Mein Pc wird immer langsamer

09.01.2011, 06:38

Hallo
Ich habe verdacht auf einen Virus
Denn die letzten Tage , dauert das booten länger als sonst
Und auch so kommt mir mein Pc komisch vor
Ich hoffe mein Pc ist clean

hier mein hijackthis

Zitat:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 07:33:27, on 09.01.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\WINDOWS.0\system32\spoolsv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\srvany.exe
C:\WINDOWS.0\KMService.exe
C:\Programme\Nero\Update\NASvc.exe
C:\WINDOWS.0\system32\PnkBstrA.exe
C:\Programme\Avira\AntiVir Desktop\avshadow.exe
D:\Programme\MyPrivatfolder\PrfldSvc.exe
C:\WINDOWS.0\System32\vssvc.exe
C:\Programme\Verbindungsassistent\wtgservice.exe
C:\WINDOWS.0\system32\wscntfy.exe
C:\WINDOWS.0\Explorer.EXE
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS.0\RTHDCPL.EXE
C:\WINDOWS.0\system32\ctfmon.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Programme\Mozilla Firefox\plugin-container.exe
C:\WINDOWS.0\System32\svchost.exe
C:\Programme\trend micro\hijackthis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MI1933~1\Office14\GROOVEEX.DLL
O2 - BHO: MessengerPlusLive Germany TB Toolbar - {76aeea42-e04a-4b62-83ab-df4b2be2541e} - C:\Programme\MessengerPlusLive_Germany_TB\tbMes1.d ll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MI1933~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugi n.dll
O3 - Toolbar: FireShot - {6E6E744E-4D20-4ce3-9A7A-26DFFFE22F68} - (no file)
O3 - Toolbar: (no name) - {120A8821-2BEE-4C29-BCDA-62C577781992} - (no file)
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Programme\ATI\ATICustomerCare\ATICustomerCare. exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS.0\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "D:\Programme\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS.0\System32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS.0\System32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS.0\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS.0\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Programme\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MI1933~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\michele\Anwendungsdaten\DVDVideoSoft IEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~1\MI1933~1\Office14\EXCEL.EXE/3000
O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\WINDOWS.0\System32\shdocvw.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe
O9 - Extra button: (no name) - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\WINDOWS.0\System32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\WINDOWS.0\System32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS.0\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS.0\System32\browseui.dll
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS.0\system32\Ati2evxx.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Futuremark SystemInfo Service - Futuremark Corporation - C:\Programme\Gemeinsame Dateien\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Unknown owner - (no file)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: KMService - Unknown owner - C:\WINDOWS.0\system32\srvany.exe
O23 - Service: @C:\Programme\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Programme\Nero\Update\NASvc.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS.0\system32\GameMon.des.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS.0\system32\PnkBstrA.exe
O23 - Service: Private Folder Service (prfldsvc) - Unknown owner - D:\Programme\MyPrivatfolder\PrfldSvc.exe
O23 - Service: WTGService - Unknown owner - C:\Programme\Verbindungsassistent\wtgservice.exe

--
End of file - 7365 bytes

**Leonixx** · 09.01.2011, 08:35

Das hier abarbeiten.

http://www.modernboard.de/viren-wuer...-beachten.html

Logfiles posten.

D5B · 09.01.2011, 14:34

ich würde den pc mal mit einem rettungssystem wie Avira Rescue System auf viren überprüfen.

09.01.2011, 20:22

Ist gebongt Leo

**Leonixx** · 10.01.2011, 17:02

Kann es sein das du Windows mal drüberinstalliert hast?

Zitat:

MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Veraltet, mindestens auf IE 7 Updaten.

Checken bei Virustotal. Ergebnis posten.

C:\WINDOWS.0\System32\shdocvw.dll

Was ist das?
D:\Spiele\RBS\Lockdown.exe

Bei der Anzahl von Programmen und Games wundert es mich nicht das dein System immer langsamer wird, wenn jedes Programm sich Arbeitsspeicher reserviert, bleibt für den Rest wenig übrig.

Logfile von Malwarebytes fehlt noch.

10.01.2011, 17:53

D:\Spiele\RBS\Lockdown.exe ist Rainbow six lockdown
IE benutze ich gar net , trotzdem updaten?
Und wieso so viele Spiele?
Ich starte sie doch nicht auf einmal
somit Fressen sie nur Festplatten speicher und kein RAM oder?

C:\WINDOWS.0\System32\shdocvw.dll

Zitat:

Antivirus Version Last Update Result
AhnLab-V3 2011.01.10.00 2011.01.09 -
AntiVir 7.11.1.80 2011.01.10 -
Antiy-AVL 2.0.3.7 2011.01.10 -
Avast 4.8.1351.0 2011.01.10 -
Avast5 5.0.677.0 2011.01.10 -
AVG 9.0.0.851 2011.01.10 -
BitDefender 7.2 2011.01.10 -
CAT-QuickHeal 11.00 2011.01.10 -
ClamAV 0.96.4.0 2011.01.10 -
Command 5.2.11.5 2011.01.10 -
Comodo 7353 2011.01.10 -
DrWeb 5.0.2.03300 2011.01.10 -
eSafe 7.0.17.0 2011.01.10 -
eTrust-Vet 36.1.8090 2011.01.10 -
F-Prot 4.6.2.117 2011.01.09 -
F-Secure 9.0.16160.0 2011.01.10 -
Fortinet 4.2.254.0 2011.01.10 -
GData 21 2011.01.10 -
Ikarus T3.1.1.90.0 2011.01.10 -
Jiangmin 13.0.900 2011.01.10 -
K7AntiVirus 9.75.3497 2011.01.10 -
McAfee 5.400.0.1158 2011.01.10 -
McAfee-GW-Edition 2010.1C 2011.01.10 -
Microsoft 1.6402 2011.01.10 -
NOD32 5774 2011.01.10 -
Norman 6.06.12 2011.01.10 -
nProtect 2011-01-10.01 2011.01.10 -
Panda 10.0.2.7 2011.01.10 -
PCTools 7.0.3.5 2011.01.10 -
Prevx 3.0 2011.01.10 -
Rising 22.82.00.03 2011.01.10 -
Sophos 4.61.0 2011.01.10 -
SUPERAntiSpyware 4.40.0.1006 2011.01.10 -
Symantec 20101.3.0.103 2011.01.10 -
TheHacker 6.7.0.1.112 2011.01.09 -
TrendMicro 9.120.0.1004 2011.01.10 -
TrendMicro-HouseCall 9.120.0.1004 2011.01.10 -
VBA32 3.12.14.2 2011.01.06 -
VIPRE 8019 2011.01.10 -
ViRobot 2011.1.10.4246 2011.01.10 -
VirusBuster 13.6.138.1 2011.01.10 -
Additional information
Show all
MD5 : a02681032ce613801fa70dfc34611c87
SHA1 : bdd57132fc87698e8d76f1a20d3c0ff717122c90
SHA256: 00cc8547cc24482594ffe34aa68aeed74a03ab4b44abcb8430 f9017df11636d9
ssdeep: 24576:n9RlwkwKBXonhd/PZO9lbeYh7pfF877KTs5ATGt:n9pwKBA9ZueAVfF67KTsGGt
File size : 1510400 bytes
First seen: 2010-12-26 21:57:21
Last seen : 2011-01-10 17:37:01
TrID:
DirectShow filter (43.1%)
Windows OCX File (26.4%)
InstallShield setup (9.2%)
Win32 EXE PECompact compressed (generic) (8.8%)
Win32 Executable MS Visual C++ (generic) (8.0%)
sigcheck:
publisher....: Microsoft Corporation
copyright....: (c) Microsoft Corporation. Alle Rechte vorbehalten.
product......: Betriebssystem Microsoft_ Windows_
description..: Bibliothek f_r Shell-Dokumente und -Steuerelemente
original name: SHDOCVW.DLL
internal name: SHDOCVW.DLL
file version.: 6.00.2900.6049 (xpsp_sp3_gdr.101103-1638)
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x16184
timedatestamp....: 0x4CD39053 (Fri Nov 05 05:04:19 2010)
machinetype......: 0x14c (I386)

[[ 4 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x1000, 0xDAF64, 0xDB000, 6.50, f10c29e2e7be7fc4afb6007e5cb1454f
.data, 0xDC000, 0x1C60, 0x1600, 3.25, 615dfc42b443002049844a1fdfd5dd8d
.rsrc, 0xDE000, 0x88BE4, 0x88C00, 5.34, ee172020599eef2f8afc74c42ec0a87c
.reloc, 0x167000, 0xB530, 0xB600, 6.72, 4e664bee35a207707a33529dae3c428d

[[ 10 import(s) ]]
ADVAPI32.dll: RegCloseKey, RegOpenKeyExA, RegQueryValueExA, RegSetValueExA, RegCreateKeyExA, RegDeleteKeyA, IsValidSid, CopySid, GetLengthSid, GetTokenInformation, OpenProcessToken, EqualSid, RegOpenKeyExW, RegQueryValueExW, RegEnumValueA
CRYPT32.dll: CryptQueryObject, CryptMsgGetParam, CertCloseStore, CryptMsgClose
CRYPTUI.dll: CryptUIDlgViewSignerInfoW
GDI32.dll: SetViewportOrgEx, SetWindowOrgEx, SetMapMode, SaveDC, LPtoDP, GetDeviceCaps, CreateRectRgnIndirect, DeleteMetaFile, CloseMetaFile, SetWindowExtEx, SetPaletteEntries, GetPaletteEntries, RealizePalette, SelectPalette, GetStockObject, CreatePalette, SetBkColor, SetBkMode, DeleteDC, SetTextColor, SelectObject, GetTextExtentPointW, IntersectClipRect, CreateDCA, CloseEnhMetaFile, CreateEnhMetaFileA, LineTo, MoveToEx, Rectangle, StretchBlt, CreateCompatibleDC, BitBlt, GetTextCharset, CreateCompatibleBitmap, GetTextExtentPoint32W, DeleteObject, RestoreDC
KERNEL32.dll: SetCurrentDirectoryA, SetFilePointer, ReadFile, GetFileSize, WriteFile, FindClose, WaitForSingleObject, SetEvent, CreateFileA, ReleaseMutex, LocalFileTimeToFileTime, SystemTimeToFileTime, GetTempPathA, SetDllDirectoryW, ExitProcess, GetCommandLineW, OpenMutexW, TlsGetValue, GetSystemTime, InterlockedCompareExchange, InterlockedExchange, GetCurrentProcessId, GlobalFlags, GlobalSize, GlobalReAlloc, TlsSetValue, GetLocalTime, FileTimeToSystemTime, OpenMutexA, ReleaseSemaphore, UnhandledExceptionFilter, SetErrorMode, GetCurrentDirectoryA, GetShortPathNameA, ResetEvent, HeapFree, DeleteCriticalSection, TerminateThread, GetExitCodeThread, CreateDirectoryA, ResumeThread, VirtualQuery, VirtualProtect, VirtualAlloc, GetThreadContext, SetThreadContext, SuspendThread, GetCurrentThread, LoadLibraryA, QueryPerformanceCounter, TerminateProcess, SetUnhandledExceptionFilter, FileTimeToLocalFileTime, HeapAlloc, GetLocaleInfoW, OpenProcess, LoadLibraryW, DosDateTimeToFileTime, GetModuleHandleW, CreateEventA, VirtualFree, lstrcpynW, InitializeCriticalSectionAndSpinCount, IsDBCSLeadByte, GetSystemTimeAsFileTime, FreeLibrary, InterlockedDecrement, InterlockedIncrement, lstrcmpiA, GetModuleHandleA, GetProcAddress, LocalFree, LocalAlloc, CompareFileTime, CreateThread, GetSystemDefaultLCID, GetSystemInfo, MultiByteToWideChar, GetVersionExA, lstrcmpA, GetSystemDirectoryA, LocalReAlloc, GetDriveTypeW, CreateMutexA, lstrlenA, Sleep, WideCharToMultiByte, lstrcpynA, GetUserDefaultLCID, GlobalFree, LocalSize, GetTickCount, GetLastError, LoadLibraryExA, SetLastError, GetCurrentThreadId, GetCurrentProcess, FlushInstructionCache, lstrlenW, GlobalAlloc, GlobalLock, GlobalUnlock, HeapDestroy, EnterCriticalSection, LeaveCriticalSection, MulDiv, DisableThreadLibraryCalls, InitializeCriticalSection, TlsAlloc, GetACP, CloseHandle, TlsFree, RaiseException, GetProcessHeap
msvcrt.dll: _onexit, __dllonexit, _adjust_fdiv, _initterm, _ftol, wcslen, free, _vsnprintf, _except_handler3, _wcsnicmp, wcsrchr, _ltow, memmove, malloc, realloc, _vsnwprintf
ole32.dll: CoRegisterClassObject, CoRevokeClassObject, CoCreateInstance, OleSetClipboard, PropVariantCopy, CoGetMalloc, CoInitializeEx, CoCreateGuid, GetHGlobalFromStream, StringFromCLSID, CoRegisterMessageFilter, StgOpenStorage, MkParseDisplayName, CoFileTimeNow, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, OleSave, OleInitialize, OleUninitialize, FreePropVariantArray, CoUnmarshalInterface, CoWaitForMultipleHandles, CoMarshalInterThreadInterfaceInStream, CoGetInterfaceAndReleaseStream, ProgIDFromCLSID, OleCreateFromData, OleRun, OleSetMenuDescriptor, OleDraw, CreateBindCtx, CoInitialize, CoUninitialize, CoCreateFreeThreadedMarshaler, StgCreateDocfile, GetRunningObjectTable, ReleaseStgMedium, CreateStreamOnHGlobal, CoAllowSetForegroundWindow, RevokeDragDrop, RegisterDragDrop, PropVariantClear, CoTaskMemFree, OleSaveToStream, WriteClassStm, OleLoadFromStream, CreateOleAdviseHolder, CreateDataAdviseHolder, CoTaskMemAlloc, OleRegGetMiscStatus, OleRegGetUserType, OleRegEnumVerbs, CoGetClassObject
OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -
SHLWAPI.dll: -, PathFileExistsW, -, -, -, -, SHRegGetUSValueW, StrCmpNIW, StrStrIW, StrDupW, -, SHQueryValueExW, -, -, -, -, -, -, -, -, -, -, -, PathQuoteSpacesW, -, PathCombineW, -, -, PathRemoveFileSpecW, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, StrCatBuffW, -, -, -, UrlCanonicalizeW, AssocQueryStringW, -, SHRegCloseUSKey, SHRegDeleteUSValueW, SHRegOpenUSKeyW, StrDupA, -, -, -, -, StrCmpW, StrCmpNW, -, -, -, -, PathUnquoteSpacesW, PathRemoveBlanksW, -, -, -, -, -, -, -, -, SHRegSetUSValueW, -, -, -, -, -, -, -, -, -, -, -, UrlGetPartW, StrStrW, StrChrIW, AssocGetPerceivedType, -, StrFormatByteSizeW, StrFromTimeIntervalW, -, -, -, -, -, -, UrlCanonicalizeA, -, AssocIsDangerous, AssocCreate, -, PathUndecorateW, -, -, PathParseIconLocationW, -, -, -, PathCompactPathW, -, -, PathIsRelativeW, -, -, -, -, PathRemoveExtensionW, -, -, -, PathCommonPrefixW, UrlIsW, StrTrimW, -, PathAddBackslashW, SHQueryValueExA, StrCatBuffA, StrStrIA, PathFindFileNameA, StrCmpNIA, SHSetValueA, wnsprintfA, SHGetValueA, -, SHDeleteOrphanKeyA, PathRemoveFileSpecA, SHDeleteKeyA, SHDeleteValueA, -, SHDeleteValueW, -, -, -, StrToIntExW, -, -, -, -, UrlCombineW, -, UrlGetLocationW, StrToIntW, -, -, PathIsURLW, -, -, -, UrlHashW, StrRChrW, StrChrIA, -, -, -, -, wvnsprintfA, -, -, -, -, -, -, -, wvnsprintfW, SHOpenRegStream2W, -, -, -, -, PathIsPrefixW, PathSearchAndQualifyW, -, -, -, PathRenameExtensionW, -, -, -, -, -, -, -, -, -, -, StrTrimA, -, -, -, PathCombineA, PathGetArgsW, -, -, -, -, -, SHRegDuplicateHKey, -, -, -, -, -, -, -, StrRetToBufW, -, PathIsNetworkPathW, -, StrPBrkW, -, SHCreateStreamOnFileW, PathCompactPathExW, -, -, -, -, -, -, SHSkipJunction, -, -, AssocQueryKeyW, PathIsContentTypeW, UrlEscapeW, -, PathCanonicalizeW, UrlCreateFromPathW, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, StrToIntExA, UrlUnescapeA, -, SHRegEnumUSValueW, UrlApplySchemeW, -, UrlIsNoHistoryW, StrCSpnW, StrSpnW, -, -, -, -, -, PathRemoveExtensionA, HashData, UrlUnescapeW, -, -, -, -, -, -, -, PathIsURLA, PathRemoveBackslashW, -, -, -, PathCreateFromUrlA, -, PathIsFileSpecW, PathIsDirectoryW, PathIsUNCW, SHAutoComplete, -, -, -, -, StrFormatKBSizeW, ChrCmpIW, -, -, SHRegGetValueW, -, StrRetToStrW, -, PathGetDriveNumberW, -, -, -, -, -, wnsprintfW, -, -, -, PathAppendW, -, -, -, PathFindExtensionW, PathFindFileNameW, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, -, SHCreateShellPalette, -, -, SHSetValueW, SHGetValueW, StrCmpIW, -, -, -, -, -, -, -, -, -, -, -, -, SHStrDupW, -, -, StrChrW, PathCreateFromUrlW, -, -, -, -, -, -, -, -, SHRegGetBoolUSValueW, -, StrCpyNW, -, -, -, -, -, -, -, SHDeleteKeyW, -, -, -, -, -, -, -, -, -, -, PathIsUNCServerShareW, PathStripToRootW, -, PathFindExtensionA, -
USER32.dll: GetMenuItemID, GetSubMenu, CheckDlgButton, CheckRadioButton, EnableWindow, GetDlgItem, GetDesktopWindow, RemoveMenu, GetMenuState, CreateMenu, MessageBeep, InflateRect, MoveWindow, PostQuitMessage, MapWindowPoints, GetDoubleClickTime, WaitMessage, GetAsyncKeyState, GetSystemMenu, CreatePopupMenu, SetParent, GetWindow, AdjustWindowRect, GetSysColor, GetNextDlgTabItem, CheckMenuRadioItem, EndDeferWindowPos, DeferWindowPos, BeginDeferWindowPos, MsgWaitForMultipleObjects, IsIconic, SetWindowPlacement, GetWindowPlacement, DdeCreateDataHandle, DdeDisconnect, DdeClientTransaction, DdeConnect, DdeFreeStringHandle, DdeUninitialize, DdeNameService, GetForegroundWindow, DdeFreeDataHandle, DdeGetData, CharLowerBuffA, RegisterWindowMessageA, CharNextA, GetActiveWindow, EnumWindows, ChildWindowFromPoint, SetMenuDefaultItem, GetMenuDefaultItem, GetSystemMetrics, SystemParametersInfoA, DrawIconEx, ChangeClipboardChain, SetClipboardViewer, CopyRect, IsRectEmpty, UpdateWindow, GetMessagePos, SetRectEmpty, CallNextHookEx, UnhookWindowsHookEx, GetWindowThreadProcessId, SetWindowLongA, SendMessageTimeoutA, IsHungAppWindow, LoadMenuA, LoadMenuW, InsertMenuA, InsertMenuW, DrawFocusRect, ShowWindowAsync, GetShellWindow, ReleaseCapture, SetCapture, GetWindowDC, TrackMouseEvent, GetCursorPos, CharNextW, RegisterClipboardFormatW, DrawTextExW, SendMessageW, SetWindowTextW, CheckMenuItem, EnableMenuItem, IsDlgButtonChecked, GetDlgCtrlID, ScreenToClient, ChildWindowFromPointEx, TranslateMessage, GetMenuItemCount, GetCapture, GetLastActivePopup, IsWindowVisible, SetRect, SetForegroundWindow, SetCursor, IsWindowEnabled, GetWindowLongA, GetParent, SetFocus, wsprintfW, InvalidateRect, GetKeyState, DestroyAcceleratorTable, IsWindow, GetFocus, IsChild, BeginPaint, EndPaint, IntersectRect, EqualRect, OffsetRect, SetWindowRgn, GetDC, ReleaseDC, LoadStringA, DestroyIcon, ShowWindow, KillTimer, SetWindowPos, AdjustWindowRectEx, GetClientRect, DestroyWindow, RedrawWindow, GetWindowRect, FillRect, GetSysColorBrush, SetTimer, PtInRect, UnionRect, EndDialog

[[ 28 export(s) ]]
AddUrlToFavorites, DllCanUnloadNow, DllGetClassObject, DllGetVersion, DllInstall, DllRegisterServer, DllRegisterWindowClasses, DllUnregisterServer, DoAddToFavDlg, DoAddToFavDlgW, DoFileDownload, DoFileDownloadEx, DoOrganizeFavDlg, DoOrganizeFavDlgW, DoPrivacyDlg, HlinkFindFrame, HlinkFrameNavigate, HlinkFrameNavigateNHL, IEWriteErrorLog, ImportPrivacySettings, OpenURL, SHAddSubscribeFavorite, SHGetIDispatchForFolder, SetQueryNetSessionCount, SetShellOfflineState, SoftwareUpdateMessageBox, URLQualifyA, URLQualifyW
ExifTool:
file metadata
CharacterSet: Unicode
CodeSize: 897024
CompanyName: Microsoft Corporation
EntryPoint: 0x16184
FileDescription: Bibliothek f r Shell-Dokumente und -Steuerelemente
FileFlagsMask: 0x003f
FileOS: Windows NT 32-bit
FileSize: 1475 kB
FileSubtype: 0
FileType: Win32 DLL
FileVersion: 6.00.2900.6049 (xpsp_sp3_gdr.101103-1638)
FileVersionNumber: 6.0.2900.6049
ImageVersion: 5.1
InitializedDataSize: 612352
InternalName: SHDOCVW.DLL
LanguageCode: German
LegalCopyright: Microsoft Corporation. Alle Rechte vorbehalten.
LinkerVersion: 7.1
MIMEType: application/octet-stream
MachineType: Intel 386 or later, and compatibles
OSVersion: 5.1
ObjectFileType: Dynamic link library
OleSelfRegister:
OriginalFilename: SHDOCVW.DLL
PEType: PE32
ProductName: Betriebssystem Microsoft Windows
ProductVersion: 6.00.2900.6049
ProductVersionNumber: 6.0.2900.6049
Subsystem: Windows GUI
SubsystemVersion: 4.0
TimeStamp: 2010:11:05 06:04:19+01:00
UninitializedDataSize: 0

und unten ist nochmal von Malewarebytes

**Leonixx** · 10.01.2011, 19:11

Zitat:

IE benutze ich gar net , trotzdem updaten?

Ja.

Zitat:

Und wieso so viele Spiele?

Damit meine ich das deine Registry zugemüllt ist mit zig Programmen und Spielen und deshalb auch das System verlangsamen kann.

Kann auf jeden Fall keine weiteren Anzeichen für einen Schädling finden.