Seltsame Systemschriften, Firefox geht nicht mehr

Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 00:26:01 on 22.11.2010

OS: Windows XP Professional Service Pack 3 (Build 2600)
Default Browser: Microsoft Corporation Internet Explorer 7.00.6000.17091

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"AppleSoftwareUpdate.job" - "Apple Inc." - C:\Programme\Apple Software Update\SoftwareUpdate.exe
"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"Indexing Task - Techniker.job" - "SHARP CORPORATION" - C:\Programme\Sharp\Sharpdesk\IndexTask.exe
"Microsoft_Hardware_Launch_IType_exe.job" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itype.exe
"Google Software Updater.job" - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS\system32\infocardcpl.cpl
"javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS\system32\javacpl.cpl
"nvcpl.cpl" - "NVIDIA Corporation" - C:\WINDOWS\system32\nvcpl.cpl
"nvtuicpl.cpl" - "NVIDIA Corporation" - C:\WINDOWS\system32\nvtuicpl.cpl
"plotman.cpl" - "Autodesk, Inc." - C:\WINDOWS\system32\plotman.cpl
"styleman.cpl" - "Autodesk, Inc." - C:\WINDOWS\system32\styleman.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"Adobe Gamma" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma.cpl
"mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLCFG32.CPL
"NokiaConnectionManager" - "Nokia" - C:\PROGRA~1\Nokia\NOKIAP~1\CONNEC~1.CPL
"QuickTime" - "Apple Inc." - C:\Programme\QuickTime\QTSystem\QuickTime.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"Acronis Snapshots Manager" (snapman) - "Acronis" - C:\WINDOWS\System32\DRIVERS\snapman.sys
"Acronis Try&Decide and Restore Points filter (build 228)" (tdrpman228) - "Acronis" - C:\WINDOWS\System32\DRIVERS\tdrpm228.sys
"catchme" (catchme) - ? - C:\cofi\catchme.sys  (File not found)
"Changer" (Changer) - ? - C:\WINDOWS\system32\drivers\Changer.sys  (File not found)
"Dect Serial Driver" (Gigser) - "Siemens AG" - C:\WINDOWS\System32\Drivers\Gigser.sys
"DECT USB serial Interface" (m105mdm) - "MCCI" - C:\WINDOWS\System32\DRIVERS\m105mdm.sys
"Dect USB-Box Driver" (dectgen) - "MCCI" - C:\WINDOWS\System32\DRIVERS\dectgen.sys
"DectEnum" (DectEnum) - "Siemens AG" - C:\WINDOWS\System32\Drivers\DectEnum.sys
"ElbyCDFL" (ElbyCDFL) - "SlySoft, Inc." - C:\WINDOWS\System32\Drivers\ElbyCDFL.sys
"ElbyCDIO Driver" (ElbyCDIO) - "Elaborate Bytes AG" - C:\WINDOWS\System32\Drivers\ElbyCDIO.sys
"Funkwerk USB Device Driver" (ElgTaDrv) - "Funkwerk Enterprise Communications" - C:\WINDOWS\System32\Drivers\ElgTaDrv.sys
"gdrv" (gdrv) - "Windows (R) 2000 DDK provider" - C:\WINDOWS\gdrv.sys
"GMSIPCI" (GMSIPCI) - ? - E:\INSTALL\GMSIPCI.SYS  (File not found)
"i2omgmt" (i2omgmt) - ? - C:\WINDOWS\system32\drivers\i2omgmt.sys  (File not found)
"ISDN USB Interface (Ver. 1.20.0032)" (IUAPIWDM) - "SIEMENS AG" - C:\WINDOWS\System32\DRIVERS\IUAPIWDM.sys
"ISDN Wan driver (Ver. 1.20.0032)" (HRCMPA) - "SIEMENS AG" - C:\WINDOWS\System32\DRIVERS\hrcmpa.sys
"Kaspersky Lab Driver" (KLIF) - "Kaspersky Lab" - C:\WINDOWS\System32\DRIVERS\klif.sys
"Kl1" (kl1) - "Kaspersky Lab" - C:\WINDOWS\system32\drivers\kl1.sys
"lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS\system32\drivers\lbrtfdc.sys  (File not found)
"PCIDump" (PCIDump) - ? - C:\WINDOWS\system32\drivers\PCIDump.sys  (File not found)
"PDCOMP" (PDCOMP) - ? - C:\WINDOWS\system32\drivers\PDCOMP.sys  (File not found)
"PDFRAME" (PDFRAME) - ? - C:\WINDOWS\system32\drivers\PDFRAME.sys  (File not found)
"PDRELI" (PDRELI) - ? - C:\WINDOWS\system32\drivers\PDRELI.sys  (File not found)
"PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS\system32\drivers\PDRFRAME.sys  (File not found)
"PxHelp20" (PxHelp20) - "Sonic Solutions" - C:\WINDOWS\System32\Drivers\PxHelp20.sys
"REINER SCT cyberJack pinpaUSB" (cjusb) - "REINER SCT" - C:\WINDOWS\System32\DRIVERS\cjusb.sys
"siellif" (siellif) - "Siemens AG" - C:\WINDOWS\System32\Drivers\siellif.sys
"WDICA" (WDICA) - ? - C:\WINDOWS\system32\drivers\WDICA.sys  (File not found)

[Explorer]
-----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )-----
{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{8A0BC933-7552-42E2-A228-3BE055777227} "AcColumnHandler" - "Autodesk" - C:\Programme\Gemeinsame Dateien\Autodesk Shared\AcShellEx\AcShellExtension.dll
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
{79E0F14C-9C52-4218-89A7-7C4B0563D121} "SDThumbNailProtocol Class" - "SHARP CORPORATION" - C:\Programme\Sharp\Sharpdesk\ExplorerExtensions.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{8A0BC933-7552-42E2-A228-3BE055777227} "AcColumnHandler" - "Autodesk" - C:\Programme\Gemeinsame Dateien\Autodesk Shared\AcShellEx\AcShellExtension.dll
{ADC46291-D8A1-4486-A24C-86FFB392AEFA} "AcDgnImageExtractor" - "Autodesk" - C:\Programme\Gemeinsame Dateien\Autodesk Shared\AcDgnCOM17.dll
{5800AD5B-72C1-477B-9A08-CA112DF06D97} "AcInfoTipHandler" - "Autodesk" - C:\Programme\Gemeinsame Dateien\Autodesk Shared\AcShellEx\AcShellExtension.dll
{D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} "Acrobat Elements Context Menu" - "Adobe Systems Inc." - C:\Programme\Adobe\Acrobat 8.0\Acrobat Elements\ContextMenu.dll
{C539A15A-3AF9-4c92-B771-50CB78F5C751} "Acronis True Image Shell Context Menu Extension" - "Acronis" - C:\Programme\Acronis\TrueImageHome\tishell.dll
{C539A15B-3AF9-4c92-B771-50CB78F5C751} "Acronis True Image Shell Extension" - "Acronis" - C:\Programme\Acronis\TrueImageHome\tishell.dll
{36A21736-36C2-4C11-8ACB-D4136F2B57BD} "AcSignIcon" - "Autodesk, Inc." - C:\WINDOWS\system32\AcSignIcon.dll
{AC1DB655-4F9A-4c39-8AD2-A65324A4C446} "ACTHUMBNAIL" - "Autodesk, Inc." - C:\Programme\Gemeinsame Dateien\Autodesk Shared\Thumbnail\AcThumbnail16.dll
{42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung" - ? - deskpan.dll  (File not found)
{1CDB2949-8F65-4355-8456-263E7C208A5D} "Desktop Explorer" - "NVIDIA Corporation" - C:\WINDOWS\system32\nvshell.dll
{1E9B04FB-F9E5-4718-997B-B8DA88302A47} "Desktop Explorer Menu" - "NVIDIA Corporation" - C:\WINDOWS\system32\nvshell.dll
{E81FFB23-40E2-431C-A041-76AEA0E4B04C} "Enterprise-Projekte" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\NAMEEXT.DLL
{1D2680C9-0E2A-469d-B787-065558BC7D43} "Fusion Cache" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{ED6E87C6-8A83-43aa-8208-8DBC8247F4D2} "IntelliType Pro Key Settings Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplkey.dll
{111D8120-25EB-4E1C-A4DF-C9EE5FCA35CB} "IntelliType Pro Scrolling Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplwhl.dll
{1825D0FA-5B0C-4e20-A929-3EFD15B6DF71} "IntelliType Pro Touchpad Control Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcpltp.dll
{A2569D1F-4E06-43EC-9825-0088B471BE47} "IntelliType Pro Wireless Control Panel Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplwir.dll
{97FA8AA2-EE77-4FF2-9449-424D8924EF21} "IntelliType Pro Zooming Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplzm.dll
{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} "iTunes" - "Apple Inc." - C:\Programme\iTunes\iTunesMiniPlayer.dll
{DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C} "KbLogiExt Class" - "Logitech, Inc." - C:\Programme\Logitech\SetPoint\kbcplext.dll
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung" - ? -   (File not found | COM-object registry key not found)
{B9B9F083-2B04-452A-8691-83694AC1037B} "LogiExt Class" - "Logitech, Inc." - C:\Programme\Logitech\SetPoint\mcplext.dll
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office12\msohevi.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLSHEXT.DLL
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{416651E4-9C3C-11D9-8BDE-F66BAD1E3F3A} "Nokia Phone Browser" - "Nokia" - C:\Programme\Nokia\Nokia PC Suite 6\phonebrowser.dll
{1E9B04FB-F9E5-4718-997B-B8DA88302A48} "nView Desktop Context Menu" - "NVIDIA Corporation" - C:\WINDOWS\system32\nvshell.dll
{0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\OLKFSTUB.DLL
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - C:\Program Files\Real\RealPlayer\rpshell.dll
{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung" - ? -   (File not found | COM-object registry key not found)
{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{85E0B171-04FA-11D1-B7DA-00A0C90348D6} "Statistik für den Schutz des Web-Datenverkehrs" - "Kaspersky Lab" - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Web Folders" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\MSONSEXT.DLL
{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -   (File not found | COM-object registry key not found)
{E0D79304-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing, S.L." - C:\Programme\WinZip\wzshlstb.dll
{E0D79305-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing, S.L." - C:\Programme\WinZip\wzshlstb.dll
{E0D79306-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing, S.L." - C:\Programme\WinZip\wzshlstb.dll
{E0D79307-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing, S.L." - C:\Programme\WinZip\wzshlstb.dll
{FACEB430-912E-11D3-B7D5-0080AD41AF95} "ZipStar ContextMenu-Handler" - "SWE Sven Ritter" - C:\Programme\SpeedProject\ZipStar 5\ZSShell.dll

[Internet Explorer]
-----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars )-----
{21347690-EC41-4F9A-8887-1F4AEE672439} "Canon Easy-WebPrint EX" - "CANON INC." - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "Adobe PDF" - "Adobe Systems Incorporated" - C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
<binary data> "Canon Easy-WebPrint EX" - "CANON INC." - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll
<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} "Java Plug-in 1.6.0_05" - "Sun Microsystems, Inc." - C:\Programme\Java\jre1.6.0_05\bin\npjpi160_05.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_17" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_17.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} "Java Plug-in 1.6.0_17" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_17.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_17" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_17.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{4248FE82-7FCB-46AC-B270-339F08212110} "&Virtuelle Tastatur" - "Kaspersky Lab" - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
{CCF151D8-D089-449F-A5A4-D9909053F20F} "Li&nks untersuchen" - "Kaspersky Lab" - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
{85E0B171-04FA-11D1-B7DA-00A0C90348D6} "Statistik für den Schutz des Web-Datenverkehrs" - "Kaspersky Lab" - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----
<binary data> "Adobe PDF" - "Adobe Systems Incorporated" - C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
{759D9886-0C6F-4498-BAB6-4A5F47C6C72F} "Canon Easy-WebPrint EX" - "CANON INC." - C:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{AE7CD045-E861-484f-8273-0445EE161910} "Adobe PDF Conversion Toolbar Helper" - "Adobe Systems Incorporated" - C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} "Adobe PDF Reader" - "Adobe Systems Incorporated" - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
{3785D0AD-BFFF-47F6-BF5B-A587C162FED9} "Canon Easy-WebPrint EX BHO" - "CANON INC." - C:\Programme\Canon\Easy-WebPrint EX\ewpexbho.dll
{E33CF602-D945-461A-83F0-819F76A199F8} "FilterBHO Class" - "Kaspersky Lab" - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} "Google Toolbar Notifier BHO" - "Google Inc." - C:\Programme\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} "IEVkbdBHO Class" - "Kaspersky Lab" - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
{3049C3E9-B461-4BC5-8870-4C09146192CA} "RealPlayer Download and Record Plugin for Internet Explorer" - "RealPlayer" - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

[Logon]
-----( %AllUsersProfile%\Startmenü\Programme\Autostart )-----
"Adobe Acrobat - Schnellstart.lnk" - "Adobe Systems Incorporated" - C:\Programme\Adobe\Acrobat 8.0\Acrobat\acrobat_sl.exe  (Shortcut exists | File exists)
"desktop.ini" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini
"HP Digital Imaging Monitor.lnk" - "Hewlett-Packard Co." - C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe  (Shortcut exists | File exists)
"HP Image Zone Schnellstart.lnk" - "Hewlett-Packard Co." - C:\Programme\HP\Digital Imaging\bin\hpqthb08.exe  (Shortcut exists | File exists)
"Logitech SetPoint.lnk" - "Logitech, Inc." - C:\Programme\Logitech\SetPoint\SetPoint.exe  (Shortcut exists | File exists)
-----( %UserProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\Techniker\Startmenü\Programme\Autostart\desktop.ini
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"CAHeadless" - "Adobe Systems Incorporated" - C:\Programme\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe
"Nokia.PCSync" - "Time Information Services Ltd." - "C:\Programme\Nokia\Nokia PC Suite 6\PCSync2.exe" /NoDialog
"PC Suite Tray" - "Nokia" - "C:\Programme\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
"TomTomHOME.exe" - "TomTom" - "C:\Programme\TomTom HOME 2\TomTomHOMERunner.exe"
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"36X Raid Configurer" - "Gigabyte Technology Corp." - C:\WINDOWS\system32\JMRaidSetup.exe boot
"Acrobat Assistant 8.0" - "Adobe Systems Inc." - "C:\Programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
"Acronis Scheduler2 Service" - "Acronis" - "C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe"
"AcronisTimounterMonitor" - "Acronis" - C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
"Adobe Photo Downloader" - "Adobe Systems Incorporated" - "C:\Programme\Adobe\Photoshop Elements 6.0\apdproxy.exe"
"AppleSyncNotifier" - "Apple Inc." - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe
"avp" - "Kaspersky Lab" - "C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe"
"CanonMyPrinter" - "CANON INC." - C:\Programme\Canon\MyPrinter\BJMyPrt.exe /logon
"CherryKeyMan" - "Cherry GmbH" - "C:\Programme\Cherry\KeyMan\KeyMan.exe"
"CloneCDTray" - "SlySoft, Inc." - "C:\Programme\SlySoft\CloneCD\CloneCDTray.exe" /s
"FtpServer.exe" - "SHARP CORPORATION" - C:\Programme\Sharp\Sharpdesk\FtpServer.exe -usedefault
"HP Software Update" - "Hewlett-Packard Company" - "C:\Programme\HP\HP Software Update\HPWuSchd2.exe"
"IAAnotif" - "Intel Corporation" - "C:\Programme\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
"IndexTray" - ? - "C:\Programme\Sharp\Sharpdesk\IndexTray.exe /n"  (File not found)
"iTunesHelper" - "Apple Inc." - "C:\Programme\iTunes\iTunesHelper.exe"
"itype" - "Microsoft Corporation" - "C:\Programme\Microsoft IntelliType Pro\itype.exe"
"nwiz" - "NVIDIA Corporation" - nwiz.exe /install
"QuickTime Task" - "Apple Inc." - "C:\Programme\QuickTime\QTTask.exe" -atboottime
"SharpTray" - "SHARP CORPORATION" - C:\Programme\Sharp\Sharpdesk\SharpTray.exe
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Programme\Java\jre6\bin\jusched.exe"
"TrueImageMonitor.exe" - "Acronis" - C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe
"TypeRegChecker" - "SHARP CORPORATION" - C:\Programme\Sharp\Sharpdesk\TypeRegChecker.exe

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"Adobe PDF Port" - "Adobe Systems Incorporated." - C:\WINDOWS\system32\AdobePDF.dll
"HP Standard TCP/IP Port" - "Hewlett Packard" - C:\WINDOWS\system32\hptcpmon.dll
"SC2 TCP/IP Port" - "SHARP CORPORATION" - C:\WINDOWS\system32\SCN2PM.dll

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
"Acronis Scheduler2 Service" (AcrSch2Svc) - "Acronis" - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
"Adobe Active File Monitor V6" (AdobeActiveFileMonitor6.0) - ? - C:\Programme\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe  (File found, but it contains no detailed information)
"Adobe Active File Monitor V8" (AdobeActiveFileMonitor8.0) - "Adobe Systems Incorporated" - C:\Programme\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
"Apple Mobile Device" (Apple Mobile Device) - "Apple Inc." - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
"ASP.NET-Zustandsdienst" (aspnet_state) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
"Autodesk Licensing Service" (Autodesk Licensing Service) - "Autodesk" - C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe
"B's Recorder GOLD Library General Service" (bgsvcgen) - "B.H.A Corporation" - C:\WINDOWS\system32\bgsvcgen.exe
"Cherry Device Interface" (Cherry Device Interface) - "Cherry, Auerbach Germany, www.cherry.de" - C:\Programme\Cherry\CDI\cdi.exe
"Dienst "Bonjour"" (Bonjour Service) - "Apple Inc." - C:\Programme\Bonjour\mDNSResponder.exe
"FABS - Helping agent for MAGIX media database" (Fabs) - "MAGIX AG" - C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe
"Firebird Server - MAGIX Instance" (FirebirdServerMAGIXInstance) - "MAGIX®" - C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe
"FLEXnet Licensing Service" (FLEXnet Licensing Service) - "Acresso Software Inc." - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
"Google Software Updater" (gusvc) - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
"Google Update Service (gupdate1c9860760ef90e7)" (gupdate1c9860760ef90e7) - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"InstallDriver Table Manager" (IDriverT) - "Macrovision Corporation" - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
"Intel(R) Matrix Storage Event Monitor" (IAANTMON) - "Intel Corporation" - C:\Programme\Intel\Intel Matrix Storage Manager\Iaantmon.exe
"iPod-Dienst" (iPod Service) - "Apple Inc." - C:\Programme\iPod\bin\iPodService.exe
"Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe
"Kaspersky Anti-Virus" (AVP) - "Kaspersky Lab" - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
"Logitech Bluetooth Service" (LBTServ) - "Logitech, Inc." - C:\Programme\Gemeinsame Dateien\Logishrd\Bluetooth\LBTServ.exe
"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE
"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
"Pml Driver HPZ12" (Pml Driver HPZ12) - "HP" - C:\WINDOWS\system32\HPZipm12.exe
"ServiceLayer" (ServiceLayer) - "Nokia" - C:\Programme\PC Connectivity Solution\ServiceLayer.exe
"SQL Server (SQLEXPRESS)" (MSSQL$SQLEXPRESS) - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
"SQL Server VSS Writer" (SQLWriter) - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe
"StarMoney 7.0 OnlineUpdate" (StarMoney 7.0 OnlineUpdate) - "Star Finanz - Software Entwicklung und Vertriebs GmbH" - C:\Programme\StarMoney 7.0\ouservice\StarMoneyOnlineUpdate.exe
"TomTomHOMEService" (TomTomHOMEService) - "TomTom" - C:\Programme\TomTom HOME 2\TomTomHOMEService.exe
"Transbase" (Transbase) - "Transaction Software, D 81737 Munich" - C:\BMWgroup\ETKLokal\transbase\tbmux32.exe
"Windows CardSpace" (idsvc) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
"XML2RPC Service" (XML2RPCService) - "CO3.Net AG" - C:\Programme\XML2RPC\XML2RPCService.exe

[Winlogon]
-----( HKCU\Control Panel\IOProcs )-----
"MVB" - ? - mvfs32.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions )-----
{F9C77450-3A41-477E-9310-9ACD617BD9E3} "Group Policy Applications" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{728EE579-943C-4519-9EF7-AB56765798ED} "Group Policy Data Sources" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{1A6364EB-776B-4120-ADE1-B63A406A76B5} "Group Policy Device Settings" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{5794DAFD-BE60-433f-88A2-1A31939AC01F} "Group Policy Drive Maps" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{0E28E245-9368-4853-AD84-6DA3BA35BB75} "Group Policy Environment" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{7150F9BF-48AD-4da4-A49C-29EF4A8369BA} "Group Policy Files" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{A3F3E39B-5D83-4940-B954-28315B82F0A8} "Group Policy Folder Options" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{6232C319-91AC-4931-9385-E70C2B099F0E} "Group Policy Folders" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{74EE6C03-5363-4554-B161-627540339CAB} "Group Policy Ini Files" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{E47248BA-94CC-49c4-BBB5-9EB7F05183D0} "Group Policy Internet Settings" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{17D89FEC-5C44-4972-B12D-241CAEF74509} "Group Policy Local Users and Groups" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{3A0DBA37-F8B2-4356-83DE-3E90BD5C261F} "Group Policy Network Options" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{6A4C88C6-C502-4f74-8F60-2CB23EDC24E2} "Group Policy Network Shares" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{E62688F0-25FD-4c90-BFF5-F508B9D2E31F} "Group Policy Power Options" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{BC75B1ED-5833-4858-9BB8-CBF0B166DF9D} "Group Policy Printers" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{E5094040-C46C-4115-B030-04FB2E545B00} "Group Policy Regional Options" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{B087BE9D-ED37-454f-AF9C-04291E351182} "Group Policy Registry" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{AADCED64-746C-4633-A97C-D61349046527} "Group Policy Scheduled Tasks" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{91FBB303-0CD5-4055-BF42-E512A681B325} "Group Policy Services" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7} "Group Policy Shortcuts" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
{E4F48E54-F38D-4884-BFB9-D4D2E5729C18} "Group Policy Start Menu Settings" - "Microsoft Corporation" - C:\WINDOWS\system32\gpprefcl.dll
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )-----
"klogon" - "Kaspersky Lab" - C:\WINDOWS\system32\klogon.dll
"LBTWlgn" - "Logitech, Inc." - c:\programme\gemeinsame dateien\logishrd\bluetooth\LBTWlgn.dll
"WgaLogon" - "Microsoft Corporation" - C:\WINDOWS\system32\WgaLogon.dll

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----
"mdnsNSP" - "Apple Inc." - C:\Programme\Bonjour\mdnsNSP.dll

===[ Logfile end ]=========================================[ Logfile end ]===
         

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:			
Windows Version:		Windows XP Professional
Windows Information:		Service Pack 3 (build 2600)
Logical Drives Mask:		0x0000001d

Kernel Drivers (total 137):
  0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
  0x806E5000 \WINDOWS\system32\hal.dll
  0xBA5A8000 \WINDOWS\system32\KDCOM.DLL
  0xBA4B8000 \WINDOWS\system32\BOOTVID.dll
  0xBA0A8000 klbg.sys
  0xB9F78000 ACPI.sys
  0xBA5AA000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
  0xB9F67000 pci.sys
  0xBA0B8000 isapnp.sys
  0xBA0C8000 ohci1394.sys
  0xBA0D8000 \WINDOWS\system32\DRIVERS\1394BUS.SYS
  0xBA670000 pciide.sys
  0xBA328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
  0xBA0E8000 MountMgr.sys
  0xB9F48000 ftdisk.sys
  0xBA5AC000 dmload.sys
  0xB9F22000 dmio.sys
  0xBA330000 PartMgr.sys
  0xBA0F8000 VolSnap.sys
  0xB9F0A000 atapi.sys
  0xB9E43000 iaStor.sys
  0xBA108000 jraid.sys
  0xB9E2B000 \WINDOWS\system32\DRIVERS\SCSIPORT.SYS
  0xBA118000 disk.sys
  0xBA128000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
  0xB9E0B000 fltmgr.sys
  0xB9DF9000 sr.sys
  0xBA138000 PxHelp20.sys
  0xB9DE2000 KSecDD.sys
  0xB9DCF000 WudfPf.sys
  0xB9D42000 Ntfs.sys
  0xB9D15000 NDIS.sys
  0xB9C92000 timntr.sys
  0xB9BB7000 tdrpm228.sys
  0xB9B96000 snapman.sys
  0xB9B7C000 Mup.sys
  0xBA5AE000 JGOGO.sys
  0xBA298000 \SystemRoot\system32\DRIVERS\intelppm.sys
  0xB76BF000 \SystemRoot\system32\DRIVERS\nv4_mini.sys
  0xB76AB000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
  0xBA450000 \SystemRoot\system32\DRIVERS\usbuhci.sys
  0xB7687000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
  0xBA458000 \SystemRoot\system32\DRIVERS\usbehci.sys
  0xB765F000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
  0xB8DE0000 \SystemRoot\system32\DRIVERS\imapi.sys
  0xBA460000 \SystemRoot\System32\Drivers\ElbyCDFL.sys
  0xB8DD0000 \SystemRoot\system32\DRIVERS\cdrom.sys
  0xB8DC0000 \SystemRoot\system32\DRIVERS\redbook.sys
  0xB763C000 \SystemRoot\system32\DRIVERS\ks.sys
  0xBA488000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
  0xB7625000 \SystemRoot\system32\DRIVERS\Rtenicxp.sys
  0xB8DB0000 \SystemRoot\system32\DRIVERS\nic1394.sys
  0xBA468000 \SystemRoot\system32\DRIVERS\fdc.sys
  0xB8DA0000 \SystemRoot\system32\DRIVERS\serial.sys
  0xB9A84000 \SystemRoot\system32\DRIVERS\serenum.sys
  0xB7611000 \SystemRoot\system32\DRIVERS\parport.sys
  0xBA62E000 \SystemRoot\system32\DRIVERS\serscan.sys
  0xB8D90000 \SystemRoot\system32\DRIVERS\klim5.sys
  0xBA7DB000 \SystemRoot\system32\DRIVERS\audstub.sys
  0xB8D80000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
  0xB9A7C000 \SystemRoot\system32\DRIVERS\ndistapi.sys
  0xB75FA000 \SystemRoot\system32\DRIVERS\ndiswan.sys
  0xB8D70000 \SystemRoot\system32\DRIVERS\raspppoe.sys
  0xB8D60000 \SystemRoot\system32\DRIVERS\raspptp.sys
  0xBA470000 \SystemRoot\system32\DRIVERS\TDI.SYS
  0xB75E9000 \SystemRoot\system32\DRIVERS\psched.sys
  0xBA2A8000 \SystemRoot\system32\DRIVERS\msgpc.sys
  0xBA478000 \SystemRoot\system32\DRIVERS\ptilink.sys
  0xBA480000 \SystemRoot\system32\DRIVERS\raspti.sys
  0xB75B9000 \SystemRoot\system32\DRIVERS\rdpdr.sys
  0xBA2B8000 \SystemRoot\system32\DRIVERS\termdd.sys
  0xBA490000 \SystemRoot\system32\DRIVERS\kbdclass.sys
  0xBA498000 \SystemRoot\system32\DRIVERS\mouclass.sys
  0xBA630000 \SystemRoot\system32\DRIVERS\swenum.sys
  0xB7533000 \SystemRoot\system32\DRIVERS\update.sys
  0xB9AF0000 \SystemRoot\system32\DRIVERS\mssmbios.sys
  0xBA4A0000 \SystemRoot\system32\DRIVERS\flpydisk.sys
  0xBA2D8000 \SystemRoot\System32\Drivers\NDProxy.SYS
  0xBA218000 \SystemRoot\system32\DRIVERS\usbhub.sys
  0xBA662000 \SystemRoot\system32\DRIVERS\USBD.SYS
  0xB1C5E000 \SystemRoot\system32\drivers\RtkHDAud.sys
  0xB1C3A000 \SystemRoot\system32\drivers\portcls.sys
  0xBA228000 \SystemRoot\system32\drivers\drmk.sys
  0xACBED000 \SystemRoot\system32\DRIVERS\klif.sys
  0xADCB6000 \SystemRoot\system32\DRIVERS\usbccgp.sys
  0xAD5BE000 \SystemRoot\system32\DRIVERS\hidusb.sys
  0xAD52C000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
  0xADCAE000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
  0xAD5B6000 \SystemRoot\system32\DRIVERS\kbdhid.sys
  0xAD5B2000 \SystemRoot\system32\DRIVERS\mouhid.sys
  0xAD51C000 \SystemRoot\system32\DRIVERS\klmouflt.sys
  0xADCA6000 \SystemRoot\system32\DRIVERS\LHidFilt.Sys
  0xAD50C000 \SystemRoot\system32\DRIVERS\WDFLDR.SYS
  0xAC6D5000 \SystemRoot\system32\DRIVERS\Wdf01000.sys
  0xADC9E000 \SystemRoot\system32\DRIVERS\LMouFilt.Sys
  0xAD658000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
  0xABEDB000 \SystemRoot\System32\Drivers\Null.SYS
  0xAD656000 \SystemRoot\System32\Drivers\Beep.SYS
  0xAC419000 \SystemRoot\System32\drivers\vga.sys
  0xAD654000 \SystemRoot\System32\Drivers\mnmdd.SYS
  0xAD652000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
  0xAC411000 \SystemRoot\System32\Drivers\Msfs.SYS
  0xAC409000 \SystemRoot\System32\Drivers\Npfs.SYS
  0xACB45000 \SystemRoot\system32\DRIVERS\rasacd.sys
  0xAB25C000 \??\C:\WINDOWS\system32\drivers\kl1.sys
  0xAB249000 \SystemRoot\system32\DRIVERS\ipsec.sys
  0xAB1F0000 \SystemRoot\system32\DRIVERS\tcpip.sys
  0xAB1C8000 \SystemRoot\system32\DRIVERS\netbt.sys
  0xAB1A2000 \SystemRoot\system32\DRIVERS\ipnat.sys
  0xACB5D000 \SystemRoot\system32\DRIVERS\wanarp.sys
  0xAB180000 \SystemRoot\System32\drivers\afd.sys
  0xACB4D000 \SystemRoot\system32\DRIVERS\netbios.sys
  0xB142D000 \SystemRoot\system32\DRIVERS\arp1394.sys
  0xAB155000 \SystemRoot\system32\DRIVERS\rdbss.sys
  0xAB0E5000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
  0xB141D000 \SystemRoot\System32\Drivers\Fips.SYS
  0xABF0C000 \SystemRoot\System32\Drivers\ElbyCDIO.sys
  0xABE4F000 \SystemRoot\System32\Drivers\Cdfs.SYS
  0xAB01E000 \SystemRoot\System32\Drivers\dump_iaStor.sys
  0xBF800000 \SystemRoot\System32\win32k.sys
  0xB21CA000 \SystemRoot\System32\drivers\Dxapi.sys
  0xABEEC000 \SystemRoot\System32\watchdog.sys
  0xBF000000 \SystemRoot\System32\drivers\dxg.sys
  0xBA6F1000 \SystemRoot\System32\drivers\dxgthk.sys
  0xBF012000 \SystemRoot\System32\nv4_disp.dll
  0xB4A57000 \SystemRoot\system32\DRIVERS\tifsfilt.sys
  0xBFFA0000 \SystemRoot\System32\ATMFD.DLL
  0xAD288000 \SystemRoot\system32\DRIVERS\ndisuio.sys
  0xAA672000 \SystemRoot\system32\DRIVERS\mrxdav.sys
  0xBA5D6000 \SystemRoot\System32\Drivers\ParVdm.SYS
  0xAA502000 \SystemRoot\system32\DRIVERS\srv.sys
  0xAA35D000 \SystemRoot\system32\drivers\wdmaud.sys
  0xBA248000 \SystemRoot\system32\drivers\sysaudio.sys
  0xA9C0C000 \SystemRoot\System32\Drivers\Fastfat.SYS
  0xA8E73000 \SystemRoot\System32\Drivers\HTTP.sys
  0xA7328000 \SystemRoot\system32\drivers\kmixer.sys
  0x7C910000 \WINDOWS\system32\ntdll.dll

Processes (total 75):
       0 System Idle Process
       4 System
    1284 C:\WINDOWS\system32\smss.exe
    1360 csrss.exe
    1384 C:\WINDOWS\system32\winlogon.exe
    1428 C:\WINDOWS\system32\services.exe
    1464 C:\WINDOWS\system32\lsass.exe
    1616 C:\WINDOWS\system32\svchost.exe
    1704 svchost.exe
    1744 C:\WINDOWS\system32\svchost.exe
    1784 C:\WINDOWS\system32\svchost.exe
    1892 svchost.exe
    2012 C:\WINDOWS\system32\spoolsv.exe
     428 svchost.exe
     460 C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
     476 C:\Programme\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
     564 C:\Programme\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
     684 C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
     696 C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
     720 C:\WINDOWS\system32\bgsvcgen.exe
     744 C:\Programme\Bonjour\mDNSResponder.exe
     780 C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe
     964 C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe
    1020 C:\Programme\Java\jre6\bin\jqs.exe
    1136 sqlservr.exe
    1768 C:\WINDOWS\system32\nvsvc32.exe
    2084 C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe
    2628 C:\WINDOWS\explorer.exe
    2800 C:\WINDOWS\system32\svchost.exe
    2816 C:\Programme\TomTom HOME 2\TomTomHOMEService.exe
    2848 C:\BMWgroup\ETKLokal\transbase\tbmux32.exe
    2924 C:\WINDOWS\system32\searchindexer.exe
    3012 C:\Programme\XML2RPC\XML2RPCService.exe
    3320 C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe
    3424 C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe
    3444 C:\Programme\Java\jre6\bin\jusched.exe
    3476 C:\Programme\SHARP\Sharpdesk\SharpTray.exe
    3520 C:\WINDOWS\RTHDCPL.exe
    3608 C:\WINDOWS\system32\rundll32.exe
    3664 C:\Programme\Microsoft IntelliType Pro\itype.exe
    3720 C:\Programme\iTunes\iTunesHelper.exe
    3756 C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    3776 C:\Programme\HP\HP Software Update\hpwuSchd2.exe
    3812 C:\Programme\SHARP\Sharpdesk\FTPServer.exe
    3860 C:\Programme\SlySoft\CloneCD\CloneCDTray.exe
    3872 C:\Programme\Cherry\KeyMan\KeyMan.exe
    3900 C:\Programme\Canon\MyPrinter\BJMYPRT.EXE
    1032 C:\WINDOWS\system32\wbem\wmiapsrv.exe
    1468 C:\Programme\Adobe\Photoshop Elements 6.0\apdproxy.exe
    2740 C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe
    1968 C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe
    2112 C:\Programme\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
    3224 C:\Programme\TomTom HOME 2\TomTomHOMERunner.exe
    3140 C:\Programme\Nokia\Nokia PC Suite 6\PCSuite.exe
    3540 C:\Programme\Nokia\Nokia PC Suite 6\PcSync2.exe
    3536 C:\Programme\Cherry\CDI\cdi.exe
    1344 C:\Programme\PC Connectivity Solution\ServiceLayer.exe
    3676 C:\WINDOWS\system32\ctfmon.exe
     884 C:\Programme\iPod\bin\iPodService.exe
    3316 C:\Programme\SHARP\Sharpdesk\nsapp.exe
    1648 C:\Programme\PC Connectivity Solution\Transports\NclUSBSrv.exe
    4064 C:\Programme\PC Connectivity Solution\Transports\NclRSSrv.exe
    1364 alg.exe
     924 C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe
    2636 C:\Programme\Logitech\SetPoint\SetPoint.exe
    3088 C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    3600 C:\Programme\Windows Desktop Search\WindowsSearch.exe
    4156 C:\Programme\Gemeinsame Dateien\Nokia\MPAPI\MPAPI3s.exe
    5660 C:\Programme\Gemeinsame Dateien\Logishrd\KHAL2\KHALMNPR.exe
    1848 C:\Programme\HP\Digital Imaging\bin\hpqgalry.exe
    5452 C:\WINDOWS\system32\searchprotocolhost.exe
    3312 C:\Dokumente und Einstellungen\Techniker\Desktop\osam.exe
    5568 C:\WINDOWS\system32\HPZipm12.exe
    5372 searchfilterhost.exe
    5692 C:\Dokumente und Einstellungen\Techniker\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00  (NTFS)
\\.\D: --> \\.\PhysicalDrive1 at offset 0x00000000`007e0000  (NTFS)

PhysicalDrive0 Model Number: çS
PhysicalDrive1 Model Number: ST31000340AS, Rev: SD15    

      Size  Device Name          MBR Status
  --------------------------------------------
    149 GB  \\.\PhysicalDrive0   Windows XP MBR code detected
            SHA1: ADFE55CD0C6ED2E00B22375835E4C2736CE9AD11
    931 GB  \\.\PhysicalDrive1   Unknown MBR code
            SHA1: 639AC5CDF8A5CF3245975932C6A4215450A7B98F


Found non-standard or infected MBR.
Enter 'Y' and hit ENTER for more options, or 'N' to exit: 
Options:
  [1] Dump the MBR of a physical disk to file.
  [2] Restore the MBR of a physical disk with a standard boot code.
  [3] Exit.

Enter your choice: 

Done!