Trojaner-Board - Avira hat beim letzten scan eine änderung in der registry gefunden

hi leo,
danke für die schnelle antwort.

den log von avira hab ich leider nicht bzw. finde ihn nicht.

hier die anderen logs:
gmer:

Code:

GMER 2.1.18952 - hxxp://www.gmer.net

Rootkit scan 2013-02-17 00:12:38

Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-1 WDC_WD1002FBYS-02A6B0 rev.03.00C06 931,51GB

Running: 1b4er5c8.exe; Driver: C:\Users\sven\AppData\Local\Temp\kxldypog.sys
 
 

---- User code sections - GMER 2.1 ----
 

.text  C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[1800] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69   0000000077051465 2 bytes [05, 77]

.text  C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe[1800] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155  00000000770514bb 2 bytes [05, 77]

.text  ...                                                                                                                              * 2

.text  C:\Windows\SysWOW64\PnkBstrA.exe[1844] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322                                          00000000727c1a22 2 bytes [7C, 72]

.text  C:\Windows\SysWOW64\PnkBstrA.exe[1844] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496                                          00000000727c1ad0 2 bytes [7C, 72]

.text  C:\Windows\SysWOW64\PnkBstrA.exe[1844] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552                                          00000000727c1b08 2 bytes [7C, 72]

.text  C:\Windows\SysWOW64\PnkBstrA.exe[1844] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730                                          00000000727c1bba 2 bytes [7C, 72]

.text  C:\Windows\SysWOW64\PnkBstrA.exe[1844] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762                                          00000000727c1bda 2 bytes [7C, 72]

.text  C:\Program Files (x86)\Steam\steam.exe[2620] C:\Windows\syswow64\KERNELBASE.dll!HeapCreate                                       00000000763c549c 5 bytes JMP 00000001000f0800

.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[2768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69        0000000077051465 2 bytes [05, 77]

.text  C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin[2768] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155       00000000770514bb 2 bytes [05, 77]

.text  ...                                                                                                                              * 2

.text  C:\Program Files (x86)\Common Files\Steam\SteamService.exe[3824] C:\Windows\syswow64\KERNELBASE.dll!HeapCreate                   00000000763c549c 5 bytes JMP 0000000100080800

.text  C:\Program Files (x86)\Common Files\Steam\SteamService.exe[3824] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69         0000000077051465 2 bytes [05, 77]

.text  C:\Program Files (x86)\Common Files\Steam\SteamService.exe[3824] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155        00000000770514bb 2 bytes [05, 77]

.text  ...                                                                                                                              * 2
 

---- EOF - GMER 2.1 ----

deflogger:

Code:

defogger_disable by jpshortstuff (23.02.10.1)

Log created at 23:50 on 16/02/2013 (sven)
 

Checking for autostart values...

HKCU\~\Run values retrieved.

HKLM\~\Run values retrieved.

HKCU:DAEMON Tools Lite -> Removed
 

Checking for services/drivers...
 
 

-=E.O.F=-

dds:

DDS Logfile:
DDS Logfile:

Code:

DDS (Ver_2012-11-20.01) - NTFS_AMD64 

Internet Explorer: 9.0.8112.16464  BrowserJavaVersion: 10.13.2

Run by sven at 0:15:41 on 2013-02-17

Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.4094.2035 [GMT 1:00]

.

AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Program Files\Sandboxie\SbieSvc.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\SysWOW64\nlssrv32.exe

C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe

C:\Windows\SysWOW64\PnkBstrA.exe

C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler.exe

C:\Program Files (x86)\Google\Update\1.3.21.123\GoogleCrashHandler64.exe

C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files (x86)\Steam\steam.exe

C:\Program Files\Sandboxie\SbieCtrl.exe

C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

C:\Windows\system32\RunDll32.exe

C:\Windows\system32\RunDll32.exe

C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Program Files (x86)\Common Files\Steam\SteamService.exe

C:\Windows\system32\taskhost.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com

mWinlogon: Userinit = userinit.exe

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Search Helper: {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

BHO: Bing Bar BHO: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll

BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

TB: @C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll,-100: {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\6.3.2291.0\npwinext.dll

uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

uRun: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent

uRun: [AdobeBridge] <no file>

mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

mRun: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume

mRun: [HTC Sync Loader] "C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup

mRun: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

StartupFolder: C:\Users\sven\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\sven\AppData\Roaming\Dropbox\bin\Dropbox.exe

StartupFolder: C:\Users\sven\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

StartupFolder: C:\Users\sven\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\TINTEN~1.LNK - C:\Windows\System32\RunDll32.exe

StartupFolder: C:\Users\sven\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\TINTEN~2.LNK - C:\Windows\System32\RunDll32.exe

mPolicies-Explorer: NoActiveDesktop = dword:1

mPolicies-Explorer: NoActiveDesktopChanges = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableUIADesktopToggle = dword:0

DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab

TCP: NameServer = 192.168.1.1

TCP: Interfaces\{754C387D-0287-49FD-97CA-20F9792DA60A} : DHCPNameServer = 192.168.1.1

AppInit_DLLs= c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll

SSODL: WebCheck - <orphaned>

mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome

x64-BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

x64-Run: [AdobeAAMUpdater-1.0] "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

x64-SSODL: WebCheck - <orphaned>

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\1dy86ocn.default\

FF - prefs.js: browser.search.selectedEngine - 

FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

FF - plugin: C:\Users\sven\AppData\Roaming\Mozilla\Firefox\Profiles\1dy86ocn.default\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2}\plugins\npAclmPlugin.dll

FF - plugin: C:\Users\sven\AppData\Roaming\Mozilla\Firefox\Profiles\1dy86ocn.default\extensions\{ab91efd4-6975-4081-8552-1b3922ed79e2}\plugins\npProductDetectPlugin.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll

FF - plugin: C:\Windows\SysWOW64\npDeployJava1.dll

FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

FF - ExtSQL: 2013-02-15 19:18; ffxtlbr@delta.com; C:\Users\sven\AppData\Roaming\Mozilla\Firefox\Profiles\1dy86ocn.default\extensions\ffxtlbr@delta.com

.

============= SERVICES / DRIVERS ===============

.

R1 avkmgr;avkmgr;C:\Windows\System32\drivers\avkmgr.sys [2012-8-31 27760]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:\Windows\System32\drivers\dtsoftbus01.sys [2012-9-2 283200]

R2 AntiVirSchedulerService;Avira Planer;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2012-8-31 86224]

R2 AntiVirService;Avira Echtzeit Scanner;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2012-8-31 110032]

R2 avgntflt;avgntflt;C:\Windows\System32\drivers\avgntflt.sys [2012-8-31 98848]

R2 nlsX86cc;Nalpeiron Licensing Service;C:\Windows\SysWOW64\nlssrv32.exe [2012-1-31 66560]

R2 PassThru Service;Internet Pass-Through Service;C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [2012-4-13 88576]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-2 382824]

R2 TeamViewer8;TeamViewer 8;C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2013-1-1 3467768]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2012-8-31 646248]

R3 SbieDrv;SbieDrv;C:\Program Files\Sandboxie\SbieDrv.sys [2012-12-16 202632]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S3 BEService;BattlEye Service;C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [2013-1-15 49152]

S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\Windows\System32\drivers\ssudbus.sys [2012-10-19 102368]

S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2011-4-12 71168]

S3 HPMo4DE3;Mouse Suite Driver_4DE3 (WDF Version);C:\Windows\System32\drivers\HPMo4DE3.sys [2012-9-1 25088]

S3 HPub4DE3;USB Mouse Low Filter Driver_4DE3 (WDF Version);C:\Windows\System32\drivers\HPub4DE3.sys [2012-9-1 18432]

S3 HTCAND64;HTC Device Driver;C:\Windows\System32\drivers\ANDROIDUSB.sys [2009-11-2 33736]

S3 htcnprot;HTC NDIS Protocol Driver;C:\Windows\System32\drivers\htcnprot.sys [2010-6-25 36928]

S3 ssudmdm;SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.);C:\Windows\System32\drivers\ssudmdm.sys [2012-10-19 203104]

S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.);C:\Windows\System32\drivers\ssudserd.sys [2012-10-19 203104]

S3 StorSvc;Speicherdienst;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]

S3 SwitchBoard;SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2010-11-21 59392]

S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2010-11-21 31232]

.

=============== Created Last 30 ================

.

2013-02-13 15:48:57        996352        ----a-w-        C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll

2013-02-13 15:48:57        768000        ----a-w-        C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll

2013-02-13 11:50:27        5553512        ----a-w-        C:\Windows\System32\ntoskrnl.exe

2013-02-13 11:50:27        3967848        ----a-w-        C:\Windows\SysWow64\ntkrnlpa.exe

2013-02-13 11:50:26        3913064        ----a-w-        C:\Windows\SysWow64\ntoskrnl.exe

2013-02-13 11:50:20        3153408        ----a-w-        C:\Windows\System32\win32k.sys

2013-02-13 11:50:19        7680        ----a-w-        C:\Windows\SysWow64\instnm.exe

2013-02-13 11:50:19        5120        ----a-w-        C:\Windows\SysWow64\wow32.dll

2013-02-13 11:50:19        25600        ----a-w-        C:\Windows\SysWow64\setup16.exe

2013-02-13 11:50:19        215040        ----a-w-        C:\Windows\System32\winsrv.dll

2013-02-13 11:50:19        14336        ----a-w-        C:\Windows\SysWow64\ntvdm64.dll

2013-02-13 11:50:18        2048        ----a-w-        C:\Windows\SysWow64\user.exe

2013-02-13 11:50:16        288088        ----a-w-        C:\Windows\System32\drivers\FWPKCLNT.SYS

2013-02-13 11:50:16        1913192        ----a-w-        C:\Windows\System32\drivers\tcpip.sys

2013-02-07 18:03:20        --------        d-----w-        C:\Users\sven\AppData\Roaming\Buhl Data Service

2013-02-07 18:03:18        --------        d-----w-        C:\Users\sven\AppData\Local\Buhl Data Service

2013-02-07 17:41:41        --------        d-----w-        C:\Users\sven\AppData\Local\Buhl

2013-02-07 17:37:45        --------        d-----w-        C:\Program Files (x86)\Steuer 2012

2013-02-07 17:37:04        --------        d-----w-        C:\ProgramData\Buhl Data Service GmbH

2013-02-03 12:16:17        --------        d-----w-        C:\ProgramData\Bohemia Interactive Studio

.

==================== Find3M  ====================

.

2013-02-09 21:51:32        74096        ----a-w-        C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2013-02-09 21:51:32        697712        ----a-w-        C:\Windows\SysWow64\FlashPlayerApp.exe

2013-02-06 17:35:46        95648        ----a-w-        C:\Windows\SysWow64\WindowsAccessBridge-32.dll

2013-02-06 17:35:45        861088        ----a-w-        C:\Windows\SysWow64\npDeployJava1.dll

2013-02-06 17:35:45        782240        ----a-w-        C:\Windows\SysWow64\deployJava1.dll

2013-01-09 01:19:09        2312704        ----a-w-        C:\Windows\System32\jscript9.dll

2013-01-09 01:12:03        1392128        ----a-w-        C:\Windows\System32\wininet.dll

2013-01-09 01:11:06        1494528        ----a-w-        C:\Windows\System32\inetcpl.cpl

2013-01-09 01:07:51        173056        ----a-w-        C:\Windows\System32\ieUnatt.exe

2013-01-09 01:07:47        599040        ----a-w-        C:\Windows\System32\vbscript.dll

2013-01-09 01:04:42        2382848        ----a-w-        C:\Windows\System32\mshtml.tlb

2013-01-08 22:11:21        1800704        ----a-w-        C:\Windows\SysWow64\jscript9.dll

2013-01-08 22:03:20        1129472        ----a-w-        C:\Windows\SysWow64\wininet.dll

2013-01-08 22:03:12        1427968        ----a-w-        C:\Windows\SysWow64\inetcpl.cpl

2013-01-08 21:59:02        142848        ----a-w-        C:\Windows\SysWow64\ieUnatt.exe

2013-01-08 21:58:29        420864        ----a-w-        C:\Windows\SysWow64\vbscript.dll

2013-01-08 21:56:23        2382848        ----a-w-        C:\Windows\SysWow64\mshtml.tlb

2013-01-04 04:43:21        44032        ----a-w-        C:\Windows\apppatch\acwow64.dll

2012-12-16 17:11:22        46080        ----a-w-        C:\Windows\System32\atmlib.dll

2012-12-16 14:45:03        367616        ----a-w-        C:\Windows\System32\atmfd.dll

2012-12-16 14:13:28        295424        ----a-w-        C:\Windows\SysWow64\atmfd.dll

2012-12-16 14:13:20        34304        ----a-w-        C:\Windows\SysWow64\atmlib.dll

2012-12-07 13:20:16        441856        ----a-w-        C:\Windows\System32\Wpc.dll

2012-12-07 13:15:31        2746368        ----a-w-        C:\Windows\System32\gameux.dll

2012-12-07 12:26:17        308736        ----a-w-        C:\Windows\SysWow64\Wpc.dll

2012-12-07 12:20:43        2576384        ----a-w-        C:\Windows\SysWow64\gameux.dll

2012-12-07 11:20:04        30720        ----a-w-        C:\Windows\System32\usk.rs

2012-12-07 11:20:03        43520        ----a-w-        C:\Windows\System32\csrr.rs

2012-12-07 11:20:03        23552        ----a-w-        C:\Windows\System32\oflc.rs

2012-12-07 11:20:01        45568        ----a-w-        C:\Windows\System32\oflc-nz.rs

2012-12-07 11:20:01        44544        ----a-w-        C:\Windows\System32\pegibbfc.rs

2012-12-07 11:20:01        20480        ----a-w-        C:\Windows\System32\pegi-fi.rs

2012-12-07 11:20:00        20480        ----a-w-        C:\Windows\System32\pegi-pt.rs

2012-12-07 11:19:59        20480        ----a-w-        C:\Windows\System32\pegi.rs

2012-12-07 11:19:58        46592        ----a-w-        C:\Windows\System32\fpb.rs

2012-12-07 11:19:57        40960        ----a-w-        C:\Windows\System32\cob-au.rs

2012-12-07 11:19:57        21504        ----a-w-        C:\Windows\System32\grb.rs

2012-12-07 11:19:57        15360        ----a-w-        C:\Windows\System32\djctq.rs

2012-12-07 11:19:56        55296        ----a-w-        C:\Windows\System32\cero.rs

2012-12-07 11:19:55        51712        ----a-w-        C:\Windows\System32\esrb.rs

2012-11-30 05:45:35        362496        ----a-w-        C:\Windows\System32\wow64win.dll

2012-11-30 05:45:35        243200        ----a-w-        C:\Windows\System32\wow64.dll

2012-11-30 05:45:35        13312        ----a-w-        C:\Windows\System32\wow64cpu.dll

2012-11-30 05:43:12        16384        ----a-w-        C:\Windows\System32\ntvdm64.dll

2012-11-30 05:41:07        424448        ----a-w-        C:\Windows\System32\KernelBase.dll

2012-11-30 04:53:59        274944        ----a-w-        C:\Windows\SysWow64\KernelBase.dll

2012-11-30 03:23:48        338432        ----a-w-        C:\Windows\System32\conhost.exe

2012-11-30 02:38:59        6144        ---ha-w-        C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll

2012-11-30 02:38:59        4608        ---ha-w-        C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll

2012-11-30 02:38:59        3584        ---ha-w-        C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll

2012-11-30 02:38:59        3072        ---ha-w-        C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll

2012-11-29 12:36:59        282296        ----a-w-        C:\Windows\SysWow64\PnkBstrB.xtr

2012-11-29 12:36:59        282296        ----a-w-        C:\Windows\SysWow64\PnkBstrB.exe

2012-11-29 12:35:58        215128        ----a-w-        C:\Windows\SysWow64\PnkBstrB.ex0

2012-11-23 03:13:57        68608        ----a-w-        C:\Windows\System32\taskhost.exe

2012-11-22 05:44:23        800768        ----a-w-        C:\Windows\System32\usp10.dll

2012-11-22 04:45:03        626688        ----a-w-        C:\Windows\SysWow64\usp10.dll

2012-11-20 05:48:49        307200        ----a-w-        C:\Windows\System32\ncrypt.dll

2012-11-20 04:51:09        220160        ----a-w-        C:\Windows\SysWow64\ncrypt.dll

.

============= FINISH:  0:16:06,59 ===============

--- --- ---

--- --- ---

attach:

Code:

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Professional 

Boot Device: \Device\HarddiskVolume3

Install Date: 31.08.2012 21:36:23

System Uptime: 16.02.2013 21:59:36 (3 hours ago)

.

Motherboard: Gigabyte Technology Co., Ltd. |  | GA-MA790X-DS4

Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 5600+ | Socket M2 | 2800/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 931 GiB total, 689,057 GiB free.

D: is CDROM (UDF)

E: is FIXED (NTFS) - 293 GiB total, 292,872 GiB free.

F: is FIXED (NTFS) - 639 GiB total, 214,315 GiB free.

G: is CDROM (CDFS)

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP62: 06.02.2013 18:35:04 - Installed Java 7 Update 13

RP63: 07.02.2013 18:37:28 - Installiert Steuer 2012

RP64: 13.02.2013 16:47:18 - Windows Update

RP65: 15.02.2013 19:27:50 - Removed Delta Chrome Toolbar

.

==== Installed Programs ======================

.

Adobe AIR

Adobe Community Help

Adobe Creative Suite 5 Master Collection

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Media Player

Adobe Photoshop Lightroom 4.1 64-bit

Adobe Reader X (10.1.5) - Deutsch

Apple Application Support

ARMA 2

ARMA 2 Dedicated Server

ARMA 2: Operation Arrowhead

ARMA 2: Operation Arrowhead Beta

ATI Catalyst Install Manager

Avira Free Antivirus

Battlefield: Bad Company 2

BattlEye for OA Uninstall

BattlEye Uninstall

Bing Bar

Bing Bar Platform

Color Efex Pro 4

DAEMON Tools Lite

DayZ Commander

Dropbox

Google Chrome

Google Update Helper

Hotfix for Microsoft .NET Framework 4 Client Profile (KB2461678)

HP Deskjet 3050A J611 series - Grundlegende Software für das Gerät

HP Deskjet 3050A J611 series Hilfe

HP Product Detection

HP Update

HTC BMP USB Driver

HTC Driver Installer

HTC Sync

Java 7 Update 13

Java 7 Update 7 (64-bit)

Java Auto Updater

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Client Profile DEU Language Pack

Microsoft Default Manager

Microsoft Search Enhancement Pack

Microsoft Silverlight

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2005 Redistributable (x64)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

Microsoft_VC80_ATL_x86

Microsoft_VC80_ATL_x86_x64

Microsoft_VC80_CRT_x86

Microsoft_VC80_CRT_x86_x64

Microsoft_VC80_MFC_x86

Microsoft_VC80_MFC_x86_x64

Microsoft_VC80_MFCLOC_x86

Microsoft_VC80_MFCLOC_x86_x64

Microsoft_VC90_ATL_x86

Microsoft_VC90_ATL_x86_x64

Microsoft_VC90_CRT_x86

Microsoft_VC90_CRT_x86_x64

Microsoft_VC90_MFC_x86

Microsoft_VC90_MFC_x86_x64

Mozilla Firefox 18.0.2 (x86 de)

Mozilla Maintenance Service

Mozilla Thunderbird 17.0.2 (x86 de)

MSXML 4.0 SP3 Parser

MSXML 4.0 SP3 Parser (KB2721691)

MSXML 4.0 SP3 Parser (KB2758694)

MSXML 4.0 SP3 Parser (KB973685)

NEF Codec

Notepad++

NVIDIA 3D Vision Controller-Treiber 306.97

NVIDIA 3D Vision Treiber 306.97

NVIDIA Grafiktreiber 306.97

NVIDIA Install Application

NVIDIA PhysX

NVIDIA PhysX-Systemsoftware 9.12.0604

NVIDIA Stereoscopic 3D Driver

NVIDIA Systemsteuerung 306.97

NVIDIA Update 1.10.8

NVIDIA Update Components

OpenOffice.org 3.4.1

PDF Settings CS5

Photomatix Pro version 4.1.3

PremiumSoft Navicat Lite 10.0

Prototype(TM)

PunkBuster Services

QuickTime

Realtek Ethernet Controller Driver

Realtek High Definition Audio Driver

SAMSUNG USB Driver for Mobile Phones

Sandboxie 3.76 (64-bit)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Sharpener Pro 3.0

Silver Efex Pro 2

Six Updater

SNS-HDR Pro v1.4.22

Steam

Steuer 2012

TeamSpeak 3 Client

TeamViewer 8

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

WinRAR 4.20 (64-Bit)

.

==== End Of File ===========================

nochmal vielen dank