Internet sehr langsam brauche dringend Hilfe

T.C 1 · 02.03.2011, 21:13

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows 7 Home Premium Edition
Windows Information: (build 7600), 64-bit
Base Board Manufacturer: Sony Corporation
BIOS Manufacturer: American Megatrends Inc.
System Manufacturer: Sony Corporation
System Product Name: VGN-AW41JF_H
Logical Drives Mask: 0x000000bc

Kernel Drivers (total 173):
0x02E55000 \SystemRoot\system32\ntoskrnl.exe
0x02E0C000 \SystemRoot\system32\hal.dll
0x00BAF000 \SystemRoot\system32\kdcom.dll
0x00CDE000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x00D22000 \SystemRoot\system32\PSHED.dll
0x00D36000 \SystemRoot\system32\CLFS.SYS
0x00C00000 \SystemRoot\system32\CI.dll
0x00E2E000 \SystemRoot\system32\drivers\Wdf01000.sys
0x00ED2000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x01041000 \SystemRoot\System32\Drivers\spsl.sys
0x01167000 \SystemRoot\System32\Drivers\WMILIB.SYS
0x01170000 \SystemRoot\System32\Drivers\SCSIPORT.SYS
0x0119F000 \SystemRoot\system32\DRIVERS\ACPI.sys
0x011F6000 \SystemRoot\system32\DRIVERS\msisadrv.sys
0x01000000 \SystemRoot\system32\DRIVERS\vdrvroot.sys
0x0100D000 \SystemRoot\system32\DRIVERS\pci.sys
0x00EE1000 \SystemRoot\System32\drivers\partmgr.sys
0x00EF6000 \SystemRoot\system32\DRIVERS\compbatt.sys
0x00EFF000 \SystemRoot\system32\DRIVERS\BATTC.SYS
0x00F0B000 \SystemRoot\system32\DRIVERS\volmgr.sys
0x00F20000 \SystemRoot\System32\drivers\volmgrx.sys
0x00F7C000 \SystemRoot\System32\drivers\mountmgr.sys
0x01280000 \SystemRoot\system32\DRIVERS\iaStor.sys
0x0139C000 \SystemRoot\system32\DRIVERS\atapi.sys
0x013A5000 \SystemRoot\system32\DRIVERS\ataport.SYS
0x013CF000 \SystemRoot\system32\DRIVERS\amdxata.sys
0x01200000 \SystemRoot\system32\drivers\fltmgr.sys
0x0124C000 \SystemRoot\system32\drivers\fileinfo.sys
0x01260000 \SystemRoot\system32\DRIVERS\Lbd.sys
0x013DA000 \SystemRoot\System32\Drivers\PxHlpa64.sys
0x0143F000 \SystemRoot\System32\Drivers\Ntfs.sys
0x00F96000 \SystemRoot\System32\Drivers\msrpc.sys
0x015E2000 \SystemRoot\System32\Drivers\ksecdd.sys
0x0166B000 \SystemRoot\System32\Drivers\cng.sys
0x016DE000 \SystemRoot\System32\drivers\pcw.sys
0x016EF000 \SystemRoot\System32\Drivers\Fs_Rec.sys
0x016F9000 \SystemRoot\system32\drivers\ndis.sys
0x01600000 \SystemRoot\system32\drivers\NETIO.SYS
0x01400000 \SystemRoot\System32\Drivers\ksecpkg.sys
0x01828000 \SystemRoot\system32\DRIVERS\timntr.sys
0x0190D000 \SystemRoot\system32\DRIVERS\oodisrh.sys
0x0191C000 \SystemRoot\system32\DRIVERS\oodivdh.sys
0x0192C000 \SystemRoot\system32\DRIVERS\volsnap.sys
0x01A34000 \SystemRoot\system32\DRIVERS\tdrpm251.sys
0x01B9A000 \SystemRoot\System32\Drivers\spldr.sys
0x01BA2000 \SystemRoot\system32\DRIVERS\snapman.sys
0x01978000 \SystemRoot\System32\drivers\rdyboost.sys
0x01A00000 \SystemRoot\system32\DRIVERS\oodisr.sys
0x019B2000 \SystemRoot\system32\DRIVERS\oodivd.sys
0x01A20000 \SystemRoot\System32\Drivers\mup.sys
0x01BE1000 \SystemRoot\System32\drivers\hwpolicy.sys
0x00D94000 \SystemRoot\System32\DRIVERS\fvevol.sys
0x01BEA000 \SystemRoot\system32\DRIVERS\disk.sys
0x00DCE000 \SystemRoot\system32\DRIVERS\CLASSPNP.SYS
0x02F73000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x02F9D000 \SystemRoot\System32\Drivers\Null.SYS
0x02FA6000 \SystemRoot\System32\Drivers\Beep.SYS
0x02FAD000 \SystemRoot\System32\drivers\vga.sys
0x02FBB000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x02FE0000 \SystemRoot\System32\drivers\watchdog.sys
0x02FF0000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x02E00000 \SystemRoot\system32\drivers\rdpencdd.sys
0x02E09000 \SystemRoot\system32\drivers\rdprefmp.sys
0x02E12000 \SystemRoot\System32\Drivers\Msfs.SYS
0x02E1D000 \SystemRoot\System32\Drivers\Npfs.SYS
0x03E02000 \SystemRoot\System32\drivers\tcpip.sys
0x0408A000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x040D4000 \SystemRoot\System32\Drivers\Mpfp.sys
0x04111000 \SystemRoot\System32\Drivers\TDI.SYS
0x0411E000 \SystemRoot\system32\DRIVERS\tdx.sys
0x0413C000 \SystemRoot\system32\DRIVERS\ipfltdrv.sys
0x0415A000 \SystemRoot\system32\drivers\afd.sys
0x04000000 \SystemRoot\System32\DRIVERS\netbt.sys
0x04045000 \SystemRoot\system32\DRIVERS\wfplwf.sys
0x0404E000 \SystemRoot\system32\DRIVERS\pacer.sys
0x04074000 \SystemRoot\system32\DRIVERS\vwififlt.sys
0x041E4000 \SystemRoot\system32\DRIVERS\netbios.sys
0x01800000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x02E2E000 \SystemRoot\system32\DRIVERS\termdd.sys
0x042C2000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x04313000 \SystemRoot\system32\drivers\nsiproxy.sys
0x0431F000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x0432A000 \SystemRoot\system32\drivers\mfehidk.sys
0x04374000 \SystemRoot\System32\drivers\discache.sys
0x04383000 \SystemRoot\System32\Drivers\dfsc.sys
0x043A1000 \SystemRoot\system32\DRIVERS\blbdrive.sys
0x043B2000 \SystemRoot\system32\DRIVERS\avipbb.sys
0x04A75000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys
0x0557C000 \SystemRoot\system32\DRIVERS\nvBridge.kmd
0x0446B000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x0455F000 \SystemRoot\System32\drivers\dxgmms1.sys
0x045A5000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0x04400000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x04456000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x045B2000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x0557E000 \SystemRoot\system32\DRIVERS\yk62x64.sys
0x05834000 \SystemRoot\system32\DRIVERS\NETw5s64.sys
0x05EE1000 \SystemRoot\system32\DRIVERS\vwifibus.sys
0x05EEE000 \SystemRoot\system32\DRIVERS\1394ohci.sys
0x05F2C000 \SystemRoot\system32\DRIVERS\risdsn64.sys
0x05F44000 \SystemRoot\system32\DRIVERS\rimssn64.sys
0x05F62000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x05F80000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x05F8F000 \SystemRoot\system32\DRIVERS\SynTP.sys
0x05FD8000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x05FDA000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x05FE9000 \SystemRoot\system32\DRIVERS\SFEP.sys
0x04A00000 \SystemRoot\System32\Drivers\avrcrxd4.SYS
0x05800000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x05816000 \SystemRoot\system32\DRIVERS\CmBatt.sys
0x0581B000 \SystemRoot\system32\DRIVERS\CompositeBus.sys
0x045D6000 \SystemRoot\system32\DRIVERS\AgileVpn.sys
0x04A45000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x05FEC000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x04200000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x055E3000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x0422F000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x04250000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x05FF8000 \SystemRoot\system32\DRIVERS\swenum.sys
0x0426A000 \SystemRoot\system32\DRIVERS\ks.sys
0x045EC000 \SystemRoot\system32\DRIVERS\circlass.sys
0x042AD000 \SystemRoot\system32\DRIVERS\umbus.sys
0x062D3000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x0632D000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x08210000 \SystemRoot\system32\drivers\RTKVHD64.sys
0x06342000 \SystemRoot\system32\drivers\portcls.sys
0x083CC000 \SystemRoot\system32\drivers\drmk.sys
0x083EE000 \SystemRoot\system32\drivers\ksthunk.sys
0x0637F000 \SystemRoot\system32\drivers\nvhda64v.sys
0x08200000 \SystemRoot\System32\Drivers\crashdmp.sys
0x02E42000 \SystemRoot\System32\Drivers\dump_iaStor.sys
0x06397000 \SystemRoot\System32\Drivers\dump_dumpfve.sys
0x063AA000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x063C7000 \SystemRoot\System32\Drivers\usbvideo.sys
0x083F4000 \SystemRoot\system32\DRIVERS\ArcSoftKsUFilter.sys
0x06200000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x0620E000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x06227000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x06230000 \SystemRoot\system32\DRIVERS\mouhid.sys
0x0623D000 \SystemRoot\system32\DRIVERS\point64k.sys
0x00060000 \SystemRoot\System32\win32k.sys
0x0624B000 \SystemRoot\System32\drivers\Dxapi.sys
0x06257000 \SystemRoot\system32\DRIVERS\monitor.sys
0x00590000 \SystemRoot\System32\TSDDD.dll
0x00750000 \SystemRoot\System32\cdd.dll
0x00930000 \SystemRoot\System32\ATMFD.DLL
0x06265000 \SystemRoot\system32\drivers\luafv.sys
0x06288000 \SystemRoot\system32\DRIVERS\avgntflt.sys
0x062A5000 \SystemRoot\system32\drivers\WudfPf.sys
0x043D4000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x09A19000 \SystemRoot\system32\DRIVERS\nwifi.sys
0x09A6C000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0x09A7F000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x09A97000 \SystemRoot\system32\DRIVERS\vwifimp.sys
0x09AA1000 \SystemRoot\system32\drivers\HTTP.sys
0x09B69000 \SystemRoot\system32\DRIVERS\bowser.sys
0x09B87000 \SystemRoot\System32\drivers\mpsdrv.sys
0x09B9F000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0x09E98000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0x09EE6000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0x09F09000 \SystemRoot\system32\DRIVERS\afcdp.sys
0x09F46000 \SystemRoot\system32\drivers\peauth.sys
0x09FEC000 \SystemRoot\System32\Drivers\secdrv.SYS
0x09E00000 \SystemRoot\System32\DRIVERS\srvnet.sys
0x09E2D000 \SystemRoot\System32\drivers\tcpipreg.sys
0x0C877000 \SystemRoot\System32\DRIVERS\srv2.sys
0x0C8DE000 \SystemRoot\System32\DRIVERS\srv.sys
0x0C974000 \SystemRoot\system32\DRIVERS\WUDFRd.sys
0x0C9A5000 \??\C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys
0x0C9AC000 \??\C:\Windows\system32\Drivers\PROCEXP113.SYS
0x76EC0000 \Windows\System32\ntdll.dll
0x47C60000 \Windows\System32\smss.exe
0xFF1E0000 \Windows\System32\apisetschema.dll

Processes (total 78):
0 System Idle Process
4 System
520 C:\Windows\System32\smss.exe
872 csrss.exe
936 C:\Windows\System32\wininit.exe
952 csrss.exe
984 C:\Windows\System32\services.exe
1008 C:\Windows\System32\lsass.exe
1016 C:\Windows\System32\lsm.exe
856 C:\Windows\System32\svchost.exe
1036 C:\Windows\System32\svchost.exe
1100 C:\Windows\System32\svchost.exe
1132 C:\Windows\System32\svchost.exe
1164 C:\Windows\System32\svchost.exe
1272 C:\Windows\System32\svchost.exe
1328 C:\Windows\System32\winlogon.exe
1416 C:\Windows\System32\svchost.exe
1440 C:\Windows\System32\svchost.exe
1620 C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
1776 C:\Windows\System32\spoolsv.exe
1808 C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
1832 C:\Windows\System32\svchost.exe
1932 C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
1988 C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
1368 C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
1732 C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
1888 C:\Program Files (x86)\Bonjour\mDNSResponder.exe
2040 C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
1532 C:\Windows\System32\svchost.exe
2092 C:\PROGRA~2\COMMON~1\McAfee\McProxy\McProxy.exe
2224 C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
2348 C:\Windows\System32\taskhost.exe
2440 C:\Windows\System32\dwm.exe
2488 C:\Windows\explorer.exe
2496 C:\Windows\System32\svchost.exe
2720 C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
2732 C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
2796 C:\Windows\System32\conhost.exe
3008 C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
1584 C:\Windows\System32\taskeng.exe
2460 C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe
2584 C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
2780 C:\Program Files\Microsoft IntelliPoint\ipoint.exe
2924 C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
2520 C:\Program Files (x86)\Lingoes\Translator2\Lingoes.exe
3064 C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
3132 C:\Program Files (x86)\IncrediMail\bin\IMApp.exe
3204 C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
3212 C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
3396 dllhost.exe
3404 C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
3520 C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
3820 C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
3848 C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
3904 C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
3928 C:\Windows\System32\svchost.exe
3996 C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
4004 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
4084 C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
3864 C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
3856 unsecapp.exe
4192 WmiPrvSE.exe
4324 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
5064 C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
4388 C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
4420 C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
4540 C:\Program Files (x86)\PC Connectivity Solution\Transports\NclRSSrv.exe
4576 C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
4772 C:\Windows\System32\SearchIndexer.exe
2148 WUDFHost.exe
3244 C:\Program Files\Windows Media Player\wmpnetwk.exe
5740 C:\Windows\System32\svchost.exe
1696 C:\Windows\System32\svchost.exe
5420 C:\Program Files (x86)\Mozilla Firefox\firefox.exe
3828 C:\Program Files (x86)\Mozilla Firefox\firefox.exe
3032 C:\Windows\System32\audiodg.exe
2536 C:\Users\Nilgün\Desktop\MBRCheck.exe
3264 C:\Windows\System32\conhost.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000002`bbd00000 (NTFS)

PhysicalDrive0 Model Number: TOSHIBAMK5055GSX, Rev: FG001A

Size Device Name MBR Status
--------------------------------------------
465 GB \\.\PhysicalDrive0 Windows 7 MBR code detected
SHA1: 4379A3D43019B46FA357F7DD6A53B45A3CA8FB79

Done!

cosinus · 02.03.2011, 21:27

Der MBR ist ok. Läuft GMER noch?

T.C 1 · 03.03.2011, 16:06

GMER Logfile:

Code:

ATTFilter

GMER 1.0.15.15530 - hxxp://www.gmer.net
Rootkit scan 2011-03-03 16:03:44
Windows 6.1.7600  
Running: ll8itibt.exe


---- Registry - GMER 1.0.15 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00214fbccff2                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0024337517dd                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                            0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s1                                                                  771343423
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s2                                                                  285507792
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@h0                                                                  1
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                    
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                 0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                 0
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                              0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                 C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                           
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                     0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                        0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                0xFE 0xA6 0xED 0xF7 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00214fbccff2 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0024337517dd (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                                0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                     C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)       
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                         0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                            0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                    0xFE 0xA6 0xED 0xF7 ...

---- EOF - GMER 1.0.15 ----

--- --- ---
GMER Logfile:

Code:

ATTFilter

GMER 1.0.15.15530 - hxxp://www.gmer.net
Rootkit scan 2011-03-03 16:03:44
Windows 6.1.7600  
Running: ll8itibt.exe


---- Registry - GMER 1.0.15 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00214fbccff2                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0024337517dd                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                            0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s1                                                                  771343423
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s2                                                                  285507792
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@h0                                                                  1
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                    
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                 0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                 0
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                              0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                 C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                           
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                     0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                        0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                0xFE 0xA6 0xED 0xF7 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00214fbccff2 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0024337517dd (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                                0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                     C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)       
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                         0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                            0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                    0xFE 0xA6 0xED 0xF7 ...

---- EOF - GMER 1.0.15 ----

--- --- ---
GMER Logfile:

Code:

ATTFilter

GMER 1.0.15.15530 - hxxp://www.gmer.net
Rootkit scan 2011-03-03 16:03:44
Windows 6.1.7600  
Running: ll8itibt.exe


---- Registry - GMER 1.0.15 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00214fbccff2                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0024337517dd                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                            0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s1                                                                  771343423
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s2                                                                  285507792
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@h0                                                                  1
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                    
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                 0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                 0
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                              0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                 C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                           
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                     0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                        0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                0xFE 0xA6 0xED 0xF7 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00214fbccff2 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0024337517dd (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                                0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                     C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)       
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                         0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                            0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                    0xFE 0xA6 0xED 0xF7 ...

---- EOF - GMER 1.0.15 ----

--- --- ---
GMER Logfile:

Code:

ATTFilter

GMER 1.0.15.15530 - hxxp://www.gmer.net
Rootkit scan 2011-03-03 16:03:44
Windows 6.1.7600  
Running: ll8itibt.exe


---- Registry - GMER 1.0.15 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00214fbccff2                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0024337517dd                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                            0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s1                                                                  771343423
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s2                                                                  285507792
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@h0                                                                  1
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                    
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                 0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                 0
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                              0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                 C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                           
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                     0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                        0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                0xFE 0xA6 0xED 0xF7 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00214fbccff2 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0024337517dd (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                                0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                     C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)       
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                         0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                            0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                    0xFE 0xA6 0xED 0xF7 ...

---- EOF - GMER 1.0.15 ----

--- --- ---
GMER Logfile:

Code:

ATTFilter

GMER 1.0.15.15530 - hxxp://www.gmer.net
Rootkit scan 2011-03-03 16:03:44
Windows 6.1.7600  
Running: ll8itibt.exe


---- Registry - GMER 1.0.15 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00214fbccff2                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0024337517dd                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                            0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s1                                                                  771343423
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s2                                                                  285507792
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@h0                                                                  1
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                    
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                 0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                 0
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                              0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                 C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                           
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                     0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                        0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                0xFE 0xA6 0xED 0xF7 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00214fbccff2 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0024337517dd (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                                0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                     C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)       
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                         0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                            0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                    0xFE 0xA6 0xED 0xF7 ...

---- EOF - GMER 1.0.15 ----

--- --- ---
GMER Logfile:

Code:

ATTFilter

GMER 1.0.15.15530 - hxxp://www.gmer.net
Rootkit scan 2011-03-03 16:03:44
Windows 6.1.7600  
Running: ll8itibt.exe


---- Registry - GMER 1.0.15 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00214fbccff2                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0024337517dd                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                            0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s1                                                                  771343423
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s2                                                                  285507792
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@h0                                                                  1
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                    
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                 0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                 0
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                              0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                 C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                           
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                     0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                        0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                0xFE 0xA6 0xED 0xF7 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00214fbccff2 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0024337517dd (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                                0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                     C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)       
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                         0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                            0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                    0xFE 0xA6 0xED 0xF7 ...

---- EOF - GMER 1.0.15 ----

--- --- ---
GMER Logfile:

Code:

ATTFilter

GMER 1.0.15.15530 - hxxp://www.gmer.net
Rootkit scan 2011-03-03 16:03:44
Windows 6.1.7600  
Running: ll8itibt.exe


---- Registry - GMER 1.0.15 ----

Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00214fbccff2                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\0024337517dd                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7                                         
Reg  HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                            0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s1                                                                  771343423
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@s2                                                                  285507792
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg@h0                                                                  1
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                    
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                 0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                 0
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                              0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                 C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                           
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                     0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                        0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                      
Reg  HKLM\SYSTEM\CurrentControlSet\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                0xFE 0xA6 0xED 0xF7 ...
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00214fbccff2 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\0024337517dd (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7 (not active ControlSet)                     
Reg  HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\00264370aba7@0022659515b1                                0x5E 0xC2 0xE3 0x0A ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                     0x00 0x00 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                     0
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                  0x12 0x1C 0x05 0x32 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                     C:\Program Files (x86)\DAEMON Tools Lite\
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)       
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                         0xC5 0x05 0xC6 0xED ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                            0x20 0x01 0x00 0x00 ...
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)  
Reg  HKLM\SYSTEM\ControlSet002\services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                    0xFE 0xA6 0xED 0xF7 ...

---- EOF - GMER 1.0.15 ----

--- --- ---

cosinus · 03.03.2011, 16:09

Sieht ok aus, aber wieso 7x dasselbe Log?

Noch Probleme oder andere Funde?

T.C 1 · 03.03.2011, 16:16

Sorry ,keine Ahnung wie ich es sieben mal gepostet habe .Das besagte Problem ist immer noch vorhanden.Hoffe auf eine Lösung ohne c platt machen zu müssen.

cosinus · 04.03.2011, 12:31

Hast du den Router schon mal resettet bzw. mal stromlos gemacht und wieder an?
Sind noch andere Rechner in deinem Netz und ist bei denen die Internetverbindung auch so langsam?

T.C 1 · 04.03.2011, 15:34

Router und Modem schon mehrmals vom Strom getrennt.Habe einen Rechner bei dem alles i.O. ist. Mit dem Laptop habe ich das Problem auch in anderen Netzen (bei Freunden usw.)

cosinus · 04.03.2011, 21:15

Ich würde erstmal versuchen rauszufinden, ob das nur unter Windows so ist, oder auch mit anderen Betriebssystemen.
Lad dir mal sowas wie Knoppix oder Ubuntu herunter, brenn die iso Datei per Imagebrennfunktion auf eine CD und boote den Rechner davon.
Teste dann mal ausgiebig die Internetverbindung unter Linux und berichte ob die Verindung dort normal schnell oder auch langsam ist.

T.C 1 · 04.03.2011, 21:37

Habe gerade ubuntu gestaret und bin jetzt über Firefox im Netz.Im Vergleich zum Zustand mit Problem ist es eine andere Welt.War früher mal genauso wie jetzt.

cosinus · 04.03.2011, 21:54

Schau mal, ob du unter Windows mit diesem Tool was ändern kannst => http://www.chip.de/downloads/SG-TCP-..._31296373.html
Den oberen Schieberegler nach ganz rechts ziehen und Einstellungen übernehmen. Rechner dann neustarten und nochmal Internet testen.

T.C 1 · 04.03.2011, 22:08

Habe ich gemacht.Keine Änderung.

cosinus · 04.03.2011, 22:11

Hmm...

Was wurde denn am System installiert oder verändert, BEVOR das auftrat?
Schonmal den Netzwerkkartentreiber neu installiert?

T.C 1 · 04.03.2011, 22:24

Das Letzte was ich vor dem Problem gemacht habe war ein I Phone von einem Freund am Lap Top zu entsperren un dieses Itunes installiert(wurde aber am nächsten Tag deinstalliert) . Wie und wo kann ich den Netzwerkkarten Treiber aktualisieren ?

cosinus · 04.03.2011, 22:26

Zitat:

Das Letzte was ich vor dem Problem gemacht habe war ein I Phone von einem Freund am Lap Top zu entsperren un dieses Itunes installiert

Das bitte mal genauer beschreiben. Hast du irgendein Programm dazu runtergeladen und ausgeführt?

T.C 1 · 05.03.2011, 15:45

Ja ,wie gesagt zum Entsperren des besagten Handy´s muß man bei Apple das Prgramm I Tunes runterladen und Installieren.Ich glaube C wird wohl dran glauben

02.03.2011, 21:27	#17
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Internet sehr langsam brauche dringend Hilfe Der MBR ist ok. Läuft GMER noch? __________________ __________________

03.03.2011, 16:09	#19
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Internet sehr langsam brauche dringend Hilfe Sieht ok aus, aber wieso 7x dasselbe Log? Noch Probleme oder andere Funde? __________________ Logfiles bitte immer in CODE-Tags posten

04.03.2011, 12:31	#21
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Internet sehr langsam brauche dringend Hilfe Hast du den Router schon mal resettet bzw. mal stromlos gemacht und wieder an? Sind noch andere Rechner in deinem Netz und ist bei denen die Internetverbindung auch so langsam? __________________ --> Internet sehr langsam brauche dringend Hilfe

04.03.2011, 21:54	#25
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Internet sehr langsam brauche dringend Hilfe Schau mal, ob du unter Windows mit diesem Tool was ändern kannst => http://www.chip.de/downloads/SG-TCP-..._31296373.html Den oberen Schieberegler nach ganz rechts ziehen und Einstellungen übernehmen. Rechner dann neustarten und nochmal Internet testen. __________________ Logfiles bitte immer in CODE-Tags posten

04.03.2011, 22:11	#27
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Internet sehr langsam brauche dringend Hilfe Hmm... Was wurde denn am System installiert oder verändert, BEVOR das auftrat? Schonmal den Netzwerkkartentreiber neu installiert? __________________ Logfiles bitte immer in CODE-Tags posten

Internet sehr langsam brauche dringend Hilfe

Plagegeister aller Art und deren Bekämpfung: Internet sehr langsam brauche dringend Hilfe