| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Antimalware doctor: Malwarebytes hat Probleme beim löschen ?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
| |
17.08.2010, 20:19
| #1 |
| |  Antimalware doctor: Malwarebytes hat Probleme beim löschen ? Hallo, habe mir Antimalware doctor eingefangen. Habe wie beschrieben rkill.com installiert und Malwarebytes scan drüber laufen lassen. Jedoch konnte Malewarebytes nicht alle "Objekte" löschen. "Bestimmte Objekte konnten nicht entfernt werden. Eine Logdatei wurde im Logdatei-Verzeichnis gespeichert." "Der Computer muss neu gestartet werden, um den Entfernungsprozess abzuschließen" Nachdem ich das gemacht habe und ich beim nächsten Start nochmals den Scan durchlaufen lasse kommt immer dasselbe. Mal findet er wieder nur 2 dann 4 dann 5 immer unterschiedlich aber immer der gleiche Satz. Im Anhang ist die Meldung von Malewarebyte und die files die er löschen will. Danke schon mal für jegliche Hilfe. |
|
17.08.2010, 21:10
| #2 | |
| /// Helfer-Team    | Antimalware doctor: Malwarebytes hat Probleme beim löschen ? Hallo und Herzlich Willkommen!
__________________ Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]: Zitat:
- Lade dir RSIT - 2. Bitte Versteckte - und Systemdateien sichtbar machen den Link hier anklicken: System-Dateien und -Ordner unter XP und Vista sichtbar machen Am Ende unserer Arbeit, kannst wieder rückgängig machen! 3. → Lade Dir HJTscanlist.zip herunter → entpacke die Datei auf deinem Desktop → Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren → per Doppelklick starten → Wähle dein Betriebsystem aus - Vista → Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen → Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren → Bitte kopiere den Inhalt hier in Deinen Thread. 4. Ich würde gerne noch all deine installierten Programme sehen: Lade dir das Tool CCleaner herunter installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..." wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein 5. Achtung!: WENN GMER NICHT AUSGEFÜHRT WERDEN KANN ODER PROBMLEME VERURSACHT, fahre mit dem nächsten Punkt fort!- Es ist NICHT sinnvoll einen zweiten Versuch zu starten! Um einen tieferen Einblick in dein System, um eine mögliche Infektion mit einem Rootkit/Info v.wikipedia.org) aufzuspüren, werden wir ein Tool - Gmer - einsetzen :
** keine Verbindung zu einem Netzwerk und Internet - WLAN nicht vergessen Wenn der Scan beendet ist, bitte alle Programme und Tools wieder aktivieren! 6. Lade und installiere das Tool RootRepeal herunter
Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post: → vor dein log schreibst du:[code] hier kommt dein logfile rein → dahinter:[/code] ** Möglichst nicht ins internet gehen, kein Online-Banking, File-sharing, Chatprogramme usw grußCoverflow |
|
19.08.2010, 14:23
| #3 |
| | Antimalware doctor: Malwarebytes hat Probleme beim löschen ? hey, dankeschön für die Hilfe
__________________Da der PC aber meiner Schwester gehört und sie woanders wohnt kann ich es erst in ein paar Tagen ausprobieren wenn ich wieder bei ihr bin. hej, mein bruder hat mir seinen namen und das passwort gegeben und jetzt schreibe ich. da ich von pcs nicht so viel ahnung habe, müsst ihr mir etwas helfen. also, die erste logfile habe ich gefunden: RSIT Logfile: Code:
ATTFilter Logfile of random's system information tool 1.08 (written by random/random) Run by Fine at 2010-08-19 23:16:39 Microsoft® Windows Vista™ Home Premium Service Pack 2 System drive C: has 45 GB (29%) free of 152 GB Total RAM: 3069 MB (64% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 23:16:51, on 19.08.2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18943) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\iTunes\iTunesHelper.exe C:\Windows\RtHDVCpl.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Windows\System32\spool\drivers\w32x86\3\EKIJ5000MUI.exe C:\Program Files\Microsoft Security Essentials\msseces.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\system32\conime.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\Fine\Downloads\RSIT.exe C:\Program Files\trend micro\Fine.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6522 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - - (no file) R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [Conime] %windir%\system32\conime.exe O4 - HKLM\..\Run: [EKIJ5000StatusMonitor] C:\Windows\system32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe O4 - HKLM\..\Run: [MSSE] "C:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User 'Default user') O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: eBay - Der weltweite Online Marktplatz - {76577871-04EC-495E-A12B-91F7C3600AFA} - hxxp://rover.ebay.com/rover/1/707-44556-9400-3/4 (file missing) O9 - Extra button: Amazon.de - {8A918C1D-E123-4E36-B562-5C1519E434CE} - hxxp://www.amazon.de/exec/obidos/redirect-home?tag=Toshibadebholink-21&site=home (file missing) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing) O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Kodak AiO Network Discovery Service - Eastman Kodak Company - C:\Program Files\Kodak\AiO\Center\ekdiscovery.exe O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (file missing) O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe O23 - Service: WTGService - Unknown owner - C:\Program Files\Verbindungsassistent\wtgservice.exe -- End of file - 7357 bytes ======Scheduled tasks folder====== C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-12 35840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-12-09 958200] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2009-09-21 305440] "RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-04-08 6037504] "DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104] "Conime"=C:\Windows\system32\conime.exe [2009-04-11 69120] "EKIJ5000StatusMonitor"=C:\Windows\system32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe [2010-05-07 1638400] "MSSE"=C:\Program Files\Microsoft Security Essentials\msseces.exe [2010-06-01 1093208] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-05-13 26192168] "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] igfxdev.dll [] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "EnableLUA"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveAutorun"=0 "NoFolderOptions"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "BindDirectlyToPropertySetStorage"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 months====== 2010-08-19 20:56:46 ----D---- C:\Windows\Sun 2010-08-17 21:20:34 ----D---- C:\Program Files\Microsoft Security Essentials 2010-08-17 20:40:28 ----D---- C:\Program Files\trend micro 2010-08-17 20:40:27 ----D---- C:\rsit 2010-08-17 20:39:46 ----D---- C:\Program Files\CCleaner 2010-08-17 16:42:48 ----D---- C:\Users\Fine\AppData\Roaming\Malwarebytes 2010-08-17 16:42:43 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys 2010-08-17 16:42:41 ----D---- C:\ProgramData\Malwarebytes 2010-08-17 16:42:41 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2010-08-17 16:42:41 ----A---- C:\Windows\system32\drivers\mbam.sys 2010-08-16 20:18:12 ----D---- C:\Users\Fine\AppData\Roaming\B38EFA63CCF20E2A198106CBA3D239F7 2010-08-11 13:08:11 ----A---- C:\Windows\system32\schannel.dll 2010-08-11 13:08:09 ----A---- C:\Windows\system32\iertutil.dll 2010-08-11 13:08:08 ----A---- C:\Windows\system32\mshtml.dll 2010-08-11 13:08:06 ----A---- C:\Windows\system32\ieframe.dll 2010-08-11 13:08:05 ----A---- C:\Windows\system32\urlmon.dll 2010-08-11 13:08:05 ----A---- C:\Windows\system32\msfeeds.dll 2010-08-11 13:08:05 ----A---- C:\Windows\system32\ie4uinit.exe 2010-08-11 13:08:04 ----A---- C:\Windows\system32\wininet.dll 2010-08-11 13:08:04 ----A---- C:\Windows\system32\occache.dll 2010-08-11 13:08:04 ----A---- C:\Windows\system32\mstime.dll 2010-08-11 13:08:04 ----A---- C:\Windows\system32\msfeedssync.exe 2010-08-11 13:08:04 ----A---- C:\Windows\system32\msfeedsbs.dll 2010-08-11 13:08:04 ----A---- C:\Windows\system32\jsproxy.dll 2010-08-11 13:08:04 ----A---- C:\Windows\system32\ieUnatt.exe 2010-08-11 13:08:04 ----A---- C:\Windows\system32\ieui.dll 2010-08-11 13:08:04 ----A---- C:\Windows\system32\iesysprep.dll 2010-08-11 13:08:04 ----A---- C:\Windows\system32\iesetup.dll 2010-08-11 13:08:04 ----A---- C:\Windows\system32\iernonce.dll 2010-08-11 13:08:04 ----A---- C:\Windows\system32\iepeers.dll 2010-08-11 13:08:04 ----A---- C:\Windows\system32\iedkcs32.dll 2010-08-11 13:08:02 ----A---- C:\Windows\system32\iccvid.dll 2010-08-11 13:08:01 ----A---- C:\Windows\system32\win32k.sys 2010-08-11 13:07:49 ----A---- C:\Windows\system32\rtutils.dll 2010-08-11 13:07:38 ----A---- C:\Windows\system32\ntoskrnl.exe 2010-08-11 13:07:38 ----A---- C:\Windows\system32\ntkrnlpa.exe 2010-08-11 13:07:36 ----A---- C:\Windows\system32\msxml3.dll 2010-08-11 13:07:33 ----A---- C:\Windows\system32\drivers\srv2.sys 2010-08-11 13:07:33 ----A---- C:\Windows\system32\drivers\srv.sys 2010-08-11 13:07:32 ----A---- C:\Windows\system32\drivers\tcpip.sys 2010-08-03 17:36:14 ----A---- C:\Windows\system32\shell32.dll 2010-07-28 13:07:50 ----D---- C:\ProgramData\kds_kodak 2010-07-27 19:32:50 ----D---- C:\Windows\system32\kodak 2010-07-27 19:23:43 ----D---- C:\ProgramData\Eastman Kodak Company 2010-07-27 19:21:30 ----D---- C:\Program Files\Kodak 2010-07-27 19:20:00 ----D---- C:\ProgramData\Kodak 2010-07-27 19:18:48 ----D---- C:\Users\Fine\AppData\Roaming\Temp 2010-07-23 16:10:42 ----D---- C:\ProgramData\tmp 2010-07-23 16:10:40 ----D---- C:\ProgramData\hps 2010-07-23 16:01:44 ----D---- C:\Program Files\SCHLECKER 2010-07-23 09:03:06 ----D---- C:\Program Files\Common Files\Skype ======List of files/folders modified in the last 1 months====== 2010-08-19 23:16:51 ----D---- C:\Windows\Prefetch 2010-08-19 23:16:39 ----D---- C:\Windows\Temp 2010-08-19 21:25:18 ----D---- C:\ProgramData\Adobe 2010-08-19 21:11:18 ----D---- C:\Windows 2010-08-19 20:56:02 ----D---- C:\Windows\inf 2010-08-19 20:56:02 ----AD---- C:\Windows\System32 2010-08-19 20:56:02 ----A---- C:\Windows\system32\PerfStringBackup.INI 2010-08-19 11:52:02 ----SHD---- C:\System Volume Information 2010-08-17 21:56:42 ----D---- C:\Users\Fine\AppData\Roaming\Skype 2010-08-17 21:27:35 ----HD---- C:\ProgramData 2010-08-17 21:27:19 ----D---- C:\Users\Fine\AppData\Roaming\skypePM 2010-08-17 21:20:50 ----SHD---- C:\Windows\Installer 2010-08-17 21:20:50 ----HD---- C:\Config.Msi 2010-08-17 21:20:40 ----D---- C:\Windows\system32\drivers 2010-08-17 21:20:40 ----D---- C:\Windows\system32\catroot2 2010-08-17 21:20:40 ----D---- C:\Windows\system32\catroot 2010-08-17 21:20:39 ----SD---- C:\ProgramData\Microsoft 2010-08-17 21:20:34 ----RD---- C:\Program Files 2010-08-17 20:46:08 ----D---- C:\Windows\L2Schemas 2010-08-17 20:41:00 ----D---- C:\Users\Fine\AppData\Roaming\Media Player Classic 2010-08-17 20:40:47 ----D---- C:\Windows\Debug 2010-08-17 20:35:36 ----D---- C:\Windows\Help 2010-08-17 19:59:42 ----D---- C:\Windows\PLA 2010-08-17 19:34:11 ----D---- C:\Program Files\Mozilla Firefox 2010-08-17 19:09:33 ----AD---- C:\Windows\Setup 2010-08-17 16:59:35 ----D---- C:\Windows\RegisteredPackages 2010-08-17 16:58:41 ----D---- C:\Users\Fine\AppData\Roaming\ICQ 2010-08-17 16:46:26 ----D---- C:\ProgramData\Norton 2010-08-17 16:46:24 ----D---- C:\Windows\Tasks 2010-08-13 11:44:35 ----D---- C:\Windows\Microsoft.NET 2010-08-13 11:44:10 ----RSD---- C:\Windows\assembly 2010-08-12 10:53:55 ----D---- C:\Windows\winsxs 2010-08-12 08:32:43 ----D---- C:\Windows\system32\migration 2010-08-12 08:32:43 ----D---- C:\Program Files\Internet Explorer 2010-08-12 08:32:42 ----D---- C:\Program Files\Movie Maker 2010-08-12 08:28:22 ----D---- C:\Program Files\Microsoft Works 2010-08-12 08:26:16 ----D---- C:\ProgramData\Microsoft Help 2010-08-12 08:23:04 ----D---- C:\Program Files\Windows Mail 2010-08-11 01:43:55 ----D---- C:\Windows\system32\spool 2010-08-03 20:09:31 ----A---- C:\Windows\system32\mrt.exe 2010-07-27 19:32:50 ----D---- C:\Windows\twain_32 2010-07-27 19:26:33 ----D---- C:\Windows\system32\drivers\UMDF 2010-07-23 09:03:08 ----D---- C:\Windows\system32\Tasks 2010-07-23 09:03:06 ----D---- C:\Program Files\Common Files ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2008-04-15 312344] R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2008-02-23 43872] R0 tos_sps32;TOSHIBA tos_sps32 Service; C:\Windows\system32\DRIVERS\tos_sps32.sys [2008-07-18 279376] R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2007-11-09 23640] R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216] R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2008-02-15 46592] R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008] R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400] R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-04-08 3548672] R3 FwLnk;FwLnk Driver; C:\Windows\system32\DRIVERS\FwLnk.sys [2006-11-20 7168] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-04-09 2095512] R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368] R3 NETw5v32;Intel(R) Wireless WiFi Link Adaptertreiber für Windows Vista 32-Bit; C:\Windows\system32\DRIVERS\NETw5v32.sys [2008-04-28 3658752] R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-04-15 118784] R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400] R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2006-10-18 16128] R3 usbvideo;Chicony USB 2.0 Camera; C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016] R3 UVCFTR;UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [2007-12-17 18432] S3 AgereSoftModem;Agere Systems-Softmodem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-02 983552] S3 Dot4;MS IEEE-1284.4-Treiber; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-21 131584] S3 Dot4Print;Druckerklassentreiber für IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-21 16384] S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-21 36864] S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632] S3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520] S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2008-07-24 101760] S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [] S3 massfilter;ZTE Mass Storage Filter Driver; C:\Windows\system32\DRIVERS\massfilter.sys [2009-04-09 7680] S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192] S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888] S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016] S3 Tosrfcom;Tosrfcom; C:\Windows\system32\drivers\Tosrfcom.sys [] S3 tosrfec;Bluetooth ACPI; C:\Windows\system32\DRIVERS\tosrfec.sys [2006-10-23 9216] S3 usbscan;USB-Scannertreiber; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328] S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448] S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328] S3 ZTEusbmdm6k;ZTE Proprietary USB Driver; C:\Windows\system32\DRIVERS\ZTEusbmdm6k.sys [2009-04-09 104960] S3 ZTEusbnet;ZTE USB-NDIS miniport; C:\Windows\system32\DRIVERS\ZTEusbnet.sys [2009-04-09 110592] S3 ZTEusbnmea;ZTE NMEA Port; C:\Windows\system32\DRIVERS\ZTEusbnmea.sys [2009-04-09 105344] S3 ZTEusbser6k;ZTE Diagnostic Port; C:\Windows\system32\DRIVERS\ZTEusbser6k.sys [2009-04-09 104960] S3 ZTEusbvoice;ZTE VoUSB Port; C:\Windows\system32\DRIVERS\ZTEusbvoice.sys [2009-04-09 105344] S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656] S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672] R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-04-07 667648] R2 Bonjour Service;Bonjour-Dienst; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888] R2 ConfigFree Service;ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [2008-04-17 40960] R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-05-06 1220608] R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2008-01-21 21504] R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-10-19 222456] R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904] R2 TempoMonitoringService;Notebook Performance Tuning Service ; C:\Program Files\Toshiba TEMPRO\TempoSVC.exe [2008-04-24 99720] R2 TNaviSrv;TOSHIBA Navi Support Service; C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe [2008-07-18 83312] R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2007-11-21 129632] R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe [2008-01-17 431456] R2 TOSHIBA SMART Log Service;TOSHIBA SMART Log Service; C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [2007-12-03 126976] R2 TuneUp.ProgramStatisticsSvc;@%SystemRoot%\System32\TUProgSt.exe,-1; C:\Windows\System32\TUProgSt.exe [2009-09-20 604488] R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2006-08-23 49152] R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2008-01-21 21504] R2 WTGService;WTGService; C:\Program Files\Verbindungsassistent\wtgservice.exe [2009-11-14 308688] R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-21 21504] R3 iPod Service;iPod-Dienst; C:\Program Files\iPod\bin\iPodService.exe [2009-09-21 545568] R3 SmartFaceVWatchSrv;SmartFaceVWatchSrv; C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe [2008-04-24 73728] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-21 135664] S2 Kodak AiO Network Discovery Service;Kodak AiO Network Discovery Service; C:\Program Files\Kodak\AiO\Center\ekdiscovery.exe [2010-05-17 308592] S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504] S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-21 21504] S2 SPService;SPService; C:\Windows\system32\svchost.exe [2008-01-21 21504] S2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [] S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800] S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504] S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 TuneUp.Defrag;@%SystemRoot%\System32\TuneUpDefragService.exe,-1; C:\Windows\System32\TuneUpDefragService.exe [2009-09-20 361288] S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] -----------------EOF----------------- eine weitere nicht oder sind da zwei files in einer?? die dateien kann ich auch nicht sichtbar machen. unter extras gibt es bei mir keine ordneroptionen. es gibt Netzlaufwerk zuordnen/ trennen und synchronisierungscenter öffnen oder bin ich da falsch?? wenn ich das nicht gemacht habe kann ich trotzdem die anderen punkte machen??? lg fine ach, ich hab einfach weiter gemacht. das ist die hjtscanlist.txt datei. ich hoffe, sie bringt euch trotzdem was : Code:
ATTFilter
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
º º
hjtscanlist v2.0
º º
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Microsoft Windows [Version 6.0.6002]
C:
19.08.2010 21:11 C:\Windows --------- 28672
C:\hiberfil.sys ---------
C:\pagefile.sys ---------
19.08.2010 11:52 C:\System Volume Information --------- 24576
17.08.2010 21:27 C:\ProgramData --------- 12288
17.08.2010 21:20 C:\Config.Msi --------- 0
17.08.2010 21:20 C:\Program Files --------- 24576
17.08.2010 20:40 C:\rsit --------- 0
17.08.2010 16:41 C:\rkill.log --------- 507
02.11.2009 12:45 C:\Boot --------- 4096
15.07.2009 08:56 C:\MSOCache --------- 0
13.07.2009 06:38 C:\updatedatfix.log --------- 594
11.06.2009 18:55 C:\Toshiba --------- 0
11.06.2009 18:54 C:\$RECYCLE.BIN --------- 0
11.06.2009 18:47 C:\Users --------- 4096
11.06.2009 18:43 C:\Programme --------- 0
11.06.2009 18:43 C:\Dokumente und Einstellungen --------- 0
11.06.2009 17:36 C:\RHDSetup.log --------- 651
11.04.2009 08:36 C:\bootmgr --------- 333257
15.09.2008 11:06 C:\SWSTAMP.TXT --------- 282
04.08.2008 11:50 C:\_wdsuef.dmp --------- 24328
03.07.2008 10:59 C:\setup.log --------- 86
03.07.2008 10:36 C:\Intel --------- 0
03.07.2008 09:37 C:\BOOTSECT.BAK --------- 8192
02.11.2006 15:02 C:\Documents and Settings --------- 0
18.09.2006 23:43 C:\config.sys --------- 10
18.09.2006 23:43 C:\autoexec.bat --------- 24
----------------------------------------
C:\Windows
19.08.2010 22:08 C:\Windows\bootstat.dat --------- 67584
19.08.2010 21:11 C:\Windows\srun.log --------- 12
19.08.2010 21:09 C:\Windows\WindowsUpdate.log --------- 1540720
26.05.2010 15:02 C:\Windows\iun6002.exe --------- 737280
15.01.2010 02:03 C:\Windows\hpoins18.dat --------- 145590
21.07.2009 10:14 C:\Windows\win.ini --------- 254
13.07.2009 06:37 C:\Windows\hpqins00.dat --------- 119478
11.07.2009 00:15 C:\Windows\hpoins18.dat.temp --------- 146216
11.06.2009 17:39 C:\Windows\ativpsrm.bin --------- 0
11.06.2009 17:36 C:\Windows\DIFxAPI.dll --------- 319456
11.04.2009 08:27 C:\Windows\explorer.exe --------- 2926592
15.09.2008 10:59 C:\Windows\csup.txt --------- 10
03.07.2008 11:34 C:\Windows\NDSTray.INI --------- 0
03.07.2008 11:28 C:\Windows\mgxoschk.ini --------- 6642
03.07.2008 10:50 C:\Windows\HideWin.exe --------- 315392
08.04.2008 15:14 C:\Windows\RtHDVCpl.exe --------- 6037504
02.04.2008 09:27 C:\Windows\RtlUpd.exe --------- 1196032
05.03.2008 18:07 C:\Windows\RtlExUpd.dll --------- 520192
21.01.2008 09:48 C:\Windows\atiogl.xml --------- 12477
21.01.2008 04:43 C:\Windows\WindowsShell.Manifest --------- 749
21.01.2008 04:24 C:\Windows\regedit.exe --------- 134656
21.01.2008 04:24 C:\Windows\bfsvc.exe --------- 58880
21.01.2008 04:24 C:\Windows\fveupdate.exe --------- 13312
21.01.2008 04:24 C:\Windows\HelpPane.exe --------- 498176
21.01.2008 04:23 C:\Windows\notepad.exe --------- 151040
16.01.2008 12:13 C:\Windows\Thumbs.db --------- 4096
20.11.2007 18:15 C:\Windows\SkyTel.exe --------- 1826816
14.11.2007 15:18 C:\Windows\USetup.iss --------- 553
01.03.2007 02:30 C:\Windows\hpomdl18.dat.temp --------- 6600
01.03.2007 02:30 C:\Windows\hpomdl18.dat --------- 6600
02.01.2007 17:27 C:\Windows\Twunk_16.dll --------- 12288
02.01.2007 17:27 C:\Windows\Twunk_32.dll --------- 12288
03.11.2006 14:30 C:\Windows\oemlogo.bmp --------- 43254
02.11.2006 14:35 C:\Windows\WMSysPr9.prx --------- 316640
02.11.2006 14:34 C:\Windows\twunk_16.exe --------- 49680
02.11.2006 14:34 C:\Windows\twunk_32.exe --------- 31232
02.11.2006 14:34 C:\Windows\twain_32.dll --------- 50688
02.11.2006 14:34 C:\Windows\twain.dll --------- 94784
02.11.2006 11:45 C:\Windows\winhlp32.exe --------- 9216
02.11.2006 11:45 C:\Windows\hh.exe --------- 14848
02.11.2006 09:46 C:\Windows\mib.bin --------- 43131
28.10.2006 00:34 C:\Windows\ConfigFree.scr --------- 862397
19.09.2006 13:41 C:\Windows\HomePremium.xml --------- 8328
18.09.2006 23:46 C:\Windows\system.ini --------- 219
18.09.2006 23:43 C:\Windows\_default.pif --------- 707
18.09.2006 23:43 C:\Windows\winhelp.exe --------- 256192
18.09.2006 23:30 C:\Windows\msdfmap.ini --------- 1405
----------------------------------------
C:\Windows\System
02.11.2006 14:34 C:\Windows\System\mciseq.drv --------- 25264
02.11.2006 14:34 C:\Windows\System\mciwave.drv --------- 28160
02.11.2006 14:34 C:\Windows\System\avifile.dll --------- 109456
02.11.2006 14:34 C:\Windows\System\avicap.dll --------- 69584
02.11.2006 14:34 C:\Windows\System\mciavi.drv --------- 73376
02.11.2006 14:34 C:\Windows\System\msvideo.dll --------- 126912
02.11.2006 09:10 C:\Windows\System\OLESVR.DLL --------- 24064
02.11.2006 09:10 C:\Windows\System\WFWNET.DRV --------- 12704
02.11.2006 09:10 C:\Windows\System\COMMDLG.DLL --------- 32816
02.11.2006 09:10 C:\Windows\System\TIMER.DRV --------- 4048
02.11.2006 09:10 C:\Windows\System\MMSYSTEM.DLL --------- 68992
02.11.2006 09:10 C:\Windows\System\mmtask.tsk --------- 1152
02.11.2006 09:10 C:\Windows\System\mouse.drv --------- 2032
02.11.2006 09:10 C:\Windows\System\vga.drv --------- 2176
02.11.2006 09:10 C:\Windows\System\sound.drv --------- 1744
02.11.2006 09:10 C:\Windows\System\keyboard.drv --------- 2000
02.11.2006 09:10 C:\Windows\System\SHELL.DLL --------- 5120
02.11.2006 09:10 C:\Windows\System\system.drv --------- 3360
18.09.2006 23:43 C:\Windows\System\ver.dll --------- 9008
18.09.2006 23:43 C:\Windows\System\olecli.dll --------- 82944
18.09.2006 23:43 C:\Windows\System\lzexpand.dll --------- 9936
18.09.2006 23:35 C:\Windows\System\stdole.tlb --------- 5532
----------------------------------------
C:\Windows\System32
19.08.2010 22:51 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 --------- 3216
19.08.2010 22:51 C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 --------- 3216
19.08.2010 20:56 C:\Windows\system32\perfh009.dat --------- 595996
19.08.2010 20:56 C:\Windows\system32\perfc009.dat --------- 104070
19.08.2010 20:56 C:\Windows\system32\perfh007.dat --------- 628742
19.08.2010 20:56 C:\Windows\system32\perfc007.dat --------- 126454
19.08.2010 20:56 C:\Windows\system32\PerfStringBackup.INI --------- 1445310
17.08.2010 21:27 C:\Windows\system32\ezsidmv.dat --------- 56
17.08.2010 21:20 C:\Windows\system32\catroot2 --------- 4096
17.08.2010 21:20 C:\Windows\system32\catroot --------- 4096
17.08.2010 21:20 C:\Windows\system32\drivers --------- 65536
12.08.2010 10:41 C:\Windows\system32\FNTCACHE.DAT --------- 349848
12.08.2010 08:32 C:\Windows\system32\migration --------- 0
11.08.2010 01:43 C:\Windows\system32\spool --------- 4096
03.08.2010 20:09 C:\Windows\system32\mrt.exe --------- 35962312
27.07.2010 19:32 C:\Windows\system32\kodak --------- 0
27.07.2010 19:30 C:\Windows\system32\InstallUtil.InstallLog --------- 922
26.07.2010 17:51 C:\Windows\system32\shell32.dll --------- 11584512
23.07.2010 09:03 C:\Windows\system32\Tasks --------- 4096
26.06.2010 09:49 C:\Windows\system32\de-DE --------- 262144
26.06.2010 09:45 C:\Windows\system32\en-US --------- 8192
26.06.2010 08:05 C:\Windows\system32\wininet.dll --------- 916480
26.06.2010 08:05 C:\Windows\system32\urlmon.dll --------- 1210368
26.06.2010 08:04 C:\Windows\system32\occache.dll --------- 206848
26.06.2010 08:03 C:\Windows\system32\mstime.dll --------- 611840
26.06.2010 08:03 C:\Windows\system32\mshtml.dll --------- 5951488
26.06.2010 08:03 C:\Windows\system32\msfeedsbs.dll --------- 55296
26.06.2010 08:03 C:\Windows\system32\msfeeds.dll --------- 599040
26.06.2010 08:02 C:\Windows\system32\jsproxy.dll --------- 25600
26.06.2010 08:02 C:\Windows\system32\inetcpl.cpl --------- 1469440
26.06.2010 08:02 C:\Windows\system32\ieui.dll --------- 164352
26.06.2010 08:02 C:\Windows\system32\iesysprep.dll --------- 109056
26.06.2010 08:02 C:\Windows\system32\iesetup.dll --------- 71680
26.06.2010 08:02 C:\Windows\system32\iertutil.dll --------- 1986560
26.06.2010 08:02 C:\Windows\system32\iernonce.dll --------- 55808
26.06.2010 08:02 C:\Windows\system32\iepeers.dll --------- 184320
26.06.2010 08:02 C:\Windows\system32\ieframe.dll --------- 11077120
26.06.2010 08:02 C:\Windows\system32\iedkcs32.dll --------- 387584
26.06.2010 06:25 C:\Windows\system32\ieUnatt.exe --------- 133632
26.06.2010 06:24 C:\Windows\system32\ie4uinit.exe --------- 173056
26.06.2010 06:24 C:\Windows\system32\msfeedssync.exe --------- 13312
26.06.2010 06:23 C:\Windows\system32\mshtml.tlb --------- 1638912
21.06.2010 15:37 C:\Windows\system32\win32k.sys --------- 2037760
18.06.2010 19:31 C:\Windows\system32\rtutils.dll --------- 36864
11.06.2010 18:16 C:\Windows\system32\schannel.dll --------- 274944
11.06.2010 18:15 C:\Windows\system32\msxml3.dll --------- 1248768
10.06.2010 12:31 C:\Windows\system32\wbem --------- 65536
08.06.2010 19:35 C:\Windows\system32\ntoskrnl.exe --------- 3548040
08.06.2010 19:35 C:\Windows\system32\ntkrnlpa.exe --------- 3600768
01.06.2010 19:37 C:\Windows\system32\MpSigStub.exe --------- 221568
27.05.2010 22:08 C:\Windows\system32\iccvid.dll --------- 81920
26.05.2010 19:06 C:\Windows\system32\atmlib.dll --------- 34304
26.05.2010 16:47 C:\Windows\system32\atmfd.dll --------- 289792
07.05.2010 10:39 C:\Windows\system32\EKIJ5000MON.dll --------- 421888
07.05.2010 10:38 C:\Windows\system32\EKIJCOINST08.dll --------- 131072
27.04.2010 00:04 C:\Windows\system32\DivXControlPanelApplet.cpl --------- 353592
23.04.2010 16:13 C:\Windows\system32\tzres.dll --------- 2048
16.04.2010 18:43 C:\Windows\system32\Apphlpdm.dll --------- 28672
16.04.2010 16:39 C:\Windows\system32\GameUXLegacyGDFs.dll --------- 4240384
05.04.2010 19:01 C:\Windows\system32\asycfilt.dll --------- 67072
02.04.2010 19:34 C:\Windows\system32\declrds.ax --------- 45568
31.03.2010 03:58 C:\Windows\system32\vxblock.dll --------- 100848
31.03.2010 03:58 C:\Windows\system32\pxdrv.dll --------- 559600
31.03.2010 03:58 C:\Windows\system32\pxwave.dll --------- 440816
31.03.2010 03:58 C:\Windows\system32\pxmas.dll --------- 219632
31.03.2010 03:58 C:\Windows\system32\px.dll --------- 678384
31.03.2010 03:58 C:\Windows\system32\pxhpinst.exe --------- 72176
18.03.2010 13:16 C:\Windows\system32\msvcr100_clr0400.dll --------- 771424
10.03.2010 21:29 C:\Windows\system32\dpl100.dll --------- 94208
05.03.2010 16:01 C:\Windows\system32\vbscript.dll --------- 420352
21.02.2010 01:06 C:\Windows\system32\nshhttp.dll --------- 24064
21.02.2010 01:05 C:\Windows\system32\httpapi.dll --------- 30720
19.02.2010 21:27 C:\Windows\system32\DivX.dll --------- 720384
19.02.2010 21:27 C:\Windows\system32\divx_xx07.dll --------- 856064
19.02.2010 21:27 C:\Windows\system32\divx_xx0c.dll --------- 856064
19.02.2010 21:27 C:\Windows\system32\divx_xx16.dll --------- 843776
19.02.2010 21:27 C:\Windows\system32\divx_xx11.dll --------- 839680
19.02.2010 21:27 C:\Windows\system32\divx_xx0a.dll --------- 847872
18.02.2010 15:30 C:\Windows\system32\iphlpsvc.dll --------- 200704
12.02.2010 12:32 C:\Windows\system32\browserchoice.exe --------- 293376
11.02.2010 17:39 C:\Windows\system32\WDI --------- 4096
29.01.2010 17:40 C:\Windows\system32\inetcomm.dll --------- 738816
25.01.2010 14:00 C:\Windows\system32\secproc_ssp_isv.dll --------- 152576
25.01.2010 14:00 C:\Windows\system32\secproc_ssp.dll --------- 152064
25.01.2010 14:00 C:\Windows\system32\secproc_isv.dll --------- 471552
25.01.2010 14:00 C:\Windows\system32\secproc.dll --------- 471552
25.01.2010 13:58 C:\Windows\system32\msdrm.dll --------- 332288
25.01.2010 10:21 C:\Windows\system32\RMActivate_ssp_isv.exe --------- 346624
25.01.2010 10:21 C:\Windows\system32\RMActivate_isv.exe --------- 526336
25.01.2010 10:21 C:\Windows\system32\RMActivate_ssp.exe --------- 347136
25.01.2010 10:21 C:\Windows\system32\RMActivate.exe --------- 518144
21.01.2010 17:05 C:\Windows\system32\l3codeca.acm --------- 62464
21.01.2010 16:06 C:\Windows\system32\MAGIX --------- 0
13.01.2010 19:34 C:\Windows\system32\cabview.dll --------- 98304
06.01.2010 17:39 C:\Windows\system32\gameux.dll --------- 1696256
23.12.2009 13:33 C:\Windows\system32\wintrust.dll --------- 172032
04.12.2009 20:30 C:\Windows\system32\tsbyuv.dll --------- 12288
04.12.2009 20:29 C:\Windows\system32\quartz.dll --------- 1314816
04.12.2009 20:28 C:\Windows\system32\msyuv.dll --------- 22528
04.12.2009 20:28 C:\Windows\system32\msvidc32.dll --------- 31744
----------------------------------------
C:\Windows\Prefetch
19.08.2010 23:28 C:\Windows\Prefetch\MPCMDRUN.EXE-8791CC49.pf --------- 37124
19.08.2010 23:28 C:\Windows\Prefetch\CMD.EXE-4A81B364.pf --------- 12328
19.08.2010 23:27 C:\Windows\Prefetch\WINRAR.EXE-94E7D80C.pf --------- 45682
19.08.2010 23:27 C:\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf --------- 22154
19.08.2010 23:27 C:\Windows\Prefetch\SEARCHFILTERHOST.EXE-77482212.pf --------- 18056
19.08.2010 23:27 C:\Windows\Prefetch\SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf --------- 20024
19.08.2010 23:26 C:\Windows\Prefetch\SKYPENAMES.EXE-52288AB3.pf --------- 16102
19.08.2010 23:17 C:\Windows\Prefetch\NOTEPAD.EXE-D8414F97.pf --------- 15474
19.08.2010 23:16 C:\Windows\Prefetch\FINE.EXE-2DB98BC3.pf --------- 16702
19.08.2010 23:16 C:\Windows\Prefetch\WMIPRVSE.EXE-1628051C.pf --------- 362156
19.08.2010 23:16 C:\Windows\Prefetch\RSIT.EXE-D2885F28.pf --------- 21530
19.08.2010 23:16 C:\Windows\Prefetch\RUNDLL32.EXE-1304AE86.pf --------- 25856
19.08.2010 23:13 C:\Windows\Prefetch\AgGlFgAppHistory.db --------- 818846
19.08.2010 23:13 C:\Windows\Prefetch\AgGlFaultHistory.db --------- 625682
19.08.2010 23:13 C:\Windows\Prefetch\AgGlGlobalHistory.db --------- 2711429
19.08.2010 23:13 C:\Windows\Prefetch\AgRobust.db --------- 297928
19.08.2010 23:12 C:\Windows\Prefetch\GOOGLEUPDATE.EXE-FE771DDA.pf --------- 35244
19.08.2010 23:10 C:\Windows\Prefetch\AgGlUAD_P_S-1-5-21-784083921-2511841341-756142190-1000.db --------- 1171372
19.08.2010 23:10 C:\Windows\Prefetch\AgGlUAD_S-1-5-21-784083921-2511841341-756142190-1000.db --------- 2208323
19.08.2010 23:09 C:\Windows\Prefetch\PLUGIN-CONTAINER.EXE-7226D1F8.pf --------- 44248
19.08.2010 23:08 C:\Windows\Prefetch\TASKENG.EXE-48D4E289.pf --------- 17750
19.08.2010 23:08 C:\Windows\Prefetch\FIREFOX.EXE-A606B53C.pf --------- 225064
19.08.2010 23:08 C:\Windows\Prefetch\VERCLSID.EXE-7C52E31C.pf --------- 21052
19.08.2010 23:04 C:\Windows\Prefetch\WMPNSCFG.EXE-FC0D39BF.pf --------- 13404
19.08.2010 23:00 C:\Windows\Prefetch\ONECLICKSTARTER.EXE-6B9E1127.pf --------- 61154
19.08.2010 22:09 C:\Windows\Prefetch\AgCx_SC1.db --------- 726961
19.08.2010 22:09 C:\Windows\Prefetch\DW20.EXE-1EFBE0F9.pf --------- 54784
19.08.2010 22:08 C:\Windows\Prefetch\DLLHOST.EXE-766398D2.pf --------- 20096
19.08.2010 22:08 C:\Windows\Prefetch\AgCx_SC1.db.trx --------- 199578
19.08.2010 22:08 C:\Windows\Prefetch\LOGONUI.EXE-09140401.pf --------- 43300
19.08.2010 21:25 C:\Windows\Prefetch\SETUP.EXE-54F2E089.pf --------- 21972
19.08.2010 21:11 C:\Windows\Prefetch\CONIME.EXE-9781FD5F.pf --------- 9466
19.08.2010 21:11 C:\Windows\Prefetch\OSRMNAEWXC.EXE-14609A5E.pf --------- 16488
19.08.2010 21:09 C:\Windows\Prefetch\TRUSTEDINSTALLER.EXE-3CC531E5.pf --------- 27500
19.08.2010 20:57 C:\Windows\Prefetch\JAVA.EXE-E27B75C2.pf --------- 108656
19.08.2010 20:57 C:\Windows\Prefetch\JP2LAUNCHER.EXE-7C1F11C1.pf --------- 15558
19.08.2010 20:57 C:\Windows\Prefetch\MSHTA.EXE-A970B441.pf --------- 49764
19.08.2010 20:56 C:\Windows\Prefetch\WMIADAP.EXE-F8DFDFA2.pf --------- 16346
19.08.2010 20:55 C:\Windows\Prefetch\MSCORSVW.EXE-C3C515BD.pf --------- 9358
19.08.2010 20:53 C:\Windows\Prefetch\IPODSERVICE.EXE-37C43D64.pf --------- 16038
19.08.2010 20:53 C:\Windows\Prefetch\ITUNESHELPER.EXE-FCF4252E.pf --------- 562
19.08.2010 20:53 C:\Windows\Prefetch\PRESENTATIONSETTINGS.EXE-2F4708C9.pf --------- 15898
19.08.2010 20:52 C:\Windows\Prefetch\ReadyBoot --------- 4096
19.08.2010 12:45 C:\Windows\Prefetch\PfSvPerfStats.bin --------- 508
19.08.2010 12:33 C:\Windows\Prefetch\EKIJ5000MUI.EXE-0B8352DC.pf --------- 14690
19.08.2010 12:29 C:\Windows\Prefetch\WUDFHOST.EXE-AFFEF87C.pf --------- 17872
19.08.2010 12:29 C:\Windows\Prefetch\WMPLAYER.EXE-BAD6BD53.pf --------- 472304
19.08.2010 12:29 C:\Windows\Prefetch\RUNDLL32.EXE-DE9673F9.pf --------- 13352
19.08.2010 12:29 C:\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf --------- 343306
19.08.2010 11:55 C:\Windows\Prefetch\SVCHOST.EXE-7CFEDEA3.pf --------- 17284
19.08.2010 11:55 C:\Windows\Prefetch\VSSVC.EXE-B8AFC319.pf --------- 28148
19.08.2010 11:55 C:\Windows\Prefetch\RUNDLL32.EXE-230FC512.pf --------- 742
19.08.2010 11:45 C:\Windows\Prefetch\DFRGNTFS.EXE-7E4077FE.pf --------- 91226
19.08.2010 11:45 C:\Windows\Prefetch\DEFRAG.EXE-588F90AD.pf --------- 13708
19.08.2010 11:45 C:\Windows\Prefetch\Layout.ini --------- 858690
19.08.2010 10:58 C:\Windows\Prefetch\AM_DELTA_PATCH2.EXE-2B70D420.pf --------- 15702
19.08.2010 10:58 C:\Windows\Prefetch\WUAUCLT.EXE-70318591.pf --------- 27276
19.08.2010 10:58 C:\Windows\Prefetch\MPSIGSTUB.EXE-6CB27A06.pf --------- 133142
19.08.2010 10:49 C:\Windows\Prefetch\WMPNETWK.EXE-D9F2A96F.pf --------- 53372
18.08.2010 21:12 C:\Windows\Prefetch\ADOBEUPDATER.EXE-9A17D89B.pf --------- 45810
18.08.2010 21:12 C:\Windows\Prefetch\ACRORD32.EXE-DE3ACCC1.pf --------- 108138
18.08.2010 20:50 C:\Windows\Prefetch\DWM.EXE-6FFD3DA8.pf --------- 16858
18.08.2010 20:50 C:\Windows\Prefetch\USERINIT.EXE-2257A3E7.pf --------- 14612
18.08.2010 01:11 C:\Windows\Prefetch\WERMGR.EXE-0F2AC88C.pf --------- 87816
17.08.2010 22:19 C:\Windows\Prefetch\NTOSBOOT-B00DFAAD.pf --------- 1201312
17.08.2010 22:10 C:\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf --------- 254230
17.08.2010 21:27 C:\Windows\Prefetch\SKYPEPM.EXE-EECA8925.pf --------- 36928
17.08.2010 19:58 C:\Windows\Prefetch\AVWSC.EXE-4630B658.pf --------- 35266
24.06.2010 09:29 C:\Windows\Prefetch\AgCx_SC2.db --------- 694440
11.06.2009 17:33 C:\Windows\Prefetch\AgAppLaunch.db --------- 332116
----------------------------------------
C:\Windows\Tasks
19.08.2010 23:12 C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job --------- 1092
19.08.2010 20:53 C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job --------- 1088
19.08.2010 20:51 C:\Windows\Tasks\SA.DAT --------- 6
19.08.2010 12:45 C:\Windows\Tasks\SCHEDLGU.TXT --------- 32530
----------------------------------------
C:\Windows\Temp
19.08.2010 23:28 C:\Windows\Temp\MpCmdRun.log --------- 175748
19.08.2010 21:25 C:\Windows\Temp\jmxv.tmp --------- 0
19.08.2010 20:53 C:\Windows\Temp\hpqddsvc.log --------- 42833
19.08.2010 12:45 C:\Windows\Temp\WER912A.tmp.hdmp --------- 0
19.08.2010 12:45 C:\Windows\Temp\WER9119.tmp.version.txt --------- 476
19.08.2010 10:59 C:\Windows\Temp\MpSigStub.log --------- 11122
19.08.2010 10:59 C:\Windows\Temp\DDE8A234-8CDF-4D71-A573-23D3177F95D0-Sigs --------- 0
19.08.2010 01:14 C:\Windows\Temp\WER88D4.tmp.hdmp --------- 16884838
19.08.2010 01:14 C:\Windows\Temp\WER88D3.tmp.version.txt --------- 476
18.08.2010 01:12 C:\Windows\Temp\WERA591.tmp.version.txt --------- 476
18.08.2010 01:12 C:\Windows\Temp\WERA5B1.tmp.hdmp --------- 0
17.08.2010 22:19 C:\Windows\Temp\WER23A7.tmp.hdmp --------- 16160038
17.08.2010 22:19 C:\Windows\Temp\WER2396.tmp.version.txt --------- 476
17.08.2010 20:45 C:\Windows\Temp\WER342A.tmp.hdmp --------- 0
17.08.2010 20:45 C:\Windows\Temp\WER3429.tmp.version.txt --------- 476
17.08.2010 20:35 C:\Windows\Temp\WERA9B7.tmp.hdmp --------- 16833710
17.08.2010 20:35 C:\Windows\Temp\WERA9B6.tmp.version.txt --------- 476
17.08.2010 20:21 C:\Windows\Temp\WER6CC7.tmp.hdmp --------- 16813140
17.08.2010 20:21 C:\Windows\Temp\WER6CC6.tmp.version.txt --------- 476
17.08.2010 20:10 C:\Windows\Temp\WER8BBC.tmp.hdmp --------- 16813092
17.08.2010 20:10 C:\Windows\Temp\WER8BBB.tmp.version.txt --------- 476
17.08.2010 19:59 C:\Windows\Temp\WER36C9.tmp.hdmp --------- 0
17.08.2010 19:59 C:\Windows\Temp\WER36C8.tmp.version.txt --------- 476
17.08.2010 19:29 C:\Windows\Temp\WER83EF.tmp.hdmp --------- 16841828
17.08.2010 19:28 C:\Windows\Temp\WER83DE.tmp.version.txt --------- 476
17.08.2010 19:15 C:\Windows\Temp\WERF47C.tmp.hdmp --------- 0
17.08.2010 19:15 C:\Windows\Temp\WERF46C.tmp.version.txt --------- 476
17.08.2010 16:58 C:\Windows\Temp\WER8CEC.tmp.hdmp --------- 16859632
17.08.2010 16:58 C:\Windows\Temp\WER8CEB.tmp.version.txt --------- 476
----------------------------------------
C:\Users\Fine\AppData\Local\Temp
19.08.2010 21:11 C:\Users\Fine\AppData\Local\Temp\59F4.tmp --------- 0
19.08.2010 21:11 C:\Users\Fine\AppData\Local\Temp\5715.tmp --------- 80896
19.08.2010 21:11 C:\Users\Fine\AppData\Local\Temp\57F1.tmp --------- 80896
19.08.2010 21:11 C:\Users\Fine\AppData\Local\Temp\587C.tmp --------- 80896
19.08.2010 20:56 C:\Users\Fine\AppData\Local\Temp\java_install_reg.log --------- 1788
19.08.2010 23:07 C:\Users\Fine\AppData\Local\Temp\hsperfdata_Fine --------- 0
19.08.2010 20:53 C:\Users\Fine\AppData\Local\Temp\div168C.tmp --------- 0
19.08.2010 20:53 C:\Users\Fine\AppData\Local\Temp\WPDNSE --------- 0
19.08.2010 20:53 C:\Users\Fine\AppData\Local\Temp\Fine.bmp --------- 31832
19.08.2010 10:49 C:\Users\Fine\AppData\Local\Temp\div3D6.tmp --------- 0
18.08.2010 20:50 C:\Users\Fine\AppData\Local\Temp\div8287.tmp --------- 0
18.08.2010 11:08 C:\Users\Fine\AppData\Local\Temp\divAD8.tmp --------- 0
18.08.2010 01:12 C:\Users\Fine\AppData\Local\Temp\div5408.tmp --------- 0
17.08.2010 22:11 C:\Users\Fine\AppData\Local\Temp\div538B.tmp --------- 0
17.08.2010 22:00 C:\Users\Fine\AppData\Local\Temp\divBDC2.tmp --------- 0
17.08.2010 21:54 C:\Users\Fine\AppData\Local\Temp\MPSampleSubmit --------- 0
17.08.2010 21:44 C:\Users\Fine\AppData\Local\Temp\skaioejiesfjoee.tmp --------- 4
17.08.2010 21:19 C:\Users\Fine\AppData\Local\Temp\div8E4A.tmp --------- 0
17.08.2010 20:48 C:\Users\Fine\AppData\Local\Temp\div387D.tmp --------- 0
17.08.2010 20:40 C:\Users\Fine\AppData\Local\Temp\Low --------- 0
17.08.2010 20:37 C:\Users\Fine\AppData\Local\Temp\div27F9.tmp --------- 0
17.08.2010 20:24 C:\Users\Fine\AppData\Local\Temp\div3B98.tmp --------- 0
17.08.2010 20:13 C:\Users\Fine\AppData\Local\Temp\div4DA2.tmp --------- 0
17.08.2010 20:02 C:\Users\Fine\AppData\Local\Temp\div92DC.tmp --------- 0
17.08.2010 19:49 C:\Users\Fine\AppData\Local\Temp\div3E47.tmp --------- 0
17.08.2010 19:32 C:\Users\Fine\AppData\Local\Temp\~DF311B.tmp --------- 65536
17.08.2010 19:32 C:\Users\Fine\AppData\Local\Temp\div530E.tmp --------- 0
17.08.2010 19:18 C:\Users\Fine\AppData\Local\Temp\div3706.tmp --------- 0
17.08.2010 19:12 C:\Users\Fine\AppData\Local\Temp\divC486.tmp --------- 0
17.08.2010 17:20 C:\Users\Fine\AppData\Local\Temp\wmplog01.sqm --------- 1520
17.08.2010 17:04 C:\Users\Fine\AppData\Local\Temp\~DFCC5A.tmp --------- 65536
17.08.2010 17:02 C:\Users\Fine\AppData\Local\Temp\div73B8.tmp --------- 0
17.08.2010 00:55 C:\Users\Fine\AppData\Local\Temp\CVR234E.tmp.cvr --------- 0
17.08.2010 00:55 C:\Users\Fine\AppData\Local\Temp\19604302.od --------- 134
17.08.2010 00:54 C:\Users\Fine\AppData\Local\Temp\19578827.od --------- 134
17.08.2010 00:54 C:\Users\Fine\AppData\Local\Temp\CVRBFCB.tmp.cvr --------- 0
----------------------------------------
C:\Program Files
19.08.2010 23:16 C:\Program Files\trend micro --------- 0
17.08.2010 21:20 C:\Program Files\Microsoft Security Essentials --------- 4096
17.08.2010 20:39 C:\Program Files\CCleaner --------- 0
17.08.2010 19:34 C:\Program Files\Mozilla Firefox --------- 28672
17.08.2010 16:42 C:\Program Files\Malwarebytes' Anti-Malware --------- 4096
12.08.2010 08:32 C:\Program Files\Internet Explorer --------- 4096
12.08.2010 08:32 C:\Program Files\Movie Maker --------- 4096
12.08.2010 08:28 C:\Program Files\Microsoft Works --------- 28672
12.08.2010 08:23 C:\Program Files\Windows Mail --------- 4096
27.07.2010 19:31 C:\Program Files\Kodak --------- 0
23.07.2010 16:01 C:\Program Files\SCHLECKER --------- 0
23.07.2010 09:03 C:\Program Files\Common Files --------- 4096
11.07.2010 09:11 C:\Program Files\DivX --------- 4096
27.06.2010 14:18 C:\Program Files\ICQ6.5 --------- 16384
26.06.2010 09:45 C:\Program Files\Microsoft.NET --------- 0
26.05.2010 15:03 C:\Program Files\Codec Pack - All In 1 --------- 4096
21.05.2010 18:04 C:\Program Files\Google --------- 4096
21.01.2010 16:07 C:\Program Files\MAGIX --------- 4096
17.01.2010 21:12 C:\Program Files\VideoLAN --------- 0
18.11.2009 16:51 C:\Program Files\Windows Portable Devices --------- 0
14.11.2009 08:57 C:\Program Files\Verbindungsassistent --------- 12288
02.11.2009 12:39 C:\Program Files\Windows Calendar --------- 0
02.11.2009 12:39 C:\Program Files\Windows Sidebar --------- 4096
02.11.2009 12:39 C:\Program Files\Windows Media Player --------- 4096
02.11.2009 12:39 C:\Program Files\Windows Collaboration --------- 4096
02.11.2009 12:39 C:\Program Files\Windows Journal --------- 4096
02.11.2009 12:39 C:\Program Files\Windows Photo Gallery --------- 4096
02.11.2009 12:39 C:\Program Files\Windows Defender --------- 4096
22.10.2009 11:50 C:\Program Files\Skype --------- 0
20.10.2009 19:59 C:\Program Files\iTunes --------- 4096
20.10.2009 19:58 C:\Program Files\iPod --------- 0
20.10.2009 19:54 C:\Program Files\Bonjour --------- 0
20.10.2009 19:54 C:\Program Files\QuickTime --------- 4096
20.10.2009 19:53 C:\Program Files\Apple Software Update --------- 4096
20.09.2009 18:00 C:\Program Files\TuneUp Utilities 2009 --------- 49152
12.08.2009 08:18 C:\Program Files\WinRAR --------- 4096
15.07.2009 08:58 C:\Program Files\Microsoft Office --------- 4096
15.07.2009 08:58 C:\Program Files\Microsoft Visual Studio --------- 0
12.07.2009 09:10 C:\Program Files\Java --------- 0
11.07.2009 00:14 C:\Program Files\HP --------- 4096
11.07.2009 00:12 C:\Program Files\Hewlett-Packard --------- 0
08.07.2009 20:59 C:\Program Files\ICQ6Toolbar --------- 4096
08.07.2009 20:59 C:\Program Files\InstallShield Installation Information --------- 8192
11.06.2009 18:52 C:\Program Files\Toshiba --------- 8192
11.06.2009 18:43 C:\Program Files\Windows NT --------- 4096
11.06.2009 18:43 C:\Program Files\Gemeinsame Dateien --------- 0
11.06.2009 17:37 C:\Program Files\Camera Assistant Software for Toshiba --------- 4096
11.06.2009 17:36 C:\Program Files\Realtek --------- 0
11.06.2009 17:35 C:\Program Files\ATI Technologies --------- 0
11.06.2009 17:34 C:\Program Files\ATI --------- 0
11.06.2009 17:34 C:\Program Files\Intel --------- 0
03.07.2008 11:29 C:\Program Files\Toshiba TEMPRO --------- 8192
03.07.2008 11:26 C:\Program Files\myphotobook --------- 8192
03.07.2008 11:26 C:\Program Files\Picasa2 --------- 4096
03.07.2008 11:24 C:\Program Files\Adobe --------- 0
03.07.2008 11:17 C:\Program Files\InterVideo --------- 0
03.07.2008 11:17 C:\Program Files\Windows Media-Komponenten --------- 0
03.07.2008 11:14 C:\Program Files\Ulead Systems --------- 0
03.07.2008 10:55 C:\Program Files\Synaptics --------- 0
03.07.2008 10:18 C:\Program Files\MSXML 4.0 --------- 0
21.01.2008 04:43 C:\Program Files\desktop.ini --------- 174
02.11.2006 15:01 C:\Program Files\Uninstall Information --------- 0
02.11.2006 14:37 C:\Program Files\Microsoft Games --------- 4096
02.11.2006 14:37 C:\Program Files\MSBuild --------- 0
02.11.2006 14:37 C:\Program Files\Reference Assemblies --------- 0
----------------------------------------
C:\ProgramData\..
Fine
Public
Default
desktop.ini
Default User
All Users
----------------------------------------
C:\Windows\system32\drivers\etc\hosts
127.0.0.1 localhost
::1 localhost
----------------------------------------
Abbildname PID Sitzungsname Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process 0 Services 0 24 K
System 4 Services 0 16.512 K
smss.exe 512 Services 0 736 K
csrss.exe 624 Services 0 7.144 K
wininit.exe 684 Services 0 3.860 K
csrss.exe 700 Console 1 9.856 K
services.exe 732 Services 0 7.340 K
lsass.exe 744 Services 0 2.704 K
lsm.exe 752 Services 0 3.828 K
svchost.exe 892 Services 0 6.808 K
PresentationFontCache.exe 936 Services 0 11.164 K
winlogon.exe 968 Console 1 6.000 K
svchost.exe 1020 Services 0 7.184 K
MsMpEng.exe 1060 Services 0 79.968 K
Ati2evxx.exe 1208 Services 0 4.200 K
svchost.exe 1264 Services 0 12.348 K
svchost.exe 1300 Services 0 77.036 K
svchost.exe 1332 Services 0 124.584 K
audiodg.exe 1424 Services 0 16.928 K
svchost.exe 1452 Services 0 5.440 K
SLsvc.exe 1472 Services 0 11.608 K
svchost.exe 1520 Services 0 13.120 K
svchost.exe 1632 Services 0 17.492 K
Ati2evxx.exe 1728 Console 1 5.948 K
spoolsv.exe 1980 Services 0 18.600 K
svchost.exe 2004 Services 0 18.688 K
AppleMobileDeviceService. 632 Services 0 3.908 K
mDNSResponder.exe 612 Services 0 4.684 K
CFSvcs.exe 820 Services 0 1.352 K
FABS.exe 1004 Services 0 4.724 K
svchost.exe 1536 Services 0 7.384 K
ICQ Service.exe 1624 Services 0 4.324 K
svchost.exe 2164 Services 0 6.920 K
TempoSVC.exe 2196 Services 0 18.820 K
TNaviSrv.exe 2352 Services 0 3.096 K
TODDSrv.exe 2368 Services 0 3.596 K
TosCoSrv.exe 2384 Services 0 3.564 K
TosIPCSrv.exe 2404 Services 0 2.560 K
TUProgSt.exe 2476 Services 0 7.444 K
ULCDRSvr.exe 2488 Services 0 1.644 K
svchost.exe 2544 Services 0 3.384 K
SearchIndexer.exe 2576 Services 0 17.536 K
WTGService.exe 2628 Services 0 4.276 K
taskeng.exe 3172 Services 0 5.904 K
SmartFaceVWatchSrv.exe 3548 Services 0 5.688 K
taskeng.exe 2616 Console 1 10.020 K
dwm.exe 2572 Console 1 3.180 K
explorer.exe 3052 Console 1 40.236 K
iTunesHelper.exe 2920 Console 1 11.428 K
RtHDVCpl.exe 3296 Console 1 10.408 K
DivXUpdate.exe 1800 Console 1 14.708 K
EKIJ5000MUI.exe 2264 Console 1 5.768 K
msseces.exe 1100 Console 1 10.520 K
wmpnscfg.exe 2792 Console 1 4.508 K
wmpnetwk.exe 3304 Services 0 11.248 K
iPodService.exe 1756 Services 0 5.248 K
conime.exe 5268 Console 1 76 K
conime.exe 5892 Console 1 3.336 K
firefox.exe 5452 Console 1 116.100 K
plugin-container.exe 5840 Console 1 15.412 K
notepad.exe 6056 Console 1 5.232 K
SearchProtocolHost.exe 3604 Services 0 8.728 K
SearchFilterHost.exe 5224 Services 0 7.212 K
WinRAR.exe 4384 Console 1 12.856 K
cmd.exe 5392 Console 1 4.124 K
MpCmdRun.exe 4804 Services 0 7.712 K
tasklist.exe 2240 Console 1 5.128 K
WmiPrvSE.exe 6096 Services 0 6.428 K
***** Ende des Scans 19.08.2010 um 23:28:35,97 ***
|
|
19.08.2010, 22:46
| #4 |
| | Antimalware doctor: Malwarebytes hat Probleme beim löschen ? und hier ist die CCleaner datei: Code:
ATTFilter Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 10.06.2009 10.0.22.87
Adobe Flash Player 10 Plugin Adobe Systems Incorporated 10.10.2009 10.0.32.18
Adobe Reader 8.1.2 - Deutsch Adobe Systems Incorporated 02.07.2008 99,6MB 8.1.2
Apple Application Support Apple Inc. 19.10.2009 32,2MB 1.0
Apple Mobile Device Support Apple Inc. 19.10.2009 40,4MB 2.6.0.32
Apple Software Update Apple Inc. 19.10.2009 2,16MB 2.1.1.116
ATI Catalyst Install Manager ATI Technologies, Inc. 10.06.2009 13,9MB 3.0.664.0
Bluetooth Stack for Windows by Toshiba TOSHIBA CORPORATION 02.07.2008 57,8MB v6.10.07.2(T)
Bonjour Apple Inc. 19.10.2009 0,49MB 1.0.106
Camera Assistant Software for Toshiba Chicony Electronics Co.,Ltd. 10.06.2009 62,7MB 1.7.193.0508L
Catalyst Control Center - Branding ATI 10.06.2009 0,42MB 1.00.0000
CCleaner Piriform 16.08.2010 2,91MB 2.34
CD/DVD Drive Acoustic Silencer TOSHIBA 02.07.2008 0,59MB 2.02.03
Codec Pack - All In 1 6.0.3.0 25.05.2010 0,35MB
Compatibility Pack für 2007 Office System Microsoft Corporation 11.08.2010 39,9MB 12.0.6425.1000
DivX-Setup DivX, Inc. 10.07.2010 2,03MB 1.0.2.23
DVD MovieFactory for TOSHIBA Ulead Systems, Inc. 10.06.2009 252,6MB 5.51
Firebird SQL Server - MAGIX Edition MAGIX AG 20.01.2010 10,1MB 2.1.26.0
Firefox® 3.0 GMX Edition GMX GmbH 11.06.2009 59,00KB 1.1.14
Google Chrome Google Inc. 20.05.2010 221,9MB 5.0.375.126
HP Customer Participation Program 8.0 HP 10.07.2009 203,5MB 8.0
HP Imaging Device Functions 8.0 HP 10.07.2009 2,69MB 8.0
HP OCR Software 8.0 HP 10.07.2009 1,53MB 8.0
HP Photosmart Essential HP 10.07.2009 10,2MB 1.12.0.46
HP Photosmart.All-In-One Driver Software 8.0 .A HP 09.07.2009 30,7MB 8.0
HP Solution Center 8.0 HP 10.07.2009 1,53MB 8.0
HP Update Hewlett-Packard 12.07.2009 3,71MB 4.000.012.001
HPSSupply Ihr Firmenname 10.07.2009 0,96MB 2.1.3.0000
ICQ Toolbar ICQ 07.07.2009 3.0.0
ICQ6.5 ICQ 07.07.2009 47,2MB 6.5
Intel® Matrix Storage Manager Intel Corporation 10.06.2009 37,3MB
iTunes Apple Inc. 19.10.2009 132,4MB 9.0.1.8
Java(TM) 6 Update 13 Sun Microsystems, Inc. 11.07.2009 94,5MB 6.0.130
Java(TM) 6 Update 6 Sun Microsystems, Inc. 02.07.2008 171,1MB 1.6.0.60
KODAK Home Center Software Eastman Kodak Company 26.07.2010 162,6MB 5.3.4.0
Malwarebytes' Anti-Malware Malwarebytes Corporation 16.08.2010 3,90MB
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft Corporation 19.07.2009 37,0MB
Microsoft .NET Framework 3.5 SP1 Microsoft Corporation 10.06.2009 27,8MB
Microsoft .NET Framework 4 Client Profile Microsoft Corporation 25.06.2010 120,3MB 4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 25.06.2010 24,5MB 4.0.30319
Microsoft Office PowerPoint Viewer 2007 (German) Microsoft Corporation 09.06.2010 34,7MB 12.0.6425.1000
Microsoft Office Standard 2007 Microsoft Corporation 20.07.2009 300,5MB 12.0.6425.1000
Microsoft Security Essentials Microsoft Corporation 16.08.2010 14,1MB 1.0.1963.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 28.07.2009 0,25MB 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 10.06.2009 0,41MB 8.0.56336
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Corporation 03.11.2009 0,19MB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Corporation 22.07.2010 0,61MB 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 02.11.2009 0,58MB 9.0.30729
Microsoft Works Microsoft Corporation 11.08.2010 544,0MB 9.7.0621
Mozilla Firefox (3.6.8) Mozilla 16.08.2010 30,4MB 3.6.8 (de)
MSXML 4.0 SP2 (KB941833) Microsoft Corporation 02.07.2008 1,28MB 4.20.9849.0
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 10.06.2009 1,29MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 25.11.2009 1,34MB 4.20.9876.0
myphotobook 3.5 myphotobook 10.06.2009 17,8MB 3.5
Picasa 2 Google, Inc. 10.06.2009 35,3MB 2.0
QuickTime Apple Inc. 19.10.2009 76,5MB 7.64.17.73
Realtek 8169 8168 8101E 8102E Ethernet Driver Realtek 10.06.2009 1,50MB 1.00.0000
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 10.06.2009 21,6MB 6.0.1.5599
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.54.02 10.06.2009 2,11MB 3.54.02
SCHLECKER Foto Digital Service 22.07.2010 167,9MB
Skype web features Skype Technologies S.A. 21.10.2009 4,34MB 1.0.3971
Skype™ 4.2 Skype Technologies S.A. 22.07.2010 31,1MB 4.2.169
Synaptics Pointing Device Driver Synaptics 02.07.2008 13,9MB 10.1.8.0
TOSHIBA Assist TOSHIBA 02.07.2008 1,18MB 2.01.04
TOSHIBA Benutzerhandbücher TOSHIBA 02.07.2008 4,49MB 7.40
TOSHIBA ConfigFree TOSHIBA Corporation 02.07.2008 74,3MB 7.2.13
TOSHIBA Disc Creator TOSHIBA Corporation 02.07.2008 9,71MB 2.0.1.3
TOSHIBA DVD PLAYER TOSHIBA Corporation 10.06.2009 22,7MB 1.31.14
TOSHIBA Extended Tiles for Windows Mobility Center Toshiba 02.07.2008 1,28MB 1.01.00
TOSHIBA Face Recognition TOSHIBA Corporation 10.06.2009 258,0MB 2.0.2.32
TOSHIBA Hardware Setup 10.06.2009 2,98MB 2.00.08
Toshiba Online Product Information TOSHIBA 02.07.2008 5,51MB 1.00.0012
TOSHIBA Recovery Disc Creator TOSHIBA 02.07.2008 2,54MB 2.0.0.1b
TOSHIBA SD Memory Utilities TOSHIBA 02.07.2008 1,63MB 1.8.1.3
TOSHIBA Supervisor Password 10.06.2009 3,00MB 2.00.04
Toshiba TEMPRO Toshiba Europe GmbH 02.07.2008 8,25MB 1.1
TOSHIBA Value Added Package TOSHIBA Corporation 10.06.2009 60,00KB 1.1.19
TRDCReminder TOSHIBA 02.07.2008 0,38MB 1.00.0015
TRORDCLauncher TOSHIBA 02.07.2008 3,35MB 1.0.0.1
TuneUp Utilities 2009 TuneUp Software 19.09.2009 54,6MB 8.0.3300.1
Verbindungsassistent Verbindungsassistent 31.10.2009 28,4MB 2.1
VLC media player 1.0.3 VideoLAN Team 16.01.2010 73,1MB 1.0.3
Windows Media Encoder 9-Reihe 02.07.2008 13,7MB
WinRAR 11.08.2009 3,73MB
|
|
20.08.2010, 01:02
| #5 |
| /// Helfer-Team | Antimalware doctor: Malwarebytes hat Probleme beim löschen ? 1. Schliesse alle Programme einschliesslich Internet Explorer und fixe mit Hijackthis die Einträge aus der nachfolgenden Codebox (HijackThis starten→ "Do a system scan only"→ Einträge auswählen→ Häckhen setzen→ "Fix checked" klicken→ PC neu aufstarten): HijackThis erstellt ein Backup, Falls bei "Fixen" etwas schief geht, kann man unter "View the list of backups"- die Objekte wiederherstellen Code:
ATTFilter R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:6522
R3 - URLSearchHook: (no name) - - (no file)
O9 - Extra button: eBay - Der weltweite Online Marktplatz - {76577871-04EC-495E-A12B-91F7C3600AFA} - hxxp://rover.ebay.com/rover/1/707-44556-9400-3/4 (file missing)
O9 - Extra button: Amazon.de - {8A918C1D-E123-4E36-B562-5C1519E434CE} - hxxp://www.amazon.de/exec/obidos/redirect-home?tag=Toshibadebholink-21&site=home (file missing)
- im Internet Explorer: http://www.rrze.uni-erlangen.de/dien...8.shtml#name12 über das Menü Extras-> Internetoptionen-> Verbindungen-> den Unterpunkt LAN-Einstellungen - im Firefox: http://www.proxytype.de/tutorials-ho...tellungen.html über das Menü Extras-> Einstellungen-> klicke auf den Reiter "Erweitert"-> Netzwerk-> bei "Verbindung" schauen 2. Windows und die installierten Programme auf den neuesten Stand zu halten,sind Garanten für eine erhöhte Sicherheit! Java aktualisieren `Start→ Systemsteuereung→ Java→ Aktualisierung...(Update 21 ist fällig!) danach deinstalliere: `Systemsteuerung → Software → Ändern/Entfernen...` Code:
ATTFilter Java(TM) 6 Update 13
Java(TM) 6 Update 6
um die neueste Version von Adobe zu erhalten klick hier: Adobe Reader - oder über das Programm selbst kannst auch die Updatefunktion aufrufen 4. alle Anwendungen schließen → Ordner für temporäre Dateien bitte leeren lösche nur den Inhalt der Ordner, nicht die Ordner selbst! - Dateien, die noch in Benutzung sind,nicht löschbar. c:\windows\temp - anschließend den Papierkorb leeren 5. reinige dein System mit Ccleaner:
6.
7. Auch auf USB-Sticks, selbstgebrannten Datenträgern, externen Festplatten und anderen Datenträgern können Viren transportiert werden. Man muss daher durch regelmäßige Prüfungen auf Schäden, die durch Malware verursacht worden sein können, überwacht werden. Hierfür sind ser gut geegnet und empfohlen, die auf dem Speichermedium gesicherten Daten, mit Hilfe des kostenlosen Online Scanners zu prüfen. → Also alle vorhandenen externen Laufwerke inkl. evtl. vorhandener USB-Sticks an den Rechner anschließen, aber dabei die Shift-Taste gedrückt halten, damit die Autorun-Funktion nicht ausgeführt wird. Außerdem kann man die Autostarteigenschaft auch ausschalten: → Windows-Sicherheit: Datenträger-Autorun deaktivieren- bebilderte Anleitung v.Leonidas/3dcenter.org → Autorun/Autoplay gezielt für Laufwerkstypen oder -buchstaben abschalten/wintotal.de → Diese Silly -Beschreibung stützt die Annahme, dass er über einen USB-Stick kam. Die Ursache ist durch formatieren des Sticks aus der Welt geschafft, Du solltest darauf achten, dass dort keine Datei autorun.inf wieder auftaucht und etwas wählerisch sein, wo Du deinen Stick reinsteckst. Achtung!: Keinen andere Virenscanner auf Deinem PC installieren, sondern dein PC NUR online scannen!!! → Den kompletten Rechner (also das ganze System) zu überprüfen (Systemprüfung ohne Säuberung) mit Kaspersky Online Scanner/klicke hier → um mit dem Vorgang fortzufahren klicke auf "Accept" → dann wähle "My computer" aus - Es dauert einige Zeit, bis ein Komplett-Scan durch gelaufen ist, also bitte um Geduld! Es kann einige Zeit dauern, bis der Scan abgeschlossen ist - je nach Größe der Festplatte eine oder mehrere Stunden - also Geduld... → Report angezeigt, klicke auf "Save as" - den bitte kopieren und in deinem Thread hier einfügen Vor dem Scan Einstellungen im Internet Explorer: → "Extras→ Internetoptionen→ Sicherheit": → alles auf Standardstufe stellen → Active X erlauben - damit die neue Virendefinitionen installiert werden können 8. poste erneut - nach der vorgenommenen Reinigungsaktion: ► TrendMicro™ HijackThis™ -Logfile - Keine offenen Fenster, solang bis HijackThis läuft!! ** Hast du sonst Probleme mit deinem Rechner? |
|
23.08.2010, 16:26
| #6 |
| | Antimalware doctor: Malwarebytes hat Probleme beim löschen ? hej, nachdem mein system wieder abgestürzt ist, weil die viren wieder überhand genommen hatten, hab ich meinem mitbewohner jetzt meinen pc gegeben und er hat alle schritte gemacht. hier jetzt die dateien: HiJackthis Logfile: Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:41:52, on 23.08.2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18943) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\iTunes\iTunesHelper.exe C:\Windows\RtHDVCpl.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Windows\System32\spool\drivers\w32x86\3\EKIJ5000MUI.exe C:\Program Files\Microsoft Security Essentials\msseces.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Mozilla Firefox\firefox.exe D:\HiJackThis204.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [Conime] %windir%\system32\conime.exe O4 - HKLM\..\Run: [EKIJ5000StatusMonitor] C:\Windows\system32\spool\DRIVERS\W32X86\3\EKIJ5000MUI.exe O4 - HKLM\..\Run: [MSSE] "C:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User 'Default user') O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: eBay - Der weltweite Online Marktplatz - {76577871-04EC-495E-A12B-91F7C3600AFA} - hxxp://rover.ebay.com/rover/1/707-44556-9400-3/4 (file missing) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing) O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Kodak AiO Network Discovery Service - Eastman Kodak Company - C:\Program Files\Kodak\AiO\Center\ekdiscovery.exe O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe O23 - Service: TOSHIBA Bluetooth Service - Unknown owner - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe (file missing) O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe O23 - Service: WTGService - Unknown owner - C:\Program Files\Verbindungsassistent\wtgservice.exe -- End of file - 7048 bytes Code:
ATTFilter ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time: 2010/08/23 15:25
Program Version: Version 1.3.5.0
Windows Version: Windows Vista SP2
==================================================
Drivers
-------------------
Name: 1394BUS.SYS
Image Path: C:\Windows\system32\DRIVERS\1394BUS.SYS
Address: 0x8EECC000 Size: 57344 File Visible: - Signed: -
Status: -
Name: acpi.sys
Image Path: C:\Windows\system32\drivers\acpi.sys
Address: 0x8068F000 Size: 286720 File Visible: - Signed: -
Status: -
Name: ACPI_HAL
Image Path: \Driver\ACPI_HAL
Address: 0x8243C000 Size: 3903488 File Visible: - Signed: -
Status: -
Name: afd.sys
Image Path: C:\Windows\system32\drivers\afd.sys
Address: 0x8F369000 Size: 294912 File Visible: - Signed: -
Status: -
Name: atapi.sys
Image Path: C:\Windows\system32\drivers\atapi.sys
Address: 0x82AD8000 Size: 32768 File Visible: - Signed: -
Status: -
Name: ataport.SYS
Image Path: C:\Windows\system32\drivers\ataport.SYS
Address: 0x82AE0000 Size: 122880 File Visible: - Signed: -
Status: -
Name: atikmdag.sys
Image Path: C:\Windows\system32\DRIVERS\atikmdag.sys
Address: 0x8E608000 Size: 5042176 File Visible: - Signed: -
Status: -
Name: BATTC.SYS
Image Path: C:\Windows\system32\DRIVERS\BATTC.SYS
Address: 0x8071F000 Size: 40960 File Visible: - Signed: -
Status: -
Name: Beep.SYS
Image Path: C:\Windows\System32\Drivers\Beep.SYS
Address: 0x8F2D9000 Size: 28672 File Visible: - Signed: -
Status: -
Name: BOOTVID.dll
Image Path: C:\Windows\system32\BOOTVID.dll
Address: 0x8048E000 Size: 32768 File Visible: - Signed: -
Status: -
Name: bowser.sys
Image Path: C:\Windows\system32\DRIVERS\bowser.sys
Address: 0x9A711000 Size: 102400 File Visible: - Signed: -
Status: -
Name: cdd.dll
Image Path: C:\Windows\System32\cdd.dll
Address: 0x81AB0000 Size: 57344 File Visible: - Signed: -
Status: -
Name: cdfs.sys
Image Path: C:\Windows\system32\DRIVERS\cdfs.sys
Address: 0x9BB85000 Size: 90112 File Visible: - Signed: -
Status: -
Name: cdrom.sys
Image Path: C:\Windows\system32\DRIVERS\cdrom.sys
Address: 0x8EFB8000 Size: 98304 File Visible: - Signed: -
Status: -
Name: CI.dll
Image Path: C:\Windows\system32\CI.dll
Address: 0x804D7000 Size: 917504 File Visible: - Signed: -
Status: -
Name: CLASSPNP.SYS
Image Path: C:\Windows\system32\drivers\CLASSPNP.SYS
Address: 0x8A906000 Size: 135168 File Visible: - Signed: -
Status: -
Name: CLFS.SYS
Image Path: C:\Windows\system32\CLFS.SYS
Address: 0x80496000 Size: 266240 File Visible: - Signed: -
Status: -
Name: CmBatt.sys
Image Path: C:\Windows\system32\DRIVERS\CmBatt.sys
Address: 0x8A798000 Size: 14208 File Visible: - Signed: -
Status: -
Name: compbatt.sys
Image Path: C:\Windows\system32\DRIVERS\compbatt.sys
Address: 0x8071C000 Size: 10496 File Visible: - Signed: -
Status: -
Name: crashdmp.sys
Image Path: C:\Windows\System32\Drivers\crashdmp.sys
Address: 0x8F6E8000 Size: 53248 File Visible: - Signed: -
Status: -
Name: crcdisk.sys
Image Path: C:\Windows\system32\drivers\crcdisk.sys
Address: 0x8ABE8000 Size: 36864 File Visible: - Signed: -
Status: -
Name: dfsc.sys
Image Path: C:\Windows\System32\Drivers\dfsc.sys
Address: 0x8F67B000 Size: 94208 File Visible: - Signed: -
Status: -
Name: disk.sys
Image Path: C:\Windows\system32\drivers\disk.sys
Address: 0x8ABD7000 Size: 69632 File Visible: - Signed: -
Status: -
Name: drmk.sys
Image Path: C:\Windows\system32\drivers\drmk.sys
Address: 0x8F281000 Size: 151552 File Visible: - Signed: -
Status: -
Name: dump_iaStor.sys
Image Path: C:\Windows\System32\Drivers\dump_iaStor.sys
Address: 0x8F6F5000 Size: 843776 File Visible: No Signed: -
Status: -
Name: Dxapi.sys
Image Path: C:\Windows\System32\drivers\Dxapi.sys
Address: 0x8F7C3000 Size: 40960 File Visible: - Signed: -
Status: -
Name: dxgkrnl.sys
Image Path: C:\Windows\System32\drivers\dxgkrnl.sys
Address: 0x8EAD7000 Size: 659456 File Visible: - Signed: -
Status: -
Name: ecache.sys
Image Path: C:\Windows\System32\drivers\ecache.sys
Address: 0x8ABB0000 Size: 159744 File Visible: - Signed: -
Status: -
Name: fastfat.SYS
Image Path: C:\Windows\System32\Drivers\fastfat.SYS
Address: 0x9A608000 Size: 163840 File Visible: - Signed: -
Status: -
Name: fileinfo.sys
Image Path: C:\Windows\system32\drivers\fileinfo.sys
Address: 0x82B3A000 Size: 65536 File Visible: - Signed: -
Status: -
Name: fltmgr.sys
Image Path: C:\Windows\system32\drivers\fltmgr.sys
Address: 0x82B08000 Size: 204800 File Visible: - Signed: -
Status: -
Name: Fs_Rec.SYS
Image Path: C:\Windows\System32\Drivers\Fs_Rec.SYS
Address: 0x8F2C9000 Size: 36864 File Visible: - Signed: -
Status: -
Name: FwLnk.sys
Image Path: C:\Windows\system32\DRIVERS\FwLnk.sys
Address: 0x8AA00000 Size: 32768 File Visible: - Signed: -
Status: -
Name: fwpkclnt.sys
Image Path: C:\Windows\System32\drivers\fwpkclnt.sys
Address: 0x8A8EB000 Size: 110592 File Visible: - Signed: -
Status: -
Name: GEARAspiWDM.sys
Image Path: C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
Address: 0x8EFD0000 Size: 21120 File Visible: - Signed: -
Status: -
Name: hal.dll
Image Path: C:\Windows\system32\hal.dll
Address: 0x82409000 Size: 208896 File Visible: - Signed: -
Status: -
Name: HDAudBus.sys
Image Path: C:\Windows\system32\DRIVERS\HDAudBus.sys
Address: 0x8EE0E000 Size: 577536 File Visible: - Signed: -
Status: -
Name: HTTP.sys
Image Path: C:\Windows\system32\drivers\HTTP.sys
Address: 0x9A687000 Size: 446464 File Visible: - Signed: -
Status: -
Name: i8042prt.sys
Image Path: C:\Windows\system32\DRIVERS\i8042prt.sys
Address: 0x8EF5A000 Size: 77824 File Visible: - Signed: -
Status: -
Name: iaStor.sys
Image Path: C:\Windows\system32\DRIVERS\iaStor.sys
Address: 0x82A0A000 Size: 843776 File Visible: - Signed: -
Status: -
Name: intelppm.sys
Image Path: C:\Windows\system32\DRIVERS\intelppm.sys
Address: 0x8A789000 Size: 61440 File Visible: - Signed: -
Status: -
Name: kbdclass.sys
Image Path: C:\Windows\system32\DRIVERS\kbdclass.sys
Address: 0x8EF6D000 Size: 45056 File Visible: - Signed: -
Status: -
Name: kdcom.dll
Image Path: C:\Windows\system32\kdcom.dll
Address: 0x80406000 Size: 28672 File Visible: - Signed: -
Status: -
Name: ks.sys
Image Path: C:\Windows\system32\DRIVERS\ks.sys
Address: 0x805B7000 Size: 172032 File Visible: - Signed: -
Status: -
Name: ksecdd.sys
Image Path: C:\Windows\System32\Drivers\ksecdd.sys
Address: 0x82B53000 Size: 462848 File Visible: - Signed: -
Status: -
Name: kwldypow.sys
Image Path: C:\Users\Fine\AppData\Local\Temp\kwldypow.sys
Address: 0x9BBC2000 Size: 93056 File Visible: No Signed: -
Status: -
Name: lltdio.sys
Image Path: C:\Windows\system32\DRIVERS\lltdio.sys
Address: 0x9A630000 Size: 65536 File Visible: - Signed: -
Status: -
Name: luafv.sys
Image Path: C:\Windows\system32\drivers\luafv.sys
Address: 0x8F7DC000 Size: 110592 File Visible: - Signed: -
Status: -
Name: mcupdate_GenuineIntel.dll
Image Path: C:\Windows\system32\mcupdate_GenuineIntel.dll
Address: 0x8040D000 Size: 458752 File Visible: - Signed: -
Status: -
Name: monitor.sys
Image Path: C:\Windows\system32\DRIVERS\monitor.sys
Address: 0x8F7CD000 Size: 61440 File Visible: - Signed: -
Status: -
Name: mouclass.sys
Image Path: C:\Windows\system32\DRIVERS\mouclass.sys
Address: 0x8EFA9000 Size: 45056 File Visible: - Signed: -
Status: -
Name: mountmgr.sys
Image Path: C:\Windows\System32\drivers\mountmgr.sys
Address: 0x80782000 Size: 65536 File Visible: - Signed: -
Status: -
Name: MpFilter.sys
Image Path: C:\Windows\system32\DRIVERS\MpFilter.sys
Address: 0x8F2A6000 Size: 143360 File Visible: - Signed: -
Status: -
Name: mpsdrv.sys
Image Path: C:\Windows\System32\drivers\mpsdrv.sys
Address: 0x9A72A000 Size: 86016 File Visible: - Signed: -
Status: -
Name: mrxsmb.sys
Image Path: C:\Windows\system32\DRIVERS\mrxsmb.sys
Address: 0x9A73F000 Size: 126976 File Visible: - Signed: -
Status: -
Name: mrxsmb10.sys
Image Path: C:\Windows\system32\DRIVERS\mrxsmb10.sys
Address: 0x9A75E000 Size: 233472 File Visible: - Signed: -
Status: -
Name: mrxsmb20.sys
Image Path: C:\Windows\system32\DRIVERS\mrxsmb20.sys
Address: 0x9A797000 Size: 98304 File Visible: - Signed: -
Status: -
Name: msahci.sys
Image Path: C:\Windows\system32\drivers\msahci.sys
Address: 0x82AFE000 Size: 40960 File Visible: - Signed: -
Status: -
Name: Msfs.SYS
Image Path: C:\Windows\System32\Drivers\Msfs.SYS
Address: 0x8F31D000 Size: 45056 File Visible: - Signed: -
Status: -
Name: msisadrv.sys
Image Path: C:\Windows\system32\drivers\msisadrv.sys
Address: 0x806DE000 Size: 32768 File Visible: - Signed: -
Status: -
Name: msiscsi.sys
Image Path: C:\Windows\system32\DRIVERS\msiscsi.sys
Address: 0x8A79C000 Size: 192512 File Visible: - Signed: -
Status: -
Name: msrpc.sys
Image Path: C:\Windows\system32\drivers\msrpc.sys
Address: 0x8A71A000 Size: 176128 File Visible: - Signed: -
Status: -
Name: mssmbios.sys
Image Path: C:\Windows\system32\DRIVERS\mssmbios.sys
Address: 0x8A600000 Size: 40960 File Visible: - Signed: -
Status: -
Name: mup.sys
Image Path: C:\Windows\System32\Drivers\mup.sys
Address: 0x8ABA1000 Size: 61440 File Visible: - Signed: -
Status: -
Name: ndis.sys
Image Path: C:\Windows\system32\drivers\ndis.sys
Address: 0x8A60F000 Size: 1093632 File Visible: - Signed: -
Status: -
Name: ndistapi.sys
Image Path: C:\Windows\system32\DRIVERS\ndistapi.sys
Address: 0x8EE00000 Size: 45056 File Visible: - Signed: -
Status: -
Name: ndisuio.sys
Image Path: C:\Windows\system32\DRIVERS\ndisuio.sys
Address: 0x9A66A000 Size: 40960 File Visible: - Signed: -
Status: -
Name: ndiswan.sys
Image Path: C:\Windows\system32\DRIVERS\ndiswan.sys
Address: 0x8EBDC000 Size: 143360 File Visible: - Signed: -
Status: -
Name: NDProxy.SYS
Image Path: C:\Windows\System32\Drivers\NDProxy.SYS
Address: 0x8F243000 Size: 69632 File Visible: - Signed: -
Status: -
Name: netbios.sys
Image Path: C:\Windows\system32\DRIVERS\netbios.sys
Address: 0x8F200000 Size: 57344 File Visible: - Signed: -
Status: -
Name: netbt.sys
Image Path: C:\Windows\System32\DRIVERS\netbt.sys
Address: 0x8F3B1000 Size: 204800 File Visible: - Signed: -
Status: -
Name: NETIO.SYS
Image Path: C:\Windows\system32\drivers\NETIO.SYS
Address: 0x8A745000 Size: 241664 File Visible: - Signed: -
Status: -
Name: Npfs.SYS
Image Path: C:\Windows\System32\Drivers\Npfs.SYS
Address: 0x8F328000 Size: 57344 File Visible: - Signed: -
Status: -
Name: nsiproxy.sys
Image Path: C:\Windows\system32\drivers\nsiproxy.sys
Address: 0x8F671000 Size: 40960 File Visible: - Signed: -
Status: -
Name: Ntfs.sys
Image Path: C:\Windows\System32\Drivers\Ntfs.sys
Address: 0x8AA08000 Size: 1114112 File Visible: - Signed: -
Status: -
Name: ntkrnlpa.exe
Image Path: C:\Windows\system32\ntkrnlpa.exe
Address: 0x8243C000 Size: 3903488 File Visible: - Signed: -
Status: -
Name: Null.SYS
Image Path: C:\Windows\System32\Drivers\Null.SYS
Address: 0x8F2D2000 Size: 28672 File Visible: - Signed: -
Status: -
Name: nwifi.sys
Image Path: C:\Windows\system32\DRIVERS\nwifi.sys
Address: 0x9A640000 Size: 172032 File Visible: - Signed: -
Status: -
Name: ohci1394.sys
Image Path: C:\Windows\system32\DRIVERS\ohci1394.sys
Address: 0x8EEBC000 Size: 62208 File Visible: - Signed: -
Status: -
Name: pacer.sys
Image Path: C:\Windows\system32\DRIVERS\pacer.sys
Address: 0x8F3E3000 Size: 90112 File Visible: - Signed: -
Status: -
Name: partmgr.sys
Image Path: C:\Windows\System32\drivers\partmgr.sys
Address: 0x8070D000 Size: 61440 File Visible: - Signed: -
Status: -
Name: pci.sys
Image Path: C:\Windows\system32\drivers\pci.sys
Address: 0x806E6000 Size: 159744 File Visible: - Signed: -
Status: -
Name: pciide.sys
Image Path: C:\Windows\system32\DRIVERS\pciide.sys
Address: 0x80792000 Size: 28672 File Visible: - Signed: -
Status: -
Name: PCIIDEX.SYS
Image Path: C:\Windows\system32\DRIVERS\PCIIDEX.SYS
Address: 0x80799000 Size: 57344 File Visible: - Signed: -
Status: -
Name: peauth.sys
Image Path: C:\Windows\system32\drivers\peauth.sys
Address: 0x9BA59000 Size: 909312 File Visible: - Signed: -
Status: -
Name: PnpManager
Image Path: \Driver\PnpManager
Address: 0x8243C000 Size: 3903488 File Visible: - Signed: -
Status: -
Name: portcls.sys
Image Path: C:\Windows\system32\drivers\portcls.sys
Address: 0x8F254000 Size: 184320 File Visible: - Signed: -
Status: -
Name: PSHED.dll
Image Path: C:\Windows\system32\PSHED.dll
Address: 0x8047D000 Size: 69632 File Visible: - Signed: -
Status: -
Name: PxHelp20.sys
Image Path: C:\Windows\System32\Drivers\PxHelp20.sys
Address: 0x82B4A000 Size: 36320 File Visible: - Signed: -
Status: -
Name: rasacd.sys
Image Path: C:\Windows\System32\DRIVERS\rasacd.sys
Address: 0x8F336000 Size: 36864 File Visible: - Signed: -
Status: -
Name: rasl2tp.sys
Image Path: C:\Windows\system32\DRIVERS\rasl2tp.sys
Address: 0x8EFE1000 Size: 94208 File Visible: - Signed: -
Status: -
Name: raspppoe.sys
Image Path: C:\Windows\system32\DRIVERS\raspppoe.sys
Address: 0x8A7CB000 Size: 61440 File Visible: - Signed: -
Status: -
Name: raspptp.sys
Image Path: C:\Windows\system32\DRIVERS\raspptp.sys
Address: 0x8A7DA000 Size: 81920 File Visible: - Signed: -
Status: -
Name: rassstp.sys
Image Path: C:\Windows\system32\DRIVERS\rassstp.sys
Address: 0x82BC4000 Size: 86016 File Visible: - Signed: -
Status: -
Name: RAW
Image Path: \FileSystem\RAW
Address: 0x8243C000 Size: 3903488 File Visible: - Signed: -
Status: -
Name: rdbss.sys
Image Path: C:\Windows\system32\DRIVERS\rdbss.sys
Address: 0x8F635000 Size: 245760 File Visible: - Signed: -
Status: -
Name: RDPCDD.sys
Image Path: C:\Windows\System32\DRIVERS\RDPCDD.sys
Address: 0x8F30D000 Size: 32768 File Visible: - Signed: -
Status: -
Name: rdpencdd.sys
Image Path: C:\Windows\system32\drivers\rdpencdd.sys
Address: 0x8F315000 Size: 32768 File Visible: - Signed: -
Status: -
Name: rimsptsk.sys
Image Path: C:\Windows\system32\DRIVERS\rimsptsk.sys
Address: 0x8EEF4000 Size: 81920 File Visible: - Signed: -
Status: -
Name: rixdptsk.sys
Image Path: C:\Windows\system32\DRIVERS\rixdptsk.sys
Address: 0x8EF08000 Size: 335872 File Visible: - Signed: -
Status: -
Name: rootrepeal.sys
Image Path: C:\Windows\system32\drivers\rootrepeal.sys
Address: 0x9BBE5000 Size: 49152 File Visible: No Signed: -
Status: -
Name: rspndr.sys
Image Path: C:\Windows\system32\DRIVERS\rspndr.sys
Address: 0x9A674000 Size: 77824 File Visible: - Signed: -
Status: -
Name: RTKVHDA.sys
Image Path: C:\Windows\system32\drivers\RTKVHDA.sys
Address: 0x8F400000 Size: 2090112 File Visible: - Signed: -
Status: -
Name: Rtlh86.sys
Image Path: C:\Windows\system32\DRIVERS\Rtlh86.sys
Address: 0x8EE9B000 Size: 135168 File Visible: - Signed: -
Status: -
Name: SASDIFSV.SYS
Image Path: C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS
Address: 0x8F62F000 Size: 24576 File Visible: - Signed: -
Status: -
Name: SASKUTIL.SYS
Image Path: C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS
Address: 0x8F60D000 Size: 139264 File Visible: - Signed: -
Status: -
Name: sdbus.sys
Image Path: C:\Windows\system32\DRIVERS\sdbus.sys
Address: 0x8EEDA000 Size: 106496 File Visible: - Signed: -
Status: -
Name: secdrv.SYS
Image Path: C:\Windows\System32\Drivers\secdrv.SYS
Address: 0x9BB48000 Size: 40960 File Visible: - Signed: -
Status: -
Name: smb.sys
Image Path: C:\Windows\system32\DRIVERS\smb.sys
Address: 0x8F355000 Size: 81920 File Visible: - Signed: -
Status: -
Name: spldr.sys
Image Path: C:\Windows\System32\Drivers\spldr.sys
Address: 0x8AB99000 Size: 32768 File Visible: - Signed: -
Status: -
Name: spsys.sys
Image Path: C:\Windows\system32\drivers\spsys.sys
Address: 0x8A927000 Size: 720896 File Visible: - Signed: -
Status: -
Name: srv.sys
Image Path: C:\Windows\System32\DRIVERS\srv.sys
Address: 0x9BA0B000 Size: 319488 File Visible: - Signed: -
Status: -
Name: srv2.sys
Image Path: C:\Windows\System32\DRIVERS\srv2.sys
Address: 0x9A7AF000 Size: 159744 File Visible: - Signed: -
Status: -
Name: srvnet.sys
Image Path: C:\Windows\System32\DRIVERS\srvnet.sys
Address: 0x9A6F4000 Size: 118784 File Visible: - Signed: -
Status: -
Name: storport.sys
Image Path: C:\Windows\system32\DRIVERS\storport.sys
Address: 0x807A7000 Size: 266240 File Visible: - Signed: -
Status: -
Name: swenum.sys
Image Path: C:\Windows\system32\DRIVERS\swenum.sys
Address: 0x8EE0B000 Size: 4992 File Visible: - Signed: -
Status: -
Name: SynTP.sys
Image Path: C:\Windows\system32\DRIVERS\SynTP.sys
Address: 0x8EF78000 Size: 189696 File Visible: - Signed: -
Status: -
Name: tcpip.sys
Image Path: C:\Windows\System32\drivers\tcpip.sys
Address: 0x8A801000 Size: 958464 File Visible: - Signed: -
Status: -
Name: tcpipreg.sys
Image Path: C:\Windows\System32\drivers\tcpipreg.sys
Address: 0x9BB52000 Size: 49152 File Visible: - Signed: -
Status: -
Name: tdcmdpst.sys
Image Path: C:\Windows\system32\DRIVERS\tdcmdpst.sys
Address: 0x8EFB4000 Size: 16128 File Visible: - Signed: -
Status: -
Name: TDI.SYS
Image Path: C:\Windows\system32\DRIVERS\TDI.SYS
Address: 0x8EFD6000 Size: 45056 File Visible: - Signed: -
Status: -
Name: tdx.sys
Image Path: C:\Windows\system32\DRIVERS\tdx.sys
Address: 0x8F33F000 Size: 90112 File Visible: - Signed: -
Status: -
Name: termdd.sys
Image Path: C:\Windows\system32\DRIVERS\termdd.sys
Address: 0x8A7EE000 Size: 65536 File Visible: - Signed: -
Status: -
Name: tos_sps32.sys
Image Path: C:\Windows\system32\DRIVERS\tos_sps32.sys
Address: 0x8AB56000 Size: 272640 File Visible: - Signed: -
Status: -
Name: TSDDD.dll
Image Path: C:\Windows\System32\TSDDD.dll
Address: 0x81A90000 Size: 36864 File Visible: - Signed: -
Status: -
Name: tunmp.sys
Image Path: C:\Windows\system32\DRIVERS\tunmp.sys
Address: 0x8A780000 Size: 36864 File Visible: - Signed: -
Status: -
Name: tunnel.sys
Image Path: C:\Windows\system32\DRIVERS\tunnel.sys
Address: 0x8A9F5000 Size: 45056 File Visible: - Signed: -
Status: -
Name: TVALZ_O.SYS
Image Path: C:\Windows\system32\DRIVERS\TVALZ_O.SYS
Address: 0x8AB51000 Size: 16768 File Visible: - Signed: -
Status: -
Name: umbus.sys
Image Path: C:\Windows\system32\DRIVERS\umbus.sys
Address: 0x82BD9000 Size: 53248 File Visible: - Signed: -
Status: -
Name: usbccgp.sys
Image Path: C:\Windows\system32\DRIVERS\usbccgp.sys
Address: 0x8F692000 Size: 94208 File Visible: - Signed: -
Status: -
Name: USBD.SYS
Image Path: C:\Windows\system32\DRIVERS\USBD.SYS
Address: 0x8EFA7000 Size: 8192 File Visible: - Signed: -
Status: -
Name: usbehci.sys
Image Path: C:\Windows\system32\DRIVERS\usbehci.sys
Address: 0x8EBCD000 Size: 61440 File Visible: - Signed: -
Status: -
Name: usbhub.sys
Image Path: C:\Windows\system32\DRIVERS\usbhub.sys
Address: 0x8F20E000 Size: 217088 File Visible: - Signed: -
Status: -
Name: USBPORT.SYS
Image Path: C:\Windows\system32\DRIVERS\USBPORT.SYS
Address: 0x8EB8F000 Size: 253952 File Visible: - Signed: -
Status: -
Name: USBSTOR.SYS
Image Path: C:\Windows\system32\DRIVERS\USBSTOR.SYS
Address: 0x8F6D3000 Size: 86016 File Visible: - Signed: -
Status: -
Name: usbuhci.sys
Image Path: C:\Windows\system32\DRIVERS\usbuhci.sys
Address: 0x8EB84000 Size: 45056 File Visible: - Signed: -
Status: -
Name: usbvideo.sys
Image Path: C:\Windows\System32\Drivers\usbvideo.sys
Address: 0x8F6B2000 Size: 134016 File Visible: - Signed: -
Status: -
Name: UVCFTR_S.SYS
Image Path: C:\Windows\System32\Drivers\UVCFTR_S.SYS
Address: 0x8F6A9000 Size: 36864 File Visible: - Signed: -
Status: -
Name: vga.sys
Image Path: C:\Windows\System32\drivers\vga.sys
Address: 0x8F2E0000 Size: 49152 File Visible: - Signed: -
Status: -
Name: VIDEOPRT.SYS
Image Path: C:\Windows\System32\drivers\VIDEOPRT.SYS
Address: 0x8F2EC000 Size: 135168 File Visible: - Signed: -
Status: -
Name: volmgr.sys
Image Path: C:\Windows\system32\drivers\volmgr.sys
Address: 0x80729000 Size: 61440 File Visible: - Signed: -
Status: -
Name: volmgrx.sys
Image Path: C:\Windows\System32\drivers\volmgrx.sys
Address: 0x80738000 Size: 303104 File Visible: - Signed: -
Status: -
Name: volsnap.sys
Image Path: C:\Windows\system32\drivers\volsnap.sys
Address: 0x8AB18000 Size: 233472 File Visible: - Signed: -
Status: -
Name: wanarp.sys
Image Path: C:\Windows\system32\DRIVERS\wanarp.sys
Address: 0x82BE6000 Size: 77824 File Visible: - Signed: -
Status: -
Name: watchdog.sys
Image Path: C:\Windows\System32\drivers\watchdog.sys
Address: 0x8EB78000 Size: 49152 File Visible: - Signed: -
Status: -
Name: Wdf01000.sys
Image Path: C:\Windows\system32\drivers\Wdf01000.sys
Address: 0x80606000 Size: 507904 File Visible: - Signed: -
Status: -
Name: WDFLDR.SYS
Image Path: C:\Windows\system32\drivers\WDFLDR.SYS
Address: 0x80682000 Size: 53248 File Visible: - Signed: -
Status: -
Name: Win32k
Image Path: \Driver\Win32k
Address: 0x81870000 Size: 2109440 File Visible: - Signed: -
Status: -
Name: win32k.sys
Image Path: C:\Windows\System32\win32k.sys
Address: 0x81870000 Size: 2109440 File Visible: - Signed: -
Status: -
Name: WMILIB.SYS
Image Path: C:\Windows\system32\drivers\WMILIB.SYS
Address: 0x806D5000 Size: 36864 File Visible: - Signed: -
Status: -
Name: WMIxWDM
Image Path: \Driver\WMIxWDM
Address: 0x8243C000 Size: 3903488 File Visible: - Signed: -
Status: -
Name: WUDFPf.sys
Image Path: C:\Windows\system32\DRIVERS\WUDFPf.sys
Address: 0x9BBB0000 Size: 73728 File Visible: - Signed: -
Status: -
Name: WUDFRd.sys
Image Path: C:\Windows\system32\DRIVERS\WUDFRd.sys
Address: 0x9BB9B000 Size: 83328 File Visible: - Signed: -
Status: -
bisher hatte ich nie probleme mit meinem pc. ich weiß auch nicht, wo ich mir diesen virus eingefangen haben soll. ich hatte kurz vorher icq geöffnet, nachdem ich es lange nicht benutzt hatte. ansonsten weiß ich nicht. danke für die hilfe!! lg fine |
|
| Themen zu Antimalware doctor: Malwarebytes hat Probleme beim löschen ? |
| anhang, antimalware, bestimmte, compu, computer, doctor, entfern, entfernt, files, gestartet, installier, installiert, jegliche, konnte, laufen, logdatei, löschen, malewarebytes, malwarebytes, meldung, neu, nochmals, probleme, rkill.com, scan, unterschiedlich |
Hybrid-Darstellung
