Trojaner-Board - Trojaner TR/ATRAPS.Gen eingefangen

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Trojaner TR/ATRAPS.Gen eingefangen - Antivir und ich überfordert... (https://www.trojaner-board.de/100294-trojaner-tr-atraps-gen-eingefangen-antivir-ueberfordert.html)

Ok. Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Downloade Dir danach bitte MBRCheck (by a_d_13) und speichere die Datei auf dem Desktop.

Doppelklick auf die MBRCheck.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Das Tool braucht nur wenige Sekunden.
Danach solltest du eine MBRCheck_<Datum>_<Uhrzeit>.txt auf dem Desktop finden.

Poste mir bitte den Inhalt des .txt Dokumentes

Hallo Arne,

entschuldige bitte, dass es so lange gedauert hat. Hier schon mal das GMER-Log, der Rest folgt.

Code:

GMER 1.0.15.15640 - hxxp://www.gmer.net

Rootkit scan 2011-07-02 02:23:23

Windows 6.1.7600  Harddisk0\DR0 -> \Device\Ide\iaStor0 WDC_WD32 rev.01.0

Running: q6es6i4h.exe; Driver: C:\Users\Lisa\AppData\Local\Temp\pxldapow.sys
 
 

---- System - GMER 1.0.15 ----
 

SSDT            90AF820E                                                                                                                                           ZwCreateSection

SSDT            90AF8213                                                                                                                                           ZwSetContextThread

SSDT            90AF81AF                                                                                                                                           ZwTerminateProcess
 

---- Kernel code sections - GMER 1.0.15 ----
 

.text           ntkrnlpa.exe!ZwSaveKeyEx + 13BD                                                                                                                    82C85569 1 Byte  [06]

.text           ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                                                                             82CAA092 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}

.text           ntkrnlpa.exe!RtlSidHashLookup + 340                                                                                                                82CB1950 4 Bytes  [0E, 82, AF, 90]

.text           ntkrnlpa.exe!RtlSidHashLookup + 6E0                                                                                                                82CB1CF0 4 Bytes  [13, 82, AF, 90]

.text           ntkrnlpa.exe!RtlSidHashLookup + 7B8                                                                                                                82CB1DC8 4 Bytes  [AF, 81, AF, 90]

?               System32\Drivers\spiv.sys                                                                                                                          Das System kann den angegebenen Pfad nicht finden. !

.text           USBPORT.SYS!DllUnload                                                                                                                              8FB65D18 5 Bytes  JMP 882E91D8 
 

---- User IAT/EAT - GMER 1.0.15 ----
 

IAT             C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe[1212] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]  [75E25E25] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

IAT             C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe[1212] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress]     [75E25E25] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

IAT             C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe[1212] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress]    [75E25E25] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

IAT             C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe[1212] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]   [75E25E25] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

IAT             C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe[1212] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress]   [75E25E25] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)

IAT             C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe[1212] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]   [75E25E25] C:\Windows\system32\apphelp.dll (Clientbibliothek für Anwendungskompatibilität/Microsoft Corporation)
 

---- Devices - GMER 1.0.15 ----
 

Device          \FileSystem\Ntfs \Ntfs                                                                                                                             854911F8

Device          \FileSystem\fastfat \FatCdrom                                                                                                                      89B31470
 

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                                                                            Wdf01000.sys (Kernelmodustreiber-Frameworklaufzeit/Microsoft Corporation)
 

Device          \Driver\volmgr \Device\VolMgrControl                                                                                                               8548D1F8

Device          \Driver\usbehci \Device\USBPDO-0                                                                                                                   882EC1F8

Device          \Driver\NetBT \Device\NetBT_Tcpip_{7A13200D-5610-4549-BB24-3AD749BC3398}                                                                           881DC1F8

Device          \Driver\usbehci \Device\USBPDO-1                                                                                                                   882EC1F8

Device          \Driver\PCI_PNP7608 \Device\00000060                                                                                                               spiv.sys

Device          \Driver\volmgr \Device\HarddiskVolume1                                                                                                             8548D1F8
 

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1                                                                                                             fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1                                                                                                             rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
 

Device          \Driver\volmgr \Device\HarddiskVolume2                                                                                                             8548D1F8
 

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2                                                                                                             fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2                                                                                                             rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
 

Device          \Driver\NetBT \Device\NetBT_Tcpip_{E4593F4E-8192-4EA0-BFA0-FCE0B29386CC}                                                                           881DC1F8

Device          \Driver\cdrom \Device\CdRom0                                                                                                                       8813A1F8

Device          \Driver\volmgr \Device\HarddiskVolume3                                                                                                             8548D1F8
 

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3                                                                                                             fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3                                                                                                             rdyboost.sys (ReadyBoost Driver/Microsoft Corporation)
 

Device          \Driver\iaStor \Device\Ide\iaStor0                                                                                                                 [8B09F420] \SystemRoot\system32\DRIVERS\iaStor.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}

Device          \Driver\iaStor \Device\Ide\IAAStorageDevice-0                                                                                                      [8B09F420] \SystemRoot\system32\DRIVERS\iaStor.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}

Device          \Driver\iaStor \Device\Ide\IAAStorageDevice-1                                                                                                      [8B09F420] \SystemRoot\system32\DRIVERS\iaStor.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}

Device          \Driver\cdrom \Device\CdRom1                                                                                                                       8813A1F8

Device          \Driver\NetBT \Device\NetBt_Wins_Export                                                                                                            881DC1F8

Device          \Driver\BTHUSB \Device\00000095                                                                                                                    bthport.sys (Bluetooth-Bustreiber/Microsoft Corporation)

Device          \Driver\BTHUSB \Device\00000095                                                                                                                    bthport.sys (Bluetooth-Bustreiber/Microsoft Corporation)

Device          \Driver\ACPI_HAL \Device\0000004f                                                                                                                  halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)

Device          \Driver\BTHUSB \Device\00000097                                                                                                                    bthport.sys (Bluetooth-Bustreiber/Microsoft Corporation)

Device          \Driver\BTHUSB \Device\00000097                                                                                                                    bthport.sys (Bluetooth-Bustreiber/Microsoft Corporation)

Device          \Driver\usbehci \Device\USBFDO-0                                                                                                                   882EC1F8

Device          \Driver\usbehci \Device\USBFDO-1                                                                                                                   882EC1F8

Device          \Driver\sptd \Device\598057612                                                                                                                     spiv.sys

Device          \Driver\NetBT \Device\NetBT_Tcpip_{2F484F68-AC8E-48CE-91FF-B764B8843542}                                                                           881DC1F8

Device          \Driver\aqz1a77o \Device\Scsi\aqz1a77o1                                                                                                            882851F8

Device          \Driver\aqz1a77o \Device\Scsi\aqz1a77o1Port1Path0Target0Lun0                                                                                       882851F8

Device          \FileSystem\fastfat \Fat                                                                                                                           89B31470
 

AttachedDevice  \FileSystem\fastfat \Fat                                                                                                                           fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)
 

Device          \FileSystem\cdfs \Cdfs                                                                                                                             88155470
 

---- Registry - GMER 1.0.15 ----
 

Reg             HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\5cac4cdcdb20                                                                        

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s1                                                                                                 771343423

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s2                                                                                                 285507792

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@h0                                                                                                 1

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                                                   

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                                                C:\Program Files\DAEMON Tools Pro\

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                                                0x12 0x24 0x00 0x00 ...

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                                                0

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                                             0xC9 0xC1 0x04 0x05 ...

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                                                          

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                                                       0xA0 0x02 0x00 0x00 ...

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                                                    0xCF 0x9F 0x37 0x67 ...

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                                                     

Reg             HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                                               0x55 0x62 0x85 0x11 ...

Reg             HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\5cac4cdcdb20 (not active ControlSet)                                                    

Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                                               

Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                                                    C:\Program Files\DAEMON Tools Pro\

Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                                                    0x12 0x24 0x00 0x00 ...

Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                                                    0

Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                                                 0xC9 0xC1 0x04 0x05 ...

Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)                                      

Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                                                           0xA0 0x02 0x00 0x00 ...

Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                                                        0xCF 0x9F 0x37 0x67 ...

Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)                                 

Reg             HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                                                   0x55 0x62 0x85 0x11 ...
 

---- Disk sectors - GMER 1.0.15 ----
 

Disk            \Device\Harddisk0\DR0                                                                                                                              MBR read error

Disk            \Device\Harddisk0\DR0                                                                                                                              MBR BIOS signature not found 0
 

---- EOF - GMER 1.0.15 ----

Und das OSAM-Log:

Code:

Report of OSAM: Autorun Manager v5.0.11926.0

hxxp://www.online-solutions.ru/en/

Saved at 02:30:37 on 02.07.2011
 

OS: Windows 7  (Build 7600), 32-bit

Default Browser: Mozilla Corporation Firefox 5.0
 

Scanner Settings

[x] Rootkits detection (hidden registry)

[x] Rootkits detection (hidden files)

[x] Retrieve files information

[x] Check Microsoft signatures
 

Filters

[ ] Trusted entries

[ ] Empty entries

[x] Hidden registry entries (rootkit activity)

[x] Exclusively opened files

[x] Not found files

[x] Files without detailed information

[x] Existing files

[ ] Non-startable services

[ ] Non-startable drivers

[x] Active entries

[x] Disabled entries
 
 

[Control Panel Objects]

-----( %SystemRoot%\system32 )-----

"BCMWLCPL.CPL" - "Dell Inc." - C:\Windows\system32\BCMWLCPL.CPL

"DivXControlPanelApplet.cpl" - "DivX, Inc." - C:\Windows\system32\DivXControlPanelApplet.cpl

"FlashPlayerCPLApp.cpl" - "Adobe Systems Incorporated" - C:\Windows\system32\FlashPlayerCPLApp.cpl

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----

"bcmwlcpl.cpl" - "Dell Inc." - C:\Windows\System32\bcmwlcpl.cpl

"mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\MLCFG32.CPL

"QuickTime" - "Apple Inc." - C:\Program Files\QuickTime\QTSystem\QuickTime.cpl
 

[Drivers]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"aqz1a77o" (aqz1a77o) - "Intel Corporation" - C:\Windows\system32\drivers\aqz1a77o.sys  (Hidden registry entry, rootkit activity | File signed by Microsoft)

"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys

"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys

"BCM42RLY" (BCM42RLY) - "Broadcom Corporation" - C:\Windows\System32\drivers\BCM42RLY.sys

"catchme" (catchme) - ? - C:\Users\Lisa\AppData\Local\Temp\catchme.sys  (File not found)

"MBAMSwissArmy" (MBAMSwissArmy) - "Malwarebytes Corporation" - C:\Windows\system32\drivers\mbamswissarmy.sys

"PxHelp20" (PxHelp20) - "Sonic Solutions" - C:\Windows\System32\Drivers\PxHelp20.sys

"pxldapow" (pxldapow) - ? - C:\Users\Lisa\AppData\Local\Temp\pxldapow.sys  (Hidden registry entry, rootkit activity | File not found)

"sptd" (sptd) - "Duplex Secure Ltd." - C:\Windows\System32\Drivers\sptd.sys  (File is exclusively opened, access blocked)

"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys

"tmcomm" (tmcomm) - "Trend Micro Inc." - C:\Windows\System32\DRIVERS\tmcomm.sys
 

[Explorer]

-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----

{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll

-----( HKLM\Software\Classes\Protocols\Filter )-----

{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL

-----( HKLM\Software\Classes\Protocols\Handler )-----

{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll

{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL

{88FED34C-F0CA-4636-A375-3CB6248B04CD} "Local Groove Web Services Protocol" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GRA32A~1.DLL

{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL

{0E526CB5-7446-41D1-A403-19BFE95E8C23} "TmIEPlugInAPP Class" - ? - c:\Program Files\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll  (File not found)

{03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Program Files\Windows Live\Mail\mailcomm.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )-----

{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----

{0563DB41-F538-4B37-A92D-4659049B7766} "CLSID_WLMCMimeFilter" - "Microsoft Corporation" - C:\Program Files\Windows Live\Mail\mailcomm.dll

{D8D1CE8C-B1EB-4E95-B63B-1531BA60E992} "DivX Property Handler" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXPropertyHandler.dll

{83238FAE-D346-4E12-8734-D42F7554B3E6} "DivX Thumbnail Provider" - "DivX, Inc." - C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXThumbnailProvider.dll

{99FD978C-D287-4F50-827F-B2C658EDA8E7} "Groove Explorer Icon Overlay 1 (GFS Unread Stub)" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{AB5C5600-7E6E-4B06-9197-9ECEF74D31CC} "Groove Explorer Icon Overlay 2 (GFS Stub)" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{920E6DB1-9907-4370-B3A0-BAFC03D81399} "Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{16F3DD56-1AF5-4347-846D-7C10C4192619} "Groove Explorer Icon Overlay 3 (GFS Folder)" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{2916C86E-86A6-43FE-8112-43ABE6BF8DCC} "Groove Explorer Icon Overlay 4 (GFS Unread Mark)" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{2A541AE1-5BF6-4665-A8A3-CFA9672E4291} "Groove Folder Synchronization" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{6C467336-8281-4E60-8204-430CED96822D} "Groove GFS Context Menu Handler" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{B5A7F190-DDA6-4420-B3BA-52453494E6CD} "Groove GFS Stub Execution Hook" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{A449600E-1DC6-4232-B948-9BD794D62056} "Groove GFS Stub Icon Handler" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{387E725D-DC16-4D76-B310-2C93ED4752A0} "Groove XML Icon Handler" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} "iTunes" - "Apple Inc." - C:\Program Files\iTunes\iTunesMiniPlayer.dll

{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll

{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\ONFILTER.DLL

{00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\MLSHEXT.DLL

{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll

{7842554E-6BED-11D2-8CDB-B05550C10000} "Monitor Class" - "Broadcom Corporation." - c:\Program Files\WIDCOMM\Bluetooth Software\btncopy.dll

{0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\OLKFSTUB.DLL

{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll

{2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe

{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll

{06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe
 

[Internet Explorer]

-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----

<binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Program Files\Windows Live\Toolbar\wltcore.dll

ITBar7Height "ITBar7Height" - ? -   (File not found | COM-object registry key not found)

<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)

-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----

{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_24" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} "Java Plug-in 1.6.0_24" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_24" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_24.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----

"@c:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015" - ? - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll

{5F7B1267-94A9-47F5-98DB-E99415F33AEC} "In Blog veröffentlichen" - "Microsoft Corporation" - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL

-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )-----

<binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Program Files\Windows Live\Toolbar\wltcore.dll

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----

{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

{593DDEC6-7468-4cdd-90E1-42DADAA222E9} "DivX HiQ" - "DivX, LLC" - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

{326E768D-4182-46FD-9C16-1449A49795F4} "DivX Plus Web Player HTML5 <video>" - "DivX, LLC" - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} "Groove GFS Browser Helper" - "Microsoft Corporation" - C:\PROGRA~1\MIF5BA~1\Office12\GR469A~1.DLL

{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll

{6EBF7485-159F-4bff-A14F-B9E3AAC4465B} "Search Helper" - "Microsoft Corp." - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

{1CA1377B-DC1D-4A52-9585-6E06050FAC53} "TmIEPlugInBHO Class" - ? - c:\Program Files\Trend Micro\Client Server Security Agent\bho\1009\TmIEPlg.dll  (File not found)

{9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live Anmelde-Hilfsprogramm" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} "Windows Live Toolbar Helper" - "Microsoft Corporation" - C:\Program Files\Windows Live\Toolbar\wltcore.dll

{5C255C8A-E604-49b4-9D64-90988571CECB} "{5C255C8A-E604-49b4-9D64-90988571CECB}" - ? -   (File not found | COM-object registry key not found)
 

[Logon]

-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE  (Shortcut exists | File exists)

"desktop.ini" - ? - C:\Users\Lisa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----

"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

"Bluetooth.lnk" - "Broadcom Corporation." - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe  (Shortcut exists | File exists)

-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----

"DAEMON Tools Pro Agent" - "DT Soft Ltd" - "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun

"Skype" - "Skype Technologies S.A." - "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----

"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"AdobeAAMUpdater-1.0" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

"AdobeCS5ServiceManager" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

"avgnt" - "Avira GmbH" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

"Broadcom Wireless Manager UI" - "Dell Inc." - C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe

"Dell Webcam Central" - "Creative Technology Ltd" - "C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2

"DivX Download Manager" - "DivX, LLC" - "C:\Program Files\DivX\DivX Plus Web Player\DDmService.exe" start

"DivXUpdate" - ? - "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

"FreeFallProtection" - ? - C:\Program Files\STMicroelectronics\Accelerometer\FF_Protection.exe

"GrooveMonitor" - "Microsoft Corporation" - "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

"iTunesHelper" - "Apple Inc." - "C:\Program Files\iTunes\iTunesHelper.exe"

"Malwarebytes' Anti-Malware (reboot)" - "Malwarebytes Corporation" - "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

"PDVD9LanguageShortcut" - "CyberLink Corp." - "c:\Program Files\CyberLink\PowerDVD9\Language\Language.exe"

"QuickTime Task" - "Apple Inc." - "C:\Program Files\QuickTime\QTTask.exe" -atboottime

"RemoteControl9" - "CyberLink Corp." - "c:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe"

"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

"SwitchBoard" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
 

[Network Providers]

-----( HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order )-----

"DW WLAN Card Logon Provider" - "Dell Inc." - C:\Windows\System32\BCMLogon.dll
 

[Print Monitors]

-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----

"Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll
 

[Services]

-----( HKLM\SYSTEM\CurrentControlSet\Services )-----

"Adobe Acrobat Update Service" (AdobeARMservice) - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

"Akamai NetSession Interface" (Akamai) - ? - c:\program files\common files\akamai\netsession_win_e477fed.dll  (File found, but it contains no detailed information)

"Apple Mobile Device" (Apple Mobile Device) - "Apple Inc." - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\sched.exe

"Bluetooth Service" (btwdins) - "Broadcom Corporation." - c:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

"Dienst "Bonjour"" (Bonjour Service) - "Apple Inc." - C:\Program Files\Bonjour\mDNSResponder.exe

"DW WLAN Tray Service" (wltrysvc) - "Dell Inc." - C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE

"FF Install Filter Service" (InstallFilterService) - ? - C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe  (File found, but it contains no detailed information)

"Intel(R) Management & Security Application User Notification Service" (UNS) - "Intel Corporation" - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

"Intel(R) Management and Security Application Local Management Service" (LMS) - "Intel Corporation" - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

"iPod-Dienst" (iPod Service) - "Apple Inc." - C:\Program Files\iPod\bin\iPodService.exe

"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

"Microsoft Office Groove Audit Service" (Microsoft Office Groove Audit Service) - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

"SeaPort" (SeaPort) - "Microsoft Corp." - C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

"stllssvr" (stllssvr) - "MicroVision Development, Inc." - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

"SwitchBoard" (SwitchBoard) - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
 

[Winsock Providers]

-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----

"mdnsNSP" - "Apple Inc." - C:\Program Files\Bonjour\mdnsNSP.dll
 

===[ Logfile end ]=========================================[ Logfile end ]===
 

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru

Und MBR-Check:

Code:

MBRCheck, version 1.2.3

(c) 2010, AD
 

Command-line:                        

Windows Version:                Windows 7 Professional

Windows Information:                 (build 7600), 32-bit

Base Board Manufacturer:        Dell Inc.

BIOS Manufacturer:                Dell Inc.

System Manufacturer:                Dell Inc.

System Product Name:                Vostro 3500

Logical Drives Mask:                0x0000001c
 

Kernel Drivers (total 178):

  0x82C42000 \SystemRoot\system32\ntkrnlpa.exe

  0x82C0B000 \SystemRoot\system32\halmacpi.dll

  0x80BA3000 \SystemRoot\system32\kdcom.dll

  0x83224000 \SystemRoot\system32\mcupdate_GenuineIntel.dll

  0x8329C000 \SystemRoot\system32\PSHED.dll

  0x832AD000 \SystemRoot\system32\BOOTVID.dll

  0x832B5000 \SystemRoot\system32\CLFS.SYS

  0x832F7000 \SystemRoot\system32\CI.dll

  0x8AC1A000 \SystemRoot\system32\drivers\Wdf01000.sys

  0x8AC8B000 \SystemRoot\system32\drivers\WDFLDR.SYS

  0x8AC99000 \SystemRoot\System32\Drivers\spiv.sys

  0x8AD92000 \SystemRoot\System32\Drivers\WMILIB.SYS

  0x8AD9B000 \SystemRoot\System32\Drivers\SCSIPORT.SYS

  0x833A2000 \SystemRoot\system32\DRIVERS\ACPI.sys

  0x8ADC1000 \SystemRoot\system32\DRIVERS\msisadrv.sys

  0x8ADC9000 \SystemRoot\system32\DRIVERS\vdrvroot.sys

  0x8ADD4000 \SystemRoot\system32\DRIVERS\pci.sys

  0x8AC00000 \SystemRoot\System32\drivers\partmgr.sys

  0x8AC11000 \SystemRoot\system32\DRIVERS\compbatt.sys

  0x833EA000 \SystemRoot\system32\DRIVERS\BATTC.SYS

  0x83200000 \SystemRoot\system32\DRIVERS\volmgr.sys

  0x8AE1B000 \SystemRoot\System32\drivers\volmgrx.sys

  0x8AE66000 \SystemRoot\System32\drivers\mountmgr.sys

  0x8B03D000 \SystemRoot\system32\DRIVERS\iaStor.sys

  0x8B1F2000 \SystemRoot\system32\drivers\amdxata.sys

  0x8B000000 \SystemRoot\system32\drivers\fltmgr.sys

  0x8AE7C000 \SystemRoot\system32\drivers\fileinfo.sys

  0x8AE8D000 \SystemRoot\System32\Drivers\PxHelp20.sys

  0x8AE97000 \SystemRoot\System32\Drivers\Ntfs.sys

  0x8AFC6000 \SystemRoot\System32\Drivers\msrpc.sys

  0x8AE00000 \SystemRoot\System32\Drivers\ksecdd.sys

  0x8B23B000 \SystemRoot\System32\Drivers\cng.sys

  0x8B298000 \SystemRoot\System32\drivers\pcw.sys

  0x8B2A6000 \SystemRoot\System32\Drivers\Fs_Rec.sys

  0x8B2AF000 \SystemRoot\system32\drivers\ndis.sys

  0x8B366000 \SystemRoot\system32\drivers\NETIO.SYS

  0x8B3A4000 \SystemRoot\System32\Drivers\ksecpkg.sys

  0x8B40D000 \SystemRoot\System32\drivers\tcpip.sys

  0x8B556000 \SystemRoot\System32\drivers\fwpkclnt.sys

  0x8B587000 \SystemRoot\system32\DRIVERS\vmstorfl.sys

  0x8B590000 \SystemRoot\system32\DRIVERS\volsnap.sys

  0x8B5CF000 \SystemRoot\system32\DRIVERS\stdflt.sys

  0x8B5D2000 \SystemRoot\System32\Drivers\spldr.sys

  0x8B3C9000 \SystemRoot\System32\drivers\rdyboost.sys

  0x8B5DA000 \SystemRoot\System32\Drivers\mup.sys

  0x8B5EA000 \SystemRoot\System32\drivers\hwpolicy.sys

  0x8B200000 \SystemRoot\System32\DRIVERS\fvevol.sys

  0x83210000 \SystemRoot\system32\DRIVERS\disk.sys

  0x8B610000 \SystemRoot\system32\DRIVERS\CLASSPNP.SYS

  0x90442000 \SystemRoot\system32\DRIVERS\cdrom.sys

  0x90461000 \SystemRoot\System32\Drivers\Null.SYS

  0x90468000 \SystemRoot\System32\Drivers\Beep.SYS

  0x9046F000 \SystemRoot\System32\drivers\vga.sys

  0x9047B000 \SystemRoot\System32\drivers\VIDEOPRT.SYS

  0x9049C000 \SystemRoot\System32\drivers\watchdog.sys

  0x904A9000 \SystemRoot\System32\DRIVERS\RDPCDD.sys

  0x904B1000 \SystemRoot\system32\drivers\rdpencdd.sys

  0x904B9000 \SystemRoot\system32\drivers\rdprefmp.sys

  0x904C1000 \SystemRoot\System32\Drivers\Msfs.SYS

  0x904CC000 \SystemRoot\System32\Drivers\Npfs.SYS

  0x904DA000 \SystemRoot\system32\DRIVERS\tdx.sys

  0x904F1000 \SystemRoot\system32\DRIVERS\TDI.SYS

  0x904FC000 \SystemRoot\system32\drivers\afd.sys

  0x90556000 \SystemRoot\System32\DRIVERS\netbt.sys

  0x90588000 \SystemRoot\system32\DRIVERS\wfplwf.sys

  0x9058F000 \SystemRoot\system32\DRIVERS\pacer.sys

  0x905AE000 \SystemRoot\system32\DRIVERS\vwififlt.sys

  0x905BF000 \SystemRoot\system32\DRIVERS\netbios.sys

  0x905CD000 \SystemRoot\system32\DRIVERS\wanarp.sys

  0x905E0000 \SystemRoot\system32\DRIVERS\termdd.sys

  0x905F0000 \SystemRoot\system32\DRIVERS\ssmdrv.sys

  0x8FA0E000 \SystemRoot\system32\DRIVERS\rdbss.sys

  0x8FA4F000 \SystemRoot\system32\drivers\nsiproxy.sys

  0x8FA59000 \SystemRoot\system32\DRIVERS\mssmbios.sys

  0x8FA63000 \SystemRoot\System32\drivers\discache.sys

  0x8FA6F000 \SystemRoot\system32\drivers\csc.sys

  0x8FAD3000 \SystemRoot\System32\Drivers\dfsc.sys

  0x8FAEB000 \SystemRoot\system32\DRIVERS\blbdrive.sys

  0x8FAF9000 \SystemRoot\system32\DRIVERS\avipbb.sys

  0x8FB20000 \SystemRoot\system32\DRIVERS\tunnel.sys

  0x9162F000 \SystemRoot\system32\DRIVERS\igdkmd32.sys

  0x91F09000 \SystemRoot\System32\drivers\dxgkrnl.sys

  0x91FC0000 \SystemRoot\System32\drivers\dxgmms1.sys

  0x91600000 \SystemRoot\system32\DRIVERS\HECI.sys

  0x9160B000 \SystemRoot\system32\drivers\usbehci.sys

  0x8FB41000 \SystemRoot\system32\drivers\USBPORT.SYS

  0x8FB8C000 \SystemRoot\system32\DRIVERS\HDAudBus.sys

  0x9721E000 \SystemRoot\system32\DRIVERS\bcmwl6.sys

  0x974B7000 \SystemRoot\system32\DRIVERS\vwifibus.sys

  0x974C1000 \SystemRoot\system32\DRIVERS\Rt86win7.sys

  0x97506000 \SystemRoot\system32\DRIVERS\i8042prt.sys

  0x9751E000 \SystemRoot\system32\DRIVERS\SynTP.sys

  0x97556000 \SystemRoot\system32\DRIVERS\USBD.SYS

  0x97558000 \SystemRoot\system32\DRIVERS\mouclass.sys

  0x97565000 \SystemRoot\system32\DRIVERS\kbdclass.sys

  0x97572000 \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys

  0x97578000 \SystemRoot\system32\DRIVERS\Impcd.sys

  0x97597000 \SystemRoot\System32\Drivers\aqz1a77o.SYS

  0x975CF000 \SystemRoot\system32\DRIVERS\Acceler.sys

  0x975D8000 \SystemRoot\system32\DRIVERS\wmiacpi.sys

  0x975E1000 \SystemRoot\system32\DRIVERS\CmBatt.sys

  0x975E5000 \SystemRoot\system32\DRIVERS\intelppm.sys

  0x97200000 \SystemRoot\system32\DRIVERS\CompositeBus.sys

  0x9161A000 \SystemRoot\system32\DRIVERS\AgileVpn.sys

  0x8FBAB000 \SystemRoot\system32\DRIVERS\rasl2tp.sys

  0x9720D000 \SystemRoot\system32\DRIVERS\ndistapi.sys

  0x8FBC3000 \SystemRoot\system32\DRIVERS\ndiswan.sys

  0x8FBE5000 \SystemRoot\system32\DRIVERS\raspppoe.sys

  0x90400000 \SystemRoot\system32\DRIVERS\raspptp.sys

  0x90417000 \SystemRoot\system32\DRIVERS\rassstp.sys

  0x8FA00000 \SystemRoot\system32\DRIVERS\rdpbus.sys

  0x97218000 \SystemRoot\system32\DRIVERS\swenum.sys

  0x94428000 \SystemRoot\system32\DRIVERS\ks.sys

  0x9445C000 \SystemRoot\system32\DRIVERS\umbus.sys

  0x9446A000 \SystemRoot\system32\DRIVERS\usbhub.sys

  0x944AE000 \SystemRoot\System32\Drivers\NDProxy.SYS

  0x944BF000 \SystemRoot\system32\DRIVERS\stwrt.sys

  0x9452B000 \SystemRoot\system32\DRIVERS\portcls.sys

  0x9455A000 \SystemRoot\system32\DRIVERS\drmk.sys

  0x94573000 \SystemRoot\system32\DRIVERS\IntcDAud.sys

  0x945B1000 \SystemRoot\system32\DRIVERS\cdfs.sys

  0x98FA0000 \SystemRoot\System32\win32k.sys

  0x945C7000 \SystemRoot\System32\drivers\Dxapi.sys

  0x945D1000 \SystemRoot\system32\DRIVERS\monitor.sys

  0x945DC000 \SystemRoot\System32\Drivers\crashdmp.sys

  0x8B635000 \SystemRoot\System32\Drivers\dump_iaStor.sys

  0x945E9000 \SystemRoot\System32\Drivers\dump_dumpfve.sys

  0x98E00000 \SystemRoot\System32\TSDDD.dll

  0x94400000 \SystemRoot\system32\DRIVERS\usbccgp.sys

  0x98E30000 \SystemRoot\System32\cdd.dll

  0x8262F000 \SystemRoot\System32\Drivers\usbvideo.sys

  0x82653000 \SystemRoot\system32\DRIVERS\CtClsFlt.sys

  0x82677000 \SystemRoot\system32\DRIVERS\hidusb.sys

  0x82682000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS

  0x82695000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS

  0x8269C000 \SystemRoot\system32\DRIVERS\kbdhid.sys

  0x98E50000 \SystemRoot\System32\ATMFD.DLL

  0x826A8000 \SystemRoot\system32\DRIVERS\mouhid.sys

  0x826B3000 \SystemRoot\system32\drivers\luafv.sys

  0x826CE000 \SystemRoot\system32\DRIVERS\avgntflt.sys

  0x826E5000 \SystemRoot\system32\drivers\WudfPf.sys

  0x826FF000 \SystemRoot\system32\DRIVERS\lltdio.sys

  0x8270F000 \SystemRoot\system32\DRIVERS\nwifi.sys

  0x82755000 \SystemRoot\system32\DRIVERS\ndisuio.sys

  0x82765000 \SystemRoot\system32\DRIVERS\rspndr.sys

  0x82778000 \SystemRoot\system32\drivers\HTTP.sys

  0x82600000 \SystemRoot\system32\DRIVERS\bowser.sys

  0x82619000 \SystemRoot\System32\drivers\mpsdrv.sys

  0x9AA20000 \SystemRoot\system32\DRIVERS\mrxsmb.sys

  0x9AA43000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys

  0x9AA7E000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys

  0x9AAB1000 \SystemRoot\system32\DRIVERS\tmcomm.sys

  0x9AADD000 \SystemRoot\system32\drivers\peauth.sys

  0x9AB74000 \SystemRoot\System32\Drivers\secdrv.SYS

  0x9AB7E000 \SystemRoot\System32\DRIVERS\srvnet.sys

  0x9AB9F000 \SystemRoot\System32\drivers\tcpipreg.sys

  0x9ABAC000 \SystemRoot\System32\DRIVERS\srv2.sys

  0xADA38000 \SystemRoot\System32\DRIVERS\srv.sys

  0xADCAC000 \SystemRoot\system32\DRIVERS\btwrchid.sys

  0xADCAF000 \SystemRoot\system32\drivers\BCM42RLY.sys

  0xADCB7000 \SystemRoot\System32\Drivers\fastfat.SYS

  0xADC99000 \SystemRoot\System32\Drivers\BTHUSB.sys

  0xADCE1000 \SystemRoot\System32\Drivers\bthport.sys

  0xADD45000 \SystemRoot\system32\DRIVERS\rfcomm.sys

  0xADD69000 \SystemRoot\system32\DRIVERS\BthEnum.sys

  0xADD76000 \SystemRoot\system32\DRIVERS\bthpan.sys

  0xADC00000 \SystemRoot\system32\DRIVERS\btwavdt.sys

  0xADB0B000 \SystemRoot\system32\drivers\btwaudio.sys

  0xADC73000 \SystemRoot\system32\DRIVERS\btwl2cap.sys

  0xADDDF000 \??\C:\Users\Lisa\AppData\Local\Temp\pxldapow.sys

  0x77EC0000 \Windows\System32\ntdll.dll

  0x47F30000 \Windows\System32\smss.exe

  0x77E80000 \Windows\System32\apisetschema.dll

  0x00730000 \Windows\System32\autochk.exe

  0x10000000 \Program Files\DAEMON Tools Pro\Engine.dll

  0x77D70000 \Windows\System32\wininet.dll

  0x77D20000 \Windows\System32\gdi32.dll

  0x77C50000 \Windows\System32\msctf.dll
 

Processes (total 77):

       0 System Idle Process

       4 System

     344 C:\Windows\System32\smss.exe

     440 csrss.exe

     496 C:\Windows\System32\wininit.exe

     504 csrss.exe

     552 C:\Windows\System32\services.exe

     576 C:\Windows\System32\lsass.exe

     584 C:\Windows\System32\lsm.exe

     688 C:\Windows\System32\svchost.exe

     772 C:\Windows\System32\svchost.exe

     832 C:\Windows\System32\svchost.exe

     864 C:\Windows\System32\svchost.exe

     900 C:\Windows\System32\svchost.exe

     936 C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\stacsv.exe

    1092 C:\Windows\System32\svchost.exe

    1228 C:\Windows\System32\svchost.exe

    1368 C:\Windows\System32\winlogon.exe

    1404 C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE

    1428 C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE

    1436 C:\Windows\System32\wlanext.exe

    1444 C:\Windows\System32\conhost.exe

    1604 C:\Windows\System32\spoolsv.exe

    1680 C:\Program Files\Avira\AntiVir Desktop\sched.exe

    1700 C:\Windows\System32\svchost.exe

    1984 C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

    2008 C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_f39a6924a795ad94\AEstSrv.exe

    2036 C:\Windows\System32\svchost.exe

     120 C:\Program Files\Avira\AntiVir Desktop\avguard.exe

     380 C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

     436 C:\Program Files\Bonjour\mDNSResponder.exe

     372 C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

     888 C:\Windows\System32\svchost.exe

    1212 C:\Program Files\STMicroelectronics\Accelerometer\InstallFilterService.exe

    1292 C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

    1596 C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

    1796 C:\Windows\System32\conhost.exe

    2084 C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    2136 C:\Windows\System32\svchost.exe

    2792 C:\Windows\System32\dwm.exe

    2820 C:\Windows\explorer.exe

    2828 C:\Windows\System32\taskhost.exe

    3016 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    3028 C:\Program Files\IDT\WDM\sttray.exe

    3044 C:\Windows\System32\hkcmd.exe

    3052 C:\Windows\System32\igfxpers.exe

    3076 C:\Program Files\STMicroelectronics\Accelerometer\FF_Protection.exe

    3088 C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE

    3132 C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe

    3204 C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    3436 C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

    3552 C:\Program Files\iTunes\iTunesHelper.exe

    3568 C:\Program Files\DivX\DivX Update\DivXUpdate.exe

    3876 C:\Program Files\DivX\DivX Plus Web Player\DDMService.exe

    3984 C:\Windows\System32\svchost.exe

    4000 C:\Program Files\Common Files\Java\Java Update\jusched.exe

    4028 C:\Windows\System32\svchost.exe

    2748 C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

    2736 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

    2992 C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

    3416 C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe

    2696 C:\Windows\System32\SearchIndexer.exe

    2256 C:\Program Files\iPod\bin\iPodService.exe

    4492 C:\Program Files\Windows Media Player\wmpnetwk.exe

    4648 C:\Windows\System32\svchost.exe

    5428 C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

    6064 C:\Windows\System32\wuauclt.exe

    4788 C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe

    3940 C:\Windows\System32\audiodg.exe

    5884 C:\Program Files\Mozilla Firefox\firefox.exe

    3956 C:\Program Files\Mozilla Firefox\plugin-container.exe

    5352 C:\Windows\System32\SearchProtocolHost.exe

    4548 C:\Windows\System32\SearchFilterHost.exe

    5796 dllhost.exe

    3328 dllhost.exe

    6128 C:\Users\Lisa\Downloads\MBRCheck.exe

    2684 C:\Windows\System32\conhost.exe
 

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000003`ac000000  (NTFS)
 

PhysicalDrive0 Model Number: WDCWD3200BEKT-75KA9T0, Rev: 01.01A01
 

      Size  Device Name          MBR Status

  --------------------------------------------

    298 GB  \\.\PhysicalDrive0   Dell Inspiron MBR code detected

            SHA1: AE3E0A945D44C8EA304A19A8F50F69065C34344B
 
 

Done!

Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Hier der Scan mit Anti-Malware:

Code:

Malwarebytes' Anti-Malware 1.51.0.1200

www.malwarebytes.org
 

Datenbank Version: 7010
 

Windows 6.1.7600

Internet Explorer 8.0.7600.16385
 

03.07.2011 14:36:16

mbam-log-2011-07-03 (14-36-16).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)

Durchsuchte Objekte: 291918

Laufzeit: 48 Minute(n), 59 Sekunde(n)
 

Infizierte Speicherprozesse: 0

Infizierte Speichermodule: 0

Infizierte Registrierungsschlüssel: 0

Infizierte Registrierungswerte: 0

Infizierte Dateiobjekte der Registrierung: 0

Infizierte Verzeichnisse: 0

Infizierte Dateien: 0
 

Infizierte Speicherprozesse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung:

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien:

(Keine bösartigen Objekte gefunden)

Und hier das log von SuperAntiSpyware. Er hat 26 "Tracking Cookies" gefunden, was auch immer das genau ist. Wenn ich mir die Dateien aber genauer angucke, müsste das eigentlich harmlos sein, die Homepage der Macromedia School kann doch nämlich eigentlich nicht so richtig schädlich sein...

Sorry, dass es immer etwas dauert, der letzte Teil folgt morgen...

Code:

SUPERAntiSpyware Scan Log

hxxp://www.superantispyware.com
 

Generated 07/06/2011 at 00:37 AM
 

Application Version : 4.55.1000
 

Core Rules Database Version : 7374

Trace Rules Database Version: 5186
 

Scan type       : Complete Scan

Total Scan Time : 01:18:46
 

Memory items scanned      : 812

Memory threats detected   : 0

Registry items scanned    : 10229

Registry threats detected : 0

File items scanned        : 143998

File threats detected     : 26
 

Adware.Tracking Cookie

        C:\Users\Lisa\AppData\Roaming\Microsoft\Windows\Cookies\lisa@smartadserver[2].txt

        C:\Users\Lisa\AppData\Roaming\Microsoft\Windows\Cookies\lisa@doubleclick[1].txt

        C:\Users\Lisa\AppData\Roaming\Microsoft\Windows\Cookies\lisa@adx.chip[2].txt

        adserv.quality-channel.de [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        akamai.smartadserver.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        cdsmedia.cern.ch [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        ch.mediaplanet.streamingbolaget.se [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        core.insightexpressai.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        ec.atdmt.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        gw.callingbanners.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        hottraffic.nl [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        ia.media-imdb.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        imagesrv.adition.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        media.mtvnservices.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        media.scanscout.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        media.stage-entertainment.de [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        objects.tremormedia.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        s0.2mdn.net [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        secure-uk.imrworldwide.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        secure-us.imrworldwide.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        serving-sys.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        spe.atdmt.com [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        stat.easydate.biz [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        swrmediathek.de [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        www.ardmediathek.de [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

        www.unmultimedia.org [ C:\Users\Lisa\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\BWQK3U3E ]

Cookies sind idR harmlos. Das letzte Log von ESET bräuchte ich noch.

Genau, hier ist es auch nun. Schon wieder was gefunden, verdammt noch mal :/

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6427

# api_version=3.0.2

# EOSSerial=77344ffda0c0b34687c59c56d1a25ae0

# end=finished

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2011-07-06 04:57:37

# local_time=2011-07-06 06:57:37 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.1.7600 NT 

# compatibility_mode=512 16777215 100 0 0 0 0 0

# compatibility_mode=1797 16775165 100 94 0 46505296 75197 0

# compatibility_mode=5893 16776574 100 94 25303694 62407183 0 0

# compatibility_mode=8192 67108863 100 0 134 134 0 0

# scanned=169638

# found=1

# cleaned=0

# scan_time=3017

C:\Users\Lisa\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\604f826b-15166eb7        Java/TrojanDownloader.OpenStream.NCE trojan (unable to clean)        00000000000000000000000000000000        I

Nur ein Überrest bei ESET, kann weg.
Rechner wieder im Lot?

Ich hatte gehofft, das kannst du mir sagen :D Denn gemerkt habe ich ja die ganze Zeit nichts, nur der Scanner hat Alarm hoch hundert geschlagen...aber da die letzten Scans ja alle negativ waren, geh ich doch mal davon aus.

Letzte (wahrscheinlich) dumme Frage: Wie krieg ich die infizierte Datei, die ESET gefunden hat, denn weg? Im Quarantäne-Ordner ist nichts...

Einfach mal den JavaCache leeren, also diesen Ordner => C:\Users\Lisa\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\

Dann wären wir durch! :abklatsch:

Die Programme, die hier zum Einsatz kamen, können alle wieder runter. CF kann über Start, Ausführen mit combofix /uninstall entfernt werden. Melde dich falls es da Fehlermeldungen zu gibt.
Malwarebytes zu behalten ist kein Fehler. Kannst ja 1x im Monat damit scannen, aber immer vorher ans Update denken.

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.

Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update

PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie SumatraPDF oder Foxit PDF Reader, beide sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink:

Mozilla und andere Browser => http://filepony.de/?q=Flash+Player
Internet Explorer => http://fpdownload.adobe.com/get/flas..._player_ax.exe

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.

Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

Hallo,

nun bin ich's doch noch ein letztes Mal...leider kriege ich combofix nicht installiert. Wenn ich combofix / uninstall bei Ausführen eingebe, startet das Programm, aber deinstallieren kann ich leider nichts. Hast du da einen Tipp?

Vielen lieben Dank!!

Falsch: combofix / uninstall
Richtig combofix /uninstall

:D

Hm, leider funktioniert aber auch combofix /uninstall nicht. Er sagt mir "cofi.exe konnte nicht gefunden werden. Stellen Sie sicher, dass Sie den Namen richtig eingegeben haben und wiederholen Sie den Vorgang"

Selbiges habe ich sichergestellt und es tut sich aber immer noch nichts... :crazy: