| |
| |||||||
Log-Analyse und Auswertung: Redirecting zu ungewollten websites beim Surfen (Inet geht nicht mehr nach Defogger-scan)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
31.07.2011, 07:09
| #16 |
 |  Redirecting zu ungewollten websites beim Surfen (Inet geht nicht mehr nach Defogger-scan) Sorrz, fehler im System. Hier also die Logs von -Gmer -Osam -MBRCheck Gmer: GMER Logfile: Code:
ATTFilter GMER 1.0.15.15640 - GMER - Rootkit Detector and Remover
Rootkit scan 2011-06-13 22:59:43
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 TOSHIBA_MK2046GSX rev.LB013M
Running: xm9wn1og.exe; Driver: C:\Users\Verena\AppData\Local\Temp\ugddapod.sys
---- System - GMER 1.0.15 ----
INT 0x52 ? 861D6F00
INT 0x52 ? 861D6F00
INT 0x62 ? 861D6F00
INT 0x72 ? 861D6F00
INT 0x92 ? 84887BF8
INT 0xA2 ? 84887BF8
INT 0xB2 ? 84887BF8
INT 0xB2 ? 84887BF8
INT 0xB2 ? 84887BF8
INT 0xB3 ? 861D6F00
---- Kernel code sections - GMER 1.0.15 ----
? System32\Drivers\spsk.sys Das System kann den angegebenen Pfad nicht finden. !
.text C:\Windows\system32\DRIVERS\tos_sps32.sys section is writeable [0x88554000, 0x4036D, 0xE8000020]
.dsrt C:\Windows\system32\DRIVERS\tos_sps32.sys unknown last section [0x8859D000, 0x510, 0x40000040]
.text USBPORT.SYS!DllUnload 8CB2541B 5 Bytes JMP 861D64E0
.text ao044q0e.SYS 82F80000 22 Bytes [82, 03, 22, 82, 6C, 02, 22, ...]
.text ao044q0e.SYS 82F80017 137 Bytes [00, 32, 87, 70, 80, 3D, 85, ...]
.text ao044q0e.SYS 82F800A1 43 Bytes [50, 2F, 82, 74, 46, 29, 82, ...]
.text ao044q0e.SYS 82F800CE 10 Bytes [00, 00, 00, 00, 00, 00, C9, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; LEAVE ; HLT ; POP ESP; DEC EDX}
.text ao044q0e.SYS 82F800DA 12 Bytes [00, 00, 02, 00, 00, 00, 24, ...]
.text ...
.text C:\Windows\system32\drivers\ACEDRV05.sys section is writeable [0x8D336000, 0x30A4A, 0xE8000020]
.pklstb C:\Windows\system32\drivers\ACEDRV05.sys entry point in ".pklstb" section [0x8D378000]
.relo2 C:\Windows\system32\drivers\ACEDRV05.sys unknown last section [0x8D393000, 0x8E, 0x42000040]
.text C:\Windows\system32\drivers\ACEDRV07.sys section is writeable [0x8D752000, 0x328BA, 0xE8000020]
.pklstb C:\Windows\system32\drivers\ACEDRV07.sys entry point in ".pklstb" section [0x8D796000]
.relo2 C:\Windows\system32\drivers\ACEDRV07.sys unknown last section [0x8D7B2000, 0x8E, 0x42000040]
.text C:\Windows\system32\drivers\ACEDRV08.sys section is writeable [0x9900A000, 0x328BA, 0xE8000020]
.pklstb C:\Windows\system32\drivers\ACEDRV08.sys entry point in ".pklstb" section [0x9904E000]
.relo2 C:\Windows\system32\drivers\ACEDRV08.sys unknown last section [0x9906A000, 0x8E, 0x42000040]
.reloc C:\Windows\system32\drivers\acedrv11.sys section is executable [0x9DD44300, 0x25D4C, 0xE0000060]
---- Devices - GMER 1.0.15 ----
Device \FileSystem\Ntfs \Ntfs 852191F8
Device \FileSystem\fastfat \FatCdrom 861EB1F8
Device \Driver\netbt \Device\NetBT_Tcpip_{5E97AC48-77AB-4352-9609-B0BB35ECC6F7} 869AE500
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
Device \Driver\volmgr \Device\VolMgrControl 848891F8
Device \Driver\usbohci \Device\USBPDO-0 861FC1F8
Device \Driver\usbohci \Device\USBPDO-1 861FC1F8
Device \Driver\usbohci \Device\USBPDO-2 861FC1F8
Device \Driver\usbohci \Device\USBPDO-3 861FC1F8
Device \Driver\usbohci \Device\USBPDO-4 861FC1F8
Device \Driver\sptd \Device\1678295318 spsk.sys
Device \Driver\usbehci \Device\USBPDO-5 8623A1F8
Device \Driver\volmgr \Device\HarddiskVolume1 848891F8
Device \Driver\volmgr \Device\HarddiskVolume2 848891F8
Device \Driver\cdrom \Device\CdRom0 861FD1F8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-0 852181F8
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-3 852181F8
Device \Driver\atapi \Device\Ide\IdePort0 852181F8
Device \Driver\atapi \Device\Ide\IdePort1 852181F8
Device \Driver\atapi \Device\Ide\IdePort2 852181F8
Device \Driver\atapi \Device\Ide\IdePort3 852181F8
Device \Driver\volmgr \Device\HarddiskVolume3 848891F8
Device \Driver\cdrom \Device\CdRom1 861FD1F8
Device \Driver\netbt \Device\NetBT_Tcpip_{2FC29930-1797-45D0-B5C9-A848C1B848C8} 869AE500
Device \Driver\volmgr \Device\HarddiskVolume4 848891F8
Device \Driver\netbt \Device\NetBt_Wins_Export 869AE500
Device \Driver\Smb \Device\NetbiosSmb 86A0B1F8
Device \Driver\PCI_PNP1299 \Device\0000004d spsk.sys
Device \Driver\iScsiPrt \Device\RaidPort0 863121F8
Device \Driver\usbohci \Device\USBFDO-0 861FC1F8
Device \Driver\USBSTOR \Device\0000006c 86B8C3C8
Device \Driver\USBSTOR \Device\0000006d 86B8C3C8
Device \Driver\usbohci \Device\USBFDO-1 861FC1F8
Device \Driver\usbohci \Device\USBFDO-2 861FC1F8
Device \Driver\usbohci \Device\USBFDO-3 861FC1F8
Device \Driver\usbohci \Device\USBFDO-4 861FC1F8
Device \Driver\usbehci \Device\USBFDO-5 8623A1F8
Device \Driver\ao044q0e \Device\Scsi\ao044q0e1Port5Path0Target0Lun0 863071F8
Device \Driver\ao044q0e \Device\Scsi\ao044q0e1 863071F8
Device \FileSystem\fastfat \Fat 861EB1F8
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)
Device \FileSystem\cdfs \Cdfs A19231F8
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x84 0x53 0xE2 0x33 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xA0 0x14 0xC2 0xF4 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x50 0x53 0x15 0x04 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0 C:\Program Files\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0 0xD4 0xC3 0x97 0x02 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12 0x84 0x53 0xE2 0x33 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12 0xA0 0x14 0xC2 0xF4 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12 0x50 0x53 0x15 0x04 ...
---- EOF - GMER 1.0.15 ----
OSAM: OSAM Logfile: Code:
ATTFilter Report of OSAM: Autorun Manager v5.0.11926.0 Online Solutions. Complex Protection for Information Systems Saved at 07:58:59 on 31.07.2011 OS: Windows Vista Home Premium Edition Service Pack 2 (Build 6002), 32-bit Default Browser: Mozilla Corporation Firefox 5.0 Scanner Settings [x] Rootkits detection (hidden registry) [x] Rootkits detection (hidden files) [x] Retrieve files information [x] Check Microsoft signatures Filters [ ] Trusted entries [ ] Empty entries [x] Hidden registry entries (rootkit activity) [x] Exclusively opened files [x] Not found files [x] Files without detailed information [x] Existing files [ ] Non-startable services [ ] Non-startable drivers [x] Active entries [x] Disabled entries [Common] -----( %SystemRoot%\Tasks )----- "Google Software Updater.job" - "Google" - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [Control Panel Objects] -----( %SystemRoot%\system32 )----- "bdeadmin.cpl" - "Borland Software Corporation" - C:\Windows\system32\bdeadmin.cpl "FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\Windows\system32\FlashPlayerCPLApp.cpl "TOSCDSPD.cpl" - ? - C:\Windows\system32\TOSCDSPD.cpl (File found, but it contains no detailed information) [Drivers] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- "ACEDRV05" (ACEDRV05) - "Protect Software GmbH" - C:\Windows\system32\drivers\ACEDRV05.sys "ACEDRV07" (ACEDRV07) - "Protect Software GmbH" - C:\Windows\system32\drivers\ACEDRV07.sys "ACEDRV08" (ACEDRV08) - "Protect Software GmbH" - C:\Windows\system32\drivers\ACEDRV08.sys "acedrv11" (acedrv11) - "Protect Software GmbH" - C:\Windows\system32\drivers\acedrv11.sys "avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys "avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys "catchme" (catchme) - ? - C:\Users\Verena\AppData\Local\Temp\catchme.sys (File not found) "Huawei DataCard USB Modem and USB Serial" (hwdatacard) - ? - C:\Windows\System32\DRIVERS\ewusbmdm.sys (File not found) "IP in IP Tunnel Driver" (IpInIp) - ? - C:\Windows\System32\DRIVERS\ipinip.sys (File not found) "IPX Traffic Filter Driver" (NwlnkFlt) - ? - C:\Windows\System32\DRIVERS\nwlnkflt.sys (File not found) "IPX Traffic Forwarder Driver" (NwlnkFwd) - ? - C:\Windows\System32\DRIVERS\nwlnkfwd.sys (File not found) "MBAMSwissArmy" (MBAMSwissArmy) - ? - C:\Windows\system32\drivers\mbamswissarmy.sys (File not found) "ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys "Tosrfcom" (Tosrfcom) - ? - C:\Windows\system32\drivers\Tosrfcom.sys (File not found) "Touch Pad Detection Filter driver" (TpChoice) - ? - C:\Windows\System32\DRIVERS\TpChoice.sys (File not found) [Explorer] -----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )----- {B3740C38-B040-464A-833B-0FBB36CD5930} "Column Provider für SEMAZipFiles" - ? - C:\PROGRA~1\SEMA\SEMAV104\SEMSYS\SPROJDLL.dll (File not found) {F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll -----( HKLM\Software\Classes\Protocols\Filter )----- {8f6b0360-b80d-11d0-a9b3-006097942311} "lzdhtml" - ? - (File not found | COM-object registry key not found) {807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL -----( HKLM\Software\Classes\Protocols\Handler )----- {79eac9e4-baf9-11ce-8c82-00aa004ba90b} "gopher" - ? - (File not found | COM-object registry key not found) {314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL {828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL {828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL {91774881-D725-4E58-B298-07617B9B86A8} "Skype IE add-on Pluggable Protocol" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} "vnd.ms.radio" - ? - (File not found | COM-object registry key not found) -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )----- {911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? - (File not found | COM-object registry key not found) {1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? - (File not found | COM-object registry key not found) {34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? - (File not found | COM-object registry key not found) {B3740C38-B040-464A-833B-0FBB36CD5930} "Column Provider für SEMAZipFiles" - ? - C:\PROGRA~1\SEMA\SEMAV104\SEMSYS\SPROJDLL.dll (File not found) {0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? - (File not found | COM-object registry key not found) {2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? - (File not found | COM-object registry key not found) {FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} "IE User Assist" - ? - (File not found | COM-object registry key not found) {00020d75-0000-0000-c000-000000000046} "lnkfile" - ? - (File not found | COM-object registry key not found) {42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll {993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll {C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll {C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? - (File not found | COM-object registry key not found) {E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? - (File not found | COM-object registry key not found) {087221D8-3D63-4AEA-A7CF-4B1EB5E9A4FF} "SEMA Zipfile" - ? - C:\PROGRA~1\SEMA\SEMAV104\SEMSYS\SPROJDLL.dll (File not found) {2BC56059-66D2-470E-B439-955FB6C2B6A3} "SEMA Zipfile" - ? - C:\PROGRA~1\SEMA\SEMAV104\SEMSYS\SPROJDLL.dll (File not found) {A214DA78-0E43-481C-9AF5-9E02F3F3099D} "SEMA Zipfile" - ? - C:\PROGRA~1\SEMA\SEMAV104\SEMSYS\SPROJDLL.dll (File not found) {C940A867-015C-4288-AA12-DD37CA9AD834} "SEMA Zipfile" - ? - C:\PROGRA~1\SEMA\SEMAV104\SEMSYS\SPROJDLL.dll (File not found) {45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll {5E2121EE-0300-11D4-8D3B-444553540000} "SimpleShlExt Class" - ? - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll {da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? - (File not found | COM-object registry key not found) {B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Program Files\WinRAR\rarext.dll [Internet Explorer] -----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars )----- {555D4D79-4BD2-4094-A395-CFC534424A05} "HP Smart Web Printing" - ? - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll (File not found) -----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )----- ITBar7Height "ITBar7Height" - ? - (File not found | COM-object registry key not found) <binary data> "ITBar7Layout" - ? - (File not found | COM-object registry key not found) -----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )----- {1C11B948-582A-433F-A98D-A8C4D5CC64F2} "20-20 3D Viewer" - "20-20 Technologies" - C:\Windows\system32\20-20 Technologies\3D Viewer\2020Player_4_5_2_0.dll / hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_Win32.cab {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} "Java Plug-in 1.6.0" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab {8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_22" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} "Java Plug-in 1.6.0_22" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_22" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_22.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab {D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object" - "Adobe Systems, Inc." - C:\Windows\system32\Macromed\Flash\Flash10t.ocx / hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab {E2883E8F-472F-4FB0-9522-AC9BF37916A7} "{E2883E8F-472F-4FB0-9522-AC9BF37916A7}" - ? - (File not found | COM-object registry key not found) / hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab -----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )----- "Amazon.de" - ? - Amazon.de: Günstige Preise bei Elektronik & Foto, DVD, Musik, Bücher, Games, Spielzeug & mehr (HTTP value) {53707962-6F74-2D53-2644-206D7942484F} "ClsidExtension" - "Safer Networking Limited" - C:\PROGRA~1\SPYBOT~1\SDHelper.dll "eBay - Der weltweite Online Marktplatz" - ? - eBay - eine der größten deutschen Shopping-Websites (HTTP value) {DDE87865-83C5-48c4-8357-2F5B1AA84522} "HP Smart Web Printing ein- oder ausblenden" - ? - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (File not found) "ICQ7" - "ICQ, LLC." - C:\Program Files\ICQ7.0\ICQ.exe {FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL {898EA8C8-E7FF-479B-8935-AEC46303B9E5} "Skype Plug-In" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )----- {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} "Adobe PDF Reader" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll {0347C33E-8762-4905-BF09-768834316C61} "HP Print Enhancer" - ? - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (File not found) {DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} "Skype Plug-In" - "Skype Technologies S.A." - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll {53707962-6F74-2D53-2644-206D7942484F} "Spybot-S&D IE Protection" - "Safer Networking Limited" - C:\PROGRA~1\SPYBOT~1\SDHelper.dll {9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live Sign-in Helper" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll {5C255C8A-E604-49b4-9D64-90988571CECB} "{5C255C8A-E604-49b4-9D64-90988571CECB}" - ? - (File not found | COM-object registry key not found) {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} "{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}" - ? - (File not found | COM-object registry key not found) [Logon] -----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )----- "desktop.ini" - ? - C:\Users\Verena\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini -----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )----- "desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini "phase-6 Reminder.lnk" - "phase-6" - C:\Program Files\phase-6\phase-6-basic\reminder\reminder.exe (Shortcut exists | File exists) -----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )----- "SpybotSD TeaTimer" - "Safer-Networking Ltd." - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe -----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )----- "StartupPrograms" - ? - rdpclip (File not found) -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )----- "Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "avgnt" - "Avira GmbH" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min "HP Software Update" - "Hewlett-Packard" - C:\Program Files\HP\HP Software Update\HPWuSchd2.exe "HSON" - "TOSHIBA Corporation" - %ProgramFiles%\TOSHIBA\TBS\HSON.exe "KeNotify" - ? - C:\Program Files\TOSHIBA\Utilities\KeNotify.exe "SmoothView" - "TOSHIBA Corporation" - %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe "StartCCC" - ? - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (File found, but it contains no detailed information) "TPwrMain" - "TOSHIBA Corporation" - %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE "WinampAgent" - "Nullsoft, Inc." - "C:\Program Files\Winamp\winampa.exe" [Print Monitors] -----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )----- "hpf3l70v.dll" - "Hewlett-Packard Company" - C:\Windows\system32\hpf3l70v.dll "PDFCreator" - ? - C:\Windows\system32\pdfcmnnt.dll (File found, but it contains no detailed information) [Services] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- "@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100" (WPFFontCache_v0400) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe "Automatisches LiveUpdate - Scheduler" (Automatisches LiveUpdate - Scheduler) - "Symantec Corporation" - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe "Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe "Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\sched.exe "ConfigFree Service" (CFSvcs) - "TOSHIBA CORPORATION" - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe "Firebird Server - MAGIX Instance" (FirebirdServerMAGIXInstance) - ? - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe (File not found) "Google Software Updater" (gusvc) - "Google" - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe "HP CUE DeviceDiscovery Service" (hpqddsvc) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll "hpqcxs08" (hpqcxs08) - "Hewlett-Packard Co." - C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll "InstallDriver Table Manager" (IDriverT) - "Macrovision Corporation" - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe "LiveUpdate" (LiveUpdate) - "Symantec Corporation" - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE "LiveUpdate Notice Service" (LiveUpdate Notice Service) - "Symantec Corporation" - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe "LiveUpdate Notice Service Ex" (LiveUpdate Notice Ex) - ? - "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (File not found) "Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe "Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE "Net Driver HPZ12" (Net Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZinw12.dll "Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE "Pml Driver HPZ12" (Pml Driver HPZ12) - "Hewlett-Packard" - C:\Windows\system32\HPZipm12.dll "ProtexisLicensing" (ProtexisLicensing) - ? - C:\Windows\system32\PSIService.exe "SBSD Security Center Service" (SBSDWSCService) - "Safer Networking Ltd." - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe "TOSHIBA Navi Support Service" (TNaviSrv) - "TOSHIBA Corporation" - C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe "TOSHIBA Optical Disc Drive Service" (TODDSrv) - "TOSHIBA Corporation" - C:\Windows\system32\TODDSrv.exe "TOSHIBA Power Saver" (TosCoSrv) - "TOSHIBA Corporation" - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe "Ulead Burning Helper" (UleadBurningHelper) - "Ulead Systems, Inc." - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe ===[ Logfile end ]=========================================[ Logfile end ]=== If You have questions or want to get some help, You can visit Online Solutions :: Index MBRCheck: MBRCheck, version 1.2.3 (c) 2010, AD Command-line: Windows Version: Windows Vista Home Premium Edition Windows Information: Service Pack 2 (build 6002), 32-bit Base Board Manufacturer: TOSHIBA BIOS Manufacturer: TOSHIBA System Manufacturer: TOSHIBA System Product Name: Satellite A210 Logical Drives Mask: 0x00000034 Kernel Drivers (total 150): 0x82219000 \SystemRoot\system32\ntkrnlpa.exe 0x825D3000 \SystemRoot\system32\hal.dll 0x8040C000 \SystemRoot\system32\kdcom.dll 0x80413000 \SystemRoot\system32\PSHED.dll 0x80424000 \SystemRoot\system32\BOOTVID.dll 0x8042C000 \SystemRoot\system32\CLFS.SYS 0x8046D000 \SystemRoot\system32\CI.dll 0x8054D000 \SystemRoot\system32\drivers\Wdf01000.sys 0x805C9000 \SystemRoot\system32\drivers\WDFLDR.SYS 0x8060E000 \SystemRoot\system32\drivers\acpi.sys 0x80654000 \SystemRoot\system32\drivers\WMILIB.SYS 0x8065D000 \SystemRoot\system32\drivers\msisadrv.sys 0x80665000 \SystemRoot\system32\DRIVERS\LPCFilter.sys 0x8066F000 \SystemRoot\system32\drivers\pci.sys 0x80696000 \SystemRoot\System32\drivers\partmgr.sys 0x806A5000 \SystemRoot\system32\DRIVERS\compbatt.sys 0x806A8000 \SystemRoot\system32\DRIVERS\BATTC.SYS 0x806B2000 \SystemRoot\system32\drivers\volmgr.sys 0x806C1000 \SystemRoot\System32\drivers\volmgrx.sys 0x8070B000 \SystemRoot\system32\drivers\pciide.sys 0x80712000 \SystemRoot\system32\drivers\PCIIDEX.SYS 0x80720000 \SystemRoot\system32\DRIVERS\pcmcia.sys 0x8074D000 \SystemRoot\System32\drivers\mountmgr.sys 0x8075D000 \SystemRoot\system32\drivers\atapi.sys 0x80765000 \SystemRoot\system32\drivers\ataport.SYS 0x80783000 \SystemRoot\system32\drivers\fltmgr.sys 0x807B5000 \SystemRoot\system32\drivers\fileinfo.sys 0x88003000 \SystemRoot\System32\Drivers\ksecdd.sys 0x88074000 \SystemRoot\system32\drivers\ndis.sys 0x8817F000 \SystemRoot\system32\drivers\msrpc.sys 0x881AA000 \SystemRoot\system32\drivers\NETIO.SYS 0x8820E000 \SystemRoot\System32\drivers\tcpip.sys 0x882F8000 \SystemRoot\System32\drivers\fwpkclnt.sys 0x88409000 \SystemRoot\System32\Drivers\Ntfs.sys 0x88519000 \SystemRoot\system32\drivers\volsnap.sys 0x88552000 \SystemRoot\system32\DRIVERS\TVALZ_O.SYS 0x88557000 \SystemRoot\system32\DRIVERS\tos_sps32.sys 0x885A2000 \SystemRoot\System32\Drivers\spldr.sys 0x885AA000 \SystemRoot\System32\Drivers\mup.sys 0x885B9000 \SystemRoot\System32\drivers\ecache.sys 0x885E0000 \SystemRoot\system32\drivers\disk.sys 0x88313000 \SystemRoot\system32\drivers\CLASSPNP.SYS 0x885F1000 \SystemRoot\system32\drivers\crcdisk.sys 0x8834C000 \SystemRoot\system32\DRIVERS\tunnel.sys 0x88357000 \SystemRoot\system32\DRIVERS\tunmp.sys 0x88360000 \SystemRoot\system32\DRIVERS\amdk8.sys 0x8C40C000 \SystemRoot\system32\DRIVERS\atikmdag.sys 0x8CAE4000 \SystemRoot\System32\drivers\dxgkrnl.sys 0x8CB84000 \SystemRoot\System32\drivers\watchdog.sys 0x88370000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0x8CB90000 \SystemRoot\system32\DRIVERS\Rtlh86.sys 0x8CE07000 \SystemRoot\system32\DRIVERS\athr.sys 0x8CEEE000 \SystemRoot\system32\DRIVERS\usbohci.sys 0x8CEF8000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0x8CF36000 \SystemRoot\system32\DRIVERS\usbehci.sys 0x8CF45000 \SystemRoot\system32\DRIVERS\tdcmdpst.sys 0x8CF49000 \SystemRoot\system32\DRIVERS\cdrom.sys 0x8CF61000 \SystemRoot\system32\DRIVERS\i8042prt.sys 0x8CF74000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0x8CF7F000 \SystemRoot\system32\DRIVERS\SynTP.sys 0x8CFB1000 \SystemRoot\system32\DRIVERS\USBD.SYS 0x8CFB3000 \SystemRoot\system32\DRIVERS\mouclass.sys 0x8CFBE000 \SystemRoot\system32\DRIVERS\CmBatt.sys 0x8CFC2000 \SystemRoot\system32\DRIVERS\tosrfec.sys 0x8CFC5000 \SystemRoot\system32\DRIVERS\ohci1394.sys 0x8CFD5000 \SystemRoot\system32\DRIVERS\1394BUS.SYS 0x8CBA4000 \SystemRoot\system32\drivers\tifm21.sys 0x8CFE3000 \SystemRoot\system32\DRIVERS\sdbus.sys 0x807C5000 \SystemRoot\system32\DRIVERS\msiscsi.sys 0x8D205000 \SystemRoot\system32\DRIVERS\storport.sys 0x8D246000 \SystemRoot\system32\DRIVERS\TDI.SYS 0x8D251000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0x8D268000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0x8D273000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0x8D296000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0x8D2A5000 \SystemRoot\system32\DRIVERS\raspptp.sys 0x8D2B9000 \SystemRoot\system32\DRIVERS\rassstp.sys 0x8D2CE000 \SystemRoot\system32\DRIVERS\termdd.sys 0x8D2DE000 \SystemRoot\system32\DRIVERS\swenum.sys 0x8D2E0000 \SystemRoot\system32\DRIVERS\ks.sys 0x8D30A000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0x8D314000 \SystemRoot\system32\DRIVERS\umbus.sys 0x8D321000 \SystemRoot\system32\DRIVERS\usbhub.sys 0x8D356000 \SystemRoot\System32\Drivers\NDProxy.SYS 0x8D367000 \SystemRoot\system32\drivers\HdAudio.sys 0x8D3A6000 \SystemRoot\system32\drivers\portcls.sys 0x8D3D3000 \SystemRoot\system32\drivers\drmk.sys 0x8D40C000 \SystemRoot\system32\DRIVERS\AGRSM.sys 0x8D528000 \SystemRoot\system32\drivers\modem.sys 0x8D605000 \SystemRoot\system32\drivers\RTKVHDA.sys 0x8D535000 \??\C:\Windows\system32\drivers\ACEDRV05.sys 0x8D7B4000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0x8D7BD000 \SystemRoot\System32\Drivers\Null.SYS 0x8D7C4000 \SystemRoot\System32\Drivers\Beep.SYS 0x8D7D4000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0x8D7DB000 \SystemRoot\System32\drivers\vga.sys 0x8D594000 \SystemRoot\System32\drivers\VIDEOPRT.SYS 0x8D7E7000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0x8D7EF000 \SystemRoot\system32\drivers\rdpencdd.sys 0x8D5B5000 \SystemRoot\System32\Drivers\Msfs.SYS 0x8D5C0000 \SystemRoot\System32\Drivers\Npfs.SYS 0x8D7F7000 \SystemRoot\System32\DRIVERS\rasacd.sys 0x8D5CE000 \SystemRoot\system32\DRIVERS\tdx.sys 0x8D5E4000 \SystemRoot\system32\DRIVERS\smb.sys 0x8DA09000 \SystemRoot\system32\drivers\afd.sys 0x8DA51000 \SystemRoot\System32\DRIVERS\netbt.sys 0x8DA83000 \SystemRoot\system32\DRIVERS\pacer.sys 0x8DA99000 \SystemRoot\system32\DRIVERS\netbios.sys 0x8DAA7000 \SystemRoot\system32\DRIVERS\wanarp.sys 0x8DABA000 \SystemRoot\system32\DRIVERS\ssmdrv.sys 0x8DAC0000 \SystemRoot\system32\DRIVERS\rdbss.sys 0x8DAFC000 \SystemRoot\system32\drivers\nsiproxy.sys 0x8DB06000 \SystemRoot\System32\Drivers\dfsc.sys 0x8DB1D000 \SystemRoot\system32\DRIVERS\avipbb.sys 0x8DB44000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0x8DB5B000 \SystemRoot\system32\DRIVERS\UVCFTR_S.SYS 0x8DB64000 \SystemRoot\System32\Drivers\usbvideo.sys 0x8DB85000 \SystemRoot\system32\DRIVERS\cdfs.sys 0x8DB9B000 \SystemRoot\System32\Drivers\crashdmp.sys 0x8DBA8000 \SystemRoot\System32\Drivers\dump_dumpata.sys 0x8DBB3000 \SystemRoot\System32\Drivers\dump_atapi.sys 0x96E20000 \SystemRoot\System32\win32k.sys 0x8DBBB000 \SystemRoot\System32\drivers\Dxapi.sys 0x8DBC5000 \SystemRoot\system32\DRIVERS\monitor.sys 0x97040000 \SystemRoot\System32\TSDDD.dll 0x97060000 \SystemRoot\System32\cdd.dll 0x8DBD4000 \SystemRoot\system32\drivers\luafv.sys 0x88334000 \SystemRoot\system32\DRIVERS\avgntflt.sys 0x99209000 \??\C:\Windows\system32\drivers\ACEDRV07.sys 0x9926B000 \??\C:\Windows\system32\drivers\ACEDRV08.sys 0x992D5000 \SystemRoot\system32\drivers\spsys.sys 0x99385000 \SystemRoot\system32\DRIVERS\lltdio.sys 0x99395000 \SystemRoot\system32\DRIVERS\nwifi.sys 0x993BF000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0x993C9000 \SystemRoot\system32\DRIVERS\rspndr.sys 0x9D007000 \SystemRoot\system32\drivers\HTTP.sys 0x9D074000 \SystemRoot\System32\DRIVERS\srvnet.sys 0x9D091000 \SystemRoot\system32\DRIVERS\bowser.sys 0x9D0AA000 \SystemRoot\System32\drivers\mpsdrv.sys 0x9D0BF000 \SystemRoot\system32\drivers\mrxdav.sys 0x9D0E0000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0x9D0FF000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys 0x9D138000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys 0x9D150000 \SystemRoot\System32\DRIVERS\srv2.sys 0x9D178000 \SystemRoot\System32\DRIVERS\srv.sys 0xA0202000 \??\C:\Windows\system32\drivers\acedrv11.sys 0xA0245000 \SystemRoot\system32\drivers\peauth.sys 0xA0323000 \SystemRoot\System32\Drivers\secdrv.SYS 0xA032D000 \SystemRoot\System32\drivers\tcpipreg.sys 0x777A0000 \Windows\System32\ntdll.dll Processes (total 74): 0 System Idle Process 4 System 484 C:\Windows\System32\smss.exe 564 csrss.exe 616 C:\Windows\System32\wininit.exe 624 csrss.exe 660 C:\Windows\System32\services.exe 680 C:\Windows\System32\lsass.exe 688 C:\Windows\System32\lsm.exe 720 C:\Windows\System32\winlogon.exe 876 C:\Windows\System32\svchost.exe 928 C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe 972 C:\Windows\System32\svchost.exe 1024 C:\Windows\System32\svchost.exe 1076 C:\Windows\System32\Ati2evxx.exe 1108 C:\Windows\System32\svchost.exe 1152 C:\Windows\System32\svchost.exe 1180 C:\Windows\System32\svchost.exe 1288 C:\Windows\System32\audiodg.exe 1312 C:\Windows\System32\svchost.exe 1332 C:\Windows\System32\SLsvc.exe 1356 C:\Windows\System32\svchost.exe 1532 C:\Windows\System32\svchost.exe 1640 C:\Windows\System32\Ati2evxx.exe 1880 C:\Windows\System32\spoolsv.exe 1916 C:\Program Files\Avira\AntiVir Desktop\sched.exe 1928 C:\Windows\System32\svchost.exe 2040 C:\Windows\System32\dwm.exe 200 C:\Windows\System32\taskeng.exe 360 C:\Windows\explorer.exe 1104 C:\Windows\System32\agrsmsvc.exe 1052 C:\Program Files\Avira\AntiVir Desktop\avguard.exe 1908 C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe 2072 C:\Program Files\Avira\AntiVir Desktop\avshadow.exe 2140 C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe 2188 C:\Windows\System32\svchost.exe 2216 C:\Windows\RtHDVCpl.exe 2236 C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe 2280 C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe 2412 C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe 2464 C:\Windows\System32\svchost.exe 2492 C:\Windows\System32\PSIService.exe 2580 C:\Windows\System32\svchost.exe 2612 C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe 2668 C:\Windows\System32\TODDSrv.exe 2704 C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe 2780 C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe 2804 C:\Windows\System32\svchost.exe 2828 C:\Windows\System32\SearchIndexer.exe 2912 C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe 3696 C:\Program Files\TOSHIBA\Utilities\KeNotify.exe 3712 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 3720 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 3752 C:\Windows\WindowsMobile\wmdSync.exe 3764 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe 3780 C:\Windows\vVX1000.exe 3788 C:\Program Files\Synaptics\SynTP\SynToshiba.exe 3796 C:\Program Files\Winamp\winampa.exe 3804 C:\Program Files\HP\HP Software Update\hpwuschd2.exe 3812 C:\Windows\ehome\ehtray.exe 3824 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe 3836 C:\Program Files\Windows Media Player\wmpnscfg.exe 3884 C:\Windows\System32\svchost.exe 4040 C:\Windows\ehome\ehmsas.exe 4068 C:\Program Files\Windows Media Player\wmpnetwk.exe 1224 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe 3304 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe 1372 C:\Windows\System32\svchost.exe 2032 C:\Windows\System32\wuauclt.exe 808 C:\Program Files\Mozilla Thunderbird\thunderbird.exe 516 C:\Program Files\Mozilla Firefox\firefox.exe 5308 C:\Program Files\Mozilla Firefox\plugin-container.exe 5000 E:\Desktop\trojanerboard\MBRCheck.exe 4428 C:\Windows\System32\conime.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`5dd00000 (NTFS) \\.\E: --> \\.\PhysicalDrive0 at offset 0x00000017`a7c00000 (NTFS) PhysicalDrive0 Model Number: TOSHIBAMK2046GSX, Rev: LB013M Size Device Name MBR Status -------------------------------------------- 186 GB \\.\PhysicalDrive0 Windows 2008 MBR code detected SHA1: 8DF43F2BDE2D9451948FA14B5279969C777A7979 Done! Mal wieder danke und schönen Sonntag noch! Philz |
|
31.07.2011, 15:06
| #17 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Redirecting zu ungewollten websites beim Surfen (Inet geht nicht mehr nach Defogger-scan) Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
__________________Denk dran beide Tools zu updaten vor dem Scan!! Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ |
|
| Themen zu Redirecting zu ungewollten websites beim Surfen (Inet geht nicht mehr nach Defogger-scan) |
| anhang, antivir, antwort, bild, csrss.exe, fehlermeldung, friert, geht nicht mehr, internet, maus, meldet, neustart, nicht gefunden, nicht mehr, notebook, problem, proxy, scan, scannen, surfen, ungewollte, update, updaten, verbindung, warum, websites, youtube |
Linear-Darstellung
