| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: "Windows Security Center" gibt ständig Virus/Trojaner Warnungen herausWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
14.01.2010, 00:41
| #31 |
 |  "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus Gut, dann wird der morgen durchgeführt! Poste dann das log sobald ich es habe. Vielen vielen Dank schonmal für die ganze hilfe! |
|
14.01.2010, 06:16
| #32 |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus So, DrWeb ist durchgelaufen.
__________________Es lässt mich leider kein log kopieren, aber er sagt, dass kein Virus gefunden wurde. |
|
14.01.2010, 11:12
| #33 |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus Habe jetzt auf SP3 installiert.
__________________Soll ich noch was durchlaufen lassen? Noch ein RSIT? |
|
14.01.2010, 11:29
| #35 |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus Hier das neue RSIT log: Code:
ATTFilter Logfile of random's system information tool 1.06 (written by random/random) Run by Maxx at 2010-01-14 11:28:16 Microsoft Windows XP Home Edition Service Pack 3 System drive C: has 3 GB (6%) free of 45 GB Total RAM: 1023 MB (52% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:28:23 AM, on 1/14/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Intel\Wireless\Bin\EvtEng.exe C:\Programme\Intel\Wireless\Bin\S24EvMon.exe C:\Programme\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Programme\Avira\AntiVir Desktop\sched.exe C:\Programme\Avira\AntiVir Desktop\avguard.exe C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Programme\Bonjour\mDNSResponder.exe C:\Programme\Intel\Wireless\Bin\RegSrvc.exe C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\ATK0100\HControl.exe C:\Programme\ASUSTeK\ASUSDVD\PDVDServ.exe C:\Programme\ATI Technologies\ATI.ACE\CLI.EXE C:\Programme\Synaptics\SynTP\SynTPEnh.exe C:\Programme\Wireless Console 2\wcourier.exe C:\Programme\Intel\Wireless\bin\ZCfgSvc.exe C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\wuauclt.exe C:\Programme\ASUS\Power4 Gear\BatteryLife.exe C:\Programme\ASUS\Splendid\ACMON.exe C:\WINDOWS\sm56hlpr.exe C:\Programme\Java\jre1.6.0_07\bin\jusched.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\ATK0100\ATKOSD.exe C:\WINDOWS\system32\ACEngSvr.exe C:\Programme\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe C:\Programme\iTunes\iTunesHelper.exe C:\Programme\Avira\AntiVir Desktop\avgnt.exe C:\Programme\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe C:\Programme\QuickTime\qttask.exe C:\WINDOWS\system32\ctfmon.exe C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Programme\ASUS\Asus MultiFrame\MultiFrame.exe C:\Programme\Intel\Wireless\Bin\Dot1XCfg.exe C:\Programme\iPod\bin\iPodService.exe C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe C:\Programme\ATI Technologies\ATI.ACE\cli.exe C:\Programme\ATI Technologies\ATI.ACE\cli.exe C:\Programme\Java\jre1.6.0_07\bin\jucheck.exe C:\Dokumente und Einstellungen\Maxx\Desktop\RSIT.exe C:\Programme\Trend Micro\HijackThis\Maxx.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://alice.aol.de R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://alice.aol.de R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programme\Windows Live\Toolbar\wltcore.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe O4 - HKLM\..\Run: [RemoteControl] C:\Programme\ASUSTeK\ASUSDVD\PDVDServ.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [ATICCC] "C:\Programme\ATI Technologies\ATI.ACE\CLIStart.exe" O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Wireless Console 2] C:\Programme\Wireless Console 2\wcourier.exe O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Programme\Intel\Wireless\bin\ZCfgSvc.exe" O4 - HKLM\..\Run: [IntelWireless] "C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless O4 - HKLM\..\Run: [Power_Gear] C:\Programme\ASUS\Power4 Gear\BatteryLife.exe 1 O4 - HKLM\..\Run: [ABLKSR] C:\WINDOWS\ABLKSR\ABLKSR.exe O4 - HKLM\..\Run: [ACMON] C:\Programme\ASUS\Splendid\ACMON.exe O4 - HKLM\..\Run: [SMSERIAL] C:\WINDOWS\sm56hlpr.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Programme\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Programme\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Programme\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [AdobeUpdater] C:\Programme\Gemeinsame Dateien\Adobe\Updater5\AdobeUpdater.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: MultiFrame.lnk = ? O4 - Global Startup: Bluetooth Manager.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - res://C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: In Adobe PDF konvertieren - res://C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - res://C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - res://C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programme\Yahoo!\Common\yinsthelper.dll O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.1.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: acaptuser32.dll O20 - Winlogon Notify: !SASWinLogon - C:\Programme\SUPERAntiSpyware\SASWINLO.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Programme\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Programme\Bonjour\mDNSResponder.exe O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Programme\Intel\Wireless\Bin\EvtEng.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Programme\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Programme\Intel\Wireless\Bin\S24EvMon.exe -- End of file - 11167 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AppleSoftwareUpdate.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}] Yahoo! Toolbar Helper - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Adobe PDF Reader - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2008-06-11 61816] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}] Search Helper - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] SSVHelper Class - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll [2008-06-10 509328] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live Anmelde-Hilfsprogramm - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}] Adobe PDF Conversion Toolbar Helper - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}] Windows Live Toolbar Helper - C:\Programme\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}] SmartSelect Class - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384] {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480] {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Programme\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "HControl"=C:\WINDOWS\ATK0100\HControl.exe [2006-07-28 110592] "RemoteControl"=C:\Programme\ASUSTeK\ASUSDVD\PDVDServ.exe [2004-11-02 32768] "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648] "ATICCC"=C:\Programme\ATI Technologies\ATI.ACE\CLIStart.exe [2006-05-10 90112] "SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488] "SynTPEnh"=C:\Programme\Synaptics\SynTP\SynTPEnh.exe [2005-10-21 761945] "Wireless Console 2"=C:\Programme\Wireless Console 2\wcourier.exe [2005-10-17 987136] "IntelZeroConfig"=C:\Programme\Intel\Wireless\bin\ZCfgSvc.exe [2006-08-02 802816] "IntelWireless"=C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe [2006-08-02 696320] "Power_Gear"=C:\Programme\ASUS\Power4 Gear\BatteryLife.exe [2006-03-06 86016] "ABLKSR"=C:\WINDOWS\ABLKSR\ABLKSR.exe [2006-01-03 61440] "ACMON"=C:\Programme\ASUS\Splendid\ACMON.exe [2006-05-30 811008] "SMSERIAL"=C:\WINDOWS\sm56hlpr.exe [2006-03-21 544768] "SunJavaUpdateSched"=C:\Programme\Java\jre1.6.0_07\bin\jusched.exe [2008-06-10 144784] "RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-08-14 16050176] "Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632] "Adobe Acrobat Speed Launcher"=C:\Programme\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232] "Acrobat Assistant 8.0"=C:\Programme\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376] "iTunesHelper"=C:\Programme\iTunes\iTunesHelper.exe [2008-10-01 289576] "avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153] "VirtualCloneDrive"=C:\Programme\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-05-27 85160] "QuickTime Task"=C:\Programme\QuickTime\qttask.exe [2008-09-06 413696] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] "AdobeUpdater"=C:\Programme\Gemeinsame Dateien\Adobe\Updater5\AdobeUpdater.exe [2007-02-28 2321600] "SUPERAntiSpyware"=C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe [2010-01-05 2002160] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerForPhone] C:\Programme\PowerForPhone\PowerForPhone\PowerForPhone.exe [2006-09-07 778240] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Programme\QuickTime\QTTask.exe [2008-09-06 413696] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager] C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE [2007-03-27 4670968] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^ASUS ChkMail.lnk] C:\PROGRA~1\ASUS\ASUSCH~1\ChkMail.exe [2003-09-12 32768] C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart MultiFrame.lnk - C:\Programme\ASUS\Asus MultiFrame\MultiFrame.exe Bluetooth Manager.lnk - C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe Microsoft Office.lnk - C:\Programme\Microsoft Office\Office10\OSA.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLS"="acaptuser32.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon] C:\Programme\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] C:\WINDOWS\system32\Ati2evxx.dll [2006-08-02 86016] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Programme\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 "NoRun"=0 "NoFolderOptions"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "HonorAutoRunSetting"= "NoRun"= "NoFolderOptions"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Programme\Messenger\msmsgs.exe"="C:\Programme\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "C:\Programme\Yahoo!\Messenger\YahooMessenger.exe"="C:\Programme\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger" "C:\Programme\Yahoo!\Messenger\YServer.exe"="C:\Programme\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server" "C:\Programme\Voipwise.com\Voipwise\Voipwise.exe"="C:\Programme\Voipwise.com\Voipwise\Voipwise.exe:*:Enabled:Voipwise" "C:\Programme\Bonjour\mDNSResponder.exe"="C:\Programme\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour" "C:\Programme\iTunes\iTunes.exe"="C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes" "C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Programme\Windows Live\Sync\WindowsLiveSync.exe"="C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" "C:\Programme\Skype\Plugin Manager\skypePM.exe"="C:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager" "C:\Programme\Skype\Phone\Skype.exe"="C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Programme\Windows Live\Sync\WindowsLiveSync.exe"="C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3ee0248a-b6fb-11dd-a37d-0018de1053c3}] shell\AutoRun\command - F:\ shell\open\command - rundll32.exe .\desktop.dll,InstallM [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a2b50884-f590-11de-a637-0018de1053c3}] shell\AutoRun\command - G:\Launcher.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aa8d996c-7f3b-11dd-a2f5-0018de1053c3}] shell\AutoRun\command - F:\RECYCLER\recycld.exe shell\open\command - F:\RECYCLER\recycld.exe ======List of files/folders created in the last 1 months====== 2010-01-14 11:06:07 ----A---- C:\WINDOWS\OEWABLog.txt 2010-01-14 11:05:58 ----A---- C:\WINDOWS\system32\setb0.tmp 2010-01-14 11:04:45 ----D---- C:\WINDOWS\Prefetch 2010-01-14 11:01:36 ----HD---- C:\WINDOWS\$NtUninstallKB955759$ 2010-01-14 11:01:28 ----HD---- C:\WINDOWS\$NtUninstallKB972270$ 2010-01-14 11:01:18 ----HD---- C:\WINDOWS\$NtUninstallKB970430$ 2010-01-14 11:01:10 ----HD---- C:\WINDOWS\$NtUninstallKB974318$ 2010-01-14 11:00:55 ----HD---- C:\WINDOWS\$NtUninstallKB976325$ 2010-01-14 11:00:47 ----HD---- C:\WINDOWS\$NtUninstallKB974392$ 2010-01-14 11:00:39 ----HD---- C:\WINDOWS\$NtUninstallKB971737$ 2010-01-14 11:00:31 ----HD---- C:\WINDOWS\$NtUninstallKB973687$ 2010-01-14 11:00:23 ----HD---- C:\WINDOWS\$NtUninstallKB969947$ 2010-01-14 11:00:13 ----HD---- C:\WINDOWS\$NtUninstallKB976749$ 2010-01-14 10:59:55 ----HD---- C:\WINDOWS\$NtUninstallKB971486$ 2010-01-14 10:59:41 ----HD---- C:\WINDOWS\$NtUninstallKB974455$ 2010-01-14 10:59:33 ----HD---- C:\WINDOWS\$NtUninstallKB969059$ 2010-01-14 10:59:27 ----HD---- C:\WINDOWS\$NtUninstallKB974112$ 2010-01-14 10:59:20 ----HD---- C:\WINDOWS\$NtUninstallKB975025$ 2010-01-14 10:59:12 ----HD---- C:\WINDOWS\$NtUninstallKB974571$ 2010-01-14 10:59:05 ----HD---- C:\WINDOWS\$NtUninstallKB975467$ 2010-01-14 10:58:58 ----HD---- C:\WINDOWS\$NtUninstallKB956844$ 2010-01-14 10:58:49 ----HD---- C:\WINDOWS\$NtUninstallKB968389$ 2010-01-14 10:58:10 ----HD---- C:\WINDOWS\$NtUninstallKB961118$ 2010-01-14 10:58:03 ----HD---- C:\WINDOWS\$NtUninstallKB973869$ 2010-01-14 10:57:56 ----HD---- C:\WINDOWS\$NtUninstallKB973354$ 2010-01-14 10:57:49 ----HD---- C:\WINDOWS\$NtUninstallKB960859$ 2010-01-14 10:57:42 ----HD---- C:\WINDOWS\$NtUninstallKB971657$ 2010-01-14 10:57:35 ----HD---- C:\WINDOWS\$NtUninstallKB971557$ 2010-01-14 10:57:28 ----HD---- C:\WINDOWS\$NtUninstallKB973507$ 2010-01-14 10:57:21 ----HD---- C:\WINDOWS\$NtUninstallKB973815$ 2010-01-14 10:57:15 ----HD---- C:\WINDOWS\$NtUninstallKB972260$ 2010-01-14 10:57:06 ----HD---- C:\WINDOWS\$NtUninstallKB961503$ 2010-01-14 10:56:59 ----HD---- C:\WINDOWS\$NtUninstallKB971633$ 2010-01-14 10:56:51 ----HD---- C:\WINDOWS\$NtUninstallKB961371$ 2010-01-14 10:56:42 ----HD---- C:\WINDOWS\$NtUninstallKB968537$ 2010-01-14 10:56:35 ----HD---- C:\WINDOWS\$NtUninstallKB961501$ 2010-01-14 10:56:29 ----HD---- C:\WINDOWS\$NtUninstallKB969897$ 2010-01-14 10:56:20 ----HD---- C:\WINDOWS\$NtUninstallKB970238$ 2010-01-14 10:55:58 ----HD---- C:\WINDOWS\$NtUninstallKB956572$ 2010-01-14 10:55:48 ----HD---- C:\WINDOWS\$NtUninstallKB923561$ 2010-01-14 10:55:39 ----HD---- C:\WINDOWS\$NtUninstallKB959426$ 2010-01-14 10:55:31 ----HD---- C:\WINDOWS\$NtUninstallKB961373$ 2010-01-14 10:55:21 ----HD---- C:\WINDOWS\$NtUninstallKB952004$ 2010-01-14 10:55:13 ----HD---- C:\WINDOWS\$NtUninstallKB960803$ 2010-01-14 10:54:58 ----HD---- C:\WINDOWS\$NtUninstallKB974455_1$ 2010-01-14 10:54:43 ----HD---- C:\WINDOWS\$NtUninstallKB963027$ 2010-01-14 10:54:35 ----HD---- C:\WINDOWS\$NtUninstallKB960225$ 2010-01-14 10:54:27 ----HD---- C:\WINDOWS\$NtUninstallKB958690$ 2010-01-14 10:54:13 ----HD---- C:\WINDOWS\$NtUninstallKB967715$ 2010-01-14 10:54:04 ----HD---- C:\WINDOWS\$NtUninstallKB958687$ 2010-01-14 10:53:54 ----HD---- C:\WINDOWS\$NtUninstallKB960714$ 2010-01-14 10:53:40 ----HD---- C:\WINDOWS\$NtUninstallKB958215$ 2010-01-14 10:53:32 ----HD---- C:\WINDOWS\$NtUninstallKB974112_1$ 2010-01-14 10:53:26 ----HD---- C:\WINDOWS\$NtUninstallKB954600$ 2010-01-14 10:53:17 ----HD---- C:\WINDOWS\$NtUninstallKB956802$ 2010-01-14 10:53:09 ----HD---- C:\WINDOWS\$NtUninstallKB957097$ 2010-01-14 10:53:00 ----HD---- C:\WINDOWS\$NtUninstallKB973687_1$ 2010-01-14 10:52:54 ----HD---- C:\WINDOWS\$NtUninstallKB955069$ 2010-01-14 10:52:46 ----HD---- C:\WINDOWS\$NtUninstallKB958644$ 2010-01-14 10:52:39 ----HD---- C:\WINDOWS\$NtUninstallKB956803$ 2010-01-14 10:52:30 ----HD---- C:\WINDOWS\$NtUninstallKB957095$ 2010-01-14 10:52:22 ----HD---- C:\WINDOWS\$NtUninstallKB954211$ 2010-01-14 10:52:07 ----HD---- C:\WINDOWS\$NtUninstallKB956841$ 2010-01-14 10:51:53 ----HD---- C:\WINDOWS\$NtUninstallKB956390$ 2010-01-14 10:51:46 ----HD---- C:\WINDOWS\$NtUninstallKB938464$ 2010-01-14 10:51:39 ----HD---- C:\WINDOWS\$NtUninstallKB946648$ 2010-01-14 10:51:31 ----HD---- C:\WINDOWS\$NtUninstallKB952287$ 2010-01-14 10:51:23 ----HD---- C:\WINDOWS\$NtUninstallKB951066$ 2010-01-14 10:51:16 ----HD---- C:\WINDOWS\$NtUninstallKB952954$ 2010-01-14 10:51:08 ----HD---- C:\WINDOWS\$NtUninstallKB950974$ 2010-01-14 10:50:51 ----HD---- C:\WINDOWS\$NtUninstallKB953838$ 2010-01-14 10:50:42 ----HD---- C:\WINDOWS\$NtUninstallKB951748$ 2010-01-14 10:50:34 ----HD---- C:\WINDOWS\$NtUninstallKB951376-v2$ 2010-01-14 10:50:27 ----HD---- C:\WINDOWS\$NtUninstallKB950762$ 2010-01-14 10:50:18 ----HD---- C:\WINDOWS\$NtUninstallKB951376$ 2010-01-14 10:50:10 ----HD---- C:\WINDOWS\$NtUninstallKB951698$ 2010-01-14 10:49:59 ----HD---- C:\WINDOWS\$NtUninstallKB950759$ 2010-01-14 10:49:48 ----D---- C:\WINDOWS\LastGood.Tmp 2010-01-14 10:45:45 ----A---- C:\WINDOWS\setuplog.txt 2010-01-14 10:43:45 ----D---- C:\WINDOWS\system32\de-de 2010-01-14 10:43:44 ----D---- C:\WINDOWS\l2schemas 2010-01-14 10:43:43 ----D---- C:\WINDOWS\system32\de 2010-01-14 10:43:42 ----D---- C:\WINDOWS\system32\bits 2010-01-14 10:35:15 ----D---- C:\WINDOWS\network diagnostic 2010-01-14 10:28:45 ----HD---- C:\WINDOWS\$NtServicePackUninstall$ 2010-01-14 10:28:43 ----D---- C:\WINDOWS\EHome 2010-01-14 00:58:05 ----A---- C:\WINDOWS\ntbtlog.txt 2010-01-14 00:55:38 ----HD---- C:\WINDOWS\$NtUninstallKB955759_0$ 2010-01-14 00:55:25 ----HD---- C:\WINDOWS\$NtUninstallKB972270_0$ 2010-01-13 22:00:38 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com 2010-01-13 22:00:23 ----D---- C:\Programme\SUPERAntiSpyware 2010-01-13 22:00:23 ----D---- C:\Dokumente und Einstellungen\Maxx\Anwendungsdaten\SUPERAntiSpyware.com 2010-01-13 17:54:28 ----SHD---- C:\FOUND.004 2010-01-13 15:30:25 ----D---- C:\Dokumente und Einstellungen\Maxx\Anwendungsdaten\Malwarebytes 2010-01-13 15:03:15 ----D---- C:\rsit 2010-01-13 14:38:59 ----D---- C:\Programme\Malwarebytes' Anti-Malware 2010-01-13 14:38:59 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes 2010-01-13 14:24:51 ----D---- C:\Programme\Trend Micro 2010-01-13 13:14:56 ----A---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sysReserve.ini 2010-01-12 12:59:42 ----D---- C:\Programme\Thoosje Sevenbar 2010-01-12 12:25:36 ----D---- C:\Programme\Thoosje Vista Sidebar 2009-12-22 12:21:38 ----SHD---- C:\FOUND.003 ======List of files/folders modified in the last 1 months====== 2010-01-14 11:08:22 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2010-01-14 11:02:58 ----A---- C:\WINDOWS\SchedLgU.Txt 2010-01-13 13:34:28 ----A---- C:\WINDOWS\DUMPd1bb.tmp 2010-01-13 09:35:34 ----A---- C:\WINDOWS\DUMP609e.tmp 2010-01-12 20:58:18 ----A---- C:\WINDOWS\NeroDigital.ini 2010-01-12 14:09:28 ----A---- C:\WINDOWS\WirelessFTP.INI 2009-12-22 20:49:14 ----A---- C:\WINDOWS\ModemLog_Motorola SM56 Speakerphone Modem.txt ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys [] R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104] R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232] R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448] R1 SASDIFSV;SASDIFSV; \??\C:\Programme\SUPERAntiSpyware\SASDIFSV.SYS [] R1 SASKUTIL;SASKUTIL; \??\C:\Programme\SUPERAntiSpyware\SASKUTIL.sys [] R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520] R1 Tcpip6;Microsoft IPv6-Protokolltreiber; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2008-06-20 225856] R1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2005-08-01 64896] R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.5.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2006-10-31 21419] R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-09 56816] R2 NwlnkIpx;NWLink IPX/SPX/NetBIOS-kompatibles Transportprotokoll; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320] R2 NwlnkNb;NWLink-NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2004-08-04 63232] R2 NwlnkSpx;NWLink SPX/SPXII-Protokoll; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2004-08-04 55936] R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2006-08-02 12544] R2 ScFBPNT2;CanoScan FBP2 Port Driver; \??\C:\WINDOWS\system32\drivers\ScFBPNT2.SYS [] R2 WIBUKEY;WIBU-KEY Kernel Driver; C:\WINDOWS\SYSTEM32\DRIVERS\WibuKey.sys [2007-05-16 72704] R3 Arp1394;1394-ARP-Clientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-08-02 1681920] R3 CmBatt;Microsoft-Netzteiltreiber; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464] R3 HDAudBus;Microsoft UAA-Bustreiber für High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-15 4368896] R3 MODEMCSA;Unimodem-Datenstromfiltergerät; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128] R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2005-02-17 5632] R3 NETw3x32;Intel(R) PRO/Wireless 3945ABG Adaptertreiber für Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw3x32.sys [2006-07-26 1707776] R3 NIC1394;1394-Netzwerktreiber; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] R3 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2005-07-12 51328] R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-04 5888] R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2005-11-16 78976] R3 SASENUM;SASENUM; \??\C:\Programme\SUPERAntiSpyware\SASENUM.SYS [] R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-03-21 889472] R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2005-10-21 191936] R3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2005-11-24 47104] R3 tunmp;Microsoft Tun-Miniportadaptertreiber; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288] R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;Microsoft USB-Standardhubtreiber; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-05-23 29696] S3 HidUsb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] S3 ipswuio;ipswuio; C:\WINDOWS\System32\DRIVERS\ipswuio.sys [2006-01-24 34944] S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\system32\DRIVERS\k750bus.sys [2005-02-11 55216] S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\k750mdfl.sys [2005-02-11 6576] S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\k750mdm.sys [2005-02-11 89872] S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\k750mgmt.sys [2005-02-11 81728] S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\k750obex.sys [2005-02-11 79488] S3 mouhid;Maus-HID-Treiber; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-18 12288] S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232] S3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2006-02-02 108928] S3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2005-12-14 37632] S3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2006-02-08 62848] S3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612] S3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2006-01-31 39808] S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-10-01 32000] S3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 usbscan;USB-Scannertreiber; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 6to4;IPv6-Hilfsdienst; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R2 aawservice;Ad-Aware 2007 Service; C:\Programme\Lavasoft\Ad-Aware 2007\aawservice.exe [2008-01-04 587096] R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Programme\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289] R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2009-08-05 185089] R2 Apple Mobile Device;Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-10-01 116040] R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-08-02 401408] R2 Bonjour Service;Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [2008-08-29 238888] R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Programme\Intel\Wireless\Bin\EvtEng.exe [2006-08-02 434176] R2 NwSapAgent;SAP-Agent; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Programme\Intel\Wireless\Bin\RegSrvc.exe [2006-08-02 327680] R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Programme\Intel\Wireless\Bin\S24EvMon.exe [2006-08-02 937984] R2 SeaPort;SeaPort; C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512] R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912] R3 iPod Service;iPod Service; C:\Programme\iPod\bin\iPodService.exe [2008-10-01 536872] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2008-10-03 651720] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF----------------- |
|
14.01.2010, 11:37
| #36 |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus Habe auch nochmal den CCleaner durchlaufen lassen. Bei der Registry Fehlerbehebung kommt ein Fehler immer und immer wieder: Code:
ATTFilter Ungenutzte Datei-Endungen {80b8c23c-16e0-4cd8-bbc3-cecec9a78b79} HKCR\{80b8c23c-16e0-4cd8-bbc3-cecec9a78b79}
|
|
14.01.2010, 11:42
| #37 |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus Avenger a) Deaktiviere den Hintergrundwächter vom Virenscanner. b) Stöpsele alle externen Datenträger vom Rechner ab. c.) Lade Dir von hier Avenger: Swandog46's Public Anti-Malware Tools (Download, linksseitig) d.) Entpack das zip-Archiv, führe die Datei "avenger.exe" aus (unter Vista per Rechtsklick => als Administrator ausführen). Die Haken unten wie abgebildet setzen:  e.) Kopiere Dir exakt die Zeilen aus dem folgenden Code-Feld: Code:
ATTFilter Folders to delete:
C:\FOUND.003
C:\FOUND.004
Files to delete:
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sysReserve.ini
g.) Der Code-Text hier aus meinem Beitrag müsste nun unter "Input Script here" in "The Avenger" zu sehen sein. h.) Falls dem so ist, klick unten rechts auf "Execute". Bestätige die nächste Abfrage mit "Ja", die Frage zu "Reboot now" (Neustart des Systems) ebenso. i.) Nach dem Neustart erhältst Du ein LogFile von Avenger eingeblendet. Kopiere dessen Inhalt und poste ihn hier. |
|
14.01.2010, 11:45
| #38 | |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen herausZitat:
|
|
14.01.2010, 11:59
| #39 |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus So... hier das Avenger log: Code:
ATTFilter Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com
Platform: Windows XP
*******************
Script file opened successfully.
Script file read successfully.
Backups directory opened successfully at C:\Avenger
*******************
Beginning to process script file:
Rootkit scan active.
No rootkits found!
Folder "C:\FOUND.003" deleted successfully.
Folder "C:\FOUND.004" deleted successfully.
File "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sysReserve.ini" deleted successfully.
Completed script processing.
*******************
Finished! Terminate.
|
|
14.01.2010, 12:00
| #40 |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus Ach ja, seit dem SP3 Update, nervt mich das Windows Security Center mit der Meldung, ich habe keine Firewall installiert... Kannst du eine gute empfehlen? |
|
14.01.2010, 13:14
| #41 |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus So, jetzt erstelle noch bitte mit dem Editor oder Notepad (nicht Word o. ä.) eine Textdatei mit folgendem Inhalt Code:
ATTFilter Windows Registry Editor Version 5.0
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3ee0248a-b6fb-11dd-a37d-0018de1053c3}]
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{aa8d996c-7f3b-11dd-a2f5-0018de1053c3}]
Die Datei sollte dann also irgendeinname.reg heißen. Führe die Datei mit Doppelcklick aus und bestätige die Nachfragen. Zur Firewall: eigentlich reicht es aus, die windowseigene Firewall zu aktivieren, das sollte auch den Security Center zum Verstummen bringen. Zusätzliche Firewalls bringen im Allgemeinen keinen Mehrnutzen. So, wenn alles gut geklappt hat, gibt's dann noch ein paar Tipps, und dann sind wir durch.  |
|
14.01.2010, 14:39
| #42 | |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen herausZitat:
|
|
14.01.2010, 14:50
| #43 | |
| /// Selecta Jahrusso   | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus kurz Zitat:
*raushüpf*
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
|
14.01.2010, 15:57
| #44 |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus Ups, ja, habe eine 0 vergessen...  |
|
14.01.2010, 18:19
| #45 |
| | "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus Gut, das wär dann auch erledigt. |
|
| Themen zu "Windows Security Center" gibt ständig Virus/Trojaner Warnungen heraus |
| "windows security center", adaware, antivirus, bietet, center, crash, firefox, folge, folgendes, gefahr, gen, heute, infiziert, installiert, interne, malware, plötzlich, problem, programm, security, software, spybot, virus/trojaner, warnungen, windows, windows security, windows security center, öffnen |
Linear-Darstellung
