system infiziert?

parmenion · 23.05.2010, 20:55

GMER log:

Code:

ATTFilter

GMER 1.0.15.15281 - hxxp://www.gmer.net
Rootkit scan 2010-05-23 21:51:45
Windows 5.1.2600 Service Pack 2
Running: 4myw1nfg.exe; Driver: C:\DOKUME~1\MILENA\LOKALE~1\Temp\afaiikog.sys


---- System - GMER 1.0.15 ----

SSDT            82282630                                                                                                            ZwAssignProcessToJobObject
SSDT            spqr.sys                                                                                                            ZwCreateKey [0xF84230E0]
SSDT            spqr.sys                                                                                                            ZwEnumerateKey [0xF843BDA4]
SSDT            spqr.sys                                                                                                            ZwEnumerateValueKey [0xF843C132]
SSDT            spqr.sys                                                                                                            ZwOpenKey [0xF84230C0]
SSDT            82281A60                                                                                                            ZwOpenProcess
SSDT            82281E80                                                                                                            ZwOpenThread
SSDT            spqr.sys                                                                                                            ZwQueryKey [0xF843C20A]
SSDT            spqr.sys                                                                                                            ZwQueryValueKey [0xF843C08A]
SSDT            spqr.sys                                                                                                            ZwSetValueKey [0xF843C29C]
SSDT            82282460                                                                                                            ZwSuspendProcess
SSDT            82282280                                                                                                            ZwSuspendThread
SSDT            82281C90                                                                                                            ZwTerminateProcess
SSDT            822820B0                                                                                                            ZwTerminateThread

INT 0x62        ?                                                                                                                   823E0BF8
INT 0x63        ?                                                                                                                   81FD7F00
INT 0x82        ?                                                                                                                   823E0BF8
INT 0xA4        ?                                                                                                                   81FD7F00
INT 0xB4        ?                                                                                                                   81FD7F00

---- Kernel code sections - GMER 1.0.15 ----

?               spqr.sys                                                                                                            Das System kann die angegebene Datei nicht finden. !
.text           USBPORT.SYS!DllUnload                                                                                               F7B9F62C 5 Bytes  JMP 81FD74E0 
.text           as22tuia.SYS                                                                                                        F7B4E386 35 Bytes  [00, 00, 00, 00, 00, 00, 20, ...]
.text           as22tuia.SYS                                                                                                        F7B4E3AA 24 Bytes  [00, 00, 00, 00, 00, 00, 00, ...]
.text           as22tuia.SYS                                                                                                        F7B4E3C4 3 Bytes  [00, 80, 02]
.text           as22tuia.SYS                                                                                                        F7B4E3C9 1 Byte  [30]
.text           as22tuia.SYS                                                                                                        F7B4E3C9 11 Bytes  [30, 00, 00, 00, 5E, 02, 00, ...] {XOR [EAX], AL; ADD [EAX], AL; POP ESI; ADD AL, [EAX]; ADD [EAX], AL; ADD [EAX], AL}
.text           ...                                                                                                                 

---- User code sections - GMER 1.0.15 ----

.text           C:\Programme\Mozilla Firefox\firefox.exe[2704] ntdll.dll!LdrLoadDll                                                 7C925CD3 5 Bytes  JMP 004013F0 C:\Programme\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation)
.text           C:\Programme\ESET\ESET NOD32 Antivirus\ekrn.exe[4000] kernel32.dll!SetUnhandledExceptionFilter                      7C844915 4 Bytes  [C2, 04, 00, 00]

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT             \WINXP\System32\Drivers\SCSIPORT.SYS[ntoskrnl.exe!DbgBreakPoint]                                                    823742D8
IAT             pci.sys[ntoskrnl.exe!IoDetachDevice]                                                                                [F844EDDC] spqr.sys
IAT             pci.sys[ntoskrnl.exe!IoAttachDeviceToDeviceStack]                                                                   [F844EE30] spqr.sys
IAT             atapi.sys[HAL.dll!READ_PORT_UCHAR]                                                                                  [F8424042] spqr.sys
IAT             atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT]                                                                          [F842413E] spqr.sys
IAT             atapi.sys[HAL.dll!READ_PORT_USHORT]                                                                                 [F84240C0] spqr.sys
IAT             atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT]                                                                         [F8424800] spqr.sys
IAT             atapi.sys[HAL.dll!WRITE_PORT_UCHAR]                                                                                 [F84246D6] spqr.sys
IAT             \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR]                                                  [F8433B90] spqr.sys
IAT             \SystemRoot\system32\DRIVERS\USBPORT.SYS[ntoskrnl.exe!DbgBreakPoint]                                                81FD75E0
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlInitUnicodeString]                                        00021483
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!swprintf]                                                    01B05E00
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeSetEvent]                                                  5DE58B5B
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoCreateSymbolicLink]                                        7E8366C3
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoGetConfigurationInformation]                               0F740028
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoDeleteSymbolicLink]                                        89320C8D
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmFreeMappingAddress]                                        00022C8B
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoFreeErrorLogEntry]                                         46B70F00
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoDisconnectInterrupt]                                       66D00328
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmUnmapIoSpace]                                              002A7E83
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!ObReferenceObjectByPointer]                                  0C8D1574
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IofCompleteRequest]                                          288B8932
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlCompareUnicodeString]                                     0F000002
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IofCallDriver]                                               832A46B7
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmAllocateMappingAddress]                                    E08303C0
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoAllocateErrorLogEntry]                                     66D003FC
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoConnectInterrupt]                                          002C7E83
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoDetachDevice]                                              0C8D1E74
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeWaitForSingleObject]                                       248B8932
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeInitializeEvent]                                           8A000002
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlAnsiStringToUnicodeString]                                83880846
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlInitAnsiString]                                           000001C4
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoBuildDeviceIoControlRequest]                               2C4EB70F
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoQueueWorkItem]                                             8303C183
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmMapIoSpace]                                                D103FCE1
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoInvalidateDeviceRelations]                                 2E7E8366
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoReportDetectedDevice]                                      8D1C7400
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoReportResourceForDetection]                                83893204
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlxAnsiStringToUnicodeSize]                                 0000021C
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!NlsMbCodePageTag]                                            2E4EB70F
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!PoRequestPowerIrp]                                           02208B89
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeInsertByKeyDeviceQueue]                                    B70F0000
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!PoRegisterDeviceForIdleDetection]                            E0C12E46
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!sprintf]                                                     03D00304
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmMapLockedPagesSpecifyCache]                                10B389F2
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!ObfDereferenceObject]                                        80000002
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoGetAttachedDeviceReference]                                0975013E
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoInvalidateDeviceState]                                     1BD2E853
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!ZwClose]                                                     C4830000
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!ObReferenceObjectByHandle]                                   B05E5F04
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!ZwCreateDirectoryObject]                                     E58B5B01
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoBuildSynchronousFsdRequest]                                CCCCC35D
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!PoStartNextPowerIrp]                                         CCCCCCCC
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!PoCallDriver]                                                53EC8B55
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoCreateDevice]                                              08758B56
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoAllocateDriverObjectExtension]                             0218BE83
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlQueryRegistryValues]                                      57000000
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!ZwOpenKey]                                                   45C60674
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlFreeUnicodeString]                                        1EEB010B
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoStartTimer]                                                0210868B
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeInitializeTimer]                                           C0850000
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoInitializeTimer]                                           808A1074
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeInitializeDpc]                                             00000804
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeInitializeSpinLock]                                        A03CF024
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoInitializeIrp]                                             0B45950F
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!ZwCreateKey]                                                 45C604EB
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlAppendUnicodeStringToString]                              458A000B
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlIntegerToUnicodeString]                                   88C0840B
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!ZwSetValueKey]                                               840F0946
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeInsertQueueDpc]                                            000000C1
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KefAcquireSpinLockAtDpcLevel]                                14B30E8B
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoStartPacket]                                               1C8A86C6
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KefReleaseSpinLockFromDpcLevel]                              88010000
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoBuildAsynchronousFsdRequest]                               001C8D9E
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoFreeMdl]                                                   A99E8800
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmUnlockPages]                                               C600001C
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoWriteErrorLogEntry]                                        001C8E86
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeRemoveByKeyDeviceQueue]                                    86C60100
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmMapLockedPagesWithReservedMapping]                         00001CAA
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmUnmapReservedMapping]                                      70518B01
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeSynchronizeExecution]                                      8D52006A
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoStartNextPacket]                                           001C9086
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeBugCheckEx]                                                E5E85000
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeRemoveDeviceQueue]                                         8B000023
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeSetTimer]                                                  70518B0E
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeCancelTimer]                                               8D52016A
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!_allmul]                                                     001CAC86
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmProbeAndLockPages]                                         D1E85000
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!_except_handler3]                                            8B000023
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!PoSetPowerState]                                             18C4830E
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoOpenDeviceRegistryKey]                                     1C959E88
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlWriteRegistryValue]                                       9E880000
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!_aulldiv]                                                    00001CB1
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!strstr]                                                      0E798366
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!_strupr]                                                     74AAB000
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeQuerySystemTime]                                           8986C636
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoWMIRegistrationControl]                                    1A00001C
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!KeTickCount]                                                 1C8B86C6
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoAttachDeviceToDeviceStack]                                 C6020000
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoDeleteDevice]                                              001C9686
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!ExAllocatePoolWithTag]                                       86C60200
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoAllocateWorkItem]                                          00001CB2
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoAllocateIrp]                                               9D9E8802
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoAllocateMdl]                                               8800001C
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmBuildMdlForNonPagedPool]                                   001CB99E
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmLockPagableDataSection]                                    9E868800
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoGetDriverObjectExtension]                                  8800001C
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmUnlockPagableImageSection]                                 001CBA86
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!ExFreePoolWithTag]                                           C61AEB00
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoFreeIrp]                                                   001C8986
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!IoFreeWorkItem]                                              86C61200
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!InitSafeBootMode]                                            00001C8B
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlCompareMemory]                                            96868801
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!RtlCopyUnicodeString]                                        8800001C
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!memmove]                                                     001CB286
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[ntoskrnl.exe!MmHighestUserAddress]                                        88968B00
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!KfAcquireSpinLock]                                                0C8D1C46
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!READ_PORT_UCHAR]                                                  B48B8932
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!KeGetCurrentIrql]                                                 89000001
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!KfRaiseIrql]                                                      0001C083
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!KfLowerIrql]                                                      24468B00
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!HalGetInterruptVector]                                            89820C8D
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!HalTranslateBusAddress]                                           D18BF84D
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!KeStallExecutionProcessor]                                        860F1639
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!KfReleaseSpinLock]                                                000000BD
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!READ_PORT_BUFFER_USHORT]                                          020CB389
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!READ_PORT_USHORT]                                                 83660000
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!WRITE_PORT_BUFFER_USHORT]                                         7400067E
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[HAL.dll!WRITE_PORT_UCHAR]                                                 89D60320
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[WMILIB.SYS!WmiSystemControl]                                              8D168B00
IAT             \SystemRoot\System32\Drivers\as22tuia.SYS[WMILIB.SYS!WmiCompleteRequest]                                            F0003284

---- Devices - GMER 1.0.15 ----

Device          \FileSystem\Ntfs \Ntfs                                                                                              823DF1F8

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                                              eamon.sys (Amon monitor/ESET)

Device          \Driver\sptd \Device\4227874988                                                                                     spqr.sys
Device          \Driver\usbohci \Device\USBPDO-0                                                                                    81FCD1F8
Device          \Driver\dmio \Device\DmControl\DmIoDaemon                                                                           823721F8
Device          \Driver\dmio \Device\DmControl\DmConfig                                                                             823721F8
Device          \Driver\dmio \Device\DmControl\DmPnP                                                                                823721F8
Device          \Driver\dmio \Device\DmControl\DmInfo                                                                               823721F8
Device          \Driver\usbohci \Device\USBPDO-1                                                                                    81FCD1F8
Device          \Driver\PCI_PNP2488 \Device\00000039                                                                                spqr.sys
Device          \Driver\usbehci \Device\USBPDO-2                                                                                    8218A1F8

AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                                           epfwtdir.sys (ESET Antivirus Network Redirector/ESET)

Device          \Driver\Ftdisk \Device\HarddiskVolume1                                                                              823E11F8
Device          \Driver\Cdrom \Device\CdRom0                                                                                        822311F8
Device          \Driver\Cdrom \Device\CdRom1                                                                                        822311F8
Device          \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17                                                                        823E01F8
Device          \Driver\atapi \Device\Ide\IdePort0                                                                                  823E01F8
Device          \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3                                                                         823E01F8
Device          \Driver\atapi \Device\Ide\IdePort1                                                                                  823E01F8
Device          \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f                                                                         823E01F8
Device          \Driver\Cdrom \Device\CdRom2                                                                                        822311F8
Device          \Driver\NetBT \Device\NetBt_Wins_Export                                                                             821361F8
Device          \Driver\NetBT \Device\NetbiosSmb                                                                                    821361F8
Device          \Driver\usbohci \Device\USBFDO-0                                                                                    81FCD1F8
Device          \Driver\usbohci \Device\USBFDO-1                                                                                    81FCD1F8
Device          \FileSystem\MRxSmb \Device\LanmanDatagramReceiver                                                                   821B11F8
Device          \Driver\usbehci \Device\USBFDO-2                                                                                    8218A1F8
Device          \FileSystem\MRxSmb \Device\LanmanRedirector                                                                         821B11F8
Device          \Driver\Ftdisk \Device\FtControl                                                                                    823E11F8
Device          \Driver\NetBT \Device\NetBT_Tcpip_{D20F6B86-A4AE-4242-B9E1-450432B7378F}                                            821361F8
Device          \Driver\as22tuia \Device\Scsi\as22tuia1Port2Path0Target0Lun0                                                        8211F1F8
Device          \Driver\as22tuia \Device\Scsi\as22tuia1                                                                             8211F1F8
Device          \FileSystem\Cdfs \Cdfs                                                                                              81FCE1F8

---- Threads - GMER 1.0.15 ----

Thread          System [4:3876]                                                                                                     82280790

---- Registry - GMER 1.0.15 ----

Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1                                                                  771343423
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2                                                                  285507792
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0                                                                  1
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                    
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                 C:\Programme\DAEMON Tools Lite\
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                 0x00 0x00 0x00 0x00 ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                 0
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                              0xA9 0x25 0xB5 0x6E ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                           
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                        0x20 0x01 0x00 0x00 ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                     0xBE 0x9C 0xE9 0x14 ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                      
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                0xD4 0x2A 0x97 0x2D ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                     C:\Programme\DAEMON Tools Lite\
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0x54 0x27 0x31 0x30 ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)       
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                            0x20 0x01 0x00 0x00 ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                         0xBE 0x9C 0xE9 0x14 ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)  
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                    0xD4 0x2A 0x97 0x2D ...

---- EOF - GMER 1.0.15 ----

system infiziert?

Plagegeister aller Art und deren Bekämpfung: system infiziert?

system infiziert?

Ähnliche Themen: system infiziert?