Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Probleme nach Entfernen von Security Tool mit Combofix.exe

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Alt 25.10.2009, 16:05   #3
nagano
 
Probleme nach Entfernen von Security Tool mit Combofix.exe - Standard

Probleme nach Entfernen von Security Tool mit Combofix.exe



Danke für die Hilfe. Hier die log.txt
Code:
ATTFilter
Logfile of random's system information tool 1.06 (written by random/random)
Run by Nicolas at 2009-10-25 15:44:42
Microsoft® Windows Vista™ Home Premium  Service Pack 1
System drive C: has 6 GB (16%) free of 35 GB
Total RAM: 2045 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:45:04, on 25.10.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\System Control Manager\MGSysCtrl.exe
C:\Windows\System32\rundll32.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Games\Magic Workstation\MagicWorkstation.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\wuauclt.exe
D:\Downloads\RSIT.exe
C:\Program Files\trend micro\Nicolas.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = eumex.ip;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: (no name) -  - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files\System Control Manager\MGSysCtrl.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-21-3525475200-3938401398-494889494-1002\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'postgres')
O4 - HKUS\S-1-5-21-3525475200-3938401398-494889494-1002\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'postgres')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: HP Sammelmappe - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Intelligente Auswahl - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: SCM Driver Daemon (NishService) - Unknown owner - C:\Program Files\System Control Manager\edd.exe
O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--
End of file - 7330 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{08A33176-205D-4938-82A2-29FC9718E6CB}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]
HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 509328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-06-01 962808]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"MGSysCtrl"=C:\Program Files\System Control Manager\MGSysCtrl.exe [2007-09-07 561152]
"NvSvc"=C:\Windows\system32\nvsvc.dll [2007-06-20 86016]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2007-06-20 8462336]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2007-06-20 81920]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2008-07-10 116040]
"Windows Mobile Device Center"=C:\Windows\WindowsMobile\wmdc.exe [2007-05-31 648072]
"ITSecMng"=C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [2007-09-28 75136]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-01-19 1233920]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ6\ICQ.exe silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe -onlytray []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2008-05-27 413696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Veoh]
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe /VeohHide []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth Manager.lnk]
C:\PROGRA~1\Toshiba\BLUETO~1\TosBtMng.exe [2008-02-22 2938184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Nicolas^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 2.3.lnk]
C:\PROGRA~1\OPENOF~1.3\program\QUICKS~1.EXE [2007-08-17 393216]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2009-10-25 15:44:42 ----D---- C:\rsit
2009-10-25 15:44:42 ----D---- C:\Program Files\trend micro
2009-10-21 16:53:14 ----D---- C:\Windows\temp
2009-10-21 16:53:12 ----A---- C:\ComboFix.txt
2009-10-21 16:37:50 ----A---- C:\log.txt
2009-10-21 16:27:20 ----A---- C:\Windows\zip.exe
2009-10-21 16:27:20 ----A---- C:\Windows\SWXCACLS.exe
2009-10-21 16:27:20 ----A---- C:\Windows\SWSC.exe
2009-10-21 16:27:20 ----A---- C:\Windows\SWREG.exe
2009-10-21 16:27:20 ----A---- C:\Windows\sed.exe
2009-10-21 16:27:20 ----A---- C:\Windows\PEV.exe
2009-10-21 16:27:20 ----A---- C:\Windows\NIRCMD.exe
2009-10-21 16:27:20 ----A---- C:\Windows\grep.exe
2009-10-21 16:27:15 ----D---- C:\Windows\ERDNT
2009-10-19 22:34:58 ----D---- C:\Users\Nicolas\AppData\Roaming\skypePM
2009-10-19 22:30:32 ----D---- C:\Users\Nicolas\AppData\Roaming\Skype
2009-10-19 22:30:05 ----D---- C:\Program Files\Common Files\Skype
2009-10-19 22:30:04 ----RD---- C:\Program Files\Skype
2009-10-19 22:29:59 ----D---- C:\ProgramData\Skype
2009-10-19 22:20:04 ----D---- C:\Program Files\TeamViewer
2009-10-14 10:57:52 ----A---- C:\Windows\system32\msv1_0.dll
2009-10-14 10:57:46 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-10-14 10:57:46 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-10-14 10:56:42 ----A---- C:\Windows\system32\EncDec.dll
2009-10-14 10:56:41 ----A---- C:\Windows\system32\psisdecd.dll
2009-10-14 10:56:10 ----A---- C:\Windows\system32\mshtml.dll
2009-10-14 10:56:09 ----A---- C:\Windows\system32\ieframe.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\wininet.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\urlmon.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\occache.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\msfeedssync.exe
2009-10-14 10:56:08 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\msfeeds.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\jsproxy.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\ieUnatt.exe
2009-10-14 10:56:08 ----A---- C:\Windows\system32\ieui.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\iesysprep.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\iesetup.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\iertutil.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\iernonce.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\iepeers.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\iedkcs32.dll
2009-10-14 10:56:08 ----A---- C:\Windows\system32\ie4uinit.exe
2009-10-14 10:54:41 ----A---- C:\Windows\system32\msasn1.dll
2009-10-14 10:54:39 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2009-10-10 18:15:46 ----D---- C:\Users\Nicolas\AppData\Roaming\TeamViewer
2009-10-04 23:27:07 ----D---- C:\Program Files\PokerStrategy.com
2009-10-03 00:47:27 ----N---- C:\Windows\system32\MpSigStub.exe
2009-10-02 19:46:53 ----A---- C:\Windows\system32\wdigest.dll
2009-10-02 19:46:53 ----A---- C:\Windows\system32\kerberos.dll
2009-10-02 19:46:52 ----A---- C:\Windows\system32\secur32.dll
2009-10-02 19:46:52 ----A---- C:\Windows\system32\schannel.dll
2009-10-02 19:46:52 ----A---- C:\Windows\system32\lsass.exe
2009-10-02 19:46:52 ----A---- C:\Windows\system32\lsasrv.dll

======List of files/folders modified in the last 1 months======

2009-10-25 15:44:42 ----D---- C:\Program Files
2009-10-25 15:18:53 ----D---- C:\Windows\System32
2009-10-25 15:18:53 ----D---- C:\Windows\inf
2009-10-25 15:18:53 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-10-25 15:16:02 ----SHD---- C:\Windows\Installer
2009-10-23 13:53:18 ----SHD---- C:\System Volume Information
2009-10-23 03:25:56 ----D---- C:\ProgramData
2009-10-23 03:09:10 ----A---- C:\ProgramData\sortedcards.tmp
2009-10-23 03:08:12 ----A---- C:\ProgramData\playercachelines.tmp
2009-10-22 01:12:48 ----D---- C:\Users\Nicolas\AppData\Roaming\vlc
2009-10-22 00:43:53 ----D---- C:\Users\Nicolas\AppData\Roaming\dvdcss
2009-10-21 16:59:07 ----D---- C:\Program Files\Mozilla Firefox
2009-10-21 16:53:14 ----D---- C:\Windows
2009-10-21 16:51:39 ----A---- C:\Windows\system.ini
2009-10-21 16:49:36 ----D---- C:\Windows\system32\drivers
2009-10-21 16:49:36 ----D---- C:\Windows\AppPatch
2009-10-21 16:49:35 ----D---- C:\Program Files\Common Files
2009-10-21 16:37:09 ----D---- C:\Windows\Tasks
2009-10-21 16:35:17 ----D---- C:\$Recycle.Bin
2009-10-21 16:27:07 ----D---- C:\Windows\Prefetch
2009-10-21 16:06:03 ----D---- C:\Windows\system32\Tasks
2009-10-20 19:13:03 ----D---- C:\Program Files\Full Tilt Poker
2009-10-19 15:59:29 ----AD---- C:\ProgramData\TEMP
2009-10-19 15:57:51 ----D---- C:\ProgramData\Apple Computer
2009-10-19 15:48:03 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-19 15:48:03 ----D---- C:\Windows\Downloaded Installations
2009-10-19 15:42:09 ----D---- C:\Program Files\DivX
2009-10-17 07:03:40 ----D---- C:\Windows\Minidump
2009-10-15 09:56:50 ----D---- C:\Windows\winsxs
2009-10-15 09:54:40 ----D---- C:\Windows\Microsoft.NET
2009-10-15 09:54:33 ----RSD---- C:\Windows\assembly
2009-10-15 09:46:42 ----D---- C:\Windows\system32\catroot
2009-10-15 09:44:44 ----D---- C:\Program Files\Windows Mail
2009-10-15 09:44:43 ----D---- C:\Windows\ehome
2009-10-15 09:44:41 ----D---- C:\Windows\system32\migration
2009-10-15 09:44:40 ----D---- C:\Program Files\Internet Explorer
2009-10-15 09:43:00 ----D---- C:\Windows\system32\catroot2
2009-10-02 19:01:57 ----A---- C:\Windows\system32\mrt.exe
2009-10-01 11:12:13 ----D---- C:\Windows\ModemLogs

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys [2009-02-13 11608]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2009-06-03 96104]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-06-10 28520]
R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2007-10-02 64128]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2009-08-05 55656]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2006-11-28 1161888]
R3 CmBatt;Treiber für Microsoft-ACPI-Kontrollmethodenkompatible Batterie; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-19 14208]
R3 enecir;ENE CIR Receiver; C:\Windows\system32\DRIVERS\enecir.sys [2007-03-07 32256]
R3 HdAudAddService;Microsoft 1.1 UAA-Funktionstreiber für High Definition Audio-Dienst; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 MGHwCtrl;MGHwCtrl; \??\C:\Windows\system32\drivers\MGHwCtrl.sys [2006-12-22 19456]
R3 NETw4v32;Intel(R) Wireless WiFi Link Adaptertreiber für Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-04-29 2219520]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-06-20 7563744]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2008-01-19 8192]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-06-25 84480]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-19 88576]
R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2006-10-10 41600]
S3 a6k1x9mj;a6k1x9mj; C:\Windows\system32\drivers\a6k1x9mj.sys []
S3 AVMUNET;Eumex 300 IP; C:\Windows\system32\DRIVERS\avmunet.sys [2005-04-18 15104]
S3 catchme;catchme; \??\C:\Users\Nicolas\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Microsoft Kernel-DRM-Audioentschlüsselung; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys []
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Proxy für Streaming Clock; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Proxy für Streaming Quality Manager; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2008-02-15 131712]
S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2007-11-29 36608]
S3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2008-01-31 74240]
S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]
S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys [2008-01-22 54144]
S3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2007-10-18 41856]
S3 usb_rndisx;USB-RNDIS-Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2008-01-19 15872]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2008-02-18 30464]
S3 usbscan;USB-Scannertreiber; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 usbvideo;USB-Videogerät (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]
S3 WINUSB;WinUsb-Treiber; C:\Windows\system32\DRIVERS\WinUSB.SYS [2008-01-19 31616]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-19 39936]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2006-10-05 9216]
R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-06-10 108289]
R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-05 185089]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-07-10 116040]
R2 Bonjour Service;Bonjour-Dienst; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-06-01 222968]
R2 NishService;SCM Driver Daemon; C:\Program Files\System Control Manager\edd.exe [2007-08-23 61440]
R2 pgsql-8.3;PostgreSQL Database Server 8.3; C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe [2009-03-13 65536]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2008-06-24 66872]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared Files\RichVideo.exe [2006-12-19 272024]
R2 TeamViewer4;TeamViewer 4; C:\Program Files\TeamViewer\Version4\TeamViewer_Service.exe [2009-10-07 185640]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-09-28 128360]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2008-06-10 87288]

-----------------EOF-----------------
         
__________________

 

Themen zu Probleme nach Entfernen von Security Tool mit Combofix.exe
admin, avgnt.exe, components, content.ie5, dateien, dateien öffnen, einfach, entferne, entfernen, erkannt, fehlermeldung, firefox.exe, geladen, home premium, jusched.exe, keine dateien, langsam, löschen, markiert, nicht mehr, plagegeist, poste, posten, probleme, programdata, registrierungsschlüssel, richtlinie, security, security tool, service pack 1, skype.exe, start menu, suchlauf, system, tippen, tool, troja, trojaner, versucht, vista, windows-defender, zeilen, öffnen




Ähnliche Themen: Probleme nach Entfernen von Security Tool mit Combofix.exe


  1. Security Suite entfernen - ComboFix-Auswertung
    Plagegeister aller Art und deren Bekämpfung - 03.03.2011 (31)
  2. Security Tool lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 05.12.2010 (7)
  3. Firefox öffnet Links nicht (nach Problemen mit Security Tool)
    Log-Analyse und Auswertung - 27.11.2010 (0)
  4. Kann Security Tool trotz Anleitung nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 06.11.2010 (34)
  5. HiJackThis-Log (und weitere) nach Entfernen des "Security-Tool"
    Log-Analyse und Auswertung - 18.10.2010 (18)
  6. Mehrere Probleme nach Security Tool
    Plagegeister aller Art und deren Bekämpfung - 16.10.2010 (17)
  7. Security Tool lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 15.10.2010 (53)
  8. nach Security Tool eigenständiges öffnen v. webseiten und java
    Plagegeister aller Art und deren Bekämpfung - 04.10.2010 (21)
  9. Security Tool: sicher entfernen
    Plagegeister aller Art und deren Bekämpfung - 28.09.2010 (1)
  10. Logs nach Antimaleware doctor und Security Tool
    Log-Analyse und Auswertung - 26.09.2010 (21)
  11. Antimalware Doctor & Security Tool entfernt aber trotzdem Probleme
    Plagegeister aller Art und deren Bekämpfung - 09.09.2010 (23)
  12. Advanced Security Tool 2010 entfernen
    Anleitungen, FAQs & Links - 22.08.2010 (2)
  13. Security Tool lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 17.08.2010 (9)
  14. Security Tool, lässt sich einfach nicht entfernen !
    Mülltonne - 14.08.2010 (1)
  15. Win 7 Security Tool 2010 - Virus entfernen?
    Plagegeister aller Art und deren Bekämpfung - 30.04.2010 (2)
  16. SecurityTool / Security Tool entfernen
    Anleitungen, FAQs & Links - 22.02.2010 (2)
  17. Computer nach Infektion mit 'Security Tool' einfach nur langsam
    Plagegeister aller Art und deren Bekämpfung - 09.01.2010 (4)

Zum Thema Probleme nach Entfernen von Security Tool mit Combofix.exe - Danke für die Hilfe. Hier die log.txt Code: Alles auswählen Aufklappen ATTFilter Logfile of random's system information tool 1.06 (written by random/random) Run by Nicolas at 2009-10-25 15:44:42 Microsoft® Windows - Probleme nach Entfernen von Security Tool mit Combofix.exe...
Archiv
Du betrachtest: Probleme nach Entfernen von Security Tool mit Combofix.exe auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.