survey-central.deadlyblessing.com/home.html

rozi2007

Hallo,

ich bekomme ein unerwünschtes popup auf den Link in der Überschrift "survey-central.deadlyblessing.com/home.html".

Aufgrund der Empfehlung in einem älteren Beitrag hier habe ich das Programm TDSS Killer installiert und einen SCAN gemacht. Hier die Auswertung:

Kann mir jemand weiterhelfen, wie ich das Problem lösen kann?

17:09:46.0499 1380 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
17:09:46.0689 1380 ============================================================
17:09:46.0689 1380 Current date / time: 2013/07/10 17:09:46.0689
17:09:46.0689 1380 SystemInfo:
17:09:46.0689 1380
17:09:46.0689 1380 OS Version: 6.1.7601 ServicePack: 1.0
17:09:46.0689 1380 Product type: Workstation
17:09:46.0689 1380 ComputerName: LENOVOOR-2012
17:09:46.0689 1380 UserName: OR
17:09:46.0689 1380 Windows directory: C:\Windows
17:09:46.0689 1380 System windows directory: C:\Windows
17:09:46.0689 1380 Running under WOW64
17:09:46.0689 1380 Processor architecture: Intel x64
17:09:46.0689 1380 Number of processors: 4
17:09:46.0689 1380 Page size: 0x1000
17:09:46.0689 1380 Boot type: Normal boot
17:09:46.0689 1380 ============================================================
17:09:47.0429 1380 Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 (465.76 Gb), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:09:47.0439 1380 ============================================================
17:09:47.0439 1380 \Device\Harddisk0\DR0:
17:09:47.0439 1380 MBR partitions:
17:09:47.0439 1380 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x64000
17:09:47.0439 1380 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x64800, BlocksNum 0x34921000
17:09:47.0439 1380 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x34985800, BlocksNum 0x32F0000
17:09:47.0439 1380 ============================================================
17:09:47.0469 1380 C: <-> \Device\Harddisk0\DR0\Partition2
17:09:47.0509 1380 D: <-> \Device\Harddisk0\DR0\Partition3
17:09:47.0509 1380 ============================================================
17:09:47.0509 1380 Initialize success
17:09:47.0509 1380 ============================================================
17:09:52.0890 3520 ============================================================
17:09:52.0890 3520 Scan started
17:09:52.0890 3520 Mode: Manual;
17:09:52.0890 3520 ============================================================
17:09:54.0540 3520 ================ Scan system memory ========================
17:09:54.0540 3520 System memory - ok
17:09:54.0540 3520 ================ Scan services =============================
17:09:54.0970 3520 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
17:09:54.0970 3520 1394ohci - ok
17:09:55.0010 3520 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
17:09:55.0010 3520 ACPI - ok
17:09:55.0040 3520 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
17:09:55.0040 3520 AcpiPmi - ok
17:09:55.0070 3520 [ 5E813B11629007309E4FC0F0FD2B7C30 ] ACPIVPC C:\Windows\system32\DRIVERS\AcpiVpc.sys
17:09:55.0070 3520 ACPIVPC - ok
17:09:55.0170 3520 [ 11A52CF7B265631DEEB24C6149309EFF ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
17:09:55.0210 3520 Suspicious file (Forged): C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe. Real md5: 11A52CF7B265631DEEB24C6149309EFF, Fake md5: ADDA5E1951B90D3D23C56D3CF0622ADC
17:09:55.0210 3520 AdobeARMservice ( ForgedFile.Multi.Generic ) - warning
17:09:55.0210 3520 AdobeARMservice - detected ForgedFile.Multi.Generic (1)
17:09:55.0410 3520 AdobeFlashPlayerUpdateSvc - ok
17:09:55.0450 3520 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
17:09:55.0450 3520 adp94xx - ok
17:09:55.0490 3520 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
17:09:55.0490 3520 adpahci - ok
17:09:55.0500 3520 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
17:09:55.0500 3520 adpu320 - ok
17:09:55.0520 3520 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
17:09:55.0530 3520 AeLookupSvc - ok
17:09:55.0590 3520 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
17:09:55.0590 3520 AFD - ok
17:09:55.0610 3520 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
17:09:55.0610 3520 agp440 - ok
17:09:55.0620 3520 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
17:09:55.0630 3520 ALG - ok