hjt log
 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:14:56, on 18.08.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
F:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
F:\Programme\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
F:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
F:\PROGRA~1\Ashampoo\ASHAMP~1\bin\DEFRAG~2.EXE
F:\PROGRA~1\Ashampoo\ASHAMP~1\bin\defragActivityMonitor.exe
F:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
F:\Programme\FRITZ!DSL\IGDCTRL.EXE
F:\WINDOWS\system32\nvsvc32.exe
F:\WINDOWS\system32\tcpsvcs.exe
F:\WINDOWS\System32\snmp.exe
F:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
F:\PROGRA~1\AVG\AVG8\avgrsx.exe
F:\WINDOWS\system32\wscntfy.exe
F:\WINDOWS\explorer.exe
F:\WINDOWS\System32\svchost.exe
F:\Programme\Mozilla Firefox\firefox.exe
F:\Programme\Trend Micro\HijackThis\HijackThis.exe

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - f:\programme\google\googletoolbar1.dll
O4 - HKLM\..\Run: [avgnt] "F:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [TkBellExe] "F:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [000000af] rundll32.exe "F:\WINDOWS\system32\vqrqeuml.dll",b
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [BM6bd76590] Rundll32.exe "F:\WINDOWS\system32\msdpgktn.dll",s
O4 - HKCU\..\Run: [TrueCrypt] "F:\Programme\TrueCrypt\TrueCrypt.exe" /q preferences
O4 - HKCU\..\Run: [Shock4Way3D] F:\Programme\Shock Utility\Shock4Way3D\Shock4Way3D.exe
O4 - HKCU\..\Run: [ShockAero3D] F:\Programme\Shock Utility\ShockAero3D\ShockAero3D.exe
O4 - HKCU\..\Run: [TaskSwitchXP] F:\Programme\TaskSwitchXP\TaskSwitchXP.exe
O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Realteak.lnk = F:\Programme\Realtek\InstallShield\RTHDCPL.exe
O4 - Global Startup: Ashampoo Magical Defrag.lnk = F:\Programme\Ashampoo\Ashampoo Magical Defrag\bin\aDefragCtrl.exe
O4 - Global Startup: FRITZ!DSL Startcenter.lnk = ?
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - F:\Programme\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - F:\Programme\ICQ6\ICQ.exe
O10 - Unknown file in Winsock LSP: f:\windows\system32\nwprovau.dll
O20 - AppInit_DLLs: secuload.dll
O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - F:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - F:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ashampoo Defrag Service (AshampooDefragService) - - F:\Programme\Ashampoo\Ashampoo Magical Defrag\bin\aDefragService.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - F:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: DNS2Go Client Service (DNS2GoClient) - Deerfield.com - F:\PROGRA~1\DEERFI~1.COM\DNS2Go\DNS2GO~2.EXE
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - F:\Programme\xampp\FileZillaFTP\FileZilla server.exe
O23 - Service: GoogleDesktopManager - Google - F:\Programme\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - F:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: AVM IGD CTRL Service (IGDCTRL) - AVM Berlin - F:\Programme\FRITZ!DSL\IGDCTRL.EXE
O23 - Service: McAfee Real-time Scanner (McShield) - Unknown owner - F:\Programme\McAfee\VirusScan\McShield.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - F:\Programme\WinPcap\rpcapd.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - F:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 4543 bytes