Trojaner-Board - Systemprobleme nach Trojanerbefall

Danke!

Wie vorhergesagt, brachte GMER das Betriebssystem zweimal zum Absturz...

Also nachfolgend die Logfiles von OSAM und MBRCheck:

OSAM Logfile:

Code:

Report of OSAM: Autorun Manager v5.0.11926.0

Online Solutions. Complex Protection for Information Systems

Saved at 23:28:19 on 09.04.2011
 

OS: Windows Vista Home Premium Edition (Build 6000), 32-bit

Default Browser: Mozilla Corporation Firefox 4.0
 

Scanner Settings

[x] Rootkits detection (hidden registry)

[x] Rootkits detection (hidden files)

[x] Retrieve files information

[x] Check Microsoft signatures
 

Filters

[ ] Trusted entries

[ ] Empty entries

[x] Hidden registry entries (rootkit activity)

[x] Exclusively opened files

[x] Not found files

[x] Files without detailed information

[x] Existing files

[ ] Non-startable services

[ ] Non-startable drivers

[x] Active entries

[x] Disabled entries
 
 

[AppInit DLLs]

-----( HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows )-----

"AppInit_DLLs" - "Google" - C:\PROGRA~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll
 

[Common]

-----( %SystemRoot%\Tasks )-----

"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

"Google Software Updater.job" - "Google" - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
 

[Control Panel Objects]

-----( %SystemRoot%\system32 )-----

"ddbaccpl.cpl" - "DataDesign AG" - C:\Windows\system32\ddbaccpl.cpl

"ddbacctm.cpl" - "DataDesign AG" - C:\Windows\system32\ddbacctm.cpl

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----

"mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLCFG32.CPL

"QuickTime" - "Apple Inc." - C:\Program Files\QuickTime\QTSystem\QuickTime.cpl
 

[Drivers]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"avgio" (avgio) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avgio.sys

"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys

"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys

"catchme" (catchme) - ? - C:\Users\JRGEN~1\AppData\Local\Temp\catchme.sys  (File not found)

"IP in IP Tunnel Driver" (IpInIp) - ? - C:\Windows\System32\DRIVERS\ipinip.sys  (File not found)

"IPX Traffic Filter Driver" (NwlnkFlt) - ? - C:\Windows\System32\DRIVERS\nwlnkflt.sys  (File not found)

"IPX Traffic Forwarder Driver" (NwlnkFwd) - ? - C:\Windows\System32\DRIVERS\nwlnkfwd.sys  (File not found)

"Logitech SetPoint KMDF HID Filter Driver" (LHidFilt) - "Logitech, Inc." - C:\Windows\System32\DRIVERS\LHidFilt.Sys

"Logitech SetPoint KMDF Mouse Filter Driver" (LMouFilt) - "Logitech, Inc." - C:\Windows\System32\DRIVERS\LMouFilt.Sys

"PPdus ASPI Shell" (Afc) - "Arcsoft, Inc." - C:\Windows\System32\drivers\Afc.sys

"SoundTap Recorder" (NCHSSVAD) - "NCH Swift Sound" - C:\Windows\System32\drivers\nchssvad.sys

"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys

"StarOpen" (StarOpen) - ? - C:\Windows\system32\drivers\StarOpen.sys  (File found, but it contains no detailed information)

"videX32" (videX32) - ? - C:\Windows\System32\DRIVERS\videX32.sys  (File not found)
 

[Explorer]

-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----

{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll

-----( HKLM\Software\Classes\Protocols\Filter )-----

{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

-----( HKLM\Software\Classes\Protocols\Handler )-----

{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

{88FED34C-F0CA-4636-A375-3CB6248B04CD} "Local Groove Web Services Protocol" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - ? - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll  (File not found)

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )-----

{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - ? - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll  (File not found)

{AEB6717E-7E19-11d0-97EE-00C04FD91972} "{AEB6717E-7E19-11d0-97EE-00C04FD91972}" - ? -   (File not found | COM-object registry key not found)

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----

{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? -   (File not found | COM-object registry key not found)

{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)

{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)

{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? -   (File not found | COM-object registry key not found)

{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? -   (File not found | COM-object registry key not found)

{99FD978C-D287-4F50-827F-B2C658EDA8E7} "Groove Explorer Icon Overlay 1 (GFS Unread Stub)" - ? - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll  (File not found)

{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} "Groove Explorer Icon Overlay 2 (GFS Stub)" - ? - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll  (File not found)

{920E6DB1-9907-4370-B3A0-BAFC03D81399} "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" - ? - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll  (File not found)

{16F3DD56-1AF5-4347-846D-7C10C4192619} "Groove Explorer Icon Overlay 3 (GFS Folder)" - ? - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll  (File not found)

{2916C86E-86A6-43FE-8112-43ABE6BF8DCC} "Groove Explorer Icon Overlay 4 (GFS Unread Mark)" - ? - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll  (File not found)

{2A541AE1-5BF6-4665-A8A3-CFA9672E4291} "Groove Folder Synchronization" - ? - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll  (File not found)

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - ? -   (File not found | COM-object registry key not found)

{6C467336-8281-4E60-8204-430CED96822D} "Groove GFS Context Menu Handler" - ? - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll  (File not found)

{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - ? - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll  (File not found)

{A449600E-1DC6-4232-B948-9BD794D62056} "Groove GFS Stub Icon Handler" - ? - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll  (File not found)

{387E725D-DC16-4D76-B310-2C93ED4752A0} "Groove XML Icon Handler" - ? - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll  (File not found)

{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} "iTunes" - "Apple Inc." - C:\Program Files\iTunes\iTunesMiniPlayer.dll

{DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C} "KbLogiExt Class" - ? - C:\Program Files\Logitech\SetPoint\kbcplext.dll

{B9B9F083-2B04-452A-8691-83694AC1037B} "LogiExt Class" - ? - C:\Program Files\Logitech\SetPoint\mcplext.dll

{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\msohevi.dll

{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONFILTER.DLL

{00020d75-0000-0000-c000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\MLSHEXT.DLL

{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\OLKFSTUB.DLL

{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - C:\Program Files\Real\RealPlayer\rpshell.dll

{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)

{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)

{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll

{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -   (File not found | COM-object registry key not found)
 

[Internet Explorer]

-----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----

"eBay - Der weltweite Online-Marktplatz" - ? - eBay - eine der größten deutschen Shopping-Websites  (HTTP value)

-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----

<binary data> "Google Toolbar" - "Google Inc." - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)

-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----

{2EF98DE5-183F-11D4-83EC-EC6A1DB6E213} "DynaGeoX Element" - "Roland Mechling" - C:\PROGRA~1\DynaGeo\Viewer\DYNAGE~1.OCX / hxxp://www.dynageo.de/download/dynageoviewer.cab

{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} "Java Plug-in 1.6.0_02" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab

{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_18" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab

{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} "Java Plug-in 1.6.0_18" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_18" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_18.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab

{166B1BCA-3F9C-11CF-8075-444553540000} "Shockwave ActiveX Control" - "Adobe Systems, Inc." - C:\Windows\system32\macromed\Director\SwDir.dll / hxxp://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab

{17492023-C23A-453E-A040-C7C580BBF700} "Windows Genuine Advantage Validation Tool" - "Microsoft Corporation" - C:\Windows\system32\LegitCheckControl.DLL / hxxp://download.microsoft.com/download/9/b/d/9bdc68ef-6a9f-4505-8fb8-d0d2d160e512/LegitCheckControl.cab

{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} "{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}" - ? -   (File not found | COM-object registry key not found) / hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab

{E2883E8F-472F-4FB0-9522-AC9BF37916A7} "{E2883E8F-472F-4FB0-9522-AC9BF37916A7}" - ? -   (File not found | COM-object registry key not found) / hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----

"eBay - Der weltweite Online-Marktplatz" - ? - eBay - eine der größten deutschen Shopping-Websites  (HTTP value)

{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

{48E73304-E1D6-4330-914C-F5F514E3486C} "Send to OneNote" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

{77BF5300-1474-4EC7-9980-D32B190E9B07} "Skype" - ? - C:\Program Files\Skype\Phone\IEPlugin\SkypeIEPlugin.dll  (File not found)

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----

<binary data> "Google Toolbar" - "Google Inc." - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----

{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

{AA58ED58-01DD-4d91-8333-CF10577473F7} "Google Toolbar Helper" - "Google Inc." - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} "Google Toolbar Notifier BHO" - "Google Inc." - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll

{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll

{22BF413B-C6D2-4d91-82A9-A0F997BA588C} "Skype add-on (mastermind)" - ? - C:\Program Files\Skype\Phone\IEPlugin\SkypeIEPlugin.dll  (File not found)
 

[Logon]

-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\Users\Jürgen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

"Logitech SetPoint.lnk" - ? - C:\Program Files\Logitech\SetPoint\SetPoint.exe  (Shortcut exists | File exists)

"McAfee Security Scan Plus.lnk" - "McAfee, Inc." - C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe  (Shortcut exists | File exists)

-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}" - "Nero AG" - "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

"swg" - "Google Inc." - "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----

"StartupPrograms" - ? - rdpclip  (File not found)

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----

"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

"avgnt" - "Avira GmbH" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

"EEventManager" - "SEIKO EPSON CORPORATION" - C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe

"Google Desktop Search" - "Google" - "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

"GrooveMonitor" - "Microsoft Corporation" - "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

"iTunesHelper" - "Apple Inc." - "C:\Program Files\iTunes\iTunesHelper.exe"

"Malwarebytes' Anti-Malware (reboot)" - "Malwarebytes Corporation" - "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

"toolbar_eula_launcher" - " " - C:\Program Files\GoogleEULA\EULALauncher.exe

"TVBroadcast" - "ODSoft multimedia" - C:\Program Files\Sceneo\AbsolutTV\Services\ODSBC\ODSBCApp.exe
 

[Print Monitors]

-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----

"HP Master Monitor" - "Hewlett-Packard" - C:\Windows\system32\HPBMMON.DLL

"Microsoft Document Imaging Writer Monitor" - "Microsoft Corporation" - C:\Windows\system32\mdimon.dll

"Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll

"T-Sinus 130 DSL" - ? - lanpress.dll  (File not found)
 

[Services]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"Apple Mobile Device" (Apple Mobile Device) - "Apple Inc." - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

"Avira AntiVir MailGuard" (AntiVirMailService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe

"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\sched.exe

"Avira AntiVir WebGuard" (AntiVirWebService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE

"Cyberlink RichVideo Service(CRVS)" (RichVideo) - ? - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

"Dienst "Bonjour"" (Bonjour Service) - "Apple Inc." - C:\Program Files\Bonjour\mDNSResponder.exe

"Firebird Server - MAGIX Instance" (FirebirdServerMAGIXInstance) - ? - C:\Program Files\ALDI Sued Foto Service\Common\Database\bin\fbserver.exe  (File not found)

"Google Desktop Manager 5.9.1005.12335" (GoogleDesktopManager-051210-111108) - "Google" - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

"Google Software Updater" (gusvc) - "Google" - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

"Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Program Files\Google\Update\GoogleUpdate.exe

"iPod-Dienst" (iPod Service) - "Apple Inc." - C:\Program Files\iPod\bin\iPodService.exe

"LightScribeService Direct Disc Labeling Service" (LightScribeService) - "Hewlett-Packard Company" - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

"Logitech Bluetooth Service" (LBTServ) - ? - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe

"McAfee Security Scan Component Host Service" (McComponentHostService) - "McAfee, Inc." - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe

"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

"Microsoft Office Groove Audit Service" (Microsoft Office Groove Audit Service) - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

"NBService" (NBService) - ? - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe  (File not found)

"NMIndexingService" (NMIndexingService) - "Nero AG" - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

"Sceneo PVR Service" (srvcPVR) - "Buhl Data Service GmbH" - C:\Program Files\Sceneo\AbsolutTV\Services\PVR\PVRService.exe

"X10 Device Network Service" (x10nets) - "X10" - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
 

[Winsock Providers]

-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----

"mdnsNSP" - "Apple Inc." - C:\Program Files\Bonjour\mdnsNSP.dll

-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries )-----

"AVSDA" - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avsda.dll
 

===[ Logfile end ]=========================================[ Logfile end ]===

--- --- ---
If You have questions or want to get some help, You can visit Online Solutions :: Index

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows Vista Home Premium Edition
Windows Information: (build 6000), 32-bit
Base Board Manufacturer: MICRO-STAR INTERNATIONAL CO., LTD
BIOS Manufacturer: Phoenix Technologies, LTD
System Manufacturer: MEDIONPC
System Product Name: MS-7255
Logical Drives Mask: 0x000000fc

Kernel Drivers (total 150):
0x82400000 \SystemRoot\system32\ntkrnlpa.exe
0x827A1000 \SystemRoot\system32\hal.dll
0x802C6000 \SystemRoot\system32\kdcom.dll
0x80266000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x8025D000 \SystemRoot\system32\PSHED.dll
0x80255000 \SystemRoot\system32\BOOTVID.dll
0x8021A000 \SystemRoot\system32\CLFS.SYS
0x8051F000 \SystemRoot\system32\CI.dll
0x804A4000 \SystemRoot\system32\drivers\Wdf01000.sys
0x8020D000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x80461000 \SystemRoot\system32\drivers\acpi.sys
0x80204000 \SystemRoot\system32\drivers\WMILIB.SYS
0x80459000 \SystemRoot\system32\drivers\msisadrv.sys
0x80434000 \SystemRoot\system32\drivers\pci.sys
0x80425000 \SystemRoot\system32\drivers\volmgr.sys
0x80415000 \SystemRoot\System32\drivers\mountmgr.sys
0x8040D000 \SystemRoot\system32\DRIVERS\viaide.sys
0x807F2000 \SystemRoot\system32\DRIVERS\PCIIDEX.SYS
0x80404000 \SystemRoot\system32\DRIVERS\ViBus.sys
0x807EB000 \SystemRoot\system32\drivers\pciide.sys
0x807A1000 \SystemRoot\System32\drivers\volmgrx.sys
0x80799000 \SystemRoot\system32\drivers\atapi.sys
0x8077B000 \SystemRoot\system32\drivers\ataport.SYS
0x8076B000 \SystemRoot\system32\DRIVERS\ViPrt.sys
0x8073A000 \SystemRoot\system32\drivers\fltmgr.sys
0x8072A000 \SystemRoot\system32\drivers\fileinfo.sys
0x80626000 \SystemRoot\system32\drivers\ndis.sys
0x82DD5000 \SystemRoot\system32\drivers\msrpc.sys
0x82D9C000 \SystemRoot\system32\drivers\NETIO.SYS
0x82C94000 \SystemRoot\System32\Drivers\Ntfs.sys
0x82C2A000 \SystemRoot\System32\Drivers\ksecdd.sys
0x82FCA000 \SystemRoot\system32\drivers\volsnap.sys
0x80615000 \SystemRoot\system32\DRIVERS\uagp35.sys
0x8060D000 \SystemRoot\System32\Drivers\spldr.sys
0x82C1B000 \SystemRoot\System32\drivers\partmgr.sys
0x82C0C000 \SystemRoot\System32\Drivers\mup.sys
0x82FA5000 \SystemRoot\System32\drivers\ecache.sys
0x82F94000 \SystemRoot\system32\drivers\disk.sys
0x82F73000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x80604000 \SystemRoot\system32\drivers\crcdisk.sys
0x8A65A000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x8A6C1000 \SystemRoot\system32\DRIVERS\tunmp.sys
0x88A05000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x8C4C8000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys
0x8BCC3000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x8A64D000 \SystemRoot\System32\drivers\watchdog.sys
0x8C3B4000 \SystemRoot\system32\DRIVERS\3xHybrid.sys
0x8A623000 \SystemRoot\system32\DRIVERS\ks.sys
0x88FAD000 \SystemRoot\system32\DRIVERS\BdaSup.SYS
0x88F75000 \SystemRoot\system32\drivers\Afc.sys
0x8A60B000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x88E33000 \SystemRoot\System32\Drivers\GEARAspiWDM.sys
0x8A600000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0x8BC86000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x8BC78000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x8BC6D000 \SystemRoot\system32\DRIVERS\fetnd5bv.sys
0x8BC53000 \SystemRoot\system32\DRIVERS\serial.sys
0x8BD60000 \SystemRoot\system32\DRIVERS\serenum.sys
0x8BC3B000 \SystemRoot\system32\DRIVERS\parport.sys
0x8BC28000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x8BC0D000 \SystemRoot\system32\DRIVERS\L8042mou.Sys
0x8C394000 \SystemRoot\system32\DRIVERS\LMouKE.Sys
0x8BC02000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x8A70C000 \SystemRoot\system32\DRIVERS\L8042Kbd.sys
0x8C389000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x8C377000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x88FA3000 \SystemRoot\System32\Drivers\x10hid.sys
0x88B20000 \SystemRoot\System32\Drivers\HIDCLASS.SYS
0x88E86000 \SystemRoot\System32\Drivers\HIDPARSE.SYS
0x8C34C000 \SystemRoot\system32\DRIVERS\msiscsi.sys
0x8C30C000 \SystemRoot\system32\DRIVERS\storport.sys
0x8C301000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x88E75000 \SystemRoot\system32\drivers\nchssvad.sys
0x8C2D4000 \SystemRoot\system32\drivers\portcls.sys
0x8C2AF000 \SystemRoot\system32\drivers\drmk.sys
0x8C298000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x8C28D000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x8C26A000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x88BD4000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x8C257000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x8C23D000 \SystemRoot\system32\DRIVERS\termdd.sys
0x88F93000 \SystemRoot\system32\DRIVERS\swenum.sys
0x8BD6A000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x8D130000 \SystemRoot\system32\DRIVERS\umbus.sys
0x8D0FC000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x8A6AF000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0x88AC0000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x8D24F000 \SystemRoot\system32\drivers\RTKVHDA.sys
0x8A6B8000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0x88EB0000 \SystemRoot\System32\Drivers\Null.SYS
0x88EB7000 \SystemRoot\System32\Drivers\Beep.SYS
0x8C221000 \SystemRoot\System32\drivers\vga.sys
0x8C200000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x88F15000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x88F1D000 \SystemRoot\system32\drivers\rdpencdd.sys
0x8D13D000 \SystemRoot\system32\DRIVERS\usbscan.sys
0x88F8F000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x8C24C000 \SystemRoot\System32\Drivers\Msfs.SYS
0x8C3A6000 \SystemRoot\System32\Drivers\Npfs.SYS
0x8A6D3000 \SystemRoot\System32\DRIVERS\rasacd.sys
0x8D44B000 \SystemRoot\System32\drivers\tcpip.sys
0x8D083000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x8D06E000 \SystemRoot\system32\DRIVERS\tdx.sys
0x8D05A000 \SystemRoot\system32\DRIVERS\smb.sys
0x8D013000 \SystemRoot\system32\drivers\afd.sys
0x8D21D000 \SystemRoot\System32\DRIVERS\netbt.sys
0x8A6F7000 \SystemRoot\system32\drivers\ws2ifsl.sys
0x8D207000 \SystemRoot\system32\DRIVERS\pacer.sys
0x8D520000 \SystemRoot\system32\DRIVERS\netbios.sys
0x88E1B000 \SystemRoot\System32\Drivers\StarOpen.SYS
0x8D000000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x88E21000 \SystemRoot\system32\DRIVERS\ssmdrv.sys
0x8D410000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x8BD74000 \SystemRoot\system32\drivers\nsiproxy.sys
0x8D7A9000 \SystemRoot\System32\Drivers\dfsc.sys
0x8D783000 \SystemRoot\system32\DRIVERS\avipbb.sys
0x88FA9000 \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys
0x8D74B000 \SystemRoot\System32\Drivers\fastfat.SYS
0x8D739000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0x8D157000 \SystemRoot\System32\Drivers\crashdmp.sys
0x8A665000 \SystemRoot\System32\Drivers\dump_dumpata.sys
0x88F25000 \SystemRoot\System32\Drivers\dump_atapi.sys
0x96000000 \SystemRoot\System32\win32k.sys
0x8BD92000 \SystemRoot\System32\drivers\Dxapi.sys
0x99841000 \SystemRoot\system32\DRIVERS\monitor.sys
0x99E00000 \SystemRoot\System32\TSDDD.dll
0x99E10000 \SystemRoot\System32\cdd.dll
0x99CE5000 \SystemRoot\system32\drivers\luafv.sys
0x99CD0000 \SystemRoot\system32\DRIVERS\avgntflt.sys
0x9CEF2000 \SystemRoot\system32\drivers\spsys.sys
0x9CE20000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x9CE9F000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x9D757000 \SystemRoot\system32\drivers\HTTP.sys
0x9D67C000 \SystemRoot\System32\DRIVERS\srvnet.sys
0x9D663000 \SystemRoot\system32\DRIVERS\bowser.sys
0x9D64F000 \SystemRoot\System32\drivers\mpsdrv.sys
0x9D62F000 \SystemRoot\system32\drivers\mrxdav.sys
0x9D611000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x9CDC7000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x9CDB5000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x9CD91000 \SystemRoot\System32\DRIVERS\srv2.sys
0x9CD00000 \SystemRoot\System32\DRIVERS\srv.sys
0x88EA2000 \SystemRoot\system32\DRIVERS\parvdm.sys
0x9F6A2000 \SystemRoot\system32\drivers\peauth.sys
0x8BD7E000 \SystemRoot\System32\Drivers\secdrv.SYS
0x8D72E000 \SystemRoot\System32\drivers\tcpipreg.sys
0x9CC18000 \SystemRoot\system32\DRIVERS\WUDFRd.sys
0x9CC06000 \SystemRoot\system32\DRIVERS\WUDFPf.sys
0xA236A000 \SystemRoot\system32\DRIVERS\cdfs.sys
0x77A40000 \Windows\System32\ntdll.dll

Processes (total 73):
0 System Idle Process
4 System
472 C:\Windows\System32\smss.exe
540 csrss.exe
592 C:\Windows\System32\wininit.exe
600 csrss.exe
640 C:\Windows\System32\services.exe
668 C:\Windows\System32\lsass.exe
676 C:\Windows\System32\lsm.exe
776 C:\Windows\System32\winlogon.exe
860 C:\Windows\System32\svchost.exe
940 C:\Windows\System32\svchost.exe
972 C:\Windows\System32\svchost.exe
1068 C:\Windows\System32\svchost.exe
1152 C:\Windows\System32\svchost.exe
1172 C:\Windows\System32\svchost.exe
1228 C:\Windows\System32\audiodg.exe
1268 C:\Windows\System32\SLsvc.exe
1312 C:\Windows\System32\svchost.exe
1424 C:\Windows\System32\svchost.exe
1596 C:\Windows\System32\spoolsv.exe
1628 C:\Program Files\Avira\AntiVir Desktop\sched.exe
1724 C:\Windows\System32\svchost.exe
400 C:\Windows\System32\dwm.exe
508 C:\Windows\explorer.exe
1460 C:\Program Files\Avira\AntiVir Desktop\avguard.exe
1648 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
656 C:\Program Files\Bonjour\mDNSResponder.exe
1400 C:\Program Files\Common Files\LightScribe\LSSrvc.exe
1544 C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
480 C:\Windows\System32\svchost.exe
2020 C:\Program Files\CyberLink\Shared Files\RichVideo.exe
396 C:\Program Files\Sceneo\AbsolutTV\Services\PVR\pvrservice.exe
504 C:\Windows\System32\svchost.exe
1876 C:\Windows\System32\svchost.exe
2108 C:\Windows\System32\SearchIndexer.exe
2216 C:\PROGRA~1\COMMON~1\X10\Common\X10nets.exe
2424 WUDFHost.exe
2652 C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
2664 C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
2704 C:\Windows\System32\taskeng.exe
2780 C:\Windows\System32\taskeng.exe
2796 C:\Program Files\Google\Update\GoogleUpdate.exe
3156 C:\Program Files\Sceneo\AbsolutTV\Services\ODSBC\ODSBCApp.exe
3164 C:\Windows\RtHDVCpl.exe
3172 C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
3312 C:\Windows\System32\rundll32.exe
3328 C:\Windows\System32\wpcumi.exe
3368 C:\Program Files\Common Files\Java\Java Update\jusched.exe
3428 C:\Windows\System32\rundll32.exe
3516 C:\Program Files\epson\Creativity Suite\Event Manager\EEventManager.exe
3560 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
3676 C:\Program Files\iTunes\iTunesHelper.exe
3712 C:\Program Files\Windows Sidebar\sidebar.exe
3752 C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
3760 C:\Windows\ehome\ehtray.exe
3768 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
3784 C:\Program Files\Windows Media Player\wmpnscfg.exe
3796 C:\Program Files\Logitech\SetPoint\SetPoint.exe
3804 C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
3904 C:\Program Files\Windows Media Player\wmpnetwk.exe
3952 C:\Windows\ehome\ehmsas.exe
3208 C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
3264 C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
3920 C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
3012 C:\Program Files\iPod\bin\iPodService.exe
4992 C:\Windows\System32\wuauclt.exe
4220 C:\Windows\System32\conime.exe
3100 C:\Windows\System32\notepad.exe
4660 C:\Program Files\Mozilla Firefox\firefox.exe
5540 <unknown>
1168 <unknown>
4072 C:\Users\Jürgen\Desktop\MBRCheck.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00100000 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000045`85b07e00 (FAT32)

PhysicalDrive0 Model Number: ST3320820AS, Rev: 3.AAD

Size Device Name MBR Status
--------------------------------------------
298 GB \\.\PhysicalDrive0 Windows 2008 MBR code detected
SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979

Done!

Neue Erkenntnisse?

Danke & beste Grüße,

lilafepi