Hier die Logfile:
RSIT Logfile:
Code:
Alles auswählen Aufklappen ATTFilter
Logfile of random's system information tool 1.08 (written by random/random)
Run by Malte at 2010-08-28 13:47:37
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 14 GB (41%) free of 35 GB
Total RAM: 3071 MB (67% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:47:59, on 28.08.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
D:\Program Files\SetPoint\SetPointP\SetPoint.exe
D:\Program Files\Skype\Phone\Skype.exe
D:\Program Files\Stardock\ObjectDock\ObjectDock.exe
D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccSvcHst.exe
C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
D:\program files\mozilla firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Malte\Downloads\RSIT.exe
C:\Program Files\trend micro\Malte.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coIEPlg.dll
O4 - HKLM\..\Run: [EvtMgr6] D:\Program Files\SetPoint\SetPointP\SetPoint.exe /launchGaming
O4 - HKCU\..\Run: [Skype] "D:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "D:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - Startup: Stardock ObjectDock.lnk = D:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - D:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - D:\Program Files\ICQ7.2\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccSvcHst.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - D:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @D:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - D:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
--
End of file - 4558 bytes
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coIEPlg.dll [2010-05-13 394608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\IPSBHO.DLL [2010-05-14 79224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files\Java\bin\jp2ssv.dll [2010-08-22 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton Internet Security\Engine\17.7.0.12\coIEPlg.dll [2010-05-13 394608]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"EvtMgr6"=D:\Program Files\SetPoint\SetPointP\SetPoint.exe [2010-05-18 1311312]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=D:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
"ICQ"=D:\Program Files\ICQ7.2\ICQ.exe [2010-08-22 133432]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
D:\Program Files\OO Software\Defrag\oodtray.exe [2010-05-11 2528584]
C:\Users\Malte\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Stardock ObjectDock.lnk - D:\Program Files\Stardock\ObjectDock\ObjectDock.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======List of files/folders created in the last 1 months======
2010-08-28 13:47:38 ----D---- C:\Program Files\trend micro
2010-08-28 13:47:37 ----D---- C:\rsit
2010-08-23 17:21:18 ----D---- C:\Users\Malte\AppData\Roaming\ICQ
2010-08-23 16:26:30 ----D---- C:\ProgramData\PopCap Games
2010-08-22 21:09:28 ----A---- C:\Windows\system32\OpenCL.dll
2010-08-22 21:09:28 ----A---- C:\Windows\system32\nvwgf2um.dll
2010-08-22 21:09:28 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2010-08-22 21:09:23 ----A---- C:\Windows\system32\nvoglv32.dll
2010-08-22 21:09:23 ----A---- C:\Windows\system32\nvcuvid.dll
2010-08-22 21:09:23 ----A---- C:\Windows\system32\nvcuvenc.dll
2010-08-22 21:09:23 ----A---- C:\Windows\system32\nvcuda.dll
2010-08-22 21:09:18 ----A---- C:\Windows\system32\nvcompiler.dll
2010-08-22 21:09:18 ----A---- C:\Windows\system32\nvcod1922.dll
2010-08-22 21:09:18 ----A---- C:\Windows\system32\nvcod.dll
2010-08-22 21:01:02 ----D---- C:\Program Files\SystemRequirementsLab
2010-08-22 21:00:43 ----D---- C:\Windows\Sun
2010-08-22 19:01:26 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-08-22 18:28:05 ----D---- C:\Users\Malte\AppData\Roaming\NVIDIA
2010-08-22 18:24:25 ----A---- C:\Windows\system32\wrap_oal.dll
2010-08-22 18:24:25 ----A---- C:\Windows\system32\OpenAL32.dll
2010-08-22 17:34:05 ----D---- C:\Windows\95FC26FB19FD4A96BBB1B1062E8648F5.TMP
2010-08-22 17:33:56 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-08-22 13:51:48 ----D---- C:\ProgramData\Sun
2010-08-22 13:51:47 ----D---- C:\Program Files\Common Files\Java
2010-08-22 13:51:28 ----A---- C:\Windows\system32\javaws.exe
2010-08-22 13:51:28 ----A---- C:\Windows\system32\javaw.exe
2010-08-22 13:51:28 ----A---- C:\Windows\system32\java.exe
2010-08-22 13:51:28 ----A---- C:\Windows\system32\deployJava1.dll
2010-08-21 20:15:29 ----D---- C:\Users\Malte\AppData\Roaming\OpenOffice.org
2010-08-15 12:06:19 ----D---- C:\Users\Malte\AppData\Roaming\Meine Der Herr der Ringe™, Aufstieg des Hexenkönigs™-Dateien
2010-08-14 21:38:08 ----A---- C:\ProgramData\ra3.ini
2010-08-14 21:19:23 ----D---- C:\Users\Malte\AppData\Roaming\Red Alert 3
2010-08-14 21:18:59 ----RHD---- C:\Users\Malte\AppData\Roaming\SecuROM
2010-08-14 21:18:58 ----A---- C:\Windows\system32\CmdLineExt.dll
2010-08-11 15:07:19 ----D---- C:\Users\Malte\AppData\Roaming\dvdcss
======List of files/folders modified in the last 1 months======
2010-08-28 13:47:38 ----RD---- C:\Program Files
2010-08-28 13:47:13 ----D---- C:\Windows\Temp
2010-08-28 13:36:38 ----D---- C:\Windows\System32
2010-08-28 13:36:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-08-28 13:36:37 ----D---- C:\Windows\inf
2010-08-28 13:34:43 ----D---- C:\Users\Malte\AppData\Roaming\Skype
2010-08-28 13:31:50 ----SHD---- C:\System Volume Information
2010-08-26 21:58:59 ----SD---- C:\Users\Malte\AppData\Roaming\Microsoft
2010-08-24 20:21:30 ----D---- C:\Users\Malte\AppData\Roaming\vlc
2010-08-24 17:07:28 ----D---- C:\Windows\system32\Tasks
2010-08-23 17:21:45 ----HD---- C:\Program Files\InstallShield Installation Information
2010-08-23 16:26:30 ----HD---- C:\ProgramData
2010-08-22 21:20:46 ----D---- C:\Windows
2010-08-22 21:16:13 ----SHD---- C:\Windows\Installer
2010-08-22 21:15:59 ----D---- C:\ProgramData\NVIDIA
2010-08-22 21:14:35 ----D---- C:\Program Files\NVIDIA Corporation
2010-08-22 21:13:16 ----D---- C:\Windows\system32\drivers
2010-08-22 21:13:05 ----D---- C:\Windows\system32\catroot
2010-08-22 21:13:04 ----D---- C:\Windows\system32\catroot2
2010-08-22 18:25:32 ----D---- C:\Windows\winsxs
2010-08-22 18:24:54 ----RSD---- C:\Windows\assembly
2010-08-22 17:33:56 ----D---- C:\Program Files\Common Files
2010-08-22 13:49:27 ----D---- C:\Windows\Prefetch
2010-08-21 20:19:14 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-08-21 20:07:59 ----RSD---- C:\Windows\Fonts
2010-08-21 20:03:56 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2010-08-21 20:00:20 ----D---- C:\Program Files\Common Files\InstallShield
2010-08-16 16:29:18 ----SD---- C:\ProgramData\Microsoft
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NIS\1107000.00C\SYMDS.SYS [2009-10-15 328752]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NIS\1107000.00C\SYMEFA.SYS [2010-04-22 173104]
R1 BHDrvx86;BHDrvx86; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.5.0.127\Definitions\BASHDefs\20100810.004\BHDrvx86.sys [2010-08-10 692272]
R1 ccHP;Symantec Hash Provider; C:\Windows\system32\drivers\NIS\1107000.00C\ccHPx86.sys [2010-02-26 501888]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2010-07-10 371248]
R1 IDSVix86;IDSVix86; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.5.0.127\Definitions\IPSDefs\20100827.001\IDSvix86.sys [2010-06-17 344112]
R1 SRTSP;Symantec Real Time Storage Protection; C:\Windows\System32\Drivers\NIS\1107000.00C\SRTSP.SYS [2010-04-22 325680]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\Windows\system32\drivers\NIS\1107000.00C\SRTSPX.SYS [2010-04-22 43696]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NIS\1107000.00C\Ironx86.SYS [2010-04-29 116784]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver; C:\Windows\System32\Drivers\NIS\1107000.00C\SYMTDIV.SYS [2010-05-06 339504]
R3 AgereSoftModem;Agere Systems-Softmodem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-02 983552]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2010-07-10 102448]
R3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [2009-04-10 236544]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2010-03-18 38864]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2010-03-18 37328]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.5.0.127\Definitions\VirusDefs\20100827.051\NAVENG.SYS [2010-08-06 85424]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.5.0.127\Definitions\VirusDefs\20100827.051\NAVEX15.SYS [2010-08-06 1362608]
R3 NETw3v32;Intel(R) PRO/Wireless 3945ABG-Adaptertreiber für Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2008-01-18 2225664]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2010-07-10 11008040]
R3 RTL8169;Realtek 8169-NT-Treiber; C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 44544]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-10 89088]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2010-07-10 124976]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2010-02-24 10064]
S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 naecd;naecd; \??\C:\Users\Malte\AppData\Local\Temp\naecd.sys []
S3 usbaudio;USB-Audiotreiber (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-10 73216]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
S3 XDva360;XDva360; \??\C:\Windows\system32\XDva360.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 NIS;Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\17.7.0.12\ccSvcHst.exe [2010-02-26 126392]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-07-09 129640]
R2 OODefragAgent;O&O Defrag; D:\Program Files\OO Software\Defrag\oodag.exe [2010-05-11 1619272]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-07-10 66872]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; D:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-07-06 1051968]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-18 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2010-05-06 293456]
S3 TuneUp.Defrag;@D:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; D:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-07-09 435008]
-----------------EOF-----------------
--- --- ---