Verdacht auf Wurm oder anderes, Rechner ist um einiges langsamer

#1 Hallo,

bin schon zum 3 oder 4 mal da *gg*
Naja auf jeden fall ruckelt mein Rechner Seit 2 Tagen voll und hab schon alles mögliche gelöscht ob vielleicht ein Programm das beim Starten dabei ist das ausführen könnte. Hat aber nichts gebracht, jetzt bitte ich euch wieder mal um eure Hilfe.

Hier meine Logs:

HijackThis:

Logfile of HijackThis v1.99.1
Scan saved at 21:59:10, on 06.03.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
E:\Programme\xampp\apache\bin\apache.exe
C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe
E:\Programme\xampp\FileZillaFTP\FileZillaServer.exe
E:\Programme\Borland\InterBase\bin\ibguard.exe
C:\WINDOWS\system32\mgabg.exe
C:\Programme\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\system32\Ati2evxx.exe
E:\Programme\xampp\mysql\bin\mysqld-nt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Programme\Synergy\synergys.exe
C:\Programme\VMware\VMware Workstation\vmware-authd.exe
C:\Programme\Gemeinsame Dateien\VMware\VMware Virtual Image Editing\vmount2.exe
E:\Programme\xampp\apache\bin\apache.exe
C:\WINDOWS\system32\vmnat.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Programme\MSI\LAN Utility\DiagAP8169.exe
E:\Programme\Borland\InterBase\bin\ibserver.exe
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
E:\Programme\TRIXX\TRIXX.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\PDesk\PDesk.exe
C:\Programme\Winamp\winampa.exe
C:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Programme\DIRC\DIRC.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Programme\Gemeinsame Dateien\InterVideo\SchSvr\SchSvr.exe
C:\WINDOWS\vVX3000.exe
C:\Programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programme\QuickTime\qttask.exe
C:\Programme\Logitech\Profiler\lwemon.exe
C:\Downloads\wtvirbridge-dirc-1.5.0.0\WTVIRBridge.exe
C:\Programme\Microsoft ActiveSync\wcescomm.exe
C:\Programme\NetSetMan\NetSetMan.exe
C:\Programme\LeechGet 2004\LeechGet.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Programme\ATI Technologies\ATI.ACE\CLI.exe
C:\Programme\MSI\Core Center\CoreCenter.exe
C:\Programme\Allzeit Atomzeit\Atomzeit.exe
C:\Programme\Allzeit Zeitsignal\Zeitsignal.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\ATI Technologies\ATI.ACE\cli.exe
C:\Downloads\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.at/
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Programme\MegauploadToolbar\megauploadtoolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: WebSpeechBHO Class - {83A30C59-3A50-49E6-9DAF-4923C4EA3C23} - C:\Programme\Gemeinsame Dateien\WebSpeech.4.0\LgxIEBar.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Programme\Megaupload\Mega Manager\MegaIEMn.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Programme\MegauploadToolbar\megauploadtoolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [DiagAP8169] C:\Programme\MSI\LAN Utility\DiagAP8169 /hw
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [TRIXX] "E:\Programme\TRIXX\TRIXX.exe" -s
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ATICCC] "C:\Programme\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [Matrox Powerdesk] C:\WINDOWS\system32\PDesk\PDesk.exe /Autolaunch
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [DIRC] C:\Programme\DIRC\DIRC.exe
O4 - HKLM\..\Run: [WinDVR SchSvr] "C:\Programme\Gemeinsame Dateien\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Programme\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\system32\mstask.exe
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Programme\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [WTVIRBridge] C:\Downloads\wtvirbridge-dirc-1.5.0.0\WTVIRBridge.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [NetSetMan] C:\Programme\NetSetMan\NetSetMan.exe -h
O4 - HKCU\..\Run: [LeechGet] "C:\Programme\LeechGet 2004\LeechGet.exe" -intray
O4 - Startup: Verknüpfung mit Atomzeit.lnk = C:\Programme\Allzeit Atomzeit\Atomzeit.exe
O4 - Startup: Verknüpfung mit Zeitsignal.lnk = C:\Programme\Allzeit Zeitsignal\Zeitsignal.exe
O4 - Global Startup: Adobe Acrobat - Schnellstart.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Programme\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Programme\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Programme\Gemeinsame Dateien\Autodesk Shared\acstart17.exe
O4 - Global Startup: CoreCenter.lnk = C:\Programme\MSI\Core Center\CoreCenter.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: An vorhandenes PDF anfügen - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Auswahl in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Auswahl in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: In Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Mit dem LeechGet Wizard laden - file://C:\Programme\LeechGet 2004\\Wizard.html
O8 - Extra context menu item: Mit LeechGet herunterladen - file://C:\Programme\LeechGet 2004\\AddUrl.html
O8 - Extra context menu item: Mit LeechGet parsen - file://C:\Programme\LeechGet 2004\\Parser.html
O8 - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Programme\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Programme\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Programme\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Programme\ieSpell\iespell.dll
O9 - Extra button: WebSpeech - {1CE4DE72-7FCC-4eb8-8F66-AE6A56A0A54D} - C:\Programme\Gemeinsame Dateien\WebSpeech.4.0\LgxIEBar.dll
O9 - Extra 'Tools' menuitem: Seite/Markierung vorlesen (WebSpeech) - {1CE4DE72-7FCC-4eb8-8F66-AE6A56A0A54D} - C:\Programme\Gemeinsame Dateien\WebSpeech.4.0\LgxIEBar.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1133627733656
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://195.243.185.195/activex/AxisCamControl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Services Client v.3.11) - http://gameadvisor.futuremark.com/global/msc311.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C47744EF-BF13-4BFD-ADDE-B9F13747A403}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apache2 - Unknown owner - E:\Programme\xampp\apache\bin\apache.exe" -k runservice (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - E:\Programme\xampp\FileZillaFTP\FileZillaServer.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - E:\Programme\Borland\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - E:\Programme\Borland\InterBase\bin\ibserver.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: MGABGEXE - Matrox Graphics Inc. - C:\WINDOWS\system32\mgabg.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: mysql - Unknown owner - E:\Programme\xampp\mysql\bin\mysqld-nt.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
O23 - Service: Synergy Server - Unknown owner - C:\Programme\Synergy\synergys.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Programme\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Programme\Gemeinsame Dateien\VMware\VMware Virtual Image Editing\vmount2.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: wampapache - Unknown owner - E:\wamp\apache2\bin\Apache.exe" -k runservice (file missing)
O23 - Service: wampmysqld - Unknown owner - E:\wamp\mysql\bin\mysqld-nt.exe
O23 - Service: XAMPP Service (XAMPP) - Unknown owner - E:\Programme\xampp\service.exe


----------------------------------------------------------------------------------

ComboScan.txt:

ComboScan v20070226.18 run by Peter Buchegger on 2007-03-06 at 22:13:59
Computer is in Normal Mode.
--------------------------------------------------------------------------------

Successfully created restore point.
Performed disk cleanup.


-- HijackThis (run as Peter Buchegger.exe) --------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 22:14:56, on 06.03.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
E:\Programme\xampp\apache\bin\apache.exe
C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe
E:\Programme\xampp\FileZillaFTP\FileZillaServer.exe
E:\Programme\Borland\InterBase\bin\ibguard.exe
C:\WINDOWS\system32\mgabg.exe
C:\Programme\Microsoft LifeCam\MSCamS32.exe
E:\Programme\xampp\mysql\bin\mysqld-nt.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Synergy\synergys.exe
C:\Programme\VMware\VMware Workstation\vmware-authd.exe
C:\Programme\Gemeinsame Dateien\VMware\VMware Virtual Image Editing\vmount2.exe
E:\Programme\xampp\apache\bin\apache.exe
C:\WINDOWS\system32\vmnat.exe
C:\WINDOWS\system32\vmnetdhcp.exe
E:\Programme\Borland\InterBase\bin\ibserver.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\MSI\LAN Utility\DiagAP8169.exe
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
E:\Programme\TRIXX\TRIXX.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\PDesk\PDesk.exe
C:\Programme\Winamp\winampa.exe
C:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Programme\DIRC\DIRC.exe
C:\Programme\Gemeinsame Dateien\InterVideo\SchSvr\SchSvr.exe
C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\vVX3000.exe
C:\Programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programme\QuickTime\qttask.exe
C:\Programme\Logitech\Profiler\lwemon.exe
C:\Downloads\wtvirbridge-dirc-1.5.0.0\WTVIRBridge.exe
C:\Programme\Microsoft ActiveSync\wcescomm.exe
C:\Programme\NetSetMan\NetSetMan.exe
C:\Programme\LeechGet 2004\LeechGet.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Programme\Adobe\Acrobat 8.0\Acrobat\acrobat_sl.exe
C:\Programme\ATI Technologies\ATI.ACE\CLI.exe
C:\Programme\MSI\Core Center\CoreCenter.exe
C:\Programme\Allzeit Atomzeit\Atomzeit.exe
C:\Programme\Allzeit Zeitsignal\Zeitsignal.exe
C:\Programme\ATI Technologies\ATI.ACE\cli.exe
C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Dokumente und Einstellungen\Peter Buchegger\Desktop\comboscan.exe
C:\DOWNLO~1\HIJACK~1\Peter Buchegger.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.at/
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Programme\MegauploadToolbar\megauploadtoolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: WebSpeechBHO Class - {83A30C59-3A50-49E6-9DAF-4923C4EA3C23} - C:\Programme\Gemeinsame Dateien\WebSpeech.4.0\LgxIEBar.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Programme\Megaupload\Mega Manager\MegaIEMn.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Programme\MegauploadToolbar\megauploadtoolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [DiagAP8169] C:\Programme\MSI\LAN Utility\DiagAP8169 /hw
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [TRIXX] "E:\Programme\TRIXX\TRIXX.exe" -s
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ATICCC] "C:\Programme\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [Matrox Powerdesk] C:\WINDOWS\system32\PDesk\PDesk.exe /Autolaunch
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [DIRC] C:\Programme\DIRC\DIRC.exe
O4 - HKLM\..\Run: [WinDVR SchSvr] "C:\Programme\Gemeinsame Dateien\InterVideo\SchSvr\SchSvr.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Programme\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Programme\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\system32\mstask.exe
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Programme\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [WTVIRBridge] C:\Downloads\wtvirbridge-dirc-1.5.0.0\WTVIRBridge.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [NetSetMan] C:\Programme\NetSetMan\NetSetMan.exe -h
O4 - HKCU\..\Run: [LeechGet] "C:\Programme\LeechGet 2004\LeechGet.exe" -intray
O4 - Startup: Verknüpfung mit Atomzeit.lnk = C:\Programme\Allzeit Atomzeit\Atomzeit.exe
O4 - Startup: Verknüpfung mit Zeitsignal.lnk = C:\Programme\Allzeit Zeitsignal\Zeitsignal.exe
O4 - Global Startup: Adobe Acrobat - Schnellstart.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Programme\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Programme\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Programme\Gemeinsame Dateien\Autodesk Shared\acstart17.exe
O4 - Global Startup: CoreCenter.lnk = C:\Programme\MSI\Core Center\CoreCenter.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: An vorhandenes PDF anfügen - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Auswahl in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Auswahl in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: In Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Mit dem LeechGet Wizard laden - file://C:\Programme\LeechGet 2004\\Wizard.html
O8 - Extra context menu item: Mit LeechGet herunterladen - file://C:\Programme\LeechGet 2004\\AddUrl.html
O8 - Extra context menu item: Mit LeechGet parsen - file://C:\Programme\LeechGet 2004\\Parser.html
O8 - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Programme\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Programme\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Programme\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Programme\ieSpell\iespell.dll
O9 - Extra button: WebSpeech - {1CE4DE72-7FCC-4eb8-8F66-AE6A56A0A54D} - C:\Programme\Gemeinsame Dateien\WebSpeech.4.0\LgxIEBar.dll
O9 - Extra 'Tools' menuitem: Seite/Markierung vorlesen (WebSpeech) - {1CE4DE72-7FCC-4eb8-8F66-AE6A56A0A54D} - C:\Programme\Gemeinsame Dateien\WebSpeech.4.0\LgxIEBar.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1133627733656
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://195.243.185.195/activex/AxisCamControl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Services Client v.3.11) - http://gameadvisor.futuremark.com/global/msc311.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C47744EF-BF13-4BFD-ADDE-B9F13747A403}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apache2 - Unknown owner - E:\Programme\xampp\apache\bin\apache.exe" -k runservice (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - E:\Programme\xampp\FileZillaFTP\FileZillaServer.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InterBase Guardian (InterBaseGuardian) - Borland Software Corporation - E:\Programme\Borland\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - Borland Software Corporation - E:\Programme\Borland\InterBase\bin\ibserver.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: MGABGEXE - Matrox Graphics Inc. - C:\WINDOWS\system32\mgabg.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: mysql - Unknown owner - E:\Programme\xampp\mysql\bin\mysqld-nt.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
O23 - Service: Synergy Server - Unknown owner - C:\Programme\Synergy\synergys.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Programme\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Programme\Gemeinsame Dateien\VMware\VMware Virtual Image Editing\vmount2.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: wampapache - Unknown owner - E:\wamp\apache2\bin\Apache.exe" -k runservice (file missing)
O23 - Service: wampmysqld - Unknown owner - E:\wamp\mysql\bin\mysqld-nt.exe
O23 - Service: XAMPP Service (XAMPP) - Unknown owner - E:\Programme\xampp\service.exe


-- HijackThis Fixed Entries (C:\DOWNLO~1\HIJACK~1\backups\) ---------------------

backup-20061222-170411-779 O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
backup-20070306-205418-481 O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
backup-20070306-205418-646 O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
backup-20070306-205418-867 O4 - HKLM\..\Run: [exflashservice] "C:\Programme\EPOX\EFS\EZ_FLASH_SERVICE.exe" "5000"
backup-20070306-205828-868 O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe
backup-20070306-205838-844 O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe

-- File Associations ------------------------------------------------------------

.bat - batfile - "%1" %*
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com - comfile - "%1" %*
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
.pif - piffile - "%1" %*
.reg - regfile - regedit.exe "%1"
.scr - scrfile - "%1" /S
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ----------------------

2R ACEDRV05 - C:\WINDOWS\system32\drivers\ACEDRV05.sys
3R ALCXWDM (Service for Realtek AC97 Audio (WDM)) - C:\WINDOWS\system32\drivers\alcxwdm.sys
1R AmdK8 (AMD Athlon64 Processor Driver) - C:\WINDOWS\system32\drivers\AmdK8.sys
3R AnyDVD - C:\WINDOWS\system32\drivers\AnyDVD.sys
2R Aspi32 - C:\WINDOWS\system32\drivers\ASPI32.SYS
3R ati2mtag - C:\WINDOWS\system32\drivers\ati2mtag.sys
3R atinevxx (ATI WDM Rage Theater Video NSP) - C:\WINDOWS\system32\drivers\atinevxx.sys
3S atirage - C:\WINDOWS\system32\drivers\atiragem.sys
1R ATITool (ATITool Overclocking Utility) - C:\WINDOWS\system32\drivers\ATITool.sys
1R avgntdd - C:\WINDOWS\system32\drivers\avgntdd.sys
0R avgntmgr - C:\WINDOWS\system32\drivers\avgntmgr.sys
3S CCDECODE (Closed Caption Decoder) - C:\WINDOWS\system32\drivers\ccdecode.sys
0R d348bus - C:\WINDOWS\system32\drivers\d348bus.sys
0R d348prt - C:\WINDOWS\system32\drivers\d348prt.sys
3S DCamUSBEMPIA (Cinergy 200/250 USB Video Capture) - C:\WINDOWS\system32\drivers\emDevice.sys
2R DLPortIO (DriverLINX Port I/O Driver) - C:\WINDOWS\system32\drivers\DLPORTIO.sys
2S DS1410D - C:\WINDOWS\system32\drivers\ds1410d.sys (not found)
3R ElbyCDFL - C:\WINDOWS\system32\drivers\ElbyCDFL.sys
2R ElbyCDIO (ElbyCDIO Driver) - C:\WINDOWS\system32\drivers\ElbyCDIO.sys
3R ElbyDelay - C:\WINDOWS\system32\drivers\ElbyDelay.sys
3S ENTECH - C:\WINDOWS\system32\drivers\Entech.sys
3S FiltUSBEMPIA (Cinergy 200/250 USB Lower Filter) - C:\WINDOWS\system32\drivers\emFilter.sys
3R GEARAspiWDM - C:\WINDOWS\system32\drivers\GEARAspiWDM.sys
3S giveio - C:\WINDOWS\system32\drivers\Giveio.sys
3S GMSIPCI - K:\INSTALL\GMSIPCI.SYS (not found)
2R hcmon (VMware hcmon) - C:\WINDOWS\system32\drivers\hcmon.sys
3R hcw88rc5 (Hauppauge WinTV 88x IR Decoder) - C:\WINDOWS\system32\drivers\HCW88rc5.sys
3R HCW88TUNE (Hauppauge WinTV 88x Tuner) - C:\WINDOWS\system32\drivers\HCW88tun.sys
3R hcw88vid (Hauppauge WinTV 88x Video) - C:\WINDOWS\system32\drivers\HCW88vid.sys
3R HCW88XBAR (Hauppauge WinTV 88x Crossbar) - C:\WINDOWS\system32\drivers\HCW88bar.sys
3S hidgame (Microsoft HID-zu-Joystickanschlussaktivierung) - C:\WINDOWS\system32\drivers\hidgame.sys
3R hidusb (Microsoft HID Class-Treiber) - C:\WINDOWS\system32\drivers\hidusb.sys
1R kbdhid (Tastatur-HID-Treiber) - C:\WINDOWS\system32\drivers\kbdhid.sys
2R LANPkt (Realtek LANPkt Protocol) - C:\WINDOWS\system32\drivers\LANPkt.sys
3S mgau - C:\WINDOWS\system32\drivers\mgaum.sys
0R MMRTKRNL - C:\WINDOWS\system32\drivers\mmrtkrnl.sys
3R mouhid (Maus-HID-Treiber) - C:\WINDOWS\system32\drivers\mouhid.sys
3S MSTEE (Microsoft Streaming Tee/Sink-to-Sink Converter) - C:\WINDOWS\system32\drivers\mstee.sys
3R MVDCODEC (ATI WDM Specialized MVD Codec) - C:\WINDOWS\system32\drivers\atinmdxx.sys
3S NABTSFEC (NABTS/FEC VBI Codec) - C:\WINDOWS\system32\drivers\nabtsfec.sys
3S NdisIP (Microsoft TV/Video Connection) - C:\WINDOWS\system32\drivers\ndisip.sys
3S nm (Netzwerkmonitortreiber) - C:\WINDOWS\system32\drivers\nmnt.sys
3S NPF (NetGroup Packet Filter Driver) - C:\WINDOWS\system32\drivers\npf.sys
2R NwlnkIpx (NWLink IPX/SPX/NetBIOS-kompatibles Transportprotokoll) - C:\WINDOWS\system32\drivers\nwlnkipx.sys
2R NwlnkNb (NWLink-NetBIOS) - C:\WINDOWS\system32\drivers\nwlnknb.sys
2R NwlnkSpx (NWLink SPX/SPXII-Protokoll) - C:\WINDOWS\system32\drivers\nwlnkspx.sys
3R PCAlertDriver - C:\Programme\MSI\Core Center\NTGLM7X.SYS
3R pfc (Padus ASPI Shell) - C:\WINDOWS\system32\drivers\pfc.sys
3S pohci13F - C:\DOKUME~1\PETERB~1\LOKALE~1\Temp\pohci13F.sys (not found)
0R PxHelp20 - C:\WINDOWS\system32\drivers\pxhelp20.sys
3R RTL8023xp (Realtek RTL8139/810x/8169/8110 all in one NDIS XP Driver) - C:\WINDOWS\system32\drivers\Rtlnicxp.sys
3R RushTopDevice - C:\Programme\MSI\Core Center\RushTop.sys
3S s3m - C:\WINDOWS\system32\drivers\s3m.sys
3S ScanUSBEMPIA (Cinergy 200/250 USB Still Image) - C:\WINDOWS\system32\drivers\emScan.sys
2R Sentinel - C:\WINDOWS\system32\drivers\SENTINEL.SYS
0R sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - C:\WINDOWS\system32\drivers\sfdrv01.sys
0R sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfhlp02.sys
0R sfsync02 (StarForce Protection Synchronization Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfsync02.sys
0R sfsync04 (StarForce Protection Synchronization Driver (version 4.x)) - C:\WINDOWS\system32\drivers\sfsync04.sys
3S SLIP (BDA Slip De-Framer) - C:\WINDOWS\system32\drivers\slip.sys
3S Sntnlusb (Rainbow USB SuperPro) - C:\WINDOWS\system32\drivers\SNTNLUSB.SYS
0R srescan - C:\WINDOWS\system32\ZoneLabs\srescan.sys
3S streamip (BDA IPSink) - C:\WINDOWS\system32\drivers\streamip.sys
1R TRIXX - E:\Programme\TRIXX\TRIXXDriver.sys
3S USB11LDR (USB Midi 1x1 Loader) - C:\WINDOWS\system32\drivers\usb11ldr.sys
3R usbaudio (USB Audio Driver (WDM)) - C:\WINDOWS\system32\drivers\USBAUDIO.sys
3R usbccgp (Microsoft Standard-USB-Haupttreiber) - C:\WINDOWS\system32\drivers\usbccgp.sys
3R usbehci (Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller) - C:\WINDOWS\system32\drivers\usbehci.sys
3S USBMN1X1 (USB Midi 1x1) - C:\WINDOWS\system32\drivers\usbmn1x1.sys
3R usbstor (USB-Massenspeichertreiber) - C:\WINDOWS\system32\drivers\usbstor.sys
3S usb_rndisx (USB RNDIS Adapter) - C:\WINDOWS\system32\drivers\usb8023x.sys
0R viaagp1 (VIA AGP Filter) - C:\WINDOWS\system32\drivers\VIAAGP1.SYS
0R viamraid - C:\WINDOWS\system32\drivers\viamraid.sys
1R vmm (Virtual Machine Monitor) - C:\WINDOWS\system32\drivers\VMM.sys
3S VMnetAdapter (VMware Virtual Ethernet Adapter Driver) - C:\WINDOWS\system32\drivers\vmnetadapter.sys
2R VMnetBridge (VMware Bridge Protocol) - C:\WINDOWS\system32\drivers\vmnetbridge.sys
2R VMnetuserif (VMware Network Application Interface) - C:\WINDOWS\system32\drivers\vmnetuserif.sys
2R VMparport (VMware VMparport) - C:\WINDOWS\system32\drivers\vmparport.sys
2R vmx86 (VMware vmx86) - C:\WINDOWS\system32\drivers\vmx86.sys
3R VPCNetS2 (Virtual Machine Network Services Driver) - C:\WINDOWS\system32\drivers\VMNetSrv.sys
1R vsdatant - C:\WINDOWS\system32\vsdatant.sys
2R vstor2 (Vstor2 Virtual Storage Driver) - C:\Programme\Gemeinsame Dateien\VMware\VMware Virtual Image Editing\vstor2.sys
3R VX3000 (VX-3000) - C:\WINDOWS\system32\drivers\VX3000.sys
3R WmBEnum (Logitech Virtual Bus Enumerator Driver) - C:\WINDOWS\system32\drivers\WmBEnum.sys
3R WmFilter (Logitech WingMan HID Filter Driver) - C:\WINDOWS\system32\drivers\WmFilter.sys
3R WmVirHid (Logitech Virtual Hid Device Driver) - C:\WINDOWS\system32\drivers\WmVirHid.sys
3R WmXlCore (Logitech WingMan Translation Layer Driver) - C:\WINDOWS\system32\drivers\WmXlCore.sys
3S WSTCODEC (World Standard Teletext Codec) - C:\WINDOWS\system32\drivers\wstcodec.sys
0R xmasbus - C:\WINDOWS\system32\drivers\xmasbus.sys
0R xmasscsi - C:\WINDOWS\system32\drivers\xmasscsi.sys
0R xsecbus - C:\WINDOWS\system32\drivers\xsecbus.sys
0R xsecscsi - C:\WINDOWS\system32\drivers\xsecscsi.sys
3R Diag69xp - C:\WINDOWS\system32\drivers\diag69xp.sys


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

2R AntiVirScheduler (AntiVir Scheduler) - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
2R AntiVirService (AntiVir PersonalEdition Classic Service) - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
2R Apache2 - "E:\Programme\xampp\apache\bin\apache.exe" -k runservice
3S aspnet_state (ASP.NET-Zustandsdienst) - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
2R Ati HotKey Poller - C:\WINDOWS\System32\Ati2evxx.exe
2S ATI Smart - C:\WINDOWS\system32\ati2sgag.exe
2R Autodesk Licensing Service - "C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe"
3S clr_optimization_v2.0.50727_32 (.NET Runtime Optimization Service v2.0.50727_X86) - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
2R FileZilla Server (FileZilla Server FTP server) - E:\Programme\xampp\FileZillaFTP\FileZillaServer.exe
3R FLEXnet Licensing Service - "C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe"
3S IDriverT (InstallDriver Table Manager) - "C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe"
2R InterBaseGuardian (InterBase Guardian) - E:\Programme\Borland\InterBase\bin\ibguard.exe
3R InterBaseServer (InterBase Server) - E:\Programme\Borland\InterBase\bin\ibserver.exe
3S iPodService - C:\Programme\iPod\bin\iPodService.exe
2R MGABGEXE - C:\WINDOWS\system32\mgabg.exe
2R MSCamSvc - "C:\Programme\Microsoft LifeCam\MSCamS32.exe"
2R MSSQL$SQLEXPRESS (SQL Server (SQLEXPRESS)) - "C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS
4S MSSQLServerADHelper (Hilfsdienst von SQL Server für Active Directory) - "C:\Programme\Microsoft SQL Server\90\Shared\sqladhlp90.exe"
4S msvsmon80 (Visual Studio 2005 Remote Debugger) - "E:\Programme\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe" /service msvsmon80
2R mysql - E:\Programme\xampp\mysql\bin\mysqld-nt.exe --defaults-file=E:\Programme\xampp\mysql\bin\my.cnf mysql
3S ose (Office Source Engine) - "C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE"
3S rpcapd (Remote Packet Capture Protocol v.0 (experimental)) - "C:\Programme\WinPcap\rpcapd.exe" -d -f "C:\Programme\WinPcap\rpcapd.ini"
2S sfrem01 (SF FrontLine Drivers Auto Removal (v1)) - C:\WINDOWS\system32\sfrem01.exe svc
4S SQLBrowser (SQL Server-Browser) - "C:\Programme\Microsoft SQL Server\90\Shared\sqlbrowser.exe"
3S SQLWriter (SQL Server VSS Writer) - "C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe"
2R Synergy Server - C:\Programme\Synergy\synergys.exe
3S usnjsvc (Messenger USN Journal Reader-Service für freigegebene Ordner) - "C:\Programme\MSN Messenger\usnsvc.exe"
3S usprserv (User Privilege Service) - C:\WINDOWS\System32\svchost.exe -k netsvcs
2R VMAuthdService (VMware Authorization Service) - C:\Programme\VMware\VMware Workstation\vmware-authd.exe
2R VMnetDHCP (VMware DHCP Service) - C:\WINDOWS\system32\vmnetdhcp.exe
2R vmount2 (VMware Virtual Mount Manager Extended) - "C:\Programme\Gemeinsame Dateien\VMware\VMware Virtual Image Editing\vmount2.exe"
2R VMware NAT Service - C:\WINDOWS\system32\vmnat.exe
2R vsmon (TrueVector Internet Monitor) - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service
3S wampapache - "E:\wamp\apache2\bin\Apache.exe" -k runservice
3S wampmysqld - E:\wamp\mysql\bin\mysqld-nt.exe --defaults-file=E:\wamp\mysql\my.ini wampmysqld
3S WMConnectCDS (Windows Media Connect-Dienst) - C:\Programme\Windows Media Connect 2\wmccds.exe
2S XAMPP (XAMPP Service) - E:\Programme\xampp\service.exe


-- Files created between 2007-02-06 and 2007-03-06 ------------------------------

2007-02-23 00:30:26 0 d-------- C:\Programme\Gemeinsame Dateien\Skype
2007-02-19 10:47:04 0 d-------- C:\Programme\FSAcars
2007-02-18 18:22:27 0 d-------- C:\Programme\Kayako
2007-02-15 22:28:22 135661 --a------ C:\WINDOWS\system32\drivers\dump_wmimmc.sys<DUMP_W~1.SYS>
2007-02-15 22:28:11 4682 --a------ C:\WINDOWS\system32\npptNT2.sys
2007-02-15 22:17:39 0 d-------- C:\Programme\GpotatoEu<GPOTAT~1>
2007-02-07 00:11:11 0 d-------- C:\Programme\LeechGet 2004<LEECHG~2>


-- Find3M Report ----------------------------------------------------------------

2007-03-06 20:50:43 0 d-------- C:\Programme\Winamp
2007-03-05 23:24:57 0 d-------- C:\Dokumente und Einstellungen\Peter Buchegger\Anwendungsdaten\Skype
2007-03-05 22:43:35 0 d-------- C:\Dokumente und Einstellungen\Peter Buchegger\Anwendungsdaten\MegauploadToolbar<MEGAUP~1>
2007-03-05 20:57:03 0 d-------- C:\Programme\Climate Change Experiment<CLIMAT~1>
2007-03-05 20:43:18 0 d-------- C:\Dokumente und Einstellungen\Peter Buchegger\Anwendungsdaten\Xfire
2007-03-05 20:42:25 0 d---s---- C:\Programme\Xfire
2007-03-04 00:37:22 0 d-------- C:\Dokumente und Einstellungen\Peter Buchegger\Anwendungsdaten\uTorrent
2007-03-04 00:31:10 0 d-------- C:\Dokumente und Einstellungen\Peter Buchegger\Anwendungsdaten\LimeWire
2007-02-26 21:09:24 0 d-------- C:\Programme\Java
2007-02-23 00:30:26 0 d-------- C:\Programme\Skype
2007-02-23 00:30:26 0 d-------- C:\Programme\Gemeinsame Dateien<GEMEIN~1>
2007-02-21 22:52:10 0 d---s---- C:\Dokumente und Einstellungen\Peter Buchegger\Anwendungsdaten\Microsoft<MICROS~1>
2007-02-21 21:12:56 0 d-------- C:\Programme\AntiVir PersonalEdition Classic<ANTIVI~1>
2007-02-18 18:23:09 0 d-------- C:\Programme\Gemeinsame Dateien\Microsoft Shared<MICROS~1>
2007-02-11 14:47:44 0 d-------- C:\Programme\MSN Messenger<MSNMES~1>
2007-02-07 20:18:41 0 d-------- C:\Programme\LeechGet 2006<LEECHG~1>
2007-02-04 13:30:06 0 d--h----- C:\Programme\InstallShield Installation Information<INSTAL~1>
2007-02-03 20:59:32 0 d-------- C:\Dokumente und Einstellungen\Peter Buchegger\Anwendungsdaten\dvdcss
2007-02-02 23:49:33 0 d-------- C:\Programme\Rs232_IOtest<RS232_~1>
2007-02-02 23:49:27 290816 -----n--- C:\WINDOWS\Setup1.exe
2007-02-02 23:48:04 0 d-------- C:\Programme\rs232
2007-01-29 19:02:45 0 d-------- C:\Programme\PonyProg2000<PONYPR~1>
2007-01-28 15:18:04 0 d-------- C:\Programme\Network File Monitor Light<NETWOR~1>
2007-01-27 19:41:43 0 d-------- C:\Programme\Advanced Voice Client<ADVANC~2>
2007-01-27 19:41:27 0 d-------- C:\Programme\Advanced Control Center<ADVANC~1>
2007-01-27 17:20:57 0 d-------- C:\Dokumente und Einstellungen\Peter Buchegger\Anwendungsdaten\Autodesk
2007-01-27 17:16:38 0 d-------- C:\Programme\Gemeinsame Dateien\Autodesk Shared<AUTODE~1>
2007-01-27 17:16:37 0 d-------- C:\Programme\AnswerWorks 4.0<ANSWER~1.0>
2007-01-27 17:16:28 0 d-------- C:\Programme\Gemeinsame Dateien\Designer
2007-01-27 17:11:30 0 d-------- C:\Programme\Autodesk
2007-01-25 22:32:46 74752 -----n--- C:\WINDOWS\ST6UNST.EXE
2007-01-24 20:42:36 0 d-------- C:\Programme\Microsoft SQL Server<MI6841~1>
2007-01-24 20:41:54 479986 --a------ C:\WINDOWS\system32\perfh007.dat
2007-01-24 20:41:54 101272 --a------ C:\WINDOWS\system32\perfc007.dat
2007-01-24 20:39:24 0 d-------- C:\Programme\Microsoft.NET<MICROS~1.NET>
2007-01-24 20:36:01 0 d-------- C:\Programme\Microsoft Device Emulator<MI9C2B~1>
2007-01-24 20:35:45 0 d-------- C:\Programme\Microsoft SQL Server 2005 Mobile Edition<MI40D9~1>
2007-01-24 20:26:50 0 d-------- C:\Programme\MSBuild
2007-01-24 20:26:34 0 d-------- C:\Programme\HTML Help Workshop<HTMLHE~1>
2007-01-24 20:25:46 0 d-------- C:\Programme\Gemeinsame Dateien\Merge Modules<MERGEM~1>
2007-01-24 20:18:52 0 d-------- C:\Programme\Gemeinsame Dateien\Business Objects<BUSINE~1>
2007-01-24 20:16:58 0 d-------- C:\Programme\CE Remote Tools<CEREMO~1>
2007-01-24 20:14:06 0 d-------- C:\Programme\Microsoft Visual Studio 8<MID05A~1>
2007-01-24 20:07:01 0 d-------- C:\Programme\RailSys-3.1.20<RAILSY~1.20>
2007-01-24 19:57:11 0 d-------- C:\Programme\Microsoft Games<MICROS~3>
2007-01-23 22:33:38 0 d-------- C:\Programme\EAGLE-4.15
2007-01-21 20:09:39 0 d-------- C:\Programme\VisionGS PE<VISION~1>
2007-01-21 18:20:57 0 d-------- C:\Programme\WinSCP3
2007-01-19 12:53:04 51056 --a------ C:\WINDOWS\system32\sirenacm.dll
2007-01-18 00:10:27 0 d-------- C:\Programme\Gemeinsame Dateien\Bcgsoft
2007-01-18 00:09:12 0 d-------- C:\Programme\Electronics Workbench<ELECTR~1>
2007-01-15 00:04:29 3005632 --a------ C:\vcsetup.exe
2007-01-14 05:40:16 0 d-------- C:\Programme\Realtek AC97<REALTE~1>
2007-01-13 20:19:07 0 d-------- C:\Dokumente und Einstellungen\Peter Buchegger\Anwendungsdaten\Opera
2007-01-13 20:18:57 0 d-------- C:\Programme\Opera
2007-01-13 11:16:09 0 d-------- C:\Programme\Citrix
2007-01-04 13:42:50 163840 --a------ C:\WINDOWS\LgxSetup.exe
2006-12-29 23:38:57 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll<CMDLIN~1.DLL>
2006-12-29 11:22:32 1864 --a------ C:\WINDOWS\system32\d3d8caps.dat
2006-12-27 01:18:14 14692992 --a------ C:\AdbeRdr20_ppc_deu.exe<ADBERD~1.EXE>
2006-12-26 23:30:16 2508 --a------ C:\Dokumente und Einstellungen\Peter Buchegger\Anwendungsdaten\$_hpcst$.hpc
2006-12-25 00:47:18 21840 --a----ct C:\WINDOWS\system32\SIntfNT.dll
2006-12-25 00:47:18 17212 --a----ct C:\WINDOWS\system32\SIntf32.dll
2006-12-25 00:47:18 12067 --a----ct C:\WINDOWS\system32\SIntf16.dll
2006-12-23 23:30:51 12288 --a------ C:\WINDOWS\impborl.dll
2006-12-08 15:20:14 10528768 --a------ C:\WINDOWS\system32\RTLCPL.exe


-- Registry Dump ----------------------------------------------------------------


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"appinit_dlls"="wbsys.dll"


[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]

HKLM\software\Microsoft\Windows NT\CurrentVersion\Svchost *netsvcs*
\0=



-- End of ComboScan: finished at 2007-03-06 at 22:15:19 -------------------------

system32.txt:

Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 78E1-0644

Verzeichnis von C:\WINDOWS\system32

06.03.2007 21:49 54.107 vsconfig.xml
04.03.2007 22:29 13.646 wpa.dbl
26.02.2007 21:09 9.857 jupdate-1.5.0_11-b03.log
04.02.2007 20:05 290.088 FNTCACHE.DAT
24.01.2007 20:41 82.446 perfc009.dat
24.01.2007 20:41 453.766 perfh009.dat
24.01.2007 20:41 479.986 perfh007.dat
24.01.2007 20:41 101.272 perfc007.dat
24.01.2007 20:41 986.704 PerfStringBackup.INI
19.01.2007 12:53 51.056 sirenacm.dll


systemtemp.txt:

Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 78E1-0644

Verzeichnis von C:\DOKUME~1\PETERB~1\LOKALE~1\Temp

06.03.2007 22:10 16.384 ~DF386A.tmp
06.03.2007 22:10 16.384 ~DFDFB5.tmp
06.03.2007 22:09 16.384 Perflib_Perfdata_360.dat
06.03.2007 22:09 16.384 Perflib_Perfdata_162c.dat
06.03.2007 22:09 16.384 Perflib_Perfdata_1738.dat
06.03.2007 22:09 923.619 WCESLog.log
6 Datei(en) 1.005.539 Bytes
0 Verzeichnis(se), 10.281.693.184 Bytes frei

system.txt:

Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 78E1-0644

Verzeichnis von C:\WINDOWS

06.03.2007 21:48 1.001.150 setupapi.log
06.03.2007 21:46 0 0.log
06.03.2007 21:45 1.627.847 WindowsUpdate.log
06.03.2007 21:45 159 wiadebug.log
06.03.2007 21:44 50 wiaservc.log
06.03.2007 21:43 2.048 bootstat.dat
06.03.2007 21:41 32.544 SchedLgU.Txt
05.03.2007 23:01 54.156 QTFont.qfn
04.03.2007 15:01 856 wincmd.ini
04.03.2007 14:57 1.657 wcx_ftp.ini
25.02.2007 23:14 116 NeroDigital.ini
11.02.2007 14:47 18.436 DPINST.LOG
07.02.2007 06:21 657 onlineeye.INI
04.02.2007 21:41 1.669 vtplus32.ini
03.02.2007 13:56 1.409 QTFont.for
03.02.2007 13:47 82.491 wmsetup.log
02.02.2007 23:49 290.816 Setup1.exe
28.01.2007 15:20 1.847 Network File Monitor Light.ini
27.01.2007 17:11 395.675 DirectX.log
25.01.2007 22:32 74.752 ST6UNST.EXE
24.01.2007 20:30 544 ODBC.INI
04.01.2007 14:56 191.256 setupact.log
04.01.2007 13:42 163.840 LgxSetup.exe
02.01.2007 15:42 1.498 DXError.log
01.01.2007 16:46 190 Mapedit.ini
01.01.2007 16:16 178 mapedit2.ini
01.01.2007 16:06 12 mpdt294


tmp.txt:

Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 78E1-0644

Verzeichnis von C:\WINDOWS\Temp

06.03.2007 21:47 256 ZLT054dd.TMP
06.03.2007 21:47 256 ZLT0549f.TMP
06.03.2007 21:45 85 vmware-vmount.log
06.03.2007 21:45 16.384 Perflib_Perfdata_16c.dat
4 Datei(en) 16.981 Bytes
0 Verzeichnis(se), 10.282.668.032 Bytes frei


down:

Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 78E1-0644

Verzeichnis von C:\WINDOWS\Downloaded Program Files

09.11.2006 14:36 5.019 swflash.inf
20.04.2006 10:33 2.287 MSC3.inf
03.12.2005 10:40 65 desktop.ini
10.11.2005 14:05 876 jinstall-1_5_0_06.inf
03.11.2005 20:24 495 LegitCheckControl.inf
30.06.2005 15:19 227 MsnMessengerSetupDownloader.inf
26.05.2005 04:19 293 muweb.inf
15.11.2001 17:42 325 AxisCamControl.inf
8 Datei(en) 9.587 Bytes
0 Verzeichnis(se), 10.282.668.032 Bytes frei



sys.txt:

Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 78E1-0644

Verzeichnis von C:\

06.03.2007 22:21 0 sys.txt
06.03.2007 22:21 13.392 system.txt
06.03.2007 22:20 581 systemtemp.txt
06.03.2007 22:20 107.440 system32.txt
06.03.2007 21:43 1.073.270.784 hiberfil.sys
06.03.2007 21:43 1.610.612.736 pagefile.sys
04.03.2007 22:03 457.771 rlst.log
04.03.2007 21:53 1.058.745 rlst.log.1
04.03.2007 21:28 1.059.207 rlst.log.2
04.03.2007 21:04 1.058.898 rlst.log.3
04.03.2007 20:46 1.058.747 rlst.log.4
04.03.2007 20:28 1.059.414 rlst.log.5
04.03.2007 20:06 1.059.321 rlst.log.6
04.03.2007 19:44 1.058.920 rlst.log.7
04.03.2007 16:25 0 FileOut.Cns
04.03.2007 16:25 0 FileIn.Cns
07.02.2007 21:41 163.021 steku_ooe_2007.pdf
15.01.2007 20:21 8.358.465 eagle-win-ger-4.16r2.zip
15.01.2007 20:14 11.420.672 eagle-win-ger-4.16r2.exe
15.01.2007 00:04 3.005.632 vcsetup.exe
14.01.2007 23:19 3.610.009 FSUIPC_SDK.zip
05.01.2007 13:07 230.424 img2-001.raw

Lg Peterus

#2 peterus

dieser Rechner ist vollgeknall mit :

a) sinnlosen Proggies (Windowsblind,Allzeit Atomzeit,LeechGet,Network File Monitor,C:\Programme\Megaupload)
b) proggies, mit denen man Zugang zu deinem Rechner bekommt. (Virtual Machine Monitor)
c) P2P-Software

aus all dem nun den Fehler zu finden (von hier aus... ) ist mir nicht moeglich.
__________
MfG Sabina

rund um die PC-Sicherheit

#3 Hallo,

stimmt hast recht,

werde mal alles mögliche deinstallieren was ich nur so finden kann.
dann ist mir noch aufgefallen das ich das ATI Panel (oder Tool, oder was das auch immer ist) gleich 3 mal in hintergrund laufen hat.
Werde einfach mal den Treiber deinstallieren und neu installieren in der aktuellen Version. Da das auch vielleicht (komischerweiße) mit der Grafikkarte zusammenhängt.

Mein PC ist einfach komisch...

Naja wenn du nichts dagegen hast kopier ich dann nachher nochmal alle Logs rein.

Lg Peterus