!

Danke

- Laufwerk A: ist eigentlich das Diskettenlaufwerk
- Platten komplett "nackig" gemacht oder hast Du nur die Partition von Windows formatiert?

Wie meinst Du das genau mit Nackig?! Hab mit FDISK die Partionierungen gelöscht und dann formatiert...

Raff nicht warum der Rechner ein LW erstellt ( A: ) wobei ich das Floippy im Bios deaktiviert hAb...

Ich kann das Floppy im DOS zwar formatieren aber die Dateien kommen nach dem Neustart immer wieder und wieder !!!

Das Laufwerk A: wird wahrscheinlich von einer RAM-Disk sein, die wird bei jedem Start neu erstellt (von dem Tool, dass Du von der UBCD gestartet hast?)

Eigentlich muss man nicht mehr mit einem extra Tool ran um alle Partitionen zu löschen. Das Setup von der Windows-CD oder -DVD bietet schon eine Datenträgerverwaltung, mit der man auch alle Partionen löschen kann.