logfile GMER -was ist noch zu tun?

andgom

Hy

Sieht so aus als ob sich mein compo was eingefangen hätte...

Könntet ihr bitte mal das GMER logfile prüfen und sagen ob o.k. or nicht? Welchse scans mit welchen Programmen etc. wären weiter durchzuführen?

Vielen Dank für eure Hilfe!

Liebe Grüsse

A


and GMER LOG:

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-08-17 10:30:29
Windows 6.2.9200 x64 \Device\Harddisk0\DR0 -> \Device\00000039 Hitachi_HTS545050A7E380 rev.GG2OA7A0 465.76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\FIBO\AppData\Local\Temp\uxdorpob.sys


---- User code sections - GMER 2.1 ----

.text C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKWCtlX64.exe[1016] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306 000007f9c360177a 4 bytes [60, C3, F9, 07]
.text C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKWCtlX64.exe[1016] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314 000007f9c3601782 4 bytes [60, C3, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[1192] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f9c0aa1532 4 bytes [AA, C0, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[1192] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f9c0aa153a 4 bytes [AA, C0, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe[1192] C:\windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f9c0aa165a 4 bytes [AA, C0, F9, 07]
.text c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe[248] C:\windows\system32\psapi.dll!GetProcessImageFileNameA + 306 000007f9c360177a 4 bytes [60, C3, F9, 07]
.text c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe[248] C:\windows\system32\psapi.dll!GetProcessImageFileNameA + 314 000007f9c3601782 4 bytes [60, C3, F9, 07]
.text C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe[1740] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306 000007f9c360177a 4 bytes [60, C3, F9, 07]
.text C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe[1740] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314 000007f9c3601782 4 bytes [60, C3, F9, 07]
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2564] C:\windows\system32\psapi.dll!GetProcessImageFileNameA + 306 000007f9c360177a 4 bytes [60, C3, F9, 07]
.text c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe[2564] C:\windows\system32\psapi.dll!GetProcessImageFileNameA + 314 000007f9c3601782 4 bytes [60, C3, F9, 07]
.text C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFwSvcx64.exe[3204] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306 000007f9c360177a 4 bytes [60, C3, F9, 07]
.text C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFwSvcx64.exe[3204] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314 000007f9c3601782 4 bytes [60, C3, F9, 07]
.text C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFwSvcx64.exe[3204] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f9c0aa1532 4 bytes [AA, C0, F9, 07]
.text C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFwSvcx64.exe[3204] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f9c0aa153a 4 bytes [AA, C0, F9, 07]
.text C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFwSvcx64.exe[3204] C:\windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f9c0aa165a 4 bytes [AA, C0, F9, 07]
.text C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe[4272] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306 000007f9c360177a 4 bytes [60, C3, F9, 07]
.text C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe[4272] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314 000007f9c3601782 4 bytes [60, C3, F9, 07]
.text C:\Windows\System32\igfxpers.exe[6008] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 306 000007f9c360177a 4 bytes [60, C3, F9, 07]
.text C:\Windows\System32\igfxpers.exe[6008] C:\windows\system32\PSAPI.DLL!GetProcessImageFileNameA + 314 000007f9c3601782 4 bytes [60, C3, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[6048] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f9c0aa1532 4 bytes [AA, C0, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[6048] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f9c0aa153a 4 bytes [AA, C0, F9, 07]
.text C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe[6048] C:\windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f9c0aa165a 4 bytes [AA, C0, F9, 07]
.text C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe[6124] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 690 000007f9c0aa1532 4 bytes [AA, C0, F9, 07]
.text C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe[6124] C:\windows\SYSTEM32\MSIMG32.dll!GradientFill + 698 000007f9c0aa153a 4 bytes [AA, C0, F9, 07]
.text C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe[6124] C:\windows\SYSTEM32\MSIMG32.dll!TransparentBlt + 246 000007f9c0aa165a 4 bytes [AA, C0, F9, 07]
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4716] C:\windows\SYSTEM32\WSOCK32.dll!recvfrom + 742 000007f9aff01b32 4 bytes [F0, AF, F9, 07]
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[4716] C:\windows\SYSTEM32\WSOCK32.dll!recvfrom + 750 000007f9aff01b3a 4 bytes [F0, AF, F9, 07]

---- Threads - GMER 2.1 ----

Thread C:\windows\system32\csrss.exe [680:688] fffff9600081e5e8

---- Disk sectors - GMER 2.1 ----

Disk \Device\Harddisk0\DR0 unknown MBR code

---- EOF - GMER 2.1 ----