| |
| |||||||
Log-Analyse und Auswertung: Virusfund - StolenData / IPDTrojan / Hacktool - PC läuft langsamerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
04.11.2014, 20:19
| #3 |
| |  Virusfund - StolenData / IPDTrojan / Hacktool - PC läuft langsamer Danke für die schnelle Hilfe, bitte entschuldige meine Fehler.
__________________Hier die erstellte Log: Code:
ATTFilter ComboFix 14-10-29.01 - David 04.11.2014 20:05:44.1.4 - x64
Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.3979.2584 [GMT 1:00]
ausgeführt von:: c:\users\David\Desktop\ComboFix.exe
AV: AVG AntiVirus Free Edition 2015 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
SP: AVG AntiVirus Free Edition 2015 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Roaming
c:\users\David\AppData\Roaming\winsys
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-10-04 bis 2014-11-04 ))))))))))))))))))))))))))))))
.
.
2014-11-04 19:11 . 2014-11-04 19:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-10-27 14:47 . 2014-10-27 14:49 -------- d-----w- c:\programdata\X1
2014-10-26 21:01 . 2014-10-27 14:51 -------- d-----w- c:\program files (x86)\Daslight
2014-10-26 16:22 . 2014-10-26 16:23 -------- d-----w- C:\FRST
2014-10-26 13:38 . 2014-10-27 14:52 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-10-26 13:37 . 2014-10-26 13:38 -------- d-----w- c:\program files (x86)\ Malwarebytes Anti-Malware
2014-10-26 13:37 . 2014-10-26 13:37 -------- d-----w- c:\programdata\Malwarebytes
2014-10-26 13:37 . 2014-10-01 10:11 63704 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-10-26 13:37 . 2014-10-01 10:11 93400 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-10-26 13:37 . 2014-10-01 10:11 25816 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-10-26 13:31 . 2014-10-26 13:31 -------- d-----w- c:\program files (x86)\AIMP3
2014-10-25 14:48 . 2014-10-25 14:48 -------- d-----w- c:\programdata\MediaMonkey
2014-10-25 14:48 . 2014-10-25 14:48 -------- d-----w- c:\program files (x86)\MediaMonkey
2014-10-25 14:19 . 2014-10-25 14:19 -------- dc-h--w- c:\programdata\{ACF12395-778E-44F0-A811-C99F334A83F5}
2014-10-25 14:05 . 2014-10-25 14:05 -------- d-----w- c:\program files (x86)\Common Files\Native Instruments
2014-10-25 14:04 . 2014-10-25 14:04 -------- dc-h--w- c:\programdata\{BD26D777-CA21-4BDD-A581-6BCFE4F0F941}
2014-10-25 14:02 . 2014-10-25 14:02 -------- dc-h--w- c:\programdata\{C6A355F5-168B-4EEC-AB7C-75594F783EDB}
2014-10-25 14:02 . 2014-10-25 14:05 -------- d-----w- c:\programdata\Native Instruments
2014-10-25 14:02 . 2014-10-25 14:05 -------- d-----w- c:\program files\Native Instruments
2014-10-25 14:02 . 2014-10-25 14:03 -------- d-----w- c:\program files\Common Files\Native Instruments
2014-10-25 13:34 . 2014-10-25 13:34 -------- d-----w- c:\programdata\PopSoft
2014-10-25 13:30 . 2014-10-25 13:27 194328 ----a-w- c:\windows\system32\DICoInst64.dll
2014-10-25 13:30 . 2014-10-25 13:30 -------- d-----w- c:\program files (x86)\ESI
2014-10-25 13:30 . 2014-10-25 13:30 -------- d-----w- c:\program files (x86)\DMXControl
2014-10-25 13:27 . 2014-10-25 13:27 -------- d-----w- c:\users\Default\AppData\Roaming\TuneUp Software
2014-10-23 19:46 . 2014-10-23 19:46 -------- d-----w- c:\program files\DIFX
2014-10-23 19:42 . 2014-10-23 21:01 -------- d-----w- c:\program files (x86)\LumiDesk
2014-10-19 15:10 . 2012-10-17 02:31 741480 ------w- c:\windows\system32\HPDiscoPM5512.dll
2014-10-19 15:10 . 2014-10-19 15:10 -------- d-----w- c:\programdata\HP
2014-10-19 15:10 . 2014-10-19 15:10 -------- d-----w- c:\program files\HP
2014-10-19 15:10 . 2014-10-19 15:10 -------- d-----w- c:\program files (x86)\HP
2014-10-18 11:43 . 2014-10-18 11:43 -------- d-----w- c:\programdata\Sync App Settings
2014-10-18 11:43 . 2014-10-18 11:43 -------- d-----w- c:\program files (x86)\Allway Sync
2014-10-17 19:56 . 2014-10-17 19:56 -------- d-----w- c:\program files (x86)\Project64 2.1
2014-10-17 09:47 . 2013-05-10 05:56 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-10-17 09:47 . 2013-05-10 04:30 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-10-17 09:47 . 2013-05-10 03:48 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-10-17 09:46 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-10-17 09:46 . 2013-05-10 05:56 14631424 ----a-w- c:\windows\system32\wmp.dll
2014-10-17 09:39 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2014-10-17 09:39 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2014-10-17 09:22 . 2013-11-26 08:16 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-10-17 09:22 . 2013-11-22 22:48 3928064 ----a-w- c:\windows\system32\d2d1.dll
2014-10-17 09:22 . 2014-08-29 02:07 3179520 ----a-w- c:\windows\system32\rdpcorets.dll
2014-10-17 09:22 . 2014-05-08 09:32 16384 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll
2014-10-17 09:21 . 2011-03-11 06:41 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2014-10-17 09:21 . 2011-03-11 06:41 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2014-10-17 09:21 . 2011-03-11 06:41 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2014-10-17 09:21 . 2011-03-11 06:41 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2014-10-17 09:21 . 2011-03-11 06:41 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2014-10-17 09:21 . 2011-03-11 06:33 2565632 ----a-w- c:\windows\system32\esent.dll
2014-10-17 09:21 . 2011-03-11 06:30 96768 ----a-w- c:\windows\system32\fsutil.exe
2014-10-17 09:21 . 2011-03-11 05:33 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2014-10-17 09:21 . 2011-03-11 05:31 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2014-10-17 09:21 . 2011-03-11 04:37 91648 ----a-w- c:\windows\system32\drivers\USBSTOR.SYS
2014-10-17 09:17 . 2014-09-05 01:52 5703168 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-10-17 09:17 . 2014-09-05 02:11 6584320 ----a-w- c:\windows\system32\mstscax.dll
2014-10-17 09:17 . 2014-02-04 02:32 1424384 ----a-w- c:\windows\system32\WindowsCodecs.dll
2014-10-17 09:17 . 2014-02-04 02:04 1230336 ----a-w- c:\windows\SysWow64\WindowsCodecs.dll
2014-10-17 09:17 . 2012-02-11 06:36 559104 ----a-w- c:\windows\system32\spoolsv.exe
2014-10-17 09:17 . 2012-02-11 06:36 67072 ----a-w- c:\windows\splwow64.exe
2014-10-17 09:02 . 2014-10-17 09:02 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-10-17 08:44 . 2014-10-17 08:44 -------- d-----w- c:\windows\SysWow64\wbem\en-US
2014-10-17 08:44 . 2014-10-17 08:44 -------- d-----w- c:\windows\system32\wbem\en-US
2014-10-17 08:43 . 2014-10-17 08:43 -------- d-s---w- c:\windows\system32\CompatTel
2014-10-17 08:32 . 2013-10-02 01:10 44544 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll
2014-10-17 08:25 . 2012-07-26 07:46 2560 ----a-w- c:\windows\system32\drivers\de-DE\wdf01000.sys.mui
2014-10-17 08:23 . 2012-08-23 14:10 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2014-10-17 08:23 . 2012-08-23 14:08 30208 ----a-w- c:\windows\system32\drivers\TsUsbGD.sys
2014-10-17 08:23 . 2012-08-23 14:13 243200 ----a-w- c:\windows\system32\rdpudd.dll
2014-10-17 08:23 . 2012-08-23 11:12 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll
2014-10-17 08:23 . 2012-08-23 10:51 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll
2014-10-17 08:20 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe
2014-10-17 08:19 . 2014-10-17 08:19 -------- d-----w- c:\program files\CONEXANT
2014-10-17 07:46 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2014-10-17 07:46 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2014-10-17 07:46 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe
2014-10-17 07:46 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll
2014-10-17 07:46 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll
2014-10-17 07:46 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2014-10-17 07:46 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll
2014-10-16 23:15 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys
2014-10-16 23:15 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll
2014-10-16 23:15 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll
2014-10-16 23:04 . 2014-10-16 23:04 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-10-16 23:04 . 2014-10-16 23:04 701104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-10-16 23:04 . 2014-10-16 23:04 -------- d-----w- c:\windows\SysWow64\Macromed
2014-10-16 23:04 . 2014-10-16 23:04 -------- d-----w- c:\windows\system32\Macromed
2014-10-16 22:53 . 2014-10-16 22:53 -------- d-----w- c:\program files\Intel Corporation
2014-10-16 22:43 . 2014-10-16 22:43 -------- d-----w- c:\windows\system32\MRT
2014-10-16 22:41 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
2014-10-16 22:41 . 2014-03-09 21:48 1389208 ----a-w- c:\windows\system32\icardagt.exe
2014-10-16 22:41 . 2014-03-09 21:47 99480 ----a-w- c:\windows\SysWow64\infocardapi.dll
2014-10-16 22:41 . 2014-03-09 21:47 619672 ----a-w- c:\windows\SysWow64\icardagt.exe
2014-10-16 22:41 . 2014-06-30 22:24 8856 ----a-w- c:\windows\system32\icardres.dll
2014-10-16 22:41 . 2014-06-30 22:14 8856 ----a-w- c:\windows\SysWow64\icardres.dll
2014-10-16 22:41 . 2014-06-06 06:16 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2014-10-16 22:41 . 2014-06-06 06:12 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-10-16 22:38 . 2013-05-10 05:49 30720 ----a-w- c:\windows\system32\cryptdlg.dll
2014-10-16 22:38 . 2013-05-10 03:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
2014-10-16 22:36 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\SysWow64\d3d11.dll
2014-10-16 22:35 . 2014-06-25 02:05 14175744 ----a-w- c:\windows\system32\shell32.dll
2014-10-16 22:34 . 2013-07-25 09:25 1888768 ----a-w- c:\windows\system32\WMVDECOD.DLL
2014-10-16 22:33 . 2012-05-05 08:36 503808 ----a-w- c:\windows\system32\srcore.dll
2014-10-16 22:32 . 2012-08-22 18:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2014-10-16 22:31 . 2013-07-09 05:52 224256 ----a-w- c:\windows\system32\wintrust.dll
2014-10-16 22:30 . 2014-01-24 02:37 1684928 ----a-w- c:\windows\system32\drivers\ntfs.sys
2014-10-16 22:29 . 2011-05-04 05:25 2315776 ----a-w- c:\windows\system32\tquery.dll
2014-10-16 22:22 . 2011-10-15 06:31 723456 ----a-w- c:\windows\system32\EncDec.dll
2014-10-16 22:17 . 2014-10-16 22:17 -------- d-----w- c:\program files\VideoLAN
2014-10-16 22:08 . 2014-01-06 12:59 8192 ----a-w- c:\windows\system32\drivers\IntelMEFWVer.dll
2014-10-16 22:08 . 2014-10-16 22:08 -------- d-----w- c:\program files (x86)\Common Files\postureAgent
2014-10-16 22:08 . 2012-11-09 11:57 57376 ----a-w- c:\windows\system32\drivers\HECIx64.sys
2014-10-16 21:50 . 2012-05-15 05:13 144896 ----a-w- c:\windows\system32\IntelOpenCL64.dll
2014-10-16 21:50 . 2012-05-15 05:13 20992 ----a-w- c:\windows\system32\OpenCL.dll
2014-10-16 21:50 . 2012-05-15 04:20 104448 ----a-w- c:\windows\SysWow64\IntelOpenCL32.dll
2014-10-16 21:50 . 2012-05-15 04:20 17920 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-10-16 21:45 . 2012-01-14 04:41 68864 ----a-w- c:\windows\system32\drivers\stream.sys
2014-10-16 21:43 . 2014-09-10 04:06 2692896 ------w- c:\windows\PWMBTHLV.EXE
2014-10-16 21:43 . 2014-10-16 21:43 -------- d-----w- c:\program files (x86)\ThinkPad
2014-10-16 21:43 . 2014-09-10 04:06 29512 ----a-w- c:\windows\system32\drivers\DZHDD64.SYS
2014-10-16 21:43 . 2014-09-10 04:06 2861344 ----a-w- c:\windows\system32\PWMCP64V.cpl
2014-10-16 21:43 . 2014-09-10 04:06 20736 ----a-w- c:\windows\system32\drivers\TPPWR64V.SYS
2014-10-16 21:42 . 2013-05-22 14:17 15472 ----a-w- c:\windows\system32\drivers\smiifx64.sys
2014-10-16 21:42 . 2014-10-16 21:42 -------- d-----w- c:\program files (x86)\Common Files\InstallShield
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-10-25 13:27 . 2013-10-02 11:51 96536 ----a-w- c:\windows\SysWow64\UDJ6asio32.dll
2014-10-25 13:27 . 2013-10-02 11:51 65304 ----a-w- c:\windows\system32\drivers\UDJ6drv.sys
2014-10-25 13:27 . 2013-10-02 11:51 374040 ----a-w- c:\windows\system32\UDJ6Pan.exe
2014-10-25 13:27 . 2013-10-02 11:51 33560 ----a-w- c:\windows\system32\drivers\UDJ6Wdm.sys
2014-10-25 13:27 . 2013-10-02 11:51 109336 ----a-w- c:\windows\system32\UDJ6asio.dll
2014-08-28 19:47 . 2014-08-28 19:47 243480 ----a-w- c:\windows\system32\drivers\avgldx64.sys
2014-08-18 13:13 . 2014-08-18 13:13 4265680 ----a-w- c:\windows\system32\wlihvui.dll
2014-08-18 13:13 . 2014-08-18 13:13 2484944 ----a-w- c:\windows\system32\iwmssvc.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HP Officejet 6500 E710a-f (NET)"="c:\program files\HP\HP Officejet 6500 E710a-f\Bin\ScanToPCActivationApp.exe" [2012-10-17 2573416]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-09-12 959176]
"AVG_UI"="c:\program files (x86)\AVG\AVG2015\avgui.exe" [2014-10-16 3649040]
"RotateImage"="c:\program files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe" [2008-10-30 55808]
"PWMTRV"="c:\program files (x86)\ThinkPad\Utilities\PWMTR64V.DLL" [2014-09-10 6363424]
"IMSS"="c:\program files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe" [2013-07-02 113656]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R1 UDJ6_AA;Service for ESI UDJ6 Controller driver;c:\windows\system32\DRIVERS\UDJ6drv.sys;c:\windows\SYSNATIVE\DRIVERS\UDJ6drv.sys [x]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2015\avgidsagent.exe;c:\program files (x86)\AVG\AVG2015\avgidsagent.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 DozeSvc;Lenovo Doze Mode Service;c:\program files (x86)\ThinkPad\Utilities\DZSVC64.EXE;c:\program files (x86)\ThinkPad\Utilities\DZSVC64.EXE [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys;c:\windows\SYSNATIVE\drivers\intelaud.sys [x]
R3 iumsvc;Intel(R) Update Manager;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe;c:\program files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 PwmEWSvc;Cisco EnergyWise Enabler;c:\program files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE;c:\program files (x86)\ThinkPad\Utilities\PWMEWSVC.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 UDJ6_01;Service for ESI UDJ6 Audio driver;c:\windows\system32\DRIVERS\UDJ6Wdm.sys;c:\windows\SYSNATIVE\DRIVERS\UDJ6Wdm.sys [x]
S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x]
S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x]
S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x]
S0 DzHDD64;DzHDD64;c:\windows\System32\DRIVERS\DzHDD64.sys;c:\windows\SYSNATIVE\DRIVERS\DzHDD64.sys [x]
S0 TPDIGIMN;TPDIGIMN;c:\windows\System32\DRIVERS\ApsHM64.sys;c:\windows\SYSNATIVE\DRIVERS\ApsHM64.sys [x]
S1 Avgdiska;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiska.sys;c:\windows\SYSNATIVE\DRIVERS\avgdiska.sys [x]
S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x]
S1 lenovo.smi;Lenovo System Interface Driver;c:\windows\system32\DRIVERS\smiifx64.sys;c:\windows\SYSNATIVE\DRIVERS\smiifx64.sys [x]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2015\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2015\avgwdsvc.exe [x]
S2 BotkindSyncService;Botkind Service;c:\program files (x86)\Allway Sync\Bin\SyncService.exe service;c:\program files (x86)\Allway Sync\Bin\SyncService.exe service [x]
S2 jhi_service;Intel(R) Identity Protection Technology Host Interface Service;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe [x]
S2 LENOVO.MICMUTE;Lenovo Microphone Mute;c:\program files\LENOVO\HOTKEY\MICMUTE.exe;c:\program files\LENOVO\HOTKEY\MICMUTE.exe [x]
S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe;c:\program files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [x]
S2 risdxc;risdxc;c:\windows\system32\DRIVERS\risdxc64.sys;c:\windows\SYSNATIVE\DRIVERS\risdxc64.sys [x]
S2 TPHKLOAD;Lenovo Hotkey Client Loader;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe;c:\program files\LENOVO\HOTKEY\TPHKLOAD.exe [x]
S2 TPHKSVC;Anzeige am Bildschirm;c:\program files\LENOVO\HOTKEY\TPHKSVC.exe;c:\program files\LENOVO\HOTKEY\TPHKSVC.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 5U877;USB Video Device;c:\windows\system32\DRIVERS\5U877.sys;c:\windows\SYSNATIVE\DRIVERS\5U877.sys [x]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\DRIVERS\iwdbus.sys;c:\windows\SYSNATIVE\DRIVERS\iwdbus.sys [x]
S3 LenovoRd;LenovoRd;c:\windows\system32\Drivers\LenovoRd.sys;c:\windows\SYSNATIVE\Drivers\LenovoRd.sys [x]
S3 Power Manager DBC Service;Power Manager Service;c:\program files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE;c:\program files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x]
S3 usb3Hub;UoIP Hub;c:\windows\system32\DRIVERS\usb3Hub.sys;c:\windows\SYSNATIVE\DRIVERS\usb3Hub.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-11-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-16 23:04]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TpShocks"="TpShocks.exe" [2014-02-17 384344]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-11-30 172016]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-11-30 399856]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-11-30 442352]
"UDJ6Pan.exe"="UDJ6Pan.exe" [2014-10-25 374040]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\David\AppData\Roaming\Mozilla\Firefox\Profiles\svn5wkx8.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-ESI- UDJ6 Audio Driver Setup - c:\program files (x86)\ESI\UDJ6\uninst.exe Software\ESI\UDJ6\Setup
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-11-04 20:13:25
ComboFix-quarantined-files.txt 2014-11-04 19:13
.
Vor Suchlauf: 7 Verzeichnis(se), 86.826.266.624 Bytes frei
Nach Suchlauf: 12 Verzeichnis(se), 86.527.508.480 Bytes frei
.
- - End Of File - - 65376B45F4E629FA23EE14315B575DC5
Viele Grüße David |
| Themen zu Virusfund - StolenData / IPDTrojan / Hacktool - PC läuft langsamer |
| anhang, avg, bild, entfernen, entfernt, fehlercode windows, forum, free, hacktool, installiert, langsamer, log, mbam, neu, quarantäne, screenshot, seiten, setting.disableregistrytools, stolendata, trojan.ipd, trojan.msil.kryptik, virus, virusfund, win32/toolbar.babylon.e |
Baum-Darstellung