![]() |
|
Plagegeister aller Art und deren Bekämpfung: Win32.Delf.uv, Hupigon13 die 2te!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #2 |
![]() | ![]() Win32.Delf.uv, Hupigon13 die 2te! Ok musste den Log kürzen weil hier nur 25k zeichen erlaubt sind? hier der rest von der log.txt :
__________________======List of files/folders modified in the last 1 months====== 2009-03-25 21:04:31 ----D---- C:\Programme\Mozilla Firefox 2009-03-25 20:56:10 ----D---- C:\WINDOWS\Temp 2009-03-25 20:55:50 ----D---- C:\WINDOWS\system32\CatRoot2 2009-03-25 03:30:47 ----D---- C:\WINDOWS\system32\drivers 2009-03-25 03:30:47 ----D---- C:\WINDOWS\system32 2009-03-25 03:28:59 ----A---- C:\WINDOWS\SchedLgU.Txt 2009-03-25 03:10:07 ----RD---- C:\Programme 2009-03-25 02:58:09 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Kaspersky Lab 2009-03-25 02:57:56 ----D---- C:\WINDOWS\system32\CatRoot 2009-03-25 02:56:38 ----HD---- C:\WINDOWS\inf 2009-03-25 02:22:40 ----D---- C:\WINDOWS 2009-03-24 22:44:29 ----D---- C:\WINDOWS\Microsoft.NET 2009-03-24 22:44:21 ----RSD---- C:\WINDOWS\assembly 2009-03-24 22:30:54 ----SHD---- C:\Config.Msi 2009-03-24 22:30:54 ----RSHDC---- C:\WINDOWS\system32\dllcache 2009-03-24 22:30:54 ----D---- C:\Programme\Internet Explorer 2009-03-24 22:25:03 ----SHD---- C:\WINDOWS\Installer 2009-03-24 22:22:34 ----A---- C:\WINDOWS\Wininit.ini 2009-03-24 22:21:27 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2009-03-24 22:21:08 ----D---- C:\WINDOWS\WinSxS 2009-03-24 22:20:23 ----D---- C:\WINDOWS\Prefetch 2009-03-24 22:13:16 ----HD---- C:\WINDOWS\$hf_mig$ 2009-03-24 22:13:12 ----A---- C:\WINDOWS\imsins.BAK 2009-03-24 22:11:19 ----D---- C:\WINDOWS\ie7updates 2009-03-24 21:55:42 ----D---- C:\Programme\Spybot - Search & Destroy 2009-03-23 21:13:37 ----A---- C:\moduleName.txt 2009-03-23 04:30:43 ----D---- C:\Dokumente und Einstellungen\MARIO\Anwendungsdaten\teamspeak2 2009-03-19 22:12:41 ----D---- C:\Dokumente und Einstellungen\MARIO\Anwendungsdaten\HLSW 2009-03-19 18:24:48 ----D---- C:\Programme\ICQ6 2009-03-12 04:12:14 ----D---- C:\WINDOWS\system32\FxsTmp 2009-03-08 04:32:53 ----D---- C:\Dokumente und Einstellungen\MARIO\Anwendungsdaten\Skype 2009-03-08 02:25:15 ----D---- C:\Dokumente und Einstellungen\MARIO\Anwendungsdaten\skypePM 2009-03-05 14:00:09 ----A---- C:\WINDOWS\NeroDigital.ini ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 FsVga;FsVga; C:\WINDOWS\system32\DRIVERS\fsvga.sys [2001-08-18 12288] R1 intelppm;Intel-Prozessortreiber; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2004-08-04 40192] R1 kbdhid;Tastatur-HID-Treiber; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2004-08-04 14848] R1 KLIF;Kaspersky Lab Driver; C:\WINDOWS\system32\DRIVERS\klif.sys [2009-02-10 213520] R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys [2003-09-16 8552] R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys [] R2 Vcs;Vcs support; \??\C:\WINDOWS\system32\Drivers\Vcs.sys [] R3 Arp1394;1394-ARP-Clientprotokoll; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2004-08-04 60800] R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-07-28 2371584] R3 AVMBTPARALLEL;AVM Bluetooth Druckeranschluss; C:\WINDOWS\system32\DRIVERS\avmbtpar.sys [2005-11-22 61952] R3 AVMBTSERIAL;AVM Bluetooth Kommunikationsanschluss; C:\WINDOWS\system32\DRIVERS\avmbtser.sys [2005-11-22 60928] R3 AVMBTSND;AVM Bluetooth Audio Driver; C:\WINDOWS\system32\drivers\avmbtsnd.sys [2005-11-22 52352] R3 AVMCOWAN;AVM ISDN CoNDIS WAN CAPI Treiber; C:\WINDOWS\system32\DRIVERS\avmcowan.sys [2005-11-22 53632] R3 BFHU_CFG;AVM BlueFRITZ!USB 2.0 HCI Config Switch Driver; C:\WINDOWS\system32\DRIVERS\bfhu_cfg.sys [2005-11-22 6656] R3 CAPI_CIP;AVM Bluetooth CAPI-Controller; C:\WINDOWS\system32\DRIVERS\capi_cip.sys [2005-11-22 374144] R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2003-09-12 745920] R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\System32\DRIVERS\fetnd5b.sys [2002-10-29 40960] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2008-04-17 15464] R3 HidUsb;Microsoft HID Class-Treiber; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2001-08-17 9600] R3 klim5;Kaspersky Anti-Virus NDIS Filter; C:\WINDOWS\system32\DRIVERS\klim5.sys [2008-04-30 24592] R3 LHidKe;Logitech SetPoint HID Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidKE.Sys [2004-12-10 24704] R3 LHidUsbK;Logitech SetPoint USB Receiver device driver; C:\WINDOWS\System32\Drivers\LHidUsbK.Sys [2004-12-10 36480] R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\System32\Drivers\LMouKE.sys [2004-12-10 68992] R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys [] R3 mouhid;Maus-HID-Treiber; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-08-18 12288] R3 ms_mpu401;Microsoft MPU-401 MIDI UART-Treiber; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944] R3 NIC1394;1394-Netzwerktreiber; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2004-08-04 61824] R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-03-20 9856] R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-04 31616] R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-04 26624] R3 usbhub;USB2-aktivierter Hub; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600] R3 usbstor;USB-Massenspeichertreiber; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-04 26496] R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-04 20480] S3 ae4ld49q;ae4ld49q; C:\WINDOWS\system32\drivers\ae4ld49q.sys [] S3 AVMDSLPPPOE;AVM DSL PPPoE CAPI Treiber; C:\WINDOWS\system32\DRIVERS\avmdsloe.sys [2005-06-08 45440] S3 AVMNDSL;AVM DSL NDIS WAN CAPI Treiber; C:\WINDOWS\system32\DRIVERS\avmndsl.sys [2005-06-08 38992] S3 bfhubase;BlueFRITZ! USB 2.5(WinXP/2000); C:\WINDOWS\system32\DRIVERS\bfhubase.sys [2005-11-22 850976] S3 Cap7134;MEDION (7134) WDM Video Capture; C:\WINDOWS\System32\DRIVERS\Cap7134.sys [2003-06-05 350752] S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2004-08-04 17024] S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys [] S3 FDSLBASE;AVM FRITZ!Card DSL (WinXP/2000); C:\WINDOWS\system32\DRIVERS\fdslbase.sys [2005-06-08 799488] S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-09-28 25280] S3 Intels51;Creatix V.9X DSP Data Fax Modem; C:\WINDOWS\System32\DRIVERS\ctxs51.sys [2003-05-22 670203] S3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2004-12-10 13056] S3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\System32\Drivers\L8042mou.sys [2004-12-10 52992] S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2005-01-31 22016] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-04 5504] S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2004-08-04 85376] S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2004-08-04 10880] S3 NETBFPAN;AVM Bluetooth Netzwerkadapter; C:\WINDOWS\system32\DRIVERS\netbfpan.sys [2005-11-22 33354] S3 PhTVTune;MEDION TV-TUNER 7134 MK2/3; C:\WINDOWS\System32\DRIVERS\PhTVTune.sys [2003-06-12 24704] S3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2005-01-31 211712] S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys [] S3 PRISM_A00;PRISM 802.11g Driver; C:\WINDOWS\System32\DRIVERS\PRISMA00.sys [2003-08-07 362688] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2004-08-04 11136] S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2005-08-30 58320] S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2005-08-30 8304] S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2005-08-30 94000] S3 streamip;BDA IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2004-08-04 15360] S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-09-05 36864] S3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856] S3 usbscan;USB-Scannertreiber; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-04 15104] S3 wanatw;WAN Miniport (ATW); C:\WINDOWS\System32\DRIVERS\wanatw4.sys [] S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328] S3 X10UIF;%DESCRIPTION%; C:\WINDOWS\System32\Drivers\x10uif.sys [2001-11-14 10761] S3 XUIF;X10 USB Wireless Transceiver; C:\WINDOWS\System32\Drivers\x10ufx2.sys [2005-05-19 17792] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 Apple Mobile Device;Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-09-05 116040] R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-07-28 483328] R2 LogWatch;Ereignisprotokoll-Überwachung; C:\Programme\CA\SharedComponents\CA_LIC\LogWatNT.exe [2002-09-20 53248] R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2008-02-26 66872] R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2008-03-13 107832] R2 StarWindService;StarWind iSCSI Service; C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [2005-04-02 217600] R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912] R3 iPod Service;iPod-Dienst; C:\Programme\iPod\bin\iPodService.exe [2008-09-08 536872] S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-07-27 593920] S2 AVP;Kaspersky Anti-Virus; C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe [2009-02-10 206088] S2 ClipInc001;ClipInc 001; K:\Tobit ClipInc\Server\ClipInc-Server.exe 001 [] S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-08-04 268800] S2 lanmanserverMSDTC;Server lanmanserverMSDTC; C:\WINDOWS\system32\advpack.dll [2008-12-20 124928] S3 aspnet_state;ASP.NET-Zustandsdienst; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 Boonty Games;Boonty Games; C:\Programme\Gemeinsame Dateien\BOONTY Shared\Service\Boonty.exe [2008-12-29 69120] S3 B-Service;B-Service; C:\Dokumente und Einstellungen\MARIO\Anwendungsdaten\Mikogo\B-Service.exe [2008-11-08 180224] S3 CA_LIC_CLNT;CA-Lizenz-Client; C:\Programme\CA\SharedComponents\CA_LIC\lic98rmt.exe [2002-09-20 77824] S3 CA_LIC_SRVR;CA-Lizenzserver; C:\Programme\CA\SharedComponents\CA_LIC\lic98rmtd.exe [2002-09-20 77824] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 de_serv;AVM FRITZ!web Routing Service; C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe [] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2007-10-09 36864] S3 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632] S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2007-10-11 864256] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824] S3 odserv;Microsoft Office Diagnostics Service; C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136] S3 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 usnsvc;Messenger Sharing USN Journal Reader-Service; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336] S3 x10nets;X10 Device Network Service; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2007-10-11 122880] -----------------EOF----------------- |
Themen zu Win32.Delf.uv, Hupigon13 die 2te! |
avp, avp.exe, bho, browser, computer, desktop, firefox, hijack, hijackthis, hkus\s-1-5-18, home, iexplore.exe, internet, internet explorer, kaspersky, limewire, malwarebytes' anti-malware, mozilla, notification, object, registry, rundll, schannel.dll, senden, skype.exe, software, system, tastatur, usb, windows, windows live messenger, windows xp |