GMER Logfile - bitte um Analyse

torstendlp

Hallo,

ich habe das Problem, dass ich seit einiger Zeit keinerlei Windows Updates mehr installieren kann.
Alle Versuche, das Problem zu lösen mit diversen Ansätzen aus diversen Foren (MS FixIt, PC Welt FixIt, Kaspersky TDSS Killer uvm.) waren erfolglos.

SFC /scannow ist unauffällig, Super Antispyware ist unauffällig, Kasperky Internet Security ist unauffällig etc.

Deshalb habe ich jetzt mal mit GMER gescannt und das hat folgendes Logfile ergeben, wäre klasse, wenn da mal jemand einen Blick drauf werfen könnte! Vielen Dank!

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-05-14 17:38:14
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Samsung_SSD_840_PRO_Series rev.DXM06B0Q 476,94GB
Running: Gmer-19357.exe; Driver: C:\Users\Agando\AppData\Local\Temp\fwddipoc.sys


---- User code sections - GMER 2.1 ----

.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17 0000000076551401 2 bytes JMP 758fb21b C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17 0000000076551419 2 bytes JMP 758fb346 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17 0000000076551431 2 bytes JMP 75978ea9 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42 000000007655144a 2 bytes CALL 758d48ad C:\Windows\syswow64\KERNEL32.dll
.text ... * 9
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17 00000000765514dd 2 bytes JMP 759787a2 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17 00000000765514f5 2 bytes JMP 75978978 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17 000000007655150d 2 bytes JMP 75978698 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17 0000000076551525 2 bytes JMP 75978a62 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17 000000007655153d 2 bytes JMP 758efca8 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17 0000000076551555 2 bytes JMP 758f68ef C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17 000000007655156d 2 bytes JMP 75978f61 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17 0000000076551585 2 bytes JMP 75978ac2 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17 000000007655159d 2 bytes JMP 7597865c C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17 00000000765515b5 2 bytes JMP 758efd41 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17 00000000765515cd 2 bytes JMP 758fb2dc C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20 00000000765516b2 2 bytes JMP 75978e24 C:\Windows\syswow64\KERNEL32.dll
.text C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe[3304] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31 00000000765516bd 2 bytes JMP 759785f1 C:\Windows\syswow64\KERNEL32.dll

---- Kernel IAT/EAT - GMER 2.1 ----

IAT C:\Windows\System32\win32k.sys[ntoskrnl.exe!KeUserModeCallback] [fffff88003761edc] \SystemRoot\system32\DRIVERS\klif.sys [unknown section]
---- Processes - GMER 2.1 ----

Process C:\Users\Agando\AppData\LocalLow\WOT\IE\WOTUpdater.exe (*** suspicious ***) @ C:\Users\Agando\AppData\LocalLow\WOT\IE\WOTUpdater.exe [3168](2012-01-12 10:23:20) 00000000000c0000

---- EOF - GMER 2.1 ----