Ihr system wurde gesperrt...

streetbay33

Jaja auch mich hat´s erwischt, und da ich hier schon ne Menge positiver ausgänge gelesen habe dachte ich mir ich versuche es einfach mal...

Habe schon die Datei Runtergeladen und den Scan gemacht...

Das Ergebnis der Schell datei...

WIN_VISTA X64 Service Pack 2
Running from G:\

HKLM\..\Winlogon; Shell = explorer.exe [ Microsoft Corporation ]
.
.
.
HKCU\..\Winlogon; Shell not found
.


[System Process]
System
smss.exe
csrss.exe
csrss.exe
wininit.exe
winlogon.exe
services.exe
lsass.exe
lsm.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
svchost.exe
explorer.exe
srep.exe
cmd.exe
WMIADAP.exe
WmiPrvSE.exe
srep.exe


HKLM\..\Run [UCam_Menu] = "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"
HKLM\..\Run [DpAgent] = C:\Program Files (x86)\DigitalPersona\Bin\dpagent.exe
HKLM\..\Run [QPService] = "C:\Program Files (x86)\HP\QuickPlay\QPService.exe"
HKLM\..\Run [QlbCtrl.exe] = "C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" /Start
HKLM\..\Run [HP Software Update] = C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
HKLM\..\Run [hpWirelessAssistant] = C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
HKLM\..\Run [HP Health Check Scheduler] = c:\Program Files (x86)\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
HKLM\..\Run [Adobe Reader Speed Launcher] = "C:\Program Files (x86)\Adobe\Reader 8.0\Reader\Reader_sl.exe"
HKLM\..\Run [WinampAgent] = "C:\Program Files (x86)\Winamp\winampa.exe"
HKLM\..\Run [avgnt] = "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
HKLM\..\Run [QuickTime Task] = "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
HKLM\..\Run [DivX Download Manager] = "C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe" start
HKLM\..\Run [DivXUpdate] = "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
HKLM\..\Run [SunJavaUpdateSched] = "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

HKCU\..\Run [Sidebar] = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKCU\..\Run [ehTray.exe] = C:\Windows\ehome\ehTray.exe
HKCU\..\Run [Audio 4 DJ Settings] = "C:\Program Files\Native Instruments\Audio 4 DJ Driver\Audio 4 DJ Settings.exe"
HKCU\..\Run [ISUSPM] = "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
HKCU\..\Run [Skype] = "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
HKCU\..\Run [swg] = "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKCU\..\Run [avupdate] = C:\Users\Dj Tomophon\AppData\Roaming\jashla.exe
HKCU\..\Run [ooVoo.exe] = C:\Program Files (x86)\ooVoo\oovoo.exe /minimized
HKCU\..\Run [msnmsgr] = "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKCU\..\Run [deew.exe] = "C:\Users\Dj Tomophon\AppData\Roaming\Baewxa\deew.exe"
HKCU\..\Run [{EFE653CF-3C68-11DE-BD1D-806E6F6E6963}] = C:\Users\Dj Tomophon\AppData\Roaming\Microsoft\svhcost.exe

HKU\.DEFAULT\..\Winlogon; Shell =
HKU\S-1-5-19\..\Winlogon; Shell =
HKU\S-1-5-20\..\Winlogon; Shell =
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Winlogon; Shell =
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000_Classes\..\Winlogon; Shell =
HKU\S-1-5-18\..\Winlogon; Shell =

HKU\S-1-5-19\..\Run [Sidebar] = %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
HKU\S-1-5-19\..\Run [WindowsWelcomeCenter] = rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\..\Run [Sidebar] = %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
HKU\S-1-5-20\..\Run [WindowsWelcomeCenter] = rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Run [Sidebar] = C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Run [ehTray.exe] = C:\Windows\ehome\ehTray.exe
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Run [Audio 4 DJ Settings] = "C:\Program Files\Native Instruments\Audio 4 DJ Driver\Audio 4 DJ Settings.exe"
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Run [ISUSPM] = "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Run [Skype] = "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Run [swg] = "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Run [avupdate] = C:\Users\Dj Tomophon\AppData\Roaming\jashla.exe
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Run [ooVoo.exe] = C:\Program Files (x86)\ooVoo\oovoo.exe /minimized
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Run [msnmsgr] = "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Run [deew.exe] = "C:\Users\Dj Tomophon\AppData\Roaming\Baewxa\deew.exe"
HKU\S-1-5-21-1969948914-4189117595-1450427878-1000\..\Run [{EFE653CF-3C68-11DE-BD1D-806E6F6E6963}] = C:\Users\Dj Tomophon\AppData\Roaming\Microsoft\svhcost.exe


x64
HKLMx64\..\Winlogon; Shell = explorer.exe [ 3079168- ]
No action taken
HKCUx6464\..\Winlogon; Shell =
No action taken
HKLMx64\..\Winlogon, Shell = explorer.exe
HKCUx64\..\Winlogon, Shell =

==== FINISH 05.12-15.04 ====

Nun jedoch hat der Rechner wieder normal gestartet und die Blockade war weiterhin vorhanden...