| |
| |||||||
Log-Analyse und Auswertung: Windows Live Messanger [Virus] LogfilesWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
16.04.2012, 04:30
| #1 |
| | ![Windows Live Messanger [Virus] Logfiles - Standard](images/icons/icon1.gif){kind=icon} Windows Live Messanger [Virus] Logfiles Hallo, ich habe folgendes problem seit heute meldet sich mein msn an bis zu 7 verschieden endpunkten an und mein profilbild sowie meine statusnachrichten werden von pornografischen inhalten belagert (auch wenn ich sie schon wieder geändert habe) ich habe meinen pc jetzt auch komplett neu aufgesetzt ich hab zudem ein bild meines MSN gemacht auserdem sind in dem anhang folgende logfiles Malwarebyte,HiJackThis und OTL ich hoffe das hilft ein bisschen da ich jetzt keine andere möglichkeit sehe und ich gestehen muss mich leider mit viren und so weiter nicht auskennen hoffe ich hier auf hilfe achja avira hat auch keine viren gefunden laut log ich weiß auch nicht ob es nützlich ist aber da ich jetzt einer woche bei meiner freundin war und mein bruder meinen pc zur verfügung hatte hat er natürlich ordenlich sachen geladen das meiste kannt ich leider nicht nur so am rande mal gesagt Winrar wird zum entpacken benötigt  Logfiles: hxxp://www.file-upload.net/download-4275999/Desktop.rar.html |
|
16.04.2012, 05:52
| #2 |
| | Windows Live Messanger [Virus] Logfiles edit da HijackThis logs nicht ausreichend sind hier nochmal dds llogfile
__________________DDS Logfile: Code:
ATTFilter DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Zero at 6:40:16 on 2012-04-16
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.5939.3863 [GMT 2:00]
.
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Windows\system32\TODDSrv.exe
C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\igfxext.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
c:\Program Files (x86)\Nero\Update\NASvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
C:\Windows\system32\DllHost.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Zero\Downloads\Defogger.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
uDefault_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
mWinlogon: Userinit=userinit.exe,
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: Windows Live ID-Anmelde-Hilfsprogramm: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
BHO: TOSHIBA Media Controller Plug-in: {f3c88694-effa-4d78-b409-54b7b2535b14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll
uRun: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
uRun: [ICQ] "C:\Program Files (x86)\ICQ7.7\ICQ.exe" silent loginmode=4
mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun: [NBAgent] "c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
mRun: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP
mRun: [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
mRun: [KeNotify] "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM
mRun: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60
mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
mRun: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
dRun: [TOPI.EXE] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STARTUP
StartupFolder: C:\Users\Zero\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\TRDCRE~1.LNK - C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\TOSHIB~1.LNK - C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
mPolicies-system: EnableLinkedConnections = 1 (0x1)
IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html
IE: Zu TOSHIBA Bulletin Board hinzufügen - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll/1000
IE: {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe
IE: {97F922BD-8563-4184-87EE-8C4ACA438823} - {5D29E593-73A5-400A-B3BD-6B7A1AF05A31} - C:\Program Files\TOSHIBA\BulletinBoard\TosBBCom.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{B0B734C4-D1E5-4A20-BFCC-955F53F090A6} : DhcpNameServer = 192.168.2.1
{18DF081C-E8AD-4283-A596-FA578C2EBDC3}
{9030D464-4C02-4ABF-8ECC-5164760863C6}
{DBC80044-A445-435b-BC74-9C25C1C588A9}
{F3C88694-EFFA-4d78-B409-54B7B2535B14}
mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mRun-x64: [NBAgent] "c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
mRun-x64: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP
mRun-x64: [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL
mRun-x64: [KeNotify] "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM
mRun-x64: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60
mRun-x64: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
mRun-x64: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
IE-X64: {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe
.
================= FIREFOX ===================
.
FF - ProfilePath - C:\Users\Zero\AppData\Roaming\Mozilla\Firefox\Profiles\1ig8wc9z.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrlui.dll
FF - plugin: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll
.
============= SERVICES / DRIVERS ===============
.
R1 avkmgr;avkmgr;C:\Windows\system32\DRIVERS\avkmgr.sys --> C:\Windows\system32\DRIVERS\avkmgr.sys [?]
R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?]
R2 AntiVirSchedulerService;Avira Planer;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2012-4-16 86224]
R2 AntiVirService;Avira Echtzeit Scanner;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2012-4-16 110032]
R2 avgntflt;avgntflt;C:\Windows\system32\DRIVERS\avgntflt.sys --> C:\Windows\system32\DRIVERS\avgntflt.sys [?]
R2 cfWiMAXService;ConfigFree WiMAX Service;C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2010-1-28 249200]
R2 ConfigFree Service;ConfigFree Service;C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-3-10 46448]
R2 IconMan_R;IconMan_R;C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2012-4-15 1811456]
R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-4-16 654408]
R2 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2011-3-29 598312]
R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-4-15 2320920]
R3 CeKbFilter;CeKbFilter;C:\Windows\system32\DRIVERS\CeKbFilter.sys --> C:\Windows\system32\DRIVERS\CeKbFilter.sys [?]
R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 Impcd;Impcd;C:\Windows\system32\DRIVERS\Impcd.sys --> C:\Windows\system32\DRIVERS\Impcd.sys [?]
R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]
R3 PGEffect;Pangu effect driver;C:\Windows\system32\DRIVERS\pgeffect.sys --> C:\Windows\system32\DRIVERS\pgeffect.sys [?]
R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]
R3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;C:\Windows\system32\DRIVERS\rtl8192Ce.sys --> C:\Windows\system32\DRIVERS\rtl8192Ce.sys [?]
R3 TMachInfo;TMachInfo;C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [2012-4-15 51512]
R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service;C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-2-5 137560]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe --> c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe [?]
S3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]
S3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]
S3 GamesAppService;GamesAppService;C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys --> C:\Windows\system32\Drivers\RtsUStor.sys [?]
S3 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO);C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [2011-2-10 112080]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]
.
=============== Created Last 30 ================
.
2012-04-16 04:16:35 69000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FFD89033-5EE8-41B7-BD41-5726B989C725}\offreg.dll
2012-04-16 04:12:47 8199504 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
2012-04-16 04:12:41 8669240 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FFD89033-5EE8-41B7-BD41-5726B989C725}\mpengine.dll
2012-04-16 03:46:24 -------- d-----w- C:\Users\Zero\AppData\Local\{A7008D47-0DDC-4B8D-94E7-07B5E83812CC}
2012-04-16 03:18:33 -------- d-----w- C:\Users\Zero\AppData\Local\{04531AFA-76F3-4441-A6CE-968DC5E53B30}
2012-04-16 02:33:22 -------- d-----w- C:\Users\Zero\AppData\Local\{F5CFE4DF-4DBE-4CB1-AFD5-FE6A187D3A26}
2012-04-16 02:30:33 711240 ----a-w- C:\Windows\isRS-000.tmp
2012-04-16 02:29:31 -------- d-----w- C:\Program Files (x86)\AxBx
2012-04-16 02:28:50 -------- d-----w- C:\Users\Zero\AppData\Roaming\Malwarebytes
2012-04-16 02:28:37 -------- d-----w- C:\ProgramData\Malwarebytes
2012-04-16 02:28:36 24904 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-04-16 02:28:36 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-04-16 02:19:15 -------- d-----w- C:\Users\Zero\AppData\Local\{C71BBD49-D256-4563-BDF4-70EDAA1440C4}
2012-04-16 02:18:52 -------- d-----w- C:\Users\Zero\AppData\Local\{0E54F501-4063-4EED-95DB-18EFFFCAEBBB}
2012-04-16 02:17:35 -------- d-----w- C:\Windows\PCHEALTH
2012-04-16 02:00:53 -------- d-----w- C:\Users\Zero\AppData\Local\TOSHIBA_Corporation
2012-04-16 01:54:59 529424 ----a-w- C:\Windows\System32\d3dx10_37.dll
2012-04-16 01:38:12 -------- d-----w- C:\Program Files\Photoshop CS
2012-04-16 01:37:31 -------- d-----w- C:\Program Files\TeamSpeak 3 Client
2012-04-16 01:34:48 -------- d--h--w- C:\Windows\msdownld.tmp
2012-04-16 01:34:42 -------- d-----w- C:\Windows\SysWow64\directx
2012-04-16 01:19:35 -------- d-----w- C:\Program Files (x86)\DircetX
2012-04-16 00:55:30 -------- d-----w- C:\Users\Zero\AppData\Roaming\Avira
2012-04-16 00:49:58 27760 ----a-w- C:\Windows\System32\drivers\avkmgr.sys
2012-04-16 00:49:57 97312 ----a-w- C:\Windows\System32\drivers\avgntflt.sys
2012-04-16 00:49:54 -------- d-----w- C:\ProgramData\Avira
2012-04-16 00:49:54 -------- d-----w- C:\Program Files (x86)\Avira
2012-04-15 23:58:09 -------- d-----w- C:\Users\Zero\AppData\Local\Windows Live
2012-04-15 23:58:09 -------- d-----w- C:\Users\Zero\AppData\Local\{D39B33BC-C60A-44D4-B9F5-917E4118DF38}
2012-04-15 23:56:53 -------- d-----w- C:\Users\Zero\AppData\Local\{442E9A93-B777-4AD8-B27B-D853B9A7A98A}
2012-04-15 23:51:00 -------- d-----w- C:\Users\Zero\justaion
2012-04-15 23:45:09 -------- d-----w- C:\Users\Zero\AppData\Local\Mozilla
2012-04-15 23:43:59 -------- d-----w- C:\ProgramData\ICQ
2012-04-15 23:42:46 -------- d-----w- C:\Program Files (x86)\ICQ7.7
2012-04-15 23:42:16 -------- d-----w- C:\Program Files (x86)\AION Free-To-Play
2012-04-15 23:38:19 -------- d-----w- C:\Users\Zero\AppData\Local\Google
2012-04-15 23:37:51 -------- d-----w- C:\Users\Zero\Tracing
2012-04-15 23:35:41 -------- d-----w- C:\Users\Zero\AppData\Local\Toshiba
2012-04-15 23:35:37 826880 ----a-w- C:\Windows\SysWow64\rdpcore.dll
2012-04-15 23:35:37 23552 ----a-w- C:\Windows\System32\drivers\tdtcp.sys
2012-04-15 23:35:37 210944 ----a-w- C:\Windows\System32\drivers\rdpwd.sys
2012-04-15 23:35:37 1031680 ----a-w- C:\Windows\System32\rdpcore.dll
2012-04-15 23:35:35 9216 ----a-w- C:\Windows\System32\rdrmemptylst.exe
2012-04-15 23:35:34 77312 ----a-w- C:\Windows\System32\rdpwsx.dll
2012-04-15 23:35:34 149504 ----a-w- C:\Windows\System32\rdpcorekmts.dll
2012-04-15 23:33:44 -------- d-----w- C:\Users\Zero\AppData\Local\VirtualStore
2012-04-15 15:59:14 -------- d-----w- C:\Windows\OemDrv
2012-04-15 15:54:16 38096 ----a-w- C:\Windows\System32\drivers\PGEffect.sys
2012-04-15 15:51:42 612352 ----a-w- C:\Windows\System32\drivers\rtl819xp.sys
2012-04-15 15:51:42 451072 ------w- C:\Windows\SysWow64\ISSRemoveSP.exe
2012-04-15 15:51:42 450048 ----a-w- C:\Windows\System32\drivers\rtl8187B.sys
2012-04-15 15:51:42 442368 ----a-w- C:\Windows\System32\drivers\rtl8187Se.sys
2012-04-15 15:51:42 1111144 ----a-w- C:\Windows\System32\drivers\rtl8192se.sys
2012-04-15 15:51:42 1103464 ----a-w- C:\Windows\System32\drivers\rtl8192ce.sys
2012-04-15 15:51:42 -------- d-----w- C:\Program Files (x86)\Realtek WLAN Driver
2012-04-15 15:51:21 -------- d-----w- C:\Windows\SysWow64\sda
2012-04-15 15:51:17 7367200 ----a-w- C:\Windows\SysWow64\RtsUStoricon.dll
2012-04-15 15:51:17 422432 ----a-w- C:\Windows\System32\RtsUStor.dll
2012-04-15 15:51:17 232992 ----a-w- C:\Windows\System32\drivers\RtsUStor.sys
2012-04-15 15:50:59 -------- d-----w- C:\Program Files\Synaptics
2012-04-15 15:50:06 99320 ----a-w- C:\Windows\System32\tosWirelessLANIndicatorCP.dll
2012-04-15 15:50:06 827728 ----a-w- C:\Windows\System32\msvcr100.dll
2012-04-15 15:50:06 607568 ----a-w- C:\Windows\System32\msvcp100.dll
2012-04-15 15:47:29 24576 ----a-w- C:\Windows\SysWow64\TSCI.dll
2012-04-15 15:47:29 24576 ----a-w- C:\Windows\SysWow64\THCI.dll
2012-04-15 15:47:11 -------- d-----w- C:\Windows\SysWow64\Microsoft.VC80.MFC
2012-04-15 15:47:11 -------- d-----w- C:\ProgramData\xp
2012-04-15 15:47:11 -------- d-----w- C:\ProgramData\win7_64
2012-04-15 15:47:11 -------- d-----w- C:\ProgramData\win7_32
2012-04-15 15:47:11 -------- d-----w- C:\ProgramData\vista64
2012-04-15 15:47:11 -------- d-----w- C:\ProgramData\vista32
2012-04-15 15:47:00 20592 ----a-w- C:\Windows\System32\drivers\CeKbFilter.sys
2012-04-15 15:46:43 -------- d-----w- C:\Windows\Downloaded Installations
2012-04-15 15:46:24 8192 ----a-w- C:\Windows\System32\TSBWLS.dll
2012-04-15 15:46:24 295424 ----a-w- C:\Windows\System32\HWS_Ctrl.dll
2012-04-15 15:46:24 -------- d-----w- C:\Windows\System32\Microsoft.VC80.MFC
2012-04-15 15:42:37 538136 ----a-w- C:\Windows\System32\drivers\iaStor.sys
2012-04-15 15:39:26 -------- d-----w- C:\Intel
2012-04-15 15:38:46 -------- d-----w- C:\Program Files (x86)\Common Files\postureAgent
2012-04-15 15:38:39 56344 ----a-w- C:\Windows\System32\drivers\HECIx64.sys
2012-04-15 15:36:32 53248 ----a-w- C:\Windows\SysWow64\CSVer.dll
2012-04-15 15:35:46 -------- d-sh--w- C:\$RECYCLE.BIN
.
==================== Find3M ====================
.
2012-02-23 08:18:36 279656 ------w- C:\Windows\System32\MpSigStub.exe
.
============= FINISH: 6:40:51,46 ===============
--- --- --- --- --- --- Attach Code:
ATTFilter . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows 7 Home Premium Boot Device: \Device\HarddiskVolume1 Install Date: 16.04.2012 01:32:15 System Uptime: 16.04.2012 04:31:14 (2 hours ago) . Motherboard: TOSHIBA | | PWWAA Processor: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz | CPU | 1317/133mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 349 GiB total, 301,23 GiB free. D: is FIXED (NTFS) - 349 GiB total, 340,764 GiB free. E: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP3: 16.04.2012 01:35:47 - Windows Update RP4: 16.04.2012 01:49:33 - Just Aion Launcher wird installiert RP5: 16.04.2012 02:00:37 - Windows Live Essentials RP6: 16.04.2012 02:01:24 - WLSetup RP7: 16.04.2012 03:54:21 - DirectX wurde installiert RP8: 16.04.2012 04:15:58 - CheckIfInstallerIsBusy RP9: 16.04.2012 04:16:26 - Windows Live Essentials RP10: 16.04.2012 04:17:15 - WLSetup . ==== Installed Programs ====================== . Adobe Flash Player 10 ActiveX Adobe Reader 9.4.0 - Deutsch Avira Free Antivirus Bejeweled 2 Deluxe Bejeweled 3 Chicken Invaders 3 - Revenge of the Yolk Chuzzle Deluxe Clean Virus MSN D3DX10 Diner Dash 2 Restaurant Rescue FATE Final Drive: Nitro High-Definition Video Playback HijackThis 2.0.2 ICQ7.7 Insaniquarium Deluxe Intel(R) Graphics Media Accelerator Driver Intel(R) Management Engine Components Intel(R) Rapid Storage Technology Java Auto Updater Java(TM) 6 Update 20 Just Aion Launcher Malwarebytes Anti-Malware Version 1.61.0.1400 Microsoft Office 2010 Microsoft Primary Interoperability Assemblies 2005 Microsoft Silverlight Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Mozilla Firefox 10.0 (x86 de) MSVCRT Nero 10 Movie ThemePack Basic Nero BackItUp 10 Nero BackItUp 10 Help (CHM) Nero BurnRights 10 Nero BurnRights 10 Help (CHM) Nero Control Center 10 Nero ControlCenter 10 Help (CHM) Nero Core Components 10 Nero Express 10 Nero Express 10 Help (CHM) Nero InfoTool 10 Nero InfoTool 10 Help (CHM) Nero Kwik Media Nero Multimedia Suite 10 Essentials Nero RescueAgent 10 Nero RescueAgent 10 Help (CHM) Nero StartSmart 10 Nero StartSmart 10 Help (CHM) Nero Update NeroKwikMedia Help (CHM) Penguins! Plants vs. Zombies - Game of the Year Polar Bowler Realtek Ethernet Controller Driver For Windows 7 Realtek High Definition Audio Driver Realtek USB 2.0 Card Reader Realtek WLAN Driver Skype™ 5.3 Slingo Deluxe TOSHIBA Assist TOSHIBA Bulletin Board TOSHIBA ConfigFree TOSHIBA Face Recognition TOSHIBA Flash Cards Support Utility TOSHIBA Hardware Setup TOSHIBA HDD/SSD Alert Toshiba Manuals TOSHIBA Media Controller TOSHIBA Media Controller Plug-in TOSHIBA Online Product Information TOSHIBA Places Icon Utility TOSHIBA Recovery Media Creator Reminder TOSHIBA ReelTime TOSHIBA Service Station TOSHIBA Supervisor Password TOSHIBA Supervisorkennwort TOSHIBA TEMPRO TOSHIBA Value Added Package TOSHIBA Web Camera Application TOSHIBA Wireless LAN Indicator TRORMCLauncher Update Installer for WildTangent Games App Utility Common Driver Wedding Dash 2 - Rings Around the World WildTangent-Spiele WildTangent Games App (Toshiba Games) Windows Live Communications Platform Windows Live Essentials Windows Live Installer Windows Live Mesh ActiveX control for remote connections Windows Live Messenger Windows Live Photo Common Windows Live PIMT Platform Windows Live SOXE Windows Live SOXE Definitions Windows Live UX Platform Windows Live UX Platform Language Pack WinRAR 4.10 (32-Bit) Zuma Deluxe . ==== End Of File =========================== Geändert von zerokun (16.04.2012 um 05:59 Uhr) Grund: code tags |
|
| Themen zu Windows Live Messanger [Virus] Logfiles |
| anhang, avira, bruder, folge, folgendes, freundin, geändert, heute, hijack, hijackthis, keine viren, komplett, live, logfile, logfiles, meldet, msn, neu, neu aufgesetzt, problem, sachen, viren, virus, windows, windows live, woche |
![Windows Live Messanger [Virus] Logfiles](iconimages/log-analyse-auswertung/windows-live-messanger-virus-logfiles_ltr.gif)
Linear-Darstellung
