Trojaner-Board
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   BKA/GVU Trojaner Win7 32bit (https://www.trojaner-board.de/136688-bka-gvu-trojaner-win7-32bit.html)

schrauber 17.06.2013 20:22
http://download.bleepingcomputer.com...s/7/wscsvc.reg

laden, ausführen, erlauben. reboot und frisches FSS log :)

cayinda2 17.06.2013 20:29
Hallo schrauber,

das Log
FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-06-2013
Ran by volker (administrator) on 17-06-2013 21:28:26
Running from C:\Users\volker\Desktop
Windows 7 Ultimate Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AMD) C:\Windows\system32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(AVM Berlin) C:\Program Files\FRITZ!DSL\IGDCTRL.EXE
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files\Norton AntiVirus\Engine\20.3.1.22\ccSvcHst.exe
(Symantec Corporation) C:\Program Files\Norton Identity Safe\Engine\2013.3.3.19\ccSvcHst.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(Software 2000 Limited) C:\Windows\system32\spool\DRIVERS\W32X86\3\HP1006MC.EXE
(Symantec) C:\Program Files\Symantec\Norton Utilities 16\sMonitor\StartManSvc.exe
(Symantec Corporation) C:\Program Files\Norton Identity Safe\Engine\2013.3.3.19\ccSvcHst.exe
(Symantec Corporation) C:\Program Files\Norton AntiVirus\Engine\20.3.1.22\ccSvcHst.exe
() C:\Windows\system32\PnkBstrA.exe
(Creative Technology Ltd) C:\Windows\System32\CtHelper.exe
(Symantec) C:\Program Files\Symantec\Norton Utilities 16\sMonitor\SSDMonitor.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVM Berlin) C:\Program Files\FRITZ!DSL\FritzDsl.exe
(Adobe Systems Incorporated) C:\Program Files\Adobe\Reader 11.0\Reader\Reader_sl.exe
(Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE
(AVM Berlin) C:\Program Files\FRITZ!DSL\StCenter.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [CTHelper] CTHELPER.EXE [x]
HKLM\...\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files\AMD AVT\bin\kdbsync.exe" aml [10752 2012-01-31] ()
HKLM\...\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [641664 2012-04-06] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SSDMonitor] C:\Program Files\Symantec\Norton Utilities 16\sMonitor\SSDMonitor.exe [104480 2012-09-29] (Symantec)
HKLM\...\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming [2238704 2013-02-21] (Logitech, Inc.)
HKLM\...\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [X]
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKCU\...\Policies\system: [DisableRegistryTools] 0
MountPoints2: {898ca9d7-bd61-11e1-a893-806e6f6e6963} - H:\sources\sperr32.exe x64
HKU\Administrator\...\Run: [fli4l] "C:\Program Files\Imonc3_0_4\Imonc.exe" /S:192.168.178.1 [ 2010-06-25] ()
HKU\Administrator\...\Run: [AtiTrayTools] "C:\Program Files\Ray Adams\ATI Tray Tools\atitray.exe" [x]
HKU\Administrator\...\Run: [DevconDefaultDB] C:\Windows\system32\READREG /SILENT /FAIL=1 [x]
HKU\Administrator\...\RunOnce: [CTAutoUpdate] "C:\Program Files\Creative\Shared Files\Software Update\AutoUpdate.exe" /RunFromInstaller [ 2009-01-15] (Creative Technology Ltd)
HKU\Administrator\...\RunOnce: [InetReg] "C:\Program Files\Creative\Produktregistrierung\German\InetReg.exe" /PreProcess=RegFlash.exe /Delay=6 [x]
Startup: C:\Users\volker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FRITZ!DSL Internet.lnk
ShortcutTarget: FRITZ!DSL Internet.lnk -> C:\Program Files\FRITZ!DSL\FritzDsl.exe (AVM Berlin)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: (No Name) - {ebd898f8-fcf6-4694-bc3b-eabc7271eeb1} -  No File
SearchScopes: HKCU - {A0699754-D9A8-416C-8E9D-3CD75F5E087E} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}
SearchScopes: HKCU - {EEF82575-0BE9-4BFF-BDA4-35FD40173704} URL = hxxp://suche.t-online.de/cgi-bin/swl?br=ie7&q={searchTerms}
BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\20.3.1.22\IPS\IPSBHO.DLL (Symantec Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Norton Identity Protection - {AB4C7833-A6EC-433f-B9FE-6B14B1A2F836} - C:\Program Files\Norton Identity Safe\Engine\2013.3.3.19\coIEPlg.dll (Symantec Corporation)
BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll (Logitech, Inc.)
BHO: FRITZ!Box Addon BHO - {C0C86BBE-9509-4296-8459-FDBFDAF4B673} - C:\Program Files\FRITZ!Box\AddOn (IE)\FBoxIESplitButton.dll (AVM Berlin)
Toolbar: HKLM - Norton Identity Safe Toolbar - {A13C2648-91D4-4bf3-BC6D-0079707C4389} - C:\Program Files\Norton Identity Safe\Engine\2013.3.3.19\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU -No Name - {EBD898F8-FCF6-4694-BC3B-EABC7271EEB1} -  No File
DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
DPF: {FC7DCECC-8042-42D0-B080-B68A2C18B095} file:///E:/CTROM08DVD/asearch/asearch.dll
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\..\Interfaces\{89376290-EB85-413E-A0BF-63C5FE694A20}: [NameServer]192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\volker\AppData\Roaming\Mozilla\Firefox\Profiles\pf34vh1r.default
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf - C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/esnlaunch,version=1.104.0 - C:\Program Files\Battlelog Web Plugins\1.104.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

========================== Services (Whitelisted) =================

S3 Creative ALchemy AL6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2011-07-17] (Creative Labs)
S3 DiskDoctorService; C:\Program Files\Symantec\Norton Utilities 16\Tools\Disk Doctor\DiskDoctorSrv.exe [1147424 2012-09-29] (Symantec Corporation)
S3 GSService; C:\Windows\system32\GSService.exe [403832 2012-12-30] ()
R2 IGDCTRL; C:\Program Files\FRITZ!DSL\IGDCTRL.EXE [73528 2009-07-28] (AVM Berlin)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NAV; C:\Program Files\Norton AntiVirus\Engine\20.3.1.22\diMaster.dll [554288 2013-03-29] (Symantec Corporation)
R2 NCO; C:\Program Files\Norton Identity Safe\Engine\2013.3.3.19\diMaster.dll [554288 2013-03-29] (Symantec Corporation)
R2 NU16StartManagerSvc; C:\Program Files\Symantec\Norton Utilities 16\sMonitor\StartManSvc.exe [792608 2012-09-29] (Symantec)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2012-01-21] ()
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Technische Unterstützung (Engineer) 2012\RpcAgentSrv.exe [93848 2008-11-06] (SiSoftware)
S3 SpeedDiskService; C:\Program Files\Symantec\Norton Utilities 16\Tools\SpeedDisk\SpeedDiskSrv.exe [1160224 2012-09-29] (Symantec Corporation)
S2 WMPNetworkSvc;

==================== Drivers (Whitelisted) ====================

S3 atidgllk; C:\Program Files\GPU-Z\atidgllk.sys [12048 2006-07-19] (ATI Technologies Inc.)
R1 atitray; C:\Program Files\Ray Adams\ATI Tray Tools\atitray.sys [20384 2011-03-27] ()
S3 AVMUNET; C:\Windows\System32\DRIVERS\avmunet.sys [14976 2006-11-07] (AVM GmbH)
R1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\BASHDefs\20130531.001\BHDrvx86.sys [1002072 2013-05-31] (Symantec Corporation)
R1 ccSet_NAV; C:\Windows\system32\drivers\NAV\1403010.016\ccSetx86.sys [134304 2012-11-16] (Symantec Corporation)
R1 ccSet_NST; C:\Windows\system32\drivers\NST\7DD03030.013\ccSetx86.sys [134304 2012-11-16] (Symantec Corporation)
S3 COMMONFX; C:\Windows\System32\drivers\COMMONFX.SYS [99416 2010-03-18] (Creative Technology Ltd)
R3 COMMONFX.SYS; C:\Windows\System32\drivers\COMMONFX.SYS [99416 2010-03-18] (Creative Technology Ltd)
S3 cpudrv; C:\Program Files\SystemRequirementsLab\cpudrv.sys [11336 2009-12-18] ()
S3 CT20XUT.DLL; C:\Windows\System32\CT20XUT.DLL [164608 2007-04-12] (Creative Technology Ltd.)
S3 CTAUDFX; C:\Windows\System32\drivers\CTAUDFX.SYS [555096 2010-03-18] (Creative Technology Ltd)
R3 CTAUDFX.SYS; C:\Windows\System32\drivers\CTAUDFX.SYS [555096 2010-03-18] (Creative Technology Ltd)
S3 ctdvda2k; C:\Windows\System32\drivers\ctdvda2k.sys [347144 2010-03-18] (Creative Technology Ltd)
S3 CTEAPSFX.DLL; C:\Windows\System32\CTEAPSFX.DLL [168192 2007-04-12] (Creative Technology Ltd)
S3 CTEDSPFX.DLL; C:\Windows\System32\CTEDSPFX.DLL [280320 2007-04-12] (Creative Technology Ltd)
S3 CTEDSPIO.DLL; C:\Windows\System32\CTEDSPIO.DLL [128768 2007-04-12] (Creative Technology Ltd)
S3 CTEDSPSY.DLL; C:\Windows\System32\CTEDSPSY.DLL [323328 2007-04-12] (Creative Technology Ltd)
S3 CTERFXFX; C:\Windows\System32\drivers\CTERFXFX.SYS [100952 2010-03-18] (Creative Technology Ltd)
S3 CTERFXFX.SYS; C:\Windows\System32\drivers\CTERFXFX.SYS [100952 2010-03-18] (Creative Technology Ltd)
S3 CTEXFIFX.DLL; C:\Windows\System32\CTEXFIFX.DLL [1317632 2007-04-12] (Creative Technology Ltd.)
S3 CTHWIUT.DLL; C:\Windows\System32\CTHWIUT.DLL [66816 2007-04-12] (Creative Technology Ltd.)
S3 CTSBLFX; C:\Windows\System32\drivers\CTSBLFX.SYS [566360 2010-03-18] (Creative Technology Ltd)
R3 CTSBLFX.SYS; C:\Windows\System32\drivers\CTSBLFX.SYS [566360 2010-03-18] (Creative Technology Ltd)
S3 drhard; C:\Windows\system32\DRIVERS\DRHARD.SYS [23600 2005-12-01] (Licensed for Gebhard Software)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376480 2012-12-15] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [106656 2013-05-30] (Symantec Corporation)
S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [61704 2011-03-18] (FTDI Ltd.)
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] ()
S3 grmnusb; C:\Windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
R3 ha10kx2k; C:\Windows\System32\drivers\ha10kx2k.sys [798808 2010-03-18] (Creative Technology Ltd)
R3 hap16v2k; C:\Windows\System32\drivers\hap16v2k.sys [162904 2010-03-18] (Creative Technology Ltd)
S3 hap17v2k; C:\Windows\System32\drivers\hap17v2k.sys [189528 2010-03-18] (Creative Technology Ltd)
R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\IPSDefs\20130614.001\IDSvix86.sys [386720 2013-05-29] (Symantec Corporation)
S3 ksaud; C:\Windows\System32\drivers\ksaud.sys [1255168 2010-07-30] (Creative Technology Ltd.)
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [28160 2009-07-08] (hxxp://libusb-win32.sourceforge.net)
S3 LMouFilt; C:\Windows\System32\DRIVERS\LMouFilt.Sys [40200 2013-01-03] (Logitech, Inc.)
S3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [30984 2013-01-03] (Logitech, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 MP4ConverterAudio; C:\Windows\System32\drivers\MP4ConverterAudio.sys [23608 2012-12-30] (Windows (R) Win 7 DDK provider)
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [6504 2009-05-13] ()
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20130617.002\NAVENG.SYS [93272 2013-05-30] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20130617.002\NAVEX15.SYS [1611992 2013-05-30] (Symantec Corporation)
R0 oem-drv86; C:\Windows\System32\DRIVERS\oem-drv86.sys [28160 2013-06-17] (secr9tos)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Technische Unterstützung (Engineer) 2012\WNt500x86\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 silabenm; C:\Windows\System32\DRIVERS\silabenm.sys [47176 2010-07-28] (Silicon Laboratories)
S3 silabser; C:\Windows\System32\DRIVERS\silabser.sys [61312 2011-10-14] (Silicon Laboratories)
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
S3 SRTSP; C:\Windows\System32\Drivers\NAV\1403010.016\SRTSP.SYS [602712 2013-01-29] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NAV\1403010.016\SRTSPX.SYS [32344 2013-01-29] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NAV\1403010.016\SYMDS.SYS [367704 2013-01-22] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NAV\1403010.016\SYMEFA.SYS [934488 2013-01-31] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [142496 2012-12-16] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NAV\1403010.016\Ironx86.SYS [175264 2012-11-16] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NAV\1403010.016\SYMNETS.SYS [338592 2013-01-31] (Symantec Corporation)
R1 VD_FileDisk; C:\Windows\System32\Drivers\VD_FileDisk.sys [24680 2011-01-26] (CaptainFlint Software)
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [117760 2011-02-25] (VIA Technologies, Inc.)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [164864 2011-02-25] (VIA Technologies, Inc.)
S3 COMMONFX.DLL; system32\COMMONFX.DLL [x]
S3 CTAUDFX.DLL; system32\CTAUDFX.DLL [x]
S3 CTERFXFX.DLL; system32\CTERFXFX.DLL [x]
S3 CTSBLFX.DLL; system32\CTSBLFX.DLL [x]
S1 EIO; system32\DRIVERS\EIO.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-17 21:25 - 2013-06-17 21:25 - 00000000 ____D C:\ProgramData\Mozilla
2013-06-17 21:25 - 2013-06-17 21:25 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-06-17 21:24 - 2013-06-17 21:24 - 21151576 ____A (Mozilla) C:\Users\volker\Downloads\Firefox Setup 21.0.exe
2013-06-17 14:25 - 2013-06-17 14:25 - 00000000 ____D C:\Program Files\ESET
2013-06-16 17:56 - 2013-06-16 17:56 - 00000000 ____D C:\Program Files\Common Files\Java
2013-06-16 17:55 - 2013-06-16 17:55 - 00866720 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-06-16 17:55 - 2013-06-16 17:55 - 00094112 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll
2013-06-16 13:51 - 2013-06-16 13:52 - 00000000 ____D C:\ProgramData\HitmanPro
2013-06-16 13:09 - 2013-06-16 13:09 - 01359389 ____A (Farbar) C:\Users\volker\Desktop\FRST.exe
2013-06-16 13:08 - 2013-06-16 13:08 - 00000675 ____A C:\JRT.txt
2013-06-16 13:06 - 2013-06-16 13:06 - 00000000 ____D C:\Windows\ERUNT
2013-06-16 13:06 - 2013-06-16 13:06 - 00000000 ____D C:\JRT
2013-06-16 12:58 - 2013-06-16 12:59 - 00022123 ____A C:\AdwCleaner[S1].txt
2013-06-15 00:27 - 2013-06-16 13:23 - 00023392 ____A C:\FRST.txt
2013-06-15 00:27 - 2013-06-15 00:27 - 00000000 ____D C:\FRST
2013-06-14 23:20 - 2013-06-14 21:46 - 01359323 ____A (Farbar) C:\FRST.exe
2013-06-14 23:18 - 2013-06-14 23:18 - 00000000 __SHD C:\found.000
2013-06-14 21:16 - 2013-06-14 19:05 - 09171472 ____A (SurfRight B.V.) C:\HitmanPro.exe
2013-06-14 21:16 - 2013-06-03 11:32 - 09833328 ____A (SurfRight B.V.) C:\HitmanPro_x64.exe
2013-06-12 22:40 - 2013-05-17 00:39 - 01800704 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 22:40 - 2013-05-17 00:28 - 01129472 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 22:40 - 2013-05-17 00:28 - 01104384 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 22:40 - 2013-05-17 00:26 - 00231936 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2013-06-12 22:40 - 2013-05-17 00:23 - 00065024 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 22:40 - 2013-05-17 00:21 - 00717824 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 22:40 - 2013-05-17 00:21 - 00142848 ____A (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-06-12 22:40 - 2013-05-17 00:20 - 00420864 ____A (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-06-12 22:40 - 2013-05-17 00:19 - 00607744 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 22:40 - 2013-05-17 00:17 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 22:40 - 2013-05-17 00:17 - 00073216 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-06-12 22:40 - 2013-05-17 00:16 - 02382848 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 22:40 - 2013-05-17 00:12 - 00176640 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 22:39 - 2013-05-17 01:08 - 12329984 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 22:39 - 2013-05-17 00:49 - 09738752 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 22:39 - 2013-05-17 00:27 - 01427968 ____A (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-06-12 19:38 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 19:38 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 19:38 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 19:38 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 19:38 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 19:38 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 19:38 - 2013-05-08 07:38 - 01293672 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 19:38 - 2013-05-06 07:06 - 03968872 ____A (Microsoft Corporation) C:\Windows\System32\ntkrnlpa.exe
2013-06-12 19:38 - 2013-05-06 07:06 - 03913576 ____A (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-06-12 19:38 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 19:38 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-12 19:38 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-09 17:18 - 2013-06-09 17:18 - 00001754 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-09 17:18 - 2013-06-09 17:18 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-06-09 17:18 - 2013-06-09 17:18 - 00000000 ____D C:\Program Files\iTunes
2013-06-09 17:18 - 2013-06-09 17:18 - 00000000 ____D C:\Program Files\iPod
2013-06-01 14:14 - 2013-06-01 14:14 - 00002911 ____A C:\Users\volker\Desktop\Watt32.exe.lnk
2013-06-01 14:14 - 2013-06-01 14:14 - 00002911 ____A C:\Users\volker\Desktop\Watt Kurzanleitung.pdf.lnk
2013-06-01 14:10 - 2013-06-01 14:13 - 00000032 ____A C:\Windows\CD_Start.INI
2013-05-30 14:17 - 2013-04-10 07:18 - 00728424 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2013-05-30 14:17 - 2013-04-10 07:18 - 00218984 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\dxgmms1.sys
2013-05-30 14:17 - 2013-04-10 05:14 - 02347520 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-05-30 14:17 - 2013-03-19 06:53 - 00186368 ____A (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2013-05-30 14:17 - 2013-03-19 05:33 - 00040960 ____A (Microsoft Corporation) C:\Windows\System32\wwanprotdim.dll
2013-05-30 14:17 - 2013-02-27 07:05 - 00101720 ____A (Microsoft Corporation) C:\Windows\System32\consent.exe
2013-05-30 14:17 - 2013-02-27 06:55 - 12872704 ____A (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-05-30 14:17 - 2013-02-27 06:55 - 00180224 ____A (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-05-30 14:17 - 2013-02-27 06:49 - 01796096 ____A (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-05-30 14:17 - 2013-02-27 06:49 - 00047104 ____A (Microsoft Corporation) C:\Windows\System32\appinfo.dll

==================== One Month Modified Files and Folders ========

2013-06-17 21:28 - 2013-03-23 14:08 - 00033984 ____A C:\Users\volker\DesktopStCenter.txt
2013-06-17 21:28 - 2011-11-27 17:42 - 00001094 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-06-17 21:27 - 2012-12-16 21:22 - 00000278 ____A C:\Windows\Tasks\NUAutoUpdate.job
2013-06-17 21:27 - 2011-07-15 19:58 - 01224599 ____A C:\Windows\WindowsUpdate.log
2013-06-17 21:27 - 2011-07-15 19:58 - 00028160 ____A (secr9tos) C:\Windows\System32\Drivers\oem-drv86.sys
2013-06-17 21:27 - 2011-05-12 13:53 - 00179024 ____A C:\Windows\setupact.log
2013-06-17 21:27 - 2009-07-14 06:53 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-17 21:26 - 2011-07-17 15:26 - 00000000 ____D C:\Users\volker\AppData\Roaming\SlimBrowser
2013-06-17 21:25 - 2013-06-17 21:25 - 00000000 ____D C:\ProgramData\Mozilla
2013-06-17 21:25 - 2013-06-17 21:25 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-06-17 21:25 - 2012-03-17 12:02 - 00001110 ____A C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-06-17 21:25 - 2011-07-17 16:59 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-06-17 21:24 - 2013-06-17 21:24 - 21151576 ____A (Mozilla) C:\Users\volker\Downloads\Firefox Setup 21.0.exe
2013-06-17 21:21 - 2011-11-27 17:42 - 00001098 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-06-17 21:20 - 2012-03-30 16:24 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-17 21:01 - 2011-07-17 16:58 - 00000000 ____D C:\Program Files\JDownloader
2013-06-17 20:45 - 2012-12-17 20:00 - 00000398 ____A C:\Windows\System32\AppLog.log
2013-06-17 20:45 - 2012-12-16 21:22 - 00000270 ____A C:\Windows\Tasks\NUSchedule.job
2013-06-17 14:26 - 2010-11-20 23:01 - 00006630 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-17 14:26 - 2009-07-14 06:34 - 00026544 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-17 14:26 - 2009-07-14 06:34 - 00026544 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-17 14:25 - 2013-06-17 14:25 - 00000000 ____D C:\Program Files\ESET
2013-06-16 21:57 - 2012-10-30 17:20 - 04931577 ____A C:\Windows\{00000005-00000000-00000001-00001102-00000004-20021102}.BAK
2013-06-16 21:57 - 2012-10-30 17:17 - 04931577 ____A C:\Windows\{00000005-00000000-00000001-00001102-00000004-20021102}.CDF
2013-06-16 21:43 - 2011-07-21 21:39 - 00000000 ____D C:\Program Files\Zoom Player
2013-06-16 17:56 - 2013-06-16 17:56 - 00000000 ____D C:\Program Files\Common Files\Java
2013-06-16 17:55 - 2013-06-16 17:55 - 00866720 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-06-16 17:55 - 2013-06-16 17:55 - 00094112 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge.dll
2013-06-16 17:55 - 2011-07-17 17:00 - 00788896 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-06-16 17:55 - 2011-07-17 17:00 - 00263584 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-16 17:55 - 2011-07-17 17:00 - 00174496 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-16 17:55 - 2011-07-17 17:00 - 00174496 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-16 17:55 - 2011-07-17 17:00 - 00000000 ____D C:\Program Files\Java
2013-06-16 17:53 - 2010-11-20 23:48 - 00464278 ____A C:\Windows\PFRO.log
2013-06-16 13:53 - 2012-03-07 20:12 - 00001090 ____A C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-06-16 13:53 - 2012-03-07 20:12 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-06-16 13:52 - 2013-06-16 13:51 - 00000000 ____D C:\ProgramData\HitmanPro
2013-06-16 13:23 - 2013-06-15 00:27 - 00023392 ____A C:\FRST.txt
2013-06-16 13:20 - 2012-03-30 16:24 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerApp.exe
2013-06-16 13:20 - 2011-07-17 15:27 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\System32\FlashPlayerCPLApp.cpl
2013-06-16 13:09 - 2013-06-16 13:09 - 01359389 ____A (Farbar) C:\Users\volker\Desktop\FRST.exe
2013-06-16 13:08 - 2013-06-16 13:08 - 00000675 ____A C:\JRT.txt
2013-06-16 13:06 - 2013-06-16 13:06 - 00000000 ____D C:\Windows\ERUNT
2013-06-16 13:06 - 2013-06-16 13:06 - 00000000 ____D C:\JRT
2013-06-16 12:59 - 2013-06-16 12:58 - 00022123 ____A C:\AdwCleaner[S1].txt
2013-06-16 12:51 - 2011-07-17 15:11 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-15 00:29 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\System32\LogFiles
2013-06-15 00:27 - 2013-06-15 00:27 - 00000000 ____D C:\FRST
2013-06-14 23:18 - 2013-06-14 23:18 - 00000000 __SHD C:\found.000
2013-06-14 23:11 - 2011-07-17 21:35 - 00000000 ____D C:\ProgramData\Norton
2013-06-14 23:11 - 2011-07-15 21:41 - 00000000 ____D C:\Users\volker\AppData\Roaming\GHISLER
2013-06-14 23:11 - 2011-07-15 20:00 - 00000000 ____D C:\users\volker
2013-06-14 23:11 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\System32\wfp
2013-06-14 23:11 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\System32\DriverStore
2013-06-14 23:11 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\System32\de-DE
2013-06-14 23:11 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-06-14 21:46 - 2013-06-14 23:20 - 01359323 ____A (Farbar) C:\FRST.exe
2013-06-14 19:05 - 2013-06-14 21:16 - 09171472 ____A (SurfRight B.V.) C:\HitmanPro.exe
2013-06-12 22:40 - 2011-05-12 13:26 - 73381792 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-12 19:55 - 2012-12-16 20:57 - 00000000 ____D C:\Windows\System32\Drivers\NAV
2013-06-09 17:18 - 2013-06-09 17:18 - 00001754 ____A C:\Users\Public\Desktop\iTunes.lnk
2013-06-09 17:18 - 2013-06-09 17:18 - 00000000 ____D C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2013-06-09 17:18 - 2013-06-09 17:18 - 00000000 ____D C:\Program Files\iTunes
2013-06-09 17:18 - 2013-06-09 17:18 - 00000000 ____D C:\Program Files\iPod
2013-06-09 17:18 - 2011-07-24 20:50 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-06-03 11:32 - 2013-06-14 21:16 - 09833328 ____A (SurfRight B.V.) C:\HitmanPro_x64.exe
2013-06-01 14:14 - 2013-06-01 14:14 - 00002911 ____A C:\Users\volker\Desktop\Watt32.exe.lnk
2013-06-01 14:14 - 2013-06-01 14:14 - 00002911 ____A C:\Users\volker\Desktop\Watt Kurzanleitung.pdf.lnk
2013-06-01 14:13 - 2013-06-01 14:10 - 00000032 ____A C:\Windows\CD_Start.INI
2013-06-01 14:07 - 2012-07-03 22:43 - 00000000 ____D C:\Program Files\WATT32
2013-05-30 21:50 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\rescache
2013-05-30 16:22 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-05-30 14:23 - 2009-07-14 06:33 - 00420072 ____A C:\Windows\System32\FNTCACHE.DAT

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION!


LastRegBack: 2013-06-16 14:40

==================== End Of Log ============================
--- --- ---

Gruß

Volker

schrauber 18.06.2013 06:31
FSS (Service Scanner), nicht FRST :)

Noch Probleme?

cayinda2 18.06.2013 11:15
Hallo schrauber,

hatte mich verlesen. Hier das Log

Farbar Service Scanner Version: 16-06-2013
Ran by volker (administrator) on 18-06-2013 at 12:14:01
Running from "C:\Users\volker\Desktop"
Windows 7 Ultimate Service Pack 1 (X86)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall"=DWORD:0


System Restore:
============

System Restore Disabled Policy:
========================


Action Center:
============


Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.
Checking ImagePath: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open WinDefend registry key. The service key does not exist.


Windows Defender Disabled Policy:
==========================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
"DisableAntiSpyware"=DWORD:1


Other Services:
==============


File Check:
========
C:\Windows\system32\nsisvc.dll => MD5 is legit
C:\Windows\system32\Drivers\nsiproxy.sys => MD5 is legit
C:\Windows\system32\dhcpcore.dll => MD5 is legit
C:\Windows\system32\Drivers\afd.sys => MD5 is legit
C:\Windows\system32\Drivers\tdx.sys => MD5 is legit
C:\Windows\system32\Drivers\tcpip.sys
[2013-06-12 19:38] - [2013-05-08 07:38] - 1293672 ____A (Microsoft Corporation) D32FDAC73FCD76B85389C39BC1087F2A

C:\Windows\system32\dnsrslvr.dll => MD5 is legit
C:\Windows\system32\mpssvc.dll => MD5 is legit
C:\Windows\system32\bfe.dll => MD5 is legit
C:\Windows\system32\Drivers\mpsdrv.sys => MD5 is legit
C:\Windows\system32\SDRSVC.dll => MD5 is legit
C:\Windows\system32\vssvc.exe => MD5 is legit
C:\Windows\system32\wscsvc.dll => MD5 is legit
C:\Windows\system32\wbem\WMIsvc.dll => MD5 is legit
C:\Windows\system32\wuaueng.dll => MD5 is legit
C:\Windows\system32\qmgr.dll => MD5 is legit
C:\Windows\system32\es.dll => MD5 is legit
C:\Windows\system32\cryptsvc.dll
[2013-06-12 19:38] - [2013-05-13 06:45] - 0140288 ____A (Microsoft Corporation) 3897DFF247D9ED0006190349DE264E14

C:\Program Files\Windows Defender\MpSvc.dll => MD5 is legit
C:\Windows\system32\ipnathlp.dll => MD5 is legit
C:\Windows\system32\iphlpsvc.dll => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit


**** End of log ****

schrauber 18.06.2013 12:29
Fertig :)

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

cayinda2 18.06.2013 13:26
Hallo schrauber,

System läuft ohne Probleme. Nochmals vielen Dank für deine schnelle Hilfe.

Gruß
Volker

schrauber 18.06.2013 13:32
Gern Geschehen :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 15:32 Uhr.
Seite 2 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131