Ok, starte den Rechner neu, falls noch nicht erfolgt.
Bitte dann Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.


Downloade Dir danach bitte MBRCheck (by a_d_13) und speichere die Datei auf dem Desktop.

• Doppelklick auf die MBRCheck.exe.
  Vista und Win7 User mit Rechtsklick "als Administrator starten"
• Das Tool braucht nur einige Sekunden.
• Danach solltest du eine MBRCheck_<Datum>_<Uhrzeit>.txt auf dem Desktop finden.

Poste mir bitte den Inhalt des .txt Dokumentes

Hallo Arne,

zuerst GMER:

GMER 1.0.15.15530 - hxxp://www.gmer.net
Rootkit scan 2011-01-03 23:46:26
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 HDS722512VLAT20 rev.V33OA63A
Running: 5skn2bof.exe; Driver: C:\DOKUME~1\Tim\LOKALE~1\Temp\pxtdipow.sys


---- System - GMER 1.0.15 ----

Code            \??\C:\DOKUME~1\Tim\LOKALE~1\Temp\catchme.sys                                         pIofCallDriver

---- Kernel code sections - GMER 1.0.15 ----

?               C:\DOKUME~1\Tim\LOKALE~1\Temp\catchme.sys                                             Das System kann die angegebene Datei nicht finden. !
?               C:\WINDOWS\system32\Drivers\PROCEXP113.SYS                                            Das System kann die angegebene Datei nicht finden. !

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                amon.sys (Amon monitor/Eset )

---- Registry - GMER 1.0.15 ----

Reg             HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System                                 
Reg             HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System@OODEFRAG08.00.00.01WORKSTATION  18931E9A57C22BF721DFF7E61A49492C81DD69F3E2FD748556D72BD810CF34DD49C7EE1BC6293AE57C09D1D08F23349B4C9B9D4F384A073AE069607693F8BE4B902CD1777B3A60BD085A05C1AB45079255A06F6EED7ECDFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C8EDD5E5BE2F6E6678EDD5E5BE2F6E667C038D530D6EB3452A2D97226D213B555726936F3D502E424164D6C38C3D5321A0734EBED72F4FC3AA3EEF8345F5E6EB3D9B378CCEAF5BF95D19AF024C936C1B724739AA487A3F3F52A61FD581895A9BFD5CF9FE3FCD1C1F51B304143F4F0EB116D892FE4BE9901A244DA1F8B6F0966A2BF4D1E00506A888848B0901B50FEDE37CFCF3E950F188240998AF22F645E556617CF2BA20BEB3884CE5756E7CDB1CF305CB29F4DCF33603F72B151D7D78EAD8B7E8DC079B95275974DECCD96C12AF57448B5EFD540520185BDA6D84D126528833DD19BEC4B71ECDF8154F4C9E4DE8CF16CEB8F317F31526D8BD4E80C3C0482B53DFCBF94136C4BF350019058D11C5288C400A11295DE44C5143A28C5E3DEFDFC8E82F23EC8BD45D8417B264D0A7F8C8D73AE0F5EEA40CBCFB06800DD7D3FE02963E63DEC87B4900D805F02E6717C03493CC983B34C8CE0425E859B6DDE4174FC14C8EFD4CF72677F5DDC321852D8007A0936EF60E9CF0146B

---- EOF - GMER 1.0.15 ----
         

OSAM

Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 23:56:04 on 03.01.2011

OS: Windows XP Professional Service Pack 3 (Build 2600)
Default Browser: Microsoft Corporation Internet Explorer 7.00.6000.16827

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Boot Execute]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Session Manager )-----
"BootExecute" - "O&O Software GmbH" - C:\WINDOWS\system32\OODBS.exe

[Common]
-----( %SystemRoot%\Tasks )-----
"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"alsndmgr.cpl" - ? - C:\WINDOWS\system32\alsndmgr.cpl  (File signed by Microsoft | File found, but it contains no detailed information)
"infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS\system32\infocardcpl.cpl
"javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS\system32\javacpl.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"QuickTime" - "Apple Inc." - C:\Programme\QuickTime\QTSystem\QuickTime.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"AMON" (AMON) - "Eset " - C:\WINDOWS\system32\drivers\amon.sys
"Antwort für Verbindungsschicht-Topologieerkennung" (rspndr) - "Microsoft Corporation" - C:\WINDOWS\System32\DRIVERS\rspndr.sys
"ATITool Overclocking Utility" (ATITool) - "W1zzard" - C:\WINDOWS\System32\DRIVERS\ATITool.sys
"catchme" (catchme) - ? - C:\DOKUME~1\Tim\LOKALE~1\Temp\catchme.sys  (File not found)
"Changer" (Changer) - ? - C:\WINDOWS\system32\drivers\Changer.sys  (File not found)
"ENTECH" (ENTECH) - "EnTech Taiwan" - C:\WINDOWS\system32\DRIVERS\ENTECH.sys
"giveio" (giveio) - ? - C:\WINDOWS\System32\giveio.sys  (File found, but it contains no detailed information)
"i2omgmt" (i2omgmt) - ? - C:\WINDOWS\system32\drivers\i2omgmt.sys  (File not found)
"lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS\system32\drivers\lbrtfdc.sys  (File not found)
"mbr" (mbr) - ? - C:\Cofi\mbr.sys  (Hidden registry entry, rootkit activity | File not found)
"nod32drv" (nod32drv) - ? - C:\WINDOWS\system32\drivers\nod32drv.sys  (File found, but it contains no detailed information)
"PalmUSBD" (PalmUSBD) - ? - C:\WINDOWS\System32\drivers\PalmUSBD.sys  (File not found)
"PCIDump" (PCIDump) - ? - C:\WINDOWS\system32\drivers\PCIDump.sys  (File not found)
"PDCOMP" (PDCOMP) - ? - C:\WINDOWS\system32\drivers\PDCOMP.sys  (File not found)
"PDFRAME" (PDFRAME) - ? - C:\WINDOWS\system32\drivers\PDFRAME.sys  (File not found)
"PDRELI" (PDRELI) - ? - C:\WINDOWS\system32\drivers\PDRELI.sys  (File not found)
"PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS\system32\drivers\PDRFRAME.sys  (File not found)
"pxtdipow" (pxtdipow) - ? - C:\DOKUME~1\Tim\LOKALE~1\Temp\pxtdipow.sys  (Hidden registry entry, rootkit activity | File not found)
"speedfan" (speedfan) - "Windows (R) 2000 DDK provider" - C:\WINDOWS\System32\speedfan.sys
"T-DSL SpeedManager Service" (TSMPacket) - ? - C:\WINDOWS\System32\DRIVERS\tsmpkt.sys  (File not found)
"TAP-Win32 Adapter V8" (tap0801) - "The OpenVPN Project" - C:\WINDOWS\System32\DRIVERS\tap0801.sys
"WDICA" (WDICA) - ? - C:\WINDOWS\system32\drivers\WDICA.sys  (File not found)

[Explorer]
-----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )-----
{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
-----( HKLM\Software\Classes\Protocols\Handler )-----
{3D9F03FA-7A94-11D3-BE81-0050048385D1} "Data Page Pluggable Protocol mso-offdap Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
{CD00020A-8B95-11D1-82DB-00C04FB1625D} "Microsoft PKM KnowledgePluggable Class" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung" - ? - deskpan.dll  (File not found)
{1D2680C9-0E2A-469d-B787-065558BC7D43} "Fusion Cache" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} "iTunes" - "Apple Inc." - C:\Programme\iTunes\iTunesMiniPlayer.dll
{DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C} "KbLogiExt Class" - "Logitech, Inc." - D:\Programme\Logitech\SetPoint\kbcplext.dll
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung" - ? -   (File not found | COM-object registry key not found)
{B9B9F083-2B04-452A-8691-83694AC1037B} "LogiExt Class" - "Logitech, Inc." - D:\Programme\Logitech\SetPoint\mcplext.dll
{73B24247-042E-4EF5-ADC2-42F62E6FD654} "MCLiteShellExt Class" - ? - D:\Programme\ICQLite\ICQLiteShell.dll
{32683183-48a0-441b-a342-7c2a440a9478} "Media Band" - ? -   (File not found | COM-object registry key not found)
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office10\msohev.dll
{B089FE88-FB52-11d3-BDF1-0050DA34150D} "NOD32 Context Menu Shell Extension" - ? - C:\Programme\Eset\nodshex.dll  (File found, but it contains no detailed information)
{0006F045-0000-0000-C000-000000000046} "Outlook-Dateisymbolerweiterung" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office10\OLKFSTUB.DLL
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - D:\Programme\RealPlayer\rpshell.dll
{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung" - ? -   (File not found | COM-object registry key not found)
{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{4858E7D9-8E12-45a3-B6A3-1CD128C9D403} "TuneUp Shredder Shell Extension" - "TuneUp Software GmbH" - D:\Programme\TuneUp\SDShelEx-win32.dll
{44440D00-FF19-4AFC-B765-9A0970567D97} "TuneUp Theme Extension" - "TuneUp Software GmbH" - C:\WINDOWS\system32\uxtuneup.dll
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Webordner" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Programme\WinRAR\rarext.dll  (File found, but it contains no detailed information)

[Internet Explorer]
-----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars )-----
{32683183-48a0-441b-a342-7c2a440a9478} "{32683183-48a0-441b-a342-7c2a440a9478}" - ? -   (File not found | COM-object registry key not found)
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)
<binary data> "ITBarLayout" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
DirectAnimation Java Classes "DirectAnimation Java Classes" - ? -   (File not found | COM-object registry key not found) / file://C:\WINDOWS\Java\classes\dajava.cab
{BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} "F-Secure Online Scanner 3.3" - "F-Secure Corporation" - C:\WINDOWS\Downloaded Program Files\fscax.dll / hxxp://support.f-secure.com/ols/fscax.cab
{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} "Java Plug-in 1.5.0_06" - "Sun Microsystems, Inc." - C:\Programme\Java\jre1.5.0_06\bin\npjpi150_06.dll / hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_20" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_20.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} "Java Plug-in 1.6.0_20" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_20.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_20" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_20.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
Microsoft XML Parser for Java "Microsoft XML Parser for Java" - ? -   (File not found | COM-object registry key not found) / file://C:\WINDOWS\Java\classes\xmldso.cab
{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} "{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}" - ? -   (File not found | COM-object registry key not found) / hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab
{E2883E8F-472F-4FB0-9522-AC9BF37916A7} "{E2883E8F-472F-4FB0-9522-AC9BF37916A7}" - ? -   (File not found | COM-object registry key not found) / hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
"ICQ Lite" - "ICQ Ltd." - D:\Programme\ICQLite\ICQLite.exe
"PartyPoker.com" - ? - C:\Programme\PartyGaming\PartyPoker\RunApp.exe
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----
{327C2873-E90D-4c37-AA9D-10AC9BABA46C} "Easy-WebPrint" - ? - C:\Programme\Canon\Easy-WebPrint\Toolband.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{68F9551E-0411-48E4-9AAF-4BC42A6A46BE} "EWPBrowseObject Class" - ? - C:\Programme\Canon\Easy-WebPrint\EWPBrowseLoader.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

[Logon]
-----( %AllUsersProfile%\Startmenü\Programme\Autostart )-----
"ATITool.lnk" - "hxxp://atitool.techpowerup.com" - D:\Programme\ATITool\ATITool.exe  (Shortcut exists | File exists)
"desktop.ini" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini
"Logitech SetPoint.lnk" - "Logitech, Inc." - D:\Programme\Logitech\SetPoint\SetPoint.exe  (Shortcut exists | File exists)
-----( %UserProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\Tim\Startmenü\Programme\Autostart\desktop.ini
"SpeedFan.lnk" - "Almico Software (www.almico.com)" - D:\Programme\SpeedFan\speedfan.exe  (Shortcut exists | File exists)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
"ATIPTA" - "ATI Technologies, Inc." - "C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe"
"nod32kui" - "Eset " - "C:\Programme\Eset\nod32kui.exe" /WAITSERVICE
"QuickTime Task" - "Apple Inc." - "C:\Programme\QuickTime\QTTask.exe" -atboottime
"SSBkgdUpdate" - "Nuance Communications, Inc." - "C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Programme\Java\jre1.5.0_06\bin\jusched.exe"

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
"Apple Mobile Device" (Apple Mobile Device) - "Apple Inc." - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
"ASP.NET State Service" (aspnet_state) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
"ATI Smart" (ATI Smart) - ? - C:\WINDOWS\system32\ati2sgag.exe
"Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"InstallDriver Table Manager" (IDriverT) - "Macrovision Corporation" - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
"Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe
"Logitech Bluetooth Service" (LBTServ) - "Logitech, Inc." - C:\Programme\Gemeinsame Dateien\Logishrd\Bluetooth\LBTServ.exe
"NOD32 Kernel Service" (NOD32krn) - "Eset " - C:\Programme\Eset\nod32krn.exe
"O&O Defrag" (O&O Defrag) - "O&O Software GmbH" - C:\WINDOWS\system32\oodag.exe
"PnkBstrA" (PnkBstrA) - ? - C:\WINDOWS\system32\PnkBstrA.exe  (File found, but it contains no detailed information)
"PnkBstrB" (PnkBstrB) - ? - C:\WINDOWS\system32\PnkBstrB.exe  (File found, but it contains no detailed information)
"ServiceLayer" (ServiceLayer) - "Nokia" - C:\Programme\PC Connectivity Solution\ServiceLayer.exe
"TuneUp Designerweiterung" (UxTuneUp) - "TuneUp Software GmbH" - C:\WINDOWS\System32\uxtuneup.dll
"Windows CardSpace" (idsvc) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

[Winlogon]
-----( HKCU\Control Panel\IOProcs )-----
"MVB" - ? - mvfs32.dll  (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )-----
"LBTWlgn" - "Logitech, Inc." - c:\programme\gemeinsame dateien\logishrd\bluetooth\LBTWlgn.dll

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----
"mdnsNSP" - "Apple Inc." - C:\Programme\Bonjour\mdnsNSP.dll
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries )-----
"NOD32" - "Eset " - C:\WINDOWS\system32\imon.dll

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru
         

MBRCheck

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:			
Windows Version:		Windows XP Professional
Windows Information:		Service Pack 3 (build 2600)
Logical Drives Mask:		0x0000003c

Kernel Drivers (total 131):
  0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
  0x806D0000 \WINDOWS\system32\hal.dll
  0xF7ADC000 \WINDOWS\system32\KDCOM.DLL
  0xF79EC000 \WINDOWS\system32\BOOTVID.dll
  0xF74AC000 ACPI.sys
  0xF7ADE000 \WINDOWS\System32\DRIVERS\WMILIB.SYS
  0xF749B000 pci.sys
  0xF75DC000 isapnp.sys
  0xF7AE0000 aliide.sys
  0xF785C000 \WINDOWS\System32\DRIVERS\PCIIDEX.SYS
  0xF75EC000 MountMgr.sys
  0xF747C000 ftdisk.sys
  0xF7AE2000 dmload.sys
  0xF7456000 dmio.sys
  0xF7864000 PartMgr.sys
  0xF75FC000 VolSnap.sys
  0xF743E000 atapi.sys
  0xF760C000 disk.sys
  0xF761C000 \WINDOWS\System32\DRIVERS\CLASSPNP.SYS
  0xF741E000 fltmgr.sys
  0xF740C000 sr.sys
  0xF73F5000 KSecDD.sys
  0xF73E2000 WudfPf.sys
  0xF7355000 Ntfs.sys
  0xF7328000 NDIS.sys
  0xF762C000 agpkx.sys
  0xF7BA4000 speedfan.sys
  0xF730E000 Mup.sys
  0xF7BA5000 giveio.sys
  0xF779C000 \SystemRoot\system32\DRIVERS\ATITool.sys
  0xF77AC000 \SystemRoot\system32\DRIVERS\AmdK8.sys
  0xF70B2000 \SystemRoot\system32\DRIVERS\ati2mtag.sys
  0xF709E000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
  0xF708A000 \SystemRoot\System32\DRIVERS\parport.sys
  0xF7A98000 \SystemRoot\System32\DRIVERS\gameenum.sys
  0xF77BC000 \SystemRoot\System32\DRIVERS\i8042prt.sys
  0xF7A9C000 \SystemRoot\system32\DRIVERS\L8042Kbd.sys
  0xF78B4000 \SystemRoot\System32\DRIVERS\kbdclass.sys
  0xF77CC000 \SystemRoot\System32\DRIVERS\serial.sys
  0xF7AA0000 \SystemRoot\System32\DRIVERS\serenum.sys
  0xF6CB5000 \SystemRoot\system32\drivers\ALCXWDM.SYS
  0xF6C91000 \SystemRoot\system32\drivers\portcls.sys
  0xF77DC000 \SystemRoot\system32\drivers\drmk.sys
  0xF6C6E000 \SystemRoot\system32\drivers\ks.sys
  0xF77EC000 \SystemRoot\System32\DRIVERS\imapi.sys
  0xF77FC000 \SystemRoot\System32\DRIVERS\cdrom.sys
  0xF780C000 \SystemRoot\System32\DRIVERS\redbook.sys
  0xF78C4000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys
  0xF78CC000 \SystemRoot\System32\DRIVERS\usbohci.sys
  0xF6C4A000 \SystemRoot\System32\DRIVERS\USBPORT.SYS
  0xF78D4000 \SystemRoot\System32\DRIVERS\usbehci.sys
  0xF7CC7000 \SystemRoot\System32\DRIVERS\audstub.sys
  0xF78DC000 \SystemRoot\System32\DRIVERS\rasirda.sys
  0xF78E4000 \SystemRoot\System32\DRIVERS\TDI.SYS
  0xF781C000 \SystemRoot\System32\DRIVERS\rasl2tp.sys
  0xF7AB0000 \SystemRoot\System32\DRIVERS\ndistapi.sys
  0xF6C17000 \SystemRoot\System32\DRIVERS\ndiswan.sys
  0xF782C000 \SystemRoot\System32\DRIVERS\raspppoe.sys
  0xF783C000 \SystemRoot\System32\DRIVERS\raspptp.sys
  0xF6C06000 \SystemRoot\System32\DRIVERS\psched.sys
  0xF784C000 \SystemRoot\System32\DRIVERS\msgpc.sys
  0xF78F4000 \SystemRoot\System32\DRIVERS\ptilink.sys
  0xF78FC000 \SystemRoot\System32\DRIVERS\raspti.sys
  0xF6B0E000 \SystemRoot\System32\DRIVERS\rdpdr.sys
  0xF767C000 \SystemRoot\System32\DRIVERS\termdd.sys
  0xF7904000 \SystemRoot\System32\DRIVERS\mouclass.sys
  0xF7AF2000 \SystemRoot\System32\DRIVERS\swenum.sys
  0xF6AB0000 \SystemRoot\System32\DRIVERS\update.sys
  0xF7AD4000 \SystemRoot\System32\DRIVERS\mssmbios.sys
  0xF768C000 \SystemRoot\System32\DRIVERS\usbhub.sys
  0xF7AFA000 \SystemRoot\System32\DRIVERS\USBD.SYS
  0xF769C000 \SystemRoot\System32\Drivers\NDProxy.SYS
  0xF7B02000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
  0xF7C1E000 \SystemRoot\System32\Drivers\Null.SYS
  0xF7B04000 \SystemRoot\System32\Drivers\Beep.SYS
  0xF7914000 \SystemRoot\System32\drivers\vga.sys
  0xF7B06000 \SystemRoot\System32\Drivers\mnmdd.SYS
  0xF7B08000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
  0xF791C000 \SystemRoot\System32\Drivers\Msfs.SYS
  0xF7924000 \SystemRoot\System32\Drivers\Npfs.SYS
  0xF7A84000 \SystemRoot\System32\DRIVERS\rasacd.sys
  0xAAFCB000 \SystemRoot\System32\DRIVERS\ipsec.sys
  0xAAF72000 \SystemRoot\System32\DRIVERS\tcpip.sys
  0xAAF4A000 \SystemRoot\System32\DRIVERS\netbt.sys
  0xF7A8C000 \SystemRoot\System32\drivers\ws2ifsl.sys
  0xAAF00000 \SystemRoot\System32\drivers\afd.sys
  0xF76CC000 \SystemRoot\System32\DRIVERS\netbios.sys
  0xAAED5000 \SystemRoot\System32\DRIVERS\rdbss.sys
  0xF7B0A000 \SystemRoot\system32\drivers\nod32drv.sys
  0xAAE65000 \SystemRoot\System32\DRIVERS\mrxsmb.sys
  0xF76EC000 \SystemRoot\System32\Drivers\Fips.SYS
  0xAAE3F000 \SystemRoot\System32\DRIVERS\ipnat.sys
  0xF76FC000 \SystemRoot\System32\DRIVERS\wanarp.sys
  0xF7934000 \SystemRoot\System32\Drivers\LUsbFilt.Sys
  0xF772C000 \SystemRoot\System32\Drivers\WDFLDR.SYS
  0xAADA6000 \SystemRoot\system32\DRIVERS\Wdf01000.sys
  0xF6BDE000 \SystemRoot\system32\DRIVERS\hidusb.sys
  0xF773C000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
  0xF793C000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
  0xF7944000 \SystemRoot\system32\DRIVERS\LHidFilt.Sys
  0xF7AC0000 \SystemRoot\System32\DRIVERS\mouhid.sys
  0xF794C000 \SystemRoot\system32\DRIVERS\LMouFilt.Sys
  0xF774C000 \SystemRoot\System32\Drivers\Cdfs.SYS
  0xAACEE000 \SystemRoot\System32\Drivers\dump_atapi.sys
  0xF7B10000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
  0xBF800000 \SystemRoot\System32\win32k.sys
  0xF6AA4000 \SystemRoot\System32\drivers\Dxapi.sys
  0xF7954000 \SystemRoot\System32\watchdog.sys
  0xBF9C3000 \SystemRoot\System32\drivers\dxg.sys
  0xF7CB2000 \SystemRoot\System32\drivers\dxgthk.sys
  0xBF9D5000 \SystemRoot\System32\ati2dvag.dll
  0xBFA19000 \SystemRoot\System32\ati2cqag.dll
  0xBFA6E000 \SystemRoot\System32\atikvmag.dll
  0xBFABA000 \SystemRoot\System32\ati3duag.dll
  0xBFD6D000 \SystemRoot\System32\ativvaxx.dll
  0xBFFA0000 \SystemRoot\System32\ATMFD.DLL
  0xA8948000 \SystemRoot\System32\DRIVERS\irda.sys
  0xA89D2000 \SystemRoot\System32\DRIVERS\ndisuio.sys
  0xAAD06000 \SystemRoot\system32\DRIVERS\rspndr.sys
  0xA8623000 \SystemRoot\System32\DRIVERS\mrxdav.sys
  0xF7B8A000 \SystemRoot\System32\Drivers\ParVdm.SYS
  0xA8580000 \SystemRoot\system32\drivers\amon.sys
  0xA84A3000 \SystemRoot\system32\drivers\wdmaud.sys
  0xA86E0000 \SystemRoot\system32\drivers\sysaudio.sys
  0xA83FD000 \SystemRoot\System32\DRIVERS\secdrv.sys
  0xA7EEA000 \SystemRoot\System32\Drivers\HTTP.sys
  0xF799C000 \??\C:\DOKUME~1\Tim\LOKALE~1\Temp\catchme.sys
  0xF7B48000 \??\C:\WINDOWS\system32\Drivers\PROCEXP113.SYS
  0xA7A99000 \??\C:\DOKUME~1\Tim\LOKALE~1\Temp\pxtdipow.sys
  0xA7D9F000 \SystemRoot\system32\DRIVERS\ULILAN51.SYS
  0x7C910000 \WINDOWS\system32\ntdll.dll

Processes (total 38):
       0 System Idle Process
       4 System
     588 C:\WINDOWS\system32\smss.exe
     668 csrss.exe
     700 C:\WINDOWS\system32\winlogon.exe
     744 C:\WINDOWS\system32\services.exe
     756 C:\WINDOWS\system32\lsass.exe
     916 C:\WINDOWS\system32\ati2evxx.exe
     928 C:\WINDOWS\system32\svchost.exe
    1020 svchost.exe
    1120 C:\WINDOWS\system32\svchost.exe
    1160 C:\WINDOWS\system32\svchost.exe
    1228 svchost.exe
    1424 svchost.exe
    1564 C:\WINDOWS\system32\spoolsv.exe
    1680 C:\WINDOWS\system32\ati2evxx.exe
    1956 svchost.exe
    2012 C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
     432 C:\Programme\Java\jre6\bin\jqs.exe
     612 C:\WINDOWS\system32\oodag.exe
     812 C:\WINDOWS\system32\PnkBstrA.exe
     960 C:\WINDOWS\system32\PnkBstrB.exe
    1152 C:\WINDOWS\system32\svchost.exe
    1072 C:\WINDOWS\system32\wbem\wmiapsrv.exe
    1240 alg.exe
    2468 C:\WINDOWS\soundman.exe
    2476 C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
    2836 D:\Programme\ATITool\ATITool.exe
    2856 D:\Programme\Logitech\SetPoint\SetPoint.exe
    2864 D:\Programme\SpeedFan\speedfan.exe
    2948 C:\Programme\Gemeinsame Dateien\Logishrd\KHAL2\KHALMNPR.exe
     852 C:\WINDOWS\system32\ctfmon.exe
    1660 C:\WINDOWS\system32\svchost.exe
    2224 C:\WINDOWS\explorer.exe
    1180 C:\Programme\Eset\nod32krn.exe
    2488 C:\Programme\Eset\nod32kui.exe
     188 D:\Programme\Firefox\firefox.exe
    1340 C:\Dokumente und Einstellungen\Tim\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00  (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000004`57ec3600  (NTFS)

PhysicalDrive0 Model Number: HDS722512VLAT20, Rev: V33OA63A

      Size  Device Name          MBR Status
  --------------------------------------------
    115 GB  \\.\PhysicalDrive0   Windows XP MBR code detected
            SHA1: ADFE55CD0C6ED2E00B22375835E4C2736CE9AD11


Done!