Tag Leute,
Seit ca.2 Wochen hab ich das Problem, dass sich Fenster automatisch abwählen (allein bei diesem Post schon 20 mal).
Hab schon meinen Bullguard durchlaufen lassen, aber der findet nichts!
Bitte um schnelle Hilfe, weil das extrem nervt!

Edit: vor ca. 2 Wochen hab ich Internet bekommen, seitdem hab ich das Problem!

Edit: Logfile vergessn -.-"

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:48:20, on 01.04.2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Google\Google EULA\GoogleEULALauncher.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\avmwlanstick\WLanGUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
C:\T-Online\Messenger\TOM.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\wuauclt.exe
C:\Users\..\Downloads\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [BullGuard] "C:\Program Files\BullGuard Ltd\BullGuard\bullguard.exe" -boot
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Google EULA Launcher] C:\Program Files\Google\Google EULA\GoogleEULALauncher.exe GE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [AVMWlanClient] C:\Program Files\avmwlanstick\wlangui.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [BullGuard] "C:\Program Files\BullGuard Ltd\BullGuard\BullGuard.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ErrorRepairPro] C:\Program Files\Error Repair Professional\autostart.exe
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Startup: T-Online Messenger.lnk = C:\T-Online\Messenger\TOM.exe
O4 - Global Startup: NETGEAR WG111v3 Setup-Assistent.lnk = C:\Program Files\NETGEAR\WG111v3\WG111v3.exe
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4 (file missing)
O9 - Extra 'Tools' menuitem: eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4 (file missing)
O9 - Extra button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: In Windows Live Writer in &Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) (HKCU)
O13 - Gopher Prefix:
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVM WLAN Connection Service - AVM Berlin - C:\Program Files\avmwlanstick\WlanNetService.exe
O23 - Service: BullGuard LiveUpdate (BgLiveSvc) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe

--
End of file - 10387 bytes


kenn mich da nicht so aus...könnt ihr mir helfen?

Hallo und

Was genau meinst Du mit "abwählen" ?

jaa wenn ich schreibe dann muss ich neu auf firefox klicken um weiter zuschreiben. als würd sich das minimieren, aber nicht in die taskleiste geht!
außerdem wird das x zum schließen wird schwarz! also der hintergrund

C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

Was willst Du damit? Müllst Du gerne den Rechner zu?

C:\Program Files\Error Repair Professional\autostart.exe

Sag nicht, Du hast mit diesem Tool die Registry "repariert". Wenn ja, traten die Probleme so rein zufällig genau danach auf? Wenn ja bitte alles rückgängig machen lassen.

nee mit dem tool wollt ich die registry gestern reparieren...ging net --> vollversion kostet Geld!
Ich hab aber mit "glary registry repair" die registry gecheckt (44 fehler),
hab die gefixt nach nem neustart wars dann aber wieder weg....
kann das ÜBERHAUPT an der registry liegen?
zu sweet IM: das sind smileys für MSN aber der Fehler war schon vorher da!

Du kannst Dich noch erinnern, was Du in etwa gemacht hast am Rechner, als der Fehler auftrat?

da hab ich mir MSN live plus und skype gedownloaded....
Ich weiß nicht warum aber immer wenn ich Spiele starte minimieren die sch sofort...das war grad als ic den Rechner hochgefahren hab plötzlich!

Probier mal bitte:

Lade dir Lop S&D herunter.

Windows2000/XP: Führe Lop S&D.exe per Doppelklick aus.

Windows Vista und 7: Rechtsklick auf Lop S&D.exe => Ausführen als Admin!!

Wähle die Sprache deiner Wahl und anschließend die Option 1.
Warte bis der Scanbericht erstellt wird und poste ihn hier (Du findest ihn unter C:\lopR.txt, sollte der Bericht nicht erscheinen).

--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Home Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 7750 Dual-Core Processor )
BIOS : Default System BIOS
USER : ... ( Administrator )
BOOT : Normal boot
C:\ (Local Disk) - NTFS - Total:576 Go (Free:187 Go)
D:\ (Local Disk) - FAT32 - Total:19 Go (Free:5 Go)
E:\ (USB)
F:\ (USB)
G:\ (USB)
H:\ (CD or DVD)
I:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 01.04.2010|20:38 )

[ UAC => 1 ]

--------------------\\ Ordner Verzeichnis unter Local

[02.11.2009|19:29] C:\Users\.\AppData\Local\Adobe
[21.03.2009|09:08] C:\Users\.\AppData\Local\Ahead
[12.03.2009|18:46] C:\Users\.\AppData\Local\Anwendungsdaten
[18.04.2009|14:11] C:\Users\.\AppData\Local\Apple
[20.04.2009|19:13] C:\Users\.\AppData\Local\Apple Computer
[12.03.2009|18:46] C:\Users\.\AppData\Local\ATI
[19.10.2009|20:47] C:\Users\.\AppData\Local\capcom
[12.03.2009|20:37] C:\Users\.\AppData\Local\Criterion Games
[24.04.2009|20:45] C:\Users\.\AppData\Local\d3d9caps.dat
[30.03.2010|15:29] C:\Users\.\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[12.03.2009|20:34] C:\Users\.\AppData\Local\Downloaded Installations
[27.06.2009|15:43] C:\Users\.\AppData\Local\Electronic Arts
[26.03.2010|18:29] C:\Users\.\AppData\Local\FlatOut Ultimate Carnage
[08.08.2009|15:04] C:\Users\.\AppData\Local\Gas Powered Games
[26.03.2010|19:10] C:\Users\.\AppData\Local\GDIPFONTCACHEV1.DAT
[30.03.2010|15:17] C:\Users\.\AppData\Local\Google
[01.04.2010|17:00] C:\Users\.\AppData\Local\IconCache.db
[15.10.2009|21:43] C:\Users\.\AppData\Local\id Software
[10.06.2009|18:52] C:\Users\.\AppData\Local\Irrational Games
[11.05.2009|19:33] C:\Users\.\AppData\Local\MagicSoftware
[26.03.2010|18:29] C:\Users\.\AppData\Local\Microsoft
[05.03.2010|18:39] C:\Users\.\AppData\Local\Microsoft Games
[13.03.2010|22:42] C:\Users\.\AppData\Local\Mozilla
[27.03.2009|21:49] C:\Users\.\AppData\Local\Nero
[28.11.2009|20:19] C:\Users\.\AppData\Local\Oblivion
[01.04.2010|20:20] C:\Users\.\AppData\Local\PMB Files
[04.05.2009|17:54] C:\Users\.\AppData\Local\Redlynx
[01.04.2010|20:38] C:\Users\.\AppData\Local\Temp
[12.03.2009|18:46] C:\Users\.\AppData\Local\Temporary Internet Files
[08.01.2010|19:15] C:\Users\.\AppData\Local\Ubisoft
[12.03.2009|18:46] C:\Users\.\AppData\Local\Verlauf
[02.04.2009|15:20] C:\Users\.\AppData\Local\VirtualStore
[18.10.2009|22:13] C:\Users\.\AppData\Local\XBlades
[4|Datei(en),] C:\Users\.\AppData\Local\Bytes
[31|Verzeichnis(se),] C:\Users\.\AppData\Local\Bytes frei

--------------------\\ Geplante Aufgaben unter C:\Windows\Tasks

[01.04.2010 20:02][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[01.04.2010 19:48][--a------] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[01.04.2010 20:35][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job
[01.04.2010 19:48][--ah-----] C:\Windows\tasks\SA.DAT
[01.04.2010 17:00][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Ordner Verzeichnis unter C:\ProgramData

[25.11.2008|10:47] C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[18.04.2009|14:16] C:\ProgramData\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[25.04.2009|20:34] C:\ProgramData\{B5E5EF64-8DEA-48CD-8709-86FAE07AA33D}
[25.11.2008|08:32] C:\ProgramData\Adobe
[30.08.2009|18:46] C:\ProgramData\Age of Empires 3
[12.03.2009|18:42] C:\ProgramData\Anwendungsdaten
[11.07.2009|10:13] C:\ProgramData\Apple
[18.04.2009|14:14] C:\ProgramData\Apple Computer
[02.11.2006|15:02] C:\ProgramData\Application Data
[06.06.2009|17:48] C:\ProgramData\Armagetron
[01.04.2010|15:47] C:\ProgramData\ATI
[01.04.2010|19:50] C:\ProgramData\BullGuard
[13.06.2009|20:07] C:\ProgramData\Codemasters
[19.12.2008|16:32] C:\ProgramData\Corel
[10.06.2009|18:42] C:\ProgramData\CyberLink
[28.02.2010|02:26] C:\ProgramData\DAEMON Tools Lite
[02.11.2006|15:02] C:\ProgramData\Desktop
[30.03.2010|15:17] C:\ProgramData\DivX
[02.11.2006|15:02] C:\ProgramData\Documents
[12.03.2009|18:42] C:\ProgramData\Dokumente
[12.03.2009|20:35] C:\ProgramData\Electronic Arts
[01.04.2010|14:58] C:\ProgramData\ezsidmv.dat
[12.03.2009|18:42] C:\ProgramData\Favoriten
[02.11.2006|15:02] C:\ProgramData\Favorites
[12.03.2009|18:45] C:\ProgramData\Google
[19.12.2008|16:33] C:\ProgramData\InstallShield
[06.03.2010|15:13] C:\ProgramData\Media Center Programs
[14.03.2010|02:37] C:\ProgramData\Messenger Plus!
[21.03.2010|15:58] C:\ProgramData\Microsoft
[26.03.2010|18:56] C:\ProgramData\Microsoft Help
[10.12.2008|17:23] C:\ProgramData\Nero
[31.03.2010|16:20] C:\ProgramData\NexonEU
[14.03.2010|03:39] C:\ProgramData\NexonUS
[01.03.2010|14:57] C:\ProgramData\Pinnacle
[14.03.2010|06:47] C:\ProgramData\PMB Files
[06.12.2009|16:37] C:\ProgramData\POP3Profiles
[20.05.2009|20:41] C:\ProgramData\POPWWPROFILES
[21.03.2010|20:35] C:\ProgramData\Skype
[02.11.2006|15:02] C:\ProgramData\Start Menu
[12.03.2009|18:42] C:\ProgramData\Startmenü
[23.03.2010|21:42] C:\ProgramData\Sun
[31.03.2010|19:15] C:\ProgramData\SweetIM
[09.11.2009|17:39] C:\ProgramData\Tages
[18.12.2008|11:48] C:\ProgramData\Temp
[02.11.2006|15:02] C:\ProgramData\Templates
[04.05.2009|18:19] C:\ProgramData\TrackMania
[08.01.2010|19:15] C:\ProgramData\Ubisoft
[12.03.2009|18:42] C:\ProgramData\Vorlagen
[18.12.2008|13:12] C:\ProgramData\Windows Genuine Advantage
[10.12.2008|17:32] C:\ProgramData\WLInstaller
[18.10.2009|22:08] C:\ProgramData\XBlades
[1|Datei(en),] C:\ProgramData\Bytes
[52|Verzeichnis(se),] C:\ProgramData\Bytes frei

--------------------\\ Ordner Verzeichnis unter C:\Program Files

[16.03.2009|19:11] C:\Program Files\1C
[25.11.2008|10:47] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[08.01.2010|20:23] C:\Program Files\Activision
[25.11.2008|08:32] C:\Program Files\Adobe
[19.03.2010|15:19] C:\Program Files\AGEIA Technologies
[12.03.2010|19:15] C:\Program Files\Appetizer 1.3.2
[18.04.2009|14:11] C:\Program Files\Apple Software Update
[06.06.2009|17:49] C:\Program Files\Armagetron Advanced
[19.10.2009|19:06] C:\Program Files\Ascaron Entertainment
[14.03.2009|18:26] C:\Program Files\Aspyr
[16.03.2009|20:37] C:\Program Files\Atari
[01.04.2010|15:45] C:\Program Files\ATI
[01.04.2010|15:44] C:\Program Files\ATI Technologies
[30.06.2009|10:13] C:\Program Files\Audacity
[05.09.2009|19:59] C:\Program Files\Audacity 1.3 Beta (Unicode)
[12.03.2010|19:16] C:\Program Files\Audiograbber
[29.01.2010|21:27] C:\Program Files\AusLogics Disk Defrag
[13.03.2010|22:24] C:\Program Files\avmwlanstick
[05.09.2009|18:19] C:\Program Files\Ballerburg
[22.10.2009|10:08] C:\Program Files\Bethesda Softworks
[18.04.2009|14:13] C:\Program Files\Bonjour
[31.03.2009|19:36] C:\Program Files\Buka
[10.12.2008|18:15] C:\Program Files\BullGuard Ltd
[05.03.2010|22:52] C:\Program Files\CAPCOM
[13.03.2010|18:17] C:\Program Files\Codemasters
[31.03.2010|16:15] C:\Program Files\Combat Arms EU
[30.03.2010|15:09] C:\Program Files\Common Files
[19.12.2008|16:32] C:\Program Files\Corel
[25.07.2009|18:23] C:\Program Files\Crazy Machines - Neues aus dem Labor
[11.05.2009|19:35] C:\Program Files\Cucusoft
[18.12.2008|11:40] C:\Program Files\Cyberlink
[28.02.2010|02:28] C:\Program Files\DAEMON Tools Lite
[10.01.2010|18:26] C:\Program Files\Death Rally
[08.01.2010|20:20] C:\Program Files\Disney Interactive Studios
[30.03.2010|15:10] C:\Program Files\DivX
[16.10.2009|18:33] C:\Program Files\Drakensang
[15.10.2009|22:23] C:\Program Files\Dungeon Lords
[15.02.2010|11:01] C:\Program Files\EA GAMES
[28.03.2009|22:50] C:\Program Files\EA SPORTS
[21.12.2009|17:58] C:\Program Files\Eidos
[21.03.2010|21:58] C:\Program Files\Electronic Arts
[26.03.2010|17:14] C:\Program Files\Empire Interactive
[31.03.2010|19:42] C:\Program Files\Error Repair Professional
[03.01.2010|14:56] C:\Program Files\FlatOut 2 Mod Manager
[12.03.2009|21:43] C:\Program Files\Frets on Fire
[24.03.2009|16:22] C:\Program Files\funracer
[10.01.2010|18:12] C:\Program Files\Futuremark
[10.06.2009|16:10] C:\Program Files\GameWiz32
[09.10.2009|22:22] C:\Program Files\GAMI
[12.03.2009|18:42] C:\Program Files\Gemeinsame Dateien [C:\Program Files\Common Files]
[14.08.2009|19:20] C:\Program Files\GIMP-2.0
[27.03.2010|21:45] C:\Program Files\Glary Registry Repair
[30.03.2010|15:09] C:\Program Files\Google
[17.05.2009|13:23] C:\Program Files\GP Vs Superbike
[18.12.2008|11:49] C:\Program Files\HomeCinema
[15.10.2009|21:03] C:\Program Files\id Software
[21.03.2010|15:48] C:\Program Files\InstallShield Installation Information
[01.04.2010|11:29] C:\Program Files\Internet Explorer
[11.07.2009|10:27] C:\Program Files\iPod
[10.06.2009|18:44] C:\Program Files\Irrational Games
[11.07.2009|10:28] C:\Program Files\iTunes
[04.12.2008|15:10] C:\Program Files\Java
[21.03.2010|22:46] C:\Program Files\JDownloader
[30.01.2010|16:49] C:\Program Files\JoWooD
[03.04.2009|21:47] C:\Program Files\JoWooD & ITEM MULTIMEDA
[23.03.2010|21:43] C:\Program Files\JRE
[06.03.2010|20:45] C:\Program Files\Kalypso
[25.04.2009|20:38] C:\Program Files\LibUSB-Win32
[23.03.2010|19:59] C:\Program Files\Logitech Touch Mouse Server
[30.03.2009|19:11] C:\Program Files\LucasArts
[01.01.2010|22:09] C:\Program Files\Master Of Defense
[25.11.2008|10:25] C:\Program Files\MEDIONmail
[14.03.2010|01:40] C:\Program Files\Messenger Plus! Live
[14.03.2010|01:30] C:\Program Files\Microsoft
[21.02.2010|13:54] C:\Program Files\Microsoft Games
[27.03.2010|09:52] C:\Program Files\Microsoft Games for Windows - LIVE
[23.03.2010|21:20] C:\Program Files\Microsoft Office
[26.03.2010|19:05] C:\Program Files\Microsoft Silverlight
[10.12.2008|17:38] C:\Program Files\Microsoft SQL Server Compact Edition
[25.11.2008|10:49] C:\Program Files\Microsoft Works
[25.11.2008|10:39] C:\Program Files\Microsoft.NET
[19.03.2010|15:11] C:\Program Files\Monte Cristo
[26.03.2010|19:03] C:\Program Files\Movie Maker
[23.03.2010|22:42] C:\Program Files\Mozilla Firefox
[02.04.2009|15:12] C:\Program Files\MP3-DJ
[24.03.2009|16:27] C:\Program Files\Mp3tag
[02.11.2006|14:37] C:\Program Files\MSBuild
[23.03.2010|21:19] C:\Program Files\MSECache
[25.11.2008|11:16] C:\Program Files\MSXML 4.0
[10.12.2008|17:23] C:\Program Files\Nero
[21.03.2010|15:46] C:\Program Files\NETGEAR
[10.01.2010|18:15] C:\Program Files\OpenAL
[23.03.2010|21:43] C:\Program Files\OpenOffice.org 3
[14.03.2010|01:49] C:\Program Files\Pando Networks
[03.04.2009|21:40] C:\Program Files\phenomedia
[12.03.2009|18:46] C:\Program Files\Picasa2
[19.05.2009|20:54] C:\Program Files\Project Snowblind Demo
[16.10.2009|18:49] C:\Program Files\ProtectDisc Driver Installer
[02.05.2009|16:49] C:\Program Files\QuickFreedom
[11.07.2009|10:21] C:\Program Files\QuickTime
[10.12.2008|16:35] C:\Program Files\Realtek
[02.11.2006|14:37] C:\Program Files\Reference Assemblies
[25.04.2009|20:34] C:\Program Files\Ripdev
[28.12.2009|16:42] C:\Program Files\Rockstar Games
[24.01.2010|13:48] C:\Program Files\Runic Games
[14.03.2009|22:19] C:\Program Files\SCi Games
[05.03.2010|17:41] C:\Program Files\Sierra On-Line
[06.06.2009|17:57] C:\Program Files\SimBin
[21.03.2010|20:36] C:\Program Files\Skype
[18.03.2009|19:29] C:\Program Files\SnapDragon Games
[19.03.2010|15:03] C:\Program Files\Sun
[31.03.2010|19:17] C:\Program Files\SweetIM
[10.12.2008|16:32] C:\Program Files\Temp
[15.01.2010|14:51] C:\Program Files\THQ
[04.05.2009|18:12] C:\Program Files\TmNationsForever
[06.03.2010|15:13] C:\Program Files\Tomb Raider - Anniversary
[04.05.2009|17:52] C:\Program Files\Trials 2 Second Edition
[14.03.2010|00:44] C:\Program Files\Ubisoft
[27.03.2010|20:41] C:\Program Files\Uniblue
[02.11.2006|15:01] C:\Program Files\Uninstall Information
[24.12.2009|20:00] C:\Program Files\USB Vibration
[06.12.2009|17:49] C:\Program Files\VideoLAN
[09.11.2009|21:02] C:\Program Files\Winamp
[24.11.2008|19:37] C:\Program Files\Windows Calendar
[24.11.2008|19:37] C:\Program Files\Windows Collaboration
[24.11.2008|19:37] C:\Program Files\Windows Defender
[24.11.2008|19:37] C:\Program Files\Windows Journal
[13.03.2010|23:28] C:\Program Files\Windows Live
[13.03.2010|23:30] C:\Program Files\Windows Live SkyDrive
[26.03.2010|19:03] C:\Program Files\Windows Mail
[26.03.2010|19:03] C:\Program Files\Windows Media Player
[12.03.2009|18:42] C:\Program Files\Windows NT
[24.11.2008|19:37] C:\Program Files\Windows Photo Gallery
[16.12.2008|17:35] C:\Program Files\Windows Sidebar
[18.10.2009|22:00] C:\Program Files\XBlades
[14.03.2009|18:29] C:\Program Files\XviD
[31.03.2010|10:07] C:\Program Files\Z8Games
[09.03.2010|22:20] C:\Program Files\ZanDekaron
[0|Datei(en),] C:\Program Files\Bytes
[140|Verzeichnis(se),] C:\Program Files\Bytes frei

--------------------\\ Ordner Verzeichnis unter C:\Program Files\Common Files

[25.11.2008|08:32] C:\Program Files\Common Files\Adobe
[11.07.2009|10:27] C:\Program Files\Common Files\Apple
[19.12.2008|16:32] C:\Program Files\Common Files\Corel
[18.12.2008|11:40] C:\Program Files\Common Files\CyberLink
[25.11.2008|10:39] C:\Program Files\Common Files\DESIGNER
[30.03.2010|15:09] C:\Program Files\Common Files\DivX Shared
[11.06.2009|20:43] C:\Program Files\Common Files\fun communications
[10.01.2010|18:15] C:\Program Files\Common Files\Futuremark Shared
[20.03.2009|18:16] C:\Program Files\Common Files\InstallShield
[23.03.2010|21:42] C:\Program Files\Common Files\Java
[30.08.2009|18:45] C:\Program Files\Common Files\Microsoft Games
[26.03.2010|18:16] C:\Program Files\Common Files\microsoft shared
[10.12.2008|17:24] C:\Program Files\Common Files\Nero
[30.03.2010|15:09] C:\Program Files\Common Files\PX Storage Engine
[02.11.2006|13:18] C:\Program Files\Common Files\Services
[21.03.2010|20:36] C:\Program Files\Common Files\Skype
[02.11.2006|13:18] C:\Program Files\Common Files\SpeechEngines
[24.11.2008|19:37] C:\Program Files\Common Files\System
[13.03.2010|23:13] C:\Program Files\Common Files\Windows Live
[10.12.2008|17:35] C:\Program Files\Common Files\WindowsLiveInstaller
[18.10.2009|21:56] C:\Program Files\Common Files\Wise Installation Wizard
[0|Datei(en),] C:\Program Files\Common Files\Bytes
[23|Verzeichnis(se),] C:\Program Files\Common Files\Bytes frei

--------------------\\ Process

( 81 Processes )

... OK !

--------------------\\ Ueberpruefung mit S_Lop

Kein Lop Ordner gefunden !

--------------------\\ Suche nach Lop Dateien - Ordnern

C:\Users\.\AppData\Local\Temp\nsl50B0.tmp

--------------------\\ Suche innerhalb der Registry

..... OK !

--------------------\\ Ueberpruefung der Hosts Datei

Hosts Datei SAUBER


--------------------\\ Suche nach verborgenen Dateien mit Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2010-04-01 20:39:07
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Suche nach anderen Infektionen

--------------------\\ Cracks & Keygens ..

C:\Users\.\AppData\Local\Temp\Temp1_library.zip\numpy\f2py\crackfortran.pyo
C:\Users\.\AppData\Local\Temp\Temp1_Objects_client.zip\Common\Middle-East\textures\CityBlockHouses_Cracks_01.dds
C:\Users\.\AppData\Local\Temp\Temp1_Objects_client.zip\Common\Middle-East\textures\CityBlockHouses_NormalMap_Cracks_01.dds
C:\Users\.\AppData\Local\Temp\Temp1_Objects_client.zip\Common\Middle-East\textures\RoadTarmac_Cracks.dds
C:\Users\.\AppData\Local\Temp\Temp1_Objects_client.zip\Common\Middle-East\textures\RoadTarmac_Cracks_b.dds
C:\Users\.\AppData\Local\Temp\Temp2_Pak.zip\media\Missiles\QUAKECRACK.LAYOUT.cmp
C:\Users\.\AppData\Local\Temp\Temp3_Objects_client.zip\Common\Middle-East\textures\CityBlockHouses_Cracks_01.dds
C:\Users\.\AppData\Local\Temp\Temp3_Objects_client.zip\Common\Middle-East\textures\CityBlockHouses_NormalMap_Cracks_01.dds
C:\Users\.\AppData\Local\Temp\Temp3_Objects_client.zip\Common\Middle-East\textures\RoadTarmac_Cracks.dds
C:\Users\.\AppData\Local\Temp\Temp3_Objects_client.zip\Common\Middle-East\textures\RoadTarmac_Cracks_b.dds
C:\Users\.\AppData\Local\Temp\Temp3_Pak.zip\media\Missiles\QUAKECRACK.LAYOUT.cmp
C:\Users\.\AppData\Local\Temp\Temp3_Pak.zip\media\particles\pieces\QUAKECRACKS.LAYOUT.cmp
C:\Users\.\Music\iTunes\iTunes Music\Snow Patrol\A hundred million suns\02 Crack the shutters.m4a
C:\Users\.\Music\Music\Eminem - Relapse\18 Crack A Bottle.mp3


[F:58911][D:6134]-> C:\Users\.\AppData\Local\Temp
[F:116][D:1]-> C:\Users\.\AppData\Roaming\MICROS~1\Windows\Cookies
[F:944][D:16]-> C:\Users\.\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:165][D:13]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 01.04.2010|20:47 - Option : [1]

--------------------\\ Scan beendet um 20:47:10
[ UAC => 1 ]

Wo die ganze Cracs udn KEygens herkommen weiß ich nicht! Die ganzen program Files Sind Spiele!

Das sind imho keine illegalen Cracks um den Kopierschutz zu umgehen, das sieht nach Programmbestandteilen aus. Probier mal bitte jetzt ein Log mit CF:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

• Lade dir ComboFix hier herunter auf deinen Desktop. Benenne es beim Runterladen um in cofi.exe.

• Dann folgende Anleitung durchlesen und abarbeiten -> CCleaner Systembereinigung

• Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

• Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
  Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

• Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Hab grad ma confi.exe drurchlaufen lassen...ist noch net fertig aber da steh doch iwas das das 10 Minuten dauert und es sich leicht verdoppeln kann (10 Minuten*2= 20 Minuten) Das Tool läuft jetzt aber sicherlich schon 40-50 Minuten....Ich mach mir lagsam iwie sorgen...Sind die berechtigt?

ComboFix 10-03-29.04 - Philipp 01.04.2010 23:03:53.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.49.1031.18.3325.2252 [GMT 2:00]
ausgeführt von:: c:\users\Philipp\Desktop\cofi.exe.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\install.exe
c:\program files\Error Repair Professional
c:\program files\Error Repair Professional\autostart.exe
c:\program files\Error Repair Professional\ErrorRepairProfessional.exe
c:\program files\Error Repair Professional\unins000.dat
c:\program files\Error Repair Professional\unins000.exe
c:\programdata\Microsoft\Windows\Start Menu\Programs\Error Repair Professional
c:\programdata\Microsoft\Windows\Start Menu\Programs\Error Repair Professional\Error Repair Professional.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\Error Repair Professional\Uninstall Error Repair Professional.lnk
c:\windows\system32\SIntf16.dll

.
((((((((((((((((((((((( Dateien erstellt von 2010-03-01 bis 2010-04-01 ))))))))))))))))))))))))))))))
.

2010-03-30 13:10 . 2010-03-30 13:10 -------- d-----w- c:\users\Philipp\AppData\Roaming\DivX
2010-03-27 19:45 . 2010-03-27 19:49 -------- d-----w- c:\users\Philipp\AppData\Roaming\GlarySoft
2010-03-27 18:41 . 2010-03-27 18:41 -------- d-----w- c:\users\Philipp\AppData\Roaming\Uniblue
2010-03-23 19:50 . 2010-03-23 19:50 -------- d-----w- c:\users\Philipp\AppData\Roaming\OpenOffice.org
2010-03-21 18:41 . 2010-04-01 08:49 -------- d-----w- c:\users\Philipp\AppData\Roaming\skypePM
2010-03-21 18:37 . 2010-04-01 20:53 -------- d-----w- c:\users\Philipp\AppData\Roaming\Skype
2010-03-10 13:30 . 2010-03-19 13:39 -------- d-----w- c:\users\Philipp\AppData\Roaming\dvdcss

.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-01 19:04 . 2010-04-01 19:04 -------- d-----w- c:\program files\CCleaner
2010-04-01 13:55 . 2008-11-24 17:37 618204 ----a-w- c:\windows\system32\perfh007.dat
2010-04-01 13:55 . 2008-11-24 17:37 122636 ----a-w- c:\windows\system32\perfc007.dat
2010-04-01 13:45 . 2008-12-10 13:51 -------- d-----w- c:\program files\ATI
2010-04-01 13:44 . 2008-12-10 13:50 -------- d-----w- c:\program files\ATI Technologies
2010-03-31 22:37 . 2009-03-12 16:46 -------- d-----w- c:\users\Philipp\AppData\Roaming\BullGuard
2010-03-31 17:17 . 2010-03-31 17:15 -------- d-----w- c:\program files\SweetIM
2010-03-31 14:15 . 2010-03-31 07:54 -------- d-----w- c:\program files\Combat Arms EU
2010-03-31 08:07 . 2010-03-31 08:07 -------- d-----w- c:\program files\Z8Games
2010-03-30 13:10 . 2010-03-30 13:07 -------- d-----w- c:\program files\DivX
2010-03-30 13:09 . 2009-11-09 19:01 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2010-03-30 13:09 . 2010-03-30 13:09 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-03-30 13:09 . 2009-03-12 16:45 -------- d-----w- c:\program files\Google
2010-03-28 10:31 . 2010-03-28 10:31 87376 ----a-w- c:\windows\system32\BGLsp.dll
2010-03-28 10:31 . 2008-09-19 13:48 14160 ----a-w- c:\windows\system32\client_cc.dll
2010-03-28 10:31 . 2008-12-10 16:15 55504 ----a-w- c:\windows\system32\drivers\BdFileSpy.sys
2010-03-27 19:45 . 2010-03-27 19:45 -------- d-----w- c:\program files\Glary Registry Repair
2010-03-27 18:41 . 2010-03-27 18:41 -------- d-----w- c:\program files\Uniblue
2010-03-27 07:52 . 2010-03-27 07:51 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-03-26 17:10 . 2009-03-12 16:46 87472 ----a-w- c:\users\Philipp\AppData\Local\GDIPFONTCACHEV1.DAT
2010-03-26 17:05 . 2008-12-10 15:13 -------- d-----w- c:\program files\Microsoft Silverlight
2010-03-26 17:03 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-03-26 15:14 . 2009-03-14 07:23 -------- d-----w- c:\program files\Empire Interactive
2010-03-23 19:43 . 2010-03-23 19:43 -------- d-----w- c:\program files\JRE
2010-03-23 19:43 . 2010-03-23 19:43 -------- d-----w- c:\program files\OpenOffice.org 3
2010-03-23 19:42 . 2010-03-23 19:42 -------- d-----w- c:\program files\Common Files\Java
2010-03-23 19:41 . 2008-11-25 07:45 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-03-23 19:19 . 2010-03-23 19:19 -------- d-----w- c:\program files\MSECache
2010-03-23 17:59 . 2010-03-23 17:59 -------- d-----w- c:\program files\Logitech Touch Mouse Server
2010-03-21 20:46 . 2010-03-21 20:35 -------- d-----w- c:\program files\JDownloader
2010-03-21 20:07 . 2009-03-12 18:35 6210 ----a-w- c:\windows\system32\ealregsnapshot1.reg
2010-03-21 19:58 . 2009-03-12 18:24 -------- d-----w- c:\program files\Electronic Arts
2010-03-21 18:36 . 2010-03-21 18:35 -------- d-----r- c:\program files\Skype
2010-03-21 18:36 . 2010-03-21 18:36 -------- d-----w- c:\program files\Common Files\Skype
2010-03-21 13:48 . 2008-12-10 14:19 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-21 13:46 . 2010-03-21 13:46 -------- d-----w- c:\program files\NETGEAR
2010-03-19 14:49 . 2009-12-17 16:02 -------- d-----w- c:\users\Philipp\AppData\Roaming\vlc
2010-03-19 13:19 . 2010-03-05 20:08 -------- d-----w- c:\program files\AGEIA Technologies
2010-03-19 13:11 . 2010-03-19 13:11 -------- d-----w- c:\program files\Monte Cristo
2010-03-19 13:03 . 2010-03-19 13:03 -------- d-----w- c:\program files\Sun
2010-03-14 07:08 . 2009-03-31 17:44 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2010-03-14 07:08 . 2009-03-31 17:44 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2010-03-14 04:55 . 2010-03-14 04:55 421888 ----a-w- c:\windows\NEXON_EU_DownloaderUpdater.exe
2010-03-13 23:49 . 2010-03-13 23:49 -------- d-----w- c:\program files\Pando Networks
2010-03-13 23:40 . 2010-03-13 23:40 -------- d-----w- c:\program files\Messenger Plus! Live
2010-03-13 23:30 . 2010-03-13 23:30 -------- d-----w- c:\program files\Microsoft
2010-03-13 22:49 . 2010-03-13 22:49 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-03-13 22:49 . 2010-03-13 22:49 22328 ----a-w- c:\users\Philipp\AppData\Roaming\PnkBstrK.sys
2010-03-13 22:48 . 2010-03-13 22:48 107832 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-03-13 22:48 . 2010-03-13 22:48 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-03-13 22:48 . 2010-03-13 22:48 2250024 ----a-w- c:\windows\system32\pbsvc.exe
2010-03-13 22:44 . 2009-03-14 08:52 -------- d-----w- c:\program files\Ubisoft
2010-03-13 21:30 . 2010-03-13 21:30 -------- d-----w- c:\program files\Windows Live SkyDrive
2010-03-13 21:28 . 2008-12-10 15:32 -------- d-----w- c:\program files\Windows Live
2010-03-13 21:13 . 2010-03-13 21:13 -------- d-----w- c:\program files\Common Files\Windows Live
2010-03-13 20:24 . 2010-03-13 20:24 -------- d-----w- c:\program files\avmwlanstick
2010-03-13 16:17 . 2009-05-18 12:39 -------- d-----w- c:\program files\Codemasters
2010-03-12 17:16 . 2010-03-12 17:16 -------- d-----w- c:\program files\Audiograbber
2010-03-12 17:15 . 2010-03-12 17:15 -------- d-----w- c:\program files\Appetizer 1.3.2
2010-03-09 20:20 . 2010-03-09 19:53 -------- d-----w- c:\program files\ZanDekaron
2010-03-08 17:59 . 2010-03-08 17:59 94208 ----a-w- c:\windows\system32\dpl100.dll
2010-03-06 18:45 . 2010-03-06 18:45 -------- d-----w- c:\program files\Kalypso
2010-03-06 13:13 . 2010-03-06 13:07 -------- d-----w- c:\program files\Tomb Raider - Anniversary
2010-03-05 20:52 . 2009-10-19 18:46 -------- d-----w- c:\program files\CAPCOM
2010-03-05 15:41 . 2010-03-05 15:41 -------- d-----w- c:\program files\Sierra On-Line
2010-03-03 04:22 . 2010-03-03 04:22 5340160 ----a-w- c:\windows\system32\drivers\atipmdag.sys
2010-03-03 04:22 . 2010-03-03 04:22 5340160 ----a-w- c:\windows\system32\drivers\atikmdag.sys
2010-03-03 04:16 . 2010-03-03 04:16 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2010-03-03 04:16 . 2010-03-03 04:16 446464 ----a-w- c:\windows\system32\aticfx32.dll
2010-03-03 04:13 . 2008-12-01 20:47 446464 ----a-w- c:\windows\system32\ATIDEMGX.dll
2010-03-03 04:12 . 2010-03-03 04:12 372736 ----a-w- c:\windows\system32\atieclxx.exe
2010-03-03 04:11 . 2010-03-03 04:11 172032 ----a-w- c:\windows\system32\atiesrxx.exe
2010-03-03 04:10 . 2008-12-01 20:46 159744 ----a-w- c:\windows\system32\atitmmxx.dll
2010-03-03 04:10 . 2008-12-01 20:45 356352 ----a-w- c:\windows\system32\atipdlxx.dll
2010-03-03 04:09 . 2010-03-03 04:09 274432 ----a-w- c:\windows\system32\Oemdspif.dll
2010-03-03 04:09 . 2010-03-03 04:09 11776 ----a-w- c:\windows\system32\atimuixx.dll
2010-03-03 04:09 . 2010-03-03 04:09 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2010-03-03 04:06 . 2010-03-03 04:06 3131392 ----a-w- c:\windows\system32\atidxx32.dll
2010-03-03 03:46 . 2008-12-01 20:29 3703808 ----a-w- c:\windows\system32\atiumdag.dll
2010-03-03 03:45 . 2010-03-03 03:45 14226944 ----a-w- c:\windows\system32\atioglxx.dll
2010-03-03 03:24 . 2008-12-01 20:09 2993152 ----a-w- c:\windows\system32\atiumdva.dll
2010-03-03 03:23 . 2010-03-03 03:23 50176 ----a-w- c:\windows\system32\coinst.dll
2010-03-03 03:20 . 2010-03-03 03:20 53248 ----a-w- c:\windows\system32\aticalrt.dll
2010-03-03 03:20 . 2010-03-03 03:20 53248 ----a-w- c:\windows\system32\aticalcl.dll
2010-03-03 03:18 . 2010-03-03 03:18 3657728 ----a-w- c:\windows\system32\aticaldd.dll
2010-03-03 03:08 . 2010-03-03 03:08 52224 ----a-w- c:\windows\system32\atimpc32.dll
2010-03-03 03:08 . 2010-03-03 03:08 52224 ----a-w- c:\windows\system32\amdpcom32.dll
2010-03-03 03:08 . 2008-12-01 19:56 237568 ----a-w- c:\windows\system32\atiadlxx.dll
2010-03-03 03:07 . 2010-03-03 03:07 12800 ----a-w- c:\windows\system32\atiglpxx.dll
2010-03-03 03:07 . 2010-03-03 03:07 15360 ----a-w- c:\windows\system32\atigktxx.dll
2010-03-03 03:07 . 2010-03-03 03:07 152064 ----a-w- c:\windows\system32\drivers\atikmpag.sys
2010-03-03 03:06 . 2010-03-03 03:06 27648 ----a-w- c:\windows\system32\atiuxpag.dll
2010-03-03 03:06 . 2010-03-03 03:06 20480 ----a-w- c:\windows\system32\atiu9pag.dll
2010-03-03 03:06 . 2010-03-03 03:06 23040 ----a-w- c:\windows\system32\atitmpxx.dll
2010-03-03 03:05 . 2010-03-03 03:05 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2010-02-28 00:28 . 2010-02-28 00:27 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-02-28 00:28 . 2010-02-28 00:28 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-02-28 00:26 . 2010-02-28 00:26 -------- d-----w- c:\users\Philipp\AppData\Roaming\DAEMON Tools Lite
2010-02-25 19:55 . 2010-02-25 19:55 201875 ----a-w- c:\windows\system32\atiicdxx.dat
2010-02-24 09:16 . 2010-03-25 14:31 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-03-13 21:01 . 2010-03-13 21:01 119808 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
2008-11-12 13:12 . 2008-11-12 13:01 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT
.

(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2009-10-19 187192]

[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2009-10-19 14:15 1345336 ----a-w- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2009-10-19 1345336]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2009-10-19 1345336]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-03-12 39408]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-02-28 1828136]
"BullGuard"="c:\program files\BullGuard Ltd\BullGuard\BullGuard.exe" [2010-03-28 304464]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2010-03-13 2937528]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2010-03-09 26100520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"BullGuard"="c:\program files\BullGuard Ltd\BullGuard\bullguard.exe" [2010-03-28 304464]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2008-12-02 6695456]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2008-12-02 1833504]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-03-13 30192]
"Google EULA Launcher"="c:\program files\Google\Google EULA\GoogleEULALauncher.exe" [2008-10-14 20480]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-06-05 292136]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2009-07-01 37888]
"AVMWlanClient"="c:\program files\avmwlanstick\wlangui.exe" [2007-12-19 1748992]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-01-11 246504]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-03-05 1135912]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2010-02-24 111928]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-03-02 98304]
"ATICustomerCare"="c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe" [2009-11-16 307200]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2008-08-21 443968]

c:\users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-12-15 384000]
T-Online Messenger.lnk - c:\t-online\Messenger\TOM.exe [2009-6-11 1531968]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
NETGEAR WG111v3 Setup-Assistent.lnk - c:\program files\NETGEAR\WG111v3\WG111v3.exe [2008-6-13 2109440]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BgMainSvc]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-02-28 691696]
R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-03-13 135664]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys [2007-12-19 4352]
R3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys [2007-12-19 265088]
R3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2010-03-13 30192]
R3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [2007-09-21 554496]
S0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\System32\drivers\sfdrv01a.sys [2006-07-05 63352]
S1 RtlProt;Realtke RtlProt WLAN Utility Protocol Driver;c:\windows\system32\DRIVERS\rtlprot.sys [2007-04-23 25896]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2009-07-10 115856]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2009-07-10 41424]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [2009-01-19 277544]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-03-03 172032]
S2 BdFileSpy;BullGuard File Monitor Driver;c:\windows\system32\drivers\BdFileSpy.sys [2010-03-28 55504]
S2 BsFileScan;BullGuard File Scan Service;c:\windows\System32\svchost.exe [2008-01-21 21504]
S2 BsMailProxy;BullGuard Email Monitoring Service;c:\windows\System32\svchost.exe [2008-01-21 21504]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-03-03 5340160]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-03-03 152064]
S3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.12.1;c:\windows\system32\drivers\libusb0.sys [2007-03-20 28672]
S3 Ltn_stk7070P;PCTV based TV tuner device;c:\windows\system32\DRIVERS\Ltn_stk7070P.sys [2007-06-14 466048]
S3 Ltn_stkrc;PCTV Infrared Receiver;c:\windows\system32\DRIVERS\Ltn_stkrc.sys [2007-06-13 13440]
S3 RTL8187B;NETGEAR WG111v3 54Mbps Wireless USB 2.0 Adapter Vista Driver;c:\windows\system32\DRIVERS\wg111v3.sys [2007-12-28 289280]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2009-07-10 91472]
S3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2009-07-10 99472]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
BullGuard REG_MULTI_SZ BgMainSvc BsFileScan BsMailProxy
.
Inhalt des "geplante Tasks" Ordners

2010-04-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-13 20:42]

2010-04-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-03-13 20:42]

2010-04-01 c:\windows\Tasks\User_Feed_Synchronization-{103B65BD-4798-4CA0-9487-EB211B637804}.job
- c:\windows\system32\msfeedssync.exe [2010-03-31 04:54]
.
.
------- Zusätzlicher Suchlauf -------
.
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: Nach Microsoft E&xel exportieren - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: {{0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4
FF - ProfilePath - c:\users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\sewp9v0p.default\
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npPandoWebInst.dll
FF - plugin: c:\program files\Picasa2\npPicasa2.dll
FF - plugin: c:\programdata\NexonEU\NGM\npNxGameeu.dll
FF - plugin: c:\programdata\NexonUS\NGM\npNxGameUS.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX Richtlinien ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "hxxp://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -

HKCU-Run-ErrorRepairPro - c:\program files\Error Repair Professional\autostart.exe
AddRemove-The lost Castle - I:\Uninstal.exe
AddRemove-_{ADDBE07D-95B8-4789-9C76-187FFF9624B4} - c:\program files\Corel\CorelDRAW Essential Edition 3\Programs\MSILauncher {ADDBE07D-95B8-4789-9C76-187FFF9624B4}



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2010-04-02 00:07
Windows 6.0.6001 Service Pack 1 NTFS

Scanne versteckte Prozesse...

Scanne versteckte Autostarteinträge...

Scanne versteckte Dateien...

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------

[HKEY_USERS\S-1-5-21-756048039-1280448251-3651975040-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-756048039-1280448251-3651975040-1000\Software\SecuROM\License information*]
"datasecu"=hex:8f,6e,23,03,c7,ca,51,85,05,61,f5,fe,f7,c9,0f,c0,ce,65,ff,3a,24,
bb,cd,fb,fb,d8,ad,ec,27,da,c1,61,5c,48,aa,28,bf,85,94,df,a4,02,0b,de,40,2e,\
"rkeysecu"=hex:f4,14,2a,f4,24,e1,f2,59,05,49,d2,aa,76,04,b6,fa
.
Zeit der Fertigstellung: 2010-04-02 00:19:52
ComboFix-quarantined-files.txt 2010-04-01 22:19

Vor Suchlauf: 23 Verzeichnis(se), 216.346.390.528 Bytes frei
Nach Suchlauf: 27 Verzeichnis(se), 215.274.229.760 Bytes frei

- - End Of File - - CE74C24DCFCA5AB98BA39871BF1BE82A



Fenster wählt sich immernoch ab....(

hat doch geklappt! Mein PC ist jetzt aber iwie langsamer. Kann das sein und wo lag jetzt eigentlich der Fehler?

Fehler ist nach nochmaligem ReBoot doch wieder da!!!

Erstell mal bitte über die Systemsteuerung ein neues Benutzerkonto. Meld Dich ab und log Dich mit dem neuen Benutzer ein und teste. Ich will wissen, ob der Fehler evtl. an einem defekten Benutzerprofil liegen kann.