![]() |
|
Plagegeister aller Art und deren Bekämpfung: Virus! jetzt kein Sound mehr und Windows-Taskleiste im alten StilWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #11 |
![]() ![]() | ![]() Virus! jetzt kein Sound mehr und Windows-Taskleiste im alten Stil Hallo cosinus, also zunächst das OSAM-log: OSAM Logfile: Code:
ATTFilter Report of OSAM: Autorun Manager v5.0.11926.0 hxxp://www.online-solutions.ru/en/ Saved at 23:30:36 on 05.10.2010 OS: Windows XP Home Edition Service Pack 3 (Build 2600) Default Browser: Microsoft Corporation Internet Explorer 8.00.6001.18702 Scanner Settings [x] Rootkits detection (hidden registry) [x] Rootkits detection (hidden files) [x] Retrieve files information [x] Check Microsoft signatures Filters [ ] Trusted entries [ ] Empty entries [x] Hidden registry entries (rootkit activity) [x] Exclusively opened files [x] Not found files [x] Files without detailed information [x] Existing files [ ] Non-startable services [ ] Non-startable drivers [x] Active entries [x] Disabled entries [Common] -----( %SystemRoot%\Tasks )----- "GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe "GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe [Control Panel Objects] -----( %SystemRoot%\system32 )----- "btcpl.cpl" - "Broadcom Corporation." - C:\WINDOWS\system32\btcpl.cpl "infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS\system32\infocardcpl.cpl "javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS\system32\javacpl.cpl -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )----- "Avira AntiVir Personal - Free Antivirus " - "Avira GmbH" - C:\PROGRA~1\Avira\ANTIVI~1\avconfig.cpl "mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\MLCFG32.CPL "SRSCplLG" - "SRS Labs, Inc." - C:\Programme\SRS Labs\WOWHD and TSHD Driver\srscplLG.cpl [Drivers] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- "AEGIS Protocol (IEEE 802.1x) v3.7.5.0" (AegisP) - "Cisco Systems, Inc." - C:\WINDOWS\System32\DRIVERS\AegisP.sys "avgio" (avgio) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avgio.sys "avgntflt" (avgntflt) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avgntflt.sys "avipbb" (avipbb) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avipbb.sys "catchme" (catchme) - ? - C:\DOKUME~1\***~1\LOKALE~1\Temp\catchme.sys (File not found) "Changer" (Changer) - ? - C:\WINDOWS\system32\drivers\Changer.sys (File not found) "FsUsbExDisk" (FsUsbExDisk) - ? - C:\WINDOWS\system32\FsUsbExDisk.SYS (File found, but it contains no detailed information) "i2omgmt" (i2omgmt) - ? - C:\WINDOWS\system32\drivers\i2omgmt.sys (File not found) "lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS\system32\drivers\lbrtfdc.sys (File not found) "NDIS Protocol Driver for IPO3" (Ndisipo) - "Windows (R) 2000 DDK provider" - C:\WINDOWS\System32\DRIVERS\ndisipo.sys "PCIDump" (PCIDump) - ? - C:\WINDOWS\system32\drivers\PCIDump.sys (File not found) "PDCOMP" (PDCOMP) - ? - C:\WINDOWS\system32\drivers\PDCOMP.sys (File not found) "PDFRAME" (PDFRAME) - ? - C:\WINDOWS\system32\drivers\PDFRAME.sys (File not found) "PDRELI" (PDRELI) - ? - C:\WINDOWS\system32\drivers\PDRELI.sys (File not found) "PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS\system32\drivers\PDRFRAME.sys (File not found) "PzWDM" (PzWDM) - "Prassi Technology" - C:\WINDOWS\System32\Drivers\PzWDM.sys "Realtek IR Driver" (Rts516xIR) - ? - C:\WINDOWS\System32\DRIVERS\Rts516xIR.sys (File not found) "Realtek Smartcard Reader Driver" (USBCCID) - ? - C:\WINDOWS\System32\DRIVERS\Rts5161ccid.sys (File not found) "ssmdrv" (ssmdrv) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\ssmdrv.sys "StarOpen" (StarOpen) - ? - C:\WINDOWS\system32\drivers\StarOpen.sys (File found, but it contains no detailed information) "WDICA" (WDICA) - ? - C:\WINDOWS\system32\drivers\WDICA.sys (File not found) "WOW XT Filter Driver" (wowfilter) - ? - C:\WINDOWS\System32\drivers\wowfilter.sys [Explorer] -----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )----- {89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install -----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )----- {F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll -----( HKLM\Software\Classes\Protocols\Filter )----- {1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll {1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll {1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll {807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\MSOXMLMF.DLL -----( HKLM\Software\Classes\Protocols\Handler )----- {314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL {88FED34C-F0CA-4636-A375-3CB6248B04CD} "Local Groove Web Services Protocol" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )----- {B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )----- {6af09ec9-b429-11d4-a1fb-0090960218cb} "Bluetooth-Umgebung" - "Broadcom Corporation." - C:\WINDOWS\system32\BTNEIG~1.DLL {42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung" - ? - deskpan.dll (File not found) {99FD978C-D287-4F50-827F-B2C658EDA8E7} "Groove Explorer Icon Overlay 1 (GFS Unread Stub)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} "Groove Explorer Icon Overlay 2 (GFS Stub)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {920E6DB1-9907-4370-B3A0-BAFC03D81399} "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {16F3DD56-1AF5-4347-846D-7C10C4192619} "Groove Explorer Icon Overlay 3 (GFS Folder)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {2916C86E-86A6-43FE-8112-43ABE6BF8DCC} "Groove Explorer Icon Overlay 4 (GFS Unread Mark)" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {2A541AE1-5BF6-4665-A8A3-CFA9672E4291} "Groove Folder Synchronization" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {6C467336-8281-4E60-8204-430CED96822D} "Groove GFS Context Menu Handler" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {A449600E-1DC6-4232-B948-9BD794D62056} "Groove GFS Stub Icon Handler" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {387E725D-DC16-4D76-B310-2C93ED4752A0} "Groove XML Icon Handler" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} "IE User Assist" - ? - (File not found | COM-object registry key not found) {853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung" - ? - (File not found | COM-object registry key not found) {42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office12\msohevi.dll {993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll {5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\ONFILTER.DLL {00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\MLSHEXT.DLL {C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll {7842554E-6BED-11D2-8CDB-B05550C10000} "Monitor Class" - "Broadcom Corporation." - C:\WINDOWS\system32\btncopy.dll {C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer" - ? - C:\Programme\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll {0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\OLKFSTUB.DLL {45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\shlext.dll {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll {764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung" - ? - (File not found | COM-object registry key not found) {e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll {BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Web Folders" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\MSONSEXT.DLL {B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Programme\WinRAR\rarext.dll [Internet Explorer] -----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars )----- {FF059E31-CC5A-4E2E-BF3B-96E929D65503} "&Recherchieren" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL -----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )----- <binary data> "EPSON Web-To-Page" - "SEIKO EPSON CORPORATION" - C:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll <binary data> "Google Toolbar" - "Google Inc." - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll ITBar7Height "ITBar7Height" - ? - (File not found | COM-object registry key not found) <binary data> "ITBar7Layout" - ? - (File not found | COM-object registry key not found) <binary data> "ITBarLayout" - ? - (File not found | COM-object registry key not found) -----( HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks )----- {E312764E-7706-43F1-8DAB-FCDD2B1E416D} "{E312764E-7706-43F1-8DAB-FCDD2B1E416D}" - ? - (File not found | COM-object registry key not found) -----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )----- {8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_13" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_13.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} "Java Plug-in 1.6.0_13" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_13.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_13" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_13.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab {E2883E8F-472F-4FB0-9522-AC9BF37916A7} "{E2883E8F-472F-4FB0-9522-AC9BF37916A7}" - ? - (File not found | COM-object registry key not found) / hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab -----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )----- "@btrez.dll,-4015" - ? - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm {48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll {77BF5300-1474-4EC7-9980-D32B190E9B07} "ClsidExtension" - "Skype Technologies S.A." - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll {FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL {77BF5300-1474-4EC7-9980-D32B190E9B07} "Skype" - "Skype Technologies S.A." - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll -----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )----- {9421DD08-935F-4701-A9CA-22DF90AC4EA6} "Easy Photo Print" - "SEIKO EPSON CORPORATION / CyCom Technology Corp." - C:\Programme\Epson Software\Easy Photo Print\EPTBL.dll <binary data> "EPSON Web-To-Page" - "SEIKO EPSON CORPORATION" - C:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll <binary data> "Google Toolbar" - "Google Inc." - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )----- {18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll {9421DD08-935F-4701-A9CA-22DF90AC4EA6} "Easy Photo Print" - "SEIKO EPSON CORPORATION / CyCom Technology Corp." - C:\Programme\Epson Software\Easy Photo Print\EPTBL.dll {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} "EpsonToolBandKicker Class" - "SEIKO EPSON CORPORATION" - C:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll {AA58ED58-01DD-4d91-8333-CF10577473F7} "Google Toolbar Helper" - "Google Inc." - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} "Google Toolbar Notifier BHO" - "Google Inc." - C:\Programme\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll {72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL {DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll {E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll {22BF413B-C6D2-4d91-82A9-A0F997BA588C} "Skype add-on (mastermind)" - "Skype Technologies S.A." - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [Logon] -----( %AllUsersProfile%\Startmenü\Programme\Autostart )----- "desktop.ini" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini "MediaChecker.lnk" - "PLANNING Co., Ltd" - C:\Programme\HOTALBUMMyBOX\MediaChecker.exe (Shortcut exists | File exists) "BTTray.lnk" - "Broadcom Corporation." - C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe (Shortcut exists | File exists) -----( %UserProfile%\Startmenü\Programme\Autostart )----- "desktop.ini" - ? - C:\Dokumente und Einstellungen\***\Startmenü\Programme\Autostart\desktop.ini -----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )----- "AutoStartNPSAgent" - "Samsung Electronics Co., Ltd." - C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe "SRSTrayApp" - "SRS Labs, Inc." - C:\Programme\SRS Labs\WOWHD and TSHD Driver\SRSTrayApp.exe -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )----- "Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" "avgnt" - "Avira GmbH" - "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min "BisonMnt" - ? - C:\WINDOWS\BisonC07\BisonM07.exe (File signed by Microsoft | File found, but it contains no detailed information) "GrooveMonitor" - "Microsoft Corporation" - "C:\Programme\Microsoft Office\Office12\GrooveMonitor.exe" "IAAnotif" - "Intel Corporation" - C:\Programme\Intel\Intel Matrix Storage Manager\iaanotif.exe "IPO3" - "LG Electronics Inc." - "C:\Programme\LG Software\IP Operator\IP Operator.exe" -aUtOsTaRtFrOmReG "KeybdUtility" - "LG Electronics Inc." - "C:\Programme\LG Software\On Screen Display\HotKey.exe" "LG Intelligent Update" - ? - C:\Programme\lg_swupdate\autoupdate.exe Gilautouc "LG Magnifier" - "LG Electronics Inc." - "C:\Programme\LG Software\LG Magnifier\MagnifyingGlass.exe" "MBBalloon" - "PLANNING Co., Ltd." - C:\Programme\HOTALBUMMyBOX\MBBalloon.exe "MSPY2002" - ? - C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC (File signed by Microsoft | File found, but it contains no detailed information) "SearchSettings" - "Spigot, Inc." - C:\Programme\pdfforge Toolbar\SearchSettings.exe "SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Programme\Java\jre6\bin\jusched.exe" "UCam_Menu" - "CyberLink Corp." - "C:\Programme\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Programme\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0" "zOSD" - "LG Electronics Inc." - "C:\Programme\LG Software\On Screen Display\HotKey.exe" [Print Monitors] -----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )----- "Bluetooth-Druckeranschluss" - "Broadcom Corporation." - C:\WINDOWS\system32\bthcrp.dll "PDFCreator" - ? - C:\WINDOWS\system32\pdfcmnnt.dll (File found, but it contains no detailed information) "PrimoMon" - ? - C:\WINDOWS\system32\Primomonnt.dll (File found, but it contains no detailed information) "Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\WINDOWS\system32\msonpmon.dll [Services] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- ".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe "Anwendungsverwaltung" (AppMgmt) - ? - C:\WINDOWS\System32\appmgmts.dll (File not found) "Application Updater" (Application Updater) - "Spigot, Inc." - C:\Programme\Application Updater\ApplicationUpdater.exe "ASP.NET State Service" (aspnet_state) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe "Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avguard.exe "Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\sched.exe "Bluetooth Service" (btwdins) - "Broadcom Corporation." - C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe "DeviceVM Meta Data Export Service" (DvmMDES) - "DeviceVM, Inc." - C:\SPLASH.SYS\config\DVMExportService.exe "FsUsbExService" (FsUsbExService) - "Teruten" - C:\WINDOWS\system32\FsUsbExService.Exe "Google Software Updater" (gusvc) - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe "Google Update Service (gupdate1ca2b3844d1e610)" (gupdate1ca2b3844d1e610) - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe "GoToAssist Express Customer" (GoToAssist Express Customer) - "Citrix Online, a division of Citrix Systems, Inc." - C:\Programme\Citrix\GoToAssist Express Customer\240\g2ax_service.exe "HID Input Service" (HidServ) - ? - C:\WINDOWS\System32\hidserv.dll (File not found) "Intel(R) Matrix Storage Event Monitor" (IAANTMON) - "Intel Corporation" - C:\Programme\Intel\Intel Matrix Storage Manager\IAANTMon.exe "Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe "Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE "Microsoft Office Groove Audit Service" (Microsoft Office Groove Audit Service) - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe "NMSAccessU" (NMSAccessU) - ? - C:\Programme\CDBurnerXP\NMSAccessU.exe (File found, but it contains no detailed information) "Office Source Engine" (ose) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE "PEVSystemStart" (PEVSystemStart) - ? - C:\cf\PEV.cfxxe (File found, but it contains no detailed information) "Ralink Registry Writer" (RalinkRegistryWriter) - "Ralink Technology, Corp." - C:\Programme\Ralink\Common\RalinkRegistryWriter.exe "ServiceLayer" (ServiceLayer) - "Nokia." - C:\Programme\PC Connectivity Solution\ServiceLayer.exe "SRS PostInstaller Service" (SRS_PostInstaller) - "SRS Labs, Inc." - C:\Programme\SRS Labs\WOWHD and TSHD Driver\SRS_PostInstaller.exe "Windows CardSpace" (idsvc) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe "Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [Winlogon] -----( HKCU\Control Panel\IOProcs )----- "MVB" - ? - mvfs32.dll (File not found) -----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions )----- {c6dc5466-785a-11d2-84d0-00c04fb169f7} "Softwareinstallation" - ? - appmgmts.dll (File not found) -----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )----- "GoToAssist Express Customer" - "Citrix Online, a division of Citrix Systems, Inc." - C:\Programme\Citrix\GoToAssist Express Customer\240\g2ax_winlogon.dll ===[ Logfile end ]=========================================[ Logfile end ]=== If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru als nächstes das MBRcheck-Dokument: MBRCheck, version 1.2.3 (c) 2010, AD Command-line: Windows Version: Windows XP Home Edition Windows Information: Service Pack 3 (build 2600) Logical Drives Mask: 0x0000001c Kernel Drivers (total 133): 0x804D7000 \WINDOWS\system32\ntoskrnl.exe 0x80700000 \WINDOWS\system32\hal.dll 0xF7B3D000 \WINDOWS\system32\KDCOM.DLL 0xF7A4D000 \WINDOWS\system32\BOOTVID.dll 0xF75ED000 ACPI.sys 0xF7B3F000 \WINDOWS\system32\DRIVERS\WMILIB.SYS 0xF75DC000 pci.sys 0xF763D000 isapnp.sys 0xF7A51000 compbatt.sys 0xF7A55000 \WINDOWS\system32\DRIVERS\BATTC.SYS 0xF7C05000 pciide.sys 0xF78BD000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS 0xF764D000 MountMgr.sys 0xF75BD000 ftdisk.sys 0xF78C5000 PartMgr.sys 0xF7A59000 ACPIEC.sys 0xF7C06000 \WINDOWS\system32\DRIVERS\OPRGHDLR.SYS 0xF765D000 VolSnap.sys 0xF75A5000 atapi.sys 0xF74CB000 iaStor.sys 0xF766D000 disk.sys 0xF767D000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS 0xF74AB000 fltMgr.sys 0xF7499000 sr.sys 0xF7A5D000 PzWDM.sys 0xF7482000 KSecDD.sys 0xF73F5000 Ntfs.sys 0xF73C8000 NDIS.sys 0xF73AE000 Mup.sys 0xF777D000 \SystemRoot\system32\DRIVERS\intelppm.sys 0xF7AFD000 \SystemRoot\system32\DRIVERS\CmBatt.sys 0xF6D26000 \SystemRoot\system32\DRIVERS\igxpmp32.sys 0xF6D12000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS 0xF6CEA000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0xF6CC9000 \SystemRoot\system32\DRIVERS\Rtenicxp.sys 0xF6BC3000 \SystemRoot\system32\DRIVERS\RT2860.sys 0xF79B5000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0xF6B9F000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0xF79E5000 \SystemRoot\system32\DRIVERS\usbehci.sys 0xF778D000 \SystemRoot\system32\DRIVERS\i8042prt.sys 0xF7A05000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0xF6B6C000 \SystemRoot\system32\DRIVERS\SynTP.sys 0xF7B49000 \SystemRoot\system32\DRIVERS\USBD.SYS 0xF779D000 \SystemRoot\system32\DRIVERS\WDFLDR.SYS 0xF6AFB000 \SystemRoot\System32\Drivers\wdf01000.sys 0xF79F5000 \SystemRoot\system32\DRIVERS\mouclass.sys 0xF7B31000 \SystemRoot\system32\DRIVERS\wmiacpi.sys 0xF6A0A000 \SystemRoot\system32\DRIVERS\btkrnl.sys 0xF7B39000 \SystemRoot\system32\DRIVERS\fsvga.sys 0xF7C5D000 \SystemRoot\system32\DRIVERS\audstub.sys 0xF77AD000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0xF7386000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0xF69F3000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0xF77BD000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0xF77CD000 \SystemRoot\system32\DRIVERS\raspptp.sys 0xF7975000 \SystemRoot\system32\DRIVERS\TDI.SYS 0xF69E2000 \SystemRoot\system32\DRIVERS\psched.sys 0xF77DD000 \SystemRoot\system32\DRIVERS\msgpc.sys 0xF799D000 \SystemRoot\system32\DRIVERS\ptilink.sys 0xF79AD000 \SystemRoot\system32\DRIVERS\raspti.sys 0xF77ED000 \SystemRoot\system32\DRIVERS\termdd.sys 0xF7B5B000 \SystemRoot\system32\DRIVERS\swenum.sys 0xF69BF000 \SystemRoot\system32\DRIVERS\ks.sys 0xF6961000 \SystemRoot\system32\DRIVERS\update.sys 0xF736E000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0xF78FD000 \SystemRoot\system32\DRIVERS\btport.sys 0xF77FD000 \SystemRoot\System32\Drivers\NDProxy.SYS 0xF781D000 \SystemRoot\system32\DRIVERS\usbhub.sys 0xAA2BE000 \SystemRoot\system32\drivers\RtkHDAud.sys 0xAA29A000 \SystemRoot\system32\drivers\portcls.sys 0xF782D000 \SystemRoot\system32\drivers\drmk.sys 0xAA27B000 \SystemRoot\system32\drivers\wowfilter.sys 0xF7B67000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0xF7CB0000 \SystemRoot\System32\Drivers\Null.SYS 0xF7B6B000 \SystemRoot\System32\Drivers\Beep.SYS 0xF7965000 \SystemRoot\System32\drivers\vga.sys 0xF7B6F000 \SystemRoot\System32\Drivers\mnmdd.SYS 0xF7B73000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0xF797D000 \SystemRoot\System32\Drivers\Msfs.SYS 0xF798D000 \SystemRoot\System32\Drivers\Npfs.SYS 0xF6939000 \SystemRoot\system32\DRIVERS\rasacd.sys 0xAA1F8000 \SystemRoot\system32\DRIVERS\ipsec.sys 0xAA19F000 \SystemRoot\system32\DRIVERS\tcpip.sys 0xAA177000 \SystemRoot\system32\DRIVERS\netbt.sys 0xAA151000 \SystemRoot\system32\DRIVERS\ipnat.sys 0xF7320000 \SystemRoot\system32\DRIVERS\ndisipo.sys 0xAA12F000 \SystemRoot\System32\drivers\afd.sys 0xF785D000 \SystemRoot\system32\DRIVERS\netbios.sys 0xF7955000 \SystemRoot\system32\DRIVERS\ssmdrv.sys 0xAA064000 \SystemRoot\system32\DRIVERS\rdbss.sys 0xA9FF4000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0xF788D000 \SystemRoot\System32\Drivers\Fips.SYS 0xA9FB0000 \SystemRoot\system32\DRIVERS\avipbb.sys 0xF78AD000 \SystemRoot\system32\DRIVERS\wanarp.sys 0xF7B7B000 \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys 0xA9E7B000 \SystemRoot\System32\Drivers\BisonC07.sys 0xF76AD000 \SystemRoot\System32\Drivers\STREAM.SYS 0xF7905000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0xF76CD000 \SystemRoot\system32\DRIVERS\imapi.sys 0xF76DD000 \SystemRoot\system32\DRIVERS\cdrom.sys 0xF76ED000 \SystemRoot\system32\DRIVERS\redbook.sys 0xAA22B000 \SystemRoot\system32\DRIVERS\hidusb.sys 0xF76FD000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0xF7945000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0xF770D000 \SystemRoot\System32\Drivers\btwusb.sys 0xF7324000 \SystemRoot\system32\DRIVERS\mouhid.sys 0xA9E5D000 \SystemRoot\system32\DRIVERS\btwdndis.sys 0xA9DDC000 \SystemRoot\system32\drivers\btaudio.sys 0xF771D000 \SystemRoot\system32\DRIVERS\btwhid.sys 0xA9D02000 \SystemRoot\System32\Drivers\dump_iaStor.sys 0xBF800000 \SystemRoot\System32\win32k.sys 0xF7B11000 \SystemRoot\System32\drivers\Dxapi.sys 0xF7985000 \SystemRoot\System32\watchdog.sys 0xBF000000 \SystemRoot\System32\drivers\dxg.sys 0xF7D64000 \SystemRoot\System32\drivers\dxgthk.sys 0xBF024000 \SystemRoot\System32\igxpgd32.dll 0xBF012000 \SystemRoot\System32\igxprd32.dll 0xBF04F000 \SystemRoot\System32\igxpdv32.DLL 0xBF1E7000 \SystemRoot\System32\igxpdx32.DLL 0xBFFA0000 \SystemRoot\System32\ATMFD.DLL 0xA9B0E000 \SystemRoot\system32\DRIVERS\avgntflt.sys 0xF79BD000 \SystemRoot\system32\DRIVERS\AegisP.sys 0xA9ACA000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0xA9889000 \SystemRoot\system32\DRIVERS\mrxdav.sys 0xA984C000 \SystemRoot\system32\drivers\wdmaud.sys 0xA9946000 \SystemRoot\system32\drivers\sysaudio.sys 0xF776D000 \SystemRoot\System32\Drivers\Cdfs.SYS 0xA8CAC000 \SystemRoot\system32\DRIVERS\srv.sys 0xA87C2000 \SystemRoot\System32\Drivers\HTTP.sys 0xA8A9B000 \??\C:\WINDOWS\system32\FsUsbExDisk.SYS 0xA82ED000 \SystemRoot\System32\Drivers\Udfs.SYS 0xA8017000 \SystemRoot\system32\drivers\kmixer.sys 0x7C910000 \WINDOWS\system32\ntdll.dll Processes (total 63): 0 System Idle Process 4 SYSTEM 768 C:\WINDOWS\system32\smss.exe 928 csrss.exe 952 C:\WINDOWS\system32\winlogon.exe 996 C:\WINDOWS\system32\services.exe 1016 C:\WINDOWS\system32\lsass.exe 1212 C:\WINDOWS\system32\svchost.exe 1272 svchost.exe 1436 C:\WINDOWS\system32\svchost.exe 1588 svchost.exe 1692 svchost.exe 1884 C:\WINDOWS\system32\spoolsv.exe 1924 C:\Programme\Avira\AntiVir Desktop\sched.exe 2008 svchost.exe 484 C:\WINDOWS\explorer.exe 716 C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe 732 C:\WINDOWS\RTHDCPL.EXE 752 C:\Programme\LG Software\On Screen Display\HotKey.exe 788 C:\Programme\LG Software\IP Operator\IP Operator.exe 812 C:\Programme\LG Software\LG Magnifier\MagnifyingGlass.exe 828 C:\Programme\Synaptics\SynTP\SynTPEnh.exe 840 C:\Programme\Java\jre6\bin\jusched.exe 888 C:\WINDOWS\BisonC07\BisonM07.exe 896 C:\Programme\Avira\AntiVir Desktop\avgnt.exe 1372 C:\Programme\Microsoft Office\Office12\GrooveMonitor.exe 1412 C:\WINDOWS\system32\igfxtray.exe 1420 C:\WINDOWS\system32\hkcmd.exe 1460 C:\WINDOWS\system32\igfxpers.exe 1552 C:\WINDOWS\system32\igfxsrvc.exe 1564 C:\Programme\pdfforge Toolbar\SearchSettings.exe 1644 C:\WINDOWS\system32\ctfmon.exe 1660 C:\Programme\SRS Labs\WOWHD and TSHD Driver\SRSTrayApp.exe 1736 C:\Programme\Messenger\msmsgs.exe 1744 C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe 2036 C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe 172 C:\Programme\HOTALBUMMyBOX\MediaChecker.exe 532 C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE 2340 C:\Programme\Avira\AntiVir Desktop\avguard.exe 2352 C:\Programme\Application Updater\ApplicationUpdater.exe 2396 C:\SPLASH.SYS\config\DVMExportService.exe 2424 C:\WINDOWS\system32\FsUsbExService.Exe 2568 C:\Programme\Java\jre6\bin\jqs.exe 2860 C:\Programme\CDBurnerXP\NMSAccessU.exe 3028 C:\Programme\Ralink\Common\RalinkRegistryWriter.exe 3136 C:\Programme\SRS Labs\WOWHD and TSHD Driver\SRS_PostInstaller.exe 3192 C:\WINDOWS\system32\svchost.exe 3312 C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe 3660 C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe 2740 C:\WINDOWS\system32\wbem\wmiapsrv.exe 1732 alg.exe 3576 wmiprvse.exe 1544 C:\Programme\lg_swupdate\Gilautouc.exe 2812 C:\WINDOWS\system32\wuauclt.exe 1748 C:\Programme\ArcorOnline\AOButler.exe 1628 C:\Programme\Internet Explorer\iexplore.exe 3380 C:\Programme\Internet Explorer\iexplore.exe 144 C:\Programme\Internet Explorer\iexplore.exe 3976 C:\Programme\Internet Explorer\iexplore.exe 2116 C:\WINDOWS\system32\notepad.exe 3588 C:\Programme\Internet Explorer\iexplore.exe 2852 C:\Downloads\MBRCheck.exe 408 C:\WINDOWS\system32\conime.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000001`00100000 (NTFS) \\.\D: --> \\.\PhysicalDrive0 at offset 0x00000013`40b00000 (NTFS) PhysicalDrive0 Model Number: FUJITSUMJA2160BHG2, Rev: 00000018 Size Device Name MBR Status -------------------------------------------- 149 GB \\.\PhysicalDrive0 Unknown MBR code SHA1: E8EFC29219835D8458780599A652BF385FCCA64A Found non-standard or infected MBR. Enter 'Y' and hit ENTER for more options, or 'N' to exit: Done! |
Themen zu Virus! jetzt kein Sound mehr und Windows-Taskleiste im alten Stil |
0 bytes, antivir, anwendungen, audiogeräte, besser, entfernt, format, generic, google, hochfahren, jar_cache, java-virus, jusched.exe, kein sound, nicht mehr, nichts, nt.dll, pcs, plötzlich, problem, services, sound, stil, systemsteuerung, taskleiste, tr/crypt.xpack.ge, versteckte objekte, verweise, viren, virus, virus gefunden, win32, windows, windows xp, winxp |