| |
| |||||||
Log-Analyse und Auswertung: Maus spinnt (kein Hardwaredefekt), was für ein Virus? Wie entfernen?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
21.05.2012, 13:30
| #1 |
| |  Maus spinnt (kein Hardwaredefekt), was für ein Virus? Wie entfernen? Hallo Zusammen, ich habe seit einiger Zeit folgendes Problem: Die Mausbfehle "öffnen", "schließen" und "Drag&Drop" funktionieren oft nur sporadisch. Es kommt einem vor als ob die linke Maustaste defekt wäre. Das selbe Problem tritt auch mit einer anderen Maus als auch mit dem Touchpad des Notebooks auf. Jedoch lassen sich soweit theoretisch möglich alle Befehle mit der Tastatur ausführen, die selben Befehle jedoch nicht mit der Maus. Ein Hardwaredefekt schließe ich daher aus und tippe auf einen Virus. Des Weiteren hat der PC eines Freundes das selbe Problem (unter WinXP). Anscheinend habe ich mir den Virus von ihm eingefangen als ich mehrmals per SD Karte Word Dateien von meinem PC zu seinem kopiert habe. Bevor ich die Dateien kopiert habe, hatte ich diese Probleme noch nicht. Ich nehme an das nun alle meine SD-Karten sowie meine externe Festplatte infiziert sind wenn ich mir den Virus per SD-Karte eingefangen habe? Ich würde mich sehr über eure Hilfe freuen da ein normales Arbeiten mit dieser Art Virus oft unmöglich ist. Danke! DDS: . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 9.0.8112.16421 Run by ala at 13:50:47 on 2012-05-21 Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.2740.1839 [GMT 2:00] . SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe C:\Windows\system32\svchost.exe -k hpdevmgmt C:\Windows\System32\svchost.exe -k HPZ12 C:\Windows\System32\svchost.exe -k HPZ12 C:\Windows\system32\svchost.exe -k HPService C:\Windows\system32\svchost.exe -k bthsvcs C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe C:\Windows\system32\sppsvc.exe C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Apoint2K\Apoint.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe C:\Program Files\Logitech\SetPointP\SetPoint.exe C:\Program Files\Eraser\Eraser.exe C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe C:\Program Files\HP\HP Software Update\hpwuschd2.exe C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe C:\Program Files\Apoint2K\ApMsgFwd.exe C:\Program Files\Apoint2K\Apntex.exe C:\Program Files\Logitech\SetPointG\SetPointII.exe C:\Windows\system32\conhost.exe C:\Program Files\NVIDIA Corporation\Display\nvtray.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://facebook.com/ BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - c:\program files\hp\digital imaging\smart web printing\hpswp_printenhancer.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~1\office14\GROOVEEX.DLL BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~1\office14\URLREDIR.DLL BHO: SmartSelect Class: {f4971ee7-daa0-4053-9964-665d8ee6a077} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - c:\program files\hp\digital imaging\smart web printing\hpswp_bho.dll mRun: [Apoint] c:\program files\apoint2k\Apoint.exe mRun: [IgfxTray] c:\windows\system32\igfxtray.exe mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe mRun: [Persistence] c:\windows\system32\igfxpers.exe mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe -s mRun: [RtHDVBg_Dolby] c:\program files\realtek\audio\hda\RtHDVBg.exe /FORPCEE3 mRun: [EvtMgr6] c:\program files\logitech\setpointp\SetPoint.exe /launchGaming mRun: [Eraser] "c:\progra~1\eraser\Eraser.exe" --atRestart mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin mRun: [BCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [<NO NAME>] mRun: [Adobe Acrobat Speed Launcher] "c:\program files\adobe\acrobat 10.0\acrobat\Acrobat_sl.exe" mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 10.0\acrobat\Acrotray.exe" mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe StartupFolder: c:\users\ala\appdata\roaming\micros~1\windows\startm~1\programs\startup\logite~1.lnk - c:\program files\common files\logishrd\ereg\setpoint\eReg.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\blueto~1.lnk - c:\program files\lenovo\bluetooth software\BTTray.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: An OneNote s&enden - c:\progra~1\micros~1\office14\ONBttnIE.dll/105 IE: An vorhandene PDF-Datei anfügen - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppend.html IE: In Adobe PDF konvertieren - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECapture.html IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Linkziel in Adobe PDF konvertieren - c:\program files\common files\adobe\acrobat\activex\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Nach Microsoft E&xcel exportieren - c:\progra~1\micros~1\office14\EXCEL.EXE/3000 IE: Send image to &Bluetooth Device... - c:\program files\lenovo\bluetooth software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device... - c:\program files\lenovo\bluetooth software\btsendto_ie.htm IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\lenovo\bluetooth software\btsendto_ie.htm IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll Trusted Zone: samsungsetup.com\www DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab TCP: DhcpNameServer = 62.179.1.62 62.179.1.63 TCP: Interfaces\{158B758C-C6C1-4F93-96CB-02623287C64A} : DhcpNameServer = 192.168.0.1 TCP: Interfaces\{A86C14FA-46C3-404B-BDFC-57206B23C494} : DhcpNameServer = 62.179.1.62 62.179.1.63 TCP: Interfaces\{A86C14FA-46C3-404B-BDFC-57206B23C494}\75C414E4 : DhcpNameServer = 192.168.2.1 Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: igfxcui - igfxdev.dll Notify: LBTWlgn - c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll AppInit_DLLs: c:\windows\system32\nvinit.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~1\office14\GROOVEEX.DLL . ================= FIREFOX =================== . FF - ProfilePath - c:\users\ala\appdata\roaming\mozilla\firefox\profiles\7hsrtj7x.default\ FF - prefs.js: browser.startup.homepage - about:blank FF - plugin: c:\progra~1\micros~1\office14\NPAUTHZ.DLL FF - plugin: c:\progra~1\micros~1\office14\NPSPWRAP.DLL FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dv.dll FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_2_202_235.dll . ============= SERVICES / DRIVERS =============== . R0 nvpciflt;nvpciflt;c:\windows\system32\drivers\nvpciflt.sys [2012-5-6 24896] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2012-5-6 242240] R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128] R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia update core\daemonu.exe [2012-5-6 2348352] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2012-2-29 382272] R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [2010-4-9 45736] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2012-5-6 29472] R3 Impcd;Impcd;c:\windows\system32\drivers\Impcd.sys [2010-2-26 132480] R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\drivers\IntcDAud.sys [2011-8-23 270336] S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-4-5 158856] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-5-6 257696] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\drivers\L1C62x86.sys [2010-2-22 66600] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2010-3-25 30969208] S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-5-6 129976] S3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [2012-5-6 171008] S3 Samsung UPD Service2;Samsung UPD Service2;c:\windows\system32\SUPDSvc2.exe [2012-5-11 136784] S3 StorSvc;Speicherdienst;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992] S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2012-5-6 52224] S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\drivers\vwifimp.sys [2009-7-14 14336] . =============== Created Last 30 ================ . 2012-05-21 00:01:40 -------- d-----w- c:\program files\MSXML 4.0 2012-05-20 19:16:35 2048 ----a-w- c:\windows\system32\tzres.dll 2012-05-20 19:16:33 1291632 ----a-w- c:\windows\system32\drivers\tcpip.sys 2012-05-20 19:16:32 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe 2012-05-20 19:16:32 3913072 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-05-20 19:16:31 2343424 ----a-w- c:\windows\system32\win32k.sys 2012-05-20 19:16:29 989184 ----a-w- c:\program files\windows journal\JNTFiltr.dll 2012-05-20 19:16:29 969216 ----a-w- c:\program files\windows journal\JNWDRV.dll 2012-05-20 19:16:29 936960 ----a-w- c:\program files\common files\microsoft shared\ink\journal.dll 2012-05-20 19:16:29 1221632 ----a-w- c:\program files\windows journal\NBDoc.DLL 2012-05-20 19:16:25 56176 ----a-w- c:\windows\system32\drivers\partmgr.sys 2012-05-20 19:16:25 1077248 ----a-w- c:\windows\system32\DWrite.dll 2012-05-20 19:16:24 123904 ----a-w- c:\windows\system32\poqexec.exe 2012-05-20 18:34:34 6734704 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll 2012-05-20 18:34:32 6737808 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{d6fee1f6-c697-40a3-be0e-aae67e5c0cb7}\mpengine.dll 2012-05-15 08:54:40 -------- d-----w- c:\users\ala\appdata\local\Diagnostics 2012-05-11 17:49:38 -------- d-----w- c:\programdata\Samsung 2012-05-11 17:49:35 24576 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\sp6__pc.dll 2012-05-11 17:49:28 -------- d-----w- c:\program files\Samsung 2012-05-11 17:48:32 349264 ----a-w- c:\windows\system32\UPDIO2.dll 2012-05-11 17:48:32 24064 ----a-w- c:\windows\system32\sp6__l.dll 2012-05-11 17:48:32 142416 ----a-w- c:\windows\system32\SUPDSvcA2.dll 2012-05-11 17:48:31 65536 ----a-w- c:\windows\system32\sp6__ci.dll 2012-05-11 17:48:31 261712 ----a-w- c:\windows\SUPDRun.exe 2012-05-11 17:48:31 151552 ----a-w- c:\windows\system32\sp6__ci.exe 2012-05-11 17:48:31 136784 ----a-w- c:\windows\system32\SUPDSvc2.exe 2012-05-11 17:42:38 -------- d-----w- c:\users\ala\appdata\local\ElevatedDiagnostics 2012-05-10 10:54:13 -------- d-----w- c:\users\ala\appdata\local\HP 2012-05-10 10:52:24 -------- d-----w- c:\programdata\WEBREG 2012-05-10 10:51:46 315904 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpfpp70w.dll 2012-05-10 10:51:10 -------- d-----w- c:\users\ala\appdata\roaming\HpUpdate 2012-05-10 10:50:10 -------- d-----w- c:\program files\common files\HP 2012-05-10 10:50:09 -------- d-----w- c:\program files\common files\Hewlett-Packard 2012-05-10 10:49:42 123904 ----a-w- c:\windows\system32\hpf3l70w.dll 2012-05-10 10:49:04 -------- d-----w- c:\program files\HP 2012-05-10 10:48:28 713728 ----a-w- c:\windows\system32\hposwia_d02d.dll 2012-05-10 10:48:28 589824 ----a-w- c:\windows\system32\hpost_d02d.dll 2012-05-10 10:48:28 452408 ----a-w- c:\windows\system32\hpzids01.dll 2012-05-10 10:48:28 372736 ----a-w- c:\windows\system32\hppldcoi.dll 2012-05-10 10:48:28 315392 ----a-w- c:\windows\system32\hposc_d02a.dll 2012-05-10 10:40:00 -------- d-----w- c:\programdata\regid.1986-12.com.adobe 2012-05-09 16:35:22 -------- d-----w- c:\program files\Dell Printers 2012-05-09 16:35:17 135268 ----a-w- c:\windows\system32\DLPSCBML.DLL 2012-05-09 16:34:46 135266 ----a-w- c:\windows\system32\dlxbmzil.dll 2012-05-09 16:34:43 69714 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\ctor.dll 2012-05-09 16:34:43 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\DotNetInstaller.exe 2012-05-09 16:34:43 274432 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iscript.dll 2012-05-09 16:34:43 184320 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iuser.dll 2012-05-09 16:34:42 753664 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iKernel.dll 2012-05-09 16:34:42 331908 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\setup.dll 2012-05-09 16:34:42 200836 ----a-w- c:\program files\common files\installshield\professional\runtime\11\00\intel32\iGdi.dll 2012-05-07 10:28:17 -------- d-----w- c:\users\ala\appdata\roaming\TrueCrypt 2012-05-07 10:28:06 -------- d-----w- c:\windows\system32\sda 2012-05-06 22:52:18 -------- d-----w- c:\windows\Panther 2012-05-06 16:10:23 -------- d-----w- c:\users\ala\appdata\roaming\foobar2000 2012-05-06 16:10:17 -------- d-----w- c:\program files\Microsoft Synchronization Services 2012-05-06 16:09:57 -------- d-----w- c:\windows\PCHEALTH 2012-05-06 16:09:57 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition 2012-05-06 16:09:17 -------- d-----w- c:\program files\Microsoft Visual Studio 8 2012-05-06 16:08:40 -------- d-----w- c:\program files\Microsoft Analysis Services 2012-05-06 16:08:31 -------- d-----w- c:\users\ala\appdata\local\Thunderbird 2012-05-06 16:07:47 -------- d-----w- c:\users\ala\appdata\local\Microsoft Help 2012-05-06 16:06:15 -------- d-----w- c:\users\ala\appdata\roaming\NVIDIA 2012-05-06 16:01:17 -------- d-----w- c:\users\ala\appdata\local\Adobe 2012-05-06 15:59:46 -------- d-----w- c:\program files\common files\Macrovision Shared 2012-05-06 15:53:23 -------- d-----r- c:\program files\Skype 2012-05-06 15:50:22 -------- d-----w- c:\users\ala\appdata\local\Eraser 6 2012-05-06 15:45:45 -------- d-----w- c:\program files\FileZilla-3.5.3 2012-05-06 15:42:21 -------- d-----w- c:\program files\Eraser 2012-05-06 15:40:45 -------- d-----w- c:\program files\foobar2000 2012-05-06 15:39:04 231760 ----a-w- c:\windows\system32\drivers\truecrypt.sys 2012-05-06 15:38:56 -------- d-----w- c:\program files\TrueCrypt 2012-05-06 15:17:00 -------- d-----w- c:\windows\de-DE 2012-05-06 15:16:53 -------- d-----w- c:\windows\system32\XPSViewer 2012-05-06 15:16:53 -------- d-----w- c:\windows\system32\drivers\umdf\de-DE 2012-05-06 15:16:53 -------- d-----w- c:\windows\system32\drivers\de-DE 2012-05-06 15:16:53 -------- d-----w- c:\windows\system32\0407 2012-05-06 15:16:51 -------- d-----w- c:\windows\system32\wbem\de-DE 2012-05-06 15:16:51 -------- d-----w- c:\windows\system32\de 2012-05-06 15:16:11 3584 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\de-de\LXKPTPRC.DLL.mui 2012-05-06 14:43:21 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2012-05-06 14:43:19 -------- d-----w- c:\users\ala\appdata\roaming\DAEMON Tools Lite 2012-05-06 14:43:19 -------- d-----w- c:\program files\DAEMON Tools Lite 2012-05-06 14:40:51 -------- d-----w- c:\programdata\DAEMON Tools Lite 2012-05-06 14:40:03 -------- d-----w- c:\program files\VideoLAN 2012-05-06 14:36:50 237072 ------w- c:\windows\system32\MpSigStub.exe 2012-05-06 14:27:57 -------- d-----w- c:\users\ala\appdata\local\LogiShrd 2012-05-06 14:27:51 53248 ----a-r- c:\users\ala\appdata\roaming\microsoft\installer\{3ee9bcae-e9a9-45e5-9b1c-83a4d357e05c}\ARPPRODUCTICON.exe 2012-05-06 14:27:40 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys 2012-05-06 14:26:18 -------- d-----w- c:\users\ala\appdata\roaming\Logishrd 2012-05-06 14:23:21 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-05-06 14:23:21 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-05-06 14:19:20 -------- d-----w- c:\windows\system32\NV 2012-05-06 14:17:27 710976 ----a-w- c:\windows\system32\nv3dappshext.dll 2012-05-06 14:17:27 645440 ----a-w- c:\windows\system32\nvvsvc.exe 2012-05-06 14:17:27 62272 ----a-w- c:\windows\system32\nvshext.dll 2012-05-06 14:17:27 55104 ----a-w- c:\windows\system32\nv3dappshextr.dll 2012-05-06 14:17:27 426304 ----a-w- c:\windows\system32\oemdspif.dll 2012-05-06 14:17:27 3881792 ----a-w- c:\windows\system32\nvcpl.dll 2012-05-06 14:17:27 2719040 ----a-w- c:\windows\system32\nvsvc.dll 2012-05-06 14:17:27 2561344 ----a-w- c:\windows\system32\nvsvcr.dll 2012-05-06 14:17:27 2515790 ----a-w- c:\windows\system32\nvcoproc.bin 2012-05-06 14:17:27 108352 ----a-w- c:\windows\system32\nvmctray.dll 2012-05-06 14:13:49 -------- d-----w- c:\program files\common files\Intel 2012-05-06 13:55:20 1263104 ----a-w- c:\windows\system32\drivers\athr.sys 2012-05-06 13:54:55 -------- d-----w- c:\program files\Apoint2K 2012-05-06 13:54:27 7360512 ----a-w- c:\windows\system32\RTSUSTORicon.dll 2012-05-06 13:54:15 270336 ----a-w- c:\windows\system32\RtsUStor.dll 2012-05-06 13:54:15 171008 ----a-w- c:\windows\system32\drivers\RtsUStor.sys 2012-05-06 13:54:15 -------- d-----w- c:\program files\Realtek 2012-05-06 13:53:59 -------- d-----w- c:\users\ala\appdata\local\Broadcom 2012-05-06 13:53:28 86056 ----a-w- c:\windows\system32\drivers\btwaudio.sys 2012-05-06 13:53:28 29472 ----a-w- c:\windows\system32\drivers\btwl2cap.sys 2012-05-06 13:53:28 18472 ----a-w- c:\windows\system32\drivers\btwrchid.sys 2012-05-06 13:53:28 108072 ----a-w- c:\windows\system32\drivers\btwavdt.sys 2012-05-06 13:53:11 -------- d-----w- c:\program files\Lenovo 2012-05-06 13:53:07 -------- d-sh--w- c:\windows\Installer 2012-05-06 13:52:20 -------- d-----w- c:\windows\system32\Atheros_L1e 2012-05-06 13:46:09 -------- d-----w- c:\program files\NVIDIA Corporation 2012-05-06 13:45:47 -------- d-----w- C:\NVIDIA 2012-05-06 13:44:59 -------- d-----w- C:\Drivers 2012-05-06 13:42:54 53248 ----a-w- c:\windows\system32\CSVer.dll 2012-05-06 13:42:13 -------- d-----w- C:\Intel 2012-05-06 13:35:19 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe 2012-05-06 13:35:19 58880 ----a-w- c:\windows\system32\rdpwsx.dll 2012-05-06 13:35:19 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll 2012-05-06 13:35:04 826880 ----a-w- c:\windows\system32\rdpcore.dll 2012-05-06 13:35:04 24576 ----a-w- c:\windows\system32\drivers\tdtcp.sys 2012-05-06 13:35:04 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys 2012-05-06 13:34:33 690688 ----a-w- c:\windows\system32\msvcrt.dll 2012-05-06 13:32:46 38912 ----a-w- c:\windows\system32\csrsrv.dll 2012-05-06 13:32:32 534528 ----a-w- c:\windows\system32\EncDec.dll 2012-05-06 13:32:06 708608 ----a-w- c:\program files\common files\system\wab32.dll 2012-05-06 13:31:03 75776 ----a-w- c:\windows\system32\psisrndr.ax 2012-05-06 13:31:03 465408 ----a-w- c:\windows\system32\psisdecd.dll 2012-05-06 13:29:36 60416 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS 2012-05-06 13:29:36 393728 ----a-w- c:\windows\system32\drivers\bthport.sys 2012-05-06 13:29:25 293376 ----a-w- c:\windows\system32\umpnpmgr.dll 2012-05-06 13:29:13 311808 ----a-w- c:\windows\system32\drivers\srv.sys 2012-05-06 13:29:13 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys 2012-05-06 13:29:12 310272 ----a-w- c:\windows\system32\drivers\srv2.sys 2012-05-06 13:29:00 338944 ----a-w- c:\windows\system32\drivers\afd.sys 2012-05-06 13:28:25 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys 2012-05-06 13:28:25 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys 2012-05-06 13:28:25 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2012-05-06 13:27:45 741376 ----a-w- c:\windows\system32\inetcomm.dll 2012-05-06 13:27:34 70656 ----a-w- c:\windows\system32\fontsub.dll 2012-05-06 13:27:34 34304 ----a-w- c:\windows\system32\atmlib.dll 2012-05-06 13:27:33 294912 ----a-w- c:\windows\system32\atmfd.dll 2012-05-06 13:27:21 28672 ----a-w- c:\windows\system32\dnscacheugc.exe 2012-05-06 13:27:21 132608 ----a-w- c:\windows\system32\dnsrslvr.dll 2012-05-06 13:26:50 1164288 ----a-w- c:\windows\system32\mfc42u.dll 2012-05-06 13:26:50 1137664 ----a-w- c:\windows\system32\mfc42.dll 2012-05-06 13:26:41 191488 ----a-w- c:\windows\system32\FXSCOVER.exe 2012-05-06 13:26:20 69632 ----a-w- c:\windows\system32\drivers\bowser.sys 2012-05-06 13:26:08 850944 ----a-w- c:\windows\system32\sbe.dll 2012-05-06 13:26:08 642048 ----a-w- c:\windows\system32\CPFilters.dll 2012-05-06 13:26:07 199680 ----a-w- c:\windows\system32\mpg2splt.ax 2012-05-06 13:25:57 542208 ----a-w- c:\windows\system32\kerberos.dll 2012-05-06 13:18:27 -------- d-----w- c:\windows\system32\SPReview 2012-05-06 13:05:57 70656 ----a-w- c:\windows\system32\MuiUnattend.exe 2012-05-06 13:04:06 -------- d-----w- c:\windows\system32\EventProviders 2012-05-06 13:02:21 -------- d-----w- c:\windows\system32\wbem\Performance . ==================== Find3M ==================== . 2012-05-06 15:15:58 29696 ----a-w- c:\windows\system32\drivers\de-de\bfe.dll.mui 2012-05-06 13:15:57 152576 ----a-w- c:\windows\system32\msclmd.dll 2012-03-27 15:03:36 3204200 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys 2012-03-20 08:47:20 3164264 ----a-w- c:\windows\system32\RtkAPO.dll 2012-03-19 17:01:20 85096 ----a-w- c:\windows\system32\RtkCoInstII.dll 2012-03-16 14:25:58 2414184 ----a-w- c:\windows\system32\RtkPgExt.dll 2012-03-08 09:47:34 95840 ----a-w- c:\windows\system32\AERTARen.dll 2012-03-08 09:47:00 176736 ----a-w- c:\windows\system32\AERTACap.dll 2012-03-07 09:09:28 617064 ----a-w- c:\windows\system32\RtkApoApi.dll 2012-03-01 05:46:57 19824 ----a-w- c:\windows\system32\drivers\fs_rec.sys 2012-03-01 05:37:41 172544 ----a-w- c:\windows\system32\wintrust.dll 2012-03-01 05:33:23 159232 ----a-w- c:\windows\system32\imagehlp.dll 2012-03-01 05:29:16 5120 ----a-w- c:\windows\system32\wmi.dll 2012-02-29 11:26:56 416064 ----a-w- c:\windows\system32\nvStreaming.exe 2012-02-28 01:18:55 1799168 ----a-w- c:\windows\system32\jscript9.dll 2012-02-28 01:11:21 1427456 ----a-w- c:\windows\system32\inetcpl.cpl 2012-02-28 01:11:07 1127424 ----a-w- c:\windows\system32\wininet.dll 2012-02-28 01:03:16 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-02-21 12:26:00 2190400 ----a-w- c:\windows\system32\FMAPO.dll . ============= FINISH: 13:51:02,08 =============== Attach: . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows 7 Professional Boot Device: \Device\HarddiskVolume1 Install Date: 06.05.2012 15:00:16 System Uptime: 21.05.2012 12:37:48 (1 hours ago) . Motherboard: Lenovo | | LL1 Processor: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz | CPU 1 | 2533/133mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 60 GiB total, 35,263 GiB free. D: is CDROM () G: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: Description: Device ID: ACPI\VPC2004\0 Manufacturer: Name: PNP Device ID: ACPI\VPC2004\0 Service: . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft-Adapter für Miniports virtueller WiFis Device ID: {5D624F94-8850-40C3-A3FA-A4FD2080BAF3}\VWIFIMP\5&5EEFDE1&0&01 Manufacturer: Microsoft Name: Microsoft-Adapter für Miniports virtueller WiFis PNP Device ID: {5D624F94-8850-40C3-A3FA-A4FD2080BAF3}\VWIFIMP\5&5EEFDE1&0&01 Service: vwifimp . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Bluetooth-Gerät (PAN) Device ID: BTH\MS_BTHPAN\7&18B05BA8&0&2 Manufacturer: Microsoft Name: Bluetooth-Gerät (PAN) PNP Device ID: BTH\MS_BTHPAN\7&18B05BA8&0&2 Service: BthPan . Class GUID: Description: Bluetooth-Peripheriegerät Device ID: BTHENUM\{831C4071-7BC8-4A9C-A01C-15DF25A4ADBC}_LOCALMFG&000F\8&2A867672&0&0023D4361461_C00000000 Manufacturer: Name: Bluetooth-Peripheriegerät PNP Device ID: BTHENUM\{831C4071-7BC8-4A9C-A01C-15DF25A4ADBC}_LOCALMFG&000F\8&2A867672&0&0023D4361461_C00000000 Service: . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Atheros AR8152 PCI-E Fast Ethernet Controller Device ID: PCI\VEN_1969&DEV_2060&SUBSYS_396517AA&REV_C1\4&D614A77&0&00E4 Manufacturer: Atheros Name: Atheros AR8152 PCI-E Fast Ethernet Controller PNP Device ID: PCI\VEN_1969&DEV_2060&SUBSYS_396517AA&REV_C1\4&D614A77&0&00E4 Service: L1C . ==== System Restore Points =================== . RP66: 19.05.2012 16:02:51 - Geplanter Prüfpunkt RP67: 20.05.2012 20:34:17 - Windows Update RP68: 21.05.2012 02:01:32 - Windows Update . ==== Installed Programs ====================== . 32 Bit HP CIO Components Installer Adobe Acrobat X Pro - English, Français, Deutsch Adobe Anchor Service CS4 Adobe Bridge CS4 Adobe CMaps CS4 Adobe Color - Photoshop Specific CS4 Adobe Color EU Recommended Settings CS4 Adobe Color JA Extra Settings CS4 Adobe Color NA Extra Settings CS4 Adobe Color Video Profiles CS CS4 Adobe CSI CS4 Adobe Default Language CS4 Adobe ExtendScript Toolkit CS4 Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Fonts All Adobe Linguistics CS4 Adobe Output Module Adobe PDF Library Files CS4 Adobe Photoshop CS4 Adobe Photoshop CS4 Support Adobe Search for Help Adobe Service Manager Extension Adobe Setup Adobe Type Support CS4 Adobe Update Manager CS4 Adobe WinSoft Linguistics Plugin Adobe XMP Panels CS4 AdobeColorCommonSetCMYK AdobeColorCommonSetRGB ALPS Touch Pad Driver Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver BufferChm Connect Copy DAEMON Tools Lite Dell-Druckersoftware Destinations DeviceDiscovery DJ_AIO_06_F4500_SW_MIN Eraser 6.0.9.2343 eReg F4500 foobar2000 v1.1.11 GPBaseService2 HP Customer Participation Program 14.0 HP Deskjet F4500 All-in-One Driver Software 14.0 Rel. 6 HP Imaging Device Functions 14.0 HP Smart Web Printing 4.60 HP Solution Center 14.0 HP Update HPPhotoGadget HPProductAssistant HPSSupply Intel(R) Processor Graphics kuler Lenovo Bluetooth with Enhanced Data Rate Software Lenovo_Wireless_Driver Logitech SetPoint 6.32 MarketResearch Microsoft Office Access MUI (German) 2010 Microsoft Office Excel MUI (German) 2010 Microsoft Office Groove MUI (German) 2010 Microsoft Office InfoPath MUI (German) 2010 Microsoft Office OneNote MUI (German) 2010 Microsoft Office Outlook MUI (German) 2010 Microsoft Office PowerPoint MUI (German) 2010 Microsoft Office Professional Plus 2010 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2010 Microsoft Office Proof (German) 2010 Microsoft Office Proof (Italian) 2010 Microsoft Office Proofing (German) 2010 Microsoft Office Publisher MUI (German) 2010 Microsoft Office Shared MUI (German) 2010 Microsoft Office Word MUI (German) 2010 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Mozilla Firefox 12.0 (x86 de) Mozilla Maintenance Service Mozilla Thunderbird 12.0.1 (x86 de) MSXML 4.0 SP2 (KB954430) Network NVIDIA 3D Vision Driver 296.10 NVIDIA Control Panel 296.10 NVIDIA Graphics Driver 296.10 NVIDIA Install Application NVIDIA Optimus 1.7.11 NVIDIA PhysX NVIDIA PhysX System Software 9.12.0213 NVIDIA Stereoscopic 3D Driver NVIDIA Update 1.7.11 NVIDIA Update Components PDF Settings CS4 Photoshop Camera Raw Realtek High Definition Audio Driver Realtek USB 2.0 Card Reader Samsung Universal Print Driver PCL 6 Scan Shop for HP Supplies Skype™ 5.9 SmartWebPrinting SolutionCenter Status Suite Shared Configuration CS4 Toolbox TrayApp TrueCrypt VLC media player 2.0.1 WebReg Windows Driver Package - Broadcom (BTHUSB) Bluetooth (04/08/2010 6.3.5.430) Windows Driver Package - Broadcom HIDClass (07/28/2009 6.2.0.9800) WinRAR archiver . ==== End Of File =========================== GMER: GMER 1.0.15.15641 - hxxp://www.gmer.net Rootkit scan 2012-05-21 14:16:16 Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 M4-CT064M4SSD2 rev.0309 Running: zm0hy297.exe; Driver: C:\Users\ala\AppData\Local\Temp\uwldrpow.sys ---- Kernel code sections - GMER 1.0.15 ---- .text ntkrnlpa.exe!ZwRollbackEnlistment + 140D 82E8B3C9 1 Byte [06] .text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 82EC4D52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3} PAGE spsys.sys!?SPRevision@@3PADA + 4F90 B4483000 290 Bytes [8B, FF, 55, 8B, EC, 33, C0, ...] PAGE spsys.sys!?SPRevision@@3PADA + 50B3 B4483123 629 Bytes [E5, 47, B4, FE, 05, 34, E5, ...] PAGE spsys.sys!?SPRevision@@3PADA + 5329 B4483399 101 Bytes [6A, 28, 59, A5, 5E, C6, 03, ...] PAGE spsys.sys!?SPRevision@@3PADA + 538F B44833FF 148 Bytes [18, 5D, C2, 14, 00, 8B, FF, ...] PAGE spsys.sys!?SPRevision@@3PADA + 543B B44834AB 2228 Bytes [8B, FF, 55, 8B, EC, FF, 75, ...] PAGE ... ? C:\Users\ala\AppData\Local\Temp\mbr.sys Das System kann die angegebene Datei nicht finden. ! ---- Devices - GMER 1.0.15 ---- Device \Driver\ACPI_HAL \Device\00000049 halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation) AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 rdyboost.sys (ReadyBoost Driver/Microsoft Corporation) Device \Driver\BTHUSB \Device\0000007e bthport.sys (Bluetooth-Bustreiber/Microsoft Corporation) ---- Registry - GMER 1.0.15 ---- Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\18f46afd3d2f Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\18f46afd3d2f@0023d4361461 0x60 0x30 0xCC 0x28 ... Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\18f46afd3d2f (not active ControlSet) Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\18f46afd3d2f@0023d4361461 0x60 0x30 0xCC 0x28 ... ---- EOF - GMER 1.0.15 ---- |
|
21.05.2012, 19:15
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Maus spinnt (kein Hardwaredefekt), was für ein Virus? Wie entfernen? Bitte erstmal routinemäßig einen Vollscan mit Malwarebytes machen und Log posten. =>ALLE lokalen Datenträger (außer CD/DVD) überprüfen lassen!
__________________Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss! Außerdem müssen alle Funde entfernt werden. Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten! ESET Online Scanner
Bitte alles nach Möglichkeit hier in CODE-Tags posten. Wird so gemacht: [code] hier steht das Log [/code] Und das ganze sieht dann so aus: Code:
ATTFilter hier steht das Log
__________________ |
|
22.05.2012, 11:08
| #3 |
| | Maus spinnt (kein Hardwaredefekt), was für ein Virus? Wie entfernen? Hier die Log Texte von Malwarebytes und ESET.
__________________ESET hat zwar auf meiner externen Festplatte ( F: ) etwas gefunden wobei ich weniger glaube das diese die Ursache des Problems sind. Fix.zip und WWP - Vista Color Fix.exe sind fixes für ein Spiel (WWP). Die anderen zwei sind Software fixes wie man erkennen kann. Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.61.0.1400 www.malwarebytes.org Datenbank Version: v2012.05.21.04 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 9.0.8112.16421 ala :: ALA-PC [Administrator] Schutz: Aktiviert 21.05.2012 23:16:20 mbam-log-2012-05-21 (23-16-20).txt Art des Suchlaufs: Vollständiger Suchlauf Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 315102 Laufzeit: 13 Minute(n), 55 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=11c4df9d6d76f24898e71f731dddf87b
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-05-21 10:20:26
# local_time=2012-05-22 12:20:26 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 98101 89269890 0 0
# compatibility_mode=8192 67108863 100 0 356 356 0 0
# scanned=828
# found=0
# cleaned=0
# scan_time=128
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=11c4df9d6d76f24898e71f731dddf87b
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-05-21 10:27:25
# local_time=2012-05-22 12:27:25 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 98647 89270436 0 0
# compatibility_mode=8192 67108863 100 0 902 902 0 0
# scanned=4
# found=0
# cleaned=0
# scan_time=5
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=11c4df9d6d76f24898e71f731dddf87b
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-05-22 12:56:57
# local_time=2012-05-22 02:56:57 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 99017 89270806 0 0
# compatibility_mode=8192 67108863 100 0 1272 1272 0 0
# scanned=199566
# found=4
# cleaned=0
# scan_time=8601
F:\$RECYCLE.BIN\S-1-5-21-4032253309-3422633695-571240587-1000\$R18EG3T\Fix.zip probably a variant of Win32/Agent.FURLZGK trojan (unable to clean) 00000000000000000000000000000000 I
F:\$RECYCLE.BIN\S-1-5-21-4032253309-3422633695-571240587-1000\$R18EG3T\WWP - Vista Color Fix.exe probably a variant of Win32/Agent.FURLZGK trojan (unable to clean) 00000000000000000000000000000000 I
F:\[ Programme ]\Office 2010\bieof10g.iso a variant of Win32/HackKMS.A application (unable to clean) 00000000000000000000000000000000 I
F:\[ Programme ]\Windows\Microsoft.Windows.7.Enterprise.x64.Integrated.December.2010.GERMAN-BIE\bie7641210g.iso a variant of Win32/HackKMS.A application (unable to clean) 00000000000000000000000000000000 I
|
|
22.05.2012, 13:17
| #4 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Maus spinnt (kein Hardwaredefekt), was für ein Virus? Wie entfernen?Zitat:
 Siehe auch => http://www.trojaner-board.de/95393-c...-software.html Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support ohne jegliche Diskussion beenden. Cracks/Keygens sind zu 99,9% gefährliche Schädlinge, mit denen man nicht spaßen sollte. Ausserdem sind diese illegal und wir unterstützen die Verwendung von geklauter Software nicht. Somit beschränkt sich der Support auf Anleitung zur kompletten Neuinstallation!! Dass illegale Cracks und Keygens im Wesentlichen dazu dienen, Malware zu verbreiten ist kein Geheimnis und muss jedem klar sein! In Zukunft Finger weg von: Softonic, Registry-Bereinigern und illegalem Zeugs Cracks/Keygens/Serials
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
| Themen zu Maus spinnt (kein Hardwaredefekt), was für ein Virus? Wie entfernen? |
| 4d36e972-e325-11ce-bfc1-08002be10318, adobe, browser, cpu, defender, document, entfernen, eraser, festplatte, firefox, flash player, hardwaredefekt, helper, hängen, karte, lenovo, locker, maus, mozilla, nvidia update, nvpciflt.sys, photoshop, problem, realtek, registry, sd-karten, software, svchost.exe, system, tastatur, temp, usb 2.0, virus, visual studio, wie entfernen, wie entfernen?, windows |
Linear-Darstellung
