Trojaner-Board - Problem mit TR/Dldr.Swizzor.Gen

hallo hier das hijacklogfile

Code:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 01:07:45, on 11.05.2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal
 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Programme\TuneUpUtilities2006\WinStylerThemeSvc.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Programme\Lavasoft\Ad-Aware 2007\aawservice.exe

C:\Programme\Alwil Software\Avast4\aswUpdSv.exe

C:\Programme\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\Programme\Bonjour\mDNSResponder.exe

C:\WINDOWS\system32\CTsvcCDA.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Programme\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Programme\Java\jre1.6.0_05\bin\jusched.exe

C:\Programme\CyberLink\PowerDVD\PDVDServ.exe

C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programme\Windows Live\Messenger\msnmsgr.exe

C:\Programme\Internet Explorer\iexplore.exe

C:\Programme\Internet Explorer\iexplore.exe

C:\Programme\Alwil Software\Avast4\ashMaiSv.exe

C:\Programme\Alwil Software\Avast4\ashWebSv.exe

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\system32\WgaTray.exe

C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLLoginProxy.exe

C:\Programme\Internet Explorer\iexplore.exe

C:\Programme\Trend Micro\HijackThis\HijackThis.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe
 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://www.google.de/

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = h**p://resultsmaster.com/SmartOffers/Services/resultsmaster/ResultsMasterHomeLeftPane.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_05\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_05\bin\jusched.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe

O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [WAVE DATE] C:\DOKUME~1\ADMINI~1\ANWEND~1\ONEINS~1\DRVLITEINTER.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_05\bin\ssv.dll

O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Programme\Bonjour\ExplorerPlugin.dll

O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe

O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe

O16 - DPF: CabBuilder - h**p://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - h**p://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - h**p://javadl.sun.com/webapps/download/AutoDL?BundleId=19588

O16 - DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} (Image Uploader Control) - h**p://static.pe.studivz.net/photouploader/ImageUploader5.cab?nocache=1209026388

O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Programme\Lavasoft\Ad-Aware 2007\aawservice.exe

O23 - Service: Avira AntiVir Personal – Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programme\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Programme\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programme\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programme\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Bonjour Dienst (Bonjour Service) - Apple Computer, Inc. - C:\Programme\Bonjour\mDNSResponder.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Programme\TuneUpUtilities2006\WinStylerThemeSvc.exe

O23 - Service: UPnPService - Unknown owner - C:\Programme\Gemeinsame Dateien\MAGIX Shared\UPnPService\UPnPService.exe (file missing)
 

--

End of file - 7002 bytes

zweite kommt gleich :aplaus:ich habe es geschafft normal weiß ich nix von sowas.:)

und das running scan logfile

Code:

Runscanner logfile h**p://www.runscanner.net 
 

* = signed file

- = file not found
 

000 General info

----------------

Computer name : SPIELZIMMER

Creation time : 11.05.2008 01:34:34

Hosts <> 127.0.0.1 : 0

Hosts file location : %SystemRoot%\System32\drivers\etc

IE version : 6.0.2900.2180

OS : Microsoft Windows XP

OS Build : 2600

OS SP : Service Pack 2

RunScanner Version : 1.6.3.0

User Language : Deutsch (Deutschland)

User rights : Administrator

Windows folder : C:\WINDOWS
 

001 Running processes

---------------------

* c:\programme\lavasoft\ad-aware 2007\aawservice.exe (Lavasoft)

c:\programme\avira\antivir personaledition classic\avguard.exe (Avira GmbH)

c:\programme\avira\antivir personaledition classic\sched.exe (Avira GmbH)

c:\programme\avira\antivir personaledition classic\avgnt.exe (Avira GmbH)

* c:\windows\system32\services.exe (Microsoft Corporation)

* c:\windows\system32\alg.exe (Microsoft Corporation)

* c:\programme\alwil software\avast4\ashserv.exe (ALWIL Software)

* c:\programme\alwil software\avast4\aswupdsv.exe (ALWIL Software)

* c:\programme\alwil software\avast4\ashmaisv.exe (ALWIL Software)

* c:\progra~1\alwils~1\avast4\ashdisp.exe (ALWIL Software)

* c:\programme\alwil software\avast4\ashwebsv.exe (ALWIL Software)

c:\programme\bonjour\mdnsresponder.exe (Apple Computer, Inc.)

* c:\windows\system32\csrss.exe (Microsoft Corporation)

c:\windows\system32\ctsvccda.exe (Creative Technology Ltd)

* c:\windows\system32\ctfmon.exe (Microsoft Corporation)

* c:\windows\system32\svchost.exe (Microsoft Corporation)

* c:\windows\system32\svchost.exe (Microsoft Corporation)

* c:\windows\system32\svchost.exe (Microsoft Corporation)

* c:\windows\system32\svchost.exe (Microsoft Corporation)

* c:\windows\system32\svchost.exe (Microsoft Corporation)

* c:\windows\system32\svchost.exe (Microsoft Corporation)

* c:\windows\system32\svchost.exe (Microsoft Corporation)

* c:\programme\internet explorer\iexplore.exe (Microsoft Corporation)

* c:\programme\internet explorer\iexplore.exe (Microsoft Corporation)

* c:\programme\internet explorer\iexplore.exe (Microsoft Corporation)

* c:\programme\java\jre1.6.0_05\bin\jusched.exe (Sun Microsystems, Inc.)

* c:\windows\system32\lsass.exe (Microsoft Corporation)

* c:\windows\system32\nvsvc32.exe (NVIDIA Corporation)

c:\programme\cyberlink\powerdvd\pdvdserv.exe (Cyberlink Corp.)

* c:\runscan\runscanner.exe (Runscanner.net)

c:\programme\analog devices\soundmax\smagent.exe (Analog Devices, Inc.)

* c:\windows\system32\spoolsv.exe (Microsoft Corporation)

c:\programme\tuneuputilities2006\winstylerthemesvc.exe (TuneUp Software GmbH)

* c:\windows\explorer.exe (Microsoft Corporation)

* c:\windows\system32\wgatray.exe (Microsoft Corporation)

* c:\programme\windows live\messenger\msnmsgr.exe (Microsoft Corporation)

* c:\windows\system32\winlogon.exe (Microsoft Corporation)

* c:\windows\system32\smss.exe (Microsoft Corporation)

* c:\programme\gemeinsame dateien\microsoft shared\windows live\wlloginproxy.exe (Microsoft Corporation)
 

002 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (+subkeys)

-----------------------------------------------------------------

* c:\progra~1\alwils~1\avast4\ashdisp.exe (ALWIL Software)

c:\programme\avira\antivir personaledition classic\avgnt.exe (Avira GmbH)

c:\programme\gemeinsame dateien\ahead\lib\nerocheck.exe (Nero AG)

C:\WINDOWS\system32\nwiz.exe

c:\programme\quicktime\qttask.exe (Apple Computer, Inc.)

c:\programme\cyberlink\powerdvd\pdvdserv.exe (Cyberlink Corp.)
 

003 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (+subkeys)

-----------------------------------------------------------------

c:\dokume~1\admini~1\anwend~1\oneins~1\drvliteinter.exe
 

010 HKLM\SYSTEM\CurrentControlSet\Services (Services)

-----------------------------------------------------

* c:\programme\lavasoft\ad-aware 2007\aawservice.exe (Ad-Aware 2007 Service)

* c:\programme\alwil software\avast4\ashserv.exe (avast! Antivirus)

* c:\programme\alwil software\avast4\aswupdsv.exe (avast! iAVS4 Control Service)

* c:\programme\alwil software\avast4\ashmaisv.exe (avast! Mail Scanner)

* c:\programme\alwil software\avast4\ashwebsv.exe (avast! Web Scanner)

c:\programme\avira\antivir personaledition classic\avguard.exe (Avira AntiVir Personal – Free Antivirus Guard)

c:\programme\avira\antivir personaledition classic\sched.exe (Avira AntiVir Personal – Free Antivirus Planer)

c:\programme\bonjour\mdnsresponder.exe (Bonjour Dienst)

c:\windows\system32\ctsvccda.exe (Creative Service for CDROM Access)

c:\programme\gemeinsame dateien\installshield\driver\11\intel 32\idrivert.exe (InstallDriver Table Manager)

c:\programme\analog devices\soundmax\smagent.exe (SoundMAX Agent Service)

c:\programme\tuneuputilities2006\winstylerthemesvc.exe (TuneUp WinStyler Theme Service)

- c:\programme\gemeinsame dateien\magix shared\upnpservice\upnpservice.exe (UPnPService)
 

011 HKLM\SYSTEM\CurrentControlSet\Services (drivers)

----------------------------------------------------

* C:\WINDOWS\system32\drivers\aswfsblk.sys (aswFsBlk)

* c:\windows\system32\drivers\aswrdr.sys (aswRdr)

* c:\windows\system32\drivers\aavmker4.sys (avast! Asynchronous Virus Monitor)

* c:\windows\system32\drivers\aswtdi.sys (avast! Network Shield Support)

* c:\windows\system32\drivers\aswsp.sys (avast! Self Protection)

* c:\windows\system32\drivers\aswmon2.sys (avast! Standard Shield Support)

* c:\programme\avira\antivir personaledition classic\avgio.sys (avgio)

* c:\programme\avira\antivir personaledition classic\avgntflt.sys (avgntflt)

* C:\WINDOWS\system32\drivers\avipbb.sys (avipbb)

- c:\windows\system32\drivers\changer.sys (Changer)

C:\WINDOWS\system32\drivers\enodpl.sys (enodpl)

- c:\windows\system32\drivers\i2omgmt.sys (i2omgmt)

- c:\windows\system32\drivers\lbrtfdc.sys (lbrtfdc)

- c:\windows\system32\drivers\pcidump.sys (PCIDump)

- c:\windows\system32\drivers\pdcomp.sys (PDCOMP)

- c:\windows\system32\drivers\pdframe.sys (PDFRAME)

- c:\windows\system32\drivers\pdreli.sys (PDRELI)

- c:\windows\system32\drivers\pdrframe.sys (PDRFRAME)

C:\WINDOWS\system32\drivers\pxhelp20.sys (PxHelp20)

C:\WINDOWS\system32\drivers\ssmdrv.sys (ssmdrv)

C:\WINDOWS\system32\drivers\tandpl.sys (tandpl)

c:\windows\system32\drivers\viasraid.sys (viasraid)

- c:\windows\system32\drivers\wdica.sys (WDICA)
 

031 HKLM\SOFTWARE\Classes\PROTOCOLS\Handler

-------------------------------------------

c:\progra~1\gemein~1\system\oledb~1\msdaipp.dll (Microsoft Corporation) {E1D2BF42-A96B-11d1-9C6B-0000F875AC61}

c:\progra~1\gemein~1\system\oledb~1\msdaipp.dll (Microsoft Corporation) {E1D2BF42-A96B-11d1-9C6B-0000F875AC61}

c:\progra~1\gemein~1\system\oledb~1\msdaipp.dll (Microsoft Corporation) {E1D2BF40-A96B-11d1-9C6B-0000F875AC61}
 

042 HKLM\Software\Microsoft\Internet Explorer\Extensions

--------------------------------------------------------

* c:\programme\icq6\icq.exe (ICQ, Inc.) {E59EB121-F339-4851-A3BA-FE49C35617C2}
 

052 HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

----------------------------------------------------------------------------------

GUID / CLSID not found {7E853D72-626A-48EC-A868-BA8D5E23E045}
 

061 HKLM-HCKU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved

---------------------------------------------------------------------------------

* c:\programme\alwil software\avast4\ashshell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}

c:\programme\bonjour\explorerplugin.dll (Apple Computer, Inc.) {9999A076-A9E2-4C99-8A2B-632FC9429223}

- deskpan.dll {42071714-76d4-11d1-8b24-00a0c9068ff3}

c:\windows\system32\nvshell.dll {1CDB2949-8F65-4355-8456-263E7C208A5D}

c:\windows\system32\nvshell.dll {1E9B04FB-F9E5-4718-997B-B8DA88302A47}

c:\programme\gemeinsame dateien\ahead\lib\nerodigitalext.dll (Nero AG) {B327765E-D724-4347-8B16-78AE18552FC3}

c:\programme\gemeinsame dateien\ahead\lib\nerodigitalext.dll (Nero AG) {7F1CF152-04F8-453A-B34C-E609530A9DC8}

c:\windows\system32\nvshell.dll {1E9B04FB-F9E5-4718-997B-B8DA88302A48}

c:\programme\avira\antivir personaledition classic\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

c:\programme\creative\creative zen\zen media explorer\shctmtp.dll (Creative Technology Ltd) {4AFB2C17-9D16-4478-AEF4-C3FC539961E4}
 

062 HKLM-HKCU\Software\Classes\Folder\Shellex\ColumnHandlers

------------------------------------------------------------

c:\programme\gemeinsame dateien\ahead\lib\nerodigitalext.dll (Nero AG) {7D4D6379-F301-4311-BEBA-E26EB0561882}

c:\programme\adobe\acrobat 7.0\activex\pdfshell.dll (Adobe Systems, Inc.) {F9DB5320-233E-11D1-9F84-707F02C10627}
 

063 HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\BootExecute

---------------------------------------------------------------------

* C:\WINDOWS\system32\lsdelete.exe
 

066 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost

---------------------------------------------------------------------

c:\dokumente und einstellungen\all users\anwendungsdaten\tuneup software\tuneup utilities\winstyler\tu_logonui.exe (Microsoft Corporation)
 

073 %windir%\Tasks

------------------

1-Klick-Wartung.job : c:\programme\tuneuputilities2006\systemoptimizer.exe (TuneUp Software GmbH)

A99C090E918BBE9E.job : c:\dokume~1\admini~1\anwend~1\oneins~1\cool soft live.exe
 

100 Internet Explorer settings

------------------------------

SearchAssistant HKLM : h**p://resultsmaster.com/SmartOffers/Services/resultsmaster/ResultsMasterHomeLeftPane.htm

SearchUrl HKCU : h**p://home.microsoft.com/access/autosearch.asp?p=%s

Start Page HKCU : h**p://www.google.de/
 

104 HKLM\Software\Microsoft\Code Store Database\Distribution Units

------------------------------------------------------------------

* c:\windows\downloaded program files\imageuploader5.ocx (Aurigma, Inc.) {BA162249-F2C5-4851-8ADC-FC58CB424243}

c:\programme\java\jre1.5.0_06\bin\npjpi150_06.dll (Sun Microsystems, Inc.) {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}

GUID / CLSID not found CabBuilder
 

107 HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5

---------------------------------------------------------------------------------

c:\programme\bonjour\mdnsnsp.dll (Apple Computer, Inc.)
 

153 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32

---------------------------------------------------------------

C:\WINDOWS\system32\syncor11.dll (SoundMAX)
 

170 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2

------------------------------------------------------------------------

{5fe12ec2-6249-11dc-a49b-806d6172696f} : E:\AUTORUN.exe
 

173 HKCR\*\shellex\ContextMenuHandlers

--------------------------------------

GUID / CLSID not found {00DF1F20-0849-A4D1-0239-00D0AF3E9CB0}

* c:\programme\alwil software\avast4\ashshell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}

c:\progra~1\creative\shared~1\ctcmectx.dll (Creative Technology Ltd) {7895F317-A125-42CC-BD3E-5830765CE577}

c:\programme\nero\nero 7\nero backitup\nbshell.dll (Nero AG)

c:\programme\avira\antivir personaledition classic\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
 

220 HKCU\Software\Classes\*\ShellEx\ContextMenuHandlers

-------------------------------------------------------

GUID / CLSID not found {00DF1F20-0849-A4D1-0239-00D0AF3E9CB0}
 

221 HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers

-------------------------------------------------------

* c:\programme\alwil software\avast4\ashshell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}

c:\progra~1\creative\shared~1\ctcmectx.dll (Creative Technology Ltd) {7895F317-A125-42CC-BD3E-5830765CE577}

c:\programme\nero\nero 7\nero backitup\nbshell.dll (Nero AG)

c:\programme\avira\antivir personaledition classic\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
 

225 HKCU\Software\Classes\Folder\ShellEx\ContextMenuHandlers

------------------------------------------------------------

* c:\programme\alwil software\avast4\ashshell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}

* c:\programme\alwil software\avast4\ashshell.dll (ALWIL Software) {472083B0-C522-11CF-8763-00608CC02F24}

c:\progra~1\creative\shared~1\ctcmectx.dll (Creative Technology Ltd) {7895F317-A125-42CC-BD3E-5830765CE577}

c:\progra~1\creative\shared~1\ctcmectx.dll (Creative Technology Ltd) {7895F317-A125-42CC-BD3E-5830765CE577}

c:\programme\nero\nero 7\nero backitup\nbshell.dll (Nero AG)

c:\programme\nero\nero 7\nero backitup\nbshell.dll (Nero AG)

c:\programme\avira\antivir personaledition classic\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}

c:\programme\avira\antivir personaledition classic\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
 

226 HKCU\Software\Classes\Directory\ShellEx\ContextMenuHandlers

---------------------------------------------------------------

GUID / CLSID not found {00DF1F20-0849-A4D1-0239-00D0AF3E9CB0}
 

227 HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers

---------------------------------------------------------------

c:\programme\winrar\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
 

229 HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers

--------------------------------------------------------------------------

c:\windows\system32\nvshell.dll {1E9B04FB-F9E5-4718-997B-B8DA88302A48}
 

231 HKLM\Software\Classes\Folder\Shellex\ColumnHandlers

-------------------------------------------------------

c:\programme\gemeinsame dateien\ahead\lib\nerodigitalext.dll (Nero AG) NeroDigitalExt.NeroDigitalColumnHandler

c:\programme\adobe\acrobat 7.0\activex\pdfshell.dll (Adobe Systems, Inc.) PDF Column Info

da steht echt einiges.versteh nicht das sie daraus was lesen können.pespekt:daumenhoc

jetz muss ich das erste was sie mir gesagt haben machen.warte bis dahin auf ihre meldung.ob ich bis jetzt alles richtig gemacht habe.

lg aus aachen