Trojaner-Board - Problem mit....

Code:
Runscanner logfile http://www.runscanner.net 
 

* = signed file

- = file not found
 

000 General info

----------------

Computer name : ADMIN_MASTER

Creation time : 03.05.2008 03:29:00

Hosts <> 127.0.0.1 : 0

Hosts file location : %SystemRoot%\System32\drivers\etc

IE version : 6.0.2800.1106

OS : Microsoft Windows XP

OS Build : 2600

OS SP : Service Pack 1

RunScanner Version : 1.6.3.0

User Language : Deutsch (Deutschland)

User rights : Administrator

Windows folder : C:\WINDOWS
 

001 Running processes

---------------------

- c:\windows\17pholmes1001186.exe

* c:\windows\system32\services.exe (Microsoft Corporation)

c:\programme\a-squared anti-malware\a2service.exe (Emsi Software GmbH)

c:\programme\a-squared anti-dialer\a2service.exe (Emsi Software GmbH)

c:\windows\system32\ati2evxx.exe (ATI Technologies Inc.)

c:\windows\system32\ati2evxx.exe (ATI Technologies Inc.)

* c:\windows\system32\csrss.exe (Microsoft Corporation)

c:\windows\system32\ctfmon.exe (Microsoft Corporation)

c:\programme\du meter\dumeter.exe (Hagel Technologies)

c:\programme\mozilla firefox\firefox.exe (Mozilla Corporation)

c:\windows\system32\svchost.exe (Microsoft Corporation)

c:\windows\system32\svchost.exe (Microsoft Corporation)

c:\windows\system32\svchost.exe (Microsoft Corporation)

c:\windows\system32\svchost.exe (Microsoft Corporation)

c:\windows\system32\svchost.exe (Microsoft Corporation)

* c:\programme\google\google updater\googleupdater.exe (Google)

* c:\programme\google\common\google updater\googleupdaterservice.exe (Google)

c:\programme\internet explorer\iexplore.exe (Microsoft Corporation)

c:\windows\system32\inetsrv\inetinfo.exe (Microsoft Corporation)

* c:\windows\system32\lsass.exe (Microsoft Corporation)

c:\windows\system32\mqsvc.exe (Microsoft Corporation)

c:\windows\mrofinu1001186.exe

c:\windows\system32\msdtc.exe (Microsoft Corporation)

c:\windows\system32\msmsgs.exe

c:\windows\system32\netdde.exe (Microsoft Corporation)

c:\dokumente und einstellungen\master\lokale einstellungen\anwendungsdaten\qtcgr.exe

c:\programme\quicktime\qttask.exe (Apple Computer, Inc.)

c:\programme\razer\krait\razerofa.exe (Razer Inc.)

c:\programme\razer\krait\razerhid.exe

c:\programme\cyberlink\shared files\richvideo.exe

c:\windows\rundll32.exe

* c:\dokumente und einstellungen\master\lokale einstellungen\temp\runscanner.exe (Runscanner.net)

* c:\programme\valve\steam\steamapps\master_jogi\sourcesdk\bin\sdklauncher.exe

c:\windows\system32\spoolsv.exe (Microsoft Corporation)

* c:\programme\valve\steam\steam.exe (Valve Corporation)

* c:\programme\tuneup utilities 2008\memoptimizer.exe (TuneUp Software GmbH)

c:\windows\explorer.exe (Microsoft Corporation)

c:\windows\explorer.exe (Microsoft Corporation)

c:\windows\system32\clipsrv.exe (Microsoft Corporation)

c:\windows\system32\mqtgsvc.exe (Microsoft Corporation)

* c:\windows\system32\smss.exe (Microsoft Corporation)

* c:\windows\system32\winlogon.exe (Microsoft Corporation)

c:\windows\system32\wbem\winscrvs.exe

c:\progra~1\winzip\winzip32.exe (WinZip Computing, Inc. and H.C. Top Systems B.V.)
 

002 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (+subkeys)

-----------------------------------------------------------------

c:\programme\a-squared anti-malware\a2guard.exe (Emsi Software GmbH)

- c:\programme\avira\antivir personaledition classic\avgnt.exe

- mixer.exe

c:\programme\du meter\dumeter.exe (Hagel Technologies)

C:\WINDOWS\system32\dumprep.exe (Microsoft Corporation)

c:\programme\razer\krait\razerhid.exe

c:\windows\system32\msmsgs.exe

- extream.exe

C:\WINDOWS\System32\regsvr32.exe (Microsoft Corporation)

c:\windows\system32\nerocheck.exe (Ahead Software Gmbh)

c:\programme\quicktime\qttask.exe (Apple Computer, Inc.)

c:\windows\mrofinu1001186.exe

c:\windows\system32\wbem\winscrvs.exe
 

003 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (+subkeys)

-----------------------------------------------------------------

c:\programme\lavasoft ad-aware plus\ad-aware.exe (LavaSoft)

c:\windows\system32\ctfmon.exe (Microsoft Corporation)

c:\windows\system32\msmsgs.exe

c:\windows\rundll32.exe

c:\dokumente und einstellungen\master\lokale einstellungen\anwendungsdaten\qtcgr.exe

* c:\programme\valve\steam\steam.exe (Valve Corporation)

* c:\programme\tuneup utilities 2008\memoptimizer.exe (TuneUp Software GmbH)

c:\windows\system32\wbem\winscrvs.exe
 

005 C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart

--------------------------------------------------------------------------

* c:\progra~1\google\google~1\google~1.exe (Google)
 

008 Default user \Software\Microsoft\Windows\CurrentVersion\Run (+subkeys)

--------------------------------------------------------------------------

- c:\windows\system32\w?nsxs\?xplorer.exe

c:\windows\system32\ctfmon.exe (Microsoft Corporation)

c:\programme\\javacore\\javacore.exe

c:\windows\system32\msmsgs.exe

- extream.exe

c:\windows\rundll32.exe

c:\windows\system32\wnsxs~1\svchost.exe

c:\dokumente und einstellungen\master\anwendungsdaten\microsoft\windows\njvmvt.exe

c:\dokumente und einstellungen\master\anwendungsdaten\speedrunner\speedrunner.exe

c:\programme\svconr\svconr.exe

c:\windows\system32\wbem\winscrvs.exe
 

009 System user\Software\Microsoft\Windows\CurrentVersion\Run (+subkeys)

------------------------------------------------------------------------

- c:\windows\system32\w?nsxs\?xplorer.exe

c:\windows\system32\ctfmon.exe (Microsoft Corporation)

c:\programme\\javacore\\javacore.exe

c:\windows\system32\msmsgs.exe

- extream.exe

c:\windows\rundll32.exe

c:\windows\system32\wnsxs~1\svchost.exe

c:\dokumente und einstellungen\master\anwendungsdaten\microsoft\windows\njvmvt.exe

c:\dokumente und einstellungen\master\anwendungsdaten\speedrunner\speedrunner.exe

c:\programme\svconr\svconr.exe

c:\windows\system32\wbem\winscrvs.exe
 

010 HKLM\SYSTEM\CurrentControlSet\Services (Services)

-----------------------------------------------------

C:\WINDOWS\system32\clipsrv.exe (Ablagemappe)

C:\WINDOWS\system32\svchost.exe (Anwendungsverwaltung)

C:\WINDOWS\system32\svchost.exe (Arbeitsstationsdienst)

c:\programme\a-squared anti-dialer\a2service.exe (a-squared Anti-Dialer Service)

c:\programme\a-squared anti-malware\a2service.exe (a-squared Anti-Malware Service)

C:\WINDOWS\system32\ati2evxx.exe (ATI External Event Utility EXE Module)

c:\windows\system32\ati2sgag.exe (ATI Smart)

C:\WINDOWS\system32\svchost.exe (Automatische Updates)

- c:\programme\avira\antivir personaledition classic\avguard.exe (Avira AntiVir Personal – Free Antivirus Guard)

- c:\programme\avira\antivir personaledition classic\sched.exe (Avira AntiVir Personal – Free Antivirus Planer)

c:\windows\system32\svchost.exe (COM+-Ereignissystem)

c:\windows\system32\dllhost.exe (COM+-Systemanwendung)

C:\WINDOWS\system32\svchost.exe (Computerbrowser)

c:\programme\cyberlink\shared files\richvideo.exe (Cyberlink RichVideo Service(CRVS))

C:\WINDOWS\system32\svchost.exe (Designs)

C:\WINDOWS\system32\svchost.exe (DHCP-Client)

c:\windows\system32\msdtc.exe (Distributed Transaction Coordinator)

C:\WINDOWS\system32\svchost.exe (DNS-Client)

C:\WINDOWS\system32\spoolsv.exe (Druckwarteschlange)

C:\WINDOWS\system32\fxssvc.exe (Fax)

C:\WINDOWS\system32\svchost.exe (Fehlerberichterstattungsdienst)

C:\WINDOWS\system32\inetsrv\inetinfo.exe (FTP-Publishing)

C:\WINDOWS\system32\alg.exe (Gatewaydienst auf Anwendungsebene)

* c:\programme\google\common\google updater\googleupdaterservice.exe (Google Updater Service)

C:\WINDOWS\system32\svchost.exe (Hilfe und Support)

c:\windows\system32\inetsrv\inetinfo.exe (IIS Admin)

c:\windows\system32\imapi.exe (IMAPI-CD-Brenn-COM-Dienste)

C:\WINDOWS\system32\cisvc.exe (Indexdienst)

c:\programme\gemeinsame dateien\installshield\driver\11\intel 32\idrivert.exe (InstallDriver Table Manager)

C:\WINDOWS\system32\svchost.exe (Intelligenter Hintergrundübertragungsdienst)

C:\WINDOWS\system32\svchost.exe (Internetverbindungsfirewall/Gemeinsame Nutzung der Internetverbindung)

c:\programme\ipod\bin\ipodservice.exe (iPodService)

C:\WINDOWS\system32\svchost.exe (Kompatibilität für schnelle Benutzerumschaltung)

C:\WINDOWS\system32\svchost.exe (Konfigurationsfreie drahtlose Verbindung)

C:\WINDOWS\system32\svchost.exe (Kryptografiedienste)

C:\WINDOWS\system32\smlogsvc.exe (Leistungsdatenprotokolle und Warnungen)

c:\windows\system32\mqsvc.exe (Message Queuing)

c:\windows\system32\mqtgsvc.exe (Message Queuing Triggers)

c:\windows\system32\dllhost.exe (MS Software Shadow Copy Provider)

c:\windows\wmssvc.exe (NET Service)

C:\WINDOWS\system32\netdde.exe (Netzwerk-DDE-Dienst)

C:\WINDOWS\system32\netdde.exe (Netzwerk-DDE-Serverdienst)

C:\WINDOWS\system32\svchost.exe (NLA (Network Location Awareness))

C:\WINDOWS\system32\rsvp.exe (QoS-RSVP)

C:\WINDOWS\system32\svchost.exe (RAS-Verbindungsverwaltung)

C:\WINDOWS\system32\svchost.exe (Remoteprozeduraufruf (RPC))

C:\WINDOWS\system32\locator.exe (RPC-Locator)

C:\WINDOWS\system32\svchost.exe (SAP-Agent)

C:\WINDOWS\system32\svchost.exe (Seriennummer der tragbaren Medien)

C:\WINDOWS\system32\svchost.exe (Server)

C:\WINDOWS\system32\svchost.exe (Shellhardwareerkennung)

c:\windows\system32\inetsrv\inetinfo.exe (Simple Mail Transfer Protocol (SMTP))

c:\windows\system32\sessmgr.exe (Sitzungs-Manager für Remotedesktophilfe)

C:\WINDOWS\system32\scardsvr.exe (Smartcard)

C:\WINDOWS\system32\scardsvr.exe (Smartcard-Hilfsprogramm)

C:\WINDOWS\system32\svchost.exe (Systemereignisbenachrichtigung)

C:\WINDOWS\system32\svchost.exe (Systemwiederherstellungsdienst)

C:\WINDOWS\system32\svchost.exe (TCP/IP-NetBIOS-Hilfsprogramm)

C:\WINDOWS\system32\svchost.exe (Telefonie)

C:\WINDOWS\system32\svchost.exe (Terminaldienste)

C:\WINDOWS\system32\svchost.exe (Treibererweiterungen für Windows-Verwaltungsinstrumentation)

C:\WINDOWS\system32\svchost.exe (TuneUp Designerweiterung)

* C:\WINDOWS\system32\tuneupdefragservice.exe (TuneUp Drive Defrag-Dienst)

C:\WINDOWS\system32\svchost.exe (Überwachung verteilter Verknüpfungen (Client))

C:\WINDOWS\system32\ups.exe (Unterbrechungsfreie Stromversorgung)

C:\WINDOWS\system32\svchost.exe (Upload-Manager)

C:\WINDOWS\system32\svchost.exe (Verwaltung für automatische RAS-Verbindung)

C:\WINDOWS\system32\svchost.exe (Verwaltung logischer Datenträger)

C:\WINDOWS\system32\dmadmin.exe (Verwaltungsdienst für die Verwaltung logischer Datenträger)

C:\WINDOWS\system32\vssvc.exe (Volumeschattenkopie)

C:\WINDOWS\system32\svchost.exe (Warndienst)

- c:\programme\war-ftpd\war-ftpd.exe (WARSVR)

C:\WINDOWS\system32\svchost.exe (Webclient)

C:\WINDOWS\system32\svchost.exe (Wechselmedien)

C:\WINDOWS\system32\svchost.exe (Windows Audio)

C:\WINDOWS\system32\svchost.exe (Windows-Bilderfassung (WIA))

C:\WINDOWS\system32\svchost.exe (Windows-Verwaltungsinstrumentation)

C:\WINDOWS\system32\svchost.exe (Windows-Zeitgeber)

c:\windows\system32\wbem\wmiapsrv.exe (WMI-Leistungsadapter)
 

011 HKLM\SYSTEM\CurrentControlSet\Services (drivers)

----------------------------------------------------

* C:\WINDOWS\system32\drivers\avgntdd.sys (avgntdd)

* C:\WINDOWS\system32\drivers\avgntmgr.sys (avgntmgr)

* C:\WINDOWS\system32\drivers\avipbb.sys (avipbb)

- c:\windows\system32\drivers\changer.sys (Changer)

C:\WINDOWS\system32\drivers\elbycdfl.sys (ElbyCDFL)

C:\WINDOWS\system32\drivers\elbycdio.sys (ElbyCDIO Driver)

- c:\windows\system32\drivers\i2omgmt.sys (i2omgmt)

C:\WINDOWS\system32\drivers\imagedrv.sys (Imagedrv)

- c:\windows\system32\drivers\lbrtfdc.sys (lbrtfdc)

- c:\windows\system32\drivers\pcidump.sys (PCIDump)

- c:\windows\system32\drivers\pdcomp.sys (PDCOMP)

- c:\windows\system32\drivers\pdframe.sys (PDFRAME)

- c:\windows\system32\drivers\pdreli.sys (PDRELI)

- c:\windows\system32\drivers\pdrframe.sys (PDRFRAME)

c:\windows\system32\drivers\pqntdrv.sys (PQNTDrv)

C:\WINDOWS\system32\drivers\krait.sys (Razer krait USB Filter Driver)

C:\WINDOWS\system32\drivers\ssmdrv.sys (ssmdrv)

C:\WINDOWS\system32\drivers\stlth317.sys (Stlth317)

* c:\windows\system32\vsdatant.sys (vsdatant)

- c:\windows\system32\drivers\wdica.sys (WDICA)
 

031 HKLM\SOFTWARE\Classes\PROTOCOLS\Handler

-------------------------------------------

c:\progra~1\gemein~1\system\oledb~1\msdaipp.dll (Microsoft Corporation) {E1D2BF42-A96B-11d1-9C6B-0000F875AC61}

c:\progra~1\gemein~1\system\oledb~1\msdaipp.dll (Microsoft Corporation) {E1D2BF42-A96B-11d1-9C6B-0000F875AC61}

c:\progra~1\gemein~1\system\oledb~1\msdaipp.dll (Microsoft Corporation) {E1D2BF40-A96B-11d1-9C6B-0000F875AC61}
 

032 HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms

-----------------------------------------------------------------------------------

C:\WINDOWS\System32\rdpclip.exe (Microsoft Corporation)
 

033 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit

-----------------------------------------------------------------------

c:\windows\system32\userinit.exe (Microsoft Corporation)
 

034 HKLM-HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell

-------------------------------------------------------------------------

C:\WINDOWS\explorer.exe (Microsoft Corporation)
 

035 HKLM-HKCU\SOFTWARE\Microsoft\Active Setup\Installed Components

------------------------------------------------------------------

C:\Programme\outlook express\setup50.exe (Microsoft Corporation) {7790769C-0471-11d2-AF11-00C04FA35D02}

c:\windows\system32\rundll32.exe (Microsoft Corporation) {306D6C21-C1B6-4629-986C-E59E1875B8AF}

C:\WINDOWS\system32\shmgrate.exe (Microsoft Corporation) >{26923b43-4d38-484f-9b9e-de460746276c}

C:\WINDOWS\system32\ie4uinit.exe (Microsoft Corporation) {89820200-ECBD-11cf-8B85-00AA005B4383}

C:\Programme\outlook express\setup50.exe (Microsoft Corporation) {44BBA840-CC51-11CF-AAFA-00AA00B6015C}

c:\windows\inf\unregmp2.exe (Microsoft Corporation) >{22d6f312-b0f6-11d0-94ab-0080c74c7e95}

C:\WINDOWS\system32\shmgrate.exe (Microsoft Corporation) >{881dd1c5-3dcf-431b-b061-f3f88e8be88a}

C:\WINDOWS\system32\regsvr32.exe (Microsoft Corporation) {2C7339CF-2B09-4501-B3F3-F3508C9228ED}

C:\WINDOWS\System32\regsvr32.exe (Microsoft Corporation) {89820200-ECBD-11cf-8B85-00AA005B4340}
 

040 HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks

------------------------------------------------------------

- c:\programme\icqtoolbar\toolbaru.dll {855F3B16-6D32-4fe6-8A56-BBB695989046}
 

041 HKLM-HKCU\Software\Microsoft\Internet Explorer\Toolbar

----------------------------------------------------------

c:\progra~1\flashget\fgiebar.dll (Amaze Soft) {E0E899AB-F487-11D5-8D29-0050BA6940E3}
 

042 HKLM\Software\Microsoft\Internet Explorer\Extensions

--------------------------------------------------------

c:\progra~1\flashget\flashget.exe (Amaze Soft) {D6E814A0-E0C5-11d4-8D29-0050BA6940E3}
 

044 HKCU\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser

------------------------------------------------------------------

- c:\programme\icqtoolbar\toolbaru.dll {855F3B16-6D32-4FE6-8A56-BBB695989046}
 

045 HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser

----------------------------------------------------------------

- c:\programme\icqtoolbar\toolbaru.dll {855F3B16-6D32-4FE6-8A56-BBB695989046}
 

050 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

-----------------------------------------------------------------------------

c:\windows\system32\awtqnkhe.dll {3713F9EE-C059-4540-B697-987EF263A088}
 

052 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

----------------------------------------------------------------------------------

c:\windows\system32\awtqnkhe.dll {3713F9EE-C059-4540-B697-987EF263A088}

* c:\programme\google\googletoolbarnotifier\2.1.1119.1736\swg.dll (Google Inc.) {AF69DE43-7D58-4638-B6FA-CE66B5AD205D}

c:\progra~1\flashget\jccatch.dll (Amaze Soft) {A5366673-E8CA-11D3-9CD9-0090271D075B}

c:\windows\onepus.dll {69F6C0AE-0C78-4999-B6D1-62932A265C5D}

c:\windows\pokru.dll {95E1D855-9232-48F7-80D9-1ADB65B7939C}

c:\programme\spcron\spcron.dll (TODO: <Company name>) {15421B84-3488-49A7-AD18-CBF84A3EFAF6}

- c:\programme\icqtoolbar\toolbaru.dll {055FD26D-3A88-4e15-963D-DC8493744B1D}

c:\windows\system32\vcsbpiy.dll {B9FA63D3-8030-85E4-199B-AB8F71262990}
 

061 HKLM-HCKU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

---------------------------------------------------------------------------------

c:\programme\a-squared anti-malware\a2contmenu.dll (Emsi Software GmbH) {AB77609F-2178-4E6F-9C4B-44AC179D937A}

- deskpan.dll {42071714-76d4-11d1-8b24-00a0c9068ff3}

c:\programme\itunes\itunesminiplayer.dll (Apple Computer, Inc.) {B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}

c:\programme\avira\antivir personaledition classic\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}

* c:\programme\tuneup utilities 2008\sdshelex-win32.dll (TuneUp Software GmbH) {4858E7D9-8E12-45a3-B6A3-1CD128C9D403}

* C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software GmbH) {44440D00-FF19-4AFC-B765-9A0970567D97}

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

c:\progra~1\winzip\wzshlstb.dll (WinZip Computing, Inc.) {E0D79304-84BE-11CE-9641-444553540000}

c:\progra~1\winzip\wzshlstb.dll (WinZip Computing, Inc.) {E0D79305-84BE-11CE-9641-444553540000}

c:\progra~1\winzip\wzshlstb.dll (WinZip Computing, Inc.) {E0D79306-84BE-11CE-9641-444553540000}

c:\progra~1\winzip\wzshlstb.dll (WinZip Computing, Inc.) {E0D79307-84BE-11CE-9641-444553540000}
 

066 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost

---------------------------------------------------------------------

C:\WINDOWS\System32\logonui.exe (Microsoft Corporation)
 

067 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

---------------------------------------------------------------------

C:\WINDOWS\System32\awtqnkhe.dll
 

070 HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages

---------------------------------------------------------------------

c:\windows\system32\byxpqpmf.dll
 

073 %windir%\Tasks

------------------

1-Klick-Wartung.job : c:\programme\tuneup utilities 2008\oneclick.exe (TuneUp Software GmbH)
 

100 Internet Explorer settings

------------------------------

Search Page HKCU : http://google.icq.com

Start Page HKCU : http://www.dbsarticles.com
 

104 HKLM\Software\Microsoft\Code Store Database\Distribution Units

------------------------------------------------------------------

GUID / CLSID not found {33564D57-0000-0010-8000-00AA00389B71}
 

105 HKCU\Software\Microsoft\Internet Explorer\MenuExt

-----------------------------------------------------

Alles mit FlashGet laden : C:\PROGRA~1\FlashGet\jc_all.htm

Mit FlashGet laden : C:\PROGRA~1\FlashGet\jc_link.htm
 

120 Domain/DNS hijacking

------------------------

NameServer {AF78EB6C-D754-4C5F-A5CC-0EFF033E021F} : 213.191.92.87 62.109.123.6
 

146 HKLM\System\CurrentControlSet\Control\SafeBoot\AlternateShell

-----------------------------------------------------------------

C:\WINDOWS\System32\cmd.exe (Microsoft Corporation)
 

148 HKLM\System\CurrentControlSet\Control\WOW\cmdline

-----------------------------------------------------

C:\WINDOWS\system32\ntvdm.exe (Microsoft Corporation)
 

160 HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

------------------------------------------------------------------

DisableTaskMgr : 1
 

173 HKCR\*\shellex\ContextMenuHandlers

--------------------------------------

c:\programme\avira\antivir personaledition classic\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}

* c:\programme\tuneup utilities 2008\sdshelex-win32.dll (TuneUp Software GmbH) {4858E7D9-8E12-45a3-B6A3-1CD128C9D403}

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

c:\progra~1\winzip\wzshlstb.dll (WinZip Computing, Inc.) {E0D79304-84BE-11CE-9641-444553540000}
 

176 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug\Debugger

----------------------------------------------------------------------

C:\WINDOWS\System32\drwtsn32.exe (Microsoft Corporation)
 

210 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\BackupPath

---------------------------------------------------------------------------------

C:\WINDOWS\system32\ntbackup.exe (Microsoft Corporation)
 

211 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\Cleanuppath

----------------------------------------------------------------------------------

C:\WINDOWS\system32\cleanmgr.exe (Microsoft Corporation)
 

213 SOFTWARE\Microsoft\Windows NT\CurrentVersion\Accessibility\Utility Manager\Magnifier

----------------------------------------------------------------------------------------

C:\WINDOWS\System32\magnify.exe (Microsoft Corporation)
 

215 SOFTWARE\Microsoft\Windows NT\CurrentVersion\Accessibility\Utility Manager\On-Screen Keyboard

-------------------------------------------------------------------------------------------------

C:\WINDOWS\System32\osk.exe (Microsoft Corporation)
 

221 HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers

-------------------------------------------------------

c:\programme\avira\antivir personaledition classic\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}

* c:\programme\tuneup utilities 2008\sdshelex-win32.dll (TuneUp Software GmbH) {4858E7D9-8E12-45a3-B6A3-1CD128C9D403}

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

c:\progra~1\winzip\wzshlstb.dll (WinZip Computing, Inc.) {E0D79304-84BE-11CE-9641-444553540000}
 

223 HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers

--------------------------------------------------------------------------

c:\programme\a-squared anti-malware\a2contmenu.dll (Emsi Software GmbH) {AB77609F-2178-4E6F-9C4B-44AC179D937A}
 

225 HKCU\Software\Classes\Folder\ShellEx\ContextMenuHandlers

------------------------------------------------------------

c:\programme\a-squared anti-malware\a2contmenu.dll (Emsi Software GmbH) {AB77609F-2178-4E6F-9C4B-44AC179D937A}

c:\programme\a-squared anti-malware\a2contmenu.dll (Emsi Software GmbH) {AB77609F-2178-4E6F-9C4B-44AC179D937A}

c:\programme\avira\antivir personaledition classic\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}

c:\programme\avira\antivir personaledition classic\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

c:\progra~1\winzip\wzshlstb.dll (WinZip Computing, Inc.) {E0D79304-84BE-11CE-9641-444553540000}

c:\progra~1\winzip\wzshlstb.dll (WinZip Computing, Inc.) {E0D79304-84BE-11CE-9641-444553540000}
 

227 HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers

---------------------------------------------------------------

GUID / CLSID not found {73B24247-042E-4EF5-ADC2-42F62E6FD654}

* c:\programme\tuneup utilities 2008\sdshelex-win32.dll (TuneUp Software GmbH) {4858E7D9-8E12-45a3-B6A3-1CD128C9D403}

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

c:\progra~1\winzip\wzshlstb.dll (WinZip Computing, Inc.) {E0D79304-84BE-11CE-9641-444553540000}
Das ist das was ich beim fuenften anlauf und nen kaffe
Rausbekommen habe:daumenhoc:aplaus::Boogie:
Danke bis dahin