| |
| |||||||
Log-Analyse und Auswertung: RKIT/Agent.483856 lässt sich nicht löschen!Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
13.04.2009, 04:01
| #1 |
| |  RKIT/Agent.483856 lässt sich nicht löschen! Hallo liebe Forumsgemeinde, heiße Manuel und bin neu hier. Habe bereits im Internet und auf dieser Seite nach meinem Problem gesucht, aber leider keine richtige Hilfe finden können. Hoffe das ihr mir helfen könnt. Zu meinem Problem und Vorgeschichte: Mein PC lief nicht mehr. Wenn ich ihn angeschaltet habe hat die Graka auf höchst Drezahl gedreht und lief so weiter. Auf dem Bildschirm war nur kurz no signal zu sehen und dann war der Bildschirm schwarz. (Kurze Zwischenmeldung: Antivir meldete mir gerade eben auch noch den Trojaner TR/PSW.Agent.mrh ohwei) Weiter: Habe im Internet gefunden, dass meine Graka Nvidea gforce 8800gtx nicht mit meinem Motherboard Abit IN9 32WIFI harmoniert und ein BIOS Update dies beheben sollte. Was es auch tat. Habe dann Antivir durchlaufen lassen und 8 Warnings und oben genannten Trojan und jetzt noch den in der Mitte genannten Trojaner drauf und weiß nicht wie ich die los bekomme. Was ich bereits gemacht habe: 1. Antivir durchlaufen lassen und besagte Trojaner ohne Erfolg gelöscht. Folgender Report: Avira AntiVir Personal Report file date: Dienstag, 1. Januar 2008 00:16 Scanning for 1342193 virus strains and unwanted programs. Licensee : Avira AntiVir Personal - FREE Antivirus Serial number : 0000149996-ADJIE-0000001 Platform : Windows Vista Windows version : (Service Pack 1) [6.0.6001] Boot mode : Normally booted Username : SYSTEM Computer name : SCHATZBÄR-PC Version information: BUILD.DAT : 9.0.0.387 17962 Bytes 24.03.2009 11:04:00 AVSCAN.EXE : 9.0.3.3 464641 Bytes 24.02.2009 19:13:26 AVSCAN.DLL : 9.0.3.0 40705 Bytes 27.02.2009 17:58:24 LUKE.DLL : 9.0.3.2 209665 Bytes 20.02.2009 18:35:49 LUKERES.DLL : 9.0.2.0 12033 Bytes 27.02.2009 17:58:52 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27.10.2008 19:30:36 ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11.02.2009 03:33:26 ANTIVIR2.VDF : 7.1.3.0 1330176 Bytes 01.04.2009 23:39:30 ANTIVIR3.VDF : 7.1.3.21 99328 Bytes 06.04.2009 23:39:22 Engineversion : 8.2.0.138 AEVDF.DLL : 8.1.1.0 106868 Bytes 28.01.2009 00:36:42 AESCRIPT.DLL : 8.1.1.73 373114 Bytes 03.04.2009 23:39:42 AESCN.DLL : 8.1.1.10 127348 Bytes 03.04.2009 23:39:39 AERDL.DLL : 8.1.1.3 438645 Bytes 30.10.2008 01:24:41 AEPACK.DLL : 8.1.3.12 397687 Bytes 03.04.2009 23:39:37 AEOFFICE.DLL : 8.1.0.36 196987 Bytes 27.02.2009 03:01:56 AEHEUR.DLL : 8.1.0.114 1700214 Bytes 03.04.2009 23:39:34 AEHELP.DLL : 8.1.2.2 119158 Bytes 27.02.2009 03:01:56 AEGEN.DLL : 8.1.1.33 340340 Bytes 03.04.2009 23:39:25 AEEMU.DLL : 8.1.0.9 393588 Bytes 09.10.2008 21:32:40 AECORE.DLL : 8.1.6.7 176502 Bytes 03.04.2009 23:39:22 AEBB.DLL : 8.1.0.3 53618 Bytes 09.10.2008 21:32:40 AVWINLL.DLL : 9.0.0.3 18177 Bytes 12.12.2008 15:47:59 AVPREF.DLL : 9.0.0.1 43777 Bytes 05.12.2008 17:32:15 AVREP.DLL : 8.0.0.3 155905 Bytes 20.01.2009 21:34:28 AVREG.DLL : 9.0.0.0 36609 Bytes 05.12.2008 17:32:09 AVARKT.DLL : 9.0.0.1 292609 Bytes 09.02.2009 14:52:24 AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30.01.2009 17:37:08 SQLITE3.DLL : 3.6.1.0 326401 Bytes 28.01.2009 22:03:49 SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02.02.2009 15:21:33 NETNT.DLL : 9.0.0.0 11521 Bytes 05.12.2008 17:32:10 RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 09.02.2009 18:45:45 RCTEXT.DLL : 9.0.35.0 87297 Bytes 11.03.2009 22:55:12 Configuration settings for the scan: Jobname.............................: Complete system scan Configuration file..................: c:\program files\avira\antivir desktop\sysscan.avp Logging.............................: low Primary action......................: interactive Secondary action....................: ignore Scan master boot sector.............: on Scan boot sector....................: on Boot sectors........................: C:, E:, F:, G:, Process scan........................: on Scan registry.......................: on Search for rootkits.................: on Integrity checking of system files..: off Scan all files......................: All files Scan archives.......................: on Recursion depth.....................: 20 Smart extensions....................: on Macro heuristic.....................: on File heuristic......................: medium Start of the scan: Dienstag, 1. Januar 2008 00:16 Starting search for hidden objects. '75927' objects were checked, '0' hidden objects were found. The scan of running processes will be started Scan process 'wuauclt.exe' - '1' Module(s) have been scanned Scan process 'TrustedInstaller.exe' - '1' Module(s) have been scanned Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned Scan process 'WmiPrvSE.exe' - '1' Module(s) have been scanned Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'wmpnetwk.exe' - '1' Module(s) have been scanned Scan process 'mobsync.exe' - '1' Module(s) have been scanned Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned Scan process 'WUDFHost.exe' - '1' Module(s) have been scanned Scan process 'SearchIndexer.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'StarWindServiceAE.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'LVPrcSrv.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'COCIManager.exe' - '1' Module(s) have been scanned Scan process 'ehmsas.exe' - '1' Module(s) have been scanned Scan process 'ehtray.exe' - '1' Module(s) have been scanned Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned Scan process 'Skype.exe' - '1' Module(s) have been scanned Scan process 'sidebar.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'zlclient.exe' - '0' Module(s) have been scanned Scan process 'realsched.exe' - '1' Module(s) have been scanned Scan process 'Quickcam.exe' - '1' Module(s) have been scanned Scan process 'rundll32.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'MSASCui.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'taskeng.exe' - '1' Module(s) have been scanned Scan process 'dwm.exe' - '1' Module(s) have been scanned Scan process 'taskeng.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'rundll32.exe' - '1' Module(s) have been scanned Scan process 'vsmon.exe' - '0' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'SLsvc.exe' - '1' Module(s) have been scanned Scan process 'audiodg.exe' - '0' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'nvvsvc.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsm.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'wininit.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 58 processes with 58 modules were scanned Starting master boot sector scan: Start scanning boot sectors: Starting to scan executable files (registry). The registry was scanned ( '33' files ). Starting the file scan: Begin scan in 'C:\' C:\hiberfil.sys [WARNING] The file could not be opened! [NOTE] This file is a Windows system file. [NOTE] This file cannot be opened for scanning. C:\pagefile.sys [WARNING] The file could not be opened! [NOTE] This file is a Windows system file. [NOTE] This file cannot be opened for scanning. C:\Users\Schatzbär\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X3JW6M3W\zaSetup_80_298_000_en[1].exe [0] Archive type: ZIP SFX (self extracting) --> SWITCHUNINST_44ZONE LABS.EXE [1] Archive type: RSRC --> WINDOWS6.0-KB929547-V2-X64.MSU [1] Archive type: CAB (Microsoft) --> Windows6.0-KB929547-v2-x64.cab [WARNING] No further files can be extracted from this archive. The archive will be closed C:\Windows\System32\drivers\kbdqguqw.sys [DETECTION] Contains recognition pattern of the RKIT/Agent.483856 root kit C:\Windows\System32\drivers\sptd.sys [WARNING] The file could not be opened! Begin scan in 'E:\' Begin scan in 'F:\' <Downloads> Begin scan in 'G:\' <Sonstiges> G:\Sicheung C\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1033-7B44-A90000000001}\Data1.cab [0] Archive type: CAB (Microsoft) --> usa03.ths [WARNING] The file could not be written! --> CP1258.TXT [WARNING] No further files can be extracted from this archive. The archive will be closed [WARNING] No further files can be extracted from this archive. The archive will be closed Beginning disinfection: C:\Windows\System32\drivers\kbdqguqw.sys [DETECTION] Contains recognition pattern of the RKIT/Agent.483856 root kit [WARNING] An error has occurred and the file was not deleted. ErrorID: 26004 [WARNING] The source file could not be found. [NOTE] Attempting to perform action using the ARK library. [WARNING] Error in ARK library [NOTE] The file is scheduled for deleting after reboot. End of the scan: Sonntag, 12. April 2009 20:29 Used time: 308:08:24 Hour(s) The scan has been done completely. 32693 Scanned directories 460090 Files were scanned 1 Viruses and/or unwanted programs were found 0 Files were classified as suspicious 0 files were deleted 0 Viruses and unwanted programs were repaired 0 Files were moved to quarantine 0 Files were renamed 3 Files cannot be scanned 460086 Files not concerned 2169 Archives were scanned 8 Warnings 3 Notes 75927 Objects were scanned with rootkit scan 0 Hidden objects were found 2.cclean durchlaufen lassen und auch die Registry Fehler behoben. Hat sich bis auf einen Fehler alles beheben lassen. Nur einer will nicht weg gehen, hab es schon fünf mal versucht. 3. Malwarebytes Anti Malware durchlaufen lassen, mit folgendem Report: Malwarebytes' Anti-Malware 1.36 Datenbank Version: 1971 Windows 6.0.6001 Service Pack 1 12.04.2009 20:45:08 mbam-log-2009-04-12 (20-45-08).txt Scan-Methode: Vollständiger Scan (C:\|E:\|F:\|G:\|) Durchsuchte Objekte: 217986 Laufzeit: 1 hour(s), 59 minute(s), 37 second(s) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) 4.HiJackThis durchlaufen lassen mit diesem Report: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:52:42, on 12.04.2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Windows\System32\rundll32.exe C:\Program Files\Logitech\QuickCam\Quickcam.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Windows Sidebar\sidebar.exe G:\Skype\Phone\Skype.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\System32\mobsync.exe C:\Windows\system32\conime.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [Skype] "G:\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: Logitech . Produktregistrierung.lnk = C:\Program Files\Logitech\QuickCam\eReg.exe O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O13 - Gopher Prefix: O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe -- End of file - 6183 bytes 5. Programme auf meinem System abti uGuru Adobe Flash Player 10 Plugin Adobe Reader 9 - Deutsch Adobe Shockwave Player 11.5 Apple Software Update Avira AntiVir Personal - Free Antivirus CCleaner (remove only) Choice Guard Hattrick Organizer (remove only) HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Java(TM) 6 Update 13 Logitech QuickCam Logitech QuickCam-Treiberpaket Malwarebytes' Anti-Malware Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 SP1 Microsoft Office PowerPoint Viewer 2003 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Mozilla Firefox (3.0.8) MSVCRT NVIDIA Drivers NVIDIA PhysX Opera 9.64 QuickTime RealPlayer Security Update for CAPICOM (KB931906) Security Update for CAPICOM (KB931906) Spybot - Search & Destroy VC 9.0 Runtime VC 9.0 Runtime VLC media player 0.9.8a Windows Live Anmelde-Assistent Windows Live Call Windows Live Communications Platform Windows Live Essentials Windows Live Essentials Windows Live Messenger WinRAR ZoneAlarm Hoffe ich hab an alles gedacht und ihr könnt mir helfen. Gruß Manuel |
|
13.04.2009, 09:49
| #2 |
  | RKIT/Agent.483856 lässt sich nicht löschen! Hallo und
__________________ 1.) Deinstalliere:
2.) ZHPDiag von Nicolas Coolman 
3.) GMER - Rootkit Detection
ciao, andreas
__________________ |
|
| Themen zu RKIT/Agent.483856 lässt sich nicht löschen! |
| 0 bytes, anti malware, antivir, antivir guard, audiodg.exe, avgnt.exe, bho, bildschirm, c.exe, content.ie5, defender, desktop, dwm.exe, error, fehler, firefox, flash player, internet, internet explorer, jusched.exe, logon.exe, manuel, monitor, moved, nt.dll, plug-in, problem, registrierungsschlüssel, rundll, safer networking, security, service pack 1, services.exe, skype.exe, software, svchost.exe, trick, trojaner, virus, will nicht, windows, windows defender, windows sidebar, windows system, wuauclt.exe |
Linear-Darstellung
