„Win32:Malware-gen“ in C:\HP\HPQWare\aim_icq\triton_fr_fr\aoldlmgr.exe

HairPolice · 16.03.2011, 16:33

Ich kann die Datei leider nicht ausführen. Bekomme wieder die Fehlermeldung:

"Es wurde versucht, einen Registrierungsschlüssel einem unzulässigen Vorgang zu unterziehen, der zum Löschen markiert wurde"

cosinus · 16.03.2011, 16:35

Windows neu starten und nochmal probieren.

HairPolice · 16.03.2011, 16:44

Super, jetzt jat es auch wieder funktioniert. Das Tool meldet dies:

2011/03/16 16:41:38.0378 5588 TDSS rootkit removing tool 2.4.21.0 Mar 10 2011 12:26:28
2011/03/16 16:41:38.0439 5588 ================================================================================
2011/03/16 16:41:38.0439 5588 SystemInfo:
2011/03/16 16:41:38.0439 5588
2011/03/16 16:41:38.0439 5588 OS Version: 6.0.6002 ServicePack: 2.0
2011/03/16 16:41:38.0439 5588 Product type: Workstation
2011/03/16 16:41:38.0439 5588 ComputerName: MOBILE_HP
2011/03/16 16:41:38.0439 5588 UserName: Admin
2011/03/16 16:41:38.0439 5588 Windows directory: C:\Windows
2011/03/16 16:41:38.0439 5588 System windows directory: C:\Windows
2011/03/16 16:41:38.0439 5588 Processor architecture: Intel x86
2011/03/16 16:41:38.0439 5588 Number of processors: 2
2011/03/16 16:41:38.0439 5588 Page size: 0x1000
2011/03/16 16:41:38.0439 5588 Boot type: Normal boot
2011/03/16 16:41:38.0439 5588 ================================================================================
2011/03/16 16:41:41.0586 5588 Initialize success
2011/03/16 16:41:45.0307 5288 ================================================================================
2011/03/16 16:41:45.0307 5288 Scan started
2011/03/16 16:41:45.0307 5288 Mode: Manual;
2011/03/16 16:41:45.0307 5288 ================================================================================
2011/03/16 16:41:46.0268 5288 Accelerometer (3b10711ad8656c097e0d16a41b29c54c) C:\Windows\system32\DRIVERS\Accelerometer.sys
2011/03/16 16:41:46.0386 5288 ACPI (82b296ae1892fe3dbee00c9cf92f8ac7) C:\Windows\system32\drivers\acpi.sys
2011/03/16 16:41:46.0519 5288 adp94xx (04f0fcac69c7c71a3ac4eb97fafc8303) C:\Windows\system32\drivers\adp94xx.sys
2011/03/16 16:41:46.0602 5288 adpahci (60505e0041f7751bdbb80f88bf45c2ce) C:\Windows\system32\drivers\adpahci.sys
2011/03/16 16:41:46.0792 5288 adpu160m (8a42779b02aec986eab64ecfc98f8bd7) C:\Windows\system32\drivers\adpu160m.sys
2011/03/16 16:41:47.0027 5288 adpu320 (241c9e37f8ce45ef51c3de27515ca4e5) C:\Windows\system32\drivers\adpu320.sys
2011/03/16 16:41:47.0334 5288 AFD (a201207363aa900abf1a388468688570) C:\Windows\system32\drivers\afd.sys
2011/03/16 16:41:47.0530 5288 agp440 (13f9e33747e6b41a3ff305c37db0d360) C:\Windows\system32\drivers\agp440.sys
2011/03/16 16:41:47.0811 5288 aic78xx (ae1fdf7bf7bb6c6a70f67699d880592a) C:\Windows\system32\drivers\djsvs.sys
2011/03/16 16:41:48.0249 5288 aliide (9eaef5fc9b8e351afa7e78a6fae91f91) C:\Windows\system32\drivers\aliide.sys
2011/03/16 16:41:48.0390 5288 amdagp (c47344bc706e5f0b9dce369516661578) C:\Windows\system32\drivers\amdagp.sys
2011/03/16 16:41:48.0606 5288 amdide (9b78a39a4c173fdbc1321e0dd659b34c) C:\Windows\system32\drivers\amdide.sys
2011/03/16 16:41:48.0720 5288 AmdK7 (18f29b49ad23ecee3d2a826c725c8d48) C:\Windows\system32\drivers\amdk7.sys
2011/03/16 16:41:48.0902 5288 AmdK8 (93ae7f7dd54ab986a6f1a1b37be7442d) C:\Windows\system32\DRIVERS\amdk8.sys
2011/03/16 16:41:49.0097 5288 arc (5d2888182fb46632511acee92fdad522) C:\Windows\system32\drivers\arc.sys
2011/03/16 16:41:49.0281 5288 arcsas (5e2a321bd7c8b3624e41fdec3e244945) C:\Windows\system32\drivers\arcsas.sys
2011/03/16 16:41:49.0772 5288 aswFsBlk (b4079a98f294a3e262872cb76f4849f0) C:\Windows\system32\DRIVERS\aswFsBlk.sys
2011/03/16 16:41:50.0323 5288 aswMonFlt (e2851cb7dbb831888eaea46c55c05e44) C:\Windows\system32\DRIVERS\aswMonFlt.sys
2011/03/16 16:41:51.0015 5288 aswRdr (8080d683489c99cbace813f6fa4069cc) C:\Windows\system32\drivers\aswRdr.sys
2011/03/16 16:41:51.0157 5288 aswSP (2e5a2ad5004b55df39b7606130a88142) C:\Windows\system32\drivers\aswSP.sys
2011/03/16 16:41:51.0230 5288 aswTdi (d4c83a37efadfa2c398362e0776e3773) C:\Windows\system32\drivers\aswTdi.sys
2011/03/16 16:41:51.0312 5288 AsyncMac (53b202abee6455406254444303e87be1) C:\Windows\system32\DRIVERS\asyncmac.sys
2011/03/16 16:41:51.0474 5288 atapi (1f05b78ab91c9075565a9d8a4b880bc4) C:\Windows\system32\drivers\atapi.sys
2011/03/16 16:41:51.0722 5288 BCM43XV (8c74f7814028140c9518d2b59f9410b6) C:\Windows\system32\DRIVERS\bcmwl6.sys
2011/03/16 16:41:51.0821 5288 BCM43XX (8c74f7814028140c9518d2b59f9410b6) C:\Windows\system32\DRIVERS\bcmwl6.sys
2011/03/16 16:41:52.0055 5288 Beep (67e506b75bd5326a3ec7b70bd014dfb6) C:\Windows\system32\drivers\Beep.sys
2011/03/16 16:41:52.0154 5288 blbdrive (d4df28447741fd3d953526e33a617397) C:\Windows\system32\drivers\blbdrive.sys
2011/03/16 16:41:52.0207 5288 bowser (74b442b2be1260b7588c136177ceac66) C:\Windows\system32\DRIVERS\bowser.sys
2011/03/16 16:41:52.0364 5288 BrFiltLo (9f9acc7f7ccde8a15c282d3f88b43309) C:\Windows\system32\drivers\brfiltlo.sys
2011/03/16 16:41:52.0463 5288 BrFiltUp (56801ad62213a41f6497f96dee83755a) C:\Windows\system32\drivers\brfiltup.sys
2011/03/16 16:41:52.0600 5288 Brserid (b304e75cff293029eddf094246747113) C:\Windows\system32\drivers\brserid.sys
2011/03/16 16:41:52.0716 5288 BrSerWdm (203f0b1e73adadbbb7b7b1fabd901f6b) C:\Windows\system32\drivers\brserwdm.sys
2011/03/16 16:41:52.0801 5288 BrUsbMdm (bd456606156ba17e60a04e18016ae54b) C:\Windows\system32\drivers\brusbmdm.sys
2011/03/16 16:41:52.0929 5288 BrUsbSer (af72ed54503f717a43268b3cc5faec2e) C:\Windows\system32\drivers\brusbser.sys
2011/03/16 16:41:53.0019 5288 BTHMODEM (ad07c1ec6665b8b35741ab91200c6b68) C:\Windows\system32\drivers\bthmodem.sys
2011/03/16 16:41:53.0156 5288 cdfs (7add03e75beb9e6dd102c3081d29840a) C:\Windows\system32\DRIVERS\cdfs.sys
2011/03/16 16:41:53.0307 5288 cdrom (6b4bffb9becd728097024276430db314) C:\Windows\system32\DRIVERS\cdrom.sys
2011/03/16 16:41:53.0430 5288 circlass (e5d4133f37219dbcfe102bc61072589d) C:\Windows\system32\DRIVERS\circlass.sys
2011/03/16 16:41:53.0614 5288 CLFS (d7659d3b5b92c31e84e53c1431f35132) C:\Windows\system32\CLFS.sys
2011/03/16 16:41:53.0754 5288 CmBatt (99afc3795b58cc478fbbbcdc658fcb56) C:\Windows\system32\DRIVERS\CmBatt.sys
2011/03/16 16:41:53.0863 5288 cmdide (0ca25e686a4928484e9fdabd168ab629) C:\Windows\system32\drivers\cmdide.sys
2011/03/16 16:41:54.0028 5288 Compbatt (6afef0b60fa25de07c0968983ee4f60a) C:\Windows\system32\DRIVERS\compbatt.sys
2011/03/16 16:41:54.0151 5288 crcdisk (741e9dff4f42d2d8477d0fc1dc0df871) C:\Windows\system32\drivers\crcdisk.sys
2011/03/16 16:41:54.0287 5288 Crusoe (1f07becdca750766a96cda811ba86410) C:\Windows\system32\drivers\crusoe.sys
2011/03/16 16:41:54.0469 5288 DfsC (218d8ae46c88e82014f5d73d0236d9b2) C:\Windows\system32\Drivers\dfsc.sys
2011/03/16 16:41:54.0591 5288 disk (5d4aefc3386920236a548271f8f1af6a) C:\Windows\system32\drivers\disk.sys
2011/03/16 16:41:54.0705 5288 drmkaud (97fef831ab90bee128c9af390e243f80) C:\Windows\system32\drivers\drmkaud.sys
2011/03/16 16:41:54.0823 5288 DXGKrnl (c68ac676b0ef30cfbb1080adce49eb1f) C:\Windows\System32\drivers\dxgkrnl.sys
2011/03/16 16:41:54.0976 5288 E1G60 (5425f74ac0c1dbd96a1e04f17d63f94c) C:\Windows\system32\DRIVERS\E1G60I32.sys
2011/03/16 16:41:55.0097 5288 Ecache (7f64ea048dcfac7acf8b4d7b4e6fe371) C:\Windows\system32\drivers\ecache.sys
2011/03/16 16:41:55.0244 5288 elxstor (23b62471681a124889978f6295b3f4c6) C:\Windows\system32\drivers\elxstor.sys
2011/03/16 16:41:55.0366 5288 enecir (4cd6b056c5fd9e97c06fe74c81479517) C:\Windows\system32\DRIVERS\enecir.sys
2011/03/16 16:41:55.0487 5288 ErrDev (3db974f3935483555d7148663f726c61) C:\Windows\system32\drivers\errdev.sys
2011/03/16 16:41:55.0589 5288 exfat (22b408651f9123527bcee54b4f6c5cae) C:\Windows\system32\drivers\exfat.sys
2011/03/16 16:41:55.0671 5288 fastfat (1e9b9a70d332103c52995e957dc09ef8) C:\Windows\system32\drivers\fastfat.sys
2011/03/16 16:41:55.0779 5288 fdc (afe1e8b9782a0dd7fb46bbd88e43f89a) C:\Windows\system32\DRIVERS\fdc.sys
2011/03/16 16:41:55.0867 5288 FileInfo (a8c0139a884861e3aae9cfe73b208a9f) C:\Windows\system32\drivers\fileinfo.sys
2011/03/16 16:41:55.0913 5288 Filetrace (0ae429a696aecbc5970e3cf2c62635ae) C:\Windows\system32\drivers\filetrace.sys
2011/03/16 16:41:56.0050 5288 flpydisk (85b7cf99d532820495d68d747fda9ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
2011/03/16 16:41:56.0166 5288 FltMgr (01334f9ea68e6877c4ef05d3ea8abb05) C:\Windows\system32\drivers\fltmgr.sys
2011/03/16 16:41:56.0354 5288 FsUsbExDisk (b07663a810e861eebfd0eac7e82ca62d) C:\Windows\system32\FsUsbExDisk.SYS
2011/03/16 16:41:56.0459 5288 Fs_Rec (65ea8b77b5851854f0c55c43fa51a198) C:\Windows\system32\drivers\Fs_Rec.sys
2011/03/16 16:41:56.0588 5288 gagp30kx (34582a6e6573d54a07ece5fe24a126b5) C:\Windows\system32\drivers\gagp30kx.sys
2011/03/16 16:41:56.0774 5288 HdAudAddService (cb04c744be0a61b1d648faed182c3b59) C:\Windows\system32\drivers\HdAudio.sys
2011/03/16 16:41:56.0906 5288 HDAudBus (062452b7ffd68c8c042a6261fe8dff4a) C:\Windows\system32\DRIVERS\HDAudBus.sys
2011/03/16 16:41:57.0043 5288 HidBth (1338520e78d90154ed6be8f84de5fceb) C:\Windows\system32\drivers\hidbth.sys
2011/03/16 16:41:57.0184 5288 HidIr (d8df3722d5e961baa1292aa2f12827e2) C:\Windows\system32\DRIVERS\hidir.sys
2011/03/16 16:41:57.0322 5288 HidUsb (cca4b519b17e23a00b826c55716809cc) C:\Windows\system32\DRIVERS\hidusb.sys
2011/03/16 16:41:57.0411 5288 HpCISSs (16ee7b23a009e00d835cdb79574a91a6) C:\Windows\system32\drivers\hpcisss.sys
2011/03/16 16:41:57.0519 5288 hpdskflt (24f3f496c18efc234777723a67a85f81) C:\Windows\system32\DRIVERS\hpdskflt.sys
2011/03/16 16:41:57.0701 5288 HpqKbFiltr (1210960ff8928950d2a786895b0c424a) C:\Windows\system32\DRIVERS\HpqKbFiltr.sys
2011/03/16 16:41:57.0825 5288 HpqRemHid (115c0933b3ed51dfbec4449348c8065b) C:\Windows\system32\DRIVERS\HpqRemHid.sys
2011/03/16 16:41:57.0966 5288 HSFHWAZL (46d67209550973257601a533e2ac5785) C:\Windows\system32\DRIVERS\VSTAZL3.SYS
2011/03/16 16:41:58.0060 5288 HSF_DPV (ec36f1d542ed4252390d446bf6d4dfd0) C:\Windows\system32\DRIVERS\VSTDPV3.SYS
2011/03/16 16:41:58.0182 5288 HTTP (f870aa3e254628ebeafe754108d664de) C:\Windows\system32\drivers\HTTP.sys
2011/03/16 16:41:58.0327 5288 i2omp (c6b032d69650985468160fc9937cf5b4) C:\Windows\system32\drivers\i2omp.sys
2011/03/16 16:41:58.0396 5288 i8042prt (22d56c8184586b7a1f6fa60be5f5a2bd) C:\Windows\system32\DRIVERS\i8042prt.sys
2011/03/16 16:41:58.0496 5288 iaStor (db0cc620b27a928d968c1a1e9cd9cb87) C:\Windows\system32\DRIVERS\iaStor.sys
2011/03/16 16:41:58.0639 5288 iaStorV (54155ea1b0df185878e0fc9ec3ac3a14) C:\Windows\system32\drivers\iastorv.sys
2011/03/16 16:41:58.0773 5288 iirsp (2d077bf86e843f901d8db709c95b49a5) C:\Windows\system32\drivers\iirsp.sys
2011/03/16 16:41:59.0011 5288 intelide (83aa759f3189e6370c30de5dc5590718) C:\Windows\system32\drivers\intelide.sys
2011/03/16 16:41:59.0106 5288 intelppm (224191001e78c89dfa78924c3ea595ff) C:\Windows\system32\DRIVERS\intelppm.sys
2011/03/16 16:41:59.0212 5288 IpFilterDriver (62c265c38769b864cb25b4bcf62df6c3) C:\Windows\system32\DRIVERS\ipfltdrv.sys
2011/03/16 16:41:59.0359 5288 IPMIDRV (b25aaf203552b7b3491139d582b39ad1) C:\Windows\system32\drivers\ipmidrv.sys
2011/03/16 16:41:59.0480 5288 IPNAT (8793643a67b42cec66490b2a0cf92d68) C:\Windows\system32\DRIVERS\ipnat.sys
2011/03/16 16:41:59.0573 5288 IRENUM (109c0dfb82c3632fbd11949b73aeeac9) C:\Windows\system32\drivers\irenum.sys
2011/03/16 16:41:59.0699 5288 isapnp (6c70698a3e5c4376c6ab5c7c17fb0614) C:\Windows\system32\drivers\isapnp.sys
2011/03/16 16:41:59.0901 5288 iScsiPrt (232fa340531d940aac623b121a595034) C:\Windows\system32\DRIVERS\msiscsi.sys
2011/03/16 16:41:59.0983 5288 iteatapi (bced60d16156e428f8df8cf27b0df150) C:\Windows\system32\drivers\iteatapi.sys
2011/03/16 16:42:00.0084 5288 iteraid (06fa654504a498c30adca8bec4e87e7e) C:\Windows\system32\drivers\iteraid.sys
2011/03/16 16:42:00.0171 5288 JMCR (858c550ebbd243826a2193262c1b54a3) C:\Windows\system32\DRIVERS\jmcr.sys
2011/03/16 16:42:00.0243 5288 kbdclass (37605e0a8cf00cbba538e753e4344c6e) C:\Windows\system32\DRIVERS\kbdclass.sys
2011/03/16 16:42:00.0407 5288 kbdhid (ede59ec70e25c24581add1fbec7325f7) C:\Windows\system32\DRIVERS\kbdhid.sys
2011/03/16 16:42:00.0522 5288 KSecDD (86165728af9bf72d6442a894fdfb4f8b) C:\Windows\system32\Drivers\ksecdd.sys
2011/03/16 16:42:00.0680 5288 lltdio (d1c5883087a0c3f1344d9d55a44901f6) C:\Windows\system32\DRIVERS\lltdio.sys
2011/03/16 16:42:00.0779 5288 LSI_FC (c7e15e82879bf3235b559563d4185365) C:\Windows\system32\drivers\lsi_fc.sys
2011/03/16 16:42:01.0003 5288 LSI_SAS (ee01ebae8c9bf0fa072e0ff68718920a) C:\Windows\system32\drivers\lsi_sas.sys
2011/03/16 16:42:01.0134 5288 LSI_SCSI (912a04696e9ca30146a62afa1463dd5c) C:\Windows\system32\drivers\lsi_scsi.sys
2011/03/16 16:42:01.0273 5288 luafv (8f5c7426567798e62a3b3614965d62cc) C:\Windows\system32\drivers\luafv.sys
2011/03/16 16:42:01.0420 5288 megasas (0001ce609d66632fa17b84705f658879) C:\Windows\system32\drivers\megasas.sys
2011/03/16 16:42:01.0551 5288 MegaSR (c252f32cd9a49dbfc25ecf26ebd51a99) C:\Windows\system32\drivers\megasr.sys
2011/03/16 16:42:01.0705 5288 Modem (e13b5ea0f51ba5b1512ec671393d09ba) C:\Windows\system32\drivers\modem.sys
2011/03/16 16:42:01.0818 5288 monitor (0a9bb33b56e294f686abb7c1e4e2d8a8) C:\Windows\system32\DRIVERS\monitor.sys
2011/03/16 16:42:02.0068 5288 mouclass (5bf6a1326a335c5298477754a506d263) C:\Windows\system32\DRIVERS\mouclass.sys
2011/03/16 16:42:02.0251 5288 mouhid (93b8d4869e12cfbe663915502900876f) C:\Windows\system32\DRIVERS\mouhid.sys
2011/03/16 16:42:02.0301 5288 MountMgr (bdafc88aa6b92f7842416ea6a48e1600) C:\Windows\system32\drivers\mountmgr.sys
2011/03/16 16:42:02.0499 5288 mpio (511d011289755dd9f9a7579fb0b064e6) C:\Windows\system32\drivers\mpio.sys
2011/03/16 16:42:02.0800 5288 mpsdrv (22241feba9b2defa669c8cb0a8dd7d2e) C:\Windows\system32\drivers\mpsdrv.sys
2011/03/16 16:42:02.0967 5288 Mraid35x (4fbbb70d30fd20ec51f80061703b001e) C:\Windows\system32\drivers\mraid35x.sys
2011/03/16 16:42:03.0112 5288 MRxDAV (82cea0395524aacfeb58ba1448e8325c) C:\Windows\system32\drivers\mrxdav.sys
2011/03/16 16:42:03.0343 5288 mrxsmb (454341e652bdf5e01b0f2140232b073e) C:\Windows\system32\DRIVERS\mrxsmb.sys
2011/03/16 16:42:03.0398 5288 mrxsmb10 (2a4901aff069944fa945ed5bbf4dcde3) C:\Windows\system32\DRIVERS\mrxsmb10.sys
2011/03/16 16:42:03.0587 5288 mrxsmb20 (28b3f1ab44bdd4432c041581412f17d9) C:\Windows\system32\DRIVERS\mrxsmb20.sys
2011/03/16 16:42:03.0872 5288 msahci (28023e86f17001f7cd9b15a5bc9ae07d) C:\Windows\system32\drivers\msahci.sys
2011/03/16 16:42:03.0934 5288 msdsm (4468b0f385a86ecddaf8d3ca662ec0e7) C:\Windows\system32\drivers\msdsm.sys
2011/03/16 16:42:04.0067 5288 Msfs (a9927f4a46b816c92f461acb90cf8515) C:\Windows\system32\drivers\Msfs.sys
2011/03/16 16:42:04.0152 5288 msisadrv (0f400e306f385c56317357d6dea56f62) C:\Windows\system32\drivers\msisadrv.sys
2011/03/16 16:42:04.0232 5288 MSKSSRV (d8c63d34d9c9e56c059e24ec7185cc07) C:\Windows\system32\drivers\MSKSSRV.sys
2011/03/16 16:42:04.0301 5288 MSPCLOCK (1d373c90d62ddb641d50e55b9e78d65e) C:\Windows\system32\drivers\MSPCLOCK.sys
2011/03/16 16:42:04.0356 5288 MSPQM (b572da05bf4e098d4bba3a4734fb505b) C:\Windows\system32\drivers\MSPQM.sys
2011/03/16 16:42:04.0512 5288 MsRPC (b49456d70555de905c311bcda6ec6adb) C:\Windows\system32\drivers\MsRPC.sys
2011/03/16 16:42:04.0766 5288 mssmbios (e384487cb84be41d09711c30ca79646c) C:\Windows\system32\DRIVERS\mssmbios.sys
2011/03/16 16:42:04.0918 5288 MSTEE (7199c1eec1e4993caf96b8c0a26bd58a) C:\Windows\system32\drivers\MSTEE.sys
2011/03/16 16:42:05.0130 5288 Mup (6a57b5733d4cb702c8ea4542e836b96c) C:\Windows\system32\Drivers\mup.sys
2011/03/16 16:42:05.0263 5288 NativeWifiP (85c44fdff9cf7e72a40dcb7ec06a4416) C:\Windows\system32\DRIVERS\nwifi.sys
2011/03/16 16:42:05.0455 5288 NDIS (1357274d1883f68300aeadd15d7bbb42) C:\Windows\system32\drivers\ndis.sys
2011/03/16 16:42:05.0609 5288 NdisTapi (0e186e90404980569fb449ba7519ae61) C:\Windows\system32\DRIVERS\ndistapi.sys
2011/03/16 16:42:05.0701 5288 Ndisuio (d6973aa34c4d5d76c0430b181c3cd389) C:\Windows\system32\DRIVERS\ndisuio.sys
2011/03/16 16:42:05.0815 5288 NdisWan (818f648618ae34f729fdb47ec68345c3) C:\Windows\system32\DRIVERS\ndiswan.sys
2011/03/16 16:42:05.0928 5288 NDProxy (71dab552b41936358f3b541ae5997fb3) C:\Windows\system32\drivers\NDProxy.sys
2011/03/16 16:42:06.0093 5288 NetBIOS (bcd093a5a6777cf626434568dc7dba78) C:\Windows\system32\DRIVERS\netbios.sys
2011/03/16 16:42:06.0258 5288 netbt (ecd64230a59cbd93c85f1cd1cab9f3f6) C:\Windows\system32\DRIVERS\netbt.sys
2011/03/16 16:42:06.0439 5288 nfrd960 (2e7fb731d4790a1bc6270accefacb36e) C:\Windows\system32\drivers\nfrd960.sys
2011/03/16 16:42:06.0635 5288 Npfs (d36f239d7cce1931598e8fb90a0dbc26) C:\Windows\system32\drivers\Npfs.sys
2011/03/16 16:42:06.0873 5288 nsiproxy (609773e344a97410ce4ebf74a8914fcf) C:\Windows\system32\drivers\nsiproxy.sys
2011/03/16 16:42:07.0171 5288 Ntfs (6a4a98cee84cf9e99564510dda4baa47) C:\Windows\system32\drivers\Ntfs.sys
2011/03/16 16:42:07.0312 5288 ntrigdigi (e875c093aec0c978a90f30c9e0dfbb72) C:\Windows\system32\drivers\ntrigdigi.sys
2011/03/16 16:42:07.0382 5288 Null (c5dbbcda07d780bda9b685df333bb41e) C:\Windows\system32\drivers\Null.sys
2011/03/16 16:42:07.0650 5288 NVENETFD (1657f3fbd9061526c14ff37e79306f98) C:\Windows\system32\DRIVERS\nvm60x32.sys
2011/03/16 16:42:07.0844 5288 NVHDA (8571011b62ce0207fa1dc95d88308f1d) C:\Windows\system32\drivers\nvhda32v.sys
2011/03/16 16:42:08.0460 5288 nvlddmkm (19f5c4949b2e4cbd2e95b8ecdfc84d25) C:\Windows\system32\DRIVERS\nvlddmkm.sys
2011/03/16 16:42:08.0709 5288 nvraid (2edf9e7751554b42cbb60116de727101) C:\Windows\system32\drivers\nvraid.sys
2011/03/16 16:42:08.0821 5288 nvstor (abed0c09758d1d97db0042dbb2688177) C:\Windows\system32\drivers\nvstor.sys
2011/03/16 16:42:08.0946 5288 nv_agp (18bbdf913916b71bd54575bdb6eeac0b) C:\Windows\system32\drivers\nv_agp.sys
2011/03/16 16:42:09.0268 5288 ohci1394 (6f310e890d46e246e0e261a63d9b36b4) C:\Windows\system32\DRIVERS\ohci1394.sys
2011/03/16 16:42:09.0575 5288 Parport (0fa9b5055484649d63c303fe404e5f4d) C:\Windows\system32\drivers\parport.sys
2011/03/16 16:42:09.0728 5288 partmgr (57389fa59a36d96b3eb09d0cb91e9cdc) C:\Windows\system32\drivers\partmgr.sys
2011/03/16 16:42:09.0846 5288 Parvdm (4f9a6a8a31413180d0fcb279ad5d8112) C:\Windows\system32\drivers\parvdm.sys
2011/03/16 16:42:09.0985 5288 pccsmcfd (175cc28dcf819f78caa3fbd44ad9e52a) C:\Windows\system32\DRIVERS\pccsmcfd.sys
2011/03/16 16:42:10.0114 5288 pci (941dc1d19e7e8620f40bbc206981efdb) C:\Windows\system32\drivers\pci.sys
2011/03/16 16:42:10.0204 5288 pciide (fc175f5ddab666d7f4d17449a547626f) C:\Windows\system32\drivers\pciide.sys
2011/03/16 16:42:10.0280 5288 pcmcia (e6f3fb1b86aa519e7698ad05e58b04e5) C:\Windows\system32\drivers\pcmcia.sys
2011/03/16 16:42:10.0421 5288 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\Windows\system32\Drivers\pcouffin.sys
2011/03/16 16:42:10.0540 5288 PEAUTH (6349f6ed9c623b44b52ea3c63c831a92) C:\Windows\system32\drivers\peauth.sys
2011/03/16 16:42:10.0716 5288 PptpMiniport (ecfffaec0c1ecd8dbc77f39070ea1db1) C:\Windows\system32\DRIVERS\raspptp.sys
2011/03/16 16:42:10.0843 5288 Processor (2027293619dd0f047c584cf2e7df4ffd) C:\Windows\system32\drivers\processr.sys
2011/03/16 16:42:10.0996 5288 PSched (99514faa8df93d34b5589187db3aa0ba) C:\Windows\system32\DRIVERS\pacer.sys
2011/03/16 16:42:11.0128 5288 ql2300 (0a6db55afb7820c99aa1f3a1d270f4f6) C:\Windows\system32\drivers\ql2300.sys
2011/03/16 16:42:11.0290 5288 ql40xx (81a7e5c076e59995d54bc1ed3a16e60b) C:\Windows\system32\drivers\ql40xx.sys
2011/03/16 16:42:11.0436 5288 QWAVEdrv (9f5e0e1926014d17486901c88eca2db7) C:\Windows\system32\drivers\qwavedrv.sys
2011/03/16 16:42:11.0568 5288 RasAcd (147d7f9c556d259924351feb0de606c3) C:\Windows\system32\DRIVERS\rasacd.sys
2011/03/16 16:42:11.0706 5288 Rasl2tp (a214adbaf4cb47dd2728859ef31f26b0) C:\Windows\system32\DRIVERS\rasl2tp.sys
2011/03/16 16:42:11.0906 5288 RasPppoe (509a98dd18af4375e1fc40bc175f1def) C:\Windows\system32\DRIVERS\raspppoe.sys
2011/03/16 16:42:12.0105 5288 RasSstp (2005f4a1e05fa09389ac85840f0a9e4d) C:\Windows\system32\DRIVERS\rassstp.sys
2011/03/16 16:42:12.0194 5288 rdbss (b14c9d5b9add2f84f70570bbbfaa7935) C:\Windows\system32\DRIVERS\rdbss.sys
2011/03/16 16:42:12.0303 5288 RDPCDD (89e59be9a564262a3fb6c4f4f1cd9899) C:\Windows\system32\DRIVERS\RDPCDD.sys
2011/03/16 16:42:12.0448 5288 rdpdr (fbc0bacd9c3d7f6956853f64a66e252d) C:\Windows\system32\drivers\rdpdr.sys
2011/03/16 16:42:12.0514 5288 RDPENCDD (9d91fe5286f748862ecffa05f8a0710c) C:\Windows\system32\drivers\rdpencdd.sys
2011/03/16 16:42:12.0725 5288 RDPWD (30bfbdfb7f95559ede971f9ddb9a00ba) C:\Windows\system32\drivers\RDPWD.sys
2011/03/16 16:42:12.0947 5288 rspndr (9c508f4074a39e8b4b31d27198146fad) C:\Windows\system32\DRIVERS\rspndr.sys
2011/03/16 16:42:13.0072 5288 RTL8169 (7157e70a90cce49deb8885d23a073a39) C:\Windows\system32\DRIVERS\Rtlh86.sys
2011/03/16 16:42:13.0242 5288 sbp2port (3ce8f073a557e172b330109436984e30) C:\Windows\system32\drivers\sbp2port.sys
2011/03/16 16:42:13.0361 5288 sdbus (126ea89bcc413ee45e3004fb0764888f) C:\Windows\system32\DRIVERS\sdbus.sys
2011/03/16 16:42:13.0482 5288 secdrv (90a3935d05b494a5a39d37e71f09a677) C:\Windows\system32\drivers\secdrv.sys
2011/03/16 16:42:13.0563 5288 Serenum (68e44e331d46f0fb38f0863a84cd1a31) C:\Windows\system32\drivers\serenum.sys
2011/03/16 16:42:13.0601 5288 Serial (c70d69a918b178d3c3b06339b40c2e1b) C:\Windows\system32\drivers\serial.sys
2011/03/16 16:42:13.0659 5288 sermouse (8af3d28a879bf75db53a0ee7a4289624) C:\Windows\system32\drivers\sermouse.sys
2011/03/16 16:42:13.0862 5288 sffdisk (3efa810bdca87f6ecc24f9832243fe86) C:\Windows\system32\drivers\sffdisk.sys
2011/03/16 16:42:13.0917 5288 sffp_mmc (e95d451f7ea3e583aec75f3b3ee42dc5) C:\Windows\system32\drivers\sffp_mmc.sys
2011/03/16 16:42:14.0046 5288 sffp_sd (3d0ea348784b7ac9ea9bd9f317980979) C:\Windows\system32\drivers\sffp_sd.sys
2011/03/16 16:42:14.0185 5288 sfloppy (46ed8e91793b2e6f848015445a0ac188) C:\Windows\system32\drivers\sfloppy.sys
2011/03/16 16:42:14.0334 5288 sisagp (1d76624a09a054f682d746b924e2dbc3) C:\Windows\system32\drivers\sisagp.sys
2011/03/16 16:42:14.0390 5288 SiSRaid2 (43cb7aa756c7db280d01da9b676cfde2) C:\Windows\system32\drivers\sisraid2.sys
2011/03/16 16:42:14.0489 5288 SiSRaid4 (a99c6c8b0baa970d8aa59ddc50b57f94) C:\Windows\system32\drivers\sisraid4.sys
2011/03/16 16:42:14.0696 5288 Smb (7b75299a4d201d6a6533603d6914ab04) C:\Windows\system32\DRIVERS\smb.sys
2011/03/16 16:42:14.0796 5288 snapman (bcc773872041aa59bc9a6cf770fb32e2) C:\Windows\system32\DRIVERS\snapman.sys
2011/03/16 16:42:14.0977 5288 spldr (7aebdeef071fe28b0eef2cdd69102bff) C:\Windows\system32\drivers\spldr.sys
2011/03/16 16:42:15.0154 5288 sptd (cdddec541bc3c96f91ecb48759673505) C:\Windows\system32\Drivers\sptd.sys
2011/03/16 16:42:15.0155 5288 Suspicious file (NoAccess): C:\Windows\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505
2011/03/16 16:42:15.0184 5288 sptd - detected Locked file (1)
2011/03/16 16:42:15.0271 5288 srv (ff3cbc13db84d81f56931bc922cc37c4) C:\Windows\system32\DRIVERS\srv.sys
2011/03/16 16:42:15.0341 5288 srv2 (d15959d9f69f0d39a0153e9c244f20dd) C:\Windows\system32\DRIVERS\srv2.sys
2011/03/16 16:42:15.0480 5288 srvnet (faa0d553a49e85008c6bb3781987c574) C:\Windows\system32\DRIVERS\srvnet.sys
2011/03/16 16:42:15.0743 5288 ssm_bus (9ece19a1a4f4896597c3bb840fbfa721) C:\Windows\system32\DRIVERS\ssm_bus.sys
2011/03/16 16:42:15.0901 5288 ssm_mdfl (8e93a17a5253999a0e7c332f475699dc) C:\Windows\system32\DRIVERS\ssm_mdfl.sys
2011/03/16 16:42:16.0024 5288 ssm_mdm (c0ba1357c63deacf3b3ccf4b989fef06) C:\Windows\system32\DRIVERS\ssm_mdm.sys
2011/03/16 16:42:16.0148 5288 StarOpen (f92254b0bcfcd10caac7bccc7cb7f467) C:\Windows\system32\drivers\StarOpen.sys
2011/03/16 16:42:16.0314 5288 STHDA (5e71b3635d5f96d23eee1da92b85c850) C:\Windows\system32\DRIVERS\stwrt.sys
2011/03/16 16:42:16.0410 5288 swenum (7ba58ecf0c0a9a69d44b3dca62becf56) C:\Windows\system32\DRIVERS\swenum.sys
2011/03/16 16:42:16.0561 5288 SymantecAntiBotDriver (0cc72cee8dc70c30214025d5db64932f) C:\Program Files\Symantec\Norton AntiBot\agent\driver\platform_VISTA\AntiBotDriver.sys
2011/03/16 16:42:16.0611 5288 SymantecAntiBotFilter (3177f9996ddc1fa1707d4dde3c5637d6) C:\Program Files\Symantec\Norton AntiBot\agent\driver\platform_VISTA\AntiBotFilter.sys
2011/03/16 16:42:16.0644 5288 SymantecAntiBotShim (4ca1b333bdceeda4f5380d0ff24afaf4) C:\Program Files\Symantec\Norton AntiBot\agent\driver\platform_VISTA\AntiBotShim.sys
2011/03/16 16:42:16.0757 5288 Symc8xx (192aa3ac01df071b541094f251deed10) C:\Windows\system32\drivers\symc8xx.sys
2011/03/16 16:42:16.0887 5288 Sym_hi (8c8eb8c76736ebaf3b13b633b2e64125) C:\Windows\system32\drivers\sym_hi.sys
2011/03/16 16:42:17.0117 5288 Sym_u3 (8072af52b5fd103bbba387a1e49f62cb) C:\Windows\system32\drivers\sym_u3.sys
2011/03/16 16:42:17.0233 5288 SynTP (bf7aa84d5af0faa0978c840e63b17dbf) C:\Windows\system32\DRIVERS\SynTP.sys
2011/03/16 16:42:17.0457 5288 Tcpip (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\drivers\tcpip.sys
2011/03/16 16:42:17.0876 5288 Tcpip6 (a474879afa4a596b3a531f3e69730dbf) C:\Windows\system32\DRIVERS\tcpip.sys
2011/03/16 16:42:18.0063 5288 tcpipreg (608c345a255d82a6289c2d468eb41fd7) C:\Windows\system32\drivers\tcpipreg.sys
2011/03/16 16:42:18.0196 5288 TDPIPE (5dcf5e267be67a1ae926f2df77fbcc56) C:\Windows\system32\drivers\tdpipe.sys
2011/03/16 16:42:18.0334 5288 tdrpman (603d59923828c6c213b84b14cbf32083) C:\Windows\system32\DRIVERS\tdrpman.sys
2011/03/16 16:42:18.0476 5288 TDTCP (389c63e32b3cefed425b61ed92d3f021) C:\Windows\system32\drivers\tdtcp.sys
2011/03/16 16:42:18.0689 5288 tdx (76b06eb8a01fc8624d699e7045303e54) C:\Windows\system32\DRIVERS\tdx.sys
2011/03/16 16:42:18.0877 5288 TermDD (3cad38910468eab9a6479e2f01db43c7) C:\Windows\system32\DRIVERS\termdd.sys
2011/03/16 16:42:19.0054 5288 tifsfilter (a59f3bbe6bd3c20f8ffb0b62cff54cc6) C:\Windows\system32\DRIVERS\tifsfilt.sys
2011/03/16 16:42:19.0210 5288 timounter (e30af40ba4e54a6f4c2674b96e727605) C:\Windows\system32\DRIVERS\timntr.sys
2011/03/16 16:42:19.0434 5288 tssecsrv (dcf0f056a2e4f52287264f5ab29cf206) C:\Windows\system32\DRIVERS\tssecsrv.sys
2011/03/16 16:42:19.0555 5288 tunmp (caecc0120ac49e3d2f758b9169872d38) C:\Windows\system32\DRIVERS\tunmp.sys
2011/03/16 16:42:19.0818 5288 tunnel (300db877ac094feab0be7688c3454a9c) C:\Windows\system32\DRIVERS\tunnel.sys
2011/03/16 16:42:20.0094 5288 uagp35 (7d33c4db2ce363c8518d2dfcf533941f) C:\Windows\system32\drivers\uagp35.sys
2011/03/16 16:42:20.0351 5288 udfs (d9728af68c4c7693cb100b8441cbdec6) C:\Windows\system32\DRIVERS\udfs.sys
2011/03/16 16:42:20.0584 5288 uliagpkx (b0acfdc9e4af279e9116c03e014b2b27) C:\Windows\system32\drivers\uliagpkx.sys
2011/03/16 16:42:20.0825 5288 uliahci (9224bb254f591de4ca8d572a5f0d635c) C:\Windows\system32\drivers\uliahci.sys
2011/03/16 16:42:21.0058 5288 UlSata (8514d0e5cd0534467c5fc61be94a569f) C:\Windows\system32\drivers\ulsata.sys
2011/03/16 16:42:21.0272 5288 ulsata2 (38c3c6e62b157a6bc46594fada45c62b) C:\Windows\system32\drivers\ulsata2.sys
2011/03/16 16:42:21.0340 5288 umbus (32cff9f809ae9aed85464492bf3e32d2) C:\Windows\system32\DRIVERS\umbus.sys
2011/03/16 16:42:21.0566 5288 usbccgp (caf811ae4c147ffcd5b51750c7f09142) C:\Windows\system32\DRIVERS\usbccgp.sys
2011/03/16 16:42:21.0745 5288 usbcir (e9476e6c486e76bc4898074768fb7131) C:\Windows\system32\drivers\usbcir.sys
2011/03/16 16:42:21.0827 5288 usbehci (79e96c23a97ce7b8f14d310da2db0c9b) C:\Windows\system32\DRIVERS\usbehci.sys
2011/03/16 16:42:21.0982 5288 usbhub (4673bbcb006af60e7abddbe7a130ba42) C:\Windows\system32\DRIVERS\usbhub.sys
2011/03/16 16:42:22.0154 5288 usbohci (7bdb7b0e7d45ac0402d78b90789ef47c) C:\Windows\system32\DRIVERS\usbohci.sys
2011/03/16 16:42:22.0321 5288 usbprint (e75c4b5269091d15a2e7dc0b6d35f2f5) C:\Windows\system32\DRIVERS\usbprint.sys
2011/03/16 16:42:22.0490 5288 USBSTOR (be3da31c191bc222d9ad503c5224f2ad) C:\Windows\system32\DRIVERS\USBSTOR.SYS
2011/03/16 16:42:22.0613 5288 usbuhci (814d653efc4d48be3b04a307eceff56f) C:\Windows\system32\DRIVERS\usbuhci.sys
2011/03/16 16:42:22.0718 5288 usbvideo (e67998e8f14cb0627a769f6530bcb352) C:\Windows\system32\Drivers\usbvideo.sys
2011/03/16 16:42:22.0827 5288 vga (87b06e1f30b749a114f74622d013f8d4) C:\Windows\system32\DRIVERS\vgapnp.sys
2011/03/16 16:42:22.0959 5288 VgaSave (2e93ac0a1d8c79d019db6c51f036636c) C:\Windows\System32\drivers\vga.sys
2011/03/16 16:42:23.0052 5288 viaagp (5d7159def58a800d5781ba3a879627bc) C:\Windows\system32\drivers\viaagp.sys
2011/03/16 16:42:23.0118 5288 ViaC7 (c4f3a691b5bad343e6249bd8c2d45dee) C:\Windows\system32\drivers\viac7.sys
2011/03/16 16:42:23.0256 5288 viaide (aadf5587a4063f52c2c3fed7887426fc) C:\Windows\system32\drivers\viaide.sys
2011/03/16 16:42:23.0322 5288 volmgr (69503668ac66c77c6cd7af86fbdf8c43) C:\Windows\system32\drivers\volmgr.sys
2011/03/16 16:42:23.0496 5288 volmgrx (23e41b834759917bfd6b9a0d625d0c28) C:\Windows\system32\drivers\volmgrx.sys
2011/03/16 16:42:23.0676 5288 volsnap (147281c01fcb1df9252de2a10d5e7093) C:\Windows\system32\drivers\volsnap.sys
2011/03/16 16:42:23.0905 5288 vsmraid (587253e09325e6bf226b299774b728a9) C:\Windows\system32\drivers\vsmraid.sys
2011/03/16 16:42:24.0122 5288 WacomPen (48dfee8f1af7c8235d4e626f0c4fe031) C:\Windows\system32\drivers\wacompen.sys
2011/03/16 16:42:24.0192 5288 Wanarp (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
2011/03/16 16:42:24.0215 5288 Wanarpv6 (55201897378cca7af8b5efd874374a26) C:\Windows\system32\DRIVERS\wanarp.sys
2011/03/16 16:42:24.0328 5288 Wd (78fe9542363f297b18c027b2d7e7c07f) C:\Windows\system32\drivers\wd.sys
2011/03/16 16:42:24.0517 5288 Wdf01000 (b6f0a7ad6d4bd325fbcd8bac96cd8d96) C:\Windows\system32\drivers\Wdf01000.sys
2011/03/16 16:42:24.0773 5288 winachsf (5c7bdcf5864db00323fe2d90fa26a8a2) C:\Windows\system32\DRIVERS\VSTCNXT3.SYS
2011/03/16 16:42:24.0990 5288 WmiAcpi (2e7255d172df0b8283cdfb7b433b864e) C:\Windows\system32\DRIVERS\wmiacpi.sys
2011/03/16 16:42:25.0111 5288 ws2ifsl (e3a3cb253c0ec2494d4a61f5e43a389c) C:\Windows\system32\drivers\ws2ifsl.sys
2011/03/16 16:42:25.0282 5288 WUDFRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\Windows\system32\DRIVERS\WUDFRd.sys
2011/03/16 16:42:25.0458 5288 ================================================================================
2011/03/16 16:42:25.0458 5288 Scan finished
2011/03/16 16:42:25.0458 5288 ================================================================================
2011/03/16 16:42:25.0485 4996 Detected object count: 1
2011/03/16 16:42:39.0312 4996 Locked file(sptd) - User select action: Skip

cosinus · 16.03.2011, 19:11

Ok. Bitte nun Logs mit GMER und OSAM erstellen und posten.
GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus - die Online-Abfrage durch OSAM bitte überspringen.
Bei OSAM bitte darauf auch achten, dass Du das Log auch als *.log und nicht *.html oder so abspeicherst.

Downloade Dir danach bitte MBRCheck (by a_d_13) und speichere die Datei auf dem Desktop.

Doppelklick auf die MBRCheck.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Das Tool braucht nur einige Sekunden.
Danach solltest du eine MBRCheck_<Datum>_<Uhrzeit>.txt auf dem Desktop finden.

Poste mir bitte den Inhalt des .txt Dokumentes

HairPolice · 16.03.2011, 20:35

So,

GMER ist mir zweimal abgestürzt, habe es also sein gelassen.

OSAM sagt dies:

OSAM Logfile:

Code:

ATTFilter

Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 20:30:09 on 16.03.2011

OS: Windows Vista Home Premium Edition Service Pack 2 (Build 6002), 32-bit
Default Browser: Mozilla Corporation Firefox 3.6.13

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"hpaccelerometercp.CPL" - "Hewlett-Packard Corporation" - C:\Windows\system32\hpaccelerometercp.CPL
"PhysX.cpl" - "NVIDIA Corporation" - C:\Windows\system32\PhysX.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"Nero BurnRights" - "Nero AG" - C:\Program Files\Nero\Nero 9\Nero BurnRights\NeroBurnRights_cpl.cpl
"ProtectSmart Hard Drive Protection" - "Hewlett-Packard Corporation" - C:\Windows\system32\hpaccelerometercp.CPL
"QuickTime" - "Apple Inc." - C:\Program Files\QuickTime\QTSystem\QuickTime.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"Acronis Snapshots Manager" (snapman) - "Acronis" - C:\Windows\System32\DRIVERS\snapman.sys
"Acronis True Image Backup Archive Explorer" (timounter) - "Acronis" - C:\Windows\System32\DRIVERS\timntr.sys
"Acronis True Image FS Filter" (tifsfilter) - "Acronis" - C:\Windows\System32\DRIVERS\tifsfilt.sys
"Acronis Try&Decide and Restore Points filter" (tdrpman) - "Acronis" - C:\Windows\System32\DRIVERS\tdrpman.sys
"ad6u07yo" (ad6u07yo) - "Microsoft Corporation" - C:\Windows\system32\drivers\ad6u07yo.sys  (Hidden registry entry, rootkit activity | File signed by Microsoft)
"aswFsBlk" (aswFsBlk) - "ALWIL Software" - C:\Windows\System32\DRIVERS\aswFsBlk.sys
"aswMonFlt" (aswMonFlt) - "ALWIL Software" - C:\Windows\System32\DRIVERS\aswMonFlt.sys
"aswRdr" (aswRdr) - "ALWIL Software" - C:\Windows\system32\drivers\aswRdr.sys
"avast! Network Shield Support" (aswTdi) - "ALWIL Software" - C:\Windows\system32\drivers\aswTdi.sys
"avast! Self Protection" (aswSP) - "ALWIL Software" - C:\Windows\system32\drivers\aswSP.sys
"catchme" (catchme) - ? - C:\cofi\catchme.sys  (File not found)
"FsUsbExDisk" (FsUsbExDisk) - ? - C:\Windows\system32\FsUsbExDisk.SYS  (File found, but it contains no detailed information)
"IP in IP Tunnel Driver" (IpInIp) - ? - C:\Windows\System32\DRIVERS\ipinip.sys  (File not found)
"IPX Traffic Filter Driver" (NwlnkFlt) - ? - C:\Windows\System32\DRIVERS\nwlnkflt.sys  (File not found)
"IPX Traffic Forwarder Driver" (NwlnkFwd) - ? - C:\Windows\System32\DRIVERS\nwlnkfwd.sys  (File not found)
"sptd" (sptd) - "Duplex Secure Ltd." - C:\Windows\System32\Drivers\sptd.sys  (File is exclusively opened, access blocked)
"StarOpen" (StarOpen) - ? - C:\Windows\system32\drivers\StarOpen.sys  (File found, but it contains no detailed information)
"SymantecAntiBotDriver" (SymantecAntiBotDriver) - "Symantec Corporation. " - C:\Program Files\Symantec\Norton AntiBot\agent\driver\platform_VISTA\AntiBotDriver.sys
"SymantecAntiBotFilter" (SymantecAntiBotFilter) - "Symantec Corporation. " - C:\Program Files\Symantec\Norton AntiBot\agent\driver\platform_VISTA\AntiBotFilter.sys
"SymantecAntiBotShim" (SymantecAntiBotShim) - "Symantec Corporation. " - C:\Program Files\Symantec\Norton AntiBot\agent\driver\platform_VISTA\AntiBotShim.sys

[Explorer]
-----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )-----
{10880D85-AAD9-4558-ABDC-2AB1552D831F} "LightScribe Control Panel" - "Hewlett-Packard Company" - "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe"
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{C9E60ED7-FEAE-477b-B6A6-7D62103A0C6B} "NeroDigitalColumnHandler Class" - "Nero AG" - C:\Program Files\Common Files\Nero\SMC\NeroDigitalExt.dll
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{807553E5-5146-11D5-A672-00B0D022E945} "text/xml" - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{32505114-5902-49B2-880A-1F7738E5A384} "Data Page Plugable Protocal mso-offdap11 Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
{828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
{828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks )-----
{93994DE8-8239-4655-B1D1-5F4E91300429} "DVDIdleShell Class" - "Fengtao Software Inc." - C:\Program Files\DVD Region+CSS Free\DVDShell.dll
{AEB6717E-7E19-11d0-97EE-00C04FD91972} "{AEB6717E-7E19-11d0-97EE-00C04FD91972}" - ? -   (File not found | COM-object registry key not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{911051fa-c21c-4246-b470-070cd8df6dc4} ".cab or .zip files" - ? -   (File not found | COM-object registry key not found)
{C539A15A-3AF9-4c92-B771-50CB78F5C751} "Acronis True Image Shell Context Menu Extension" - "Acronis" - C:\Program Files\Acronis\TrueImageHome\tishell.dll
{C539A15B-3AF9-4c92-B771-50CB78F5C751} "Acronis True Image Shell Extension" - "Acronis" - C:\Program Files\Acronis\TrueImageHome\tishell.dll
{1b24a030-9b20-49bc-97ac-1be4426f9e59} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)
{34449847-FD14-4fc8-A75A-7432F5181EFB} "ActiveDirectory Folder" - ? -   (File not found | COM-object registry key not found)
{472083B0-C522-11CF-8763-00608CC02F24} "avast" - "ALWIL Software" - C:\Program Files\Alwil Software\Avast4\ashShell.dll
{0F8604A5-4ECE-4DE1-BA7D-CF10F8AA4F48} "Contacts folder" - ? -   (File not found | COM-object registry key not found)
{A70C977A-BF00-412C-90B7-034C51DA2439} "DesktopContext Class" - "NVIDIA Corporation" - C:\Windows\system32\nvcpl.dll
{2C2577C2-63A7-40e3-9B7F-586602617ECB} "Explorer Query Band" - ? -   (File not found | COM-object registry key not found)
{FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D} "Meine freigegebenen Ordner" - "Microsoft Corporation" - C:\Program Files\MSN Messenger\fsshext.8.1.0178.00.dll
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Program Files\Microsoft Office\OFFICE11\msohev.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\OFFICE11\MLSHEXT.DLL
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll
{97F68CE3-7146-45FF-BE24-D9A7DD7CB8A2} "NeroCoverEdLiveIcons Class" - "Nero AG" - C:\Program Files\Nero\Nero 9\Nero CoverDesigner\CoverEdExtension.dll
{C9E60ED7-FEAE-477b-B6A6-7D62103A0C6B} "NeroDigitalColumnHandler Class" - "Nero AG" - C:\Program Files\Common Files\Nero\SMC\NeroDigitalExt.dll
{1CA6BBC9-E9FA-4021-822B-075DF1837B63} "NeroDigitalIconHandler Class" - "Nero AG" - C:\Program Files\Common Files\Nero\SMC\NeroDigitalExt.dll
{4FBFFA8D-F390-471a-AE46-FEB93623AD63} "NeroDigitalInfoHandler Class" - "Nero AG" - C:\Program Files\Common Files\Nero\SMC\NeroDigitalExt.dll
{846083A4-BFC6-4447-985C-6578B466A7D7} "NeroDigitalPropSheetHandler Class" - "Nero AG" - C:\Program Files\Common Files\Nero\SMC\NeroDigitalExt.dll
{EDCC595A-F0EE-4d81-B554-D5D01C7AFB87} "NeroDigitalThumbnailHandler Class" - "Nero AG" - C:\Program Files\Common Files\Nero\SMC\NeroDigitalExt.dll
{3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} "NVIDIA CPL Context Menu Extension" - "NVIDIA Corporation" - C:\Windows\system32\nvshext.dll
{FFB699E0-306A-11d3-8BD1-00104B6F7516} "NVIDIA CPL Extension" - "NVIDIA Corporation" - C:\Windows\system32\nvcpl.dll
{0006F045-0000-0000-C000-000000000046} "Outlook-Dateisymbolerweiterung" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\OFFICE11\OLKFSTUB.DLL
{2DC8E5F2-C89C-4730-82C9-19120DEE5B0A} "PDFTransformer3.PDFTContextMenu.1" - "ABBYY" - C:\Program Files\ABBYY PDF Transformer 3.0\PDFTContextMenu.dll
{C8494E42-ACDD-4739-B0FB-217361E4894F} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)
{E29F9716-5C08-4FCD-955A-119FDB5A522D} "Sam Account Folder" - ? -   (File not found | COM-object registry key not found)
{7F67036B-66F1-411A-AD85-759FB9C5B0DB} "ShellViewRTF" - "XSS" - C:\Windows\System32\ShellvRTF.dll
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Webordner" - "Microsoft Corporation" - C:\PROGRA~1\COMMON~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL
{da67b8ad-e81b-4c70-9b91b417b5e33527} "Windows Search Shell Service" - ? -   (File not found | COM-object registry key not found)
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Program Files\WinRAR\rarext.dll  (File found, but it contains no detailed information)

[Internet Explorer]
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} "Java Plug-in 1.6.0_05" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} "Java Plug-in 1.6.0_07" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_13" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2iexp.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} "Java Plug-in 1.6.0_17" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_17.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_17" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\npjpi160_17.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Recherchieren" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} "Adobe PDF Reader" - "Adobe Systems Incorporated" - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Program Files\Java\jre6\bin\jp2ssv.dll
{7E853D72-626A-48EC-A868-BA8D5E23E045} "{7E853D72-626A-48EC-A868-BA8D5E23E045}" - ? -   (File not found | COM-object registry key not found)

[Logon]
-----( %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Startup )-----
"desktop.ini" - ? - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"AutoStartNPSAgent" - "Samsung Electronics Co., Ltd." - C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
"DAEMON Tools Lite" - "DT Soft Ltd" - "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
"Skype" - "Skype Technologies S.A." - "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
-----( HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd )-----
"StartupPrograms" - ? - rdpclip  (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Acronis Scheduler2 Service" - "Acronis" - "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
"AcronisTimounterMonitor" - "Acronis" - C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
"avast!" - "ALWIL Software" - C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
"HP Health Check Scheduler" - "Hewlett-Packard" - c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
"HP Software Update" - "Hewlett-Packard" - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
"hpWirelessAssistant" - "Hewlett-Packard Development Company, L.P." - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
"IAAnotif" - "Intel Corporation" - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
"NortonAntiBot" - "Symantec" - "C:\Program Files\Symantec\Norton AntiBot\agent\bin\NortonAntiBot.exe"
"OnScreenDisplay" - " Hewlett-Packard Development Company, L.P." - C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
"QlbCtrl.exe" - " Hewlett-Packard Development Company, L.P." - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
"QPService" - "CyberLink Corp." - "C:\Program Files\HP\QuickPlay\QPService.exe"
"QuickTime Task" - "Apple Inc." - "C:\Program Files\QuickTime\QTTask.exe" -atboottime
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Program Files\Java\jre6\bin\jusched.exe"
"TrueImageMonitor.exe" - "Acronis" - C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
"UCam_Menu" - "CyberLink Corp." - "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\2.0"

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"Microsoft Document Imaging Writer Monitor" - "Microsoft Corporation" - C:\Windows\system32\mdimon.dll
"PDF-XChange4-ABBYY" - "Tracker Software Products Ltd." - C:\Windows\system32\pxc40pma.dll
"Redirected Port" - ? - C:\Windows\system32\redmonnt.dll  (File found, but it contains no detailed information)

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100" (WPFFontCache_v0400) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
"ABBYY PDF Transformer 3.0 - Lizenzierungsdienst" (ABBYY.Licensing.PDFTransformer.Classic.3.0) - "ABBYY" - C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe
"Acronis Scheduler2 Service" (AcrSch2Svc) - "Acronis" - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
"Acronis Try And Decide Service" (TryAndDecideService) - ? - C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe  (File found, but it contains no detailed information)
"avast! Antivirus" (avast! Antivirus) - "ALWIL Software" - C:\Program Files\Alwil Software\Avast4\ashServ.exe
"avast! iAVS4 Control Service" (aswUpdSv) - "ALWIL Software" - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
"avast! Mail Scanner" (avast! Mail Scanner) - "ALWIL Software" - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
"avast! Web Scanner" (avast! Web Scanner) - "ALWIL Software" - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
"Com4QLBEx" (Com4QLBEx) - "Hewlett-Packard Development Company, L.P." - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
"Cyberlink RichVideo Service(CRVS)" (RichVideo) - ? - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
"Easybits Shared Services for Windows" (ezSharedSvc) - "EasyBits Sofware AS" - C:\Windows\System32\ezsvc7.dll
"FsUsbExService" (FsUsbExService) - "Teruten" - C:\Windows\system32\FsUsbExService.Exe
"GameConsoleService" (GameConsoleService) - "WildTangent, Inc." - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe
"HP Health Check Service" (HP Health Check Service) - "Hewlett-Packard" - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
"hpqwmiex" (hpqwmiex) - "Hewlett-Packard Development Company, L.P." - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
"InstallDriver Table Manager" (IDriverT) - "Macrovision Corporation" - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
"Intel(R) Matrix Storage Event Monitor" (IAANTMON) - "Intel Corporation" - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
"LightScribeService Direct Disc Labeling Service" (LightScribeService) - "Hewlett-Packard Company" - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
"Microsoft .NET Framework NGEN v4.0.30319_X86" (clr_optimization_v4.0.30319_32) - "Microsoft Corporation" - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
"Nero BackItUp Scheduler 4.0" (Nero BackItUp Scheduler 4.0) - "Nero AG" - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
"NMSAccessU" (NMSAccessU) - ? - C:\Program Files\CDBurnerXP\NMSAccessU.exe  (File found, but it contains no detailed information)
"NVIDIA Display Driver Service" (nvsvc) - "NVIDIA Corporation" - C:\Windows\system32\nvvsvc.exe
"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
"QuickPlay Background Capture Service (QBCS)" (QPCapSvc) - ? - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
"QuickPlay Task Scheduler (QTS)" (QPSched) - ? - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
"Recovery Service for Windows" (Recovery Service for Windows) - ? - C:\Windows\SMINST\BLService.exe
"ServiceLayer" (ServiceLayer) - "Nokia." - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
"SymantecAntiBotAgent" (SymantecAntiBotAgent) - "Symantec" - C:\Program Files\Symantec\Norton AntiBot\agent\Bin\NABAgent.exe
"SymantecAntiBotWatcher" (SymantecAntiBotWatcher) - "Symantec" - C:\Program Files\Symantec\Norton AntiBot\agent\Bin\NABWatcher.exe

===[ Logfile end ]=========================================[ Logfile end ]===

--- --- ---

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru

MBRCheck sagt dies:

MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows Vista Home Premium Edition
Windows Information: Service Pack 2 (build 6002), 32-bit
Base Board Manufacturer: Quanta
BIOS Manufacturer: Hewlett-Packard
System Manufacturer: Hewlett-Packard
System Product Name: HP Pavilion dv5 Notebook PC
Logical Drives Mask: 0x0000007c

Kernel Drivers (total 208):
0x82234000 \SystemRoot\system32\ntkrnlpa.exe
0x82201000 \SystemRoot\system32\hal.dll
0x80404000 \SystemRoot\system32\kdcom.dll
0x8040B000 \SystemRoot\system32\mcupdate_GenuineIntel.dll
0x8047B000 \SystemRoot\system32\PSHED.dll
0x8048C000 \SystemRoot\system32\BOOTVID.dll
0x80494000 \SystemRoot\system32\CLFS.SYS
0x804D5000 \SystemRoot\system32\CI.dll
0x80601000 \SystemRoot\system32\drivers\Wdf01000.sys
0x8067D000 \SystemRoot\system32\drivers\WDFLDR.SYS
0x8068A000 \SystemRoot\System32\Drivers\spza.sys
0x8077D000 \SystemRoot\System32\Drivers\WMILIB.SYS
0x80786000 \SystemRoot\System32\Drivers\SCSIPORT.SYS
0x807AC000 \SystemRoot\system32\drivers\acpi.sys
0x807F2000 \SystemRoot\system32\drivers\msisadrv.sys
0x805B5000 \SystemRoot\system32\drivers\pci.sys
0x805DC000 \SystemRoot\system32\drivers\isapnp.sys
0x8AE04000 \SystemRoot\system32\drivers\mpio.sys
0x8AE20000 \SystemRoot\System32\drivers\partmgr.sys
0x8AE2F000 \SystemRoot\system32\DRIVERS\compbatt.sys
0x8AE32000 \SystemRoot\system32\DRIVERS\BATTC.SYS
0x8AE3C000 \SystemRoot\system32\drivers\volmgr.sys
0x8AE4B000 \SystemRoot\System32\drivers\volmgrx.sys
0x8AE95000 \SystemRoot\system32\drivers\intelide.sys
0x8AE9C000 \SystemRoot\system32\drivers\PCIIDEX.SYS
0x8AEAA000 \SystemRoot\system32\drivers\pciide.sys
0x8AEB1000 \SystemRoot\system32\drivers\aliide.sys
0x8AEB8000 \SystemRoot\system32\drivers\amdide.sys
0x8AEBF000 \SystemRoot\system32\drivers\cmdide.sys
0x8AEC7000 \SystemRoot\System32\drivers\mountmgr.sys
0x8AED7000 \SystemRoot\system32\drivers\msdsm.sys
0x8AEF1000 \SystemRoot\system32\drivers\nvraid.sys
0x8AF0C000 \SystemRoot\system32\drivers\CLASSPNP.SYS
0x8AF2D000 \SystemRoot\system32\drivers\viaide.sys
0x8B001000 \SystemRoot\system32\DRIVERS\iaStor.sys
0x8B0CF000 \SystemRoot\system32\drivers\iastorv.sys
0x8B170000 \SystemRoot\system32\drivers\atapi.sys
0x8B178000 \SystemRoot\system32\drivers\ataport.SYS
0x8B196000 \SystemRoot\system32\drivers\lsi_scsi.sys
0x8B1B0000 \SystemRoot\system32\drivers\storport.sys
0x8B1F1000 \SystemRoot\system32\drivers\nvstor.sys
0x8AF35000 \SystemRoot\system32\drivers\msahci.sys
0x8AF3F000 \SystemRoot\system32\drivers\hpcisss.sys
0x8AF4A000 \SystemRoot\system32\drivers\adp94xx.sys
0x8AFB4000 \SystemRoot\system32\drivers\adpahci.sys
0x8B204000 \SystemRoot\system32\drivers\adpu160m.sys
0x8B21F000 \SystemRoot\system32\drivers\adpu320.sys
0x8B245000 \SystemRoot\system32\drivers\djsvs.sys
0x8B259000 \SystemRoot\system32\drivers\arc.sys
0x8B26F000 \SystemRoot\system32\drivers\arcsas.sys
0x8B285000 \SystemRoot\system32\drivers\elxstor.sys
0x8B319000 \SystemRoot\system32\drivers\i2omp.sys
0x8B323000 \SystemRoot\system32\drivers\iirsp.sys
0x8B333000 \SystemRoot\system32\drivers\iteatapi.sys
0x8B33F000 \SystemRoot\system32\drivers\iteraid.sys
0x8B34B000 \SystemRoot\system32\drivers\lsi_fc.sys
0x8B365000 \SystemRoot\system32\drivers\lsi_sas.sys
0x8B37D000 \SystemRoot\system32\drivers\megasas.sys
0x8B405000 \SystemRoot\system32\drivers\megasr.sys
0x8B4BC000 \SystemRoot\system32\drivers\mraid35x.sys
0x8B4C7000 \SystemRoot\system32\drivers\nfrd960.sys
0x8B60D000 \SystemRoot\system32\drivers\ql2300.sys
0x8B745000 \SystemRoot\system32\drivers\ql40xx.sys
0x8B79A000 \SystemRoot\system32\drivers\sisraid2.sys
0x8B7A7000 \SystemRoot\system32\drivers\sisraid4.sys
0x8B7BC000 \SystemRoot\system32\drivers\symc8xx.sys
0x8B7C8000 \SystemRoot\system32\drivers\sym_hi.sys
0x8B7D3000 \SystemRoot\system32\drivers\sym_u3.sys
0x8B4D5000 \SystemRoot\system32\drivers\uliahci.sys
0x8B7DE000 \SystemRoot\system32\drivers\ulsata.sys
0x8B511000 \SystemRoot\system32\drivers\ulsata2.sys
0x8B53D000 \SystemRoot\system32\drivers\vsmraid.sys
0x8B55E000 \SystemRoot\system32\drivers\fltmgr.sys
0x8B590000 \SystemRoot\system32\drivers\fileinfo.sys
0x8B387000 \SystemRoot\System32\Drivers\ksecdd.sys
0x8B809000 \SystemRoot\system32\drivers\ndis.sys
0x8B914000 \SystemRoot\system32\drivers\msrpc.sys
0x8B93F000 \SystemRoot\system32\drivers\NETIO.SYS
0x8BA07000 \SystemRoot\System32\drivers\tcpip.sys
0x8BAF1000 \SystemRoot\System32\drivers\fwpkclnt.sys
0x8BB0C000 \SystemRoot\system32\DRIVERS\timntr.sys
0x8BC08000 \SystemRoot\System32\Drivers\Ntfs.sys
0x8BD18000 \SystemRoot\system32\drivers\wd.sys
0x8BD20000 \SystemRoot\system32\drivers\volsnap.sys
0x8BD59000 \SystemRoot\system32\DRIVERS\tdrpman.sys
0x8BDB2000 \SystemRoot\System32\Drivers\spldr.sys
0x8BDBA000 \SystemRoot\system32\DRIVERS\snapman.sys
0x8BDD8000 \SystemRoot\system32\drivers\sbp2port.sys
0x8BDED000 \SystemRoot\System32\Drivers\mup.sys
0x8BB77000 \SystemRoot\System32\drivers\ecache.sys
0x8BB9E000 \SystemRoot\system32\DRIVERS\hpdskflt.sys
0x8BBA7000 \SystemRoot\system32\drivers\disk.sys
0x8BBB8000 \SystemRoot\system32\drivers\crcdisk.sys
0x8FED9000 \SystemRoot\system32\DRIVERS\tunnel.sys
0x8FEE4000 \SystemRoot\system32\DRIVERS\tunmp.sys
0x8FEED000 \SystemRoot\system32\DRIVERS\intelppm.sys
0x8FEFC000 \SystemRoot\system32\DRIVERS\CmBatt.sys
0x9000A000 \SystemRoot\system32\DRIVERS\nvlddmkm.sys
0x90B04000 \SystemRoot\system32\DRIVERS\nvBridge.kmd
0x90B06000 \SystemRoot\System32\drivers\dxgkrnl.sys
0x90BA6000 \SystemRoot\System32\drivers\watchdog.sys
0x90BB2000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0x90BBD000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0x8FF00000 \SystemRoot\system32\DRIVERS\usbehci.sys
0x8FF0F000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0x90C03000 \SystemRoot\system32\DRIVERS\bcmwl6.sys
0x90D2D000 \SystemRoot\system32\DRIVERS\Rtlh86.sys
0x90D4E000 \SystemRoot\system32\DRIVERS\ohci1394.sys
0x90D5E000 \SystemRoot\system32\DRIVERS\1394BUS.SYS
0x90D6C000 \SystemRoot\system32\DRIVERS\jmcr.sys
0x90D80000 \SystemRoot\system32\DRIVERS\i8042prt.sys
0x90D93000 \SystemRoot\system32\DRIVERS\HpqKbFiltr.sys
0x90D9C000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0x90DA7000 \SystemRoot\system32\DRIVERS\SynTP.sys
0x90DD6000 \SystemRoot\system32\DRIVERS\USBD.SYS
0x90DD8000 \SystemRoot\system32\DRIVERS\mouclass.sys
0x90DE3000 \SystemRoot\system32\DRIVERS\enecir.sys
0x8FF9C000 \SystemRoot\system32\DRIVERS\cdrom.sys
0x8FFB4000 \SystemRoot\System32\Drivers\ad6u07yo.SYS
0x90000000 \SystemRoot\system32\DRIVERS\wmiacpi.sys
0x8FFED000 \SystemRoot\system32\DRIVERS\Accelerometer.sys
0x8BBCE000 \SystemRoot\system32\DRIVERS\msiscsi.sys
0x8FE00000 \SystemRoot\system32\DRIVERS\TDI.SYS
0x8B97A000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0x8B991000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0x8B99C000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0x8B9BF000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0x8B9CE000 \SystemRoot\system32\DRIVERS\raspptp.sys
0x8B9E2000 \SystemRoot\system32\DRIVERS\rassstp.sys
0x8B5A0000 \SystemRoot\system32\DRIVERS\termdd.sys
0x90DFB000 \SystemRoot\system32\DRIVERS\swenum.sys
0x8B5B0000 \SystemRoot\system32\DRIVERS\ks.sys
0x8B5DA000 \SystemRoot\system32\DRIVERS\circlass.sys
0x8B600000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0x8B5E8000 \SystemRoot\system32\DRIVERS\umbus.sys
0x91009000 \SystemRoot\system32\DRIVERS\usbhub.sys
0x9103E000 \SystemRoot\System32\Drivers\NDProxy.SYS
0x9104F000 \SystemRoot\system32\DRIVERS\stwrt.sys
0x910B0000 \SystemRoot\system32\DRIVERS\portcls.sys
0x910DD000 \SystemRoot\system32\DRIVERS\drmk.sys
0x91102000 \SystemRoot\system32\drivers\nvhda32v.sys
0x91115000 \SystemRoot\system32\DRIVERS\hidir.sys
0x91120000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0x91130000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0x91137000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0x91140000 \SystemRoot\system32\DRIVERS\mouhid.sys
0x91148000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0x91151000 \SystemRoot\System32\Drivers\Null.SYS
0x91158000 \SystemRoot\System32\Drivers\Beep.SYS
0x9115F000 \SystemRoot\System32\drivers\vga.sys
0x9116B000 \SystemRoot\System32\drivers\VIDEOPRT.SYS
0x9118C000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0x91194000 \SystemRoot\system32\DRIVERS\hidusb.sys
0x9119D000 \SystemRoot\system32\drivers\rdpencdd.sys
0x911A5000 \SystemRoot\System32\Drivers\Msfs.SYS
0x911B0000 \SystemRoot\System32\Drivers\Npfs.SYS
0x911BE000 \SystemRoot\System32\DRIVERS\rasacd.sys
0x911C7000 \SystemRoot\system32\DRIVERS\tdx.sys
0x911DD000 \SystemRoot\system32\DRIVERS\smb.sys
0x911F1000 \SystemRoot\System32\Drivers\aswTdi.SYS
0x91206000 \SystemRoot\system32\drivers\afd.sys
0x9124E000 \SystemRoot\System32\Drivers\aswRdr.SYS
0x91252000 \SystemRoot\System32\DRIVERS\netbt.sys
0x91284000 \SystemRoot\system32\DRIVERS\pacer.sys
0x9129A000 \SystemRoot\system32\DRIVERS\netbios.sys
0x912A8000 \SystemRoot\system32\DRIVERS\wanarp.sys
0x912BB000 \SystemRoot\system32\DRIVERS\rdbss.sys
0x912F7000 \SystemRoot\system32\drivers\nsiproxy.sys
0x91301000 \SystemRoot\System32\Drivers\dfsc.sys
0x91318000 \SystemRoot\System32\Drivers\aswSP.SYS
0x91339000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0x91350000 \SystemRoot\System32\Drivers\usbvideo.sys
0x91371000 \SystemRoot\System32\Drivers\crashdmp.sys
0x8FE0B000 \SystemRoot\System32\Drivers\dump_iaStor.sys
0x9A040000 \SystemRoot\System32\win32k.sys
0x9137E000 \SystemRoot\System32\drivers\Dxapi.sys
0x91388000 \SystemRoot\system32\DRIVERS\monitor.sys
0x9A260000 \SystemRoot\System32\TSDDD.dll
0x9A280000 \SystemRoot\System32\cdd.dll
0x91397000 \SystemRoot\system32\drivers\luafv.sys
0x913B2000 \SystemRoot\system32\DRIVERS\aswMonFlt.sys
0x913C9000 \SystemRoot\system32\DRIVERS\aswFsBlk.sys
0x913D1000 \SystemRoot\system32\DRIVERS\tifsfilt.sys
0x9E40B000 \SystemRoot\system32\drivers\spsys.sys
0x9E4BB000 \SystemRoot\system32\DRIVERS\lltdio.sys
0x9E4CB000 \SystemRoot\system32\DRIVERS\nwifi.sys
0x9E4F5000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0x9E4FF000 \SystemRoot\system32\DRIVERS\rspndr.sys
0x9E512000 \??\C:\Program Files\Symantec\Norton AntiBot\agent\driver\platform_VISTA\AntiBotShim.sys
0x9E518000 \SystemRoot\system32\drivers\HTTP.sys
0x9E585000 \??\C:\Program Files\Symantec\Norton AntiBot\agent\driver\platform_VISTA\AntiBotFilter.sys
0x9E58F000 \??\C:\Program Files\Symantec\Norton AntiBot\agent\driver\platform_VISTA\AntiBotDriver.sys
0x9E5C0000 \SystemRoot\System32\DRIVERS\srvnet.sys
0x9E5DD000 \SystemRoot\system32\DRIVERS\bowser.sys
0x913DB000 \SystemRoot\System32\drivers\mpsdrv.sys
0xA9005000 \SystemRoot\system32\drivers\mrxdav.sys
0xA9026000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xA9045000 \SystemRoot\system32\DRIVERS\mrxsmb10.sys
0xA907E000 \SystemRoot\system32\DRIVERS\mrxsmb20.sys
0xA9096000 \SystemRoot\System32\DRIVERS\srv2.sys
0xA90BE000 \SystemRoot\System32\DRIVERS\srv.sys
0xA910C000 \SystemRoot\system32\drivers\peauth.sys
0xA91EA000 \SystemRoot\System32\Drivers\secdrv.SYS
0xA91F4000 \SystemRoot\System32\drivers\tcpipreg.sys
0xAC608000 \SystemRoot\system32\DRIVERS\cdfs.sys
0xAC61E000 \??\C:\Windows\system32\FsUsbExDisk.SYS
0x77970000 \Windows\System32\ntdll.dll
0x10000000 \Program Files\DAEMON Tools Lite\Engine.dll

Processes (total 85):
0 System Idle Process
4 SYSTEM
632 C:\Windows\System32\smss.exe
732 csrss.exe
784 C:\Windows\System32\wininit.exe
796 csrss.exe
828 C:\Windows\System32\services.exe
844 C:\Windows\System32\lsass.exe
852 C:\Windows\System32\lsm.exe
1004 C:\Windows\System32\svchost.exe
1048 C:\Windows\System32\winlogon.exe
1112 C:\Windows\System32\nvvsvc.exe
1140 C:\Windows\System32\svchost.exe
1280 C:\Windows\System32\svchost.exe
1308 C:\Windows\System32\svchost.exe
1320 C:\Windows\System32\svchost.exe
1332 C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\stacsv.exe
1424 C:\Windows\System32\audiodg.exe
1644 C:\Windows\System32\SLsvc.exe
1664 C:\Windows\System32\svchost.exe
1748 C:\Windows\System32\nvvsvc.exe
1764 C:\Windows\System32\hpservice.exe
1828 C:\Windows\System32\svchost.exe
1948 C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
1964 C:\Program Files\Alwil Software\Avast4\ashServ.exe
1992 C:\Windows\System32\wlanext.exe
1124 C:\Windows\System32\spoolsv.exe
1356 C:\Program Files\Symantec\Norton AntiBot\agent\Bin\NABAgent.exe
1620 C:\Windows\System32\taskeng.exe
2248 C:\Windows\System32\svchost.exe
2476 C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe
2492 C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
2508 C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\AEstSrv.exe
2564 C:\Windows\System32\FsUsbExService.Exe
2628 C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
2768 C:\Program Files\Common Files\LightScribe\LSSrvc.exe
2808 C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
2860 C:\Program Files\CDBurnerXP\NMSAccessU.exe
2892 C:\Windows\System32\svchost.exe
2912 C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
2932 C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
2952 C:\Windows\SMINST\BLService.exe
2976 C:\Program Files\CyberLink\Shared Files\RichVideo.exe
3020 C:\Windows\System32\svchost.exe
3052 C:\Program Files\Symantec\Norton AntiBot\agent\Bin\NABWatcher.exe
3088 C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
3168 C:\Windows\System32\svchost.exe
3188 C:\Windows\System32\SearchIndexer.exe
3256 C:\Windows\System32\dwm.exe
3388 C:\Windows\explorer.exe
3580 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
3604 C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
3660 C:\Program Files\HP\QuickPlay\QPService.exe
3736 C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
3744 C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
3764 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
3780 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
3792 C:\Program Files\Alwil Software\Avast4\ashDisp.exe
3808 C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
3836 C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
3848 C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
3856 C:\Program Files\Symantec\Norton AntiBot\agent\Bin\NortonAntiBot.exe
3896 C:\Program Files\Java\jre6\bin\jusched.exe
3924 C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
3980 C:\Program Files\DAEMON Tools Lite\DTLite.exe
3988 C:\Windows\ehome\ehtray.exe
2876 C:\Program Files\Symantec\Norton AntiBot\agent\Bin\NABMonitor.exe
484 ehmsas.exe
3124 C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
4084 C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
2460 C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
1260 WmiPrvSE.exe
4296 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
4352 C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
4360 C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
4540 HpqToaster.exe
5668 C:\Windows\System32\taskeng.exe
4144 C:\Windows\System32\svchost.exe
4224 C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe
2780 C:\Windows\System32\SearchProtocolHost.exe
3788 C:\Windows\System32\SearchFilterHost.exe
4016 dllhost.exe
5304 dllhost.exe
4816 C:\Users\Sparsam\Desktop\MBRCheck.exe
2156 C:\Windows\System32\conime.exe

\\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)
\\.\D: --> \\.\PhysicalDrive0 at offset 0x00000024`aa600000 (NTFS)
\\.\E: --> \\.\PhysicalDrive0 at offset 0x00000048`47e00000 (NTFS)

PhysicalDrive0 Model Number: FUJITSUMHZ2320BHG2, Rev: 8909

Size Device Name MBR Status
--------------------------------------------
298 GB \\.\PhysicalDrive0 Unknown MBR code
SHA1: 08F21ADD893776C287CC68A3558F8D095B50ED3C

Found non-standard or infected MBR.
Enter 'Y' and hit ENTER for more options, or 'N' to exit:
Options:
[1] Dump the MBR of a physical disk to file.
[2] Restore the MBR of a physical disk with a standard boot code.
[3] Exit.

Enter your choice:

Done!

cosinus · 16.03.2011, 21:12

Ok.Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

HairPolice · 17.03.2011, 01:18

So, das wäre auch geschafft. Ich danke Dir für die Geduld mit mir und Deine Mühe mit meinem Problem! Ich muss ab morgen leider bis Freitag abend auf Dienstreise, kann also dann erst weitermachen.
SuperAntiSpyware hat noch zwei Funde in Quarantäne gesteckt und mir gesagt, ich solle den Rechner neu hochfahren, um die Quarantäne zu garantieren. Das habe ich jetzt erstmal gelassen. Hier sind die Logs:

SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 03/17/2011 at 01:10 AM

Application Version : 4.49.1000

Core Rules Database Version : 6611
Trace Rules Database Version: 4423

Scan type : Complete Scan
Total Scan Time : 02:15:24

Memory items scanned : 737
Memory threats detected : 0
Registry items scanned : 9665
Registry threats detected : 0
File items scanned : 190652
File threats detected : 2

Adware.Unknown Origin
C:\PROGRAM FILES\HEWLETT-PACKARD\HP ADVISOR\COMPSHOP\TEMPLATES\AD.HTML

Trojan.Agent/Gen-Nullo[Micro]
C:\QOOBOX\QUARANTINE\C\WINDOWS\SYSTEM32\SYSTEM.VIR

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6072

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

16.03.2011 22:39:21
mbam-log-2011-03-16 (22-39-21).txt

Scan type: Full scan (C:\|D:\|E:\|)
Objects scanned: 320710
Time elapsed: 48 minute(s), 14 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

cosinus · 17.03.2011, 09:49

Nur ein Überrest und ein Fehlalarm. Rechner sonst soweit wieder ok?

HairPolice · 18.03.2011, 22:00

So, bin wieder da. Der Rechner läuft sonst prima. Muss ich sonst noch was beachten? Kann ich die Programme wieder löschen?

Schöne Grüße
Jan

cosinus · 18.03.2011, 22:17

Dann wären wir durch!

Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.

Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update

PDF-Reader aktualisieren
Dein Adobe Reader ist nicht aktuell, was ein großes Sicherheitsrisiko darstellt. Du solltest daher besser die alte Version über Systemsteuerung => Software deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst.

Ich empfehle einen alternativen PDF-Reader wie SumatraPDF oder Foxit PDF Reader, beide sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink (Mozilla und andere Browser) => http://filepony.de/?q=Flash+Player
Internet Explorer => http://fpdownload.adobe.com/get/flas..._player_ax.exe

Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

HairPolice · 18.03.2011, 22:35

Lieber Arne,

ich danke Dir tausend Mal für die ganze Begleitung durch die Aufräumaktion! Die Updates ziehe ich dann jetzt alle durch.

Zwei Fragen hätte ich noch: Was habe ich den da eigentlich jetzt für ein Ding gehabt? Und heißt alle Passwörter auch die ganzen online-Dinger, also Emailaccount usw.?

1000xDanke und schöne Grüße
Jan

cosinus · 19.03.2011, 13:20

Recht schwierig zu sagen, was genau für eine Infektion das war. Das mit dem AIM sah auf jeden Fall nach einem Fehlalarm aus und naja ein wenig Müll haben wir entworgt, aber das war alles weniger kritisch

HairPolice · 19.03.2011, 14:23

Alles klar, das hört sich ja beruhigend an! Updates habe ich alle gemacht, dann noch ein letztes Dankeschön!

Schöne Grüße
jan

cosinus · 19.03.2011, 20:18

Null problemo, melde dich einfach wieder wenn's nochmal "gekracht" hat

16.03.2011, 16:35	#17
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	$„Win32:Malware-gen“ in C:\HP\HPQWare\aim_icq\triton_fr_fr\aoldlmgr.exe - Standard$ „Win32:Malware-gen“ in C:\HP\HPQWare\aim_icq\triton_fr_fr\aoldlmgr.exe Windows neu starten und nochmal probieren. __________________ __________________

17.03.2011, 09:49	#23
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	$„Win32:Malware-gen“ in C:\HP\HPQWare\aim_icq\triton_fr_fr\aoldlmgr.exe - Standard$ „Win32:Malware-gen“ in C:\HP\HPQWare\aim_icq\triton_fr_fr\aoldlmgr.exe Nur ein Überrest und ein Fehlalarm. Rechner sonst soweit wieder ok? __________________ Logfiles bitte immer in CODE-Tags posten

19.03.2011, 20:18	#29
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	$„Win32:Malware-gen“ in C:\HP\HPQWare\aim_icq\triton_fr_fr\aoldlmgr.exe - Standard$ „Win32:Malware-gen“ in C:\HP\HPQWare\aim_icq\triton_fr_fr\aoldlmgr.exe Null problemo, melde dich einfach wieder wenn's nochmal "gekracht" hat __________________ Logfiles bitte immer in CODE-Tags posten

„Win32:Malware-gen“ in C:\HP\HPQWare\aim_icq\triton_fr_fr\aoldlmgr.exe

Plagegeister aller Art und deren Bekämpfung: „Win32:Malware-gen“ in C:\HP\HPQWare\aim_icq\triton_fr_fr\aoldlmgr.exe