Trojaner-Board - Laptop langsam und stockt ...

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Laptop langsam und stockt ... (https://www.trojaner-board.de/94744-laptop-langsam-stockt.html)

Zitat:

ausgeführt von:: c:\users\Nina\Downloads\ComboFix.exe

Instruktionen ignoriert oder nicht gelesen? :stirn:

Ich konnte beim runterladen nichts angeben. Hab ichs halt runter geladen und dann auf den Desktop gezogen.
War das jetzt falsch??? was muss ich jetzt machen?? Nochmal von vorne??

Deswegen gibt es den Rechtsklick => Ziel speichern unter, aber nun gut :pfeiff:

Zitat:

c:\users\Nina\AppData\Roaming\mdbu.bin

Bitte diese Datei bei Virustotal auswerten lassen und den Ergebnislink posten. Falls Du die Datei nicht siehst, musst Du sie evtl. vorher sichtbar machen.
Wenn die Datei schon ausgewertet sein sollte, bitte eine weitere Auswertung starten.

Was soll ich jetzt Posten? Einfach die Adresszeile?

hxxp://www.virustotal.com/file-scan/report.html?id=788b438c823baca7f90e1851406c98cc548016653c835420e2bc48ac064d0f7d-1295291471#

Ok. Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Downloade Dir danach bitte MBRCheck (by a_d_13) und speichere die Datei auf dem Desktop.

Doppelklick auf die MBRCheck.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Das Tool braucht nur einige Sekunden.
Danach solltest du eine MBRCheck_<Datum>_<Uhrzeit>.txt auf dem Desktop finden.

Poste mir bitte den Inhalt des .txt Dokumentes

GMER:

Code:

GMER 1.0.15.15530 - hxxp://www.gmer.net

Rootkit scan 2011-01-17 21:24:52

Windows 6.1.7600  Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 WDC_WD50 rev.01.0

Running: r2v93gqt.exe; Driver: C:\Users\Nina\AppData\Local\Temp\pwldqpow.sys
 
 

---- Kernel code sections - GMER 1.0.15 ----
 

.text           ntkrnlpa.exe!ZwSaveKeyEx + 13AD               82E82599 1 Byte  [06]

.text           ntkrnlpa.exe!KiDispatchInterrupt + 5A2        82EA6F52 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}

PAGE            peauth.sys                                    B5C31B9B 72 Bytes  JMP 58B47621 

?               C:\Users\Nina\AppData\Local\Temp\catchme.sys  Das System kann die angegebene Datei nicht finden. !

?               C:\Windows\system32\Drivers\PROCEXP113.SYS    Das System kann die angegebene Datei nicht finden. !
 

---- Devices - GMER 1.0.15 ----
 

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0       Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1       Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)
 

Device          \Driver\ACPI_HAL \Device\00000046             halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)
 

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1        fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1        rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2        fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2        rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3        fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3        rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume4        fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume4        rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)

AttachedDevice  \FileSystem\fastfat \Fat                      fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)
 

---- Disk sectors - GMER 1.0.15 ----
 

Disk            \Device\Harddisk0\DR0                         sector 01: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 02: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 03: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 04: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 05: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 06: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 07: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 08: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 09: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 10: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 11: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 12: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 13: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 14: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 15: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 16: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 17: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 18: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 19: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 20: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 21: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 22: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 23: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 24: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 25: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 26: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 27: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 28: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 29: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 30: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 31: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 32: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 33: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 34: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 35: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 36: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 37: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 38: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 39: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 40: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 41: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 42: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 43: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 44: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 45: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 46: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 47: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 48: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 49: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 50: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 51: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 52: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 53: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 54: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 55: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 56: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 57: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 58: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 59: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 60: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 61: copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 62: rootkit-like behavior; copy of MBR

Disk            \Device\Harddisk0\DR0                         sector 63: copy of MBR
 

---- EOF - GMER 1.0.15 ----

Osam lässt sich nicht entpacken??

Habs doch hin bekommen

Osam

Code:

Report of OSAM: Autorun Manager v5.0.11926.0

hxxp://www.online-solutions.ru/en/

Saved at 21:47:00 on 17.01.2011
 

OS: Windows 7 Home Premium Edition (Build 7600), 32-bit

Default Browser: Mozilla Corporation Firefox 4.0b9
 

Scanner Settings

[x] Rootkits detection (hidden registry)

[x] Rootkits detection (hidden files)

[x] Retrieve files information

[x] Check Microsoft signatures
 

Filters

[ ] Trusted entries

[ ] Empty entries

[x] Hidden registry entries (rootkit activity)

[x] Exclusively opened files

[x] Not found files

[x] Files without detailed information

[x] Existing files

[ ] Non-startable services

[ ] Non-startable drivers

[x] Active entries

[x] Disabled entries
 
 

[Common]

-----( %SystemRoot%\Tasks )-----

"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe
 

[Control Panel Objects]

-----( %SystemRoot%\system32 )-----

"DivXControlPanelApplet.cpl" - "DivX, Inc." - C:\Windows\system32\DivXControlPanelApplet.cpl

"ISUSPM.cpl" - "Macrovision Corporation" - C:\Windows\system32\ISUSPM.cpl

"nvcpl.cpl" - "NVIDIA Corporation" - C:\Windows\system32\nvcpl.cpl

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----

"mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLCFG32.CPL
 

[Drivers]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"avgio" (avgio) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avgio.sys

"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys

"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys

"catchme" (catchme) - ? - C:\Users\Nina\AppData\Local\Temp\catchme.sys  (File not found)

"mbr" (mbr) - ? - C:\ComboFix\mbr.sys  (Hidden registry entry, rootkit activity | File not found)

"pwldqpow" (pwldqpow) - ? - C:\Users\Nina\AppData\Local\Temp\pwldqpow.sys  (Hidden registry entry, rootkit activity | File not found)

"Realtek IR Driver" (RtsUIR) - ? - C:\Windows\System32\DRIVERS\Rts516xIR.sys  (File not found)

"Realtek Smartcard Reader Driver" (USBCCID) - ? - C:\Windows\System32\DRIVERS\RtsUCcid.sys  (File not found)

"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys

"Synaptics TouchPad Driver" (SynTP) - "Synaptics Incorporated" - C:\Windows\System32\DRIVERS\SynTP.sys
 

[Explorer]

-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----

{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll

{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

-----( HKLM\Software\Classes\Protocols\Filter )-----

{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

-----( HKLM\Software\Classes\Protocols\Handler )-----

{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

{88FED34C-F0CA-4636-A375-3CB6248B04CD} "Local Groove Web Services Protocol" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GRA32A~1.DLL

{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll

{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Program Files\Windows Live\Mail\mailcomm.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )-----

{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{AEB6717E-7E19-11d0-97EE-00C04FD91972} "{AEB6717E-7E19-11d0-97EE-00C04FD91972}" - ? -   (File not found | COM-object registry key not found)

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----

{0563DB41-F538-4B37-A92D-4659049B7766} "CLSID_WLMCMimeFilter" - "Microsoft Corporation" - C:\Program Files\Windows Live\Mail\mailcomm.dll

 "CorelDRAW Shell Extension Component" - ? -   (File not found | COM-object registry key not found)

{A70C977A-BF00-412C-90B7-034C51DA2439} "DesktopContext Class" - "NVIDIA Corporation" - C:\Windows\system32\nvcpl.dll

{D8D1CE8C-B1EB-4E95-B63B-1531BA60E992} "DivX Property Handler" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXPropertyHandler.dll

{83238FAE-D346-4E12-8734-D42F7554B3E6} "DivX Thumbnail Provider" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXThumbnailProvider.dll

{99FD978C-D287-4F50-827F-B2C658EDA8E7} "Groove Explorer Icon Overlay 1 (GFS Unread Stub)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} "Groove Explorer Icon Overlay 2 (GFS Stub)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{920E6DB1-9907-4370-B3A0-BAFC03D81399} "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{16F3DD56-1AF5-4347-846D-7C10C4192619} "Groove Explorer Icon Overlay 3 (GFS Folder)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{2916C86E-86A6-43FE-8112-43ABE6BF8DCC} "Groove Explorer Icon Overlay 4 (GFS Unread Mark)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{2A541AE1-5BF6-4665-A8A3-CFA9672E4291} "Groove Folder Synchronization" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{6C467336-8281-4E60-8204-430CED96822D} "Groove GFS Context Menu Handler" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{A449600E-1DC6-4232-B948-9BD794D62056} "Groove GFS Stub Icon Handler" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{387E725D-DC16-4D76-B310-2C93ED4752A0} "Groove XML Icon Handler" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll

{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONFILTER.DLL

{00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLSHEXT.DLL

{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{A929C4CE-FD36-4270-B4F5-34ECAC5BD63C} "NvAppShExt Class" - "NVIDIA Corporation" - C:\Windows\system32\Nv3DAppShExt.dll

{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} "NVIDIA CPL Context Menu Extension" - "NVIDIA Corporation" - C:\Windows\system32\nvshext.dll

{FFB699E0-306A-11d3-8BD1-00104B6F7516} "NVIDIA CPL Extension" - "NVIDIA Corporation" - C:\Windows\system32\nvcpl.dll

{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Program Files\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll

{0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\OLKFSTUB.DLL

{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll

{2F603045-309F-11CF-9774-0020AFD0CFF6} "Synaptics Control Panel" - "Synaptics Incorporated" - C:\Program Files\Synaptics\SynTP\SynTPCpl.dll

{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Program Files\WinRAR\rarext.dll

{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe
 

[Internet Explorer]

-----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----

"eBay - Der weltweite Online-Marktplatz" - ? - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4  (HTTP value)

-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----

<binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Program Files\Windows Live\Toolbar\wltcore.dll

ITBar7Height "ITBar7Height" - ? -   (File not found | COM-object registry key not found)

<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)

-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----

55963676-2F5E-4BAF-AC28-CF26AA587566 "55963676-2F5E-4BAF-AC28-CF26AA587566" - ? -   (File not found | COM-object registry key not found) / vpnweb.cab

{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_23" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} "Java Plug-in 1.6.0_23" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_23" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_23.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----

{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

"eBay - Der weltweite Online-Marktplatz" - ? - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4  (HTTP value)

{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "In Blog veröffentlichen" - "Microsoft Corporation" - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----

<binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Program Files\Windows Live\Toolbar\wltcore.dll

<binary data> "Trillian Toolbar" - "Ask" - C:\Program Files\Ask.com\GenericAskToolbar.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----

{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL

{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll

{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} "Search Helper" - "Microsoft Corporation" - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

{D4027C7F-154A-4066-A1AD-4243D8127440} "Trillian Toolbar" - "Ask" - C:\Program Files\Ask.com\GenericAskToolbar.dll

{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live Anmelde-Hilfsprogramm" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} "Windows Live Toolbar Helper" - "Microsoft Corporation" - C:\Program Files\Windows Live\Toolbar\wltcore.dll
 

[Logon]

-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE  (Shortcut exists | File exists)

"desktop.ini" - ? - C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----

"StartupPrograms" - ? - rdpclip  (File not found)
 

[Print Monitors]

-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----

"Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll
 

[Services]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\sched.exe

"Cisco AnyConnect VPN Agent" (vpnagent) - "Cisco Systems, Inc." - C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe

"Cyberlink RichVideo Service(CRVS)" (RichVideo) - ? - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

"FABS - Helping agent for MAGIX media database" (Fabs) - "MAGIX AG" - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

"Firebird Server - MAGIX Instance" (FirebirdServerMAGIXInstance) - "MAGIX®" - C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe

"Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

"Google Updater Service" (gusvc) - "Google" - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

"Intel(R) Management & Security Application User Notification Service" (UNS) - "Intel Corporation" - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

"Intel(R) Management and Security Application Local Management Service" (LMS) - "Intel Corporation" - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

"Intel(R) Rapid Storage Technology" (IAStorDataMgrSvc) - "Intel Corporation" - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

"Ixia Endpoint" (IxiaEndpoint) - "Ixia" - C:\PROGRA~1\Ixia\Endpoint\endpoint.exe

"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

"Microsoft Office Groove Audit Service" (Microsoft Office Groove Audit Service) - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

"NVIDIA Display Driver Service" (nvsvc) - "NVIDIA Corporation" - C:\Windows\system32\nvvsvc.exe

"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

"ProtexisLicensing" (ProtexisLicensing) - ? - C:\Windows\system32\PSIService.exe

"SeaPort" (SeaPort) - "Microsoft Corporation" - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

"WisLMSvc" (WisLMSvc) - "Wistron Corp." - C:\Program Files\Launch Manager\WisLMSvc.exe
 

===[ Logfile end ]=========================================[ Logfile end ]===
 

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru

MBRCheck

Code:

MBRCheck, version 1.2.3

(c) 2010, AD
 

Command-line:                        

Windows Version:                Windows 7 Home Premium Edition

Windows Information:                 (build 7600), 32-bit

Base Board Manufacturer:        MEDION

BIOS Manufacturer:                American Megatrends Inc.

System Manufacturer:                MEDION

System Product Name:                P6622

Logical Drives Mask:                0x0000001c
 

Kernel Drivers (total 184):

  0x82E3F000 \SystemRoot\system32\ntkrnlpa.exe

  0x82E08000 \SystemRoot\system32\halmacpi.dll

  0x80BA4000 \SystemRoot\system32\kdcom.dll

  0x8B806000 \SystemRoot\system32\mcupdate_GenuineIntel.dll

  0x8B87E000 \SystemRoot\system32\PSHED.dll

  0x8B88F000 \SystemRoot\system32\BOOTVID.dll

  0x8B897000 \SystemRoot\system32\CLFS.SYS

  0x8B8D9000 \SystemRoot\system32\CI.dll

  0x8B984000 \SystemRoot\system32\drivers\Wdf01000.sys

  0x8BA2A000 \SystemRoot\system32\drivers\WDFLDR.SYS

  0x8BA38000 \SystemRoot\system32\DRIVERS\ACPI.sys

  0x8BA80000 \SystemRoot\system32\DRIVERS\WMILIB.SYS

  0x8BA89000 \SystemRoot\system32\DRIVERS\msisadrv.sys

  0x8BA91000 \SystemRoot\system32\DRIVERS\pci.sys

  0x8BABB000 \SystemRoot\system32\DRIVERS\vdrvroot.sys

  0x8BAC6000 \SystemRoot\System32\drivers\partmgr.sys

  0x8BAD7000 \SystemRoot\system32\DRIVERS\compbatt.sys

  0x8BADF000 \SystemRoot\system32\DRIVERS\BATTC.SYS

  0x8BAEA000 \SystemRoot\system32\DRIVERS\volmgr.sys

  0x8BAFA000 \SystemRoot\System32\drivers\volmgrx.sys

  0x8BB45000 \SystemRoot\System32\drivers\mountmgr.sys

  0x8BC30000 \SystemRoot\system32\DRIVERS\iaStor.sys

  0x8BDE3000 \SystemRoot\system32\DRIVERS\amdxata.sys

  0x8BB5B000 \SystemRoot\system32\drivers\fltmgr.sys

  0x8BDEC000 \SystemRoot\system32\drivers\fileinfo.sys

  0x8BE0A000 \SystemRoot\System32\Drivers\Ntfs.sys

  0x8BF39000 \SystemRoot\System32\Drivers\msrpc.sys

  0x8BF64000 \SystemRoot\System32\Drivers\ksecdd.sys

  0x8BF77000 \SystemRoot\System32\Drivers\cng.sys

  0x8BFD4000 \SystemRoot\System32\drivers\pcw.sys

  0x8BFE2000 \SystemRoot\System32\Drivers\Fs_Rec.sys

  0x8C00E000 \SystemRoot\system32\drivers\ndis.sys

  0x8C0C5000 \SystemRoot\system32\drivers\NETIO.SYS

  0x8C103000 \SystemRoot\System32\Drivers\ksecpkg.sys

  0x8C208000 \SystemRoot\System32\drivers\tcpip.sys

  0x8C351000 \SystemRoot\System32\drivers\fwpkclnt.sys

  0x8C382000 \SystemRoot\system32\DRIVERS\volsnap.sys

  0x8C3C1000 \SystemRoot\System32\Drivers\spldr.sys

  0x8C3C9000 \SystemRoot\System32\drivers\rdyboost.sys

  0x8C128000 \SystemRoot\System32\Drivers\mup.sys

  0x8C3F6000 \SystemRoot\System32\drivers\hwpolicy.sys

  0x8C138000 \SystemRoot\System32\DRIVERS\fvevol.sys

  0x8C16A000 \SystemRoot\system32\DRIVERS\disk.sys

  0x8C17B000 \SystemRoot\system32\DRIVERS\CLASSPNP.SYS

  0x90FD8000 \SystemRoot\system32\DRIVERS\cdrom.sys

  0x90FF7000 \SystemRoot\System32\Drivers\Null.SYS

  0x90E00000 \SystemRoot\System32\Drivers\Beep.SYS

  0x90E07000 \SystemRoot\System32\drivers\vga.sys

  0x8C1AD000 \SystemRoot\System32\drivers\VIDEOPRT.SYS

  0x8C1CE000 \SystemRoot\System32\drivers\watchdog.sys

  0x8C200000 \SystemRoot\System32\DRIVERS\RDPCDD.sys

  0x8C1DB000 \SystemRoot\system32\drivers\rdpencdd.sys

  0x8C1E3000 \SystemRoot\system32\drivers\rdprefmp.sys

  0x8C1EB000 \SystemRoot\System32\Drivers\Msfs.SYS

  0x8C000000 \SystemRoot\System32\Drivers\Npfs.SYS

  0x8BC00000 \SystemRoot\system32\DRIVERS\tdx.sys

  0x8BFEB000 \SystemRoot\system32\DRIVERS\TDI.SYS

  0x8BB8F000 \SystemRoot\system32\drivers\afd.sys

  0x91402000 \SystemRoot\System32\DRIVERS\netbt.sys

  0x91434000 \SystemRoot\system32\DRIVERS\wfplwf.sys

  0x9143B000 \SystemRoot\system32\DRIVERS\pacer.sys

  0x9145A000 \SystemRoot\system32\DRIVERS\vwififlt.sys

  0x9146B000 \SystemRoot\system32\DRIVERS\netbios.sys

  0x91479000 \SystemRoot\system32\DRIVERS\wanarp.sys

  0x9148C000 \SystemRoot\system32\DRIVERS\termdd.sys

  0x9149C000 \SystemRoot\system32\DRIVERS\ssmdrv.sys

  0x914A2000 \SystemRoot\system32\DRIVERS\rdbss.sys

  0x914E3000 \SystemRoot\system32\drivers\nsiproxy.sys

  0x914ED000 \SystemRoot\system32\DRIVERS\mssmbios.sys

  0x914F7000 \SystemRoot\System32\drivers\discache.sys

  0x91503000 \SystemRoot\System32\Drivers\dfsc.sys

  0x9151B000 \SystemRoot\system32\DRIVERS\blbdrive.sys

  0x91529000 \SystemRoot\system32\DRIVERS\avipbb.sys

  0x9154F000 \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys

  0x91551000 \SystemRoot\system32\DRIVERS\tunnel.sys

  0x92205000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys

  0x92B83000 \SystemRoot\system32\DRIVERS\nvBridge.kmd

  0x97825000 \SystemRoot\System32\drivers\dxgkrnl.sys

  0x978DC000 \SystemRoot\System32\drivers\dxgmms1.sys

  0x95A1E000 \SystemRoot\system32\DRIVERS\igdkmd32.sys

  0x9633B000 \SystemRoot\system32\DRIVERS\HECI.sys

  0x96346000 \SystemRoot\system32\DRIVERS\usbehci.sys

  0x96355000 \SystemRoot\system32\DRIVERS\USBPORT.SYS

  0x963A0000 \SystemRoot\system32\DRIVERS\HDAudBus.sys

  0x963BF000 \SystemRoot\system32\DRIVERS\L1C62x86.sys

  0x9683F000 \SystemRoot\system32\DRIVERS\rtl8192se.sys

  0x96952000 \SystemRoot\system32\DRIVERS\vwifibus.sys

  0x9695C000 \SystemRoot\system32\DRIVERS\CmBatt.sys

  0x96960000 \SystemRoot\system32\DRIVERS\i8042prt.sys

  0x96978000 \SystemRoot\system32\DRIVERS\kbdclass.sys

  0x98415000 \SystemRoot\system32\DRIVERS\SynTP.sys

  0x98556000 \SystemRoot\system32\DRIVERS\USBD.SYS

  0x98558000 \SystemRoot\system32\DRIVERS\mouclass.sys

  0x98565000 \SystemRoot\system32\DRIVERS\Impcd.sys

  0x98584000 \SystemRoot\system32\DRIVERS\wmiacpi.sys

  0x9858D000 \SystemRoot\system32\DRIVERS\intelppm.sys

  0x9859F000 \SystemRoot\system32\DRIVERS\CompositeBus.sys

  0x985AC000 \SystemRoot\system32\DRIVERS\AgileVpn.sys

  0x985BE000 \SystemRoot\system32\DRIVERS\rasl2tp.sys

  0x985D6000 \SystemRoot\system32\DRIVERS\ndistapi.sys

  0x96985000 \SystemRoot\system32\DRIVERS\ndiswan.sys

  0x985E1000 \SystemRoot\system32\DRIVERS\raspppoe.sys

  0x969A7000 \SystemRoot\system32\DRIVERS\raspptp.sys

  0x969BE000 \SystemRoot\system32\DRIVERS\rassstp.sys

  0x985F9000 \SystemRoot\system32\DRIVERS\swenum.sys

  0x96800000 \SystemRoot\system32\DRIVERS\ks.sys

  0x98400000 \SystemRoot\system32\DRIVERS\umbus.sys

  0x97915000 \SystemRoot\system32\DRIVERS\usbhub.sys

  0x969D5000 \SystemRoot\System32\Drivers\NDProxy.SYS

  0x98A35000 \SystemRoot\system32\drivers\RTKVHDA.sys

  0x98D0E000 \SystemRoot\system32\drivers\portcls.sys

  0x98D3D000 \SystemRoot\system32\drivers\drmk.sys

  0x98D56000 \SystemRoot\system32\DRIVERS\IntcDAud.sys

  0x9A270000 \SystemRoot\System32\win32k.sys

  0x98D90000 \SystemRoot\System32\drivers\Dxapi.sys

  0x98D9A000 \SystemRoot\System32\Drivers\crashdmp.sys

  0x90E13000 \SystemRoot\System32\Drivers\dump_iaStor.sys

  0x98DA7000 \SystemRoot\System32\Drivers\dump_dumpfve.sys

  0x98DB8000 \SystemRoot\system32\DRIVERS\monitor.sys

  0x9A4D0000 \SystemRoot\System32\TSDDD.dll

  0x9A500000 \SystemRoot\System32\cdd.dll

  0x98DC3000 \SystemRoot\system32\drivers\luafv.sys

  0x98DDE000 \SystemRoot\system32\DRIVERS\avgntflt.sys

  0x98A00000 \SystemRoot\system32\drivers\WudfPf.sys

  0x98A1A000 \SystemRoot\system32\DRIVERS\lltdio.sys

  0x97959000 \SystemRoot\system32\DRIVERS\nwifi.sys

  0x969E6000 \SystemRoot\system32\DRIVERS\ndisuio.sys

  0x963D1000 \SystemRoot\system32\DRIVERS\rspndr.sys

  0x91572000 \SystemRoot\system32\drivers\HTTP.sys

  0x963E4000 \SystemRoot\system32\DRIVERS\bowser.sys

  0x95A00000 \SystemRoot\System32\drivers\mpsdrv.sys

  0x9799F000 \SystemRoot\system32\DRIVERS\mrxsmb.sys

  0x979C2000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys

  0x97800000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys

  0xB5C26000 \SystemRoot\system32\drivers\peauth.sys

  0xB5CBD000 \SystemRoot\System32\Drivers\secdrv.SYS

  0xB5CC7000 \SystemRoot\System32\DRIVERS\srvnet.sys

  0xB5CE8000 \SystemRoot\System32\drivers\tcpipreg.sys

  0xB5CF5000 \SystemRoot\System32\DRIVERS\srv2.sys

  0xB5D44000 \SystemRoot\System32\DRIVERS\srv.sys

  0xB5DC2000 \SystemRoot\system32\DRIVERS\asyncmac.sys

  0xB5DCB000 \??\C:\Users\Nina\AppData\Local\Temp\catchme.sys

  0xB5DD3000 \??\C:\Windows\system32\Drivers\PROCEXP113.SYS

  0xB5D95000 \SystemRoot\System32\Drivers\fastfat.SYS

  0xB5C00000 \??\C:\Users\Nina\AppData\Local\Temp\pwldqpow.sys

  0x772D0000 \Windows\System32\ntdll.dll

  0x47E00000 \Windows\System32\smss.exe

  0x77510000 \Windows\System32\apisetschema.dll

  0x007A0000 \Windows\System32\autochk.exe

  0x774E0000 \Windows\System32\imm32.dll

  0x76680000 \Windows\System32\shell32.dll

  0x77460000 \Windows\System32\comdlg32.dll

  0x77410000 \Windows\System32\Wldap32.dll

  0x76670000 \Windows\System32\nsi.dll

  0x765D0000 \Windows\System32\usp10.dll

  0x76570000 \Windows\System32\shlwapi.dll

  0x76470000 \Windows\System32\wininet.dll

  0x76450000 \Windows\System32\sechost.dll

  0x763C0000 \Windows\System32\clbcatq.dll

  0x76390000 \Windows\System32\imagehlp.dll

  0x761F0000 \Windows\System32\setupapi.dll

  0x76090000 \Windows\System32\ole32.dll

  0x76050000 \Windows\System32\ws2_32.dll

  0x76040000 \Windows\System32\psapi.dll

  0x76030000 \Windows\System32\normaliz.dll

  0x75E30000 \Windows\System32\iertutil.dll

  0x75D90000 \Windows\System32\advapi32.dll

  0x75D30000 \Windows\System32\difxapi.dll

  0x75CA0000 \Windows\System32\oleaut32.dll

  0x75BC0000 \Windows\System32\kernel32.dll

  0x75B70000 \Windows\System32\gdi32.dll

  0x75A30000 \Windows\System32\urlmon.dll

  0x75980000 \Windows\System32\msvcrt.dll

  0x75970000 \Windows\System32\lpk.dll

  0x758C0000 \Windows\System32\rpcrt4.dll

  0x757F0000 \Windows\System32\msctf.dll

  0x75720000 \Windows\System32\user32.dll

  0x75690000 \Windows\System32\comctl32.dll

  0x75570000 \Windows\System32\crypt32.dll

  0x75540000 \Windows\System32\wintrust.dll

  0x754F0000 \Windows\System32\KernelBase.dll

  0x754D0000 \Windows\System32\devobj.dll

  0x754A0000 \Windows\System32\cfgmgr32.dll

  0x75490000 \Windows\System32\msasn1.dll
 

Processes (total 52):

       0 System Idle Process

       4 System

     324 C:\Windows\System32\smss.exe

     456 csrss.exe

     528 C:\Windows\System32\wininit.exe

     536 csrss.exe

     584 C:\Windows\System32\services.exe

     600 C:\Windows\System32\lsass.exe

     608 C:\Windows\System32\lsm.exe

     704 C:\Windows\System32\winlogon.exe

     768 C:\Windows\System32\svchost.exe

     884 C:\Windows\System32\svchost.exe

     968 C:\Windows\System32\svchost.exe

    1008 C:\Windows\System32\svchost.exe

    1048 C:\Windows\System32\svchost.exe

    1176 C:\Windows\System32\svchost.exe

    1276 C:\Program Files\Cisco\Cisco AnyConnect VPN Client\vpnagent.exe

    1304 C:\Windows\System32\svchost.exe

    1540 C:\Windows\System32\dwm.exe

    1612 C:\Windows\System32\spoolsv.exe

    1640 C:\Program Files\Avira\AntiVir Desktop\sched.exe

    1664 C:\Windows\System32\svchost.exe

    1800 C:\Windows\System32\taskhost.exe

    1996 C:\Program Files\Avira\AntiVir Desktop\avguard.exe

    2040 C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe

     416 C:\PROGRA~1\Ixia\Endpoint\endpoint.exe

     452 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

     900 C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

    1520 C:\Windows\System32\PSIService.exe

    1748 C:\Program Files\CyberLink\Shared Files\RichVideo.exe

    1944 C:\Windows\System32\svchost.exe

    1968 C:\Program Files\Windows Sidebar\sidebar.exe

    1976 C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

     376 C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

    1372 C:\Windows\System32\conhost.exe

    2776 C:\Windows\System32\svchost.exe

    2944 C:\Windows\System32\svchost.exe

    3084 C:\Windows\System32\SearchIndexer.exe

    3304 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

    1492 C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

    2736 C:\Windows\System32\svchost.exe

    2564 C:\Program Files\Windows Media Player\wmpnetwk.exe

    1504 C:\Windows\System32\svchost.exe

    3492 C:\Windows\explorer.exe

    3820 C:\Program Files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe

    1860 C:\Program Files\Mozilla Firefox 4.0 Beta 9\firefox.exe

    3628 C:\Program Files\Mozilla Firefox 4.0 Beta 9\plugin-container.exe

    3056 C:\Users\Nina\AppData\Local\temp\Rar$EX00.799\osam.exe

    4012 C:\Windows\System32\SearchProtocolHost.exe

    3224 C:\Windows\System32\SearchFilterHost.exe

    3264 C:\Users\Nina\Downloads\MBRCheck.exe

    3664 C:\Windows\System32\conhost.exe
 

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`06500000  (NTFS)

\\.\D: --> \\.\PhysicalDrive0 at offset 0x0000006a`30900000  (NTFS)
 

PhysicalDrive0 Model Number: WDCWD5000BEVT-22A0RT0, Rev: 01.01A01
 

      Size  Device Name          MBR Status

  --------------------------------------------

    465 GB  \\.\PhysicalDrive0   Unknown MBR code

            SHA1: F61074C24A6DA26C38919A0032AE32ED64E1F93E
 
 

Found non-standard or infected MBR.

Enter 'Y' and hit ENTER for more options, or 'N' to exit:

Wir müssen den MBR reparieren. Hast du eine Win7-DVD zur Hand?

Ohje das hört sich nicht gut an. Ich weis garnicht ob die CD bei meinem Laptop dabei war. Was mach ich wenn ich keine hab?

Ist das dringend? Bzw. was genau ist da kaputt?
Die Sachen von meinem Laptop liegen da wo ich erst wieder im Februar bin (Zweitwohnsitz). Ansonsten muss ich die Sachen holen fahren.

Gibt es auch eine Möglichkeit ohne CD?

Geht auch mit einer Vista-Rescue-Disc:

Schau mal hier => Vista Notfall/Recovery-CD 32-Bit - Dr. Windows

Lad das iso runter, brenn es zB mit ImgBurn per Imagebrennfunktion auf eine CD und starte damit den Rechner (von dieser CD booten).

Falls Du eine normale Vista-Installations-DVD hast, brauchst Du das o.g. Image nicht sondern kannst einfach von der Vista-DVD booten.

Klick auf Computerreparaturoptionen, weiter, Eingabeaufforderung - die Konsole öffnet sich. Da bitte bootrec.exe /fixboot eintippen (mit enter bestätigen), dann bootrec.exe /fixmbr eintippen (mit enter bestätigen) - Rechner neustarten, CD vorher rausnehmen.

Danach bitte nochmal GMER und MBRCheck ausführen.

und das für Vista passt auch für Windows 7?

Ja sollte gehen, wurde ein paarmal schon erfolgreich gemacht

Ich habe jetzt folgendes Problem:

Ich habe diese Datei runter geladen, auf DVD gebrannt von davon gebootet.
Jetzt will es aber mein Produkt Key ... wenn ich diesen eingebe wird er nicht anerkannt.

Da steht jetzt, dass die Daten weg sein können wenn ich abbreche.

Was soll ich jetzt tun????