Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
img068438960802010.jpg.scr Troja?

img068438960802010.jpg.scr Troja?


Plagegeister aller Art und deren Bekämpfung: img068438960802010.jpg.scr Troja?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 2 von 4 1 2 34
Alt 15.05.2010, 15:39   #16
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


So hier der Log.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4103

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

15.05.2010 16:38:24
mbam-log-2010-05-15 (16-38-24).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|F:\|)
Durchsuchte Objekte: 322673
Laufzeit: 1 Stunde(n), 24 Minute(n), 21 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Alt 15.05.2010, 15:54   #17
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


Ach bevor ichs vergesse.

Was mache ich mit den dateien in der Malewarebytes-Quarantäne?
wenn ich die lösche sind sie nur von der Quarantäne gelöscht oder vom Rechner?
hab mir zwar den text oben durchgelesen aber man kann ja nie wissen :-D

Danke nochmal für die Hilfe^^
__________________
Alt 15.05.2010, 18:30   #18
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


Was mir gerade aufgefallen ist...

wenn ich im i-net surfe (z.b hier^^)
kommen ab und an klickgeräusche, wie als würde ich n fenster öffnen oder schließen.
hab mir mal sagen lassen das der Troja was in den Windows sounds hinterlässt.
Grund zur sorge?
oder kommt das von der seitenaktualisierung? (falls hier verwendet)

Ps: Die sounds sind eigentlich deaktiviert, und da hier keine bewegte-oder popupwerbung oder so ist.
ist das ja auch auszuschließen.


und nochmals für die hilfe
__________________
Alt 15.05.2010, 18:59   #19
videotuner
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


Zitat:
Zitat von GJM Beitrag anzeigen
mein Problem ist ich habe verdammt teure Lasershow dateien auf dem rechner
jetzt die frage muss alles runter???
dann wären so um die 4000 euro im Eimer und das sind nur die laser-show dateien.
Hast du schon mal was von ABSICHERN gehört? Heutzutage gibt es kleine handliche, meist rechteckige Teile, die man externe Festplatten nennt.

Alt 15.05.2010, 21:08   #20
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


@VideoTuner.....
Muss ich dir darauf antworten?
is eigentlich ziehmlich sinnlos dein komment -,-
aber trozdem
Ps:mit den shows is des sichern nicht so einfach wie mit nem bild
aber is jetzt eh zu spät...
@cosinus
wollte gerade mal wieder n Windowsupdate machen und musste feststellen das sich das Windows-Update zwar öffnen lässt aber die seite nicht geladen werden kann.
Absicht? oder is des eher schlecht?


Alt 16.05.2010, 19:01   #21
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


Zitat:
@VideoTuner.....
Muss ich dir darauf antworten?
is eigentlich ziehmlich sinnlos dein komment -,-
Nein der Videotuner hat da eindeutig recht oder betrachtest Du Backups als sinnlos??

Zitat:
wollte gerade mal wieder n Windowsupdate machen und musste feststellen das sich das Windows-Update zwar öffnen lässt aber die seite nicht geladen werden kann.
Absicht? oder is des eher schlecht?
Ist eigentlich nicht Sinn der Sache. Klappt das Winows-Update bei Dir mittlerweile wieder? Sonst müssten wir wohl nochmal mit GMER und OSAM ran.
__________________
--> img068438960802010.jpg.scr Troja?

Alt 16.05.2010, 21:01   #22
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


So war das nicht gemeint mit der antwort zu Videotuner.
Ich weis das er recht hat.
ist einfach n bissl spät sozusagen^^ und somit nutzlos für mich.
mitlerweile sind alle wichtigen Dateien sogar doppelt gesichert

Die Uptdates gehen immer noch nicht.
Einfach n Leeres Fenster und in der Mitte steht.
Die Seite konnte nicht geladen werden.


ach und bevor ichs vergesse...
wenn jetzt noch was gefunden wird muss ich die Externe platte auch wieder löschen?
hab ja letzt sicherungen gemacht.
Geändert von GJM (16.05.2010 um 21:10 Uhr)

Alt 16.05.2010, 22:02   #23
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


OSAM log.

Code:
ATTFilter
Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 22:57:56 on 16.05.2010

OS: Windows Vista Home Premium Edition Service Pack 2 (Build 6002), 32-bit
Default Browser: Mozilla Corporation Firefox 3.6.3

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"DivXControlPanelApplet.cpl" - "DivX, Inc." - C:\Windows\system32\DivXControlPanelApplet.cpl
"PhysX.cpl" - ? - C:\Windows\system32\PhysX.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"akywmzmu" (akywmzmu) - "Microsoft Corporation" - C:\Windows\system32\drivers\akywmzmu.sys  (Hidden registry entry, rootkit activity | File signed by Microsoft)
"avgntflt" (avgntflt) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\Windows\System32\DRIVERS\avipbb.sys
"AVM Eject" (avmeject) - "AVM Berlin" - C:\Windows\System32\drivers\avmeject.sys
"catchme" (catchme) - ? - C:\Users\GJM\AppData\Local\Temp\catchme.sys  (File not found)
"giveio" (giveio) - ? - C:\Windows\System32\giveio.sys  (File found, but it contains no detailed information)
"GMSIPCI" (GMSIPCI) - ? - E:\INSTALL\GMSIPCI.SYS  (File not found)
"IP in IP Tunnel Driver" (IpInIp) - ? - C:\Windows\System32\DRIVERS\ipinip.sys  (File not found)
"IPX Traffic Filter Driver" (NwlnkFlt) - ? - C:\Windows\System32\DRIVERS\nwlnkflt.sys  (File not found)
"IPX Traffic Forwarder Driver" (NwlnkFwd) - ? - C:\Windows\System32\DRIVERS\nwlnkfwd.sys  (File not found)
"Microsoft IntelliPoint Filter Driver" (Point32) - ? - C:\Windows\System32\DRIVERS\point32k.sys  (File not found)
"pgldqpow" (pgldqpow) - ? - C:\Users\GJM\AppData\Local\Temp\pgldqpow.sys  (Hidden registry entry, rootkit activity | File not found)
"Sentinel" (Sentinel) - ? - C:\Windows\System32\Drivers\SENTINEL.SYS
"speedfan" (speedfan) - "Windows (R) 2000 DDK provider" - C:\Windows\System32\speedfan.sys
"sptd" (sptd) - "Duplex Secure Ltd." - C:\Windows\System32\Drivers\sptd.sys  (File is exclusively opened, access blocked)
"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\Windows\System32\DRIVERS\ssmdrv.sys
"Symantec Network Security Intermediate Filter Service" (SymIM) - ? - C:\Windows\System32\DRIVERS\SymIM.sys  (File not found)
"SymIMMP" (SymIMMP) - ? - C:\Windows\System32\DRIVERS\SymIM.sys  (File not found)
"zlportio" (zlportio) - ? - C:\Program Files\MediaLas\Mamba Black DEMO\zlportio.sys  (File not found)

[Explorer]
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
{7D4D6379-F301-4311-BEBA-E26EB0561882} "{7D4D6379-F301-4311-BEBA-E26EB0561882}" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\Software\Classes\Protocols\Filter )-----
{807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{32505114-5902-49B2-880A-1F7738E5A384} "Data Page Plugable Protocal mso-offdap11 Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\Web Components\11\OWC11.DLL
{314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )-----
{AEB6717E-7E19-11d0-97EE-00C04FD91972} "{AEB6717E-7E19-11d0-97EE-00C04FD91972}" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? -   (File not found | COM-object registry key not found)
{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)
{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)
{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? -   (File not found | COM-object registry key not found)
{6A921E8A-C58C-4941-9E71-7946D9DCE941} "CSolidworkPropertyStore Class" - "Dassault Systèmes SolidWorks Corp." - C:\Program Files\SolidWorks Corp\SolidWorks\sldpropertyhandler.dll
{21D928D4-4850-45E3-9982-AD57051ECD42} "EdrawingThumbNailProvider Class" - "Dassault Systèmes SolidWorks Corp." - C:\Program Files\Common Files\eDrawings2009\edrwthumbnailprovider.dll
{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? -   (File not found | COM-object registry key not found)
{00020d75-0000-0000-c000-000000000046} "lnkfile" - ? -   (File not found | COM-object registry key not found)
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\Office12\msohevi.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} "Microsoft Office OneNote Namespace Extension for Windows Desktop Search" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONFILTER.DLL
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{B327765E-D724-4347-8B16-78AE18552FC3} "NeroDigitalIconHandler" - ? -   (File not found | COM-object registry key not found)
{7F1CF152-04F8-453A-B34C-E609530A9DC8} "NeroDigitalPropSheetHandler" - ? -   (File not found | COM-object registry key not found)
{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)
{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)
{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\shlext.dll
{7F67036B-66F1-411A-AD85-759FB9C5B0DB} "ShellViewRTF" - "XSS" - C:\Windows\System32\ShellvRTF.dll
{5E2121EE-0300-11D4-8D3B-444553540000} "SimpleShlExt Class" - ? - c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
{72670837-AA64-4C1D-AB58-A9D9D31A1216} "Solidworks Document Thumbnail Handler" - "Dassault Systèmes SolidWorks Corp." - C:\Program Files\SolidWorks Corp\SolidWorks\sldthumbnailprovider.dll
{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -   (File not found | COM-object registry key not found)
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Program Files\WinRAR\rarext.dll  (File found, but it contains no detailed information)
Sldworks Shell Extension "{3AFCEAFB-FFC5-403D-AD33-5914AB4B7ECC}" - ? -   (File not found | COM-object registry key not found)

[Internet Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "ITBar7Layout" - ? -   (File not found | COM-object registry key not found)
<binary data> "{E67C74F4-A00A-4F2C-9FEC-FD9DC004A67F}" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} "Java Plug-in 1.6.0_01" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_20" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} "Java Plug-in 1.6.0_20" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_20" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_20.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{48E73304-E1D6-4330-914C-F5F514E3486C} "An OneNote senden" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
"ICQ6" - "ICQ, LLC." - C:\Program Files\ICQ6.5\ICQ.exe
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} "Adobe PDF Reader" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll
{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} "{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}" - ? -   (File not found | COM-object registry key not found)
{6D023EBF-70B8-45A6-9ED5-556515FA0FE4} "{6D023EBF-70B8-45A6-9ED5-556515FA0FE4}" - ? -   (File not found | COM-object registry key not found)
{E312764E-7706-43F1-8DAB-FCDD2B1E416D} "{E312764E-7706-43F1-8DAB-FCDD2B1E416D}" - ? -   (File not found | COM-object registry key not found)
{EEE6C35C-6118-11DC-9C72-001320C79847} "{EEE6C35C-6118-11DC-9C72-001320C79847}" - ? -   (File not found | COM-object registry key not found)

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\Users\GJM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"SpybotSD TeaTimer" - "Safer-Networking Ltd." - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
"Steam" - "Valve Corporation" - "c:\program files\steam\steam.exe" -silent
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"avgnt" - "Avira GmbH" - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
"HP Software Update" - "Hewlett-Packard" - c:\Program Files\HP\HP Software Update\HPWuSchd2.exe
"KBD" - ? - C:\HP\KBD\KbdStub.EXE  (File found, but it contains no detailed information)
"OsdMaestro" - "OsdMaestro" - "C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe"
"SolidWorks_CheckForUpdates" - "Dassault Systèmes SolidWorks Corp." - "C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe" /scheduler
"StartCCC" - ? - "c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"  (File found, but it contains no detailed information)
"SunJavaUpdateReg" - "Sun Microsystems, Inc." - "C:\Windows\system32\jureg.exe"
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"Send To Microsoft OneNote Monitor" - "Microsoft Corporation" - C:\Windows\system32\msonpmon.dll

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Program Files\Avira\AntiVir Desktop\sched.exe
"Firebird Server - MAGIX Instance" (FirebirdServerMAGIXInstance) - "MAGIX®" - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
"FLEXnet Licensing Service" (FLEXnet Licensing Service) - "Macrovision Europe Ltd." - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
"HP Health Check Service" (HP Health Check Service) - "Hewlett-Packard" - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
"LightScribeService Direct Disc Labeling Service" (LightScribeService) - "Hewlett-Packard Company" - c:\Program Files\Common Files\LightScribe\LSSrvc.exe
"Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
"PnkBstrA" (PnkBstrA) - ? - C:\Windows\system32\PnkBstrA.exe  (File found, but it contains no detailed information)
"SolidWorks Licensing Service" (SolidWorks Licensing Service) - "SolidWorks" - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
"SolidWorks SolidNetWork License Manager" (SolidWorks SolidNetWork License Manager) - "Macrovision Corporation" - C:\Program Files\SolidWorks SolidNetWork License Manager\lmgrd.exe
"Stardock WindowBlinds" (WindowBlinds) - "Stardock Corporation" - C:\Program Files\Stardock\MyColors\VistaSrv.exe
"Steam Client Service" (Steam Client Service) - "Valve Corporation" - C:\Program Files\Common Files\Steam\SteamService.exe
"SW Distributed TS Coordinator Service" (CoordinatorServiceHost) - "Dassault Systèmes SolidWorks Corp." - C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe
"UPnPService" (UPnPService) - "Magix AG" - C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru

Alt 16.05.2010, 22:03   #24
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


GMER die erste.

Code:
ATTFilter
GMER 1.0.15.15281 - hxxp://www.gmer.net
Rootkit scan 2010-05-16 22:43:27
Windows 6.0.6002 Service Pack 2
Running: jc4rxwge.exe; Driver: C:\Users\GJM\AppData\Local\Temp\pgldqpow.sys


---- System - GMER 1.0.15 ----

SSDT                                                                                                                                  \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)                                                                                  ZwCreateKey [0x8221EFE2]
SSDT                                                                                                                                  \SystemRoot\system32\ntkrnlpa.exe[unknown section] [8221EFE2]                                                                                                 ZwCreateKey [0x8221EFE2]
SSDT                                                                                                                                  \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)                                                                                  ZwOpenKey [0x8221EFE7]
SSDT                                                                                                                                  \SystemRoot\system32\ntkrnlpa.exe[unknown section] [8221EFE7]                                                                                                 ZwOpenKey [0x8221EFE7]

INT 0x03                                                                                                                              \SystemRoot\system32\ntkrnlpa.exe[unknown section]                                                                                                            8221EFEC
INT 0x51                                                                                                                              ?                                                                                                                                                             850F4BF8
INT 0x52                                                                                                                              ?                                                                                                                                                             86DC7CA0
INT 0x62                                                                                                                              ?                                                                                                                                                             850F3BF8
INT 0x72                                                                                                                              ?                                                                                                                                                             850F3BF8
INT 0x82                                                                                                                              ?                                                                                                                                                             850F4BF8
INT 0x83                                                                                                                              ?                                                                                                                                                             86DC7CA0

---- Kernel code sections - GMER 1.0.15 ----

.text                                                                                                                                 ntkrnlpa.exe!KeSetEvent + 1E9                                                                                                                                 822CA92C 3 Bytes  [E2, EF, 21]
.text                                                                                                                                 ntkrnlpa.exe!KeSetEvent + 3DD                                                                                                                                 822CAB20 3 Bytes  [E7, EF, 21]
?                                                                                                                                     System32\Drivers\spfz.sys                                                                                                                                     Das System kann den angegebenen Pfad nicht finden. !
.text                                                                                                                                 USBPORT.SYS!DllUnload                                                                                                                                         8859041B 5 Bytes  JMP 86DC7280 
.text                                                                                                                                 akywmzmu.SYS                                                                                                                                                  8D0BA000 22 Bytes  [82, E3, 5D, 82, 6C, E2, 5D, ...]
.text                                                                                                                                 akywmzmu.SYS                                                                                                                                                  8D0BA017 159 Bytes  [00, 32, 67, 71, 80, 3D, 65, ...]
.text                                                                                                                                 akywmzmu.SYS                                                                                                                                                  8D0BA0B7 22 Bytes  [00, 00, 00, 00, 00, 00, 00, ...]
.text                                                                                                                                 akywmzmu.SYS                                                                                                                                                  8D0BA0CE 80 Bytes  [00, 00, 26, 00, 00, 00, E0, ...]
.text                                                                                                                                 akywmzmu.SYS                                                                                                                                                  8D0BA11F 194 Bytes  [7E, 38, 40, 39, 82, 3B, C4, ...]
.text                                                                                                                                 ...                                                                                                                                                           
.text                                                                                                                                 C:\Windows\system32\drivers\aksfridge.sys                                                                                                                     section is writeable [0x9B00E000, 0x48011, 0xE0000020]
.init                                                                                                                                 C:\Windows\system32\drivers\aksfridge.sys                                                                                                                     entry point in ".init" section [0x9B063224]
.init                                                                                                                                 C:\Windows\system32\drivers\aksfridge.sys                                                                                                                     unknown last code section [0x9B063000, 0x4000, 0xE20000E0]
.text                                                                                                                                 C:\Windows\system32\drivers\hardlock.sys                                                                                                                      section is writeable [0x9B067400, 0x6E1B2, 0xE8000020]
.protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".p" section [0x9B0F1220]  C:\Windows\system32\drivers\hardlock.sys                                                                                                                      entry point in ".protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".p" section [0x9B0F1220]
.protectÿÿÿÿhardlockunknown last code section [0x9B0F1000, 0x50EA, 0xE0000020]                                                        C:\Windows\system32\drivers\hardlock.sys                                                                                                                      unknown last code section [0x9B0F1000, 0x50EA, 0xE0000020]

---- User code sections - GMER 1.0.15 ----

.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!SetWindowPlacement                                                                                          75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!MoveWindow                                                                                                  7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!SetWindowPos                                                                                                759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!DeferWindowPos                                                                                              7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!EndPaint                                                                                                    7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!BeginPaint                                                                                                  7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!GetWindowRect                                                                                               75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!GetWindowPlacement                                                                                          759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!SetWindowPlacement                                                                                            75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!MoveWindow                                                                                                    7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!SetWindowPos                                                                                                  759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!DeferWindowPos                                                                                                7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!EndPaint                                                                                                      7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!BeginPaint                                                                                                    7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!GetWindowRect                                                                                                 75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!GetWindowPlacement                                                                                            759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!SetWindowPlacement                                                                                                75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!MoveWindow                                                                                                        7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!SetWindowPos                                                                                                      759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!DeferWindowPos                                                                                                    7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!EndPaint                                                                                                          7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!BeginPaint                                                                                                        7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!GetWindowRect                                                                                                     75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!GetWindowPlacement                                                                                                759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!SetWindowPlacement                                                                             75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!MoveWindow                                                                                     7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!SetWindowPos                                                                                   759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!DeferWindowPos                                                                                 7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!EndPaint                                                                                       7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!BeginPaint                                                                                     7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!GetWindowRect                                                                                  75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!GetWindowPlacement                                                                             759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!SetWindowPlacement                               75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!MoveWindow                                       7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!SetWindowPos                                     759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!DeferWindowPos                                   7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!EndPaint                                         7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!BeginPaint                                       7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!GetWindowRect                                    75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!GetWindowPlacement                               759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!SetWindowPlacement                                                                      75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!MoveWindow                                                                              7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!SetWindowPos                                                                            759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!DeferWindowPos                                                                          7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!EndPaint                                                                                7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!BeginPaint                                                                              7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!GetWindowRect                                                                           75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!GetWindowPlacement                                                                      759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!SetWindowPlacement                                                                                                   75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!MoveWindow                                                                                                           7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!SetWindowPos                                                                                                         759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!DeferWindowPos                                                                                                       7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!EndPaint                                                                                                             7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!BeginPaint                                                                                                           7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!GetWindowRect                                                                                                        75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!GetWindowPlacement                                                                                                   759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!SetWindowPlacement                                                                                          75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!MoveWindow                                                                                                  7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!SetWindowPos                                                                                                759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!DeferWindowPos                                                                                              7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!EndPaint                                                                                                    7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!BeginPaint                                                                                                  7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!GetWindowRect                                                                                               75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!GetWindowPlacement                                                                                          759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!SetWindowPlacement                                                          75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!MoveWindow                                                                  7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!SetWindowPos                                                                759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!DeferWindowPos                                                              7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!EndPaint                                                                    7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!BeginPaint                                                                  7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!GetWindowRect                                                               75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!GetWindowPlacement                                                          759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!SetWindowPlacement                                                                75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!MoveWindow                                                                        7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!SetWindowPos                                                                      759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!DeferWindowPos                                                                    7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!EndPaint                                                                          7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!BeginPaint                                                                        7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!GetWindowRect                                                                     75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!GetWindowPlacement                                                                759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!SetWindowPlacement                                                                                            75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!MoveWindow                                                                                                    7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!SetWindowPos                                                                                                  759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!DeferWindowPos                                                                                                7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!EndPaint                                                                                                      7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!BeginPaint                                                                                                    7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!GetWindowRect                                                                                                 75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!GetWindowPlacement                                                                                            759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!SetWindowPlacement                                                                        75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!MoveWindow                                                                                7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!SetWindowPos                                                                              759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!DeferWindowPos                                                                            7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!EndPaint                                                                                  7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!BeginPaint                                                                                7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!GetWindowRect                                                                             75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!GetWindowPlacement                                                                        759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!SetWindowPlacement                                                                                               75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!MoveWindow                                                                                                       7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!SetWindowPos                                                                                                     759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!DeferWindowPos                                                                                                   7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!EndPaint                                                                                                         7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!BeginPaint                                                                                                       7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!GetWindowRect                                                                                                    75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!GetWindowPlacement                                                                                               759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!SetWindowPlacement                                                             75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!MoveWindow                                                                     7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!SetWindowPos                                                                   759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!DeferWindowPos                                                                 7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!EndPaint                                                                       7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!BeginPaint                                                                     7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!GetWindowRect                                                                  75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!GetWindowPlacement                                                             759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!SetWindowPlacement                                                                                           75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!MoveWindow                                                                                                   7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!SetWindowPos                                                                                                 759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!DeferWindowPos                                                                                               7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!EndPaint                                                                                                     7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!BeginPaint                                                                                                   7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!GetWindowRect                                                                                                75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!GetWindowPlacement                                                                                           759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!SetWindowPlacement                                                                                            75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!MoveWindow                                                                                                    7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!SetWindowPos                                                                                                  759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!DeferWindowPos                                                                                                7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!EndPaint                                                                                                      7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!BeginPaint                                                                                                    7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!GetWindowRect                                                                                                 75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!GetWindowPlacement                                                                                            759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\Explorer.EXE[3908] USER32.dll!SetWindowPlacement                                                                                                   75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\Explorer.EXE[3908] USER32.dll!MoveWindow                                                                                                           7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\Explorer.EXE[3908] USER32.dll!SetWindowPos                                                                                                         759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\Explorer.EXE[3908] USER32.dll!DeferWindowPos                                                                                                       7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)

Alt 16.05.2010, 22:55   #25
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


sry kleiner Fehler unterlaufen den letzten beitrag kann man verwerfen^^ (hab die makierung ausversehen aufgehoben)

hier nochmal Teil 1.

Code:
ATTFilter
GMER 1.0.15.15281 - hxxp://www.gmer.net
Rootkit scan 2010-05-16 22:43:27
Windows 6.0.6002 Service Pack 2
Running: jc4rxwge.exe; Driver: C:\Users\GJM\AppData\Local\Temp\pgldqpow.sys


---- System - GMER 1.0.15 ----

SSDT                                                                                                                                  \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)                                                                                  ZwCreateKey [0x8221EFE2]
SSDT                                                                                                                                  \SystemRoot\system32\ntkrnlpa.exe[unknown section] [8221EFE2]                                                                                                 ZwCreateKey [0x8221EFE2]
SSDT                                                                                                                                  \SystemRoot\system32\ntkrnlpa.exe (NT Kernel & System/Microsoft Corporation)                                                                                  ZwOpenKey [0x8221EFE7]
SSDT                                                                                                                                  \SystemRoot\system32\ntkrnlpa.exe[unknown section] [8221EFE7]                                                                                                 ZwOpenKey [0x8221EFE7]

INT 0x03                                                                                                                              \SystemRoot\system32\ntkrnlpa.exe[unknown section]                                                                                                            8221EFEC
INT 0x51                                                                                                                              ?                                                                                                                                                             850F4BF8
INT 0x52                                                                                                                              ?                                                                                                                                                             86DC7CA0
INT 0x62                                                                                                                              ?                                                                                                                                                             850F3BF8
INT 0x72                                                                                                                              ?                                                                                                                                                             850F3BF8
INT 0x82                                                                                                                              ?                                                                                                                                                             850F4BF8
INT 0x83                                                                                                                              ?                                                                                                                                                             86DC7CA0

---- Kernel code sections - GMER 1.0.15 ----

.text                                                                                                                                 ntkrnlpa.exe!KeSetEvent + 1E9                                                                                                                                 822CA92C 3 Bytes  [E2, EF, 21]
.text                                                                                                                                 ntkrnlpa.exe!KeSetEvent + 3DD                                                                                                                                 822CAB20 3 Bytes  [E7, EF, 21]
?                                                                                                                                     System32\Drivers\spfz.sys                                                                                                                                     Das System kann den angegebenen Pfad nicht finden. !
.text                                                                                                                                 USBPORT.SYS!DllUnload                                                                                                                                         8859041B 5 Bytes  JMP 86DC7280 
.text                                                                                                                                 akywmzmu.SYS                                                                                                                                                  8D0BA000 22 Bytes  [82, E3, 5D, 82, 6C, E2, 5D, ...]
.text                                                                                                                                 akywmzmu.SYS                                                                                                                                                  8D0BA017 159 Bytes  [00, 32, 67, 71, 80, 3D, 65, ...]
.text                                                                                                                                 akywmzmu.SYS                                                                                                                                                  8D0BA0B7 22 Bytes  [00, 00, 00, 00, 00, 00, 00, ...]
.text                                                                                                                                 akywmzmu.SYS                                                                                                                                                  8D0BA0CE 80 Bytes  [00, 00, 26, 00, 00, 00, E0, ...]
.text                                                                                                                                 akywmzmu.SYS                                                                                                                                                  8D0BA11F 194 Bytes  [7E, 38, 40, 39, 82, 3B, C4, ...]
.text                                                                                                                                 ...                                                                                                                                                           
.text                                                                                                                                 C:\Windows\system32\drivers\aksfridge.sys                                                                                                                     section is writeable [0x9B00E000, 0x48011, 0xE0000020]
.init                                                                                                                                 C:\Windows\system32\drivers\aksfridge.sys                                                                                                                     entry point in ".init" section [0x9B063224]
.init                                                                                                                                 C:\Windows\system32\drivers\aksfridge.sys                                                                                                                     unknown last code section [0x9B063000, 0x4000, 0xE20000E0]
.text                                                                                                                                 C:\Windows\system32\drivers\hardlock.sys                                                                                                                      section is writeable [0x9B067400, 0x6E1B2, 0xE8000020]
.protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".p" section [0x9B0F1220]  C:\Windows\system32\drivers\hardlock.sys                                                                                                                      entry point in ".protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".p" section [0x9B0F1220]
.protectÿÿÿÿhardlockunknown last code section [0x9B0F1000, 0x50EA, 0xE0000020]                                                        C:\Windows\system32\drivers\hardlock.sys                                                                                                                      unknown last code section [0x9B0F1000, 0x50EA, 0xE0000020]

---- User code sections - GMER 1.0.15 ----

.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!SetWindowPlacement                                                                                          75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!MoveWindow                                                                                                  7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!SetWindowPos                                                                                                759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!DeferWindowPos                                                                                              7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!EndPaint                                                                                                    7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!BeginPaint                                                                                                  7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!GetWindowRect                                                                                               75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Users\GJM\Desktop\jc4rxwge.exe[224] USER32.dll!GetWindowPlacement                                                                                          759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!SetWindowPlacement                                                                                            75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!MoveWindow                                                                                                    7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!SetWindowPos                                                                                                  759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!DeferWindowPos                                                                                                7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!EndPaint                                                                                                      7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!BeginPaint                                                                                                    7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!GetWindowRect                                                                                                 75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\wuauclt.exe[636] USER32.dll!GetWindowPlacement                                                                                            759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!SetWindowPlacement                                                                                                75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!MoveWindow                                                                                                        7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!SetWindowPos                                                                                                      759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!DeferWindowPos                                                                                                    7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text

Alt 16.05.2010, 23:00   #26
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


Teil 2.


Code:
ATTFilter
                               C:\Windows\ehome\ehmsas.exe[808] USER32.dll!EndPaint                                                                                                          7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!BeginPaint                                                                                                        7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!GetWindowRect                                                                                                     75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehmsas.exe[808] USER32.dll!GetWindowPlacement                                                                                                759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!SetWindowPlacement                                                                             75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!MoveWindow                                                                                     7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!SetWindowPos                                                                                   759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!DeferWindowPos                                                                                 7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!EndPaint                                                                                       7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!BeginPaint                                                                                     7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!GetWindowRect                                                                                  75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Defender\MSASCui.exe[3008] USER32.dll!GetWindowPlacement                                                                             759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!SetWindowPlacement                               75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!MoveWindow                                       7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!SetWindowPos                                     759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!DeferWindowPos                                   7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!EndPaint                                         7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!BeginPaint                                       7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!GetWindowRect                                    75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\SolidWorks Installations-Manager\Scheduler\sldIMScheduler.exe[3208] USER32.dll!GetWindowPlacement                               759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!SetWindowPlacement                                                                      75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!MoveWindow                                                                              7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!SetWindowPos                                                                            759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!DeferWindowPos                                                                          7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!EndPaint                                                                                7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!BeginPaint                                                                              7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!GetWindowRect                                                                           75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe[3216] USER32.dll!GetWindowPlacement                                                                      759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!SetWindowPlacement                                                                                                   75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!MoveWindow                                                                                                           7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!SetWindowPos                                                                                                         759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!DeferWindowPos                                                                                                       7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!EndPaint                                                                                                             7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!BeginPaint                                                                                                           7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!GetWindowRect                                                                                                        75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\RtHDVCpl.exe[3220] USER32.dll!GetWindowPlacement                                                                                                   759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!SetWindowPlacement                                                                                          75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!MoveWindow                                                                                                  7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!SetWindowPos                                                                                                759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!DeferWindowPos                                                                                              7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!EndPaint                                                                                                    7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!BeginPaint                                                                                                  7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!GetWindowRect                                                                                               75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\schtasks.exe[3236] USER32.dll!GetWindowPlacement                                                                                          759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!SetWindowPlacement                                                          75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!MoveWindow                                                                  7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!SetWindowPos                                                                759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!DeferWindowPos                                                              7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!EndPaint                                                                    7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!BeginPaint                                                                  7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text

Alt 16.05.2010, 23:01   #27
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


Teil 3

Code:
ATTFilter
                               C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!GetWindowRect                                                               75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe[3336] USER32.dll!GetWindowPlacement                                                          759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!SetWindowPlacement                                                                75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!MoveWindow                                                                        7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!SetWindowPos                                                                      759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!DeferWindowPos                                                                    7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!EndPaint                                                                          7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!BeginPaint                                                                        7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!GetWindowRect                                                                     75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Common Files\Java\Java Update\jusched.exe[3380] USER32.dll!GetWindowPlacement                                                                759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!SetWindowPlacement                                                                                            75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!MoveWindow                                                                                                    7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!SetWindowPos                                                                                                  759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!DeferWindowPos                                                                                                7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!EndPaint                                                                                                      7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!BeginPaint                                                                                                    7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!GetWindowRect                                                                                                 75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\System32\wpcumi.exe[3392] USER32.dll!GetWindowPlacement                                                                                            759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!SetWindowPlacement                                                                        75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!MoveWindow                                                                                7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!SetWindowPos                                                                              759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!DeferWindowPos                                                                            7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!EndPaint                                                                                  7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!BeginPaint                                                                                7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!GetWindowRect                                                                             75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Program Files\Windows Media Player\wmpnscfg.exe[3480] USER32.dll!GetWindowPlacement                                                                        759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!SetWindowPlacement                                                                                               75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!MoveWindow                                                                                                       7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!SetWindowPos                                                                                                     759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!DeferWindowPos                                                                                                   7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!EndPaint                                                                                                         7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!BeginPaint                                                                                                       7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!GetWindowRect                                                                                                    75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\ehome\ehtray.exe[3516] USER32.dll!GetWindowPlacement                                                                                               759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!SetWindowPlacement                                                             75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!MoveWindow                                                                     7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!SetWindowPos                                                                   759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!DeferWindowPos                                                                 7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!EndPaint                                                                       7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!BeginPaint                                                                     7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!GetWindowRect                                                                  75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE[3668] USER32.dll!GetWindowPlacement                                                             759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!SetWindowPlacement                                                                                           75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!MoveWindow                                                                                                   7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!SetWindowPos                                                                                                 759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!DeferWindowPos                                                                                               7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!EndPaint                                                                                                     7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!BeginPaint                                                                                                   7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!GetWindowRect                                                                                                75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\taskeng.exe[3720] USER32.dll!GetWindowPlacement                                                                                           759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!SetWindowPlacement                                                                                            75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!MoveWindow                                                                                                    7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!SetWindowPos                                                                                                  759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!DeferWindowPos                                                                                                7594467F 5 Bytes  JMP 6602A1D7 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!EndPaint                                                                                                      7594A28F 5 Bytes  JMP 66002ADD C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!BeginPaint                                                                                                    7594A2A3 5 Bytes  JMP 66002AE2 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!GetWindowRect                                                                                                 75950E21 5 Bytes  JMP 6602ADEB C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\system32\conime.exe[3768] USER32.dll!GetWindowPlacement                                                                                            759638E3 5 Bytes  JMP 6602A980 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\Explorer.EXE[3908] USER32.dll!SetWindowPlacement                                                                                                   75937963 5 Bytes  JMP 6602A82F C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\Explorer.EXE[3908] USER32.dll!MoveWindow                                                                                                           7593989F 5 Bytes  JMP 6602AB2A C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text                                                                                                                                 C:\Windows\Explorer.EXE[3908] USER32.dll!SetWindowPos                                                                                                         759435E3 5 Bytes  JMP 6602AC79 C:\Program Files\Stardock\MyColors\WBLIND.dll (WindowBlinds (Vista 32 bit)/Stardock Corporation)
.text
hoffe es passt alles so
hab mich an die anleitungen deiner links gehalten
(nur scannen lassen)

M.f.G und
GJM

Alt 16.05.2010, 23:46   #28
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


Ich bekomms

nach nem neustart kam ne meldung das die Imgrd.exe nichtmehr funtzt.
hab dann nochmal neugestartet (hoffentlich kein Fehler?!¿)
und es kommt wieder

google sagt is wahrscheinlich n Virus.
wenn ja.
wie kommt der drauf?
war auf keiner seite auser dieser und msn (is meine Startseite)
hab eigentlich nichts im i-net gemacht und wenn ich antivir deaktivirte
hab ich immer vorher das I-net Kabel gezogen

soll ich nochmal OTL und/oder HijackThis durchrennen lassen?

Alt 17.05.2010, 11:27   #29
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


Die GMER Logs sind ein bisschen merkwürdig. Aber OSAM Log sieht eigentlicj okay aus.

Dein imgrd ist dieser hier:

Zitat:
"SolidWorks SolidNetWork License Manager" (SolidWorks SolidNetWork License Manager) - "Macrovision Corporation" - C:\Program Files\SolidWorks SolidNetWork License Manager\lmgrd.exe
Macrovision Lizenzserver. Neu installieren wenn Du ihn noch brauchst?
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 17.05.2010, 18:04   #30
GJM
 
img068438960802010.jpg.scr Troja? - Standard

img068438960802010.jpg.scr Troja?


in wie fern sieht GMER komisch aus?

des andre hab ich ma runter geschmissen

Antwort
Seite 2 von 4 1 2 34

Themen zu img068438960802010.jpg.scr Troja?
.jpg.scr, ausgeführt, datei, dateien, eimer, erfahrung, euro, frage, freund, gesuch, gesucht, google, helft, link, nicht öffnen, ordner, problem, runter, teure, troja, trojas, verdammt, wenig, öffnen


« Windows blockiert, Antivir findet Ransom.EJ.10 in firefox exe und woanders | Trojaner: PSW.Generic9.RDX in services.exe (908) »


Ähnliche Themen: img068438960802010.jpg.scr Troja?


  1. troja fakems und firefox keine rückmeldung
    Log-Analyse und Auswertung - 16.12.2012 (15)
  2. BKA Virus Troja windows xp
    Plagegeister aller Art und deren Bekämpfung - 10.08.2011 (1)
  3. 100 tan troja
    Log-Analyse und Auswertung - 06.07.2011 (7)
  4. troja.win.32.generic!sb.0
    Log-Analyse und Auswertung - 24.09.2010 (12)
  5. AW: img068438960802010.jpg.scr Troja?
    Mülltonne - 29.04.2010 (0)
  6. Troja.JS.Redirector.ar - bin völlig verzweifelt...
    Plagegeister aller Art und deren Bekämpfung - 25.01.2010 (5)
  7. Troja
    Log-Analyse und Auswertung - 13.07.2009 (11)
  8. win32.troja-gen im System gemeldet
    Log-Analyse und Auswertung - 28.10.2008 (10)
  9. win32.troja-gen gefunden
    Mülltonne - 28.10.2008 (0)
  10. Troja fällt!?
    Log-Analyse und Auswertung - 20.07.2008 (0)
  11. VTSQO.dll, troja.win32.inject, virtumonde
    Plagegeister aller Art und deren Bekämpfung - 27.12.2007 (0)
  12. Besuch aus Troja
    Log-Analyse und Auswertung - 13.06.2007 (2)
  13. Troja ist da - bitte Hilfe!
    Log-Analyse und Auswertung - 07.05.2006 (18)
  14. Troja.popuper
    Plagegeister aller Art und deren Bekämpfung - 20.09.2005 (1)
  15. Troja befall
    Plagegeister aller Art und deren Bekämpfung - 30.06.2005 (2)
  16. Einstand/Troja liegt nicht in Asche!!
    Log-Analyse und Auswertung - 26.03.2005 (22)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema img068438960802010.jpg.scr Troja? - So hier der Log. Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 4103 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 15.05.2010 16:38:24 mbam-log-2010-05-15 (16-38-24).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|F:\|) Durchsuchte - img068438960802010.jpg.scr Troja?...
Archiv
Du betrachtest: img068438960802010.jpg.scr Troja? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131