![]() |
|
Log-Analyse und Auswertung: Nach Trojaner-Angriff lahmer Systemstart, häufige Abstürze.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
|
![]() | #1 |
/// Winkelfunktion /// TB-Süch-Tiger™ ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Nach Trojaner-Angriff lahmer Systemstart, häufige Abstürze. tdsskiller kann manchmal helfen, CF löscht den aber auch aber das lief ja bei Dir nicht ![]() Probier CF bitte nach Anleitung nochmal aus
__________________ Logfiles bitte immer in CODE-Tags posten ![]() |
![]() | #2 |
![]() | ![]() Nach Trojaner-Angriff lahmer Systemstart, häufige Abstürze. So hier die Logdatei von ComboFix.
__________________Ich habe das Gefühl dass alles wieder recht okay ist - natürlich weiß ich nicht was die Logdatei sagt, weil ich davon keinen Plan habe, aber Abstürze, schwarzer Bildschirm und das Lahmen haben anscheinend ein Ende gefunden. Combofix Logfile: Code:
ATTFilter ComboFix 10-10-24.06 - SilverSurger 25.10.2010 20:58:30.1.2 - x86 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.43.1031.18.3067.1821 [GMT 2:00] ausgeführt von:: c:\users\SilverSurger\Desktop\cofi.exe . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . c:\programdata\hpeFF7.dll c:\users\SilverSurger\AppData\Roaming\EurekaLog . ((((((((((((((((((((((( Dateien erstellt von 2010-09-25 bis 2010-10-25 )))))))))))))))))))))))))))))) . 2010-10-25 19:04 . 2010-10-25 19:04 -------- d-----w- c:\users\Mcx1-ACER-PC\AppData\Local\temp 2010-10-25 19:04 . 2010-10-25 19:04 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-10-25 19:04 . 2010-10-25 19:04 -------- d-----w- c:\users\acer\AppData\Local\temp 2010-10-24 19:39 . 2010-10-24 19:40 -------- d-----w- c:\program files\CCleaner 2010-10-24 18:34 . 2010-10-24 18:34 -------- d-----w- c:\program files\Magical Jelly Bean 2010-10-24 18:12 . 2010-10-24 18:13 -------- d-----w- c:\users\SilverSurger360 2010-10-24 15:28 . 2010-10-24 15:28 -------- d-----w- C:\_OTL 2010-10-24 14:22 . 2010-10-25 15:36 -------- d-----w- C:\JDownloader 2010-10-24 14:12 . 2010-10-24 18:00 -------- d-----w- c:\users\SilverSurger\AppData\Roaming\kikin 2010-10-24 14:12 . 2010-10-24 14:12 -------- d-----w- c:\program files\kikin 2010-10-24 14:12 . 2010-10-24 18:07 -------- d-----w- c:\program files\JDownloader 2010-10-23 15:31 . 2010-10-23 15:31 -------- d-----w- c:\program files\McAfee Security Scan 2010-10-22 11:23 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{7E67CDB9-A1FC-42A8-8342-0FD272A9E365}\mpengine.dll 2010-10-17 10:19 . 2010-10-17 22:24 -------- d-----w- c:\users\SilverSurger\NTI-Shadow 2010-10-17 10:19 . 2010-10-17 10:19 -------- d-----w- c:\users\SilverSurger\AppData\Roaming\NewTech Infosystems 2010-10-17 10:19 . 2010-10-17 10:19 -------- d-----w- c:\users\SilverSurger\AppData\Roaming\InstallShield Installation Information 2010-10-17 10:18 . 2010-10-17 10:18 -------- d-----w- c:\users\SilverSurger\AppData\Roaming\InstallShield 2010-10-16 18:19 . 2010-10-16 18:19 -------- d-----w- c:\program files\AntiTwin 2010-10-02 19:57 . 2010-10-03 10:23 -------- d-----w- c:\users\SilverSurger\AppData\Local\VMware 2010-10-02 19:57 . 2010-10-24 11:00 -------- d-----w- c:\users\SilverSurger\AppData\Roaming\VMware 2010-10-02 19:52 . 2010-10-24 11:02 -------- d-----w- c:\programdata\VMware 2010-10-02 18:43 . 2009-12-31 09:22 295936 ----a-w- c:\windows\system32\drivers\vpcvmm.sys 2010-10-02 18:43 . 2009-12-31 09:05 2171392 ----a-w- c:\windows\system32\VPCWizard.exe 2010-10-02 18:43 . 2009-12-31 09:05 3330560 ----a-w- c:\windows\system32\vpc.exe 2010-10-02 18:43 . 2009-12-31 06:48 1003008 ----a-w- c:\windows\system32\VMWindow.exe 2010-10-02 18:35 . 2010-10-02 19:58 -------- d-----r- c:\users\SilverSurger\Virtual Machines 2010-10-02 18:25 . 2009-09-23 01:18 14848 ----a-w- c:\windows\system32\vpchbuspipe.dll 2010-10-02 18:25 . 2009-09-23 01:19 55040 ----a-w- c:\windows\system32\drivers\vpcnfltr.sys 2010-10-02 18:25 . 2009-09-23 01:18 78336 ----a-w- c:\windows\system32\drivers\vpcusb.sys 2010-10-02 18:25 . 2009-09-23 01:18 165376 ----a-w- c:\windows\system32\drivers\vpchbus.sys 2010-10-02 18:25 . 2009-09-23 01:18 1260032 ----a-w- c:\windows\system32\VPCSettings.exe 2010-10-02 18:25 . 2009-09-23 01:18 559616 ----a-w- c:\windows\system32\VMCPropertyHandler.dll 2010-10-02 18:25 . 2009-09-23 01:18 793600 ----a-w- c:\windows\system32\vmsal.exe 2010-10-02 18:20 . 2009-06-25 11:20 1446264 ----a-w- c:\program files\Mozilla Firefox\plugins\npLegitCheckPlugin.dll 2010-10-02 17:36 . 1996-12-03 11:35 18862131 ----a-w- c:\program files\Mozilla Firefox\F95_DEMO.EXE 2010-09-29 01:00 . 2010-03-04 04:04 146304 ----a-w- c:\windows\system32\drivers\usbvideo.sys 2010-09-29 01:00 . 2010-03-04 03:57 190976 ----a-w- c:\windows\system32\drivers\ks.sys 2010-09-28 23:18 . 2010-06-19 06:15 2048 ----a-w- c:\windows\system32\tzres.dll 2010-09-28 23:18 . 2010-08-27 05:30 13312 ----a-w- c:\program files\Internet Explorer\iecompat.dll 2010-09-26 18:33 . 2010-09-26 18:33 -------- d-----w- c:\program files\copy trans manager 2010-09-26 17:40 . 2002-09-22 10:42 17408 ----a-w- c:\windows\Shortcut.exe 2010-09-26 17:40 . 2010-09-26 17:40 -------- d-----w- c:\program files\RAM Idle LE 2010-09-26 17:35 . 2010-09-26 17:35 -------- d-----w- c:\windows\W7SBC 2010-09-26 17:35 . 2009-10-31 05:45 2614272 ----a-w- c:\windows\explorer_edit_w7sbc.exe 2010-09-26 17:35 . 2010-09-26 17:35 -------- d-----w- c:\program files\orb 2010-09-26 16:26 . 2010-09-26 16:26 -------- d-----w- c:\users\SilverSurger\Taskbar 2010-09-26 15:34 . 2009-08-24 20:08 28160 ----a-w- c:\windows\system32\DfSdkBt.exe 2010-09-26 10:26 . 2010-09-26 10:26 -------- d-----w- c:\program files\7-Zip 2010-09-26 10:05 . 2009-07-14 01:16 2755072 ----a-w- c:\windows\system32\themeui.dll.backup 2010-09-26 10:05 . 2009-07-14 01:16 37376 ----a-w- c:\windows\system32\themeservice.dll.backup 2010-09-26 10:05 . 2009-07-14 01:16 249856 ----a-w- c:\windows\system32\uxtheme.dll.backup 2010-09-26 10:05 . 2010-09-26 10:05 758040 ----a-w- c:\windows\UTP.exe . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-25 08:08 . 2010-10-25 08:08 8065 ----a-w- C:\Qoobox.zip 2010-10-19 09:41 . 2009-10-26 06:04 222080 ------w- c:\windows\system32\MpSigStub.exe 2010-09-08 09:17 . 2010-09-08 09:17 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx 2010-09-08 09:17 . 2010-09-08 09:17 69632 ----a-w- c:\windows\system32\QuickTime.qts 2010-08-21 05:32 . 2010-09-14 22:55 316928 ----a-w- c:\windows\system32\spoolsv.exe 2010-07-29 06:30 . 2010-08-11 11:06 197632 ----a-w- c:\windows\system32\ir32_32.dll 2010-07-29 06:30 . 2010-08-11 11:06 82944 ----a-w- c:\windows\system32\iccvid.dll 2009-09-13 21:10 . 2009-10-28 20:58 47104 ----a-w- c:\program files\mozilla firefox\components\FFComm.dll . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E601996F-E400-41CA-804B-CD6373A7EEE2}] 2010-06-24 00:17 782568 ----a-w- c:\program files\kikin\ie_kikin.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-07-29 16:52 121392 ----a-w- c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2009-07-14 144384] "ProductReg"="c:\program files\Acer\WR_PopUp\ProductReg.exe" [2008-11-17 135168] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="RtHDVCpl.exe" [2008-09-19 6294048] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-11-22 13601312] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-11-22 92704] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-25 1049896] "eAudio"="c:\program files\Acer\Empowering Technology\eAudio\eAudio.exe" [2008-09-11 544768] "eDataSecurity Loader"="c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-07-29 526896] "ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-11-28 417792] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2008-03-25 49152] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-25 149280] "LManager"="c:\progra~1\Launch Manager\LManager.exe" [2008-11-21 858632] "hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016] "AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe" [2010-05-07 344736] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-07-21 141608] "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-08-20 1164584] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoFileAssociate"= 0 (0x0) "NoResolveTrack"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "mixer1"=wdmaud.drv [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 R1 kl2;kl2;c:\windows\system32\DRIVERS\kl2.sys [2010-05-06 132184] R2 Apache2.2;Apache2.2;d:\xampp\apache\bin\httpd.exe [x] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-11-28 24576] R2 OMSI download service;Sony Ericsson OMSI download service;c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112] R3 dc3d;Microsoft-Hardware – Geräteerkennungstreiber;c:\windows\system32\DRIVERS\dc3d.sys [2010-07-01 44432] R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-03-31 36608] R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2010-06-26 13224] R3 leafnets;Leaf Networks Adapter;c:\windows\system32\DRIVERS\leafnets.sys [2010-01-12 55296] R3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168] R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2009-10-29 95376] R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-09 1343400] R3 WPRO_40_1123;WinPcap Packet Driver (WPRO_40_1123);c:\windows\system32\drivers\WPRO_40_1123.sys [x] R3 WSDPrintDevice;WSD-Druckunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 17920] R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-05-28 691696] S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2010-04-22 22104] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128] S2 DfSdkS;Defragmentation-Service;c:\program files\Ashampoo\Ashampoo WinOptimizer 7\Dfsdks.exe [2009-08-24 406016] S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-01-12 185640] S3 hidshim;Service for HID-KMDF Shim layer;c:\windows\system32\DRIVERS\hidshim.sys [2008-10-08 5632] S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-11-02 19984] S3 NETw5s32;Intel(R) Wireless WiFi Link Adaptertreiber für Windows 7 32-Bit;c:\windows\system32\DRIVERS\NETw5s32.sys [2009-09-15 6114816] S3 nuvotonhidgeneric;Nuvoton EC Generic HID;c:\windows\system32\DRIVERS\nuvotonhidgeneric.sys [2008-10-08 22528] S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2008-09-25 45600] S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2008-01-09 27632] --- Andere Dienste/Treiber im Speicher --- *NewlyCreated* - NDISKIO *NewlyCreated* - NSAK *Deregistered* - klmd25 *Deregistered* - NDISKIO *Deregistered* - nsak *Deregistered* - UBHelper [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 HPService REG_MULTI_SZ HPSLPSVC . Inhalt des "geplante Tasks" Ordners 2010-10-23 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2470086164-179386694-4040076334-1001Core.job - c:\users\SilverSurger\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-23 14:57] 2010-10-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2470086164-179386694-4040076334-1001UA.job - c:\users\SilverSurger\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-23 14:57] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://www.google.at/ mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c07&s=2&o=vp32&d=1208&m=aspire_8730 uInternet Settings,ProxyOverride = *.local IE: Nach Microsoft &Excel exportieren - c:\progra~1\Microsoft Office\Office10\EXCEL.EXE/3000 IE: {{71BFC818-0CED-42D6-9C87-5142918957EE} - c:\program files\ICQ7.1\ICQ.exe IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\users\SilverSurger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk IE: {{0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - {E601996F-E400-41CA-804B-CD6373A7EEE2} - c:\program files\kikin\ie_kikin.dll FF - ProfilePath - c:\users\SilverSurger\AppData\Roaming\Mozilla\Firefox\Profiles\suj645lk.default\ FF - prefs.js: browser.search.defaulturl - hxxp://chameleontom.iamwired.net/search.php?src=tops&q= FF - prefs.js: browser.startup.homepage - hxxp://www.google.at/ FF - prefs.js: keyword.URL - hxxp://chameleontom.iamwired.net/search.php?src=tops&q= FF - component: c:\program files\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru\components\abhelperxpcom.dll FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\kavlinkfilter.dll FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll FF - plugin: c:\program files\MpcStar\Codecs\Real\browser\plugins\nppl3260.dll FF - plugin: c:\program files\MpcStar\Codecs\Real\browser\plugins\nprpjplug.dll FF - plugin: c:\program files\Sony\Media Go\npmediago.dll FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: c:\users\SilverSurger\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX Richtlinien ---- FF - user.js: layout.spellcheckDefault - 2 FF - user.js: network.prefetch-next - true FF - user.js: nglayout.initialpaint.delay - 250 FF - user.js: browser.urlbar.autoFill - false FF - user.js: browser.search.openintab - false FF - user.js: browser.tabs.closeButtons - 1 FF - user.js: browser.tabs.opentabfor.middleclick - true FF - user.js: browser.tabs.tabMinWidth - 100 FF - user.js: browser.urlbar.hideGoButton - false c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false); . . --------------------- Gesperrte Registrierungsschluessel --------------------- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . --------------------- Durch laufende Prozesse gestartete DLLs --------------------- - - - - - - - > 'winlogon.exe'(1064) c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll . Zeit der Fertigstellung: 2010-10-25 21:06:33 ComboFix-quarantined-files.txt 2010-10-25 19:06 Vor Suchlauf: 17 Verzeichnis(se), 140.209.500.160 Bytes frei Nach Suchlauf: 22 Verzeichnis(se), 139.888.488.448 Bytes frei - - End Of File - - 2A529D9AA84D371050B523F0A9A3D2FB |
![]() |
Themen zu Nach Trojaner-Angriff lahmer Systemstart, häufige Abstürze. |
32 bit, avp.exe, bho, bonjour, components, conhost.exe, converter, corp./icp, desktop, error, firefox, firefox.exe, flash player, fontcache, google chrome, helper, home, home premium, iexplore, install.exe, installation, internet security 2011, kaspersky, kis, langsam, launch, location, malware, mozilla, mozilla thunderbird, mp3, nvlddmkm.sys, nvstor.sys, oldtimer, otl.exe, plug-in, popup, programdata, realtek, registry, rogue.antimalwaredoctor, saver, scan, searchplugins, security, server, shell32.dll, software, sptd.sys, start menu, studio, taskhost.exe, tastatur, vlc media player, webcheck, winpcap packet driver |