Trojaner-Board - Vista 64bit immer langsamer

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Vista 64bit immer langsamer (https://www.trojaner-board.de/70517-vista-64bit-immer-langsamer.html)

Vista 64bit immer langsamer

Hi my Vista 64bit System wird nach einigerzeit immer sehr langsam.
Hochlauf, Progamme und Firefox brauchen ewig bis sie gestarten werden
Poste mal HyJackThis logfile.
Kann da bitte mal jemand drüberschauen.
Gruß Cologne72

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:09:45, on 09.01.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\hp\support\hpsysdrv.exe
C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe
C:\hp\kbd\kbd.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files (x86)\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &AOL Toolbar-Suche - C:\ProgramData\AOL\ieToolbar\resources\de-DE\local\search.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll
O13 - Gopher Prefix:
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (X86)\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8341 bytes

vorher hat es sich um den rechner meiner tochter gehandelt, jetzt geht es um meinen rechner und für VISTA 64bit gibt es nicht soviel hilfe wie für XP.
aber sehr aufmecksam:dummguck:
habe das gefühl das es vom explorer kommt, obwohl ich den nicht nutze.

achso ok
aber arbeite mal das ab, dann wird sich jemand anderes danach um dich kümmern :)
http://www.trojaner-board.de/69886-a...-beachten.html

das ist der ADAWARE scan der hat da ein paar cockies gefunden???

Ad-Aware Build
Log File Created on: 2009-02-28 16:53:52
Using Definitions File: C:\ProgramData\Lavasoft\Ad-Aware\core.aawdef

OS: Microsoft Windows Vista Service Pack 1 (Build 6001)

Ad-Aware Settings
===========================
Skipping files larger than 1048576 kB
Ignoring infections with lower TAI than: 3

Infections Detected: 1
Infections Ignored: 0

End of Scan Section
===========================

Cleaned Infections
===========================
MRU Path: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Recent Count: 7, Belonging to MRU Object

End of Cleaned Infection

ccleaner konnte insta. werden und konnte auch damit arbeiten.
malware byts konnte ich instal. abeer funktioniert nicht.

oh man Vista 64 bit :headbang:

jep am liebsten würd ich downgraden :kloppen: aber dann nützt mir der arbeitzspeicher auch nichts.
sch... Vista 64bit:aufsmaul:

hier noch die liste instalierter software

7-Zip 4.57
Ad-Aware
Adobe Flash Player 10 Plugin
Adobe Flash Player ActiveX
Adobe Reader 8.1.3 - Deutsch
AnyDVD
AOL Toolbar 5.0
Avira AntiVir Personal - Free Antivirus
Call of Duty(R) - World at War(TM)
Call of Duty(R) - World at War(TM) 1.1 Patch
Call of Duty(R) - World at War(TM) 1.2 Patch
Call of Duty(R) 4 - Modern Warfare(TM)
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
Catalyst Control Center - Branding
CCleaner (remove only)
Compatibility Pack für 2007 Office System
CrissCross 8.40
CyberLink DVD Suite Deluxe
CyberLink PowerDirector
DVD Shrink 3.2 deutsch
EVEREST Ultimate Edition v4.60
Fallout 3
Far Cry 2
FIFA 09
GSC 2.00
Half-Life 2: Deathmatch
Half-Life(R) 2
Hardware Diagnose Tools
Haufe iDesk-Browser
Haufe iDesk-Service
Hewlett-Packard Active Check for Health Check
Hewlett-Packard Asset Agent for Health Check
HijackThis 2.0.2
HP Active Support Library
HP Customer Experience Enhancements
HP Customer Feedback
HP Easy Setup - Frontend
HP Picasso Media Center Add-In
hp print screen utility
HP Total Care Advisor
HP Update
Java(TM) SE Runtime Environment 6 Update 1
LabelPrint
Lexware Info Service
LightScribe System Software 1.12.37.1
Logitech SetPoint
Microsoft Games for Windows - LIVE Redistributable
Microsoft Office PowerPoint Viewer 2007 (German)
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Mozilla Firefox (3.0.6)
MSXML 4.0 SP2 (KB954430)
muvee autoProducer 6.1
My HP Games
Need for Speed™ Undercover
Nero 7 Ultra Edition
neroxml
NetCologne Service-Zugang deinstallieren
OpenOffice.org 3.0
Optimierte Multimedia-Tastatur-Lösung
Power2Go
PunkBuster Services
Python 2.5
Realtek High Definition Audio Driver
Steam(TM)
Steuer 2008
Steuer Hilfesammlung
Streamripper (Remove only)
TeamSpeak 2 RC2
Winamp
Windows Live Anmelde-Assistent
Windows Live installer
Windows Live Messenger
Windows Media Player Firefox Plugin
World of Warcraft FREE Trial
XviD MPEG-4 Codec

Welche Fehlermeldung kommt bei Malwarebytes? Die kostenlose Version sollte eigentlich unter Vista64 laufen.

lg myrtille

es kommt keine Fehlermeldung.
Programm installiert sich aber lässt sich nicht öffnen.
es erscheint auch kein Desktop Zeichen.
der instalationsordner ist leer
Gruß cologne72

:headbang::confused:

Hi,

hast du versucht es per Rechtsklick und dannn per "als administrator ausführen" zu starten?

Das Programm ist eigentlich in der freien Version Vista64 kompatibel. Wäre auch das erste mal, dass ich erlebe, dass man es nicht installieren kann.

Auf den ersten Blick sieht man nichts, was auf Malware hinweist. Allerdings sind die meisten Programme noch nicht auf 64bit abgestimmt.

DrWeb ist eines der Programme, die 64bit kompatibel wären:
Cureit Dr.Web
http://saved.im/mzy5nda0awpn/top_logo_en2.jpg

Downloade Dr.Web CureIt!
Speichere es auf deinem Desktop.
Entpacke es in einen eigenen Ordner.
Lies nun zuerst die deutsche Anleitung und drucke sie dir aus.

Lass alle Malware in den Quarantaene Ordner verschieben.
Ignoriere eventuelle Warnungen seitens deines AV Programms, du kannst auch offline gehen und -> dann dein AV Programm während des Scannens mit Dr.Web CureIt! abstellen.
Vergiss bitte nicht, dein AV Programm nach dem Scan wieder anzustellen.

Speichere das Logfile - siehe Anleitung - und poste es.

Allerdings würde ich die Ursache eher woanders vermuten.

lg myrtille

Code:

ich weiß langsam nicht mehr weiter, system ist wieder total langsam,

bisher hab ich es halbwegs mit AdAware hinbekommen aber der funktioniert nicht mehr da kommt nur diese fehlermeldung:
 

System error: 1814 has occurred. description: could not login to service.

are you running this application as another user?

application terminates.
 

hjt ging noch ccleaner funktioniert auch nicht mehr!:(:(:(

danke für eure bisherige hilfe
 
 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 12:09:45, on 09.01.2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Normal
 

Running processes:

C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

C:\hp\support\hpsysdrv.exe

C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe

C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe

C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe

C:\Program Files\Logitech\GamePanel Software\Applets\LCDMedia.exe

C:\hp\kbd\kbd.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe
 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=de_de&c=83&bd=Pavilion&pf=cndt

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 

F2 - REG:system.ini: UserInit=userinit.exe

O1 - Hosts: ::1 localhost

O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll

O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files (x86)\AOL\AOL Toolbar 5.0\aoltb.dll

O4 - HKLM\..\Run: [hpsysdrv] c:\hp\support\hpsysdrv.exe

O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KbdStub.EXE

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"

O4 - HKLM\..\Run: [HP Software Update] c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files (x86)\Windows Live\Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe

O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')

O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')

O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

O8 - Extra context menu item: &AOL Toolbar-Suche - C:\ProgramData\AOL\ieToolbar\resources\de-DE\local\search.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files (x86)\Java\jre1.6.0_01\bin\ssv.dll

O13 - Gopher Prefix: 

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Ati External Event Utility - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)

O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)

O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files (x86)\HP Games\My HP Game Console\GameConsoleService.exe

O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (X86)\Intel\Intel Matrix Storage Manager\Iaantmon.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
 

--

End of file - 8341 bytes

Code:

CClaener-21-03-09 

REINIGUNG komplett - (4.619 Sek)

------------------------------------------------------------------------------------------

67,2MB entfernt.

------------------------------------------------------------------------------------------
 

Details der gelöschten Dateien

------------------------------------------------------------------------------------------

C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1024.db 24 Byte

C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db 1,00MB

C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db 24 Byte

C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db 1,00MB

C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db 3,97KB

C:\Users\Frank\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db 24 Byte

C:\Users\Frank\AppData\Local\Temp\RarSFX1\16cea61b 75,00KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\207ceb58 0,36MB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\25267f4e 46,50KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\259ba30a 0,10MB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\31528b1f 0,12MB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\44ed12b4 25,55KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\4a576ebd 15,39KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\60c03ec1 0,11MB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\6c101c33 0,13MB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\6c142de8 94,94KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\6e0baa70 68,50KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\852dd620 75,67KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\8ec1d985 85,99KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\9828817d 60,69KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\982b8cf8 15,21KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\9dfdefd0 7,34MB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\b09d9935 0,11MB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\b795626e 14,67KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\be-cureit.dwl 11,18KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\bg-cureit.dwl 11,50KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\c4d58923 90,29KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\c7623b10 49,02KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\cn-cureit.dwl 8,60KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\cs-cureit.dwl 10,63KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\d29f7f12 41,40KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\dcc393da 71,74KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\de-cureit.dwl 11,22KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\dwebio16.dll 25,06KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\dwebio32.dll 24,00KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\el-cureit.dwl 13,64KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\en-drwebgui.chm 0,13MB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\eo-cureit.dwl 10,81KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\es-cureit.dwl 10,68KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\et-cureit.dwl 10,25KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\f4088e5a 78,06KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\fr-cureit.dwl 11,61KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\hu-cureit.dwl 11,17KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\it-cureit.dwl 10,43KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\ja-cureit.dwl 11,42KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\ko-cureit.dwl 10,54KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\lt-cureit.dwl 10,57KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\lv-cureit.dwl 10,92KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\nl-cureit.dwl 10,41KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\no-cureit.dwl 9,37KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\pl-cureit.dwl 11,42KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\pt-cureit.dwl 10,92KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\ru-cureit.dwl 11,38KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\ru-drwebgui.chm 0,15MB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\setup.dll 3,52MB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\setup.key 1,22KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\setup_me.ini 1,15KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\setup_xp.ini 1,18KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\sk-cureit.dwl 10,88KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\tr-cureit.dwl 10,28KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\uk-cureit.dwl 11,29KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\uz-cureit.dwl 11,59KB

C:\Users\Frank\AppData\Local\Temp\RarSFX1\zh-cureit.dwl 9,22KB

Entfernte Cookies: trojaner-board.de

Entfernte Cookies: google.de

C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\fba3ob16.default\downloads.sqlite 2,00KB

Firefox/Mozilla Temporärer Internet Cache (432 Dateien) 51,9MB

------------------------------------------------------------------------------------------

Code:

Logfile created: 21.03.2009 12:30:2

Lavasoft Ad-Aware version: 8.0.3

Extended engine version: 8.1

User performing scan: Frank
 

*********************** Definitions database information ***********************

Lavasoft definition file: 144.0

Extended engine definition file: 8.1
 

******************************** Scan results: *********************************

Scan profile name: Vollständiger Scan  (ID: full)

Objects scanned: 230916

Objects detected: 8
 
 

Type              Detected

==========================

Processes.......:        0

Registry entries:        0

Hostfile entries:        0

Files...........:        0

Folders.........:        0

LSPs............:        0

Cookies.........:        8

Browser hijacks.:        0

MRU objects.....:        0
 
 
 

Removed items:

Description: *atdmt* Family Name: Cookies Clean status: Success Item ID: 408910 Family ID: 0

Description: *bs.serving-sys* Family Name: Cookies Clean status: Success Item ID: 408902 Family ID: 0

Description: *serving-sys* Family Name: Cookies Clean status: Success Item ID: 409130 Family ID: 0

Description: *doubleclick* Family Name: Cookies Clean status: Success Item ID: 408875 Family ID: 0

Description: *ivwbox* Family Name: Cookies Clean status: Success Item ID: 409247 Family ID: 0

Description: *weborama* Family Name: Cookies Clean status: Success Item ID: 408955 Family ID: 0

Description: *.webmasterplan* Family Name: Cookies Clean status: Success Item ID: 409180 Family ID: 0

Description: *etracker* Family Name: Cookies Clean status: Success Item ID: 409002 Family ID: 0
 

Scan and cleaning complete: Finished correctly after 12732 seconds
 

*********************************** Settings ***********************************
 

Scan profile:

ID: full, enabled:1, value: Vollständiger Scan

  ID: scancriticalareas, enabled:1, value: true

  ID: scanrunningapps, enabled:1, value: true

  ID: scanregistry, enabled:1, value: true

  ID: scanlsp, enabled:1, value: true

  ID: scanads, enabled:1, value: true

  ID: scanhostsfile, enabled:1, value: true

  ID: scanmru, enabled:1, value: true

  ID: scanbrowserhijacks, enabled:1, value: true

  ID: scantrackingcookies, enabled:1, value: true

    ID: closebrowsers, enabled:1, value: false

  ID: folderstoscan, enabled:1, value: C:\,D:\

  ID: scanrootkits, enabled:1, value: true

  ID: usespywareheuristics, enabled:1, value: true

  ID: extendedengine, enabled:0, value: true

    ID: useheuristics, enabled:0, value: true

      ID: heuristicslevel, enabled:0, value: mild, domain: medium,mild,strict

  ID: filescanningoptions, enabled:1

    ID: archives, enabled:1, value: true

    ID: onlyexecutables, enabled:1, value: false

    ID: skiplargerthan, enabled:1, value: 20480
 

Scan global:

ID: global, enabled:1

  ID: addtocontextmenu, enabled:1, value: true

  ID: playsoundoninfection, enabled:1, value: false

    ID: soundfile, enabled:0, value: *to be filled in automatically*\alert.wav
 

Scheduled scan settings:

<Empty>
 

Update settings:

ID: updates, enabled:1

  ID: launchthreatworksafterscan, enabled:1, value: normal, domain: normal,off,silently

  ID: displaystatus, enabled:1, value: false

  ID: deffiles, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall

  ID: autodetectproxy, enabled:1, value: false

  ID: useautoconfigscript, enabled:1, value: false

    ID: autoconfigurl, enabled:0, value: 

  ID: useproxy, enabled:1, value: false

    ID: proxyserver, enabled:0, value: 

  ID: softwareupdates, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall

  ID: licenseandinfo, enabled:1, value: downloadandinstall, domain: dontcheck,downloadandinstall

  ID: schedules, enabled:1, value: true

    ID: updatedaily, enabled:1, value: Daily

      ID: time, enabled:1, value: Sat Mar 21 12:09:00 2009

      ID: frequency, enabled:1, value: daily, domain: daily,monthly,once,systemstart,weekly

      ID: weekdays, enabled:1

        ID: monday, enabled:1, value: false

        ID: tuesday, enabled:1, value: false

        ID: wednesday, enabled:1, value: false

        ID: thursday, enabled:1, value: false

        ID: friday, enabled:1, value: false

        ID: saturday, enabled:1, value: false

        ID: sunday, enabled:1, value: false

      ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31

      ID: scanprofile, enabled:1, value: 

      ID: auto_deal_with_infections, enabled:1, value: false

    ID: updateweekly, enabled:1, value: Weekly

      ID: time, enabled:1, value: Sat Mar 21 12:09:00 2009

      ID: frequency, enabled:1, value: weekly, domain: daily,monthly,once,systemstart,weekly

      ID: weekdays, enabled:1

        ID: monday, enabled:1, value: true

        ID: tuesday, enabled:1, value: false

        ID: wednesday, enabled:1, value: false

        ID: thursday, enabled:1, value: false

        ID: friday, enabled:1, value: false

        ID: saturday, enabled:1, value: true

        ID: sunday, enabled:1, value: false

      ID: monthly, enabled:1, value: 1, minvalue: 1, maxvalue: 31

      ID: scanprofile, enabled:1, value: 

      ID: auto_deal_with_infections, enabled:1, value: false
 

Appearance settings:

ID: appearance, enabled:1

  ID: skin, enabled:1, value: default.egl, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Resource

  ID: showtrayicon, enabled:1, value: true

  ID: language, enabled:1, value: de, reglocation: HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Ad-Aware\Language
 

Realtime protection settings:

ID: realtime, enabled:1

  ID: processprotection, enabled:1, value: true

  ID: registryprotection, enabled:0, value: true

  ID: networkprotection, enabled:0, value: true

  ID: loadatstartup, enabled:1, value: true

  ID: usespywareheuristics, enabled:0, value: true

  ID: extendedengine, enabled:0, value: true

    ID: useheuristics, enabled:0, value: true

      ID: heuristicslevel, enabled:0, value: strict, domain: medium,mild,strict

  ID: infomessages, enabled:1, value: onlyimportant, domain: display,dontnotify,onlyimportant
 
 

****************************** System information ******************************

Computer name: FRANK-PC

Processor name: Intel(R) Core(TM)2 Quad CPU    Q6600  @ 2.40GHz

Processor identifier: Intel64 Family 6 Model 15 Stepping 11

Raw info: processorarchitecture 0, processortype 586, processorlevel 6, processor revision 3851, number of processors 4

Physical memory available: 7029567488 bytes

Physical memory total: 8588247040 bytes

Virtual memory available: 2009571328 bytes

Virtual memory total: 2147352576 bytes

Memory load: 18%

Microsoft Windows Vista Home Premium Edition, 64-bit Service Pack 1 (build 6001)

Windows startup mode:
 

Running processes:

PID: 480 name: C:\WINDOWS\System32\smss.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 548 name: C:\WINDOWS\System32\csrss.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 604 name: C:\WINDOWS\System32\wininit.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 624 name: C:\WINDOWS\System32\csrss.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 652 name: C:\WINDOWS\System32\winlogon.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 704 name: C:\WINDOWS\System32\services.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 716 name: C:\WINDOWS\System32\lsass.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 724 name: C:\WINDOWS\System32\lsm.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 876 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 980 name: C:\WINDOWS\System32\svchost.exe owner: NETZWERKDIENST domain: NT-AUTORITÄT

PID: 1016 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 508 name: C:\WINDOWS\System32\Ati2evxx.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 552 name: C:\WINDOWS\System32\svchost.exe owner: LOKALER DIENST domain: NT-AUTORITÄT

PID: 696 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 720 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 1060 name: C:\WINDOWS\System32\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 1076 name: C:\WINDOWS\System32\SLsvc.exe owner: NETZWERKDIENST domain: NT-AUTORITÄT

PID: 1132 name: C:\WINDOWS\System32\svchost.exe owner: LOKALER DIENST domain: NT-AUTORITÄT

PID: 1192 name: C:\WINDOWS\System32\Ati2evxx.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 1328 name: C:\WINDOWS\System32\svchost.exe owner: NETZWERKDIENST domain: NT-AUTORITÄT

PID: 1464 name: C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 1696 name: C:\WINDOWS\System32\spoolsv.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 1744 name: C:\WINDOWS\System32\taskeng.exe owner: Frank domain: Frank-PC

PID: 1796 name: C:\WINDOWS\System32\taskeng.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 1856 name: C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 1884 name: C:\WINDOWS\System32\dwm.exe owner: Frank domain: Frank-PC

PID: 1896 name: C:\WINDOWS\System32\svchost.exe owner: LOKALER DIENST domain: NT-AUTORITÄT

PID: 1908 name: C:\WINDOWS\explorer.exe owner: Frank domain: Frank-PC

PID: 1612 name: C:\Program Files\Windows Defender\MSASCui.exe owner: Frank domain: Frank-PC

PID: 2032 name: C:\WINDOWS\RAVCpl64.exe owner: Frank domain: Frank-PC

PID: 1492 name: C:\Program Files\Windows Sidebar\sidebar.exe owner: Frank domain: Frank-PC

PID: 328 name: C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe owner: Frank domain: Frank-PC

PID: 1312 name: C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 1436 name: C:\WINDOWS\SysWOW64\svchost.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 2068 name: C:\hp\support\hpsysdrv.exe owner: Frank domain: Frank-PC

PID: 2088 name: C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe owner: Frank domain: Frank-PC

PID: 2268 name: C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe owner: Frank domain: Frank-PC

PID: 2288 name: C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe owner: Frank domain: Frank-PC

PID: 2328 name: C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe owner: Frank domain: Frank-PC

PID: 2444 name: C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 2504 name: C:\WINDOWS\SysWOW64\PnkBstrA.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 2524 name: C:\WINDOWS\System32\svchost.exe owner: NETZWERKDIENST domain: NT-AUTORITÄT

PID: 2628 name: C:\WINDOWS\System32\svchost.exe owner: LOKALER DIENST domain: NT-AUTORITÄT

PID: 2876 name: C:\WINDOWS\System32\WUDFHost.exe owner: LOKALER DIENST domain: NT-AUTORITÄT

PID: 2244 name: C:\hp\KBD\kbd.exe owner: Frank domain: Frank-PC

PID: 3408 name: C:\WINDOWS\System32\wbem\unsecapp.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 3676 name: C:\Program Files\Windows Media Player\wmpnscfg.exe owner: Frank domain: Frank-PC

PID: 3684 name: C:\WINDOWS\System32\wbem\WmiPrvSE.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 3784 name: C:\WINDOWS\System32\SearchIndexer.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 3440 name: C:\Program Files (x86)\Mozilla Firefox\firefox.exe owner: Frank domain: Frank-PC

PID: 2648 name: C:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Service.exe owner: SYSTEM domain: NT-AUTORITÄT

PID: 3704 name: C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe owner: Frank domain: Frank-PC

PID: 2776 name: C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe owner: Frank domain: Frank-PC

PID: 4012 name: C:\WINDOWS\System32\wbem\WmiPrvSE.exe owner: NETZWERKDIENST domain: NT-AUTORITÄT
 

Startup items:

Name: {8C7461EF-2B13-11d2-BE35-3078302C2030}

          imagepath: Component Categories cache daemon

Name: WebCheck

          imagepath: {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

Name: hpsysdrv

          imagepath: c:\hp\support\hpsysdrv.exe

Name: KBD

          imagepath: C:\HP\KBD\KbdStub.EXE

Name: SunJavaUpdateSched

          imagepath: "C:\Program Files (x86)\Java\jre1.6.0_01\bin\jusched.exe"

Name: StartCCC

          imagepath: "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

Name: Adobe Reader Speed Launcher

          imagepath: "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"

Name: HP Software Update

          imagepath: c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

Name: avgnt

          imagepath: "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

Name: Ad-Watch

          imagepath: "C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe"

Name: 

          imagepath: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

Name: 

          imagepath: C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
 

Bootexecute items:

Name: 

          imagepath: autocheck autochk *
 

Running services:

Name: AeLookupSvc

          displayname: Anwendungserfahrung

Name: AntiVirSchedulerService

          displayname: Avira AntiVir Planer

Name: AntiVirService

          displayname: Avira AntiVir Guard

Name: Ati External Event Utility

          displayname: Ati External Event Utility

Name: AudioEndpointBuilder

          displayname: Windows-Audio-Endpunkterstellung

Name: AudioSrv

          displayname: Windows-Audio

Name: BFE

          displayname: Basisfiltermodul

Name: BITS

          displayname: Intelligenter Hintergrundübertragungsdienst

Name: CryptSvc

          displayname: Kryptografiedienste

Name: DcomLaunch

          displayname: DCOM-Server-Prozessstart

Name: Dhcp

          displayname: DHCP-Client

Name: Dnscache

          displayname: DNS-Client

Name: DPS

          displayname: Diagnoserichtliniendienst

Name: EMDMgmt

          displayname: ReadyBoost

Name: Eventlog

          displayname: Windows-Ereignisprotokoll

Name: EventSystem

          displayname: COM+-Ereignissystem

Name: ezSharedSvc

          displayname: Easybits Shared Services for Windows

Name: fdPHost

          displayname: Funktionssuchanbieter-Host

Name: FDResPub

          displayname: Funktionssuche-Ressourcenveröffentlichung

Name: gpsvc

          displayname: Gruppenrichtlinienclient

Name: hidserv

          displayname: Zugriff auf Eingabegeräte

Name: HP Health Check Service

          displayname: HP Health Check Service

Name: IKEEXT

          displayname: IKE- und AuthIP IPsec-Schlüsselerstellungsmodule

Name: iphlpsvc

          displayname: IP-Hilfsdienst

Name: KtmRm

          displayname: KtmRm für Distributed Transaction Coordinator

Name: LanmanServer

          displayname: Server

Name: LanmanWorkstation

          displayname: Arbeitsstationsdienst

Name: Lavasoft Ad-Aware Service

          displayname: Lavasoft Ad-Aware Service

Name: LightScribeService

          displayname: LightScribeService Direct Disc Labeling Service

Name: lmhosts

          displayname: TCP/IP-NetBIOS-Hilfsdienst

Name: MMCSS

          displayname: Multimediaklassenplaner

Name: MpsSvc

          displayname: Windows-Firewall

Name: Netman

          displayname: Netzwerkverbindungen

Name: netprofm

          displayname: Netzwerklistendienst

Name: NlaSvc

          displayname: NLA (Network Location Awareness)

Name: nsi

          displayname: Netzwerkspeicher-Schnittstellendienst

Name: PcaSvc

          displayname: Programmkompatibilitäts-Assistent-Dienst

Name: PlugPlay

          displayname: Plug & Play

Name: PnkBstrA

          displayname: PnkBstrA

Name: PolicyAgent

          displayname: IPsec-Richtlinien-Agent

Name: ProfSvc

          displayname: Benutzerprofildienst

Name: RasMan

          displayname: RAS-Verbindungsverwaltung

Name: RpcSs

          displayname: Remoteprozeduraufruf (RPC)

Name: SamSs

          displayname: Sicherheitskonto-Manager

Name: Schedule

          displayname: Aufgabenplanung

Name: seclogon

          displayname: Sekundäre Anmeldung

Name: SENS

          displayname: Benachrichtigungsdienst für Systemereignisse

Name: ShellHWDetection

          displayname: Shellhardwareerkennung

Name: slsvc

          displayname: Softwarelizenzierung

Name: Spooler

          displayname: Druckwarteschlange

Name: SSDPSRV

          displayname: SSDP-Suche

Name: SstpSvc

          displayname: SSTP-Dienst

Name: stisvc

          displayname: Windows-Bilderfassung

Name: SysMain

          displayname: Superfetch

Name: TabletInputService

          displayname: Tablet PC-Eingabedienst

Name: TapiSrv

          displayname: Telefonie

Name: TermService

          displayname: Terminaldienste

Name: Themes

          displayname: Designs

Name: TrkWks

          displayname: Überwachung verteilter Verknüpfungen (Client)

Name: upnphost

          displayname: UPnP-Gerätehost

Name: UxSms

          displayname: Sitzungs-Manager für Desktopfenster-Manager

Name: W32Time

          displayname: Windows-Zeitgeber

Name: WdiSystemHost

          displayname: Diagnosesystemhost

Name: WebClient

          displayname: WebClient

Name: WinDefend

          displayname: Windows-Defender

Name: WinHttpAutoProxySvc

          displayname: WinHTTP-Web Proxy Auto-Discovery-Dienst

Name: Winmgmt

          displayname: Windows-Verwaltungsinstrumentation

Name: WPDBusEnum

          displayname: Enumeratordienst für tragbare Geräte

Name: wscsvc

          displayname: Sicherheitscenter

Name: WSearch

          displayname: Windows Search

Name: wuauserv

          displayname: Windows Update

Name: wudfsvc

          displayname: Windows Driver Foundation - Benutzermodus-Treiberframework

Hi,

was ist mit DrWeb geht das auch nicht?

lg myrtille