![]() |
|
Plagegeister aller Art und deren Bekämpfung: Google leitet auf "abnow" weiterWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
![]() | ![]() Google leitet auf "abnow" weiter Hallo zusammen, habe seit gestern das selbe Problem wie viele hier im Forum: Google leitet auf abnow weiter. Hab in anderen Threads schon gelesen das der Laptop in diesem Fall neu aufgesetzt werden muss, wollte vorher aber noch zur Sicherheit meine Logfiles posten, wobei ich allerdings soweit alles an Programmen deinstalliert hab und meine persönlichen Daten weitesgehend zusammengefasst hab. Nutze diesen Laptop für alle Bereiche, darunter auch Online-banking, Shoppen, Studium. Mein Betriebssystem ist Windows 7 Home Premium 64-bit Habe schon Defogger benutzt und mit dds zwei Logfiles erstellt: . DDS (Ver_2011-08-26.01) - NTFSAMD64 Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_29 Run by Daniel at 11:26:49 on 2012-03-16 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3957.2615 [GMT 1:00] . SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\atiesrxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\atieclxx.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\taskeng.exe C:\Windows\System32\spoolsv.exe C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Windows\system32\svchost.exe -k bthsvcs C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe C:\Program Files\Fujitsu\PSUtility\PSUService.exe C:\Windows\system32\taskeng.exe C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\Dwm.exe C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe C:\Windows\system32\taskhost.exe C:\Windows\explorer.exe C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE C:\Windows\servicing\TrustedInstaller.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Fujitsu\PSUtility\TrayManager.exe C:\Program Files\Fujitsu\Application Panel\QuickTouch.exe C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe C:\Program Files\CSR\Bluetooth Feature Pack 5.0\ConMgr.exe C:\Program Files\CSR\Bluetooth Feature Pack 5.0\CSRSkype.exe C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files (x86)\Fujitsu\FUJ02E3\FUJ02E3.exe C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe C:\Program Files\Fujitsu\Application Panel\BtnHndHkb.exe C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin C:\Fujitsu\Programs\DeskUpdate\DeskUpdateNotifier.exe C:\Program Files (x86)\Winamp\winampa.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Stardock\ObjectDockFree\Dock64.exe C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe C:\Windows\system32\sppsvc.exe C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\system32\conhost.exe C:\Windows\SysWOW64\cscript.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2736476 uDefault_Page_URL = hxxp://ts.fujitsu.com uURLSearchHooks: GIGA Deutsch Toolbar: {1ce76c93-a797-4ca2-ab3c-f4a6cfba3440} - C:\Program Files (x86)\GIGA_Deutsch\prxtbGIG0.dll uURLSearchHooks: H - No File mURLSearchHooks: GIGA Deutsch Toolbar: {1ce76c93-a797-4ca2-ab3c-f4a6cfba3440} - C:\Program Files (x86)\GIGA_Deutsch\prxtbGIG0.dll mWinlogon: Userinit=userinit.exe uWinlogon: Shell=C:\Users\Daniel\AppData\Local\f14b02c9\X BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll BHO: GIGA Deutsch Toolbar: {1ce76c93-a797-4ca2-ab3c-f4a6cfba3440} - C:\Program Files (x86)\GIGA_Deutsch\prxtbGIG0.dll BHO: {1ED16E0A-E8C4-40A0-8BC2-79485D21F796} - No File BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO: Windows Live Anmelde-Hilfsprogramm: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll TB: GIGA Deutsch Toolbar: {1ce76c93-a797-4ca2-ab3c-f4a6cfba3440} - C:\Program Files (x86)\GIGA_Deutsch\prxtbGIG0.dll TB: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File uRun: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe uRun: [Spotify] "C:\Users\Daniel\AppData\Roaming\Spotify\spotify.exe" /uri spotify:autostart mRun: [LoadFUJ02E3] C:\Program Files (x86)\Fujitsu\FUJ02E3\FUJ02E3.exe mRun: [IndicatorUtility] C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe mRun: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0" mRun: [YouCam Mirror Tray icon] "C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe" /s mRun: [DeskUpdateNotifier] "c:\Fujitsu\Programs\DeskUpdate\DeskUpdateNotifier.exe" mRun: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun: [TkBellExe] "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot mRun: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun StartupFolder: C:\Users\Daniel\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\startup\OPENOF~1.LNK - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe StartupFolder: C:\Users\Daniel\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\startup\STARDO~1.LNK - C:\Program Files (x86)\Stardock\ObjectDockFree\ObjectDock.exe mPolicies-explorer: NoActiveDesktop = 1 (0x1) mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) mPolicies-system: PromptOnSecureDesktop = 0 (0x0) IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll LSP: mswsock.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab TCP: DhcpNameServer = 192.168.178.1 TCP: Interfaces\{20D1B738-EE91-42B4-8772-54003EFC2225} : DhcpNameServer = 192.168.178.1 TCP: Interfaces\{20D1B738-EE91-42B4-8772-54003EFC2225}\B41647A756E62657E6B65627 : DhcpNameServer = 192.168.0.1 TCP: Interfaces\{20D1B738-EE91-42B4-8772-54003EFC2225}\C456E616 : DhcpNameServer = 192.168.0.1 TCP: Interfaces\{20D1B738-EE91-42B4-8772-54003EFC2225}\D416E65756C61602845696D602E45647A7 : DhcpNameServer = 192.168.178.1 TCP: Interfaces\{20D1B738-EE91-42B4-8772-54003EFC2225}\D45402845696D6E65647A7 : DhcpNameServer = 192.168.178.1 TCP: Interfaces\{20D1B738-EE91-42B4-8772-54003EFC2225}\D4540284F6D656E65647 : DhcpNameServer = 192.168.178.1 TCP: Interfaces\{20D1B738-EE91-42B4-8772-54003EFC2225}\F6234435C4 : DhcpNameServer = 192.168.1.1 193.189.244.194 193.189.244.202 Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll SubSystems: Windows = basesrv,1 winsrv:UserServerDllInitialization,3 consrv:ConServerDllInitialization,2 sxssrv,4 {18DF081C-E8AD-4283-A596-FA578C2EBDC3} {1ce76c93-a797-4ca2-ab3c-f4a6cfba3440} BHO-X64: {1ED16E0A-E8C4-40A0-8BC2-79485D21F796} - No File {3049C3E9-B461-4BC5-8870-4C09146192CA} {53707962-6F74-2D53-2644-206D7942484F} BHO-X64: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File {9030D464-4C02-4ABF-8ECC-5164760863C6} {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} {DBC80044-A445-435b-BC74-9C25C1C588A9} {1ce76c93-a797-4ca2-ab3c-f4a6cfba3440} TB-X64: {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File TB-X64: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File mRun-x64: [LoadFUJ02E3] C:\Program Files (x86)\Fujitsu\FUJ02E3\FUJ02E3.exe mRun-x64: [IndicatorUtility] C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe mRun-x64: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0" mRun-x64: [YouCam Mirror Tray icon] "C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe" /s mRun-x64: [DeskUpdateNotifier] "c:\Fujitsu\Programs\DeskUpdate\DeskUpdateNotifier.exe" mRun-x64: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" mRun-x64: [TkBellExe] "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot mRun-x64: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun Hosts: 127.0.0.1 www.spywareinfo.com . ================= FIREFOX =================== . FF - ProfilePath - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\vquazx2k.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2736476&SearchSource=3&q={searchTerms} FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/ FF - prefs.js: network.proxy.type - 0 FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrlui.dll FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll FF - plugin: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll . ============= SERVICES / DRIVERS =============== . R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?] R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-1-3 63928] R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?] R2 cpuz134;cpuz134;\??\C:\Windows\system32\drivers\cpuz134_x64.sys --> C:\Windows\system32\drivers\cpuz134_x64.sys [?] R2 cvhsvc;Client Virtualization Handler;C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE [2010-2-28 821664] R2 PowerSavingUtilityService;PowerSavingUtilityService;C:\Program Files\Fujitsu\PSUtility\PSUService.exe [2009-7-30 63336] R2 sftlist;Application Virtualization Client;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-2 483688] R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-17 2314240] R2 VFPRadioSupportService;Unterstützung für Bluetooth-Funktionen;C:\Program Files\CSR\Bluetooth Feature Pack 5.0\VFPRadioSupportService.exe [2009-12-24 145840] R2 WirelessSelectorService;WirelessSelectorService;C:\Program Files\Fujitsu\WirelessSelector\WSUService.exe [2009-7-21 62312] R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?] R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?] R3 AtiHDAudioService;AMD Function Driver for HD Audio Service;C:\Windows\system32\drivers\AtihdW76.sys --> C:\Windows\system32\drivers\AtihdW76.sys [?] R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver;C:\Windows\system32\DRIVERS\FUJ02E3.sys --> C:\Windows\system32\DRIVERS\FUJ02E3.sys [?] R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?] R3 Sftfs;Sftfs;C:\Windows\system32\DRIVERS\Sftfslh.sys --> C:\Windows\system32\DRIVERS\Sftfslh.sys [?] R3 Sftplay;Sftplay;C:\Windows\system32\DRIVERS\Sftplaylh.sys --> C:\Windows\system32\DRIVERS\Sftplaylh.sys [?] R3 Sftredir;Sftredir;C:\Windows\system32\DRIVERS\Sftredirlh.sys --> C:\Windows\system32\DRIVERS\Sftredirlh.sys [?] R3 Sftvol;Sftvol;C:\Windows\system32\DRIVERS\Sftvollh.sys --> C:\Windows\system32\DRIVERS\Sftvollh.sys [?] R3 sftvsa;Application Virtualization Service Agent;C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-2 209768] R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] S2 SBSDWSCService;SBSD Security Center Service;C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2011-3-19 1153368] S3 osppsvc;Office Software Protection Platform;C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-1-9 4925184] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys --> C:\Windows\system32\Drivers\RtsUStor.sys [?] S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?] S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?] . =============== Created Last 30 ================ . 2012-03-15 19:01:09 -------- d-----w- C:\Windows\System32\IO 2012-03-15 18:58:31 51496 ----a-w- C:\Windows\System32\drivers\stflt.sys 2012-03-15 10:26:38 5559152 ----a-w- C:\Windows\System32\ntoskrnl.exe 2012-03-15 10:26:37 3968368 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe 2012-03-15 10:26:37 3913584 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe 2012-03-15 10:23:19 3145728 ----a-w- C:\Windows\System32\win32k.sys 2012-03-15 10:23:18 1544192 ----a-w- C:\Windows\System32\DWrite.dll 2012-03-15 10:23:18 1077248 ----a-w- C:\Windows\SysWow64\DWrite.dll 2012-03-15 10:23:16 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe 2012-03-15 10:23:16 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll 2012-03-15 10:23:16 77312 ----a-w- C:\Windows\System32\rdpwsx.dll 2012-03-15 10:23:16 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys 2012-03-15 10:23:16 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys 2012-03-15 10:23:16 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll 2012-03-15 10:23:16 1031680 ----a-w- C:\Windows\System32\rdpcore.dll 2012-03-14 22:29:32 0 --sha-w- C:\Windows\System32\dds_log_ad13.cmd 2012-03-14 22:28:16 -------- d-sh--w- C:\Users\Daniel\AppData\Local\f14b02c9 2012-03-03 12:04:54 -------- d-----w- C:\Users\Daniel\AppData\Local\Divinity 2 2012-02-25 20:32:08 -------- d-----w- C:\Users\Daniel\AppData\Roaming\LolClient 2012-02-25 19:51:07 68616 ----a-w- C:\Windows\SysWow64\XAPOFX1_1.dll 2012-02-25 19:51:07 509448 ----a-w- C:\Windows\SysWow64\XAudio2_2.dll 2012-02-25 19:51:07 467984 ----a-w- C:\Windows\SysWow64\d3dx10_39.dll 2012-02-25 19:51:07 1493528 ----a-w- C:\Windows\SysWow64\D3DCompiler_39.dll 2012-02-25 19:51:06 3851784 ----a-w- C:\Windows\SysWow64\D3DX9_39.dll 2012-02-25 18:54:39 8643640 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{84C10E51-F503-48A4-963F-96F483361DA7}\mpengine.dll 2012-02-25 18:49:59 690688 ----a-w- C:\Windows\SysWow64\msvcrt.dll 2012-02-25 18:49:59 634880 ----a-w- C:\Windows\System32\msvcrt.dll 2012-02-25 18:49:59 515584 ----a-w- C:\Windows\System32\timedate.cpl 2012-02-25 18:49:59 478720 ----a-w- C:\Windows\SysWow64\timedate.cpl 2012-02-25 18:43:44 -------- d-----w- C:\Program Files (x86)\Pando Networks 2012-02-23 19:28:23 33856 ---ha-w- C:\Windows\System32\hamachi.sys . ==================== Find3M ==================== . 2012-03-14 22:29:55 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl 2012-01-29 04:10:42 279656 ------w- C:\Windows\System32\MpSigStub.exe 2012-01-04 10:44:20 509952 ----a-w- C:\Windows\System32\ntshrui.dll 2012-01-04 08:58:41 442880 ----a-w- C:\Windows\SysWow64\ntshrui.dll 2011-12-29 14:25:50 530488 ----a-w- C:\Windows\System32\drivers\sptd.sys 2011-12-28 03:59:24 498688 ----a-w- C:\Windows\System32\drivers\afd.sys 2006-05-03 10:06:54 163328 --sha-r- C:\Windows\SysWOW64\flvDX.dll 2007-02-21 11:47:16 31232 --sha-r- C:\Windows\SysWOW64\msfDX.dll 2008-03-16 13:30:52 216064 --sha-r- C:\Windows\SysWOW64\nbDX.dll . ============= FINISH: 11:29:17,35 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows 7 Home Premium Boot Device: \Device\HarddiskVolume1 Install Date: 17.12.2010 17:56:15 System Uptime: 16.03.2012 11:23:14 (0 hours ago) . Motherboard: FUJITSU | | FJNBB0B Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz | On Board | 2399/133mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 50 GiB total, 13,831 GiB free. D: is FIXED (NTFS) - 246 GiB total, 175,299 GiB free. F: is CDROM (UDF) . ==== Disabled Device Manager Items ============= . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Realtek PCIe GBE Family Controller Device ID: PCI\VEN_10EC&DEV_8168&SUBSYS_15B110CF&REV_06\4&2FF4F79E&0&00E5 Manufacturer: Realtek Name: Realtek PCIe GBE Family Controller PNP Device ID: PCI\VEN_10EC&DEV_8168&SUBSYS_15B110CF&REV_06\4&2FF4F79E&0&00E5 Service: RTL8167 . Class GUID: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Description: USB-Videogerät Device ID: USB\VID_090C&PID_37B6&MI_00\7&1D9DDFE8&0&0000 Manufacturer: Microsoft Name: USB 2.0 PC Cam PNP Device ID: USB\VID_090C&PID_37B6&MI_00\7&1D9DDFE8&0&0000 Service: usbvideo . ==== System Restore Points =================== . RP147: 15.03.2012 20:17:40 - Spyware Terminator 2012 (15.03.2012 20:17:39) RP148: 15.03.2012 21:29:09 - Entfernt Serious Sam: Der erste Kontakt RP149: 15.03.2012 21:29:56 - Entfernt Grand Theft Auto San Andreas RP150: 15.03.2012 21:32:08 - Entfernt The Sims 3 RP151: 15.03.2012 22:01:24 - Removed ArgusLab RP152: 15.03.2012 22:04:05 - Removed eBay RP153: 15.03.2012 22:05:16 - Removed Google Earth. RP154: 15.03.2012 22:07:40 - Entfernt League of Legends RP155: 15.03.2012 22:09:19 - Removed LogMeIn Hamachi RP156: 15.03.2012 22:10:51 - RESIDENT EVIL 5 ‚ð휂µ‚Ü‚µ‚½B . ==== Installed Programs ====================== . Adobe Reader X (10.1.2) - Deutsch AIS Connect BloodRayne 2 Catalyst Control Center - Branding Catalyst Control Center Graphics Previews Common Catalyst Control Center InstallProxy Catalyst Control Center Localization All Catalyst Pro Control Center CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish CyberLink YouCam DeskUpdate 4.11 Fujitsu Hotkey Utility Fujitsu MobilityCenter Extension Utility Fujitsu System Extension Utility GIGA Deutsch Toolbar Intel(R) Management Engine Components Java Auto Updater Java(TM) 6 Update 29 Junk Mail filter update LifeBook Application Panel Microsoft Choice Guard Microsoft Games for Windows - LIVE Microsoft Games for Windows - LIVE Redistributable Microsoft Office 2010 Microsoft Office Klick-und-Los 2010 Microsoft Office Starter 2010 - Deutsch Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft WSE 3.0 Runtime Mozilla Firefox 10.0.2 (x86 de) Mozilla Thunderbird 10.0.2 (x86 de) Mp3tag v2.47b MSVCRT NVIDIA PhysX ObjectDock Free OpenOffice.org 3.3 PDFCreator Power Saving Utility RealNetworks - Microsoft Visual C++ 2008 Runtime RealPlayer Realtek High Definition Audio Driver Realtek USB 2.0 Card Reader RealUpgrade 1.1 Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870) Skype Click to Call Skype™ 5.5 Spybot - Search & Destroy SystemDiagnostics TIPP10 Version 2.1.0 TreeSize Free V2.5 Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) v2011.build.46 VLC media player 1.1.9 Winamp Winamp Erkennungs-Plug-in Winamp2ICQ Now Playing v0.6 Windows Live-Uploadtool Windows Live Anmelde-Assistent Windows Live Call Windows Live Communications Platform Windows Live Essentials Windows Live Fotogalerie Windows Live Mail Windows Live Messenger Windows Live Movie Maker Windows Live Sync Windows Live Writer Wireless Selector XMedia Recode 2.3.0.4 XnView 1.98.1 Zip Motion Block Video codec (Remove Only) . ==== End Of File =========================== Mit freundlichen Grüßen Goibniu |
Themen zu Google leitet auf "abnow" weiter |
.com, 4d36e972-e325-11ce-bfc1-08002be10318, acrobat update, adobe, defender, device driver, download, e-banking, explorer, fehlermeldung 80073712, grand theft auto, hotkey, logfiles, mozilla, neu aufgesetzt, notification, plug-in, problem, programme, realplayer, realtek, sicherheit, software, spotify, svchost.exe, usb 2.0, windows, windows 7 home, windows 7 home premium, wmp |