Rootkit entfernen? pkslzz.sys

TheFiddler

Avira hat einiges gefunden, aber entfernen kann ich damit nichts oder?
Hier die Ergebnisse:


Avira AntiRootkit Tool (1.1.0.1)

========================================================================================================
- Scan started Donnerstag, 17. Dezember 2009 - 15:50:43
========================================================================================================

--------------------------------------------------------------------------------------------------------
Configuration:
--------------------------------------------------------------------------------------------------------
- [X] Scan files
- [X] Scan registry
- [X] Scan processes
- [ ] Fast scan
- Working disk total size : 232.88 GB
- Working disk free size : 196.37 GB (84 %)
--------------------------------------------------------------------------------------------------------

Results:
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\pkslzz -> type
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\pkslzz -> start
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\pkslzz -> errorcontrol
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\pkslzz -> group
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\pkslzz -> qe6a7ri2
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\pkslzz -> i3llvg5
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet002\Services\pkslzz -> type
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet002\Services\pkslzz -> start
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet002\Services\pkslzz -> errorcontrol
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet002\Services\pkslzz -> group
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet002\Services\pkslzz -> qe6a7ri2
Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet002\Services\pkslzz -> i3llvg5

--------------------------------------------------------------------------------------------------------
Files: 0/77482
Registry items: 12/308981
Processes: 0/63
Scan time: 00:03:57
--------------------------------------------------------------------------------------------------------
Active processes:
- rnvffgem.exe (PID 4812) (Avira AntiRootkit Tool)
- System (PID 4)
- smss.exe (PID 492)
- csrss.exe (PID 548)
- winlogon.exe (PID 572)
- services.exe (PID 616)
- lsass.exe (PID 628)
- svchost.exe (PID 924)
- svchost.exe (PID 968)
- svchost.exe (PID 1036)
- svchost.exe (PID 1120)
- svchost.exe (PID 1252)
- svchost.exe (PID 1288)
- aswUpdSv.exe (PID 1464)
- AAWService.exe (PID 1496)
- ashServ.exe (PID 1552)
- explorer.exe (PID 1560)
- ehtray.exe (PID 1760)
- jusched.exe (PID 1772)
- issch.exe (PID 1800)
- SOUNDMAN.EXE (PID 1832)
- DMXLauncher.exe (PID 1840)
- DrgToDsc.exe (PID 1852)
- ashDisp.exe (PID 1860)
- hpwuSchd2.exe (PID 376)
- iTunesHelper.exe (PID 348)
- RoxWatchTray9.exe (PID 552)
- ctfmon.exe (PID 152)
- GoogleToolbarNotifier.exe (PID 296)
- msmsgs.exe (PID 868)
- spoolsv.exe (PID 1344)
- hpqtra08.exe (PID 1388)
- GoogleCrashHandler.exe (PID 1712)
- svchost.exe (PID 2252)
- AppleMobileDeviceService.exe (PID 2288)
- mDNSResponder.exe (PID 2308)
- ehrecvr.exe (PID 2340)
- ehSched.exe (PID 2384)
- svchost.exe (PID 2488)
- jqs.exe (PID 2564)
- svchost.exe (PID 2644)
- firefox.exe (PID 2704)
- svchost.exe (PID 2940)
- svchost.exe (PID 3300)
- svchost.exe (PID 3312)
- mcrdsvc.exe (PID 3412)
- ashMaiSv.exe (PID 3888)
- unsecapp.exe (PID 3896)
- ashWebSv.exe (PID 4000)
- wmiprvse.exe (PID 4056)
- ehmsas.exe (PID 2124)
- iPodService.exe (PID 408)
- dllhost.exe (PID 2364)
- alg.exe (PID 3512)
- CPSHelpRunner.exe (PID 1748)
- hpqste08.exe (PID 4124)
- AAWTray.exe (PID 1788)
- wuauclt.exe (PID 3356)
- msiexec.exe (PID 5440)
- avguard.exe (PID 4208)
- sched.exe (PID 1892)
- avgnt.exe (PID 5332)
- avirarkd.exe (PID 5228)
========================================================================================================
- Scan finished Donnerstag, 17. Dezember 2009 - 15:54:41
========================================================================================================


Hoffe, es hilft