|
Plagegeister aller Art und deren Bekämpfung: Virus TR\hiolti?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
01.07.2010, 15:13 | #1 |
| Virus TR\hiolti? Heyho Liebe Leute, habe da einige Probleme mit nem virus der komischerweise auf meinem pc is am anfang kam von avira TR\hiolto + noch irgendwelche zahlen habs mir abba ned genau gemerkt. dann habe ich alles gelöscht jetz bin ich ned sicha ob es nur befall is odda schon alles infiziert is. helft mir bitte MFG ICH RSIT:RSIT Logfile: Code:
ATTFilter Logfile of random's system information tool 1.07 (written by random/random) Run by ++++ at 2010-07-01 16:07:32 Microsoft Windows XP Professional Service Pack 3 System drive C: has 84 GB (82%) free of 102 GB Total RAM: 3071 MB (79% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:07:35, on 01.07.2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\Avira\AntiVir Desktop\sched.exe C:\Programme\Avira\AntiVir Desktop\avguard.exe C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe C:\Programme\Avira\AntiVir Desktop\avshadow.exe C:\WINDOWS\Explorer.EXE C:\Programme\Avira\AntiVir Desktop\avgnt.exe C:\WINDOWS\system32\RUNDLL32.EXE D:\programme\steam\steam.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe C:\Programme\Mozilla Firefox\firefox.exe C:\Programme\Mozilla Firefox\plugin-container.exe C:\Dokumente und Einstellungen\+++\Desktop\RSIT.exe C:\Programme\trend micro\++++.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [nwiz] C:\Programme\NVIDIA Corporation\nView\nwiz.exe /installquiet O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [Steam] "d:\programme\steam\steam.exe" -silent O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Programme\Fiddler2\Fiddler.exe" (file missing) O9 - Extra 'Tools' menuitem: Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Programme\Fiddler2\Fiddler.exe" (file missing) O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe O23 - Service: NBService - Nero AG - C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 5344 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\Driver Robot.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}] JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-12 79648] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2010-03-02 282792] "nwiz"=C:\Programme\NVIDIA Corporation\nView\nwiz.exe [2010-06-03 1753192] "NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-06-07 13902440] "NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-06-07 110696] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Steam"=d:\programme\steam\steam.exe [2010-05-07 1238352] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\amd_dc_opt] C:\Programme\AMD\Dual-Core Optimizer\amd_dc_opt.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite] C:\Programme\DAEMON Tools Lite\daemon.exe -autorun [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup] C:\PROGRA~1\GEMEIN~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-04-17 196608] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe [2004-04-13 69632] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] C:\Programme\Messenger\msmsgs.exe [2008-04-14 1695232] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe [2007-03-01 153136] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter] C:\WINDOWS\system32\NvMcTray.dll [2010-06-07 110696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] C:\Programme\NVIDIA Corporation\nView\nwiz.exe [2010-06-03 1753192] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Programme\QuickTime\QTTask.exe -atboottime [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoboForm] C:\Programme\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] C:\WINDOWS\RTHDCPL.EXE [2007-04-10 16126464] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel] C:\WINDOWS\SkyTel.EXE [2007-04-04 1822720] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [2010-02-18 248040] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirtualCloneDrive] C:\Programme\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe /s [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 "PnkBstrB"=2 "PnkBstrA"=2 "NMIndexingService"=3 "JavaQuickStarterService"=2 "nSvcIp"=2 "idsvc"=3 "Hamachi2Svc"=2 "ose"=3 "IDriverT"=3 C:\Dokumente und Einstellungen\++++\Startmenü\Programme\Autostart RocketDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe TransBar.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=0x91000000 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "D:\Programme\Call of Duty\Call of Duty 4 - Modern Warfare\iw3mp.exe"="D:\Programme\Call of Duty\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) " "C:\Programme\Steam\steamapps\+++++\team fortress 2\hl2.exe"="C:\Programme\Steam\steamapps\+++++\team fortress 2\hl2.exe:*:Enabled:hl2""C:\Programme\Steam\steamapps\+++++\counter-strike source\hl2.exe"="C:\Programme\Steam\steamapps\4\counter-strike source\hl2.exe:*:Enabled:hl2" "C:\Programme\ICQ6.5\ICQ.exe"="C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6" "C:\Programme\Steam\steamapps\common\prototype\prototypef.exe"="C:\Programme\Steam\steamapps\common\prototype\prototypef.exe:*:Enabled:Prototype" "D:\Programme\Steam 2\steam.exe"="D:\Programme\Steam 2\steam.exe:*:Enabled:Steam" "D:\Programme\Steam2\steamapps\common\prototype\prototypef.exe"="D:\Programme\Steam2\steamapps\common\prototype\prototypef.exe:*:Enabled:Prototype" "D:\Programme\Farcry 2\Far Cry 2\bin\farcry2.exe"="D:\Programme\Farcry 2\Far Cry 2\bin\farcry2.exe:*:Enabled:Far Cry® 2" "D:\Programme\Call of Duty\Call of Duty 2\CoD2MP_s.exe"="D:\Programme\Call of Duty\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s" "C:\Dokumente und Einstellungen\++++\Eigene Dateien\Alles\TF2 Items Generator nur verwenden mit geschlossenen tf2\SteamStats.exe"="C:\Dokumente und Einstellungen\Marzl\Eigene Dateien\Alles\TF2 Items Generator nur verwenden mit geschlossenen tf2\SteamStats.exe:*:Enabled:SteamStats" "D:\Programme\Diablo II\Game.exe"="D:\Programme\Diablo II\Game.exe:*:Enabled:Diablo II" "C:\Programme\Garena\Garena.exe"="C:\Programme\Garena\Garena.exe:*:Enabled:Garena" "C:\Dokumente und Einstellungen\++++\temp\TeamViewer\Version4\TeamViewer.exe"="C:\Dokumente und Einstellungen\Marzl\temp\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application" "D:\Programme\Valve\hltv.exe"="D:\Programme\Valve\hltv.exe:*:Enabled:HLTV Launcher" "D:\Programme\Valve\hl.exe"="D:\Programme\Valve\hl.exe:*:Enabled:Half-Life Launcher" "C:\Programme\Steam\steamapps\+++++\source dedicated server\srcds.exe"="C:\Programme\Steam\steamapps\+++++\source dedicated server\srcds.exe:*:Enabled:srcds" "C:\Programme\Steam\steamapps\++++\source sdk base\hl2.exe"="C:\Programme\Steam\steamapps\+++++\source sdk base\hl2.exe:*:Enabled:hl2" "C:\Programme\Steam\steamapps\+++++\zombie panic! source\hl2.exe"="C:\Programme\Steam\steamapps\+++++\zombie panic! source\hl2.exe:*:Enabled:hl2" "C:\Programme\Mumble\murmur.exe"="C:\Programme\Mumble\murmur.exe:*:Enabled:Murmur - Low-latency VoIP server" "C:\Programme\Steam\steamapps\common\left 4 dead 2 demo\left4dead2.exe"="C:\Programme\Steam\steamapps\common\left 4 dead 2 demo\left4dead2.exe:*:Enabled:left4dead2" "C:\Programme\Steam\Steam.exe"="C:\Programme\Steam\Steam.exe:*:Enabled:Steam" "C:\Programme\Steam\steamapps\common\trackmania nations forever\TmForever.exe"="C:\Programme\Steam\steamapps\common\trackmania nations forever\TmForever.exe:*:Enabled:TrackMania Nations Forever" "C:\Programme\Steam\steamapps\common\trackmania nations forever\TmForeverLauncher.exe"="C:\Programme\Steam\steamapps\common\trackmania nations forever\TmForeverLauncher.exe:*:Enabled:TrackMania Nations Forever" "C:\Programme\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe"="C:\Programme\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3" "C:\Programme\Steam\steamapps\+++++\half-life 2 deathmatch\hl2.exe"="C:\Programme\Steam\steamapps\+++++\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2" "C:\Programme\Steam\steamapps\common\left 4 dead\left4dead.exe"="C:\Programme\Steam\steamapps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead" "D:\Programme\Steam\Steam.exe"="D:\Programme\Steam\Steam.exe:*:Enabled:Steam" "D:\Programme\Steam\steamapps\common\left 4 dead 2 demo\left4dead2.exe"="D:\Programme\Steam\steamapps\common\left 4 dead 2 demo\left4dead2.exe:*:Enabled:left4dead2" "D:\Programme\Steam\steamapps\+++++\half-life 2 deathmatch\hl2.exe"="D:\Programme\Steam\steamapps\++++\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2" "D:\Programme\Steam\steamapps\++++++\team fortress 2\hl2.exe"="D:\Programme\Steam\steamapps\++++\team fortress 2\hl2.exe:*:Enabled:hl2" "C:\Dokumente und Einstellungen\++++\Eigene Dateien\Alles\SteamStats\SteamStats.exe"="C:\Dokumente und Einstellungen\+++++\Eigene Dateien\Alles\SteamStats\SteamStats.exe:*:Disabled:Drunken F00l's Steam Stats Modifier and Tools" "C:\Dokumente und Einstellungen\++++\Desktop\SteamStats\SteamStats.exe"="C:\Dokumente und Einstellungen\++++\Desktop\SteamStats\SteamStats.exe:*:Disabled:Drunken F00l's Steam Stats Modifier and Tools" "C:\Dokumente und Einstellungen\++++\Desktop\Worms Armageddon\Worms Armageddon\WA.exe"="C:\Dokumente und Einstellungen\++++\Desktop\Worms Armageddon\Worms Armageddon\WA.exe:*:Enabled:Worms Armageddon" "D:\Programme\Worms Armageddon\Worms Armageddon\WA.exe"="D:\Programme\Worms Armageddon\Worms Armageddon\WA.exe:*:Enabled:Worms Armageddon" "D:\Programme\Call of Duty\Call of Duty Modern Warfare 2\iw4mp.exe"="D:\Programme\Call of Duty\Call of Duty Modern Warfare 2\iw4mp.exe:*:Enabled:iw4mp" "C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA" "C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB" "D:\Programme\Battlefield\Battlefield 1942 Desert Combat\BF1942.exe"="D:\Programme\Battlefield\Battlefield 1942 Desert Combat\BF1942.exe:*:Enabled:BF1942" "I:\Games\crusader\Stronghold Crusader.exe"="I:\Games\crusader\Stronghold Crusader.exe:*:Enabled:Stronghold Crusader" "C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper" "D:\Programme\Serious Sam - The Second Encounter\Bin\SeriousSam.exe"="D:\Programme\Serious Sam - The Second Encounter\Bin\SeriousSam.exe:*:Enabled:SeriousSam" "D:\Programme\doom3\Doom3.exe"="D:\Programme\doom3\Doom3.exe:*:Disabled:DOOM 3" "I:\Counter-Strike Source\hl2.exe"="I:\Counter-Strike Source\hl2.exe:*:Enabled:hl2" "I:\Games\Counter-Strike Source\hl2.exe"="I:\Games\Counter-Strike Source\hl2.exe:*:Enabled:hl2" "C:\Programme\VideoLAN\VLC\vlc.exe"="C:\Programme\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player" "F:\perl\win32\wperl.exe"="F:\perl\win32\wperl.exe:127.0.0.1,LocalSubnet:Enabled:Perl interpreter - part of Stunnix Web Server" "D:\Programme\Battlefield Bad Company 2\BFBC2BetaUpdater.exe"="D:\Programme\Battlefield Bad Company 2\BFBC2BetaUpdater.exe:*:Enabled:Battlefield Bad Company 2 - BETA" "I:\Games\Assassin's Creed\AssassinsCreed_Dx9.exe"="I:\Games\Assassin's Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9" "I:\Games\Assassin's Creed\AssassinsCreed_Dx10.exe"="I:\Games\Assassin's Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10" "I:\Games\Assassin's Creed\AssassinsCreed_Launcher.exe"="I:\Games\Assassin's Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update" "I:\Games\Need for Speed Most Wanted\speed.exe"="I:\Games\Need for Speed Most Wanted\speed.exe:*:Enabled:speed" "I:\Games\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe"="I:\Games\GTA IV\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club" "D:\Programme\Steam\steamapps\common\trackmania nations forever\TmForever.exe"="D:\Programme\Steam\steamapps\common\trackmania nations forever\TmForever.exe:*:Enabled:TrackMania Nations Forever" "D:\Programme\Steam\steamapps\common\trackmania nations forever\TmForeverLauncher.exe"="D:\Programme\Steam\steamapps\common\trackmania nations forever\TmForeverLauncher.exe:*:Enabled:TrackMania Nations Forever" "D:\Programme\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe"="D:\Programme\Steam\steamapps\common\unreal tournament 3\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3" "D:\Programme\Steam\steamapps\common\left 4 dead\left4dead.exe"="D:\Programme\Steam\steamapps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead" "I:\Games\Serious Sam 2\Bin\Sam2.exe"="I:\Games\Serious Sam 2\Bin\Sam2.exe:*:Enabled:Sam2" "I:\Games\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe"="I:\Games\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)" "I:\Games\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe"="I:\Games\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)" "F:\httpd\httpd-x86-windows\apache.exe"="F:\httpd\httpd-x86-windows\apache.exe:LocalSubNet,127.0.0.1/255.255.255.255:Disabled:Apache web server" "D:\Programme\Battlefield Bad Company 2\BFBC2Game.exe"="D:\Programme\Battlefield Bad Company 2\BFBC2Game.exe:*:Disabled:EA Battlefield: Bad Company™ 2 - BETA" "I:\Games\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe"="I:\Games\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV" "I:\Games\Rockstar Games\Grand Theft Auto IV\GTAIV.exe"="I:\Games\Rockstar Games\Grand Theft Auto IV\GTAIV.exe:*:Enabled:Grand Theft Auto IV" "I:\Games\Call of Duty 5\CoDWaWmp.exe"="I:\Games\Call of Duty 5\CoDWaWmp.exe:*:Enabled:Call of Duty(R): World at War Multiplayer" "I:\Games\Call of Duty 5\CoDWaW.exe"="I:\Games\Call of Duty 5\CoDWaW.exe:*:Enabled:Call of Duty(R): World at War Campaign/Coop" "D:\Programme\Call of Duty\Call of Duty 5\CoDWaW.exe"="D:\Programme\Call of Duty\Call of Duty 5\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) " "D:\Programme\Call of Duty\Call of Duty 5\CoDWaWmp.exe"="D:\Programme\Call of Duty\Call of Duty 5\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) " "I:\Games\Call of Duty Modern Warfare 2\iw4mp.exe"="I:\Games\Call of Duty Modern Warfare 2\iw4mp.exe:*:Enabled:iw4mp" "I:\Games\Battlefield 2\BF2.exe"="I:\Games\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2" "D:\Programme\Call of Duty\Call Of Duty World at War\CoDWaW.exe"="D:\Programme\Call of Duty\Call Of Duty World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) " "D:\Programme\Call of Duty\Call Of Duty World at War\CoDWaWmp.exe"="D:\Programme\Call of Duty\Call Of Duty World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) " "C:\Programme\Ustream\Ustream Producer\rsrc\Desktop Presenter.exe"="C:\Programme\Ustream\Ustream Producer\rsrc\Desktop Presenter.exe:*:Enabled:Desktop Presenter" "D:\Programme\Steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe"="D:\Programme\Steam\steamapps\common\call of duty modern warfare 2\iw4sp.exe:*:Enabled:Call of Duty: Modern Warfare 2" "D:\Programme\Steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe"="D:\Programme\Steam\steamapps\common\call of duty modern warfare 2\iw4mp.exe:*:Enabled:Call of Duty: Modern Warfare 2 - Multiplayer" "D:\Programme\2K Games\Gearbox Software\Borderlands\Binaries\Borderlands.exe"="D:\Programme\2K Games\Gearbox Software\Borderlands\Binaries\Borderlands.exe:*:Enabled:Borderlands" "C:\Programme\Java\jre6\bin\javaw.exe"="C:\Programme\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Programme\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Programme\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher" "D:\Programme\Ubisoft\Assassin's Creed II\AssassinsCreedIIGame.exe"="D:\Programme\Ubisoft\Assassin's Creed II\AssassinsCreedIIGame.exe:*:Enabled:Assassin's Creed II" "D:\Programme\Ubisoft\Assassin's Creed II\AssassinsCreedII.exe"="D:\Programme\Ubisoft\Assassin's Creed II\AssassinsCreedII.exe:*:Enabled:Assassin's Creed II Update" "D:\Programme\Ubisoft\Assassin's Creed II\UPlayBrowser.exe"="D:\Programme\Ubisoft\Assassin's Creed II\UPlayBrowser.exe:*:Enabled:Assassin's Creed II Uplay" "I:\Games\Call of Duty 2\CoD2MP_s.exe"="I:\Games\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s" "I:\Games\Valve\hl.exe"="I:\Games\Valve\hl.exe:*:Enabled:Half-Life Launcher" "D:\Programme\Steam\steamapps\common\left 4 dead 2\left4dead2.exe"="D:\Programme\Steam\steamapps\common\left 4 dead 2\left4dead2.exe:*:Enabled:Left 4 Dead 2" "D:\Programme\Steam\steamapps\+++++\day of defeat source\hl2.exe"="D:\Programme\Steam\steamapps\++++\day of defeat source\hl2.exe:*:Enabled:Day of Defeat: Source" "D:\Programme\Steam\steamapps\+++++\counter-strike source\hl2.exe"="D:\Programme\Steam\steamapps\++++\counter-strike source\hl2.exe:*:Enabled:Counter-Strike: Source" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "F:\httpd\httpd-x86-windows\apache.exe"="F:\httpd\httpd-x86-windows\apache.exe:127.0.0.1,LocalSubnet:Enabled:Apache web server" "F:\perl\win32\wperl.exe"="F:\perl\win32\wperl.exe:127.0.0.1,LocalSubnet:Enabled:Perl interpreter - part of Stunnix Web Server" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d048141e-88ce-11de-be1c-002215761750}] shell\AutoRun\command - F:\LaunchU3.exe -a [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d0481420-88ce-11de-be1c-002215761750}] shell\AutoRun\command - F:\pushinst.exe ======List of files/folders created in the last 1 months====== 2010-06-30 15:55:45 ----D---- C:\WINDOWS\CSC 2010-06-30 15:55:38 ----A---- C:\WINDOWS\ntbtlog.txt 2010-06-29 20:43:42 ----D---- C:\rsit 2010-06-27 09:37:21 ----SHD---- C:\Config.Msi 2010-06-21 18:09:10 ----D---- C:\Dokumente und Einstellungen\+++++\Anwendungsdaten\fltk.org 2010-06-21 17:56:05 ----D---- C:\Dokumente und Einstellungen\+++++\Anwendungsdaten\flightgear.org 2010-06-11 15:02:51 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$ 2010-06-11 15:02:47 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$ 2010-06-11 15:02:43 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$ 2010-06-11 15:00:30 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$ 2010-06-11 15:00:27 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$ 2010-06-11 15:00:20 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$ 2010-06-07 17:35:38 ----A---- C:\WINDOWS\system32\nvwddi.dll 2010-06-07 17:35:30 ----A---- C:\WINDOWS\system32\nvrsth.dll 2010-06-07 17:35:30 ----A---- C:\WINDOWS\system32\nvrseng.dll 2010-06-07 17:35:28 ----A---- C:\WINDOWS\system32\nvrszht.dll 2010-06-07 17:35:28 ----A---- C:\WINDOWS\system32\nvrsnl.dll 2010-06-07 17:35:28 ----A---- C:\WINDOWS\system32\nvrshe.dll 2010-06-07 17:35:28 ----A---- C:\WINDOWS\system32\nvrsfi.dll 2010-06-07 17:35:28 ----A---- C:\WINDOWS\system32\nvrsesm.dll 2010-06-07 17:35:28 ----A---- C:\WINDOWS\system32\nvrsel.dll 2010-06-07 17:35:28 ----A---- C:\WINDOWS\system32\nvrsda.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrszhc.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrstr.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrssv.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrssl.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrssk.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrsru.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrsptb.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrspt.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrspl.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrsno.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrsko.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrsja.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrsit.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrshu.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrsfr.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrses.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrsde.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrscs.dll 2010-06-07 17:35:26 ----A---- C:\WINDOWS\system32\nvrsar.dll 2010-06-07 17:35:24 ----A---- C:\WINDOWS\system32\nvmctray.dll 2010-06-07 17:35:24 ----A---- C:\WINDOWS\system32\nvmccs.dll 2010-06-07 17:35:22 ----A---- C:\WINDOWS\system32\nvsvc32.exe 2010-06-07 17:35:22 ----A---- C:\WINDOWS\system32\nvcpl.dll 2010-06-07 17:35:22 ----A---- C:\WINDOWS\system32\nvcolor.exe ======List of files/folders modified in the last 1 months====== 2010-07-01 16:07:34 ----D---- C:\Programme\Trend Micro 2010-07-01 15:59:53 ----D---- C:\WINDOWS\Prefetch 2010-07-01 15:53:23 ----D---- C:\WINDOWS\Temp 2010-07-01 15:51:46 ----D---- C:\WINDOWS\system32\CatRoot2 2010-06-30 20:35:35 ----A---- C:\WINDOWS\SchedLgU.Txt 2010-06-30 17:27:34 ----D---- C:\WINDOWS\system32\NtmsData 2010-06-30 17:26:55 ----SHD---- C:\System Volume Information 2010-06-30 17:26:49 ----D---- C:\WINDOWS\Registration 2010-06-30 17:12:48 ----D---- C:\WINDOWS\system32 2010-06-30 15:55:45 ----D---- C:\WINDOWS 2010-06-30 15:38:34 ----D---- C:\Dokumente und Einstellungen\+++++\Anwendungsdaten\vlc 2010-06-30 14:22:51 ----D---- C:\Dokumente und Einstellungen 2010-06-30 06:13:36 ----RD---- C:\WINDOWS\Web 2010-06-30 06:13:36 ----D---- C:\WINDOWS\system32\drivers 2010-06-29 20:27:03 ----D---- C:\WINDOWS\Minidump 2010-06-27 17:21:55 ----D---- C:\Programme\Mozilla Firefox 2010-06-27 12:32:30 ----D---- C:\WINDOWS\Microsoft.NET 2010-06-27 12:32:29 ----RSD---- C:\WINDOWS\assembly 2010-06-27 09:51:08 ----RSH---- C:\boot.ini 2010-06-27 09:51:08 ----A---- C:\WINDOWS\win.ini 2010-06-27 09:51:08 ----A---- C:\WINDOWS\system.ini 2010-06-27 09:45:28 ----SHD---- C:\WINDOWS\Installer 2010-06-27 09:45:04 ----RD---- C:\Programme 2010-06-27 09:40:45 ----D---- C:\Programme\Microsoft Visual Studio 10.0 2010-06-24 17:04:40 ----A---- C:\WINDOWS\NeroDigital.ini 2010-06-24 14:18:27 ----D---- C:\Programme\ICQ6.5 2010-06-23 15:33:47 ----D---- C:\Programme\Cheat Engine 2010-06-22 15:58:48 ----A---- C:\WINDOWS\ODBC.INI 2010-06-21 17:56:02 ----D---- C:\WINDOWS\WinSxS 2010-06-20 14:33:26 ----D---- C:\WINDOWS\Help 2010-06-20 14:32:29 ----D---- C:\Programme\NVIDIA Corporation 2010-06-20 14:31:56 ----D---- C:\WINDOWS\system32\ReinstallBackups 2010-06-20 14:31:54 ----RSHDC---- C:\WINDOWS\system32\dllcache 2010-06-20 14:31:43 ----HD---- C:\WINDOWS\inf 2010-06-19 09:26:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2010-06-11 15:02:50 ----A---- C:\WINDOWS\imsins.BAK 2010-06-11 15:02:47 ----HD---- C:\WINDOWS\$hf_mig$ 2010-06-11 15:02:37 ----D---- C:\Programme\Internet Explorer 2010-06-11 15:02:29 ----D---- C:\WINDOWS\ie8updates 2010-06-10 19:17:10 ----D---- C:\Programme\Garena 2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\OpenCL.dll 2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nvudisp.exe 2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nvoglnt.dll 2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nvcuvid.dll 2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nvcuvenc.dll 2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nvcuda.dll 2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nvcompiler.dll 2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nvcodins.dll 2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nvcod.dll 2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nvapi.dll 2010-06-08 01:57:00 ----A---- C:\WINDOWS\system32\nv4_disp.dll 2010-06-03 18:17:49 ----D---- C:\WINDOWS\system32\wbem 2010-06-03 18:17:47 ----SD---- C:\Dokumente und Einstellungen\++++\Anwendungsdaten\Microsoft 2010-06-03 16:09:25 ----D---- C:\WINDOWS\system32\Restore 2010-06-03 02:52:43 ----D---- C:\Programme\Gemeinsame Dateien ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AmdK8;AMD-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520] R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys [] R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2010-03-01 124784] R1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14720] R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520] R1 WmiAcpi;Microsoft Windows-Verwaltungsschnittstelle für ACPI; C:\WINDOWS\System32\DRIVERS\wmiacpi.sys [2008-04-13 8832] R1 WS2IFSL;Windows Socket 2.0 Non-IFS-Dienstanbieter-Unterstützungsumgebung; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-18 12032] R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2010-02-16 60936] R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 hidusb;Microsoft HID Class-Treiber; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-13 10368] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568] R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-18 12288] R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-11 5810] R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-06-08 10531200] R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2008-08-01 54784] R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2008-08-01 22016] R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128] R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Microsoft USB-Standardhubtreiber; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbohci;Miniporttreiber für Microsoft USB Open Host-Controller; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2008-04-13 17152] R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM); C:\WINDOWS\system32\DRIVERS\vcsvad.sys [2008-12-10 17792] S2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys [] S3 a6c6v1oy;a6c6v1oy; C:\WINDOWS\system32\drivers\a6c6v1oy.sys [] S3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys [] S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384] S3 EagleNT;EagleNT; \??\C:\DOKUME~1\Marzl\LOKALE~1\Temp\EagleNT.sys [] S3 FWLANUSB;AVM FRITZ!WLAN; C:\WINDOWS\system32\DRIVERS\fwlanusb.sys [2006-07-31 264704] S3 GarenaPEngine;GarenaPEngine; \??\C:\DOKUME~1\Marzl\LOKALE~1\Temp\AEG57.tmp [] S3 ggsemc;SEMC USB Flash Driver; C:\WINDOWS\system32\DRIVERS\ggsemc.sys [2006-09-28 11648] S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176] S3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver; C:\WINDOWS\system32\DRIVERS\ManyCam.sys [] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504] S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968] S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112] S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys [] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880] S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976] S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-05-23 29696] S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688] S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568] S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Programme\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336] R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2010-04-20 267432] R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [2008-09-08 450560] R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-06-07 154728] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S3 aspnet_state;ASP.NET-Zustandsdienst; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 NBService;NBService; C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] S4 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S4 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S4 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2010-04-12 153376] S4 NetTcpPortSharing;Net.Tcp-Portfreigabedienst; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] S4 NMIndexingService;NMIndexingService; C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848] S4 nSvcIp;ForceWare IP service; C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [2008-09-08 184320] S4 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S4 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-05-01 75064] S4 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-05-03 215152] S4 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-11-03 920576] -----------------EOF----------------- Maleware: hxxp://nopaste.info/e20a1f27e6.html Geändert von Opfergott (01.07.2010 um 15:24 Uhr) Grund: namen geändert |
01.07.2010, 16:55 | #2 |
| Virus TR\hiolti? und wenn ich hier falsch bin mit dem thread dann bitte ich darum dass es ins richtige forum verschoben wird (
__________________ |