
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Programme\NVIDIA Corporation\nTune\nTuneService.exe O23 - Service: Ereignisprotokoll-Überwachung (LogWatch) - Computer Associates - C:\Programme\CA\SharedComponents\CA_LIC\LogWatNT.exe C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. O23 - Service: CA-Lizenzserver (CA_LIC_SRVR) - Computer Associates - C:\Programme\CA\SharedComponents\CA_LIC\lic98rmtd.exe O23 - Service: CA-Lizenz-Client (CA_LIC_CLNT) - Computer Associates - C:\Programme\CA\SharedComponents\CA_LIC\lic98rmt.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Programme\Lavasoft\Ad-Aware 2007\aawservice.exe O2 - BHO: Adobe PDF Reader Link Helper - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = į2 - REG:system.ini: UserInit=C:\WINDOWS\SYSTEM32\Userinit.exe,C:\WINDOWS\system32\ntos.exe, R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = But somehow does not start (Problem with ActiveX download?).Ĭ:\Programme\Windows Defender\MsMpEng.exeĬ:\Programme\Lavasoft\Ad-Aware 2007\aawservice.exeĬ:\Programme\AntiVir PersonalEdition Classic\sched.exeĬ:\Programme\AntiVir PersonalEdition Classic\avguard.exeĬ:\Programme\CA\SharedComponents\CA_LIC\LogWatNT.exeĬ:\Programme\NVIDIA Corporation\nTune\nTuneService.exeĬ:\Programme\AntiVir PersonalEdition Classic\avgnt.exeĬ:\Programme\Zone Labs\ZoneAlarm\zlclient.exeĬ:\Programme\Java\jre1.6.0_03\bin\jusched.exeĬ:\Programme\Windows Defender\MSASCui.exeĬ:\Programme\Trend Micro\HijackThis\HijackThis.exe work!ĭid download IE in order to execute Online Kapersky Scan. I already tried to "fix" the supected ntos.exe with HijackThis.

Spybot and Adaware detected it but, were not able to remove it completely (although it looked like they did). I have a problem with the virus/trojan or TR/.
