![]() |
|
Log-Analyse und Auswertung: EXP/2011 - Gmer funktioniert nur bis ShadowcopyWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() EXP/2011 - Gmer funktioniert nur bis Shadowcopy Hallo. Habe, seitdem ich auf FF11.0 updatete und einen neuen FLV-Player runter lud, das Problem, dass bei FF ein Scriptfehler beim öffnen neuer Tabs und Seiten angezeigt wird. Den FLV hab ich wieder runter geschmissen weil er nicht lief. Und seit dem isses im Argen. :-( Vorhin ließ ich Avira laufen, und der fand dann auch 9X was. EXP/2011-3544.ES EXP/11-3544.CV.2.B usw. Hier die ersten 2 Logs: . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31 Run by Joerg at 17:07:05 on 2012-03-29 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.49.1031.18.3069.1748 [GMT 2:00] . AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C} SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k rpcss C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\nvvsvc.exe C:\Windows\System32\spoolsv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Windows\System32\svchost.exe -k Akamai C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe C:\Windows\system32\IoctlSvc.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\WUDFHost.exe C:\Program Files\Avira\AntiVir Desktop\avshadow.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Real\RealPlayer\Update\realsched.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Windows\ehome\ehtray.exe C:\Program Files\phonostar-Player\phonostarTimer.exe C:\Windows\ehome\ehmsas.exe C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe C:\PROGRA~1\OPENOF~1.ORG\program\soffice.bin C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\PROGRA~1\ORBITD~1\orbitdm.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Picasa2\PicasaMediaDetector.exe C:\PROGRA~1\Logitech\DESKTO~1\8876480\Program\LOGITE~1.EXE C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Windows\system32\conime.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uSearch Page = hxxp://de.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*hxxp://de.search.yahoo.com uStart Page = hxxp://search.orbitdownloader.com uDefault_Page_URL = hxxp://www.msn.de/ mStart Page = hxxp://de.yahoo.com mDefault_Page_URL = hxxp://de.yahoo.com mDefault_Search_URL = hxxp://de.rd.yahoo.com/customize/ie/defaults/su/msgr9/*hxxp://de.search.yahoo.com mSearch Page = hxxp://de.rd.yahoo.com/customize/ie/defaults/sp/msgr9/*hxxp://de.search.yahoo.com uSearchURL,(Default) = hxxp://de.rd.yahoo.com/customize/ie/defaults/su/msgr9/*hxxp://de.search.yahoo.com BHO: Octh Class: {000123b4-9b42-4900-b3f7-f4b073efc214} - c:\program files\orbitdownloader\orbitcth.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: CBAbzockschutz.InitToolbarBHO: {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - mscoree.dll BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll TB: COMPUTERBILD-Abzockschutz: {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - mscoree.dll TB: Grab Pro: {c55bbcd6-41ad-48ad-9953-3609c48eacc7} - c:\program files\orbitdownloader\GrabPro.dll uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe uRun: [Google Update] "c:\users\joerg\appdata\local\google\update\GoogleUpdate.exe" /c uRun: [phonostarTimer] c:\program files\phonostar-player\phonostarTimer.exe uRun: [phonostar-PlayerTimer] "c:\program files\phonostar-player\phonostarTimer.exe" mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [IAAnotif] "c:\program files\intel\intel matrix storage manager\Iaanotif.exe" mRun: [NBKeyScan] "c:\program files\nero\nero8\nero backitup\NBKeyScan.exe" mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe" mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: &Download by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/201 IE: &Grab video by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/204 IE: Do&wnload selected by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/203 IE: Down&load all by Orbit - c:\program files\orbitdownloader\orbitmxt.dll/202 IE: {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-25/4 IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab TCP: DhcpNameServer = 192.168.2.1 TCP: Interfaces\{29F68500-46D3-43DD-8128-FB8F4ABDF1DA} : DhcpNameServer = 192.168.2.1 Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\logitech\desktop messenger\8876480\program\GAPlugProtocol-8876480.dll Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll . ================= FIREFOX =================== . FF - ProfilePath - c:\users\joerg\appdata\roaming\mozilla\firefox\profiles\a3z33e3u.default\ FF - prefs.js: browser.search.defaulturl - FF - prefs.js: browser.startup.homepage - hxxp://www.facebook.com/ FF - prefs.js: keyword.URL - chrome://browser-region/locale/region.properties FF - component: c:\program files\orbitdownloader\addons\oneclickyoutubedownloader\components\GrabXpcom.dll FF - component: c:\programdata\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordext.dll FF - component: c:\programdata\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordlegacyext.dll FF - component: c:\users\joerg\appdata\roaming\mozilla\firefox\profiles\a3z33e3u.default\extensions\piclens@cooliris.com\components\cooliris.dll FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll FF - plugin: c:\program files\adobe\reader 9.0\reader\air\nppdf32.dll FF - plugin: c:\program files\divx\divx ovs helper\npovshelper.dll FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll FF - plugin: c:\program files\google\update\1.3.21.111\npGoogleUpdate3.dll FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll FF - plugin: c:\program files\google\update\1.3.21.65\npGoogleUpdate3.dll FF - plugin: c:\program files\google\update\1.3.21.69\npGoogleUpdate3.dll FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll FF - plugin: c:\program files\google\update\1.3.21.99\npGoogleUpdate3.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\java\jre6\bin\plugin2\npdeployJava1.dll FF - plugin: c:\program files\java\jre6\bin\plugin2\npjp2.dll FF - plugin: c:\program files\microsoft silverlight\2.0.31005.0\npctrlui.dll FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dv.dll FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll FF - plugin: c:\program files\phonostar-player\npphonostarDetectNP.dll FF - plugin: c:\programdata\id software\quakelive\npquakezero.dll FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprpchromebrowserrecordext.dll FF - plugin: c:\programdata\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll FF - plugin: c:\users\joerg\appdata\local\google\update\1.3.21.111\npGoogleUpdate3.dll FF - plugin: c:\users\joerg\appdata\roaming\mozilla\firefox\profiles\a3z33e3u.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll . ============= SERVICES / DRIVERS =============== . R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [2011-10-17 36000] R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2012-1-3 63928] R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2008-1-21 21504] R2 AntiVirSchedulerService;Avira Planer;c:\program files\avira\antivir desktop\sched.exe [2011-10-17 86224] R2 AntiVirService;Avira Echtzeit Scanner;c:\program files\avira\antivir desktop\avguard.exe [2011-10-17 110032] R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2011-10-17 74640] R2 FontCache;Windows-Dienst für Schriftartencache;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2010-10-16 369256] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-9-14 136176] S3 gupdatem;Google Update-Dienst (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2010-9-14 136176] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] . =============== Created Last 30 ================ . 2012-03-27 10:16:48 6582328 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{085a4ffd-0979-4a33-8b0a-97df72242790}\mpengine.dll 2012-03-22 10:43:14 -------- d-----w- c:\users\joerg\appdata\local\Flash Video Downloader 2.5 2012-03-22 10:39:35 -------- d-----w- c:\users\joerg\appdata\local\Opera 2012-03-18 19:27:23 592824 ----a-w- c:\program files\mozilla firefox\gkmedias.dll 2012-03-18 19:27:23 44472 ----a-w- c:\program files\mozilla firefox\mozglue.dll 2012-03-16 22:26:51 -------- d-----w- c:\users\joerg\appdata\roaming\FreeVideoConverter 2012-03-16 22:26:51 -------- d-----w- c:\program files\Free Video Converter 2012-03-14 09:24:26 -------- d-----w- c:\program files\phonostar-Player 2012-03-14 05:55:07 2044416 ----a-w- c:\windows\system32\win32k.sys 2012-03-14 05:55:05 219648 ----a-w- c:\windows\system32\d3d10_1core.dll 2012-03-14 05:55:05 1172480 ----a-w- c:\windows\system32\d3d10warp.dll 2012-03-14 05:55:05 1068544 ----a-w- c:\windows\system32\DWrite.dll 2012-03-14 05:55:04 683008 ----a-w- c:\windows\system32\d2d1.dll 2012-03-14 05:55:04 160768 ----a-w- c:\windows\system32\d3d10_1.dll 2012-03-14 05:54:45 2409784 ----a-w- c:\program files\windows mail\OESpamFilter.dat 2012-03-14 05:54:41 613376 ----a-w- c:\windows\system32\rdpencom.dll 2012-03-14 05:54:41 180736 ----a-w- c:\windows\system32\drivers\rdpwd.sys 2012-03-13 21:18:39 -------- d-----w- C:\divx 2012-03-13 19:04:36 -------- d-----w- c:\users\joerg\appdata\roaming\XMedia Recode 2012-03-13 15:34:09 -------- d-----w- c:\program files\common files\PX Storage Engine 2012-03-13 15:33:44 -------- d-----w- c:\program files\common files\DivX Shared 2012-03-13 15:32:38 -------- d-----w- c:\program files\DivX 2012-03-13 15:31:58 -------- d-----w- c:\programdata\DivX 2012-03-13 12:01:26 -------- d-----w- c:\program files\XMedia Recode 2012-03-12 22:06:16 -------- d-----w- c:\users\joerg\appdata\roaming\Ashampoo 2012-03-02 18:08:27 680448 ----a-w- c:\windows\system32\msvcrt.dll . ==================== Find3M ==================== . 2012-03-14 07:36:35 472808 ----a-w- c:\windows\system32\deployJava1.dll 2012-03-03 07:07:13 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-02-23 08:18:36 237072 ------w- c:\windows\system32\MpSigStub.exe 2012-01-04 00:48:42 354176 ----a-w- c:\windows\system32\DivXControlPanelApplet.cpl . ============= FINISH: 17:07:18,93 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft® Windows Vista™ Home Premium Boot Device: \Device\HarddiskVolume1 Install Date: 12.04.2009 15:45:10 System Uptime: 29.03.2012 14:08:37 (3 hours ago) . Motherboard: MICRO-STAR INTERNATIONAL CO., LTD | | MS-7502 Processor: Intel(R) Core(TM)2 Duo CPU E7300 @ 2.66GHz | Socket 775 | 2667/266mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 577 GiB total, 243,757 GiB free. D: is FIXED (FAT32) - 20 GiB total, 11,486 GiB free. E: is Removable F: is Removable G: is Removable H: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: {eec5ad98-8080-425f-922a-dabf3de3f69a} Description: Windows Mobile-based device Device ID: ROOT\WPD\0000 Manufacturer: (Standard Windows Mobile devices) Name: Windows Mobile-based device PNP Device ID: ROOT\WPD\0000 Service: WUDFRd . ==== System Restore Points =================== . RP899: 14.03.2012 08:05:32 - Windows Update RP900: 14.03.2012 08:35:04 - Installed Java(TM) 6 Update 31 RP901: 16.03.2012 10:20:38 - Windows Update RP902: 19.03.2012 17:56:39 - Turbo Lister 2 wurde installiert. RP903: 20.03.2012 07:10:56 - Windows Update RP905: 21.03.2012 15:17:40 - Entfernt Oblivion RP906: 23.03.2012 07:15:09 - Windows Update RP907: 27.03.2012 12:15:42 - Windows Update . ==== Installed Programs ====================== . Adobe AIR Adobe Flash Player 10 ActiveX Adobe Flash Player 11 Plugin Adobe Reader X (10.1.2) - Deutsch Adobe Shockwave Player 11.6 Akamai NetSession Interface Service Anti-Twin (Installation 14.04.2010) AnyDVD Apple Application Support Apple Software Update Avira Free Antivirus CCleaner ClipGrab 3.2.0.5 CloneDVD2 COMPUTERBILD-Abzockschutz DHTML Editing Component DivX-Setup Flash Video Downloader 2.5 Free RM to MP3 Converter 1.12 Free Video Converter V 3.1 Glary Utilities 2.41.0.1358 Google Chrome Google Earth Google Earth Plug-in Google Update Helper Hellfire Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Intel(R) Matrix Storage Manager Intel(R) Network Connections 13.0.42.0 Java Auto Updater Java(TM) 6 Update 22 Java(TM) 6 Update 31 Logitech Desktop Messenger Logitech QuickCam-Treiberpaket Logitech Updater Logitech Vid HD Logitech Webcam Software Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Security Update (KB2656353) Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Office PowerPoint Viewer 2007 (German) Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [DEU] Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2005 Redistributable - KB2467175 Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Works mIRC Mozilla Firefox 11.0 (x86 de) Mozilla Thunderbird 11.0 (x86 de) MSXML 4.0 SP2 (KB936181) MSXML 4.0 SP2 (KB941833) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) Nero 8 Essentials neroxml Network Stumbler 0.4.0 (remove only) NVIDIA 3D Vision Treiber 260.99 NVIDIA Grafiktreiber 260.99 NVIDIA Install Application NVIDIA PhysX NVIDIA PhysX-Systemsoftware 9.10.0514 NVIDIA Stereoscopic 3D Driver NVIDIA Systemsteuerung 260.99 OpenAL OpenOffice.org 3.3 Orbit Downloader Pando Media Booster phonostar-Player Version 3.02.5 PowerDVD PowerProducer PVSonyDll Quake Live Mozilla Plugin QuickTime RealNetworks - Microsoft Visual C++ 2008 Runtime RealPlayer RealUpgrade 1.1 Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870) Skype Click to Call Skype™ 5.5 swMSM Turbo Lister 2 Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) VC80CRTRedist - 8.0.50727.6195 VCRedistSetup Vista Codec Package Visual C++ 9.0 CRT (x86) WinSXS MSM Windows Live Fotogalerie Windows Live installer Windows Live Mail Windows Live Messenger Windows Live Sign-in Assistant Windows Live Writer Windows Media Player Firefox Plugin WinRAR WinZip 12.0 XMedia Recode 3.0.8.1 XnView 1.97.8 Xvid 1.2.2 final uninstall Yahoo! Messenger . ==== End Of File =========================== Gmer hab ich 3 mal runter geladen und es funktioniert nicht mehr sobald es zu Shadowcopy kommt... Ein Bild davon ist im Anhang. Schlechte Chancen? Ich schreib vom infiziertem Rechner aus... Ich hab natürlich KEINE Datensicherung. Kann ich Dokumente, Bilder, Musik, Videos noch irgendwie retten? Muss ich SOFORT meine PW´s ändern im I-Net-Caffee? Dank im voraus und LG |
Themen zu EXP/2011 - Gmer funktioniert nur bis Shadowcopy |
acrobat update, adobe, antivir, avira, cpu, defender, desktop, explorer, fehler, firefox, flash player, fontcache, funktioniert nicht mehr, google, google earth, helper, home, installation, mozilla, mp3, musik, nvidia, picasa, plug-in, problem, security, security update, seiten, software, svchost.exe, system, windows, ändern |