Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   TR/Crypt.XPACK.Gen in -> AppData\Local\Temp\BIT6C2E.tmp (https://www.trojaner-board.de/87254-tr-crypt-xpack-gen-appdata-local-temp-bit6c2e-tmp.html)

feya 17.06.2010 21:36
TR/Crypt.XPACK.Gen in -> AppData\Local\Temp\BIT6C2E.tmp
 
Guten Abend,

ich habe mal wieder ein Problem aber dieses Mal ist es der Laptop :(
Ach Mensch...ich hab ganz normal meinen Rechner entsperrt und aufeinmal meldete sich Avira. Keine Ahnung wieso aber wenn ich dann dort in die Ereignisse klicke steht folgendes:

http://img80.imageshack.us/img80/711...meldung.th.jpg

Uploaded with ImageShack.us


Danach habe ich ein Systemscan gemacht aber natürlich wurde nichts gefunden.
Heute Mittag kam bereits auch ein Bluescreen aber ich habe mir da nichts weiter gedacht. Da nun vorhin Avira die Meldung gezeigt hat, bin ich mir jetzt jedoch sehr unsicher.
Vielleicht könnt ihr mir weiterhelfen? :(


1. CCleaner - erfolgt

2. Malwarebytes-Anti-Malware

Code:
Malwarebytes' Anti-Malware 1.46
w*w.malwarebytes.org

Datenbank Version: 4210

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

17.06.2010 21:58:02
mbam-log-2010-06-17 (21-58-02).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 123864
Laufzeit: 5 Minute(n), 52 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 9
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/Windows/Downloaded Program Files/popcaploader.dll (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\Windows\Downloaded Program Files\popcaploader.dll (Adware.PopCap) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Windows\Downloaded Program Files\popcaploader.dll (Adware.PopCap) -> Quarantined and deleted successfully.
3. RSIT

a) log-rsit

Code:
Logfile of random's system information tool 1.07 (written by random/random)
Run by *** at 2010-06-17 22:05:17
Microsoft® Windows Vista™ Home Premium  Service Pack 2
System drive C: has 63 GB (53%) free of 119 GB
Total RAM: 3070 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:05:26, on 17.06.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\P4P\P4P.exe
C:\Windows\ASScrPro.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\wuauclt.exe
C:\Users\***\Documents\Programme - exe\trojaner entfernen\rsit\RSIT.exe
C:\Program Files\trend micro\***.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.asus.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
R3 - URLSearchHook: (no name) -  - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PowerForPhone] "C:\Program Files\P4P\P4P.exe"
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LexwareInfoService] C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe /autostart
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

--
End of file - 8720 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Anmelde-Hilfsprogramm - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D}]
SearchSettings Class - C:\Program Files\Search Settings\kb127\SearchSettings.dll [2008-06-12 1111904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2007-08-28 655360]
"NvSvc"=C:\Windows\system32\nvsvc.dll [2007-12-05 86016]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2007-12-05 8534560]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2007-12-05 81920]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-09-03 4702208]
"Skytel"=C:\Windows\Skytel.exe [2007-08-03 1826816]
"ATKOSD2"=C:\Program Files\ATKOSD2\ATKOSD2.exe [2007-10-18 7737344]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2008-02-01 61440]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-12-06 1029416]
"PowerForPhone"=C:\Program Files\P4P\P4P.exe [2008-01-26 778240]
"ASUS Screen Saver Protector"=C:\Windows\ASScrPro.exe [2008-08-05 33136]
"ASUS Camera ScreenSaver"=C:\Windows\ASScrProlog.exe [2008-08-05 37232]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2008-08-04 36352]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2008-10-01 289576]
"SearchSettings"=C:\Program Files\Search Settings\SearchSettings.exe [2008-06-12 991584]
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
"PaperPort PTD"=C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe [2007-01-29 30248]
"IndexSearch"=C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe [2007-01-29 46632]
"PPort11reminder"=C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe [2007-02-01 255528]
"BrMfcWnd"=C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe [2007-03-12 663552]
"ControlCenter3"=C:\Program Files\Brother\ControlCenter3\brctrcen.exe [2007-01-26 65536]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-03-02 282792]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"LexwareInfoService"=C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [2008-11-03 339240]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{29fd49f5-bfe9-11de-824f-001f3c65ca2f}]
shell\AutoRun\command - F:\programs\nu2menu\nu2menu.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8317ec70-04bb-11de-b6d0-001f3c65ca2f}]
shell\AutoRun\command - F:\Menu.exe


======List of files/folders created in the last 1 months======

2010-06-17 22:05:17 ----D---- C:\rsit
2010-06-17 22:05:17 ----D---- C:\Program Files\trend micro
2010-06-17 21:49:03 ----D---- C:\Users\***\AppData\Roaming\Malwarebytes
2010-06-17 21:48:43 ----D---- C:\ProgramData\Malwarebytes
2010-06-17 21:48:43 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-06-17 21:20:24 ----D---- C:\Program Files\CCleaner

======List of files/folders modified in the last 1 months======

2010-06-17 22:05:26 ----D---- C:\Windows\Prefetch
2010-06-17 22:05:20 ----D---- C:\Windows\Temp
2010-06-17 22:05:17 ----RD---- C:\Program Files
2010-06-17 22:01:22 ----D---- C:\Windows\system32\catroot2
2010-06-17 22:00:27 ----A---- C:\Windows\system32\acovcnt.exe
2010-06-17 22:00:09 ----D---- C:\Windows
2010-06-17 22:00:00 ----D---- C:\Windows\system32\drivers
2010-06-17 21:59:16 ----D---- C:\Windows\Setup
2010-06-17 21:58:02 ----SD---- C:\Windows\Downloaded Program Files
2010-06-17 21:48:43 ----HD---- C:\ProgramData
2010-06-17 21:32:26 ----D---- C:\Windows\System32
2010-06-17 21:32:26 ----D---- C:\Windows\inf
2010-06-17 21:32:26 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-06-17 21:24:51 ----D---- C:\Users\***\AppData\Roaming\Media Player Classic
2010-06-17 21:24:39 ----D---- C:\Windows\Minidump
2010-06-17 21:24:39 ----D---- C:\Windows\Debug
2010-06-17 18:31:42 ----SHD---- C:\System Volume Information
2010-06-17 16:02:19 ----SHD---- C:\Windows\Installer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-03-01 124784]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-02-16 60936]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-08-08 45568]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller; C:\Windows\system32\DRIVERS\l160x86.sys [2007-10-31 46592]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-21 14208]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-09-05 1953944]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MODEMCSA;Unimodem-Datenstromfiltergerät; C:\Windows\system32\drivers\MODEMCSA.sys [2008-01-21 18432]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 NETw4v32;Intel(R) Wireless WiFi Link Adaptertreiber für Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-06-20 2222080]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-12-05 8241984]
R3 pfc;Padus ASPI Shell; C:\Windows\system32\drivers\pfc.sys [2004-04-01 10368]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2007-08-28 1019136]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2007-10-01 1769984]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400]
S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2008-01-21 2225664]
S3 SCREAMINGBDRIVER;Screaming Bee Audio; C:\Windows\system32\drivers\ScreamingBAudio.sys []
S3 SIVDRIVER;SIV Kernel Driver; \??\C:\Windows\system32\Drivers\SIVX32.sys [2007-02-24 19944]
S3 usbaudio;USB-Audiotreiber (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
S3 usbscan;USB-Scannertreiber; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 usbvideo;USB-Videogerät (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-21 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2008-07-07 611664]
R2 ADSMService;ADSM Service; C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe [2007-05-18 73728]
R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-04-19 267432]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-10-01 116040]
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-10-03 94208]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 Bonjour Service;Bonjour-Dienst; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-03-18 73728]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-06-15 71096]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R3 iPod Service;iPod-Dienst; C:\Program Files\iPod\bin\iPodService.exe [2008-10-01 536872]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-07 136176]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
S3 npggsvc;nProtect GameGuard Service; C:\Windows\system32\GameMon.des [2010-01-04 3404560]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 usprserv;User Privilege Service; C:\Windows\System32\svchost.exe [2008-01-21 21504]

-----------------EOF-----------------
b) info-rsit

Code:
info.txt logfile of random's system information tool 1.06 2010-06-17 22:05:28

======Uninstall list======

-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
2007 Microsoft Office system-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall PROHYBRIDR /dll OSETUP.DLL
Activation Assistant for the 2007 Microsoft Office suites-->"C:\ProgramData\{623D32E9-0C62-4453-AD44-98B31F52A5E1}\Microsoft Office Activation Assistant.exe" REMOVE=TRUE MODIFY=FALSE
Ad-Aware-->MsiExec.exe /I{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}
Adobe Flash Player 10 ActiveX-->C:\Windows\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\Windows\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.3 - Deutsch-->MsiExec.exe /I{AC76BA86-7AD7-1031-7B44-A81300000003}
Adobe Shockwave Player 11.5-->"C:\Windows\system32\Adobe\Shockwave 11\uninstaller.exe"
Apple Mobile Device Support-->MsiExec.exe /I{976C2B2A-CE59-4AB3-83FB-BF895E28F2E6}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ASUS CopyProtect-->C:\Program Files\InstallShield Installation Information\{2396F815-84E0-4353-83D7-8B190556DA42}\setup.exe -runfromtemp -l0x0009 -removeonly
ASUS Data Security Manager-->C:\Program Files\InstallShield Installation Information\{1C8521E5-5A7B-4A4E-A9CD-AD53116EAEE0}\SETUP.exe -runfromtemp -l0x0009 -removeonly
ASUS InstantFun-->MsiExec.exe /I{57B15AD4-8C9D-4164-82BB-E33D8644E757}
ASUS LifeFrame3-->MsiExec.exe /I{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}
ASUS Live Update-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}\setup.exe" -l0x9
ASUS SmartLogon-->MsiExec.exe /I{64452561-169F-4A36-A2FF-B5E118EC65F5}
ASUS Splendid Video Enhancement Technology-->C:\Program Files\InstallShield Installation Information\{C0FC1C14-4824-4A73-87A6-9E888C9C3102}\setup.exe -runfromtemp -l0x0009 -removeonly
Asus_Camera_ScreenSaver-->"C:\Windows\ASUS Camera ScreenSaver Uninstaller.exe"
Atheros Communications Inc.(R) L1 Gigabit Ethernet Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6E19F210-3813-4002-B561-94D66AA182B6}\setup.exe" -l0x9  -removeonly
ATK Generic Function Service-->C:\Program Files\InstallShield Installation Information\{D3D54F3E-C5C3-443D-978F-87A72E5616E8}\SETUP.exe -runfromtemp -l0x0009 -removeonly
ATK Hotkey-->C:\Program Files\InstallShield Installation Information\{3912D529-02BC-4CA8-B5ED-0D0C20EB6003}\setup.exe -runfromtemp -l0x0009 -removeonly
ATK Media-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}\Setup.exe" -l0x9
ATKOSD2-->C:\Program Files\InstallShield Installation Information\{5C1DB4ED-E9B4-402D-BB14-D75D97D6C1A6}\setup.exe -runfromtemp -l0x0009 -removeonly
Avira AntiVir Personal - Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
Bejeweled 2 Deluxe-->"C:\Program Files\MSN Games\Bejeweled 2 Deluxe\Uninstall.exe" "C:\Program Files\MSN Games\Bejeweled 2 Deluxe\install.log"
Bonjour-->MsiExec.exe /I{8A25392D-C5D2-4E79-A2BD-C15DDC5B0959}
Brother MFL-Pro Suite-->"C:\Program Files\InstallShield Installation Information\{A3FEC306-FBFF-4B0D-95B9-F9C67C65079E}\Setup.exe"  -runfromtemp -l0x0007 Brunin03.dll -removeonly
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
CDBurnerXP-->"C:\Program Files\CDBurnerXP\unins000.exe"
CyberLink LabelPrint-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\setup.exe"  -uninstall
DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER
DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DivX Plus DirectShow Filters-->C:\Program Files\DivX\DivXDSFiltersUninstall.exe /DSFILTERS
DivX Plus Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN
Free M4a to MP3 Converter 6.0-->"C:\Program Files\Free M4a to MP3 Converter\unins000.exe"
Free Mp3 Wma Converter V 1.8.0-->"C:\Program Files\Free Audio Pack\unins000.exe"
Google Earth Plug-in-->MsiExec.exe /X{961034C0-58DF-11DF-97FD-005056806466}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
ICQ6.5-->"C:\Program Files\InstallShield Installation Information\{60DE4033-9503-48D1-A483-7846BD217CA9}\setup.exe" -runfromtemp -l0x0009 -removeonly
iTunes-->MsiExec.exe /I{DDDE0BE3-0CBE-4BF6-B75A-E3F69C947843}
Java(TM) 6 Update 20-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
K-Lite Mega Codec Pack 4.5.3-->"C:\Program Files\K-Lite Codec Pack\unins000.exe"
Last.fm 1.5.2.38918-->"C:\Program Files\Last.fm\unins000.exe"
Lexware Info Service-->MsiExec.exe /X{59624372-3B85-47f4-9B04-4911E551DF1E}
LightScribe System Software  1.12.37.1-->MsiExec.exe /X{004C5DA2-2051-4D25-94BA-51CF810C91EB}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Manga Druckstudio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ACBD3967-3316-4113-8641-B9D7C9D52AE2}\setup.exe"
Messenger Plus! Live-->"C:\Program Files\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - deu\setup.exe
Microsoft .NET Framework 3.5 Language Pack SP1 - deu-->MsiExec.exe /I{052FDD78-A6EA-3187-8386-C82F4CA3A929}
Microsoft .NET Framework 3.5 SP1-->C:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Choice Guard-->MsiExec.exe /X{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
Microsoft Office 2000 Premium-->MsiExec.exe /I{00000407-78E1-11D2-B60F-006097C998E7}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-0410-0000-0000000FF1CE} /uninstall {71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0015-0413-0000-0000000FF1CE} /uninstall {DC387AA5-94A6-4920-B004-D59846526D81}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0410-0000-0000000FF1CE} /uninstall {71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0016-0413-0000-0000000FF1CE} /uninstall {DC387AA5-94A6-4920-B004-D59846526D81}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0410-0000-0000000FF1CE} /uninstall {71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0018-0413-0000-0000000FF1CE} /uninstall {DC387AA5-94A6-4920-B004-D59846526D81}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-0410-0000-0000000FF1CE} /uninstall {71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0019-0413-0000-0000000FF1CE} /uninstall {DC387AA5-94A6-4920-B004-D59846526D81}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-0410-0000-0000000FF1CE} /uninstall {71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001A-0413-0000-0000000FF1CE} /uninstall {DC387AA5-94A6-4920-B004-D59846526D81}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0407-0000-0000000FF1CE} /uninstall {9BD40163-B95D-4B07-8991-0AB775B6D88B}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {AE187E0D-EBA5-4EE1-A397-BF1A577CB24C}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0410-0000-0000000FF1CE} /uninstall {71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001B-0413-0000-0000000FF1CE} /uninstall {DC387AA5-94A6-4920-B004-D59846526D81}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0407-0000-0000000FF1CE} /uninstall {26454C26-D259-4543-AA60-3189E09C5F76}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-040C-0000-0000000FF1CE} /uninstall {B165D3C2-40AE-4D39-86F7-E5C87C4264C0}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0410-0000-0000000FF1CE} /uninstall {0A75DA12-55CB-4DE5-8B6A-74D97847204E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-006E-0413-0000-0000000FF1CE} /uninstall {89C8E56A-90D8-4598-B0E6-EB28F6270E07}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0115-0409-0000-0000000FF1CE} /uninstall {DE5A002D-8122-4278-A7EE-3121E7EA254E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-0117-0409-0000-0000000FF1CE} /uninstall {2FC4457D-409E-466F-861F-FB0CB796B53E}
Microsoft Office 2007 Service Pack 2 (SP2)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}
Microsoft Office Access MUI (Dutch) 2007-->MsiExec.exe /X{90120000-0015-0413-0000-0000000FF1CE}
Microsoft Office Access MUI (English) 2007-->MsiExec.exe /X{90120000-0015-0409-0000-0000000FF1CE}
Microsoft Office Access MUI (French) 2007-->MsiExec.exe /X{90120000-0015-040C-0000-0000000FF1CE}
Microsoft Office Access MUI (German) 2007-->MsiExec.exe /X{90120000-0015-0407-0000-0000000FF1CE}
Microsoft Office Access MUI (Italian) 2007-->MsiExec.exe /X{90120000-0015-0410-0000-0000000FF1CE}
Microsoft Office Access Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0117-0409-0000-0000000FF1CE}
Microsoft Office Excel 2007 Help - Aggiornamento (KB963678)-->msiexec /package {90120000-0016-0410-0000-0000000FF1CE} /uninstall {9F57BDED-B51B-4D2F-B360-5B4EFAAF0F1A}
Microsoft Office Excel MUI (Dutch) 2007-->MsiExec.exe /X{90120000-0016-0413-0000-0000000FF1CE}
Microsoft Office Excel MUI (English) 2007-->MsiExec.exe /X{90120000-0016-0409-0000-0000000FF1CE}
Microsoft Office Excel MUI (French) 2007-->MsiExec.exe /X{90120000-0016-040C-0000-0000000FF1CE}
Microsoft Office Excel MUI (German) 2007-->MsiExec.exe /X{90120000-0016-0407-0000-0000000FF1CE}
Microsoft Office Excel MUI (Italian) 2007-->MsiExec.exe /X{90120000-0016-0410-0000-0000000FF1CE}
Microsoft Office Outlook 2007 Help - Aggiornamento (KB963677)-->msiexec /package {90120000-001A-0410-0000-0000000FF1CE} /uninstall {2278E02A-AB15-4BF7-B2B4-5C0EEB4B7EEB}
Microsoft Office Outlook MUI (Dutch) 2007-->MsiExec.exe /X{90120000-001A-0413-0000-0000000FF1CE}
Microsoft Office Outlook MUI (English) 2007-->MsiExec.exe /X{90120000-001A-0409-0000-0000000FF1CE}
Microsoft Office Outlook MUI (French) 2007-->MsiExec.exe /X{90120000-001A-040C-0000-0000000FF1CE}
Microsoft Office Outlook MUI (German) 2007-->MsiExec.exe /X{90120000-001A-0407-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Italian) 2007-->MsiExec.exe /X{90120000-001A-0410-0000-0000000FF1CE}
Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669)-->msiexec /package {90120000-0018-0410-0000-0000000FF1CE} /uninstall {C76C02F1-B07F-4974-876A-A18DEC9887C8}
Microsoft Office PowerPoint MUI (Dutch) 2007-->MsiExec.exe /X{90120000-0018-0413-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (English) 2007-->MsiExec.exe /X{90120000-0018-0409-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (French) 2007-->MsiExec.exe /X{90120000-0018-040C-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (German) 2007-->MsiExec.exe /X{90120000-0018-0407-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Italian) 2007-->MsiExec.exe /X{90120000-0018-0410-0000-0000000FF1CE}
Microsoft Office Professional Hybrid 2007-->MsiExec.exe /X{91120000-0031-0000-0000-0000000FF1CE}
Microsoft Office Proof (Arabic) 2007-->MsiExec.exe /X{90120000-001F-0401-0000-0000000FF1CE}
Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Italian) 2007-->MsiExec.exe /X{90120000-001F-0410-0000-0000000FF1CE}
Microsoft Office Proof (Spanish) 2007-->MsiExec.exe /X{90120000-001F-0C0A-0000-0000000FF1CE}
Microsoft Office Proofing (Dutch) 2007-->MsiExec.exe /X{90120000-002C-0413-0000-0000000FF1CE}
Microsoft Office Proofing (English) 2007-->MsiExec.exe /X{90120000-002C-0409-0000-0000000FF1CE}
Microsoft Office Proofing (French) 2007-->MsiExec.exe /X{90120000-002C-040C-0000-0000000FF1CE}
Microsoft Office Proofing (German) 2007-->MsiExec.exe /X{90120000-002C-0407-0000-0000000FF1CE}
Microsoft Office Proofing (Italian) 2007-->MsiExec.exe /X{90120000-002C-0410-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0401-0000-0000000FF1CE} /uninstall {14809F99-C601-4D4A-9391-F1E8FAA964C5}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {A0516415-ED61-419A-981D-93596DA74165}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {ABDDE972-355B-4AF1-89A8-DA50B7B5C045}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {F580DDD5-8D37-4998-968E-EBB76BB86787}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0410-0000-0000000FF1CE} /uninstall {322296D4-1EAE-4030-9FBC-D2787EB25FA2}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)-->msiexec /package {90120000-001F-0C0A-0000-0000000FF1CE} /uninstall {187308AB-5FA7-4F14-9AB9-D290383A10D9}
Microsoft Office Publisher MUI (Dutch) 2007-->MsiExec.exe /X{90120000-0019-0413-0000-0000000FF1CE}
Microsoft Office Publisher MUI (English) 2007-->MsiExec.exe /X{90120000-0019-0409-0000-0000000FF1CE}
Microsoft Office Publisher MUI (French) 2007-->MsiExec.exe /X{90120000-0019-040C-0000-0000000FF1CE}
Microsoft Office Publisher MUI (German) 2007-->MsiExec.exe /X{90120000-0019-0407-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Italian) 2007-->MsiExec.exe /X{90120000-0019-0410-0000-0000000FF1CE}
Microsoft Office Shared MUI (Dutch) 2007-->MsiExec.exe /X{90120000-006E-0413-0000-0000000FF1CE}
Microsoft Office Shared MUI (English) 2007-->MsiExec.exe /X{90120000-006E-0409-0000-0000000FF1CE}
Microsoft Office Shared MUI (French) 2007-->MsiExec.exe /X{90120000-006E-040C-0000-0000000FF1CE}
Microsoft Office Shared MUI (German) 2007-->MsiExec.exe /X{90120000-006E-0407-0000-0000000FF1CE}
Microsoft Office Shared MUI (Italian) 2007-->MsiExec.exe /X{90120000-006E-0410-0000-0000000FF1CE}
Microsoft Office Shared Setup Metadata MUI (English) 2007-->MsiExec.exe /X{90120000-0115-0409-0000-0000000FF1CE}
Microsoft Office Word 2007 Help - Aggiornamento (KB963665)-->msiexec /package {90120000-001B-0410-0000-0000000FF1CE} /uninstall {E5B82DB3-DD7D-4C45-BC5E-09864B26F9BC}
Microsoft Office Word MUI (Dutch) 2007-->MsiExec.exe /X{90120000-001B-0413-0000-0000000FF1CE}
Microsoft Office Word MUI (English) 2007-->MsiExec.exe /X{90120000-001B-0409-0000-0000000FF1CE}
Microsoft Office Word MUI (French) 2007-->MsiExec.exe /X{90120000-001B-040C-0000-0000000FF1CE}
Microsoft Office Word MUI (German) 2007-->MsiExec.exe /X{90120000-001B-0407-0000-0000000FF1CE}
Microsoft Office Word MUI (Italian) 2007-->MsiExec.exe /X{90120000-001B-0410-0000-0000000FF1CE}
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
MIDI Klavier 1.0.1-->"C:\Program Files\MIDI Klavier\unins000.exe"
Mise à jour Microsoft Office Excel 2007 Help  (KB963678)-->msiexec /package {90120000-0016-040C-0000-0000000FF1CE} /uninstall {B761869A-B85C-40E2-994C-A1CE78AC8F2C}
Mise à jour Microsoft Office Outlook 2007 Help  (KB963677)-->msiexec /package {90120000-001A-040C-0000-0000000FF1CE} /uninstall {51EFB347-1F3D-4BAC-8B79-F056B904FE21}
Mise à jour Microsoft Office Powerpoint 2007 Help  (KB963669)-->msiexec /package {90120000-0018-040C-0000-0000000FF1CE} /uninstall {C3DCA38E-005E-41BA-A52A-7C3429F351C3}
Mise à jour Microsoft Office Word 2007 Help  (KB963665)-->msiexec /package {90120000-001B-040C-0000-0000000FF1CE} /uninstall {81536A04-DBFB-4DB3-978F-0F284590C223}
Motorola SM56 Speakerphone Modem-->rundll32.exe sm56co76.dll,SM56UnInstaller
Mozilla Firefox (3.6.3)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
NB Probe-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}\setup.exe" -l0x9
NVIDIA Drivers-->C:\Windows\system32\NVUNINST.EXE UninstallGUI
P4P-->C:\Program Files\InstallShield Installation Information\{FC3D290D-79BE-44B7-ABF9-FDD110925930}\setup.exe -runfromtemp -l0x0009 -removeonly
Pando Media Booster-->C:\Program Files\Pando Networks\Media Booster\uninst.exe
PaperPort Image Printer-->MsiExec.exe /X{332CC6BF-E6C7-48EE-BA3D-435E576AD67F}
Power2Go-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{40BF1E83-20EB-11D8-97C5-0009C5020658}\setup.exe"  -uninstall
Power4Gear eXtreme-->C:\Program Files\InstallShield Installation Information\{8CFEBE9C-F29F-4C49-80E0-7106970F8734}\SETUP.exe -runfromtemp -l0x0009 -removeonly
PSPad editor-->"C:\Program Files\PSPad editor\Uninst\unins000.exe"
QuickSteuer 2010-->MsiExec.exe /X{AC42EE05-1F5D-4B92-851A-DBFE81088A0C}
QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB}
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59F6A514-9813-47A3-948C-8A155460CC2A}\setup.exe" -l0x9 anything
ScanSoft PaperPort 11-->MsiExec.exe /I{B6C89654-A6A2-477C-873B-724EC1C56407}
Search Settings 1.2-->MsiExec.exe /X{D0C73318-7B4A-4D16-A0C4-3B83F075EA88}
Security Update for 2007 Microsoft Office System (KB969559)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {69F52148-9BF6-4CDC-BF76-103DEAF3DD08}
Security Update for 2007 Microsoft Office System (KB978380)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {667A88D1-0369-4070-A62A-70672D68A9BF}
Security Update for Microsoft Office Excel 2007 (KB978382)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {6DE3DABF-0203-426B-B330-7287D1003E86}
Security Update for Microsoft Office Outlook 2007 (KB972363)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {120BE9A0-9B09-4855-9E0C-7DEE45CB03C0}
Security Update for Microsoft Office PowerPoint 2007 (KB957789)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {7559E742-FF9F-4FAE-B279-008ED296CB4D}
Security Update for Microsoft Office Publisher 2007 (KB980470)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {34573F17-DADE-4D0D-835F-A54A1DE8AC1F}
Security Update for Microsoft Office system 2007 (972581)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {3D019598-7B59-447A-80AE-815B703B84FF}
Security Update for Microsoft Office system 2007 (KB969613)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {5ECEB317-CBE9-4E08-AB10-756CB6F0FB6C}
Security Update for Microsoft Office system 2007 (KB974234)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {FCD742B9-7A55-44BC-A776-F795F21FEDDC}
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {71127777-8B2C-4F97-AF7A-6CF8CAC8224D}
Spelling Dictionaries Support For Adobe Reader 8-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-800000000003}
StepMania (remove only)-->"C:\Program Files\StepMania\uninstall.exe"
SUPER © Version 2007.bld.22 (Mar 14, 2007)-->C:\PROGRA~1\ERIGHT~1\SUPER\Setup.exe /remove /q0
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
TeamSpeak 2 RC2-->"C:\Program Files\Teamspeak2_RC2\unins000.exe"
Trillian-->C:\Program Files\Trillian\trillian.exe /uninstall
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for 2007 Microsoft Office System (KB981715)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {661B3F32-FFE4-4606-AE3A-DFA11DCC0D79}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Microsoft Office 2007 Help for Common Features (KB963673)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {AB365889-0395-4FAD-B702-CA5985D53D42}
Update for Microsoft Office Access 2007 Help (KB963663)-->msiexec /package {90120000-0015-0409-0000-0000000FF1CE} /uninstall {6B76A18A-AA1E-42AB-A7AD-6C84BBB43987}
Update for Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-0409-0000-0000000FF1CE} /uninstall {199DF7B6-169C-448C-B511-1054101BE9C9}
Update for Microsoft Office InfoPath 2007 (KB976416)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {432C5EE4-8096-4FF1-95E1-65219365DFF7}
Update for Microsoft Office Outlook 2007 Help (KB963677)-->msiexec /package {90120000-001A-0409-0000-0000000FF1CE} /uninstall {0451F231-E3E3-4943-AB9F-58EB96171784}
Update for Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-0409-0000-0000000FF1CE} /uninstall {397B1D4F-ED7B-4ACA-A637-43B670843876}
Update for Microsoft Office Publisher 2007 Help (KB963667)-->msiexec /package {90120000-0019-0409-0000-0000000FF1CE} /uninstall {2E40DE55-B289-4C8B-8901-5D369B16814F}
Update for Microsoft Office Script Editor Help (KB963671)-->msiexec /package {90120000-006E-0409-0000-0000000FF1CE} /uninstall {CD11C6A2-FFC6-4271-8EAB-79C3582F505C}
Update for Microsoft Office Word 2007 (KB974561)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {0CDDBAA2-2111-4A0E-A1B0-76C40C635331}
Update for Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-0409-0000-0000000FF1CE} /uninstall {80E762AA-C921-4839-9D7D-DB62A72C0726}
Update for Outlook 2007 Junk Email Filter (kb981433)-->msiexec /package {91120000-0031-0000-0000-0000000FF1CE} /uninstall {5A6859A6-042D-4DF7-84E2-79F8DEFB5D48}
Update für Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-0407-0000-0000000FF1CE} /uninstall {BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}
Update für Microsoft Office Outlook 2007 Help (KB963677)-->msiexec /package {90120000-001A-0407-0000-0000000FF1CE} /uninstall {F6828576-6F79-470D-AB50-69D1BBADBD30}
Update für Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-0407-0000-0000000FF1CE} /uninstall {EA160DA3-E9B5-4D03-A518-21D306665B96}
Update für Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-0407-0000-0000000FF1CE} /uninstall {38472199-D7B6-4833-A949-10E4EE6365A1}
Update voor Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-0413-0000-0000000FF1CE} /uninstall {5CF7002F-6F49-4482-9564-5614FBE560FA}
Update voor Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-0413-0000-0000000FF1CE} /uninstall {15D84E79-1ED7-42C5-B2FD-745C3FBDDDC5}
Update voor Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-0413-0000-0000000FF1CE} /uninstall {A66AE6A1-8D8C-4102-BC18-38CBDE40F809}
USB 2.0 1.3M UVC WebCam-->C:\Windows\snuninst.exe /name='USB 2.0 1.3M UVC WebCam'
VC80CRTRedist - 8.0.50727.4053-->MsiExec.exe /I{5EE7D259-D137-4438-9A5F-42F432EC0421}
VLC media player 0.9.8a-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Winamp-->"C:\Program Files\Winamp\UninstWA.exe"
Windows Live Anmelde-Assistent-->MsiExec.exe /I{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}
Windows Live Call-->MsiExec.exe /I{5FC68772-6D56-41C6-9DF1-24E868198AE6}
Windows Live Communications Platform-->MsiExec.exe /I{ED00D08A-3C5F-488D-93A0-A04F21F23956}
Windows Live Essentials-->C:\Program Files\Windows Live\Installer\wlarp.exe
Windows Live Essentials-->MsiExec.exe /I{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}
Windows Live Messenger-->MsiExec.exe /X{41E654A9-26D0-4EAC-854B-0FA824FFFABB}
Windows Live-Uploadtool-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
Windows Media Player Firefox Plugin-->MsiExec.exe /I{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
WinFlash-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DE10AB76-4756-4913-BE25-55D1C1051F9A}\setup.exe" -l0x9
WinRAR-->C:\Program Files\WinRAR\uninstall.exe
Wireless Console 2-->C:\Program Files\InstallShield Installation Information\{83F73CB1-7705-49D1-9852-84D839CA2A45}\setup.exe -runfromtemp -l0x0009 -removeonly
Zattoo 3.3.4 Beta-->C:\Program Files\Zattoo\uninst.exe

======System event log======

Computer Name: ***
Event Code: 7036
Message: Dienst "Druckwarteschlange" befindet sich jetzt im Status "Ausgeführt".
Record Number: 242734
Source Name: Service Control Manager
Time Written: 20100218193137.000000-000
Event Type: Informationen
User:

Computer Name: ***
Event Code: 7036
Message: Dienst "Aufgabenplanung" befindet sich jetzt im Status "Ausgeführt".
Record Number: 242733
Source Name: Service Control Manager
Time Written: 20100218193137.000000-000
Event Type: Informationen
User:

Computer Name: ***
Event Code: 7036
Message: Dienst "Lavasoft Ad-Aware Service" befindet sich jetzt im Status "Ausgeführt".
Record Number: 242732
Source Name: Service Control Manager
Time Written: 20100218193137.000000-000
Event Type: Informationen
User:

Computer Name: ***
Event Code: 7036
Message: Dienst "Shellhardwareerkennung" befindet sich jetzt im Status "Ausgeführt".
Record Number: 242731
Source Name: Service Control Manager
Time Written: 20100218193137.000000-000
Event Type: Informationen
User:

Computer Name: ***
Event Code: 7036
Message: Dienst "ATKGFNEX Service" befindet sich jetzt im Status "Ausgeführt".
Record Number: 242730
Source Name: Service Control Manager
Time Written: 20100218193137.000000-000
Event Type: Informationen
User:

=====Application event log=====

Computer Name: ***
Event Code: 5615
Message: Der Windows-Verwaltungsinstrumentationsdienst wurde erfolgreich gestartet.
Record Number: 2827
Source Name: Microsoft-Windows-WMI
Time Written: 20080920103326.000000-000
Event Type: Informationen
User:

Computer Name: ***
Event Code: 4
Message: The LightScribe Service started successfully.
Record Number: 2826
Source Name: LightScribeService
Time Written: 20080920103325.000000-000
Event Type: Informationen
User:

Computer Name: ***
Event Code: 902
Message: Der Softwarelizenzierungsdienst wurde gestartet.

Record Number: 2825
Source Name: Microsoft-Windows-Security-Licensing-SLC
Time Written: 20080920103319.000000-000
Event Type: Informationen
User:

Computer Name: ***
Event Code: 1005
Message: Ergebnis der Inanspruchnahme von Windows-Rechten: hr=0x0

Record Number: 2824
Source Name: Microsoft-Windows-Security-Licensing-SLC
Time Written: 20080920103319.000000-000
Event Type: Informationen
User:

Computer Name: ***
Event Code: 1003
Message: Softwarelizenzierungsdienst hat die Überprüfung des Lizenzierungsstatus abgeschlossen.
Anwendungs-ID=55c92734-d682-4d71-983e-d6ec3f16059f
Lizenzierungsstatus=
{1,[3a1d44e2-bede-46fb-8a02-0cd485a1db8b, 8, 0xC004F014,0x0]}

{1,[9e042223-03bf-49ae-808f-ff37f128d40d, 8, 0xC004F014,0x0]}

{1,[a3481201-436e-4fc9-88b4-34ccf7f81789, 8, 0xC004F014,0x0]}

{1,[a4eec485-e375-48b4-8f51-80d13a4086b6, 8, 0xC004F014,0x0]}

{1,[b6795467-dc45-4acf-af87-e948ee3f15f4, 8, 0xC004F014,0x0]}

{1,[bffdc375-bbd5-499d-8ef1-4f37b61c895f, 0, 0x0,0x0],[0x0,0x0,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0x0,0xFFFFFFFF,0x0,0,0,0x0],[0,0,0x0]}

{1,[c3505bd0-004a-49b9-84db-a1a4869eddf1, 8, 0xC004F014,0x0]}

{1,[c5d8ec70-e2ae-42d8-aaa9-eec3772438ee, 8, 0xC004F014,0x0]}

{1,[f3acdd3c-119a-4932-a3d7-0b6f33a1dca9, 8, 0xC004F014,0x0]}

{1,[afd5f68f-b70f-4000-a21d-28dbc8be8b07, 8, 0xC004F014,0x0]}

Record Number: 2823
Source Name: Microsoft-Windows-Security-Licensing-SLC
Time Written: 20080920103319.000000-000
Event Type: Informationen
User:

=====Security event log=====

Computer Name: ***
Event Code: xxxx
Message: Ein Konto wurde erfolgreich angemeldet.

Antragsteller:
        Sicherheits-ID:                xxx
        Kontoname:                ***
        Kontodomäne:                xxx
        Anmelde-ID:                xxx

Anmeldetyp:                        x

Neue Anmeldung:
        Sicherheits-ID:                xxx
        Kontoname:                xxx
        Kontodomäne:                xxx
        Anmelde-ID:                xxx
        Anmelde-GUID:                xxx

Prozessinformationen:
        Prozess-ID:                xxx
        Prozessname:                C:\Windows\System32\services.exe

Netzwerkinformationen:
        Arbeitsstationsname:       
        Quellnetzwerkadresse:        -
        Quellport:                -

Detaillierte Authentifizierungsinformationen:
        Anmeldeprozess:                Advapi 
        Authentifizierungspaket:        Negotiate
        Übertragene Dienste:        -
        Paketname (nur NTLM):        -
        Schlüssellänge:                0

Dieses Ereignis wird beim Erstellen einer Anmeldesitzung generiert. Es wird auf dem Computer generiert, auf den zugegriffen wurde.

Die Antragstellerfelder geben das Konto auf dem lokalen System an, von dem die Anmeldung angefordert wurde. Dies ist meistens ein Dienst wie der Serverdienst oder ein lokaler Prozess wie "Winlogon.exe" oder "Services.exe".

Das Anmeldetypfeld gibt den jeweiligen Anmeldetyp an. Die häufigsten Typen sind 2 (interaktiv) und 3 (Netzwerk).

Die Felder für die neue Anmeldung geben das Konto an, für das die Anmeldung erstellt wurde, d. h. das angemeldete Konto.

Die Netzwerkfelder geben die Quelle einer Remoteanmeldeanforderung an. der Arbeitsstationsname ist nicht immer verfügbar und kann in manchen Fällen leer bleiben.

Die Felder für die Authentifizierungsinformationen enthalten detaillierte Informationen zu dieser speziellen Anmeldeanforderung.
        - Die Anmelde-GUID ist ein eindeutiger Bezeichner, der verwendet werden kann, um dieses Ereignis mit einem KDC-Ereignis zu korrelieren.
        - Die übertragenen Dienste geben an, welche Zwischendienste an der Anmeldeanforderung beteiligt waren.
        - Der Paketname gibt das in den NTLM-Protokollen verwendete Unterprotokoll an.
        - Die Schlüssellänge gibt die Länge des generierten Sitzungsschlüssels an. Wenn kein Sitzungsschlüssel angefordert wurde, ist dieser Wert 0.
Record Number: xxx
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090903193126.845293-000
Event Type: Überwachung erfolgreich
User:

Computer Name: ***
Event Code: xxx
Message: Anmeldeversuch mit expliziten Anmeldeinformationen.

Antragsteller:
        Sicherheits-ID:                xxx
        Kontoname:                ***
        Kontodomäne:                xxx
        Anmelde-ID:                xxx
        Anmelde-GUID:                xxx

Konto, dessen Anmeldeinformationen verwendet wurden:
        Kontoname:                xxx
        Kontodomäne:                xxx
        Anmelde-GUID:                xxx

Zielserver:
        Zielservername:        localhost
        Weitere Informationen:        localhost

Prozessinformationen:
        Prozess-ID:                xxx
        Prozessname:                C:\Windows\System32\services.exe

Netzwerkinformationen:
        Netzwerkadresse:        -
        Port:                        -

Dieses Ereignis wird bei einem Anmeldeversuch durch einen Prozess generiert, wenn ausdrücklich die Anmeldeinformationen des Kontos angegeben werden.  Dies ist normalerweise der Fall in Batch-Konfigurationen, z. B. bei geplanten Aufgaben oder wenn der Befehl "runas" verwendet wird.
Record Number: 52019
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090903193126.845293-000
Event Type: Überwachung erfolgreich
User:

Computer Name: ***
Event Code: xxx
Message: Der Windows-Firewalldienst konnte den Benutzer nicht darüber benachrichtigen, dass eine Anwendung blockiert wurde und keine eingehenden Verbindungen im Netzwerk annehmen kann.

Fehlercode:        2
Record Number: xxx
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090903193126.486493-000
Event Type: Überwachung gescheitert
User:

Computer Name: ***
Event Code: xxx
Message: Der Windows-Firewalldienst konnte den Benutzer nicht darüber benachrichtigen, dass eine Anwendung blockiert wurde und keine eingehenden Verbindungen im Netzwerk annehmen kann.

Fehlercode:        2
Record Number: xxx
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090903193111.432493-000
Event Type: Überwachung gescheitert
User:

Computer Name: ***
Event Code: xxx
Message: Der Windows-Firewalldienst wurde erfolgreich gestartet.
Record Number: 52016
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20090903193105.816493-000
Event Type: Überwachung erfolgreich
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;C:\Program Files\Common Files\DivX Shared\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"configsetroot"=%SystemRoot%\ConfigSetRoot
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip

-----------------EOF-----------------

viele grüße und einen schönen abend :)

kira 18.06.2010 04:44
Hallo und Herzlich Willkommen! :)

- Die Anweisungen bitte gründlich lesen und immer streng einhalten, da ich die Reihenfolge nach bestimmten Kriterien vorbereitet habe:

1.
Lade Dir Malwarebytes Anti-Malware von→ malwarebytes.org
  • Installieren und per Doppelklick starten.
  • Deutsch einstellen und gleich mal die Datenbanken zu aktualisieren - online updaten
  • "Komplett Scan durchführen" wählen (überall Haken setzen)
  • wenn der Scanvorgang beendet ist, klicke auf "Zeige Resultate"
  • alle Funde markieren und auf "Löschen" - "Ausgewähltes entfernen") klicken.
  • Poste das Ergebnis hier in den Thread - den Bericht findest Du unter "Scan-Berichte"
eine bebilderte Anleitung findest Du hier: Malwarebytes Anti-Malware

2.
poste erneut:
Trend Micro HijackThis-Logfile - Keine offenen Fenster, solang bis HijackThis läuft!!

3.
Bitte Versteckte - und Systemdateien sichtbar machen den Link hier anklicken:
System-Dateien und -Ordner unter XP und Vista sichtbar machen
Am Ende unserer Arbeit, kannst wieder rückgängig machen!

4.
→ Lade Dir HJTscanlist.zip herunter
→ entpacke die Datei auf deinem Desktop
→ Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren
→ per Doppelklick starten
→ Wähle dein Betriebsystem aus - Vista
→ Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen
→ Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren
→ Bitte kopiere den Inhalt hier in Deinen Thread.

5.
Ich würde gerne noch all deine installierten Programme sehen:
Lade dir das Tool ccleaner herunter
installieren ("Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen
dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..."
wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein

Zitat:
Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du:[code]
hier kommt dein Logfile rein
→ dahinter:[/code]
gruß
Coverflow

feya 23.06.2010 18:58
Vielen Dank für die Antwort ;) Ich bin alles Schritt für Schritt durchgegangen und hier sind meine LOG-Files:

1. Malwarebytes Anti-Malware

Code:
Malwarebytes' Anti-Malware 1.46
***.malwarebytes.org

Datenbank Version: 4229

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

23.06.2010 18:46:51
mbam-log-2010-06-23 (18-46-51).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|)
Durchsuchte Objekte: 296532
Laufzeit: 1 Stunde(n), 17 Minute(n), 39 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

2. Trend Micro HijackThis-Logfile

Code:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:27:06, on 23.06.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\P4P\P4P.exe
C:\Windows\ASScrPro.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Windows\System32\rundll32.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Windows\system32\wuauclt.exe
C:\Users\***\Documents\Programme - exe\***\hijackthis\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ***://***.asus.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ***://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = ***://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ***://***.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = ***://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ***://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = ***://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
R3 - URLSearchHook: (no name) -  - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PowerForPhone] "C:\Program Files\P4P\P4P.exe"
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LexwareInfoService] C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe /autostart
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - ***://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

--
End of file - 8618 bytes

3. System-Dateien und -Ordner unter XP und Vista sichtbar machen -> hoffentlich richtig erledigt :P


4. HJTscanlist

Code:

                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
                        º                                    º
                                    hjtscanlist v2.0             
                        º                                    º
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

Microsoft Windows [Version 6.0.6002]
 
 
C:

  23.06.2010 19:25    C:\System Volume Information --------- 20480 
      C:\pagefile.sys ---------   
  22.06.2010 09:32    C:\Windows --------- 28672 
  21.06.2010 20:03    C:\Program Files --------- 24576 
  17.06.2010 22:05    C:\rsit --------- 0 
  17.06.2010 21:48    C:\ProgramData --------- 8192 
  21.02.2010 13:12    C:\Boot --------- 4096 
  02.08.2009 11:59    C:\NdoorsLog.txt --------- 0 
  02.08.2009 11:20    C:\nDoors --------- 0 
  11.04.2009 08:36    C:\bootmgr --------- 333257 
  01.09.2008 20:41    C:\$RECYCLE.BIN --------- 0 
  01.09.2008 20:35    C:\Users --------- 4096 
  05.08.2008 09:16    C:\devlist.txt --------- 19519 
  05.08.2008 09:13    C:\Finish.log --------- 9 
  05.08.2008 08:54    C:\setup.log --------- 86 
  05.08.2008 08:36    C:\RHDSetup.log --------- 426 
  05.08.2008 08:21    C:\Intel --------- 0 
  05.08.2008 08:14    C:\SumHidd.txt --------- 166 
  05.08.2008 08:13    C:\SumOS.txt --------- 98 
  05.08.2008 07:42    C:\MSOCache --------- 0 
  04.08.2008 20:09    C:\Pass.txt --------- 105 
  23.07.2008 09:40    C:\Patch.LOG --------- 2238 
  04.07.2008 06:35    C:\NIS2008.TXT --------- 21 
  29.04.2008 16:30    C:\READER_A.TXT --------- 20 
  22.04.2008 11:40    C:\NERO.LOG --------- 31 
  17.04.2008 11:30    C:\F3Sg_Vista.20 --------- 16 
  17.04.2008 02:32    C:\V541.TXT --------- 24 
  16.04.2008 13:27    C:\BOOTSECT.BAK --------- 8192 
  12.02.2008 04:03    C:\F3Sg.BIN --------- 1048576 
  21.01.2008 04:32    C:\PerfLogs --------- 0 
  11.12.2007 05:31    C:\RECOVERY.DAT --------- 14 
  04.04.2007 21:01    C:\CA21.txt --------- 19 
  16.03.2007 01:18    C:\OFFICE2007_A.TXT --------- 25 
  02.11.2006 15:02    C:\Documents and Settings --------- 0 
  18.09.2006 23:43    C:\config.sys --------- 10 
  18.09.2006 23:43    C:\autoexec.bat --------- 24 
  16.05.2006 02:22    C:\store.log --------- 5 
----------------------------------------

 
C:\Windows

  23.06.2010 19:25    C:\Windows\WindowsUpdate.log --------- 1319587 
  23.06.2010 19:21    C:\Windows\bootstat.dat --------- 67584 
  22.06.2010 09:32    C:\Windows\setupact.log --------- 715 
  22.06.2010 09:32    C:\Windows\setuperr.log --------- 0 
  17.06.2010 22:00    C:\Windows\PFRO.log --------- 316 
  25.07.2009 10:39    C:\Windows\win.ini --------- 157 
  11.04.2009 08:27    C:\Windows\explorer.exe --------- 2926592 
  24.02.2009 18:17    C:\Windows\BRPP2KA.INI --------- 27 
  24.02.2009 18:17    C:\Windows\BRWMARK.INI --------- 425 
  02.09.2008 19:19    C:\Windows\ODBC.INI --------- 403 
  02.09.2008 19:19    C:\Windows\vbaddin.ini --------- 35 
  02.09.2008 17:39    C:\Windows\nsreg.dat --------- 0 
  02.09.2008 16:35    C:\Windows\ATKPF.ini --------- 24 
  05.08.2008 09:12    C:\Windows\ASScrProlog.exe --------- 37232 
  05.08.2008 09:12    C:\Windows\ASUS Camera ScreenSaver.exe --------- 4814371 
  05.08.2008 09:12    C:\Windows\ASUS Camera ScreenSaver Uninstaller.exe --------- 274800 
  05.08.2008 09:12    C:\Windows\Asus_Camera_ScreenSaver.scr --------- 503808 
  05.08.2008 09:12    C:\Windows\flashax.exe --------- 606848 
  05.08.2008 09:12    C:\Windows\impborl.dll --------- 12288 
  05.08.2008 09:12    C:\Windows\ASScrPro.exe --------- 33136 
  05.08.2008 08:53    C:\Windows\%TEMP% --------- 230 
  05.08.2008 08:35    C:\Windows\DIFxAPI.dll --------- 319456 
  05.08.2008 08:35    C:\Windows\HideWin.exe --------- 315392 
  14.07.2008 08:59    C:\Windows\csup.txt --------- 10 
  21.01.2008 04:43    C:\Windows\WindowsShell.Manifest --------- 749 
  21.01.2008 04:24    C:\Windows\regedit.exe --------- 134656 
  21.01.2008 04:24    C:\Windows\bfsvc.exe --------- 58880 
  21.01.2008 04:24    C:\Windows\fveupdate.exe --------- 13312 
  21.01.2008 04:24    C:\Windows\HelpPane.exe --------- 498176 
  21.01.2008 04:23    C:\Windows\notepad.exe --------- 151040 
  17.10.2007 07:48    C:\Windows\snuninst.exe --------- 2373889 
  03.09.2007 12:39    C:\Windows\RtHDVCpl.exe --------- 4702208 
  06.08.2007 11:18    C:\Windows\PGMonitor.exe --------- 81920 
  03.08.2007 07:22    C:\Windows\SkyTel.exe --------- 1826816 
  26.07.2007 12:06    C:\Windows\RtlUpd.exe --------- 1191936 
  26.07.2007 11:09    C:\Windows\RtlExUpd.dll --------- 520192 
  14.03.2007 21:45    C:\Windows\super.chm --------- 9292 
  15.02.2007 14:54    C:\Windows\brunin03.dll --------- 131072 
  02.11.2006 14:35    C:\Windows\WMSysPr9.prx --------- 316640 
  02.11.2006 14:34    C:\Windows\twunk_16.exe --------- 49680 
  02.11.2006 14:34    C:\Windows\twain_32.dll --------- 50688 
  02.11.2006 14:34    C:\Windows\twunk_32.exe --------- 31232 
  02.11.2006 14:34    C:\Windows\twain.dll --------- 94784 
  02.11.2006 11:45    C:\Windows\winhlp32.exe --------- 9216 
  02.11.2006 11:45    C:\Windows\hh.exe --------- 14848 
  02.11.2006 09:46    C:\Windows\mib.bin --------- 43131 
  24.10.2006 16:35    C:\Windows\maxlink.ini --------- 31664 
  19.09.2006 13:41    C:\Windows\HomePremium.xml --------- 8328 
  18.09.2006 23:46    C:\Windows\system.ini --------- 219 
  18.09.2006 23:43    C:\Windows\_default.pif --------- 707 
  18.09.2006 23:43    C:\Windows\winhelp.exe --------- 256192 
  18.09.2006 23:30    C:\Windows\msdfmap.ini --------- 1405 
  11.05.2006 18:32    C:\Windows\x2.64.exe --------- 502784 
  12.04.2006 09:47    C:\Windows\meta4.exe --------- 217073 
  05.04.2006 08:09    C:\Windows\MOTA113.exe --------- 66560 
  22.02.2003 05:42    C:\Windows\msvcr71.dll --------- 348160 
  15.11.2001 02:00    C:\Windows\CVRPAGE.bmp --------- 6224 
  15.07.2000 09:00    C:\Windows\MSVCRTD.DLL --------- 434252 
----------------------------------------

 
C:\Windows\System

 02.11.2006 14:34      C:\Windows\System\mciseq.drv --------- 25264
 02.11.2006 14:34      C:\Windows\System\mciwave.drv --------- 28160
 02.11.2006 14:34      C:\Windows\System\avifile.dll --------- 109456
 02.11.2006 14:34      C:\Windows\System\avicap.dll --------- 69584
 02.11.2006 14:34      C:\Windows\System\mciavi.drv --------- 73376
 02.11.2006 14:34      C:\Windows\System\msvideo.dll --------- 126912
 02.11.2006 09:10      C:\Windows\System\OLESVR.DLL --------- 24064
 02.11.2006 09:10      C:\Windows\System\WFWNET.DRV --------- 12704
 02.11.2006 09:10      C:\Windows\System\COMMDLG.DLL --------- 32816
 02.11.2006 09:10      C:\Windows\System\TIMER.DRV --------- 4048
 02.11.2006 09:10      C:\Windows\System\MMSYSTEM.DLL --------- 68992
 02.11.2006 09:10      C:\Windows\System\mmtask.tsk --------- 1152
 02.11.2006 09:10      C:\Windows\System\mouse.drv --------- 2032
 02.11.2006 09:10      C:\Windows\System\vga.drv --------- 2176
 02.11.2006 09:10      C:\Windows\System\sound.drv --------- 1744
 02.11.2006 09:10      C:\Windows\System\keyboard.drv --------- 2000
 02.11.2006 09:10      C:\Windows\System\SHELL.DLL --------- 5120
 02.11.2006 09:10      C:\Windows\System\system.drv --------- 3360
 18.09.2006 23:43      C:\Windows\System\ver.dll --------- 9008
 18.09.2006 23:43      C:\Windows\System\olecli.dll --------- 82944
 18.09.2006 23:43      C:\Windows\System\lzexpand.dll --------- 9936
 18.09.2006 23:35      C:\Windows\System\stdole.tlb --------- 5532
----------------------------------------

 
C:\Windows\System32

 23.06.2010 19:26    C:\Windows\system32\perfh009.dat --------- 587178 
 23.06.2010 19:26    C:\Windows\system32\perfc009.dat --------- 101250 
 23.06.2010 19:26    C:\Windows\system32\perfh007.dat --------- 618442 
 23.06.2010 19:26    C:\Windows\system32\perfc007.dat --------- 122842 
 23.06.2010 19:26    C:\Windows\system32\PerfStringBackup.INI --------- 1418806 
 23.06.2010 19:21    C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 --------- 3616 
 23.06.2010 19:21    C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 --------- 3616 
 23.06.2010 17:24    C:\Windows\system32\acovcnt.exe --------- 45056 
 17.06.2010 22:01    C:\Windows\system32\catroot2 --------- 49152 
 17.06.2010 22:00    C:\Windows\system32\drivers --------- 65536 
 12.05.2010 11:21    C:\Windows\system32\MpSigStub.exe --------- 221568 
 07.05.2010 19:08    C:\Windows\system32\Tasks --------- 4096 
 19.04.2010 21:00    C:\Windows\system32\catroot --------- 4096 
 19.04.2010 20:59    C:\Windows\system32\FNTCACHE.DAT --------- 371424 
 19.04.2010 20:56    C:\Windows\system32\de-DE --------- 262144 
 19.04.2010 20:56    C:\Windows\system32\wbem --------- 65536 
 19.04.2010 20:56    C:\Windows\system32\pt-BR --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\bg-BG --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\it-IT --------- 147456 
 19.04.2010 20:56    C:\Windows\system32\he-IL --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\pt-PT --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\pl-PL --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\ko-KR --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\uk-UA --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\hu-HU --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\hr-HR --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\sl-SI --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\zh-HK --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\el-GR --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\nl-NL --------- 217088 
 19.04.2010 20:56    C:\Windows\system32\fr-FR --------- 147456 
 19.04.2010 20:56    C:\Windows\system32\fi-FI --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\sr-Latn-CS --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\th-TH --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\tr-TR --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\sv-SE --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\es-ES --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\lv-LV --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\lt-LT --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\zh-TW --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\sk-SK --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\et-EE --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\cs-CZ --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\zh-CN --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\ja-JP --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\ar-SA --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\ro-RO --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\ru-RU --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\nb-NO --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\da-DK --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\en-US --------- 147456 
 18.04.2010 17:01    C:\Windows\system32\jupdate-1.6.0_20-b02.log --------- 4530 
 12.04.2010 17:29    C:\Windows\system32\javaws.exe --------- 153376 
 12.04.2010 17:29    C:\Windows\system32\javaw.exe --------- 145184 
 12.04.2010 17:29    C:\Windows\system32\java.exe --------- 145184 
 12.04.2010 17:29    C:\Windows\system32\deployJava1.dll --------- 411368 
 06.04.2010 10:52    C:\Windows\system32\mrt.exe --------- 31971272 
 15.03.2010 16:28    C:\Windows\system32\_TraceLog.txt --------- 121 
 09.03.2010 18:25    C:\Windows\system32\ieencode.dll --------- 78336 
 09.03.2010 17:42    C:\Windows\system32\wininet.dll --------- 834048 
 09.03.2010 17:42    C:\Windows\system32\urlmon.dll --------- 1176064 
 09.03.2010 17:40    C:\Windows\system32\mshtmled.dll --------- 477184 
 09.03.2010 17:40    C:\Windows\system32\mshtml.dll --------- 3601920 
 09.03.2010 17:39    C:\Windows\system32\ieui.dll --------- 180736 
 09.03.2010 17:39    C:\Windows\system32\iepeers.dll --------- 193024 
 09.03.2010 17:39    C:\Windows\system32\ieframe.dll --------- 6080000 
 09.03.2010 17:39    C:\Windows\system32\ieapfltr.dll --------- 380928 
 04.03.2010 19:33    C:\Windows\system32\vbscript.dll --------- 430080 
 21.02.2010 13:04    C:\Windows\system32\ca-ES --------- 0 
 21.02.2010 13:04    C:\Windows\system32\XPSViewer --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\oobe --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\migration --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\eu-ES --------- 0 
 21.02.2010 13:04    C:\Windows\system32\AdvancedInstallers --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\setup --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\SLUI --------- 0 
 21.02.2010 13:04    C:\Windows\system32\manifeststore --------- 0 
 21.02.2010 13:04    C:\Windows\system32\vi-VN --------- 0 
 21.02.2010 13:04    C:\Windows\system32\migwiz --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\Boot --------- 4096 
 21.02.2010 13:02    C:\Windows\system32\RTCOM --------- 0 
 21.02.2010 12:46    C:\Windows\system32\EventProviders --------- 4096 
 21.02.2010 01:06    C:\Windows\system32\nshhttp.dll --------- 24064 
 21.02.2010 01:05    C:\Windows\system32\httpapi.dll --------- 30720 
 18.02.2010 16:07    C:\Windows\system32\ntkrnlpa.exe --------- 3600776 
 18.02.2010 16:07    C:\Windows\system32\ntoskrnl.exe --------- 3548040 
 18.02.2010 15:30    C:\Windows\system32\iphlpsvc.dll --------- 200704 
 25.01.2010 14:00    C:\Windows\system32\secproc_ssp_isv.dll --------- 152576 
 25.01.2010 14:00    C:\Windows\system32\secproc_ssp.dll --------- 152064 
 25.01.2010 14:00    C:\Windows\system32\secproc_isv.dll --------- 471552 
 25.01.2010 14:00    C:\Windows\system32\secproc.dll --------- 471552 
 25.01.2010 13:58    C:\Windows\system32\msdrm.dll --------- 332288 
 25.01.2010 10:21    C:\Windows\system32\RMActivate_ssp_isv.exe --------- 346624 
 25.01.2010 10:21    C:\Windows\system32\RMActivate_isv.exe --------- 526336 
 25.01.2010 10:21    C:\Windows\system32\RMActivate_ssp.exe --------- 347136 
 25.01.2010 10:21    C:\Windows\system32\RMActivate.exe --------- 518144 
 23.01.2010 11:26    C:\Windows\system32\tzres.dll --------- 2048 
 22.01.2010 18:33    C:\Windows\system32\zvkonline80VC8.dll --------- 557056 
 22.01.2010 18:33    C:\Windows\system32\LxXtreme70VC8.dll --------- 4661248 
 22.01.2010 18:33    C:\Windows\system32\LxUISettings20Native.dll --------- 110592 
----------------------------------------

 
C:\Windows\Prefetch

----------------------------------------

 
C:\Windows\Tasks

 23.06.2010 19:22    C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job --------- 1088 
 23.06.2010 19:21    C:\Windows\Tasks\SA.DAT --------- 6 
 23.06.2010 19:20    C:\Windows\Tasks\SCHEDLGU.TXT --------- 32530 
 23.06.2010 19:07    C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job --------- 1092 
----------------------------------------

 
C:\Windows\Temp

----------------------------------------

 
C:\Users\***\AppData\Local\Temp

 23.06.2010 19:31    C:\Users\***\AppData\Local\Temp\plugtmp --------- 0 
 23.06.2010 19:26    C:\Users\***\AppData\Local\Temp\jusched.log --------- 6844 
 23.06.2010 19:25    C:\Users\***\AppData\Local\Temp\***.bmp --------- 31832 
 23.06.2010 19:22    C:\Users\***\AppData\Local\Temp\cc3data_init.xml --------- 7006 
 23.06.2010 19:22    C:\Users\***\AppData\Local\Temp\WPDNSE --------- 0 
 21.06.2010 23:17    C:\Users\***\AppData\Local\Temp\TWAIN.LOG --------- 186 
 21.06.2010 23:17    C:\Users\***\AppData\Local\Temp\Twain001.Mtx --------- 2 
 21.06.2010 23:12    C:\Users\***\AppData\Local\Temp\MessengerCache --------- 0 
 19.06.2010 19:33    C:\Users\***\AppData\Local\Temp\Low --------- 0 
 17.06.2010 22:37    C:\Users\***\AppData\Local\Temp\Gast.bmp --------- 49208 
 17.10.2008 15:07    C:\Users\***\AppData\Local\Temp\mirc635.exe --------- 1701371 
----------------------------------------

 
C:\Program Files

 23.06.2010 19:20    C:\Program Files\trend micro --------- 4096 
 21.06.2010 20:03    C:\Program Files\mIRC --------- 4096 
 17.06.2010 21:48    C:\Program Files\Malwarebytes' Anti-Malware --------- 4096 
 17.06.2010 21:20    C:\Program Files\CCleaner --------- 0 
 09.05.2010 00:38    C:\Program Files\Google --------- 0 
 19.04.2010 20:56    C:\Program Files\Windows Portable Devices --------- 0 
 19.04.2010 20:56    C:\Program Files\Windows Mail --------- 4096 
 19.04.2010 20:56    C:\Program Files\Movie Maker --------- 4096 
 19.04.2010 20:20    C:\Program Files\Mozilla Firefox --------- 40960 
 18.04.2010 17:01    C:\Program Files\Common Files --------- 4096 
 18.04.2010 17:01    C:\Program Files\Java --------- 0 
 15.03.2010 16:29    C:\Program Files\Lexware --------- 0 
 14.03.2010 14:01    C:\Program Files\ICQ6.5 --------- 16384 
 06.03.2010 15:09    C:\Program Files\PSPad editor --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Calendar --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Sidebar --------- 4096 
 21.02.2010 13:05    C:\Program Files\Internet Explorer --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Media Player --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Collaboration --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Journal --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Photo Gallery --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Defender --------- 4096 
 03.01.2010 21:40    C:\Program Files\DivX --------- 8192 
 20.11.2009 16:57    C:\Program Files\Microsoft --------- 0 
 20.11.2009 16:57    C:\Program Files\Windows Live SkyDrive --------- 0 
 20.11.2009 16:56    C:\Program Files\Windows Live --------- 0 
 12.11.2009 23:22    C:\Program Files\Trillian --------- 4096 
 21.10.2009 15:53    C:\Program Files\Oberon Media --------- 0 
 21.10.2009 15:50    C:\Program Files\MSN Games --------- 0 
 21.10.2009 15:49    C:\Program Files\Bejeweled --------- 0 
 02.08.2009 00:25    C:\Program Files\Pando Networks --------- 0 
 01.08.2009 10:39    C:\Program Files\Adobe --------- 0 
 22.07.2009 21:21    C:\Program Files\InstallShield Installation Information --------- 8192 
 19.07.2009 16:49    C:\Program Files\ICQ6Toolbar --------- 4096 
 19.07.2009 16:48    C:\Program Files\ICQ6 --------- 20480 
 27.05.2009 22:32    C:\Program Files\Avira --------- 0 
 09.05.2009 23:43    C:\Program Files\Microsoft Works --------- 4096 
 26.02.2009 18:02    C:\Program Files\MSXML 4.0 --------- 0 
 24.02.2009 18:14    C:\Program Files\Brother --------- 0 
 24.02.2009 18:11    C:\Program Files\Nuance --------- 0 
 24.02.2009 18:08    C:\Program Files\ScanSoft --------- 0 
 01.02.2009 20:02    C:\Program Files\Yahoo --------- 0 
 21.01.2009 18:43    C:\Program Files\CDBurnerXP --------- 8192 
 21.01.2009 18:30    C:\Program Files\K-Lite Codec Pack --------- 4096 
 21.01.2009 18:00    C:\Program Files\Semagic --------- 4096 
 21.01.2009 17:59    C:\Program Files\ICQ-Flowers --------- 4096 
 02.01.2009 00:43    C:\Program Files\VideoLAN --------- 0 
 22.11.2008 13:26    C:\Program Files\Real --------- 0 
 20.11.2008 13:08    C:\Program Files\Search Settings --------- 0 
 20.11.2008 13:07    C:\Program Files\Free Audio Pack --------- 4096 
 20.11.2008 12:42    C:\Program Files\mp3DirectCut --------- 4096 
 18.11.2008 00:18    C:\Program Files\Last.fm --------- 8192 
 27.10.2008 02:07    C:\Program Files\Screaming Bee --------- 0 
 21.10.2008 21:30    C:\Program Files\Zattoo --------- 8192 
 20.10.2008 17:18    C:\Program Files\Free M4a to MP3 Converter --------- 4096 
 19.10.2008 16:36    C:\Program Files\iTunes --------- 4096 
 19.10.2008 16:36    C:\Program Files\iPod --------- 0 
 19.10.2008 16:35    C:\Program Files\Bonjour --------- 0 
 19.10.2008 16:35    C:\Program Files\QuickTime --------- 4096 
 19.10.2008 16:34    C:\Program Files\Apple Software Update --------- 4096 
 18.10.2008 12:04    C:\Program Files\Messenger Plus Live --------- 4096 
 25.09.2008 18:38    C:\Program Files\Franzis --------- 0 
 17.09.2008 21:32    C:\Program Files\MIDI Klavier --------- 4096 
 17.09.2008 15:34    C:\Program Files\Winamp --------- 4096 
 16.09.2008 21:57    C:\Program Files\StepMania --------- 4096 
 15.09.2008 19:05    C:\Program Files\AviSynth 2.5 --------- 0 
 15.09.2008 19:05    C:\Program Files\eRightSoft --------- 0 
 08.09.2008 20:52    C:\Program Files\Teamspeak2_RC2 --------- 4096 
 02.09.2008 23:08    C:\Program Files\WinRAR --------- 4096 
 02.09.2008 19:16    C:\Program Files\Microsoft FrontPage --------- 0 
 02.09.2008 19:12    C:\Program Files\Microsoft Office --------- 4096 
 02.09.2008 18:35    C:\Program Files\GpotatoEu --------- 0 
 02.09.2008 17:19    C:\Program Files\Lavasoft --------- 0 
 05.08.2008 09:02    C:\Program Files\P4P --------- 0 
 05.08.2008 09:01    C:\Program Files\ASUS --------- 4096 
 05.08.2008 09:01    C:\Program Files\Synaptics --------- 0 
 05.08.2008 08:58    C:\Program Files\P4G --------- 4096 
 05.08.2008 08:58    C:\Program Files\Power4Gear eXtreme --------- 0 
 05.08.2008 08:48    C:\Program Files\Wireless Console 2 --------- 4096 
 05.08.2008 08:39    C:\Program Files\ATKOSD2 --------- 0 
 05.08.2008 08:39    C:\Program Files\ATKGFNEX --------- 4096 
 05.08.2008 08:38    C:\Program Files\ATK Hotkey --------- 4096 
 05.08.2008 08:35    C:\Program Files\Realtek --------- 0 
 05.08.2008 08:22    C:\Program Files\Intel --------- 0 
 05.08.2008 07:56    C:\Program Files\CyberLink --------- 4096 
 05.08.2008 07:50    C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites --------- 8192 
 05.08.2008 07:48    C:\Program Files\Microsoft Visual Studio --------- 0 
 05.08.2008 07:48    C:\Program Files\Microsoft.NET --------- 0 
 05.08.2008 07:38    C:\Program Files\Motorola --------- 0 
 21.01.2008 04:43    C:\Program Files\desktop.ini --------- 174 
 02.11.2006 15:01    C:\Program Files\Uninstall Information --------- 0 
 02.11.2006 14:37    C:\Program Files\Microsoft Games --------- 4096 
 02.11.2006 14:37    C:\Program Files\Windows NT --------- 0 
 02.11.2006 14:37    C:\Program Files\MSBuild --------- 0 
 02.11.2006 14:37    C:\Program Files\Reference Assemblies --------- 0 
----------------------------------------

 
C:\ProgramData\..

Public   
***   
desktop.ini   
Default User   
All Users   
Default   
----------------------------------------

 
C:\Windows\system32\drivers\etc\hosts

::1            localhost

----------------------------------------

 

Abbildname                    PID Sitzungsname      Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process              0 Services                  0            24 K
System                          4 Services                  0        31.408 K
smss.exe                      548 Services                  0          728 K
csrss.exe                      624 Services                  0        6.064 K
wininit.exe                    676 Services                  0        3.872 K
csrss.exe                      684 Console                    1        8.584 K
services.exe                  720 Services                  0        6.984 K
lsass.exe                      732 Services                  0        7.924 K
lsm.exe                        744 Services                  0        3.840 K
svchost.exe                    880 Services                  0        6.624 K
winlogon.exe                  912 Console                    1        5.656 K
svchost.exe                  1000 Services                  0        6.888 K
svchost.exe                  1060 Services                  0        43.396 K
svchost.exe                  1132 Services                  0        12.260 K
svchost.exe                  1188 Services                  0        63.208 K
svchost.exe                  1204 Services                  0        29.260 K
audiodg.exe                  1304 Services                  0        17.348 K
SLsvc.exe                    1336 Services                  0        11.648 K
svchost.exe                  1412 Services                  0        12.536 K
svchost.exe                  1564 Services                  0        20.812 K
aawservice.exe                1748 Services                  0        1.652 K
ADSMSrv.exe                  1760 Services                  0        2.244 K
AsLdrSrv.exe                  1776 Services                  0        3.240 K
GFNEXSrv.exe                  1804 Services                  0        2.276 K
dwm.exe                      1908 Console                    1        66.264 K
explorer.exe                  1944 Console                    1        52.080 K
MSASCui.exe                    124 Console                    1        9.316 K
sm56hlpr.exe                  224 Console                    1        5.344 K
rundll32.exe                  432 Console                    1        5.584 K
HControl.exe                  492 Console                    1        7.340 K
ASPG.exe                      564 Console                    1        3.480 K
wcourier.exe                  560 Console                    1        5.152 K
ACMON.exe                      576 Console                    1        6.400 K
RtHDVCpl.exe                  580 Console                    1        7.540 K
BatteryLife.exe                596 Console                    1        3.892 K
ATKOSD2.exe                    604 Console                    1        4.532 K
DMedia.exe                      12 Console                    1        3.644 K
SynTPEnh.exe                  616 Console                    1        7.624 K
P4P.exe                        712 Console                    1        7.068 K
ASScrPro.exe                  804 Console                    1        3.996 K
winampa.exe                    736 Console                    1        3.136 K
iTunesHelper.exe              888 Console                    1        9.364 K
SearchSettings.exe            1096 Console                    1        7.388 K
pptd40nt.exe                  1220 Console                    1        3.948 K
BrMfcWnd.exe                  1460 Console                    1        8.392 K
avgnt.exe                    1576 Console                    1        4.384 K
jusched.exe                  1672 Console                    1        3.620 K
wmpnscfg.exe                  1856 Console                    1        5.120 K
ACEngSvr.exe                  2004 Console                    1        10.476 K
BrccMCtl.exe                  1172 Console                    1        52.664 K
ATKOSD.exe                    1432 Console                    1        4.844 K
rundll32.exe                  2060 Console                    1        6.524 K
KBFiltr.exe                  2120 Console                    1        2.824 K
WDC.exe                      2152 Console                    1        4.232 K
spoolsv.exe                  2272 Services                  0        10.924 K
taskeng.exe                  2284 Services                  0        5.660 K
sched.exe                    2336 Services                  0        1.792 K
svchost.exe                  2360 Services                  0        17.660 K
taskeng.exe                  2612 Console                    1        11.136 K
taskeng.exe                  2668 Console                    1        4.628 K
sensorsrv.exe                2728 Console                    1        4.056 K
ALU.exe                      2748 Console                    1        7.108 K
BrMfcMon.exe                  3156 Console                    1        5.252 K
avguard.exe                  3344 Services                  0        23.528 K
AppleMobileDeviceService.    3384 Services                  0        3.464 K
mDNSResponder.exe            3404 Services                  0        4.416 K
avshadow.exe                  3488 Services                  0        5.984 K
LSSrvc.exe                    3588 Services                  0        3.720 K
NMSAccessU.exe                3712 Services                  0        2.568 K
svchost.exe                  3744 Services                  0        5.160 K
spmgr.exe                    3768 Services                  0        5.836 K
svchost.exe                  3796 Services                  0        6.564 K
svchost.exe                  3844 Services                  0        1.984 K
SearchIndexer.exe            3892 Services                  0        21.224 K
wmpnetwk.exe                  2304 Services                  0        8.600 K
iPodService.exe              3804 Services                  0        5.160 K
SynTPHelper.exe              4184 Console                    1        2.588 K
wuauclt.exe                  5352 Console                    1        5.464 K
firefox.exe                  5252 Console                    1      115.736 K
explorer.exe                  5196 Console                    1        24.904 K
taskeng.exe                  4572 Services                  0        3.960 K
cmd.exe                      3300 Console                    1        2.932 K
conime.exe                    4660 Console                    1        3.360 K
SearchProtocolHost.exe        2872 Services                  0        7.756 K
SearchFilterHost.exe          5304 Services                  0        5.116 K
tasklist.exe                  5620 Console                    1        4.612 K
WmiPrvSE.exe                  5032 Services                  0        5.736 K

 
***** Ende des Scans 23.06.2010 um 19:39:16,39 ***

5. Ccleaner

Code:
2007 Microsoft Office system        Microsoft Corporation        08.05.2009        1.167,5MB        12.0.6425.1000
Activation Assistant for the 2007 Microsoft Office suites        Microsoft Corporation        04.08.2008        13,5MB       
Ad-Aware        Lavasoft        01.09.2008        10,9MB        7.1.0.10
Adobe Audition 1.5        Adobe Systems        23.10.2008        40,7MB        1.5
Adobe Flash Player 10 ActiveX        Adobe Systems Incorporated        05.03.2010                10.0.45.2
Adobe Flash Player 10 Plugin        Adobe Systems Incorporated        31.05.2010                10.0.45.2
Adobe Reader 8.1.3 - Deutsch        Adobe Systems Incorporated        31.07.2009        99,8MB        8.1.3
Adobe Shockwave Player 11.5        Adobe Systems, Inc.        10.08.2009        8,34MB        11.5.1.601
Apple Mobile Device Support        Apple Inc.        18.10.2008        37,1MB        2.1.1.13
Apple Software Update        Apple Inc.        18.10.2008        2,16MB        2.1.1.116
ASUS CopyProtect        ASUS        03.08.2008        5,11MB        1.00.0003
ASUS Data Security Manager        ASUS        03.08.2008        4,95MB        1.00.0006
ASUS InstantFun        ASUS        04.08.2008        14,6MB        1.0.0015
ASUS LifeFrame3        ASUS        03.08.2008        27,7MB        3.0.6
ASUS Live Update        ASUS        04.08.2008        0,46MB        2.5.6
ASUS SmartLogon        ASUS        03.08.2008        10,5MB        1.0.0004
ASUS Splendid Video Enhancement Technology        ASUS        03.08.2008        16,6MB        1.02.0019
Asus_Camera_ScreenSaver        ASUS        04.08.2008                2.0.0006
Atheros Communications Inc.(R) L1 Gigabit Ethernet Driver        Atheros Communications Inc.        03.08.2008        1,02MB        2.4.7.7
ATK Generic Function Service        ATK        03.08.2008        0,45MB        1.00.0008
ATK Hotkey        ATK        03.08.2008        5,66MB        1.00.0023
ATK Media                04.08.2008        0,63MB       
ATKOSD2        ATK        03.08.2008        7,38MB        6.64.1.6
Avira AntiVir Personal - Free Antivirus        Avira GmbH        23.04.2010        70,1MB        10.0.0.567
Bejeweled 2 Deluxe        Oberon Media        20.10.2009        15,0MB       
Bonjour        Apple Inc.        18.10.2008        0,49MB        1.0.105
Brother MFL-Pro Suite        Brother Industries, Ltd.        23.02.2009        15,2MB        1.00
CCleaner        Piriform        16.06.2010        2,82MB        2.32
CDBurnerXP        CDBurnerXP        20.01.2009        6,19MB        4.1.2.789
CyberLink LabelPrint        CyberLink Corp.        04.08.2008        86,4MB        2.0.2830
DivX Codec        DivX, Inc.        02.01.2010        1,40MB        6.9.1
DivX Converter        DivX, Inc.        02.01.2010        30,4MB        7.1.0
DivX Player        DivX, Inc.        02.01.2010        15,4MB        7.2.0
DivX Plus DirectShow Filters        DivX, Inc.        02.01.2010        1,58MB       
DivX Plus Web Player        DivX,Inc.        02.01.2010        2,92MB        2.0.0
Free M4a to MP3 Converter 6.0        ManiacTools.com        19.10.2008        3,46MB       
Free Mp3 Wma Converter V 1.8.0                19.11.2008        4,26MB       
Google Earth Plug-in        Google        08.05.2010        38,0MB        5.2.0.5932
HiJackThis        Trend Micro        22.06.2010        0,36MB        1.0.0
ICQ6.5        ICQ        18.07.2009        43,9MB        6.5
iTunes        Apple Inc.        18.10.2008        87,6MB        8.0.1.11
Java(TM) 6 Update 20        Sun Microsystems, Inc.        04.02.2009        94,4MB        6.0.200
K-Lite Mega Codec Pack 4.5.3                20.01.2009        51,3MB        4.5.3
Last.fm 1.5.2.38918        Last.fm        16.11.2008        19,4MB       
Lexware Info Service        Lexware GmbH & Co. KG        14.03.2010        10,4MB        2.61.00.0033
LightScribe System Software  1.12.37.1        LightScribe        03.08.2008        20,9MB        1.12.37.1
Malwarebytes' Anti-Malware        Malwarebytes Corporation        16.06.2010        3,90MB       
Manga Druckstudio                24.09.2008        107,3MB       
Messenger Plus! Live        Patchou        16.09.2008        12,1MB        4.70 (build 334)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU        Microsoft Corporation        11.02.2009        37,0MB       
Microsoft .NET Framework 3.5 SP1        Microsoft Corporation        10.02.2009        37,0MB       
Microsoft Office 2000 Premium        Microsoft Corporation        01.09.2008        223,1MB        9.00.2816
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        31.07.2009        0,25MB        8.0.50727.4053
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148        Microsoft Corporation        31.07.2009        0,19MB        9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17        Microsoft Corporation        26.05.2009        0,58MB        9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        26.03.2010        0,58MB        9.0.30729.4148
MIDI Klavier 1.0.1        Felix Alter        16.09.2008        2,52MB       
mIRC        mIRC Co. Ltd.        20.06.2010        3,30MB        6.35
Motorola SM56 Speakerphone Modem                04.08.2008        1,95MB       
Move Media Player        Move Networks        25.03.2010               
Mozilla Firefox (3.6.3)        Mozilla        18.04.2010        31,2MB        3.6.3 (de)
MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        25.02.2009        1,28MB        4.20.9870.0
MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        09.12.2009        1,34MB        4.20.9876.0
NB Probe                04.08.2008        2,75MB       
NVIDIA Drivers                04.08.2008               
P4P        P4P        04.08.2008        0,75MB        1.0.0.17
Pando Media Booster        Pando Networks Inc.        01.08.2009        6,69MB        2.3.1.3
PaperPort Image Printer        Nuance Communications, Inc.        23.02.2009        0,38MB        1.00.0000
Power2Go        CyberLink Corp.        04.08.2008        93,3MB        5.6.3917
Power4Gear eXtreme        ATK        03.08.2008                1.00.0014
PSPad editor        Jan Fiala        05.03.2010        14,5MB       
QuickSteuer 2010        Lexware GmbH & Co. KG        14.03.2010        496,7MB        16.04.00.0004
QuickTime        Apple Inc.        18.10.2008        87,7MB        7.55.90.70
Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        03.08.2008        15,4MB        6.0.1.5477
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02                04.08.2008        1,93MB        3.52.02
ScanSoft PaperPort 11        Nuance Communications, Inc.        23.02.2009        131,1MB        11.1.0000
Search Settings 1.2                19.11.2008        2,04MB       
Spelling Dictionaries Support For Adobe Reader 8        Adobe Systems        31.07.2009        32,5MB        8.0.0
StepMania (remove only)                15.09.2008        18,0MB       
SUPER © Version 2007.bld.22 (Mar 14, 2007)        eRightSoft        14.09.2008        27,8MB        Version 2007.bld.22 (Mar 14, 2007)
Synaptics Pointing Device Driver        Synaptics        04.08.2008        13,7MB        10.1.8.0
TeamSpeak 2 RC2        Dominating Bytes Design        07.09.2008                2.0.32.60
Trillian                11.11.2009        26,4MB       
USB 2.0 1.3M UVC WebCam                04.08.2008               
VLC media player 0.9.8a        VideoLAN Team        01.01.2009        60,4MB        0.9.8a
Winamp        Nullsoft, Inc        16.09.2008        21,6MB        5.541
Windows Live Anmelde-Assistent        Microsoft Corporation        25.03.2009        1,93MB        5.000.818.6
Windows Live Essentials        Microsoft Corporation        19.11.2009        44,0MB        14.0.8089.0726
Windows Live-Uploadtool        Microsoft Corporation        19.11.2009        0,22MB        14.0.8014.1029
Windows Media Player Firefox Plugin        Microsoft Corp        02.09.2008        0,29MB        1.0.0.8
WinFlash                04.08.2008        1,36MB       
WinRAR                01.09.2008        3,66MB       
Wireless Console 2        ATK        03.08.2008        2,12MB        2.0.10
Zattoo 3.3.4 Beta        Zattoo Inc.        07.06.2009        18,4MB        3.3.4 Beta
Noch einen schönen Abend und viele Grüße zurück :)

kira 25.06.2010 07:34
1.
Der Messenger Plus! Live enthält einige Komponenten (Sponsorprogramm), die deinen Rechner ausspionieren, deshalb wird von diesem Programm abgeraten.
Immer die benutzerdefinierte Installation wählen, nicht die Standardinstallation, weil da oft Sachen mitinstalliert werden, die man nicht braucht oder nicht möchte.
also deinstalliere Messenger Plus! Live unter `Start→ Systemsteuereung→ Ändern/Entfernen...` - ► achte aber darauf, ob da etwas beim Deinstallieren mit da steht, wie "Partner/Sponsorenprogramme entfernen"!

2.
um die neueste Version von Adobe zu erhalten klick hier: Adobe Reader - oder über das Programm selbst kannst auch die Updatefunktion aufrufen

3.
Deinstalliere unter `Start→ Systemsteuereung→ Ändern/Entfernen...`
Code:
Search Settings - Adware eigentlich schon mit Spyware-Eigentschaften
4.
starte HijackThis-> wähle: "Open the Misc Tools section"-> "Delete a file on reboot..."-> wähle die zu löschende datei - sehe der Inhalt dieser Code-Box (Text kopieren und einfügen, oder "Durchsuchen"), die frage zum neustart mit JA beantworten
Code:

 C:\Windows\system32\acovcnt.exe
5.
was noch davon existiert fixen:
Schliesse alle Programme einschliesslich Internet Explorer und fixe mit Hijackthis die Einträge aus der nachfolgenden Codebox (HijackThis starten→ "Do a system scan only"→ Einträge auswählen→ Häckhen setzen→ "Fix checked" klicken→ PC neu aufstarten):
HijackThis erstellt ein Backup, Falls bei "Fixen" etwas schief geht, kann man unter "View the list of backups"- die Objekte wiederherstellen
Code:
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb127\SearchSettings.dll
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
6.
alle Anwendungen schließen → Ordner für temporäre Dateien bitte leeren
**Der Temp Ordner,ist für temporäre Dateien,also der Inhalt kann man ohne weiteres löschen.- Dateien, die noch in Benutzung sind, nicht löschbar.
**Lösche nur den Inhalt der Ordner, nicht die Ordner selbst!
  • `Start → ausführen` "cleanmgr" reinschreiben (ohne "") → "ok" - die Temporary Files, Temporary Internet Files, und der Papierkorb (Recycle Bin) müssen geleert werden→ "Ok"
  • `Start → ausführen` → %temp% reinschreiben (ohne "")→ "Ok" - - Ordnerinhalt überall markieren und löschen
  • für jedes Benutzerkonto bitte durchführen
  • anschließend den Papierkorb leeren

7.
reinige dein System mit Ccleaner:
  • "Cleaner"→ "Analysieren"→ Klick auf den Button "Start CCleaner"
  • "Registry""Fehler suchen"→ "Fehler beheben"→ "Alle beheben"
  • Starte dein System neu auf

8.
poste erneut - nach der vorgenommenen Reinigungsaktion:
TrendMicro™ HijackThis™ -Logfile - Keine offenen Fenster, solang bis HijackThis läuft!!
hjtscanlist v2.0 - Dateiliste

feya 25.06.2010 16:04
Okay, alles befolgt und hier sind die Logfiles :)

1. TrendMicro™ HijackThis™ -Logfile

Code:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:57:01, on 25.06.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ASUS\SmartLogon\sensorsrv.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\P4P\P4P.exe
C:\Windows\ASScrPro.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\Common Files\Lexware\LxWebAccess\LxWebAccess.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Users\***\Documents\Programme - exe\trojaner entfernen\hijackthis\Trend Micro\HiJackThis\HiJackThis.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ***://***.asus.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ***://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = ***://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = ***://***.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = ***://go.microsoft.com/fwlink/?

LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ***://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = ***://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common

Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common

Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6

\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PowerForPhone] "C:\Program Files\P4P\P4P.exe"
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -

Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
O4 - HKLM\..\Run: [IndexSearch] "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r

"C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LexwareInfoService] C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe

/autostart
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER

DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -

***://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} -

C:\Windows\system32\browseui.dll
O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security

Manager\ADSMSrv.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir

Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir

Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device

Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program

Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company -

C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file

missing)
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

--
End of file - 8221 bytes

2. hjtscanlist v2.0

Code:

                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
                        º                                    º
                                    hjtscanlist v2.0             
                        º                                    º
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

Microsoft Windows [Version 6.0.6002]
 
 
C:

      C:\pagefile.sys ---------   
  25.06.2010 16:53    C:\Windows --------- 28672 
  25.06.2010 15:50    C:\System Volume Information --------- 20480 
  25.06.2010 15:13    C:\Program Files --------- 24576 
  25.06.2010 14:55    C:\ProgramData --------- 8192 
  17.06.2010 22:05    C:\rsit --------- 0 
  21.02.2010 13:12    C:\Boot --------- 4096 
  02.08.2009 11:59    C:\NdoorsLog.txt --------- 0 
  02.08.2009 11:20    C:\nDoors --------- 0 
  11.04.2009 08:36    C:\bootmgr --------- 333257 
  01.09.2008 20:41    C:\$RECYCLE.BIN --------- 0 
  01.09.2008 20:35    C:\Users --------- 4096 
  05.08.2008 09:16    C:\devlist.txt --------- 19519 
  05.08.2008 09:13    C:\Finish.log --------- 9 
  05.08.2008 08:54    C:\setup.log --------- 86 
  05.08.2008 08:36    C:\RHDSetup.log --------- 426 
  05.08.2008 08:21    C:\Intel --------- 0 
  05.08.2008 08:14    C:\SumHidd.txt --------- 166 
  05.08.2008 08:13    C:\SumOS.txt --------- 98 
  05.08.2008 07:42    C:\MSOCache --------- 0 
  04.08.2008 20:09    C:\Pass.txt --------- 105 
  23.07.2008 09:40    C:\Patch.LOG --------- 2238 
  04.07.2008 06:35    C:\NIS2008.TXT --------- 21 
  29.04.2008 16:30    C:\READER_A.TXT --------- 20 
  22.04.2008 11:40    C:\NERO.LOG --------- 31 
  17.04.2008 11:30    C:\F3Sg_Vista.20 --------- 16 
  17.04.2008 02:32    C:\V541.TXT --------- 24 
  16.04.2008 13:27    C:\BOOTSECT.BAK --------- 8192 
  12.02.2008 04:03    C:\F3Sg.BIN --------- 1048576 
  21.01.2008 04:32    C:\PerfLogs --------- 0 
  11.12.2007 05:31    C:\RECOVERY.DAT --------- 14 
  04.04.2007 21:01    C:\CA21.txt --------- 19 
  16.03.2007 01:18    C:\OFFICE2007_A.TXT --------- 25 
  02.11.2006 15:02    C:\Documents and Settings --------- 0 
  18.09.2006 23:43    C:\config.sys --------- 10 
  18.09.2006 23:43    C:\autoexec.bat --------- 24 
  16.05.2006 02:22    C:\store.log --------- 5 
----------------------------------------

 
C:\Windows

  25.06.2010 16:55    C:\Windows\bootstat.dat --------- 67584 
  25.06.2010 16:54    C:\Windows\WindowsUpdate.log --------- 1385484 
  25.07.2009 10:39    C:\Windows\win.ini --------- 157 
  11.04.2009 08:27    C:\Windows\explorer.exe --------- 2926592 
  24.02.2009 18:17    C:\Windows\BRPP2KA.INI --------- 27 
  24.02.2009 18:17    C:\Windows\BRWMARK.INI --------- 425 
  02.09.2008 19:19    C:\Windows\ODBC.INI --------- 403 
  02.09.2008 19:19    C:\Windows\vbaddin.ini --------- 35 
  02.09.2008 17:39    C:\Windows\nsreg.dat --------- 0 
  02.09.2008 16:35    C:\Windows\ATKPF.ini --------- 24 
  05.08.2008 09:12    C:\Windows\ASScrProlog.exe --------- 37232 
  05.08.2008 09:12    C:\Windows\ASUS Camera ScreenSaver.exe --------- 4814371 
  05.08.2008 09:12    C:\Windows\ASUS Camera ScreenSaver Uninstaller.exe --------- 274800 
  05.08.2008 09:12    C:\Windows\Asus_Camera_ScreenSaver.scr --------- 503808 
  05.08.2008 09:12    C:\Windows\flashax.exe --------- 606848 
  05.08.2008 09:12    C:\Windows\impborl.dll --------- 12288 
  05.08.2008 09:12    C:\Windows\ASScrPro.exe --------- 33136 
  05.08.2008 08:53    C:\Windows\%TEMP% --------- 230 
  05.08.2008 08:35    C:\Windows\DIFxAPI.dll --------- 319456 
  05.08.2008 08:35    C:\Windows\HideWin.exe --------- 315392 
  14.07.2008 08:59    C:\Windows\csup.txt --------- 10 
  21.01.2008 04:43    C:\Windows\WindowsShell.Manifest --------- 749 
  21.01.2008 04:24    C:\Windows\regedit.exe --------- 134656 
  21.01.2008 04:24    C:\Windows\bfsvc.exe --------- 58880 
  21.01.2008 04:24    C:\Windows\fveupdate.exe --------- 13312 
  21.01.2008 04:24    C:\Windows\HelpPane.exe --------- 498176 
  21.01.2008 04:23    C:\Windows\notepad.exe --------- 151040 
  17.10.2007 07:48    C:\Windows\snuninst.exe --------- 2373889 
  03.09.2007 12:39    C:\Windows\RtHDVCpl.exe --------- 4702208 
  06.08.2007 11:18    C:\Windows\PGMonitor.exe --------- 81920 
  03.08.2007 07:22    C:\Windows\SkyTel.exe --------- 1826816 
  26.07.2007 12:06    C:\Windows\RtlUpd.exe --------- 1191936 
  26.07.2007 11:09    C:\Windows\RtlExUpd.dll --------- 520192 
  14.03.2007 21:45    C:\Windows\super.chm --------- 9292 
  15.02.2007 14:54    C:\Windows\brunin03.dll --------- 131072 
  02.11.2006 14:35    C:\Windows\WMSysPr9.prx --------- 316640 
  02.11.2006 14:34    C:\Windows\twunk_16.exe --------- 49680 
  02.11.2006 14:34    C:\Windows\twunk_32.exe --------- 31232 
  02.11.2006 14:34    C:\Windows\twain_32.dll --------- 50688 
  02.11.2006 14:34    C:\Windows\twain.dll --------- 94784 
  02.11.2006 11:45    C:\Windows\winhlp32.exe --------- 9216 
  02.11.2006 11:45    C:\Windows\hh.exe --------- 14848 
  02.11.2006 09:46    C:\Windows\mib.bin --------- 43131 
  24.10.2006 16:35    C:\Windows\maxlink.ini --------- 31664 
  19.09.2006 13:41    C:\Windows\HomePremium.xml --------- 8328 
  18.09.2006 23:46    C:\Windows\system.ini --------- 219 
  18.09.2006 23:43    C:\Windows\_default.pif --------- 707 
  18.09.2006 23:43    C:\Windows\winhelp.exe --------- 256192 
  18.09.2006 23:30    C:\Windows\msdfmap.ini --------- 1405 
  11.05.2006 18:32    C:\Windows\x2.64.exe --------- 502784 
  12.04.2006 09:47    C:\Windows\meta4.exe --------- 217073 
  05.04.2006 08:09    C:\Windows\MOTA113.exe --------- 66560 
  22.02.2003 05:42    C:\Windows\msvcr71.dll --------- 348160 
  15.11.2001 02:00    C:\Windows\CVRPAGE.bmp --------- 6224 
  15.07.2000 09:00    C:\Windows\MSVCRTD.DLL --------- 434252 
----------------------------------------

 
C:\Windows\System

 02.11.2006 14:34      C:\Windows\System\mciseq.drv --------- 25264
 02.11.2006 14:34      C:\Windows\System\mciwave.drv --------- 28160
 02.11.2006 14:34      C:\Windows\System\avifile.dll --------- 109456
 02.11.2006 14:34      C:\Windows\System\avicap.dll --------- 69584
 02.11.2006 14:34      C:\Windows\System\mciavi.drv --------- 73376
 02.11.2006 14:34      C:\Windows\System\msvideo.dll --------- 126912
 02.11.2006 09:10      C:\Windows\System\OLESVR.DLL --------- 24064
 02.11.2006 09:10      C:\Windows\System\WFWNET.DRV --------- 12704
 02.11.2006 09:10      C:\Windows\System\COMMDLG.DLL --------- 32816
 02.11.2006 09:10      C:\Windows\System\TIMER.DRV --------- 4048
 02.11.2006 09:10      C:\Windows\System\MMSYSTEM.DLL --------- 68992
 02.11.2006 09:10      C:\Windows\System\mmtask.tsk --------- 1152
 02.11.2006 09:10      C:\Windows\System\mouse.drv --------- 2032
 02.11.2006 09:10      C:\Windows\System\vga.drv --------- 2176
 02.11.2006 09:10      C:\Windows\System\sound.drv --------- 1744
 02.11.2006 09:10      C:\Windows\System\keyboard.drv --------- 2000
 02.11.2006 09:10      C:\Windows\System\SHELL.DLL --------- 5120
 02.11.2006 09:10      C:\Windows\System\system.drv --------- 3360
 18.09.2006 23:43      C:\Windows\System\ver.dll --------- 9008
 18.09.2006 23:43      C:\Windows\System\olecli.dll --------- 82944
 18.09.2006 23:43      C:\Windows\System\lzexpand.dll --------- 9936
 18.09.2006 23:35      C:\Windows\System\stdole.tlb --------- 5532
----------------------------------------

 
C:\Windows\System32

 25.06.2010 16:55    C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-

601632D005A0 --------- 3616 
 25.06.2010 16:55    C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-

601632D005A0 --------- 3616 
 25.06.2010 16:45    C:\Windows\system32\perfh009.dat --------- 587178 
 25.06.2010 16:45    C:\Windows\system32\perfc009.dat --------- 101250 
 25.06.2010 16:45    C:\Windows\system32\perfh007.dat --------- 618442 
 25.06.2010 16:45    C:\Windows\system32\perfc007.dat --------- 122842 
 25.06.2010 16:45    C:\Windows\system32\PerfStringBackup.INI --------- 1418806 
 25.06.2010 15:13    C:\Windows\system32\drivers --------- 65536 
 17.06.2010 22:01    C:\Windows\system32\catroot2 --------- 49152 
 12.05.2010 11:21    C:\Windows\system32\MpSigStub.exe --------- 221568 
 07.05.2010 19:08    C:\Windows\system32\Tasks --------- 4096 
 19.04.2010 21:00    C:\Windows\system32\catroot --------- 4096 
 19.04.2010 20:59    C:\Windows\system32\FNTCACHE.DAT --------- 371424 
 19.04.2010 20:56    C:\Windows\system32\de-DE --------- 262144 
 19.04.2010 20:56    C:\Windows\system32\wbem --------- 65536 
 19.04.2010 20:56    C:\Windows\system32\pt-BR --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\bg-BG --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\it-IT --------- 147456 
 19.04.2010 20:56    C:\Windows\system32\he-IL --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\pt-PT --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\pl-PL --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\ko-KR --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\uk-UA --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\hu-HU --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\hr-HR --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\sl-SI --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\zh-HK --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\el-GR --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\nl-NL --------- 217088 
 19.04.2010 20:56    C:\Windows\system32\fr-FR --------- 147456 
 19.04.2010 20:56    C:\Windows\system32\fi-FI --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\sr-Latn-CS --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\th-TH --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\tr-TR --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\sv-SE --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\es-ES --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\lv-LV --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\lt-LT --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\zh-TW --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\sk-SK --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\et-EE --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\cs-CZ --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\zh-CN --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\ja-JP --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\ar-SA --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\ro-RO --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\ru-RU --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\nb-NO --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\da-DK --------- 4096 
 19.04.2010 20:56    C:\Windows\system32\en-US --------- 147456 
 18.04.2010 17:01    C:\Windows\system32\jupdate-1.6.0_20-b02.log --------- 4530 
 12.04.2010 17:29    C:\Windows\system32\javaws.exe --------- 153376 
 12.04.2010 17:29    C:\Windows\system32\javaw.exe --------- 145184 
 12.04.2010 17:29    C:\Windows\system32\java.exe --------- 145184 
 12.04.2010 17:29    C:\Windows\system32\deployJava1.dll --------- 411368 
 06.04.2010 10:52    C:\Windows\system32\mrt.exe --------- 31971272 
 15.03.2010 16:28    C:\Windows\system32\_TraceLog.txt --------- 121 
 09.03.2010 18:25    C:\Windows\system32\ieencode.dll --------- 78336 
 09.03.2010 17:42    C:\Windows\system32\wininet.dll --------- 834048 
 09.03.2010 17:42    C:\Windows\system32\urlmon.dll --------- 1176064 
 09.03.2010 17:40    C:\Windows\system32\mshtmled.dll --------- 477184 
 09.03.2010 17:40    C:\Windows\system32\mshtml.dll --------- 3601920 
 09.03.2010 17:39    C:\Windows\system32\ieui.dll --------- 180736 
 09.03.2010 17:39    C:\Windows\system32\iepeers.dll --------- 193024 
 09.03.2010 17:39    C:\Windows\system32\ieframe.dll --------- 6080000 
 09.03.2010 17:39    C:\Windows\system32\ieapfltr.dll --------- 380928 
 04.03.2010 19:33    C:\Windows\system32\vbscript.dll --------- 430080 
 21.02.2010 13:04    C:\Windows\system32\ca-ES --------- 0 
 21.02.2010 13:04    C:\Windows\system32\XPSViewer --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\oobe --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\migration --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\eu-ES --------- 0 
 21.02.2010 13:04    C:\Windows\system32\AdvancedInstallers --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\setup --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\SLUI --------- 0 
 21.02.2010 13:04    C:\Windows\system32\manifeststore --------- 0 
 21.02.2010 13:04    C:\Windows\system32\vi-VN --------- 0 
 21.02.2010 13:04    C:\Windows\system32\migwiz --------- 4096 
 21.02.2010 13:04    C:\Windows\system32\Boot --------- 4096 
 21.02.2010 13:02    C:\Windows\system32\RTCOM --------- 0 
 21.02.2010 12:46    C:\Windows\system32\EventProviders --------- 4096 
 21.02.2010 01:06    C:\Windows\system32\nsh***.dll --------- 24064 
 21.02.2010 01:05    C:\Windows\system32\***api.dll --------- 30720 
 18.02.2010 16:07    C:\Windows\system32\ntkrnlpa.exe --------- 3600776 
 18.02.2010 16:07    C:\Windows\system32\ntoskrnl.exe --------- 3548040 
 18.02.2010 15:30    C:\Windows\system32\iphlpsvc.dll --------- 200704 
 25.01.2010 14:00    C:\Windows\system32\secproc_ssp_isv.dll --------- 152576 
 25.01.2010 14:00    C:\Windows\system32\secproc_ssp.dll --------- 152064 
 25.01.2010 14:00    C:\Windows\system32\secproc_isv.dll --------- 471552 
 25.01.2010 14:00    C:\Windows\system32\secproc.dll --------- 471552 
 25.01.2010 13:58    C:\Windows\system32\msdrm.dll --------- 332288 
 25.01.2010 10:21    C:\Windows\system32\RMActivate_ssp_isv.exe --------- 346624 
 25.01.2010 10:21    C:\Windows\system32\RMActivate_isv.exe --------- 526336 
 25.01.2010 10:21    C:\Windows\system32\RMActivate_ssp.exe --------- 347136 
 25.01.2010 10:21    C:\Windows\system32\RMActivate.exe --------- 518144 
 23.01.2010 11:26    C:\Windows\system32\tzres.dll --------- 2048 
 22.01.2010 18:33    C:\Windows\system32\zvkonline80VC8.dll --------- 557056 
 22.01.2010 18:33    C:\Windows\system32\LxXtreme70VC8.dll --------- 4661248 
 22.01.2010 18:33    C:\Windows\system32\PXTTool80VC8.dll --------- 69632 
 22.01.2010 18:33    C:\Windows\system32\LXTool80VC8.dll --------- 1343488 
----------------------------------------

 
C:\Windows\Prefetch

----------------------------------------

 
C:\Windows\Tasks

 25.06.2010 16:55    C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job --------- 1088 
 25.06.2010 16:55    C:\Windows\Tasks\SA.DAT --------- 6 
 25.06.2010 16:54    C:\Windows\Tasks\SCHEDLGU.TXT --------- 32530 
 25.06.2010 16:07    C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job --------- 1092 
----------------------------------------

 
C:\Windows\Temp

----------------------------------------

 
C:\Users\***\AppData\Local\Temp

 25.06.2010 16:56    C:\Users\***\AppData\Local\Temp\cc3data_init.xml --------- 7006 
 25.06.2010 16:56    C:\Users\***\AppData\Local\Temp\WPDNSE --------- 0 
 25.06.2010 16:55    C:\Users\***\AppData\Local\Temp\AdobeARM.log --------- 811 
 25.06.2010 16:55    C:\Users\***\AppData\Local\Temp\***.bmp --------- 31832 
----------------------------------------

 
C:\Program Files

 25.06.2010 15:13    C:\Program Files\Common Files --------- 4096 
 25.06.2010 15:04    C:\Program Files\Adobe --------- 0 
 23.06.2010 19:20    C:\Program Files\trend micro --------- 4096 
 21.06.2010 20:03    C:\Program Files\mIRC --------- 4096 
 17.06.2010 21:48    C:\Program Files\Malwarebytes' Anti-Malware --------- 4096 
 17.06.2010 21:20    C:\Program Files\CCleaner --------- 0 
 09.05.2010 00:38    C:\Program Files\Google --------- 0 
 19.04.2010 20:56    C:\Program Files\Windows Portable Devices --------- 0 
 19.04.2010 20:56    C:\Program Files\Windows Mail --------- 4096 
 19.04.2010 20:56    C:\Program Files\Movie Maker --------- 4096 
 19.04.2010 20:20    C:\Program Files\Mozilla Firefox --------- 40960 
 18.04.2010 17:01    C:\Program Files\Java --------- 0 
 15.03.2010 16:29    C:\Program Files\Lexware --------- 0 
 14.03.2010 14:01    C:\Program Files\ICQ6.5 --------- 16384 
 06.03.2010 15:09    C:\Program Files\PSPad editor --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Calendar --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Sidebar --------- 4096 
 21.02.2010 13:05    C:\Program Files\Internet Explorer --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Media Player --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Collaboration --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Journal --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Photo Gallery --------- 4096 
 21.02.2010 13:05    C:\Program Files\Windows Defender --------- 4096 
 03.01.2010 21:40    C:\Program Files\DivX --------- 8192 
 20.11.2009 16:57    C:\Program Files\Microsoft --------- 0 
 20.11.2009 16:57    C:\Program Files\Windows Live SkyDrive --------- 0 
 20.11.2009 16:56    C:\Program Files\Windows Live --------- 0 
 12.11.2009 23:22    C:\Program Files\Trillian --------- 4096 
 21.10.2009 15:53    C:\Program Files\Oberon Media --------- 0 
 21.10.2009 15:50    C:\Program Files\MSN Games --------- 0 
 21.10.2009 15:49    C:\Program Files\Bejeweled --------- 0 
 02.08.2009 00:25    C:\Program Files\Pando Networks --------- 0 
 22.07.2009 21:21    C:\Program Files\InstallShield Installation Information --------- 8192 
 19.07.2009 16:49    C:\Program Files\ICQ6Toolbar --------- 4096 
 19.07.2009 16:48    C:\Program Files\ICQ6 --------- 20480 
 27.05.2009 22:32    C:\Program Files\Avira --------- 0 
 09.05.2009 23:43    C:\Program Files\Microsoft Works --------- 4096 
 26.02.2009 18:02    C:\Program Files\MSXML 4.0 --------- 0 
 24.02.2009 18:14    C:\Program Files\Brother --------- 0 
 24.02.2009 18:11    C:\Program Files\Nuance --------- 0 
 24.02.2009 18:08    C:\Program Files\ScanSoft --------- 0 
 01.02.2009 20:02    C:\Program Files\Yahoo --------- 0 
 21.01.2009 18:43    C:\Program Files\CDBurnerXP --------- 8192 
 21.01.2009 18:30    C:\Program Files\K-Lite Codec Pack --------- 4096 
 21.01.2009 18:00    C:\Program Files\Semagic --------- 4096 
 21.01.2009 17:59    C:\Program Files\ICQ-Flowers --------- 4096 
 02.01.2009 00:43    C:\Program Files\VideoLAN --------- 0 
 22.11.2008 13:26    C:\Program Files\Real --------- 0 
 20.11.2008 13:08    C:\Program Files\Search Settings --------- 0 
 20.11.2008 13:07    C:\Program Files\Free Audio Pack --------- 4096 
 20.11.2008 12:42    C:\Program Files\mp3DirectCut --------- 4096 
 18.11.2008 00:18    C:\Program Files\Last.fm --------- 8192 
 27.10.2008 02:07    C:\Program Files\Screaming Bee --------- 0 
 21.10.2008 21:30    C:\Program Files\Zattoo --------- 8192 
 20.10.2008 17:18    C:\Program Files\Free M4a to MP3 Converter --------- 4096 
 19.10.2008 16:36    C:\Program Files\iTunes --------- 4096 
 19.10.2008 16:36    C:\Program Files\iPod --------- 0 
 19.10.2008 16:35    C:\Program Files\Bonjour --------- 0 
 19.10.2008 16:35    C:\Program Files\QuickTime --------- 4096 
 19.10.2008 16:34    C:\Program Files\Apple Software Update --------- 4096 
 25.09.2008 18:38    C:\Program Files\Franzis --------- 0 
 17.09.2008 21:32    C:\Program Files\MIDI Klavier --------- 4096 
 17.09.2008 15:34    C:\Program Files\Winamp --------- 4096 
 16.09.2008 21:57    C:\Program Files\StepMania --------- 4096 
 15.09.2008 19:05    C:\Program Files\AviSynth 2.5 --------- 0 
 15.09.2008 19:05    C:\Program Files\eRightSoft --------- 0 
 08.09.2008 20:52    C:\Program Files\Teamspeak2_RC2 --------- 4096 
 02.09.2008 23:08    C:\Program Files\WinRAR --------- 4096 
 02.09.2008 19:16    C:\Program Files\Microsoft FrontPage --------- 0 
 02.09.2008 19:12    C:\Program Files\Microsoft Office --------- 4096 
 02.09.2008 18:35    C:\Program Files\GpotatoEu --------- 0 
 05.08.2008 09:02    C:\Program Files\P4P --------- 0 
 05.08.2008 09:01    C:\Program Files\ASUS --------- 4096 
 05.08.2008 09:01    C:\Program Files\Synaptics --------- 0 
 05.08.2008 08:58    C:\Program Files\P4G --------- 4096 
 05.08.2008 08:58    C:\Program Files\Power4Gear eXtreme --------- 0 
 05.08.2008 08:48    C:\Program Files\Wireless Console 2 --------- 4096 
 05.08.2008 08:39    C:\Program Files\ATKOSD2 --------- 0 
 05.08.2008 08:39    C:\Program Files\ATKGFNEX --------- 4096 
 05.08.2008 08:38    C:\Program Files\ATK Hotkey --------- 4096 
 05.08.2008 08:35    C:\Program Files\Realtek --------- 0 
 05.08.2008 08:22    C:\Program Files\Intel --------- 0 
 05.08.2008 07:56    C:\Program Files\CyberLink --------- 4096 
 05.08.2008 07:50    C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites --------- 8192 
 05.08.2008 07:48    C:\Program Files\Microsoft Visual Studio --------- 0 
 05.08.2008 07:48    C:\Program Files\Microsoft.NET --------- 0 
 05.08.2008 07:38    C:\Program Files\Motorola --------- 0 
 21.01.2008 04:43    C:\Program Files\desktop.ini --------- 174 
 02.11.2006 15:01    C:\Program Files\Uninstall Information --------- 0 
 02.11.2006 14:37    C:\Program Files\Microsoft Games --------- 4096 
 02.11.2006 14:37    C:\Program Files\Windows NT --------- 0 
 02.11.2006 14:37    C:\Program Files\MSBuild --------- 0 
 02.11.2006 14:37    C:\Program Files\Reference Assemblies --------- 0 
----------------------------------------

 
C:\ProgramData\..

Public   
***   
desktop.ini   
Default User   
All Users   
Default   
----------------------------------------

 
C:\Windows\system32\drivers\etc\hosts

::1            localhost

----------------------------------------

 

Abbildname                    PID Sitzungsname      Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process              0 Services                  0            24 K
System                          4 Services                  0        4.112 K
smss.exe                      484 Services                  0          724 K
csrss.exe                      552 Services                  0        5.940 K
wininit.exe                    604 Services                  0        3.860 K
csrss.exe                      612 Console                    1        9.592 K
services.exe                  648 Services                  0        6.744 K
lsass.exe                      664 Services                  0        7.880 K
lsm.exe                        676 Services                  0        3.936 K
winlogon.exe                  824 Console                    1        5.684 K
svchost.exe                    836 Services                  0        6.216 K
svchost.exe                    936 Services                  0        6.696 K
svchost.exe                    976 Services                  0        42.572 K
svchost.exe                  1100 Services                  0        12.136 K
svchost.exe                  1148 Services                  0        58.372 K
svchost.exe                  1160 Services                  0        24.372 K
audiodg.exe                  1236 Services                  0        17.524 K
SLsvc.exe                    1268 Services                  0        11.544 K
svchost.exe                  1312 Services                  0        12.400 K
svchost.exe                  1432 Services                  0        14.496 K
ADSMSrv.exe                  1632 Services                  0        2.248 K
AsLdrSrv.exe                  1644 Services                  0        3.248 K
GFNEXSrv.exe                  1664 Services                  0        2.276 K
spoolsv.exe                  1804 Services                  0        10.664 K
taskeng.exe                  1812 Services                  0        5.608 K
dwm.exe                      1848 Console                    1        49.692 K
explorer.exe                  1904 Console                    1        44.688 K
sched.exe                    1916 Services                  0        1.272 K
svchost.exe                  1936 Services                  0        17.416 K
taskeng.exe                    492 Console                    1        10.840 K
MSASCui.exe                  1408 Console                    1        9.076 K
sm56hlpr.exe                  1472 Console                    1        5.376 K
taskeng.exe                  2008 Console                    1        4.536 K
HControl.exe                  1948 Console                    1        7.308 K
ASPG.exe                      600 Console                    1        3.484 K
wcourier.exe                  1572 Console                    1        5.172 K
ACMON.exe                    1224 Console                    1        6.416 K
BatteryLife.exe                804 Console                    1        3.892 K
ALU.exe                      2164 Console                    1        5.100 K
sensorsrv.exe                2172 Console                    1        4.048 K
rundll32.exe                  2272 Console                    1        6.460 K
ACEngSvr.exe                  2336 Console                    1        10.364 K
rundll32.exe                  2368 Console                    1        5.560 K
RtHDVCpl.exe                  2392 Console                    1        8.076 K
ATKOSD2.exe                  2408 Console                    1        4.552 K
DMedia.exe                    2420 Console                    1        3.652 K
SynTPEnh.exe                  2444 Console                    1        7.528 K
P4P.exe                      2484 Console                    1        6.936 K
ASScrPro.exe                  2496 Console                    1        4.028 K
ATKOSD.exe                    2516 Console                    1        4.820 K
winampa.exe                  2528 Console                    1        3.116 K
iTunesHelper.exe              2576 Console                    1        9.328 K
pptd40nt.exe                  2596 Console                    1        3.936 K
BrMfcWnd.exe                  2620 Console                    1        8.424 K
avgnt.exe                    2636 Console                    1        3.800 K
jusched.exe                  2644 Console                    1        3.436 K
reader_sl.exe                2668 Console                    1        3.476 K
wmpnscfg.exe                  2688 Console                    1        5.032 K
KBFiltr.exe                  2780 Console                    1        2.804 K
WDC.exe                      2808 Console                    1        4.216 K
BrccMCtl.exe                  3096 Console                    1        52.576 K
BrMfcMon.exe                  3208 Console                    1        5.124 K
avguard.exe                  3740 Services                  0        28.728 K
AppleMobileDeviceService.    3780 Services                  0        3.468 K
mDNSResponder.exe            3792 Services                  0        4.416 K
avshadow.exe                  3896 Services                  0        5.988 K
LSSrvc.exe                    4000 Services                  0        3.720 K
NMSAccessU.exe                4052 Services                  0        2.564 K
svchost.exe                  4092 Services                  0        5.152 K
spmgr.exe                    1716 Services                  0        5.804 K
svchost.exe                  1108 Services                  0        6.384 K
svchost.exe                  1256 Services                  0        1.976 K
SearchIndexer.exe            1376 Services                  0        15.064 K
TrustedInstaller.exe          2776 Services                  0        8.452 K
wmpnetwk.exe                  3192 Services                  0        8.544 K
iPodService.exe              3352 Services                  0        5.204 K
WmiPrvSE.exe                  3644 Services                  0        5.932 K
SynTPHelper.exe              4264 Console                    1        2.628 K
SearchProtocolHost.exe        4916 Services                  0        7.908 K
SearchFilterHost.exe          4928 Services                  0        6.660 K
cmd.exe                      5520 Console                    1        2.936 K
conime.exe                    5532 Console                    1        3.364 K
tasklist.exe                  5988 Console                    1        4.628 K
WmiPrvSE.exe                  6008 Services                  0        5.676 K

 
***** Ende des Scans 25.06.2010 um 16:58:41,88 ***

kira 25.06.2010 20:57
hi

prüfen wir dein System zunächst:

Auch auf USB-Sticks, selbstgebrannten Datenträgern, externen Festplatten und anderen Datenträgern können Viren transportiert werden. Man muss daher durch regelmäßige Prüfungen auf Schäden, die durch Malware verursacht worden sein können, überwacht werden. Hierfür sind ser gut geegnet und empfohlen, die auf dem Speichermedium gesicherten Daten, mit Hilfe des kostenlosen Online Scanners zu prüfen.
→ Also alle vorhandenen externen Laufwerke inkl. evtl. vorhandener USB-Sticks an den Rechner anschließen, aber dabei die Shift-Taste gedrückt halten, damit die Autorun-Funktion nicht ausgeführt wird.
Außerdem kann man die Autostarteigenschaft auch ausschalten:
→ Windows-Sicherheit: Datenträger-Autorun deaktivieren- bebilderte Anleitung v.Leonidas/3dcenter.org
→ Autorun/Autoplay gezielt für Laufwerkstypen oder -buchstaben abschalten/wintotal.de
→ Diese Silly -Beschreibung stützt die Annahme, dass er über einen USB-Stick kam. Die Ursache ist durch formatieren des Sticks aus der Welt geschafft, Du solltest darauf achten, dass dort keine Datei autorun.inf wieder auftaucht und etwas wählerisch sein, wo Du deinen Stick reinsteckst.

→ Den kompletten Rechner (also das ganze System) zu überprüfen (Systemprüfung ohne Säuberung) mit Kaspersky Online Scanner/klicke hier
→ um mit dem Vorgang fortzufahren klicke auf "Accept"
→ dann wähle "My computer" aus - Es dauert einige Zeit, bis ein Komplett-Scan durch gelaufen ist, also bitte um Geduld!
Es kann einige Zeit dauern, bis der Scan abgeschlossen ist - je nach Größe der Festplatte eine oder mehrere Stunden - also Geduld...
→ Report angezeigt, klicke auf "Save as" - den bitte kopieren und in deinem Thread hier einfügen
Vor dem Scan Einstellungen im Internet Explorer:
→ "Extras→ Internetoptionen→ Sicherheit":
→ alles auf Standardstufe stellen
→ Active X erlauben - damit die neue Virendefinitionen installiert werden können

** Gibt`s bemerkbare Probleme im allltäglichen Arbeit mit dem Rechner?

feya 25.06.2010 21:01
Ich werde alles ausführen und dann hier posten aber das klingt so, als wenn mein Rechner völlig im Eimer sei? :teufel1:

Also an sich merk ich nichts, läuft eigentlich perfekt nur eben seitdem diese Meldung von Avira kam, bin ich verunsichert.

kira 25.06.2010 21:06
tja...einiges haben wir ja zu tun gehabt:-> http://www.trojaner-board.de/87254-t...tml#post536608 http://www.world-of-smilies.com/wos_sonstige/a048.gif
aber ich persönlich mal viel schlimmer auch gesehen;)

feya 26.06.2010 08:13
Hmmm...Soll ich mich jetzt freuen oder eher "verzweifeln", dass so viele Objekte gefunden wurden? :heulen:
Liegt halt mit an der Festplatte für meine Sicherung...

Bitte um Hilfe :heulen:

Code:
--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
 Saturday, June 26, 2010
 Operating system: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 2 (build 6002)
 Kaspersky Online Scanner version: 7.0.26.13
 Last database update: Friday, June 25, 2010 18:10:21
 Records in database: 4301698
--------------------------------------------------------------------------------

Scan settings:
        scan using the following database: extended
        Scan archives: yes
        Scan e-mail databases: yes

Scan area - My Computer:
        C:\
        D:\
        E:\
        F:\
        G:\

Scan statistics:
        Objects scanned: 246318
        Threats found: 6
        Infected objects found: 16
        Suspicious objects found: 0
        Scan duration: 06:51:20


File name / Threat / Threats count
C:\Program Files\mIRC\mirc.exe        Infected: not-a-virus:Client-IRC.Win32.mIRC.g        1
C:\Users\***\Desktop\mirc635.exe        Infected: not-a-virus:Client-IRC.Win32.mIRC.g        1
C:\Users\***\Documents\Programme - exe\icq\ICQ Ignore Checker.exe        Infected: HackTool.Win32.ICQPass.aw        1
C:\Users\***\Documents\Programme - exe\icq\ICQ Status Checker.exe        Infected: HackTool.Win32.ICQPass.v        1
C:\Users\***\Documents\Programme - exe\icq\ICQAwayReader.exe        Infected: Worm.Win32.Runfer.cbp        1
D:\Programme - exe\icq\ICQ Ignore Checker.exe        Infected: HackTool.Win32.ICQPass.aw        1
D:\Programme - exe\icq\ICQ Status Checker.exe        Infected: HackTool.Win32.ICQPass.v        1
D:\Programme - exe\icq\ICQAwayReader.exe        Infected: Worm.Win32.Runfer.cbp        1
F:\CHARON\Backup Set 2010-01-15 083002\Backup Files 2010-01-15 083002\Backup files 2.zip        Infected: Trojan-Downloader.JS.Kazmet.h        1
F:\$RECYCLE.BIN\$RIUTDYP\ICQ Ignore Checker.exe        Infected: HackTool.Win32.ICQPass.aw        1
F:\$RECYCLE.BIN\$RIUTDYP\ICQ Status Checker.exe        Infected: HackTool.Win32.ICQPass.v        1
F:\$RECYCLE.BIN\$RIUTDYP\ICQAwayReader.exe        Infected: Worm.Win32.Runfer.cbp        1
F:\Hauptrechner sichern\c\***\olaf\INTERNET .EXE\FUCHS\DVD Fab HD Decrypter\DVDFabHDDecrypter3176.exe        Infected: Trojan.Win32.Agent.dtos        1
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\icq\ICQ Ignore Checker.exe        Infected: HackTool.Win32.ICQPass.aw        1
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\icq\ICQ Status Checker.exe        Infected: HackTool.Win32.ICQPass.v        1
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\icq\ICQAwayReader.exe        Infected: Worm.Win32.Runfer.cbp        1

Selected area has been scanned.

kira 27.06.2010 08:40
hi

- Speichermedien wie Externe Festplatte/USB-Stick usw bitte anschließen - Halte aber beim einstecken des Sticks die Shift-Taste gedrückt! Dadurch wird der Autostart des Datenträgers deaktiviert.
- Lade das Combofix von einem der folgenden Download Spiegel herunter:
BleepingComputer - ForoSpyware

- Wichtig!:[/u] muss auf dem Desktop installiert werden!
- Antiviren, - und andere Schutz/Spyprogramme bitte deaktivieren
- Schließe jeder externe Datenträger (USB Stick und USB Festplatte etc) an dein Computer an - dabei die Shift-Taste bitte unbedingt gedrückt halten!
- Per Doppelklick die ComboFix.exe starten und den Anweisungen folgen
- Falls die Microsoft-Windows-Wiederherstellungskonsole auf dein Rechner nicht installiert ist, und wenn du direkt gefragt wirst, es zu ermöglichen stimme dem Lizenzvertrag zu. Danach erscheint ein Fenster zur Bestätigung, ansonsten wird ComboFix mit der Arbeit fortfahren
- bestätige mit "ja", damit den Suchlauf automatisch beginnen kann
Zitat:
Achtung! Während ComboFix läuft: Ab sofort die Maus nicht mehr bewegen oder/und auf dem PC irgendetwas machen!!
** Für alle die das Tool benutzen, eine gewisse Vorsicht geboten, also die Reihenfolge und Anweisungen gründlich lesen und streng einhalten!!
- wird ein Log-Datei - C:\ComboFix.txt erstellt, deren Inhalte bitte posten
Zitat:
** Eine bebilderte Anleitung findest Du hier: bleepingcomputer.com/combofix/Anleitung
**Danach nicht vergessen die Schutzprogramme wieder aktivieren!!

feya 28.06.2010 09:18
Guten Morgen,

ich habe gestern den ganzen Tag das Programm Combofix laufen lassen. Der Suchlauf hat ziemlich lange dedauert aber irgendwann erschien dann das Fenster, dass die Logdatei erstellt wird.
Und dann musste ich warten....und warten....un warten....und....nichts passierte. Bin ins Bett gegangen und hab das Ganze bis heute Morgen 14h laufen lassen -> Es tat sich noch immer nichts. Somit musste ich das Programm abbrechen und den PC neu starten (hatte schon bisschen Angst dabei...stand ja extra da, man soll keine Maus bewegen/klicken oder andere Programme öffnen). Ging zwar dann alles gut aber ich kann jetzt keine Logdatei posten :eek:

Was tun? :heulen:

kira 05.07.2010 15:25
Zitat:
Zitat von feya (Beitrag 537282)
... ich kann jetzt keine Logdatei posten :eek:
schaue mal nach, ob etwas unter:

Code:
C:\Qoobox
oder C:\ComboFix.txt
finden kannst...

feya 05.07.2010 15:43
also unter C:\ComboFix -> ComboFix.txt steht folgendes drin:

Code:
ComboFix 10-06-26.03 - feya 27.06.2010  15:42:49.1.2 - x86
Microsoft® Windows Vista™ Home Premium  6.0.6002.2.1252.49.1031.18.3070.1994 [GMT 2:00]
ausgeführt von:: C:\Users\feya\Desktop\ComboFix.exe
.
mehr leider nicht...

und unter C:\Qoobox gibt es keine txt-datei

kira 06.07.2010 06:44
hi

CombiFix entfernen:
Start --> Ausführen -->Kopiere rein Combofix /Uninstall --> OK
Entferne auf C:\ Qoobox (falls noch vorhanden) -->Papierkorb leeren
oder einfach nur entfernen, C:\ Qoobox (falls noch vorhanden) auch löschen-->Papierkorb leeren

→ Es gilt für beide Schritte:
Also alle vorhandenen externen Laufwerke inkl. evtl. vorhandener USB-Sticks an den Rechner anschließen, aber dabei die Shift-Taste gedrückt halten, damit die Autorun-Funktion nicht ausgeführt wird.

1.
- Malware-Scan mit a-squared Free
- Ohne Hintergrundwächter durchsucht a-squared den Computer auf div. schädlichen Programmen.
- Also lade a-squared Free von Emsisoft herunter
- Update das Programm und lass dein rechner komplett scannen
- Am Ende des Scans alle Funde löschen lassen und über den Button "Bericht speichern" das Log speichern und hier in den Thread posten.

2.
Führe dann einen Komplett-Systemcheck mit Nod32 - die Scanergebnis als *.txt Dateien speichern)
- (ESET Online Scanner
Vor dem Scan Einstellungen im Internet Explorer:
- "Extras→ Internetoptionen→ Sicherheit":
- alles auf Standardstufe stellen
- Active X erlauben

feya 21.07.2010 07:46
hallo :)

ich habe beide schritte ausgeführt und hier sind die berichte:

1. a-squared

Code:
a-squared Free - Version 4.5
Letztes Update: 20.07.2010 18:28:13

Scan Einstellungen:

Scan Methode: Detail Scan
Objekte: Speicher, Traces, Cookies, C:\, D:\, F:\
Archiv Scan: An
Heuristik: Aus
ADS Scan: An

Scan Beginn:        20.07.2010 18:29:21

C:\Users\***\Desktop\mirc635.exe        gefunden: Riskware.Client-IRC.Win32.mIRC!IK
C:\Users\***\Documents\Programme - exe\icq\ICQ Ignore Checker.exe        gefunden: HackTool.Win32.ICQPass!IK
C:\Users\***\Documents\Programme - exe\icq\ICQ Link Patch.exe        gefunden: Trojan.Generic!IK
C:\Users\***\Documents\Programme - exe\icq\ICQ Status Checker.exe        gefunden: HackTool.Win32.ICQPass!IK
C:\Users\***\Documents\Programme - exe\icq\ICQAwayReader.exe        gefunden: Virus.Win32.Icqpass!IK
C:\Users\***\Documents\Programme - exe\wav umwandler\Meowms_sa.zip/MMS_100_setup.exe        gefunden: Riskware.PSWTool.Win32.PWDump.2!IK
D:\Programme - exe\icq\ICQ Ignore Checker.exe        gefunden: HackTool.Win32.ICQPass!IK
D:\Programme - exe\icq\ICQ Link Patch.exe        gefunden: Trojan.Generic!IK
D:\Programme - exe\icq\ICQ Status Checker.exe        gefunden: HackTool.Win32.ICQPass!IK
D:\Programme - exe\icq\ICQAwayReader.exe        gefunden: Virus.Win32.Icqpass!IK
D:\Programme - exe\wav umwandler\Meowms_sa.zip/MMS_100_setup.exe        gefunden: Riskware.PSWTool.Win32.PWDump.2!IK
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\icq\ICQ Ignore Checker.exe        gefunden: HackTool.Win32.ICQPass!IK
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\icq\ICQ Link Patch.exe        gefunden: Trojan.Generic!IK
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\icq\ICQ Status Checker.exe        gefunden: HackTool.Win32.ICQPass!IK
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\icq\ICQAwayReader.exe        gefunden: Virus.Win32.Icqpass!IK
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\wav umwandler\Meowms_sa.zip/MMS_100_setup.exe        gefunden: Riskware.PSWTool.Win32.PWDump.2!IK

Gescannt

Dateien:        355959
Traces:        580987
Cookies:        10
Prozesse:        77

Gefunden

Dateien:        16
Traces:        0
Cookies:        0
Prozesse:        0
Registry Keys:        0

Scan Ende:        20.07.2010 22:38:55
Scan Zeit:        4:09:34

C:\Users\***\Documents\Programme - exe\wav umwandler\Meowms_sa.zip/MMS_100_setup.exe        Quarantäne Riskware.PSWTool.Win32.PWDump.2!IK
D:\Programme - exe\wav umwandler\Meowms_sa.zip/MMS_100_setup.exe        Quarantäne Riskware.PSWTool.Win32.PWDump.2!IK
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\wav umwandler\Meowms_sa.zip/MMS_100_setup.exe        Quarantäne Riskware.PSWTool.Win32.PWDump.2!IK
C:\Users\***\Documents\Programme - exe\icq\ICQAwayReader.exe        Quarantäne Virus.Win32.Icqpass!IK
D:\Programme - exe\icq\ICQAwayReader.exe        Quarantäne Virus.Win32.Icqpass!IK
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\icq\ICQAwayReader.exe        Quarantäne Virus.Win32.Icqpass!IK
C:\Users\***\Documents\Programme - exe\icq\ICQ Link Patch.exe        Quarantäne Trojan.Generic!IK
D:\Programme - exe\icq\ICQ Link Patch.exe        Quarantäne Trojan.Generic!IK
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\icq\ICQ Link Patch.exe        Quarantäne Trojan.Generic!IK
C:\Users\***\Documents\Programme - exe\icq\ICQ Ignore Checker.exe        Quarantäne HackTool.Win32.ICQPass!IK
C:\Users\***\Documents\Programme - exe\icq\ICQ Status Checker.exe        Quarantäne HackTool.Win32.ICQPass!IK
D:\Programme - exe\icq\ICQ Ignore Checker.exe        Quarantäne HackTool.Win32.ICQPass!IK
D:\Programme - exe\icq\ICQ Status Checker.exe        Quarantäne HackTool.Win32.ICQPass!IK
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\icq\ICQ Ignore Checker.exe        Quarantäne HackTool.Win32.ICQPass!IK
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\icq\ICQ Status Checker.exe        Quarantäne HackTool.Win32.ICQPass!IK
C:\Users\***\Desktop\mirc635.exe        Quarantäne Riskware.Client-IRC.Win32.mIRC!IK

Quarantäne

Dateien:        16
Traces:        0
Cookies:        0


2. nod32

Code:
F:\Hauptrechner sichern\c\***\Dokumente\Programme - exe\exact audio copy\eac-0.99pb4.exe        Variante von Win32/Adware.ADON Anwendung        gelöscht - in Quarantäne kopiert
wurde ja ganz schön viel gefunden :eek:
ich habe bei s-squared das ganze erstmal nur in die quarantäne geschoben. soll ich es komplett löschen und auch alles?
und bei nod32 konnte ich den einen fund nicht in die quarantäne schieben, da das ja nur der onlinescanner war. demnach befindet sich der fund noch auf meiner festplatte :(

viele grüße


Alle Zeitangaben in WEZ +1. Es ist jetzt 07:57 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131