![]() |
|
Plagegeister aller Art und deren Bekämpfung: Ich weiß nicht was mit meinen Antiviren progs los ist.Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #4 |
![]() ![]() | ![]() Ich weiß nicht was mit meinen Antiviren progs los ist. So Hab nun rKILL verwendet erstmal alels still. CCleaner laufen lassen Malwarebytes und zuletzt RSIT Hier der LogFile Logfile of random's system information tool 1.06 (written by random/random) Run by *****at 2010-02-27 13:22:00 Microsoft Windows XP Home Edition Service Pack 3 System drive C: has 8 GB (7%) free of 120 GB Total RAM: 1023 MB (61% free) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:22:06, on 27.02.2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\Avira\AntiVir Desktop\sched.exe C:\Programme\Avira\AntiVir Desktop\avguard.exe C:\Programme\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\libusbd-nt.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\AGRSMMSG.exe C:\Programme\Avira\AntiVir Desktop\avgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\explorer.exe C:\Programme\Avira\AntiVir Desktop\avscan.exe D:\Programme\Trend Micro\HijackThis\HijackThis.exe C:\Dokumente und Einstellungen\*****\Desktop\RSIT.exe D:\Programme\Trend Micro\HijackThis\*****.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = ****://www.google.de/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = ****=127.0.0.1:5555 O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [yvhcmrib] C:\Dokumente und Einstellungen\*****t\Lokale Einstellungen\Anwendungsdaten\yxlpvg\iffrsftav.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [yvhcmrib] C:\Dokumente und Einstellungen\*****\Lokale Einstellungen\Anwendungsdaten\yxlpvg\iffrsftav.exe O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - ****://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.9.113.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) -****p://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - h****s://www.battlefieldheroes.com/static/updater/BFHUpdater_4.0.21.0.cab O16 - DPF: {C212D449-8B3C-41F2-BD9A-047BD770550F} (Perparer Class) - ****://www.fiaa.eu/OPLauncher.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - ****p://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Futuremark SystemInfo) - ****://service.futuremark.com/gom/receiver/tc/FMSI.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - ****://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - ****://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - Unknown owner - D:\Programme\MAGIX\Common\Database\bin\fbserver.exe (file missing) O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Programme\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - ****://libusb-win32.sourceforge.net - C:\WINDOWS\system32\libusbd-nt.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 4514 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2004-06-29 88363] "avgnt"=C:\Programme\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153] "yvhcmrib"=C:\Dokumente und Einstellungen\*****\Lokale Einstellungen\Anwendungsdaten\yxlpvg\iffrsftav.exe [2010-02-26 278784] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360] "msnmsgr"=C:\Programme\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883840] "yvhcmrib"=C:\Dokumente und Einstellungen\*****\Lokale Einstellungen\Anwendungsdaten\yxlpvg\iffrsftav.exe [2010-02-26 278784] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC] C:\Programme\ATI Technologies\ATI.ACE\cli.exe [2006-01-02 45056] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] C:\Programme\Windows Live\Messenger\msnmsgr.exe [2009-07-26 3883840] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer] D:\Programme\Spybot - Search & Destroy\TeaTimer.exe [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] C:\WINDOWS\system32\Ati2evxx.dll [2006-05-03 61440] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=323 "NoDriveAutoRun"=67108863 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"= "HonorAutoRunSetting"= "NoDriveAutoRun"= "NoDrives"= [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Programme\Messenger\msmsgs.exe"="C:\Programme\Messenger\msmsgs.exe:*:Enabled:Windows Messenger" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "D:\Programme\Steam\SteamApps\tsgt_malarkey\half-life 2 deathmatch\hl2.exe"="D:\Programme\Steam\SteamApps\tsgt_malarkey\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2" "D:\Programme\Steam\SteamApps\tsgt_malarkey\counter-strike source\hl2.exe"="D:\Programme\Steam\SteamApps\tsgt_malarkey\counter-strike source\hl2.exe:*:Enabled:hl2" "D:\Programme\Steam\SteamApps\tsgt_malarkey\day of defeat source\hl2.exe"="D:\Programme\Steam\SteamApps\tsgt_malarkey\day of defeat source\hl2.exe:*:Enabled:hl2" "D:\Programme\Microsoft Games\Age of Empires III\age3.exe"="D:\Programme\Microsoft Games\Age of Empires III\age3.exe:*:Enabled:Age of Empires 3" "C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test" "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NexonUS\NGM\NGM.exe"="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NexonUS\NGM\NGM.exe:*:Enabled:Nexon Game Manager" "D:\Programme\Steam\Steam.exe"="D:\Programme\Steam\Steam.exe:*:Enabled:Steam" "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NexonEU\NGM\NGM.exe"="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NexonEU\NGM\NGM.exe:*:Enabled:Nexon Game Manager" "C:\Programme\ATI Technologies\ATI.ACE\CLI.exe"="C:\Programme\ATI Technologies\ATI.ACE\CLI.exe:* ![]() "C:\Dokumente und Einstellungen\*****\Lokale Einstellungen\Anwendungsdaten\Dyyno Receiver\DPPM.exe"="C:\Dokumente und Einstellungen\*****\Lokale Einstellungen\Anwendungsdaten\Dyyno Receiver\DPPM.exe:*:Enabled ![]() "C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper" "C:\Programme\Java\jre1.6.0_03\launch4j-tmp\JDownloader.exe"="C:\Programme\Java\jre1.6.0_03\launch4j-tmp\JDownloader.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "D:\Programme\Combat Arms\CombatArms.exe"="D:\Programme\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe" "D:\Programme\Combat Arms\Engine.exe"="D:\Programme\Combat Arms\Engine.exe:*Enabled:Engine.exe" "C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe"="C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe:*:Enabled:NEXON_EU_Download er_Engine" "D:\Programme\Combat Arms EU\CombatArms.exe"="D:\Programme\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe" "D:\Programme\Combat Arms EU\Engine.exe"="D:\Programme\Combat Arms EU\Engine.exe:*Enabled:Engine.exe" "C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA" "C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB" "D:\Programme\Combat Arms EU\NMService.exe"="D:\Programme\Combat Arms EU\NMService.exe:*:Enabled:Nexon Messenger Core" "C:\Programme\Java\jre6\bin\javaw.exe"="C:\Programme\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Programme\Java\jre6\bin\java.exe"="C:\Programme\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary" "C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "D:\Programme\gamigo\heroes in the sky\HIS.exe"="D:\Programme\gamigo\heroes in the sky\HIS.exe:*:Enabled:his" "C:\Programme\ICQ6.5\ICQ.exe"="C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6" "D:\Programme\EA Games\Battlefield 2\BF2.exe"="D:\Programme\EA Games\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2" "D:\Programme\KONAMI\Pro Evolution Soccer 2010\pes2010.exe"="D:\Programme\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010" "D:\Programme\Skype\Phone\Skype.exe"="D:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "D:\Programme\NCsoft\Exteel\System\Exteel.exe"="D:\Programme\NCsoft\Exteel\System\Exteel.exe:*:Enabled:Exteel" "D:\Combat Arms\CombatArms.exe"="D:\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe" "D:\Combat Arms\Engine.exe"="D:\Combat Arms\Engine.exe:*Enabled:Engine.exe" "D:\Combat Arms EU\CombatArms.exe"="D:\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe" "D:\Combat Arms EU\Engine.exe"="D:\Combat Arms EU\Engine.exe:*Enabled:Engine.exe" "C:\Programme\Windows Live\Messenger\wlcsdk.exe"="C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call" "C:\Programme\MSN Messenger\livecall.exe"="C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "D:\Programme\Combat Arms\CombatArms.exe"="D:\Programme\Combat Arms\CombatArms.exe:*Enabled:CombatArms.exe" "D:\Programme\Combat Arms\Engine.exe"="D:\Programme\Combat Arms\Engine.exe:*Enabled:Engine.exe" "D:\Programme\Combat Arms EU\CombatArms.exe"="D:\Programme\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe" "D:\Programme\Combat Arms EU\Engine.exe"="D:\Programme\Combat Arms EU\Engine.exe:*Enabled:Engine.exe" "C:\Programme\Windows Live\Messenger\msnmsgr.exe"="C:\Programme\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" ======List of files/folders created in the last 1 months====== 2010-02-27 13:22:00 ----D---- C:\rsit 2010-02-24 20:09:31 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$ 2010-02-15 18:21:06 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$ 2010-02-15 18:20:36 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$ 2010-02-14 13:53:47 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$ 2010-02-14 13:53:41 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$ 2010-02-14 13:53:35 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$ 2010-02-14 13:53:30 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$ 2010-02-14 13:53:21 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$ 2010-02-14 13:52:42 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$ 2010-02-14 13:52:32 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$ 2010-02-06 12:04:28 ----A---- C:\WINDOWS\system32\SET27.tmp 2010-02-06 12:04:27 ----A---- C:\WINDOWS\system32\SET24.tmp 2010-02-06 12:04:25 ----A---- C:\WINDOWS\system32\SET22.tmp 2010-02-06 12:04:24 ----A---- C:\WINDOWS\system32\SET23.tmp 2010-02-06 12:04:22 ----A---- C:\WINDOWS\system32\SET20.tmp 2010-02-06 12:04:22 ----A---- C:\WINDOWS\system32\SET1F.tmp 2010-02-06 12:04:17 ----A---- C:\WINDOWS\system32\SET29.tmp 2010-01-31 10:27:04 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\KONAMI ======List of files/folders modified in the last 1 months====== 2010-02-27 12:56:25 ----D---- C:\WINDOWS 2010-02-27 12:54:41 ----D---- C:\WINDOWS\temp 2010-02-27 12:36:13 ----D---- C:\WINDOWS\Prefetch 2010-02-27 12:24:18 ----D---- C:\WINDOWS\system32 2010-02-27 12:24:18 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI 2010-02-27 12:23:12 ----D---- C:\WINDOWS\system32\CatRoot2 2010-02-27 12:14:05 ----D---- C:\Dokumente und Einstellungen 2010-02-27 12:12:09 ----N---- C:\WINDOWS\SchedLgU.Txt 2010-02-25 10:58:43 ----SHD---- C:\WINDOWS\Installer 2010-02-24 20:10:25 ----HD---- C:\WINDOWS\inf 2010-02-24 20:10:24 ----RSHDC---- C:\WINDOWS\system32\dllcache 2010-02-24 20:10:23 ----D---- C:\WINDOWS\ie8updates 2010-02-24 20:09:42 ----HD---- C:\WINDOWS\$hf_mig$ 2010-02-21 20:03:38 ----A---- C:\WINDOWS\NeroDigital.ini 2010-02-20 11:47:08 ----D---- C:\Dokumente und Einstellungen\*****\Anwendungsdaten\Skype 2010-02-17 10:04:21 ----RSH---- C:\boot.ini 2010-02-17 10:04:21 ----A---- C:\WINDOWS\win.ini 2010-02-17 10:04:21 ----A---- C:\WINDOWS\system.ini 2010-02-15 18:20:38 ----D---- C:\WINDOWS\system32\drivers 2010-02-15 13:09:58 ----D---- C:\WINDOWS\Debug 2010-02-09 16:01:56 ----D---- C:\Programme\Google 2010-02-09 15:47:44 ----HD---- C:\Programme\InstallShield Installation Information 2010-02-09 15:46:11 ----RSD---- C:\WINDOWS\Fonts 2010-02-07 15:51:14 ----D---- C:\WINDOWS\system32\CatRoot 2010-02-06 16:19:21 ----D---- C:\Programme\Microsoft Silverlight 2010-02-06 15:50:15 ----D---- C:\Programme\Internet Explorer 2010-02-01 20:26:20 ----A---- C:\WINDOWS\system32\MRT.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R1 AmdK8;AMD-Prozessortreiber; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43520] R1 avgio;avgio; \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys [] R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104] R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys [] R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520] R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-07 56816] R2 tmcomm;tmcomm; \??\C:\WINDOWS\system32\drivers\tmcomm.sys [] R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2004-06-29 1268204] R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-09-21 2278784] R3 Arp1394;1394-ARP-Clientprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800] R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-05-03 1540608] R3 FETNDIS;VIA PCI 10/100-MBit/s-Fast Ethernetadapter-NT-Treiber; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165] R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2008-02-15 25280] R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1; C:\WINDOWS\system32\drivers\libusb0.sys [2005-03-09 33792] R3 NIC1394;1394-Netzwerktreiber; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824] R3 ovt519;D-Link VGA Webcam; C:\WINDOWS\System32\Drivers\ov519vid.sys [2003-10-15 174530] R3 usbaudio;USB-Audiotreiber (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032] R3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128] R3 usbehci;Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208] R3 usbhub;USB2-aktivierter Hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520] R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608] S3 agxbcel6;agxbcel6; C:\WINDOWS\system32\drivers\agxbcel6.sys [] S3 catchme;catchme; \??\C:\DOKUME~1\*****\LOKALE~1\Temp\catchme.sys [] S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024] S3 cpuz130;cpuz130; \??\C:\DOKUME~1\*****\LOKALE~1\Temp\cpuz130\cpuz_x32.sys [] S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys [] S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys [] S3 HidUsb;Microsoft HID Class-Treiber; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504] S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248] S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880] S3 PCANDIS5;PCANDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\PCANDIS5.SYS [] S3 PRISM_A02;Sinus 154 stick; C:\WINDOWS\system32\DRIVERS\PRISMA02.sys [] S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136] S3 streamip;BDA-IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232] S3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856] S3 usbscan;USB-Scannertreiber; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104] S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368] S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528] S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200] S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys [] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AntiVirSchedulerService;Avira AntiVir Planer; C:\Programme\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289] R2 AntiVirService;Avira AntiVir Guard; C:\Programme\Avira\AntiVir Desktop\avguard.exe [2009-08-05 185089] R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-05-03 413696] R2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2009-07-25 153376] R2 libusbd;LibUsb-Win32 - Daemon, Version 0.1.10.1; C:\WINDOWS\system32\libusbd-nt.exe [2005-03-09 18944] R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-08-09 75064] R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336] S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-05-03 520192] S2 gupdate;Google Update Service (gupdate); C:\Programme\Google\Update\GoogleUpdate.exe [2010-01-09 135664] S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312] S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632] S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; D:\Programme\MAGIX\Common\Database\bin\fbserver.exe [] S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104] S3 IDriverT;InstallDriver Table Manager; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632] S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664] S3 ose;Office Source Engine; C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136] S3 usprserv;User Privilege Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336] S3 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media Player\WMPNetwk.exe [2006-10-24 920576] S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096] -----------------EOF----------------- |
Themen zu Ich weiß nicht was mit meinen Antiviren progs los ist. |
aktiviere, aktivieren, antivir, antiviren, avira, avira aktivieren, avira antivir, entfernen, fake, firewall, firewall ausgeschaltet, hijack, hijack log, infiziert, infiziert., log, nachricht, natürlich, nutzen, nötig, passwort, plötzlich, progs, rechner, rechts, security, starten, versuche |