Hilfe zum Log-File vom Blacklight Rootkit Revealer
 

Hallo, seit eine paar Tagen streikt mein Viren Programm ich kann auch kein neues Installieren, habe schon eine paar Progs über mein System laufen lassen. Hat aber nix geändert. Wäre nett, wenn sich jemand mal meinen Log-File anschauen könnte ob ich nun auch das Glück hab so einen tollen Rootkit an Bord zu haben. Bin auch Dankbar für alle Tipps die dann eventuell Abhilfe schaffen könnten.

THX Daniel


02/10/07 00:08:20 [Info]: BlackLight Engine 1.0.55 initialized
02/10/07 00:08:20 [Info]: OS: 5.1 build 2600 (Service Pack 2)
02/10/07 00:08:20 [Note]: 7019 4
02/10/07 00:08:20 [Note]: 7005 0
02/10/07 00:08:32 [Note]: 7006 0
02/10/07 00:08:32 [Note]: 7011 320
02/10/07 00:08:32 [Note]: 7026 0
02/10/07 00:08:32 [Note]: 7026 0
02/10/07 00:08:32 [Note]: 7024 3
02/10/07 00:08:32 [Info]: Hidden process: C:\WINDOWS\system32\hldrrr.exe
02/10/07 00:08:32 [Note]: 7024 3
02/10/07 00:08:32 [Info]: Hidden process: C:\WINDOWS\system32\hldrrr.exe
02/10/07 00:08:44 [Note]: FSRAW library version 1.7.1021
02/10/07 00:08:44 [Info]: Hidden file: c:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\hidires\hidr.exe
02/10/07 00:08:44 [Note]: 10002 2
02/10/07 00:08:44 [Info]: Hidden file: c:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\hidires\m_hook.sys
02/10/07 00:08:44 [Note]: 10002 2
02/10/07 00:08:44 [Note]: 10002 3
02/10/07 00:08:44 [Note]: 10002 3
02/10/07 00:08:44 [Note]: 10002 2
02/10/07 00:08:44 [Note]: 10002 2
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\Movie Maker\Shared\Empty.txt
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\Movie Maker\Shared\Filters.xml
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\Movie Maker\Shared\news.png
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\Movie Maker\Shared\paint.png
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\Movie Maker\Shared\Profiles\Blank.txt
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\Movie Maker\Shared\Sample1.jpg
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\Movie Maker\Shared\Sample2.jpg
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Note]: 10002 2
02/10/07 00:08:50 [Note]: 10002 2
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\icu\icudt24l.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\icu\icuuc24.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\DNCompInfo.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\DNDomain.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\errors\English\LabVIEW-e
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\errors\English\Measure-e
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\errors\English\NI-Report
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\lvanlys.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\lvapp.rsc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\lvjpeg.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\lvpng.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\lvrt.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\mesa.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\pro_bar_in.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\arrow.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\attank.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\bowvalve.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\boxshadow.3ds
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\box_inc.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\box_incp.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\frame_i.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\frame_o.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\gauge_f.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\inc.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\knob_d.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\knob_h.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\knob_t.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\meter_f.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\meter_g.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\meter_h.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\pb_d.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\pb_h.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\pb_l.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\pro_bar.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\rectvalve.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\rocker.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\rockerl.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\rockerr.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\slided.3ds
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\slideh.3ds
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\slider_b.3ds
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\slider_d.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\slider_f.3ds
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\slider_t.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\slidet.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\squreled.3ds
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\tab.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\tank.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\tb_h.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\tb_h_in.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\therm_e.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\therm_h.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\toggle_b.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\toggle_s.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\models\toggle_su.ptc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\script\hiqscript.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\script\matscript.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\LabVIEW Run-Time\7.1\vidialogs.rsc
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\MAX\Software\NI-USI.ico
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\MAX\Software\NI-USI.xml
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\Mesa\mesa.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\MKL\libguide40.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\MKL\mkl_def.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\MKL\mkl_lapack32.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\MKL\mkl_lapack64.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\MKL\mkl_p3.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\MKL\mkl_p4.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\NI-Reports\NiReports.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\nicont.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\NICONTDT.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\hdf5dll.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\AopMap.ini
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\Cit43drv.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\Cit43drv.ocx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\CitadelDL.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\CitadelDL.ocx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\dacasr.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\DaPluMa.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\DiaDriv.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\gfsaop3.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\gfsaop3.ocx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\GfSFSI.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\GfSFSI.ocx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\gfsods.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\GfSOds.ini
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\GUSI.ocx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\hBrowXr.ocx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\iBrowXr.ocx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\nicitusi.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\nicitusi.ocx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\RWUXThemeSU.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\Sources.ini
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\SQLDriv.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\SQLDriv.ocx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\STreer.ocx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\Uds.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\UDSA.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\usi.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\usiConfiguration.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\USICopyrights.chm
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\usiGui.chm
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\usiPluginTDM.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\usiReg.exe
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\uspCSV.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\uspCSV.uri
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\uspEasy.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\uspLVM.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\uspLVM.uri
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\xerces-c_2_2_0.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Bin\xmldom.dll
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\DataModels\USI\1_0\usi_1_0.xsd
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\DataModels\USI\TDM\1_0\USI_TDM_1_0.xml
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel4\cit4-simple\Ale00000.al
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel4\cit4-simple\Aleack00000
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel4\cit4-simple\AleIdx00000
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel4\cit4-simple\Aleset00000
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel4\cit4-simple\areas.dat
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel4\cit4-simple\mdx.mdx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel4\cit4-simple\tdb.tdb
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel4\cit4-simple\tdx.tdx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel4\cit4-simple\thd00001.th
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel5\cit5-simple\cx00000001.
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel5\cit5-simple\ix00000001.
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel5\cit5-simple\nodetree.el
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel5\cit5-simple\nodetree.el
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel5\cit5-simple\nodetree.el
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel5\cit5-simple\pid.cdih
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel5\cit5-simple\stridm.cdin
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Citadel5\citcreate.exe
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\examples.uri
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\Sql\simple.mdb
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\VI Logger\VILOGGER1\blobs.dat
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\VI Logger\VILOGGER1\blobs.idx
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\VI Logger\VILOGGER1\cdt00001.cdt
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\VI Logger\VILOGGER1\pidm.shm
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\VI Logger\VILOGGER1\ptm.shm
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\VI Logger\VILOGGER1\stridm.shm
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\VI Logger\VILOGGER1\strtm.shm
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\VI Logger\VILOGGER1\tridm.shm
02/10/07 00:08:50 [Note]: 10002 3
02/10/07 00:08:50 [Info]: Hidden file: c:\Programme\National Instruments\Shared\USI\Examples\VI Logger\VILOGGER1\trnm.shm
...
02/10/07 00:10:20 [Info]: Hidden file: C:\WINDOWS\system32\hldrrr.exe
02/10/07 00:10:20 [Note]: 10002 2
02/10/07 00:11:03 [Info]: Hidden file: d:\Software\Vpn\shared\help_tips.html
02/10/07 00:11:03 [Note]: 10002 3
02/10/07 00:11:03 [Info]: Hidden file: d:\Software\Vpn\shared\ref_help.html
02/10/07 00:11:03 [Note]: 10002 3
02/10/07 00:11:03 [Info]: Hidden file: d:\Software\Vpn\shared\style_1.css
02/10/07 00:11:03 [Note]: 10002 3
02/10/07 00:11:03 [Info]: Hidden file: d:\Software\Vpn\shared\WHnonIE4.css
02/10/07 00:11:03 [Note]: 10002 3
02/10/07 00:11:03 [Note]: 10002 2
02/10/07 00:11:03 [Note]: 10002 2
02/10/07 00:25:31 [Note]: 7007 0

Glückwunsch! Du hast eine Bagle-Variante samt dazugehörigem Rootkittreiber auf dem System.

Hast Du das Passwort für den Account Namens "Administrator" zur Hand? Hast Du eine Windows-CD zur Hand?

Hallo, ja hab alles da?

Sorry, aber es geht es morgen weiter. Ich bin jetzt weg.

Gruß

Marc

Boote bitte in die Wiederherstellungskonsole von Windows. Eine Anleitung hierfür gibt es hier:

Beschreibung der Windows XP-Wiederherstellungskonsole

Wenn Du schlussendlich in der Konsole angekommen bist führst du der Reihe nach folgende Kommandos aus:

Boote danach normal und lasse Blacklight nochmals laufen. Poste den Scanreport.

Hallo, danke für die Antwort, werde es heute Abend gleich mal versuchen, also lässt sich das Problem wohl doch ohne Formatierung der C Partition beheben?

Grüße Daniel

Das hängt davon ab, was wir finden, wenn der Rootkittreiber erstmal weg ist. Früh Dich also nicht zu früh.

Hallo, ich konnte die Zeilen leider nicht ausführen, weil mir der Zugriff immer verweigert wird. Gibts ne Möglichkeit das zu umgehen oder sich da als Admin einzuloggen?

Thx und Grüße
Daniel