Hallo T-B.de Community,

Und zwar habe ich eine Meldung von NOD32, das sich der Olmarik.ajl im Mbr
befindet.
Meldung von NOD32: Master Boot Record (MBR) des physischen Datenträgers 0. - Win32/Olmarik.AJL Trojaner

Ich habe schon CClean,Tuneup,Malewarebytes und MbrCheck Laufen lassen und habe die Logs im Anhang angehängt.

Hatte auch schon versucht einen neuen Mbr zu schreiben-> bringt nichts..

Das System neu aufsetzen möchte ich nicht, da ich es erst vor ca.3 wochen neu aufgespielt hatte.
Das System läuft ansich Stabil und es ist auch so nicht zumerken.

Ich Bitte um Hilfe und bedanke mich recht Herzlich im vorraus

Mfg vcore

Gibt es noch weitere Logs von Malwarebytes? Wenn ja bitte alle posten, die in Malwarebytes im Reiter Logdateien sichtbar sind.

Also Hab nur den hier:

Malwarebytes' Anti-Malware 1.50.1.1100
Malwarebytes

Datenbank Version: 6318

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

10.04.2011 02:24:32
mbam-log-2011-04-10 (02-24-32).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 279505
Laufzeit: 13 Minute(n), 23 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Was kann ich nun noch machen?

danke für die antwort

Mfg vcore

Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

:OTL
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.07.14 03:26:40 | 000,000,122 | R--- | M] () - D:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2010.03.12 20:47:49 | 000,000,071 | R--- | M] () - G:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{5144a27b-5c26-11e0-b263-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{5144a27b-5c26-11e0-b263-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe -- [2009.07.14 03:26:40 | 000,106,760 | R--- | M] (Microsoft Corporation)
O33 - MountPoints2\{6b22e035-5bec-11e0-b423-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{6b22e035-5bec-11e0-b423-806e6f6e6963}\Shell\AutoRun\command - "" = D:\.\Bin\Assetup.exe
O33 - MountPoints2\{acc9a8b9-5cd6-11e0-905f-20cf30e333c0}\Shell - "" = AutoRun
O33 - MountPoints2\{acc9a8b9-5cd6-11e0-905f-20cf30e333c0}\Shell\AutoRun\command - "" = G:\Razor1911_Installer.exe -- [2010.03.11 19:28:46 | 000,338,432 | R--- | M] (Razor 1911)
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\Razor1911_Installer.exe -- [2010.03.11 19:28:46 | 000,338,432 | R--- | M] (Razor 1911)
[2011.04.09 10:37:27 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{F9E2DD3A-EFFB-4287-AA5B-2B4CA5E7853E}
[2011.04.07 19:43:13 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{A49191BA-E61C-4317-94D1-77EB53F17BB7}
[2011.04.06 22:22:37 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{997540EC-A3A7-4C9A-8086-60E21D64098A}
[2011.04.05 19:19:01 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{AF287C4D-EAB9-40F8-821C-082186F76FD3}
[2011.04.04 21:05:52 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{5C2E41A5-9C3F-4FD9-BFB3-543199B93995}
[2011.04.04 21:02:21 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\4E880BE7B591750A4C2FC1D77452B16F
[2011.04.04 20:51:27 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\5014
[2011.04.04 20:51:17 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\xmldm
[2011.04.04 20:51:15 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Roaming\kock
[2011.04.04 18:22:42 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{3DC520A1-D904-44E0-9D6A-D8BA5A31693E}
[2011.04.04 18:22:42 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{01B04D41-B0AB-4ADD-BA70-387A9D91D851}
[2011.04.03 20:50:45 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{8BD7BCA2-928E-45D6-9136-40532F87A405}
[2011.04.01 20:58:05 | 000,000,000 | ---D | C] -- C:\Users\Alex\AppData\Local\{FC2DAD95-B198-461B-B4C9-B1B319C1D85F}
[2011.04.09 22:08:03 | 000,000,177 | -H-- | M] () -- C:\dvmexp.idx
[2011.04.09 11:01:31 | 000,000,000 | ---- | M] () -- C:\Users\Alex\AppData\Local\Bgejobabuyut.bin
[2011.04.08 18:12:35 | 000,000,120 | ---- | M] () -- C:\Users\Alex\AppData\Local\Uvukuyasezaxijoy.dat
:Commands
[purity]
[resethosts]
[emptytemp]
         

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

So hier das Log:

All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
File D:\autorun.inf not found.
File move failed. G:\autorun.inf scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5144a27b-5c26-11e0-b263-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5144a27b-5c26-11e0-b263-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5144a27b-5c26-11e0-b263-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5144a27b-5c26-11e0-b263-806e6f6e6963}\ not found.
File D:\setup.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6b22e035-5bec-11e0-b423-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6b22e035-5bec-11e0-b423-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{6b22e035-5bec-11e0-b423-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6b22e035-5bec-11e0-b423-806e6f6e6963}\ not found.
File D:\.\Bin\Assetup.exe not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{acc9a8b9-5cd6-11e0-905f-20cf30e333c0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{acc9a8b9-5cd6-11e0-905f-20cf30e333c0}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{acc9a8b9-5cd6-11e0-905f-20cf30e333c0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{acc9a8b9-5cd6-11e0-905f-20cf30e333c0}\ not found.
File move failed. G:\Razor1911_Installer.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G\ deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\G\ not found.
File move failed. G:\Razor1911_Installer.exe scheduled to be moved on reboot.
C:\Users\Alex\AppData\Local\{F9E2DD3A-EFFB-4287-AA5B-2B4CA5E7853E} folder moved successfully.
C:\Users\Alex\AppData\Local\{A49191BA-E61C-4317-94D1-77EB53F17BB7} folder moved successfully.
C:\Users\Alex\AppData\Local\{997540EC-A3A7-4C9A-8086-60E21D64098A} folder moved successfully.
C:\Users\Alex\AppData\Local\{AF287C4D-EAB9-40F8-821C-082186F76FD3} folder moved successfully.
C:\Users\Alex\AppData\Local\{5C2E41A5-9C3F-4FD9-BFB3-543199B93995}\chrome\content folder moved successfully.
C:\Users\Alex\AppData\Local\{5C2E41A5-9C3F-4FD9-BFB3-543199B93995}\chrome folder moved successfully.
C:\Users\Alex\AppData\Local\{5C2E41A5-9C3F-4FD9-BFB3-543199B93995} folder moved successfully.
C:\Users\Alex\AppData\Roaming\4E880BE7B591750A4C2FC1D77452B16F folder moved successfully.
C:\Users\Alex\AppData\Roaming\5014\components folder moved successfully.
C:\Users\Alex\AppData\Roaming\5014 folder moved successfully.
C:\Users\Alex\AppData\Roaming\xmldm folder moved successfully.
C:\Users\Alex\AppData\Roaming\kock folder moved successfully.
C:\Users\Alex\AppData\Local\{3DC520A1-D904-44E0-9D6A-D8BA5A31693E} folder moved successfully.
C:\Users\Alex\AppData\Local\{01B04D41-B0AB-4ADD-BA70-387A9D91D851} folder moved successfully.
C:\Users\Alex\AppData\Local\{8BD7BCA2-928E-45D6-9136-40532F87A405} folder moved successfully.
C:\Users\Alex\AppData\Local\{FC2DAD95-B198-461B-B4C9-B1B319C1D85F} folder moved successfully.
C:\dvmexp.idx moved successfully.
C:\Users\Alex\AppData\Local\Bgejobabuyut.bin moved successfully.
C:\Users\Alex\AppData\Local\Uvukuyasezaxijoy.dat moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Alex
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 8131492 bytes
->Flash cache emptied: 491 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 0 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 8,00 mb


OTL by OldTimer - Version 3.2.22.3 log created on 04102011_094834

Files\Folders moved on Reboot...
File\Folder G:\autorun.inf not found!
File\Folder G:\Razor1911_Installer.exe not found!
C:\Users\Alex\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...



Danke

Mfg vcore

Bitte nun dieses Tool von Kaspersky ausführen und das Log posten => http://www.trojaner-board.de/82358-t...entfernen.html

Ich Habe noch ein log von MbrCheck angehängt könnte evtl. nützlich sein.

2011/04/10 20:44:14.0094 2236 TDSS rootkit removing tool 2.4.21.0 Mar 10 2011 12:26:28
2011/04/10 20:44:14.0562 2236 ================================================================================
2011/04/10 20:44:14.0562 2236 SystemInfo:
2011/04/10 20:44:14.0562 2236
2011/04/10 20:44:14.0562 2236 OS Version: 6.1.7601 ServicePack: 1.0
2011/04/10 20:44:14.0562 2236 Product type: Workstation
2011/04/10 20:44:14.0562 2236 ComputerName: ALEX-PC
2011/04/10 20:44:14.0562 2236 UserName: Alex
2011/04/10 20:44:14.0562 2236 Windows directory: C:\Windows
2011/04/10 20:44:14.0562 2236 System windows directory: C:\Windows
2011/04/10 20:44:14.0562 2236 Running under WOW64
2011/04/10 20:44:14.0562 2236 Processor architecture: Intel x64
2011/04/10 20:44:14.0562 2236 Number of processors: 8
2011/04/10 20:44:14.0562 2236 Page size: 0x1000
2011/04/10 20:44:14.0562 2236 Boot type: Normal boot
2011/04/10 20:44:14.0562 2236 ================================================================================
2011/04/10 20:44:14.0781 2236 Initialize success
2011/04/10 20:44:55.0623 1724 ================================================================================
2011/04/10 20:44:55.0623 1724 Scan started
2011/04/10 20:44:55.0623 1724 Mode: Manual;
2011/04/10 20:44:55.0623 1724 ================================================================================
2011/04/10 20:44:56.0543 1724 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
2011/04/10 20:44:56.0574 1724 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
2011/04/10 20:44:56.0621 1724 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
2011/04/10 20:44:56.0637 1724 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
2011/04/10 20:44:56.0668 1724 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
2011/04/10 20:44:56.0684 1724 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
2011/04/10 20:44:56.0730 1724 AFD (d31dc7a16dea4a9baf179f3d6fbdb38c) C:\Windows\system32\drivers\afd.sys
2011/04/10 20:44:56.0762 1724 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
2011/04/10 20:44:56.0777 1724 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
2011/04/10 20:44:56.0793 1724 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
2011/04/10 20:44:56.0808 1724 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
2011/04/10 20:44:56.0824 1724 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
2011/04/10 20:44:56.0840 1724 amdsata (6ec6d772eae38dc17c14aed9b178d24b) C:\Windows\system32\drivers\amdsata.sys
2011/04/10 20:44:56.0855 1724 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
2011/04/10 20:44:56.0871 1724 amdxata (1142a21db581a84ea5597b03a26ebaa0) C:\Windows\system32\drivers\amdxata.sys
2011/04/10 20:44:56.0902 1724 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
2011/04/10 20:44:56.0933 1724 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
2011/04/10 20:44:56.0949 1724 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
2011/04/10 20:44:56.0996 1724 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
2011/04/10 20:44:57.0011 1724 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
2011/04/10 20:44:57.0042 1724 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
2011/04/10 20:44:57.0074 1724 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
2011/04/10 20:44:57.0089 1724 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
2011/04/10 20:44:57.0120 1724 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
2011/04/10 20:44:57.0136 1724 bowser (91ce0d3dc57dd377e690a2d324022b08) C:\Windows\system32\DRIVERS\bowser.sys
2011/04/10 20:44:57.0152 1724 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
2011/04/10 20:44:57.0152 1724 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
2011/04/10 20:44:57.0183 1724 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
2011/04/10 20:44:57.0198 1724 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
2011/04/10 20:44:57.0198 1724 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
2011/04/10 20:44:57.0214 1724 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
2011/04/10 20:44:57.0245 1724 BthEnum (cf98190a94f62e405c8cb255018b2315) C:\Windows\system32\DRIVERS\BthEnum.sys
2011/04/10 20:44:57.0261 1724 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
2011/04/10 20:44:57.0292 1724 BthPan (02dd601b708dd0667e1331fa8518e9ff) C:\Windows\system32\DRIVERS\bthpan.sys
2011/04/10 20:44:57.0339 1724 BTHPORT (0d25b6d300ba26a5f2c3b2a8e96b158b) C:\Windows\system32\Drivers\BTHport.sys
2011/04/10 20:44:57.0354 1724 BTHUSB (1f9912f8ec5bfa53432e71e150636a8a) C:\Windows\system32\Drivers\BTHUSB.sys
2011/04/10 20:44:57.0370 1724 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
2011/04/10 20:44:57.0401 1724 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
2011/04/10 20:44:57.0417 1724 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
2011/04/10 20:44:57.0448 1724 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
2011/04/10 20:44:57.0464 1724 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
2011/04/10 20:44:57.0479 1724 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
2011/04/10 20:44:57.0510 1724 CNG (d5fea92400f12412b3922087c09da6a5) C:\Windows\system32\Drivers\cng.sys
2011/04/10 20:44:57.0526 1724 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
2011/04/10 20:44:57.0557 1724 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
2011/04/10 20:44:57.0620 1724 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
2011/04/10 20:44:57.0651 1724 CSC (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys
2011/04/10 20:44:57.0682 1724 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
2011/04/10 20:44:57.0713 1724 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
2011/04/10 20:44:57.0729 1724 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
2011/04/10 20:44:57.0776 1724 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
2011/04/10 20:44:57.0807 1724 dtsoftbus01 (fb9bef3401ee5ecc2603311b9c64f44a) C:\Windows\system32\DRIVERS\dtsoftbus01.sys
2011/04/10 20:44:57.0838 1724 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
2011/04/10 20:44:57.0885 1724 eamonm (aca3fe4f18a945b7bf2618a79f6f670b) C:\Windows\system32\DRIVERS\eamonm.sys
2011/04/10 20:44:57.0947 1724 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
2011/04/10 20:44:58.0010 1724 ehdrv (6672438bdcbfd87250d22112d458294d) C:\Windows\system32\DRIVERS\ehdrv.sys
2011/04/10 20:44:58.0041 1724 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
2011/04/10 20:44:58.0072 1724 epfwwfpr (954fade8e59f159b0a71d0cfcc99a76e) C:\Windows\system32\DRIVERS\epfwwfpr.sys
2011/04/10 20:44:58.0103 1724 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
2011/04/10 20:44:58.0119 1724 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
2011/04/10 20:44:58.0134 1724 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
2011/04/10 20:44:58.0150 1724 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
2011/04/10 20:44:58.0166 1724 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
2011/04/10 20:44:58.0181 1724 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
2011/04/10 20:44:58.0197 1724 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
2011/04/10 20:44:58.0228 1724 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
2011/04/10 20:44:58.0244 1724 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
2011/04/10 20:44:58.0259 1724 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
2011/04/10 20:44:58.0275 1724 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
2011/04/10 20:44:58.0290 1724 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
2011/04/10 20:44:58.0306 1724 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
2011/04/10 20:44:58.0353 1724 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys
2011/04/10 20:44:58.0384 1724 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
2011/04/10 20:44:58.0400 1724 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
2011/04/10 20:44:58.0415 1724 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
2011/04/10 20:44:58.0431 1724 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
2011/04/10 20:44:58.0462 1724 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys
2011/04/10 20:44:58.0493 1724 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
2011/04/10 20:44:58.0540 1724 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
2011/04/10 20:44:58.0556 1724 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
2011/04/10 20:44:58.0587 1724 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
2011/04/10 20:44:58.0618 1724 iaStorV (3df4395a7cf8b7a72a5f4606366b8c2d) C:\Windows\system32\drivers\iaStorV.sys
2011/04/10 20:44:58.0649 1724 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
2011/04/10 20:44:58.0712 1724 IntcAzAudAddService (d42d651676883181400e22957a7e0b1e) C:\Windows\system32\drivers\RTKVHD64.sys
2011/04/10 20:44:58.0743 1724 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
2011/04/10 20:44:58.0758 1724 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
2011/04/10 20:44:58.0774 1724 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2011/04/10 20:44:58.0790 1724 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
2011/04/10 20:44:58.0821 1724 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
2011/04/10 20:44:58.0836 1724 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
2011/04/10 20:44:58.0852 1724 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
2011/04/10 20:44:58.0868 1724 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
2011/04/10 20:44:58.0899 1724 JRAID (aef3a925cac519cc6a9a48e9bdca1ae3) C:\Windows\system32\DRIVERS\jraid.sys
2011/04/10 20:44:58.0930 1724 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
2011/04/10 20:44:58.0946 1724 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
2011/04/10 20:44:58.0977 1724 KSecDD (ccd53b5bd33ce0c889e830d839c8b66e) C:\Windows\system32\Drivers\ksecdd.sys
2011/04/10 20:44:58.0992 1724 KSecPkg (9ff918a261752c12639e8ad4208d2c2f) C:\Windows\system32\Drivers\ksecpkg.sys
2011/04/10 20:44:59.0008 1724 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
2011/04/10 20:44:59.0055 1724 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
2011/04/10 20:44:59.0086 1724 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
2011/04/10 20:44:59.0102 1724 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
2011/04/10 20:44:59.0117 1724 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
2011/04/10 20:44:59.0133 1724 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
2011/04/10 20:44:59.0148 1724 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
2011/04/10 20:44:59.0164 1724 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
2011/04/10 20:44:59.0180 1724 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
2011/04/10 20:44:59.0195 1724 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
2011/04/10 20:44:59.0211 1724 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
2011/04/10 20:44:59.0226 1724 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys
2011/04/10 20:44:59.0258 1724 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
2011/04/10 20:44:59.0273 1724 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
2011/04/10 20:44:59.0289 1724 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
2011/04/10 20:44:59.0304 1724 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
2011/04/10 20:44:59.0320 1724 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
2011/04/10 20:44:59.0336 1724 mrxsmb (faf015b07e3a2874a790a39b7d2c579f) C:\Windows\system32\DRIVERS\mrxsmb.sys
2011/04/10 20:44:59.0367 1724 mrxsmb10 (08e2345df129082bcdffdc1440f9c00d) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2011/04/10 20:44:59.0382 1724 mrxsmb20 (108d87409c5812ef47d81e22843e8c9d) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2011/04/10 20:44:59.0398 1724 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
2011/04/10 20:44:59.0414 1724 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
2011/04/10 20:44:59.0460 1724 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
2011/04/10 20:44:59.0554 1724 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
2011/04/10 20:44:59.0632 1724 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
2011/04/10 20:44:59.0710 1724 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
2011/04/10 20:44:59.0788 1724 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
2011/04/10 20:44:59.0882 1724 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
2011/04/10 20:44:59.0928 1724 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
2011/04/10 20:44:59.0960 1724 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
2011/04/10 20:44:59.0991 1724 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
2011/04/10 20:45:00.0069 1724 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
2011/04/10 20:45:00.0194 1724 MTsensor (19b006b181e3875fd254f7b67acf1e7c) C:\Windows\system32\DRIVERS\ASACPI.sys
2011/04/10 20:45:00.0225 1724 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
2011/04/10 20:45:00.0256 1724 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
2011/04/10 20:45:00.0303 1724 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
2011/04/10 20:45:00.0443 1724 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
2011/04/10 20:45:00.0506 1724 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
2011/04/10 20:45:00.0537 1724 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
2011/04/10 20:45:00.0568 1724 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
2011/04/10 20:45:00.0646 1724 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
2011/04/10 20:45:01.0067 1724 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
2011/04/10 20:45:01.0161 1724 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
2011/04/10 20:45:01.0270 1724 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
2011/04/10 20:45:01.0317 1724 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
2011/04/10 20:45:01.0395 1724 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
2011/04/10 20:45:01.0660 1724 Ntfs (05d78aa5cb5f3f5c31160bdb955d0b7c) C:\Windows\system32\drivers\Ntfs.sys
2011/04/10 20:45:01.0707 1724 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
2011/04/10 20:45:01.0785 1724 NVHDA (857fb74754ebff94ee3ad40788740916) C:\Windows\system32\drivers\nvhda64v.sys
2011/04/10 20:45:02.0565 1724 nvlddmkm (ac8cbe9a0663e88f6429ee5530d5e32b) C:\Windows\system32\DRIVERS\nvlddmkm.sys
2011/04/10 20:45:02.0674 1724 nvraid (5d9fd91f3d38dc9da01e3cb5fa89cd48) C:\Windows\system32\drivers\nvraid.sys
2011/04/10 20:45:02.0752 1724 nvstor (f7cd50fe7139f07e77da8ac8033d1832) C:\Windows\system32\drivers\nvstor.sys
2011/04/10 20:45:02.0846 1724 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
2011/04/10 20:45:02.0877 1724 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
2011/04/10 20:45:02.0939 1724 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
2011/04/10 20:45:02.0986 1724 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
2011/04/10 20:45:03.0142 1724 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
2011/04/10 20:45:03.0204 1724 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
2011/04/10 20:45:03.0251 1724 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
2011/04/10 20:45:03.0298 1724 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
2011/04/10 20:45:03.0345 1724 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
2011/04/10 20:45:03.0563 1724 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
2011/04/10 20:45:03.0626 1724 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
2011/04/10 20:45:03.0750 1724 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
2011/04/10 20:45:03.0797 1724 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
2011/04/10 20:45:03.0813 1724 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
2011/04/10 20:45:03.0828 1724 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
2011/04/10 20:45:03.0844 1724 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
2011/04/10 20:45:03.0891 1724 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
2011/04/10 20:45:03.0938 1724 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
2011/04/10 20:45:03.0953 1724 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
2011/04/10 20:45:03.0969 1724 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
2011/04/10 20:45:04.0016 1724 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
2011/04/10 20:45:04.0031 1724 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
2011/04/10 20:45:04.0047 1724 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
2011/04/10 20:45:04.0094 1724 RDPDR (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys
2011/04/10 20:45:04.0125 1724 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
2011/04/10 20:45:04.0140 1724 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
2011/04/10 20:45:04.0172 1724 RdpVideoMiniport (70cba1a0c98600a2aa1863479b35cb90) C:\Windows\system32\drivers\rdpvideominiport.sys
2011/04/10 20:45:04.0203 1724 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
2011/04/10 20:45:04.0218 1724 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
2011/04/10 20:45:04.0265 1724 RFCOMM (3dd798846e2c28102b922c56e71b7932) C:\Windows\system32\DRIVERS\rfcomm.sys
2011/04/10 20:45:04.0281 1724 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
2011/04/10 20:45:04.0328 1724 RTCore64 (3ecd3ca61ffc54b0d93f8b19161b83da) C:\Program Files (x86)\MSI Afterburner\RTCore64.sys
2011/04/10 20:45:04.0390 1724 RTL8167 (4fe1cef69d36e913738234303986fbb3) C:\Windows\system32\DRIVERS\Rt64win7.sys
2011/04/10 20:45:04.0421 1724 s3cap (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys
2011/04/10 20:45:04.0437 1724 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
2011/04/10 20:45:04.0468 1724 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
2011/04/10 20:45:04.0499 1724 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
2011/04/10 20:45:04.0530 1724 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
2011/04/10 20:45:04.0562 1724 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
2011/04/10 20:45:04.0593 1724 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
2011/04/10 20:45:04.0624 1724 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
2011/04/10 20:45:04.0640 1724 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
2011/04/10 20:45:04.0655 1724 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
2011/04/10 20:45:04.0671 1724 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
2011/04/10 20:45:04.0718 1724 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
2011/04/10 20:45:04.0733 1724 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
2011/04/10 20:45:04.0749 1724 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
2011/04/10 20:45:04.0780 1724 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
2011/04/10 20:45:04.0811 1724 srv (2098b8556d1cec2aca9a29cd479e3692) C:\Windows\system32\DRIVERS\srv.sys
2011/04/10 20:45:04.0827 1724 srv2 (d0f73a42040f21f92fd314b42ac5c9e7) C:\Windows\system32\DRIVERS\srv2.sys
2011/04/10 20:45:04.0858 1724 srvnet (2ba8f3250828ccdb4204ecf2c6f40b6a) C:\Windows\system32\DRIVERS\srvnet.sys
2011/04/10 20:45:04.0874 1724 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
2011/04/10 20:45:04.0905 1724 storflt (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys
2011/04/10 20:45:04.0920 1724 storvsc (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys
2011/04/10 20:45:04.0952 1724 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
2011/04/10 20:45:05.0045 1724 Tcpip (509383e505c973ed7534a06b3d19688d) C:\Windows\system32\drivers\tcpip.sys
2011/04/10 20:45:05.0123 1724 TCPIP6 (509383e505c973ed7534a06b3d19688d) C:\Windows\system32\DRIVERS\tcpip.sys
2011/04/10 20:45:05.0154 1724 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
2011/04/10 20:45:05.0186 1724 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
2011/04/10 20:45:05.0186 1724 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
2011/04/10 20:45:05.0217 1724 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
2011/04/10 20:45:05.0232 1724 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
2011/04/10 20:45:05.0279 1724 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
2011/04/10 20:45:05.0295 1724 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
2011/04/10 20:45:05.0373 1724 TuneUpUtilitiesDrv (dcc94c51d27c7ec0dadeca8f64c94fcf) C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys
2011/04/10 20:45:05.0404 1724 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
2011/04/10 20:45:05.0404 1724 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
2011/04/10 20:45:05.0435 1724 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
2011/04/10 20:45:05.0466 1724 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
2011/04/10 20:45:05.0513 1724 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
2011/04/10 20:45:05.0529 1724 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
2011/04/10 20:45:05.0560 1724 usbccgp (481dff26b4dca8f4cbac1f7dce1d6829) C:\Windows\system32\drivers\usbccgp.sys
2011/04/10 20:45:05.0576 1724 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
2011/04/10 20:45:05.0591 1724 usbehci (74ee782b1d9c241efe425565854c661c) C:\Windows\system32\drivers\usbehci.sys
2011/04/10 20:45:05.0607 1724 usbhub (dc96bd9ccb8403251bcf25047573558e) C:\Windows\system32\drivers\usbhub.sys
2011/04/10 20:45:05.0638 1724 usbohci (58e546bbaf87664fc57e0f6081e4f609) C:\Windows\system32\DRIVERS\usbohci.sys
2011/04/10 20:45:05.0654 1724 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
2011/04/10 20:45:05.0669 1724 USBSTOR (d76510cfa0fc09023077f22c2f979d86) C:\Windows\system32\drivers\USBSTOR.SYS
2011/04/10 20:45:05.0732 1724 usbuhci (81fb2216d3a60d1284455d511797db3d) C:\Windows\system32\drivers\usbuhci.sys
2011/04/10 20:45:05.0763 1724 uxpatch (297ee9c666fc8bb96a232db0ddba1e49) C:\Windows\system32\drivers\uxpatch.sys
2011/04/10 20:45:05.0794 1724 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
2011/04/10 20:45:05.0810 1724 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
2011/04/10 20:45:05.0825 1724 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
2011/04/10 20:45:05.0856 1724 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
2011/04/10 20:45:05.0888 1724 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
2011/04/10 20:45:05.0903 1724 vmbus (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys
2011/04/10 20:45:05.0919 1724 VMBusHID (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys
2011/04/10 20:45:05.0934 1724 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
2011/04/10 20:45:05.0950 1724 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
2011/04/10 20:45:05.0966 1724 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
2011/04/10 20:45:05.0997 1724 vpcbus (b4a73ca4ef9a02b9738cea9ad5fe5917) C:\Windows\system32\DRIVERS\vpchbus.sys
2011/04/10 20:45:06.0028 1724 vpcnfltr (e675fb2b48c54f09895482e2253b289c) C:\Windows\system32\DRIVERS\vpcnfltr.sys
2011/04/10 20:45:06.0059 1724 vpcusb (5fb42082b0d19a0268705f1dd343df20) C:\Windows\system32\DRIVERS\vpcusb.sys
2011/04/10 20:45:06.0090 1724 vpcvmm (207b6539799cc1c112661a9b620dd233) C:\Windows\system32\drivers\vpcvmm.sys
2011/04/10 20:45:06.0122 1724 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
2011/04/10 20:45:06.0137 1724 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys
2011/04/10 20:45:06.0153 1724 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
2011/04/10 20:45:06.0168 1724 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
2011/04/10 20:45:06.0184 1724 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
2011/04/10 20:45:06.0200 1724 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
2011/04/10 20:45:06.0215 1724 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
2011/04/10 20:45:06.0262 1724 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
2011/04/10 20:45:06.0293 1724 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
2011/04/10 20:45:06.0340 1724 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
2011/04/10 20:45:06.0371 1724 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
2011/04/10 20:45:06.0418 1724 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
2011/04/10 20:45:06.0434 1724 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
2011/04/10 20:45:06.0480 1724 ================================================================================
2011/04/10 20:45:06.0480 1724 Scan finished
2011/04/10 20:45:06.0480 1724 ================================================================================

Dann bitte jetzt CF ausführen:

ComboFix

Ein Leitfaden und Tutorium zur Nutzung von ComboFix

• Lade dir ComboFix hier herunter auf deinen Desktop. Benenne es beim Runterladen um in cofi.exe.

• Dann folgende Anleitung durchlesen und abarbeiten -> CCleaner Systembereinigung

• Schliesse alle Programme, vor allem dein Antivirenprogramm und andere Hintergrundwächter sowie deinen Internetbrowser.

• Starte cofi.exe von deinem Desktop aus, bestätige die Warnmeldungen, führe die Updates durch (falls vorgeschlagen), installiere die Wiederherstellungskonsole (falls vorgeschlagen) und lass dein System durchsuchen.
  Vermeide es auch während Combofix läuft die Maus und Tastatur zu benutzen.

• Im Anschluss öffnet sich automatisch eine combofix.txt, diesen Inhalt bitte kopieren ([Strg]a, [Strg]c) und in deinen Beitrag einfügen ([Strg]v). Die Datei findest du außerdem unter: C:\ComboFix.txt.

Wichtiger Hinweis:

Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Da wäre es. =)

Combofix Logfile:

ComboFix 11-04-10.01 - Alex 10.04.2011  21:13:27.1.8 - x64
Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.8183.6667 [GMT 2:00]
ausgeführt von:: c:\users\Alex\Downloads\cofi.exe.exe
AV: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
SP: ESET NOD32 Antivirus 4.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\ESET\MiNODLogin
c:\program files (x86)\ESET\MiNODLogin\MiNODLogin.jar
c:\program files (x86)\ESET\MiNODLogin\MiNODLoginLib.dll
c:\program files (x86)\ESET\MiNODLogin\servidores.xml
c:\users\Alex\AppData\Roaming\AcroIEHelpe.dll
c:\users\Alex\AppData\Roaming\Adobe\plugs
c:\users\Alex\AppData\Roaming\Adobe\shed
.
.
(((((((((((((((((((((((   Dateien erstellt von 2011-03-10 bis 2011-04-10  ))))))))))))))))))))))))))))))
.
.
2011-04-10 19:16 . 2011-04-10 19:16	--------	d-----w-	c:\users\Default\AppData\Local\temp
2011-04-09 21:56 . 2011-04-09 21:56	--------	d-----w-	c:\program files (x86)\ERUNT
2011-04-09 20:08 . 2011-04-09 20:08	--------	d-----w-	c:\program files\CCleaner
2011-04-09 13:10 . 2011-04-09 13:10	--------	d-----w-	c:\windows\SysWow64\wbem\en-US
2011-04-09 13:10 . 2011-04-09 13:10	--------	d-----w-	c:\windows\system32\wbem\en-US
2011-04-09 12:47 . 2011-04-09 12:46	521448	----a-w-	c:\windows\system32\deployJava1.dll
2011-04-09 12:46 . 2011-04-09 12:46	--------	d-----w-	c:\program files\Java
2011-04-09 12:36 . 2011-04-09 12:36	--------	d-----w-	c:\windows\system32\appmgmt
2011-04-09 11:38 . 2011-04-09 11:38	--------	d-----w-	c:\programdata\Malwarebytes
2011-04-09 11:38 . 2010-12-20 16:09	38224	----a-w-	c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-04-09 11:38 . 2011-04-09 11:38	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2011-04-09 11:38 . 2010-12-20 16:08	24152	----a-w-	c:\windows\system32\drivers\mbam.sys
2011-04-09 09:46 . 2011-04-09 09:46	--------	d-----w-	c:\program files\ESET
2011-04-09 09:22 . 2011-03-16 12:15	34624	----a-w-	c:\windows\system32\TURegOpt.exe
2011-04-09 09:22 . 2011-03-16 12:10	25920	----a-w-	c:\windows\system32\authuitu.dll
2011-04-09 09:22 . 2011-03-16 12:10	21312	----a-w-	c:\windows\SysWow64\authuitu.dll
2011-04-09 09:22 . 2011-03-16 12:10	36160	----a-w-	c:\windows\system32\uxtuneup.dll
2011-04-09 09:22 . 2011-03-16 12:10	29504	----a-w-	c:\windows\SysWow64\uxtuneup.dll
2011-04-09 09:22 . 2011-04-09 09:32	--------	d-----w-	c:\program files (x86)\TuneUp Utilities 2011
2011-04-09 09:22 . 2011-04-09 09:22	--------	d-sh--w-	c:\programdata\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-04-08 16:16 . 2011-03-23 08:11	8424784	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{8D0D1E83-A2AA-485B-AAD9-87885E1E2A6D}\mpengine.dll
2011-04-06 18:59 . 2011-04-06 19:06	--------	d-----w-	c:\program files (x86)\METRO 2033
2011-04-06 18:53 . 2011-04-06 18:53	--------	d-----w-	c:\program files\7-Zip
2011-04-04 19:19 . 2011-04-10 19:16	--------	d-----w-	c:\program files (x86)\ESET
2011-04-04 18:51 . 2011-04-04 18:51	--------	d-----w-	c:\windows\Sun
2011-04-03 22:07 . 2011-04-03 22:07	--------	d-----w-	c:\program files (x86)\NVIDIA Corporation
2011-04-03 22:06 . 2011-02-23 06:28	1614440	----a-w-	c:\windows\system32\nvdispco642090.dll
2011-04-03 22:06 . 2011-02-23 06:28	1359976	----a-w-	c:\windows\system32\nvgenco642040.dll
2011-04-03 22:06 . 2010-12-02 09:12	1359976	----a-w-	c:\windows\system32\nvgenco64hda.dll
2011-04-03 22:06 . 2010-11-11 23:10	29288	----a-w-	c:\windows\system32\nvhdap64.dll
2011-04-03 22:06 . 2010-11-11 23:10	155752	----a-w-	c:\windows\system32\drivers\nvhda64v.sys
2011-04-03 22:04 . 2011-04-03 22:04	--------	d-----w-	C:\NVIDIA
2011-04-03 19:18 . 2011-04-03 19:18	--------	d-----w-	c:\program files (x86)\Common Files\DivX Shared
2011-04-03 17:38 . 2011-04-03 18:46	--------	d-----w-	c:\programdata\Norton
2011-04-03 17:38 . 2011-04-03 17:38	--------	d-----w-	c:\programdata\Symantec
2011-04-03 14:36 . 2011-04-03 14:36	--------	d-----w-	c:\program files (x86)\Common Files\PX Storage Engine
2011-04-03 14:36 . 2011-04-03 19:17	--------	d-----w-	c:\program files\DivX
2011-04-03 14:35 . 2011-04-03 18:40	--------	d-----w-	c:\program files (x86)\Google
2011-04-03 14:35 . 2011-04-03 19:18	--------	d-----w-	c:\program files (x86)\DivX
2011-04-03 14:34 . 2011-04-03 19:18	--------	d-----w-	c:\programdata\DivX
2011-04-03 11:56 . 2011-04-03 11:56	--------	d-----w-	c:\program files (x86)\Geeks3D
2011-04-03 09:37 . 2011-04-03 09:37	--------	d-----w-	c:\windows\system32\SPReview
2011-04-03 09:36 . 2011-04-03 09:36	--------	d-----w-	c:\windows\system32\EventProviders
2011-04-03 09:31 . 2010-11-20 13:24	653312	----a-w-	c:\windows\system32\lpksetup.exe
2011-04-03 09:30 . 2010-11-20 12:21	189952	----a-w-	c:\windows\SysWow64\wdscore.dll
2011-04-03 09:30 . 2010-11-20 12:17	209920	----a-w-	c:\windows\SysWow64\PkgMgr.exe
2011-04-03 09:30 . 2010-11-20 12:18	323072	----a-w-	c:\windows\SysWow64\drvstore.dll
2011-04-03 09:30 . 2010-11-20 12:18	257024	----a-w-	c:\windows\SysWow64\dpx.dll
2011-04-03 09:30 . 2010-11-20 12:21	363008	----a-w-	c:\windows\SysWow64\wbemcomn.dll
2011-04-03 09:30 . 2010-11-20 12:19	606208	----a-w-	c:\windows\SysWow64\wbem\fastprox.dll
2011-04-03 09:30 . 2010-11-20 13:27	524288	----a-w-	c:\windows\system32\wmicmiplugin.dll
2011-04-03 09:30 . 2010-11-20 13:27	529408	----a-w-	c:\windows\system32\wbemcomn.dll
2011-04-03 09:30 . 2010-11-20 13:27	1225216	----a-w-	c:\windows\system32\wbem\wbemcore.dll
2011-04-03 09:30 . 2010-11-20 13:27	933376	----a-w-	c:\windows\system32\SmiEngine.dll
2011-04-03 09:30 . 2010-11-20 13:25	199168	----a-w-	c:\windows\system32\PkgMgr.exe
2011-04-03 09:30 . 2010-11-20 13:26	422912	----a-w-	c:\windows\system32\drvstore.dll
2011-04-03 09:30 . 2010-11-20 13:26	399872	----a-w-	c:\windows\system32\dpx.dll
2011-04-03 09:15 . 2011-02-19 12:05	1139200	----a-w-	c:\windows\system32\FntCache.dll
2011-04-03 09:15 . 2011-01-17 11:09	197120	----a-w-	c:\windows\system32\d3d10_1.dll
2011-04-03 09:15 . 2011-01-17 05:47	161792	----a-w-	c:\windows\SysWow64\d3d10_1.dll
2011-04-03 09:15 . 2011-02-19 12:04	1544192	----a-w-	c:\windows\system32\DWrite.dll
2011-04-03 09:15 . 2011-02-19 12:04	902656	----a-w-	c:\windows\system32\d2d1.dll
2011-04-03 09:15 . 2011-02-19 06:30	1076736	----a-w-	c:\windows\SysWow64\DWrite.dll
2011-04-03 09:15 . 2011-02-19 06:30	739840	----a-w-	c:\windows\SysWow64\d2d1.dll
2011-04-03 00:35 . 2009-03-16 12:18	24920	----a-w-	c:\windows\system32\X3DAudio1_6.dll
2011-04-03 00:30 . 2011-04-03 11:41	--------	d-----w-	c:\program files\Call of Duty Black Ops
2011-04-03 00:21 . 2011-04-03 00:21	254528	----a-w-	c:\windows\system32\drivers\dtsoftbus01.sys
2011-04-03 00:21 . 2011-04-03 00:21	--------	d-----w-	c:\program files (x86)\DAEMON Tools Lite
2011-04-03 00:20 . 2011-04-03 00:20	--------	d-----w-	c:\programdata\DAEMON Tools Lite
2011-04-03 00:12 . 2011-04-09 09:23	--------	d-----w-	c:\programdata\TuneUp Software
2011-04-03 00:12 . 2011-04-03 00:12	--------	d-sh--w-	c:\programdata\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2011-04-02 03:15 . 2011-04-02 03:15	--------	d-----w-	c:\program files (x86)\Microsoft.NET
2011-04-01 21:49 . 2010-02-23 08:16	294912	----a-w-	c:\windows\system32\browserchoice.exe
2011-04-01 20:07 . 2010-12-17 11:40	715776	----a-w-	c:\windows\system32\kerberos.dll
2011-04-01 20:07 . 2010-12-17 07:07	542208	----a-w-	c:\windows\SysWow64\kerberos.dll
2011-04-01 20:06 . 2010-12-23 10:42	1118720	----a-w-	c:\windows\system32\sbe.dll
2011-04-01 20:06 . 2010-12-23 10:42	961024	----a-w-	c:\windows\system32\CPFilters.dll
2011-04-01 20:06 . 2010-12-23 10:42	723968	----a-w-	c:\windows\system32\EncDec.dll
2011-04-01 20:06 . 2010-12-23 10:36	259072	----a-w-	c:\windows\system32\mpg2splt.ax
2011-04-01 20:06 . 2010-12-23 05:54	850944	----a-w-	c:\windows\SysWow64\sbe.dll
2011-04-01 20:06 . 2010-12-23 05:54	642048	----a-w-	c:\windows\SysWow64\CPFilters.dll
2011-04-01 20:06 . 2010-12-23 05:54	534528	----a-w-	c:\windows\SysWow64\EncDec.dll
2011-04-01 20:06 . 2010-12-23 05:50	199680	----a-w-	c:\windows\SysWow64\mpg2splt.ax
2011-04-01 20:06 . 2011-01-05 06:56	3129344	----a-w-	c:\windows\system32\win32k.sys
2011-04-01 20:05 . 2011-01-07 12:17	475648	----a-w-	c:\windows\system32\XpsGdiConverter.dll
2011-04-01 20:05 . 2011-01-07 12:17	1465344	----a-w-	c:\windows\system32\XpsPrint.dll
2011-04-01 20:05 . 2011-01-07 07:46	870912	----a-w-	c:\windows\SysWow64\XpsPrint.dll
2011-04-01 20:05 . 2011-01-07 07:46	288256	----a-w-	c:\windows\SysWow64\XpsGdiConverter.dll
2011-04-01 20:05 . 2010-12-17 11:42	214016	----a-w-	c:\windows\system32\winsrv.dll
2011-04-01 20:04 . 2011-01-07 12:14	46080	----a-w-	c:\windows\system32\atmlib.dll
2011-04-01 20:04 . 2011-01-07 09:20	366592	----a-w-	c:\windows\system32\atmfd.dll
2011-04-01 20:04 . 2011-01-07 07:45	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2011-04-01 20:04 . 2011-01-07 05:43	294400	----a-w-	c:\windows\SysWow64\atmfd.dll
2011-04-01 20:04 . 2010-09-30 10:41	100864	----a-w-	c:\windows\system32\fontsub.dll
2011-04-01 20:04 . 2010-09-30 06:47	70656	----a-w-	c:\windows\SysWow64\fontsub.dll
2011-04-01 19:49 . 2011-04-01 19:49	53760	----a-w-	c:\windows\system32\msidle32.dll
2011-04-01 18:54 . 2011-04-01 18:55	--------	d-----w-	c:\program files (x86)\Windows Live
2011-04-01 18:54 . 2011-04-01 18:54	--------	d-----w-	c:\program files\Windows Live
2011-04-01 18:53 . 2011-04-01 18:53	--------	d-----w-	c:\windows\PCHEALTH
2011-04-01 18:52 . 2011-04-01 18:52	--------	d-----w-	c:\program files (x86)\Common Files\Windows Live
2011-04-01 18:52 . 2011-04-07 13:27	--------	d-----w-	c:\program files (x86)\JDownloader
2011-04-01 16:11 . 2011-04-01 16:11	--------	d-----w-	c:\program files (x86)\Futuremark
2011-04-01 16:07 . 2011-02-02 16:11	270720	------w-	c:\windows\system32\MpSigStub.exe
2011-04-01 16:02 . 2011-04-01 16:02	--------	d-----w-	c:\program files (x86)\EA GAMES
2011-04-01 16:01 . 2011-04-01 16:01	--------	d-----w-	c:\windows\SysWow64\Macromed
2011-04-01 15:50 . 2011-04-02 03:32	--------	d-----w-	c:\program files (x86)\MSI Afterburner
2011-04-01 15:49 . 2011-04-10 18:42	--------	d-----w-	c:\programdata\NVIDIA
2011-04-01 15:47 . 2011-04-03 22:07	--------	d-----w-	c:\programdata\NVIDIA Corporation
2011-04-01 15:46 . 2011-02-23 06:28	7732328	----a-w-	c:\windows\system32\nvwgf2umx.dll
2011-04-01 15:46 . 2011-02-23 06:28	2200680	----a-w-	c:\windows\system32\nvapi64.dll
2011-04-01 15:46 . 2011-04-03 22:07	--------	d-----w-	c:\program files\NVIDIA Corporation
2011-04-01 06:09 . 2011-04-01 06:15	--------	d-----w-	C:\temp
2011-04-01 06:09 . 2011-04-01 06:15	--------	d-----w-	C:\dvmexp
2011-04-01 06:09 . 2011-04-01 06:09	--------	d-----w-	C:\ASUS.000
2011-04-01 06:09 . 2011-04-01 06:09	--------	d-----w-	C:\ASUS.SYS
2011-04-01 06:06 . 2009-09-30 03:33	24576	----a-r-	c:\windows\SysWow64\AsIO.dll
2011-04-01 06:06 . 2009-08-04 02:28	13440	----a-r-	c:\windows\SysWow64\drivers\AsIO.sys
2011-04-01 06:06 . 2011-04-03 18:38	--------	d-----w-	c:\program files (x86)\ASUS
2011-04-01 06:06 . 2011-04-01 06:06	--------	d-----w-	c:\program files\ASUS
2011-04-01 06:06 . 2008-01-04 11:34	11832	----a-w-	c:\windows\SysWow64\drivers\AsInsHelp64.sys
2011-04-01 06:06 . 2008-01-04 11:34	10216	----a-w-	c:\windows\SysWow64\drivers\AsInsHelp32.sys
2011-04-01 06:05 . 2009-07-14 01:15	315904	----a-w-	c:\windows\SysWow64\Difx7ad.rra
2011-04-01 06:05 . 2011-04-04 19:00	--------	d-----w-	C:\RaidTool
2011-04-01 06:05 . 2009-06-30 03:58	1970176	------r-	c:\windows\SysWow64\xRaidSetup.exe
2011-04-01 06:05 . 2009-06-30 03:58	151552	------r-	c:\windows\SysWow64\xRaidAPI.dll
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-03 09:39 . 2009-07-14 02:36	175616	----a-w-	c:\windows\system32\msclmd.dll
2011-04-03 09:39 . 2009-07-14 02:36	152576	----a-w-	c:\windows\SysWow64\msclmd.dll
2011-04-01 18:58 . 2010-06-24 09:33	18328	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-02-23 06:28 . 2011-02-23 06:28	67176	----a-w-	c:\windows\system32\OpenCL.dll
2011-02-23 06:28 . 2011-02-23 06:28	6606440	----a-w-	c:\windows\system32\nvcuda.dll
2011-02-23 06:28 . 2011-02-23 06:28	57960	----a-w-	c:\windows\SysWow64\OpenCL.dll
2011-02-23 06:28 . 2011-02-23 06:28	5654120	----a-w-	c:\windows\SysWow64\nvwgf2um.dll
2011-02-23 06:28 . 2011-02-23 06:28	4942952	----a-w-	c:\windows\SysWow64\nvcuda.dll
2011-02-23 06:28 . 2011-02-23 06:28	3112040	----a-w-	c:\windows\system32\nvcuvid.dll
2011-02-23 06:28 . 2011-02-23 06:28	2895976	----a-w-	c:\windows\SysWow64\nvcuvid.dll
2011-02-23 06:28 . 2011-02-23 06:28	2479720	----a-w-	c:\windows\system32\nvcuvenc.dll
2011-02-23 06:28 . 2011-02-23 06:28	2251368	----a-w-	c:\windows\SysWow64\nvcuvenc.dll
2011-02-23 06:28 . 2011-02-23 06:28	20473960	----a-w-	c:\windows\system32\nvoglv64.dll
2011-02-23 06:28 . 2011-02-23 06:28	1965672	----a-w-	c:\windows\SysWow64\nvapi.dll
2011-02-23 06:28 . 2011-02-23 06:28	18580072	----a-w-	c:\windows\system32\nvcompiler.dll
2011-02-23 06:28 . 2011-02-23 06:28	15047272	----a-w-	c:\windows\SysWow64\nvoglv32.dll
2011-02-23 06:28 . 2011-02-23 06:28	13011560	----a-w-	c:\windows\SysWow64\nvcompiler.dll
2011-02-23 06:28 . 2011-02-23 06:28	12962792	----a-w-	c:\windows\system32\drivers\nvlddmkm.sys
2011-02-23 06:28 . 2011-02-23 06:28	12862568	----a-w-	c:\windows\system32\nvd3dumx.dll
2011-02-23 06:28 . 2011-02-23 06:28	10079336	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2011-01-21 05:36 . 2011-01-21 05:36	74272	----a-w-	c:\windows\system32\RtNicProp64.dll
2011-01-21 05:36 . 2011-01-21 05:36	413800	----a-w-	c:\windows\system32\drivers\Rt64win7.sys
2011-01-21 05:36 . 2011-01-21 05:36	107552	----a-w-	c:\windows\system32\RTNUninst64.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
"ccleaner"="c:\program files\CCleaner\CCleaner64.exe" [2011-04-01 3527992]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2009-06-30 36864]
"TurboV"="c:\program files\ASUS\TurboV\TurboV.exe" [2009-10-20 5516800]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 cpuz130;cpuz130;c:\users\Alex\AppData\Local\Temp\cpuz130\cpuz_x64.sys [x]
R3 MSICDSetup;MSICDSetup;D:\CDriver64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]
R3 RTCore64;RTCore64;c:\program files (x86)\MSI Afterburner\RTCore64.sys [2010-08-31 14648]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]
S1 AsUpIO;AsUpIO;SysWow64\drivers\AsUpIO.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S2 AsSysCtrlService;ASUS System Control Service;c:\program files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [2009-08-19 90112]
S2 DvmMDES;DeviceVM Meta Data Export Service;c:\asus.sys\config\DVMExportService.exe [2009-02-18 294912]
S2 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2011-01-12 810144]
S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-01-07 378984]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe [2011-03-16 2026304]
S2 UnsignedThemes;Unsigned Themes;c:\windows\UnsignedThemesSvc.exe [2009-07-12 24168]
S2 uxpatch;uxpatch;c:\windows\system32\drivers\uxpatch.sys [x]
S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys [2010-10-07 11856]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - klmd25
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-05-22 7833120]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-05-22 1833504]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2011-01-12 2918656]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
FF - ProfilePath - c:\users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\jycp6zcj.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.de/
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3977432446-208957757-1941588683-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-3977432446-208957757-1941588683-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2011-04-10  21:17:19
ComboFix-quarantined-files.txt  2011-04-10 19:17
.
Vor Suchlauf: 10 Verzeichnis(se), 682.744.254.464 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 682.608.279.552 Bytes frei
.
- - End Of File - - 316BF4C8845BFCA5188D10637218082C
         

--- --- ---


THX
vcore

c:\program files (x86)\ESET\MiNODLogin
c:\program files (x86)\ESET\MiNODLogin\MiNODLogin.jar
c:\program files (x86)\ESET\MiNODLogin\MiNODLoginLib.dll

Woher hast du die ESET-NOD32-Version? Wohl kaum gekauft oder?

Ne, hab ich nich
Hatte avira drauf und wollt mal nod laufen lassen, konnte es ja aber auch nicht löschen...


edit:aber so wie es ist er weg... oder täusche ich mich da?



Besten Dank =)

Troj/KeyGen-ES Trojan - Sophos security analysis

MiNODLogin ist eine eindeutige illegale Sache.

Cracks/Keygens sind zu 99,9% gefährliche Schädlinge, mit denen man nicht spaßen sollte. Ausserdem sind diese illegal und wir unterstützen die Verwendung von geklauter Software nicht. Somit beschränkt sich der Support auf Anleitung zur kompletten Neuinstallation!!

Quasi hab ich den durch das MiNODLogin bekomm? gut zu wissen lass ich den misst mal bleiben sonst hab ich gleich wieder was an der backe.

Trozdem vielen dank für deine Hilfe!

mfg vcore

Ja sieht ganz so aus.
Wo genau hast du ESET/NOD32 her und woher MiNODLogin?

Kann ich dir garnicht mehr sagen. Hab hier ne Cd rumfliegen gehabt, da wars drauf samt MiNODLogin... Hab die Cd gleich weggehaun nich das ich wieder den misst installiere...