Trojaner-Board - Avira findet erst JS.Expack.EM und dann Spy.Zbot

Zitat:

Was denn für Beschränkungen?
Was können andere Browser dafür, wenn der Seitenbetreiber nur auf IE-Clients setzt?

Ich glaube, das lag daran, dass NoScript, auch wenn man Scripte der Seite erlaubt, keine Fremdscripte zulässt. Zumindest gibt es Seiten, die mit den besagten Addons, auch wenn man die Beschränkungen in ihnen aufhebt, nicht angezeigt werden können.

DDS Logfile:

Code:

DDS (Ver_2012-11-20.01) - NTFS_AMD64 

Internet Explorer: 9.0.8112.16464  BrowserJavaVersion: 1.6.0_29

Run by user at 10:06:57 on 2013-03-08

Microsoft Windows 7 Professional   6.1.7601.1.1252.49.1031.18.4094.2820 [GMT 1:00]

.

AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\Dwm.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\taskhost.exe

C:\Windows\Explorer.EXE

D:\Program Files\Avira\AntiVir Desktop\sched.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

D:\Program Files\Adobe Photoshop\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe

C:\Windows\SysWOW64\svchost.exe -k Akamai

D:\Program Files\Avira\AntiVir Desktop\avguard.exe

D:\Program Files\Allway Sync\Bin\SyncService.exe

C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe

C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

D:\Program Files\GNU\GnuPG\dirmngr.exe

C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE

C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt

C:\Windows\SysWOW64\XSrvSetup.exe

D:\Program Files\Kies\External\FirmwareUpdate\KiesPDLR.exe

C:\Windows\System32\svchost.exe -k HPZ12

D:\Program Files\CDBurnerXP\NMSAccessU.exe

C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe

C:\Windows\System32\svchost.exe -k HPZ12

C:\Users\user\AppData\Local\Akamai\netsession_win.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\System32\svchost.exe -k secsvcs

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

D:\Program Files\Avira\AntiVir Desktop\avshadow.exe

C:\Users\user\AppData\Local\Akamai\netsession_win.exe

C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Windows\system32\svchost.exe -k HPService

D:\Program Files\Treiber\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files (x86)\NETGEAR\WG111v3\WG111v3.exe

D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\SearchIndexer.exe

C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe

C:\Program Files (x86)\FreePDF_XP\fpassist.exe

C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

D:\Program Files\Treiber\HP\HP Software Update\hpwuschd2.exe

D:\Program Files\Avira\AntiVir Desktop\avgnt.exe

D:\Program Files\Treiber\HP\Digital Imaging\bin\hpqSTE08.exe

D:\Program Files\Treiber\HP\Digital Imaging\bin\hpqbam08.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files\Windows Media Player\wmpnetwk.exe

D:\Program Files\Treiber\HP\Digital Imaging\bin\hpqgpc01.exe

C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\System32\cscript.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com

uProxyOverride = <local>

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

BHO: Windows Live Anmelde-Hilfsprogramm: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Skype Plug-In: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\bin\jp2ssv.dll

uRun: [ISUSPM Startup] c:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup

uRun: [KiesPDLR] D:\Program Files\Kies\External\FirmwareUpdate\KiesPDLR.exe

uRun: [Akamai NetSession Interface] "C:\Users\user\AppData\Local\Akamai\netsession_win.exe"

uRun: [Vidalia] "D:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe"

uRun: [ANT Agent] C:\Program Files (x86)\Garmin\ANT Agent\ANT Agent.exe

uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

mRun: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe

mRun: [NUSB3MON] "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

mRun: [KeePass 2 PreLoad] "D:\Program Files\KeePass\KeePass.exe" --preload

mRun: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start

mRun: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

mRun: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

mRun: [GrooveMonitor] "D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

mRun: [FreePDF Assistant] C:\Program Files (x86)\FreePDF_XP\fpassist.exe

mRun: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [HP Software Update] D:\Program Files\Treiber\HP\HP Software Update\HPWuSchd2.exe

mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

mRun: [avgnt] "D:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

StartupFolder: C:\Users\user\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\user\AppData\Roaming\Dropbox\bin\Dropbox.exe

StartupFolder: C:\Users\user\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - D:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

StartupFolder: C:\Users\user\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENVP~1.LNK - D:\Program Files\OpenVPN\bin\openvpn-gui-1.0.3.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\HPDIGI~1.LNK - D:\Program Files\Treiber\HP\Digital Imaging\bin\hpqtra08.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\NETGEA~1.LNK - C:\Program Files (x86)\NETGEAR\WG111v3\WG111v3.exe

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\OPENVP~1.LNK - C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\ovpntray.exe

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

uPolicies-Explorer: NoDrives = dword:0

mPolicies-Explorer: NoDrives = dword:0

mPolicies-System: ConsentPromptBehaviorAdmin = dword:0

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableLUA = dword:0

mPolicies-System: EnableUIADesktopToggle = dword:0

mPolicies-System: PromptOnSecureDesktop = dword:0

IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200

IE: BID Link Explorer: Öffne aktuelle Seite - D:\Program Files\Bulk Image Downloader\iemenu\iebidlinkexplorer.htm

IE: BID: Link in Queue einreihen - D:\Program Files\Bulk Image Downloader\iemenu\iebidlinkqueue.htm

IE: BID: Seite in &Queue einreihen - D:\Program Files\Bulk Image Downloader\iemenu\iebidqueue.htm

IE: BID: Öffne aktuelle Seite - D:\Program Files\Bulk Image Downloader\iemenu\iebid.htm

IE: BID: Öffne diesen &Link - D:\Program Files\Bulk Image Downloader\iemenu\iebidlink.htm

IE: Nach Microsoft &Excel exportieren - D:\PROGRA~2\MICROS~1\Office10\EXCEL.EXE/3000

IE: Nach Microsoft E&xel exportieren - D:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - D:\Program Files\Microsoft Office\Office12\ONBttnIE.dll

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

TCP: NameServer = 192.168.178.1

TCP: Interfaces\{378EFFA4-C0DC-4D97-833C-9BC576364504} : DHCPNameServer = 192.168.178.1

TCP: Interfaces\{378EFFA4-C0DC-4D97-833C-9BC576364504}\13F474 : DHCPNameServer = 192.168.178.1

TCP: Interfaces\{378EFFA4-C0DC-4D97-833C-9BC576364504}\14E64627F69646140583030333 : DHCPNameServer = 192.168.43.1

TCP: Interfaces\{378EFFA4-C0DC-4D97-833C-9BC576364504}\B656272697 : DHCPNameServer = 192.168.109.1

TCP: Interfaces\{D65EF701-E5A3-4F9D-B7B0-93879E23381D} : DHCPNameServer = 172.27.0.1

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll

SSODL: WebCheck - <orphaned>

SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

mASetup: {A8D647C8-65AC-409F-B7B2-3C0FEE1A32F2} - C:\Program Files (x86)\PixiePack Codec Pack\InstallerHelper.exe

x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned>

x64-Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - <orphaned>

x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>

x64-SSODL: WebCheck - <orphaned>

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b3rkme20.default\

FF - prefs.js: browser.search.defaulturl - hxxp://www.bing.com/search?FORM=IEFM1&q=

FF - prefs.js: browser.search.selectedEngine - NCH EN Customized Web Search

FF - prefs.js: browser.startup.homepage - about:home

FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=. 

FF - prefs.js: network.proxy.http - localhost

FF - prefs.js: network.proxy.http_port - 8118

FF - prefs.js: network.proxy.socks - localhost

FF - prefs.js: network.proxy.socks_port - 9050

FF - prefs.js: network.proxy.type - 0

FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

FF - plugin: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

FF - plugin: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\b3rkme20.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}\plugins\npGarmin.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_168.dll

FF - plugin: D:\Program Files\Java\bin\new_plugin\npdeployJava1.dll

FF - plugin: D:\Program Files\Java\bin\new_plugin\npjp2.dll

FF - plugin: D:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

FF - plugin: D:\Program Files\Picasa3\npPicasa3.dll

.

---- FIREFOX POLICIES ----

FF - user.js: network.cookie.cookieBehavior - 0

FF - user.js: privacy.clearOnShutdown.cookies - false

FF - user.js: security.warn_viewing_mixed - false

FF - user.js: security.warn_viewing_mixed.show_once - false

FF - user.js: security.warn_submit_insecure - false

FF - user.js: security.warn_submit_insecure.show_once - false

.

============= SERVICES / DRIVERS ===============

.

R0 PxHlpa64;PxHlpa64;C:\Windows\System32\drivers\PxHlpa64.sys [2010-8-7 55856]

R1 AppleCharger;AppleCharger;C:\Windows\System32\drivers\AppleCharger.sys [2010-7-29 21544]

R1 avkmgr;avkmgr;C:\Windows\System32\drivers\avkmgr.sys [2012-4-7 27760]

R2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;D:\Program Files\Adobe Photoshop\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-9-6 169312]

R2 Akamai;Akamai NetSession Interface;C:\Windows\System32\svchost.exe -k Akamai [2009-7-14 27136]

R2 AntiVirSchedulerService;Avira Planer;D:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-4-7 86224]

R2 AntiVirService;Avira Echtzeit Scanner;D:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-4-7 110032]

R2 avgntflt;avgntflt;C:\Windows\System32\drivers\avgntflt.sys [2012-4-7 98848]

R2 BotkindSyncService;Botkind Service;D:\Program Files\Allway Sync\Bin\SyncService.exe service --> D:\Program Files\Allway Sync\Bin\SyncService.exe service [?]

R2 DirMngr;DirMngr;D:\Program Files\GNU\GnuPG\dirmngr.exe [2010-7-28 242176]

R2 ES lite Service;ES lite Service for program management.;C:\Program Files (x86)\Gigabyte\EasySaver\essvr.exe [2010-7-29 68136]

R2 JMB36X;JMB36X;C:\Windows\SysWOW64\XSrvSetup.exe [2010-7-29 72304]

R2 OpenVPNAccessClient;OpenVPN Access Client;C:\Program Files (x86)\OpenVPN Technologies\OpenVPN Client\core\capiws.exe [2011-8-25 24064]

R2 Sentinel64;Sentinel64;C:\Windows\System32\drivers\sentinel64.sys [2010-8-11 142120]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-2 382824]

R3 libusb0;libusb-win32 - Kernel Driver 04/08/2011 1.2.4.0;C:\Windows\System32\drivers\libusb0.sys [2011-5-13 44480]

R3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;C:\Windows\System32\drivers\nusb3hub.sys [2009-11-20 75776]

R3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;C:\Windows\System32\drivers\nusb3xhc.sys [2009-11-20 177152]

R3 RRNetCapMP;RRNetCapMP;C:\Windows\System32\drivers\rrnetcap.sys [2010-8-2 37480]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2010-7-29 346144]

R3 RTL8187B;NETGEAR WG111v3 Wireless-G USB Adapter Win7 Driver;C:\Windows\System32\drivers\wg111v3.sys [2011-4-12 446976]

R3 tapoas;TAP-Win32 Adapter OAS;C:\Windows\System32\drivers\tapoas.sys [2011-8-19 30720]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]

S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;C:\Windows\System32\drivers\ssadadb.sys [2011-10-8 36328]

S3 AppleChargerSrv;AppleChargerSrv;system32\AppleChargerSrv.exe --> system32\AppleChargerSrv.exe [?]

S3 athrusb;Atheros Wireless LAN USB device driver;C:\Windows\System32\drivers\athrxusb.sys [2011-4-2 556544]

S3 nmwcdnsucx64;Nokia USB Flashing Generic;C:\Windows\System32\drivers\nmwcdnsucx64.sys [2011-5-18 12800]

S3 nmwcdnsux64;Nokia USB Flashing Phone Parent;C:\Windows\System32\drivers\nmwcdnsux64.sys [2011-5-18 171008]

S3 nosGetPlusHelper;getPlus(R) Helper 3004;C:\Windows\System32\svchost.exe -k nosGetPlusHelper [2009-7-14 27136]

S3 pwdrvio;pwdrvio;C:\Windows\System32\pwdrvio.sys [2013-1-10 19032]

S3 pwdspio;pwdspio;C:\Windows\System32\pwdspio.sys [2013-1-10 12384]

S3 RRNetCap;RRNetCap Service;C:\Windows\System32\drivers\rrnetcap.sys [2010-8-2 37480]

S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);C:\Windows\System32\drivers\ssadbus.sys [2011-10-8 157672]

S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);C:\Windows\System32\drivers\ssadmdfl.sys [2011-10-8 16872]

S3 ssadmdm;SAMSUNG Android USB Modem Drivers;C:\Windows\System32\drivers\ssadmdm.sys [2011-10-8 177640]

S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);C:\Windows\System32\drivers\ssadserd.sys [2011-10-8 146920]

S3 StorSvc;Speicherdienst;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 27136]

S3 SwitchBoard;SwitchBoard;C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-2-19 517096]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-7-8 59392]

.

=============== File Associations ===============

.

FileExt: .reg: Regedit.Document=c:\Winnt\Regedit.exe %1

.

=============== Created Last 30 ================

.

2013-03-06 17:37:22        9162192        ----a-w-        C:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll

2013-03-06 17:37:15        9162192        ----a-w-        C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5A69762F-D86E-4EE0-BB6A-26844246BF56}\mpengine.dll

2013-03-04 20:44:34        --------        d-----w-        C:\Program Files (x86)\ESET

2013-03-04 10:48:37        --------        d-----w-        C:\_OTL

2013-03-02 18:26:35        --------        d-----w-        C:\Windows\ERUNT

2013-03-02 18:26:26        --------        d-----w-        C:\JRT

2013-03-02 18:23:21        273840        ------w-        C:\Windows\System32\MpSigStub.exe

2013-03-01 18:21:11        --------        d-----w-        C:\$RECYCLE.BIN

2013-03-01 15:35:39        98816        ----a-w-        C:\Windows\sed.exe

2013-03-01 15:35:39        256000        ----a-w-        C:\Windows\PEV.exe

2013-03-01 15:35:39        208896        ----a-w-        C:\Windows\MBR.exe

2013-02-28 10:51:19        --------        d-----w-        C:\Users\user\AppData\Local\Programs

2013-02-25 21:13:00        --------        d-----w-        C:\Users\user\AppData\Roaming\{EBBDA7E5-AB7B-4114-A5D7-466CA013A61A}

2013-02-25 21:12:59        --------        d-----w-        C:\Users\user\AppData\Roaming\{13215AB9-2B2E-4F6E-ADF1-1D7048C31288}

2013-02-25 21:12:25        --------        d-----w-        C:\Users\user\AppData\Roaming\{C7E6AB03-F5B6-4277-BCC7-9290C2711314}

2013-02-21 11:47:11        --------        d-----w-        C:\Users\user\AppData\Roaming\Sync App Settings

2013-02-19 22:53:58        --------        d-----w-        C:\Users\user\AppData\Roaming\tor

2013-02-19 22:53:51        --------        d-----w-        C:\Users\user\AppData\Local\Tor

2013-02-19 22:53:50        --------        d-----w-        C:\Users\user\AppData\Local\Vidalia

2013-02-15 18:58:12        106088        ----a-w-        C:\Program Files (x86)\Internet Explorer\PLUGINS\nppdf32.dll

2013-02-13 14:37:06        996352        ----a-w-        C:\Program Files\Common Files\Microsoft Shared\VGX\VGX.dll

2013-02-13 14:37:06        768000        ----a-w-        C:\Program Files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll

2013-02-13 12:05:06        5553512        ----a-w-        C:\Windows\System32\ntoskrnl.exe

2013-02-13 12:05:05        3967848        ----a-w-        C:\Windows\SysWow64\ntkrnlpa.exe

2013-02-13 12:05:05        3913064        ----a-w-        C:\Windows\SysWow64\ntoskrnl.exe

2013-02-13 12:04:50        3153408        ----a-w-        C:\Windows\System32\win32k.sys

2013-02-13 12:04:49        215040        ----a-w-        C:\Windows\System32\winsrv.dll

2013-02-13 12:04:47        7680        ----a-w-        C:\Windows\SysWow64\instnm.exe

2013-02-13 12:04:47        5120        ----a-w-        C:\Windows\SysWow64\wow32.dll

2013-02-13 12:04:47        25600        ----a-w-        C:\Windows\SysWow64\setup16.exe

2013-02-13 12:04:47        14336        ----a-w-        C:\Windows\SysWow64\ntvdm64.dll

2013-02-13 12:04:46        2048        ----a-w-        C:\Windows\SysWow64\user.exe

2013-02-13 12:04:45        288088        ----a-w-        C:\Windows\System32\drivers\FWPKCLNT.SYS

2013-02-13 12:04:45        1913192        ----a-w-        C:\Windows\System32\drivers\tcpip.sys

.

==================== Find3M  ====================

.

2013-03-08 08:13:58        25640        ----a-w-        C:\Windows\gdrv.sys

2013-02-14 12:34:27        71024        ----a-w-        C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2013-02-14 12:34:27        691568        ----a-w-        C:\Windows\SysWow64\FlashPlayerApp.exe

2013-01-09 01:19:09        2312704        ----a-w-        C:\Windows\System32\jscript9.dll

2013-01-09 01:12:03        1392128        ----a-w-        C:\Windows\System32\wininet.dll

2013-01-09 01:11:06        1494528        ----a-w-        C:\Windows\System32\inetcpl.cpl

2013-01-09 01:07:51        173056        ----a-w-        C:\Windows\System32\ieUnatt.exe

2013-01-09 01:07:47        599040        ----a-w-        C:\Windows\System32\vbscript.dll

2013-01-09 01:04:42        2382848        ----a-w-        C:\Windows\System32\mshtml.tlb

2013-01-08 22:11:21        1800704        ----a-w-        C:\Windows\SysWow64\jscript9.dll

2013-01-08 22:03:20        1129472        ----a-w-        C:\Windows\SysWow64\wininet.dll

2013-01-08 22:03:12        1427968        ----a-w-        C:\Windows\SysWow64\inetcpl.cpl

2013-01-08 21:59:02        142848        ----a-w-        C:\Windows\SysWow64\ieUnatt.exe

2013-01-08 21:58:29        420864        ----a-w-        C:\Windows\SysWow64\vbscript.dll

2013-01-08 21:56:23        2382848        ----a-w-        C:\Windows\SysWow64\mshtml.tlb

2013-01-04 04:43:21        44032        ----a-w-        C:\Windows\apppatch\acwow64.dll

2012-12-16 17:11:22        46080        ----a-w-        C:\Windows\System32\atmlib.dll

2012-12-16 14:45:03        367616        ----a-w-        C:\Windows\System32\atmfd.dll

2012-12-16 14:13:28        295424        ----a-w-        C:\Windows\SysWow64\atmfd.dll

2012-12-16 14:13:20        34304        ----a-w-        C:\Windows\SysWow64\atmlib.dll

2012-12-14 15:49:28        24176        ----a-w-        C:\Windows\System32\drivers\mbam.sys

.

============= FINISH: 10:07:40,26 ===============

--- --- ---

Code:

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Professional 

Boot Device: \Device\HarddiskVolume1

Install Date: 29.07.2010 11:14:13

System Uptime: 08.03.2013 09:13:22 (1 hours ago)

.

Motherboard: Gigabyte Technology Co., Ltd. |  | GA-870A-UD3

Processor: AMD Athlon(tm) II X4 635 Processor | Socket M2 | 2900/200mhz

.

==== Disk Partitions =========================

.

A: is Removable

C: is FIXED (NTFS) - 39 GiB total, 0,935 GiB free.

D: is FIXED (NTFS) - 194 GiB total, 12,256 GiB free.

F: is CDROM ()

K: is FIXED (NTFS) - 932 GiB total, 0,333 GiB free.

.

==== Disabled Device Manager Items =============

.

Class GUID: {4d36e971-e325-11ce-bfc1-08002be10318}

Description: Photosmart B110 series

Device ID: ROOT\MULTIFUNCTION\0000

Manufacturer: HP

Name: Photosmart B110 series

PNP Device ID: ROOT\MULTIFUNCTION\0000

Service: 

.

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}

Description: Cisco Systems VPN Adapter for 64-bit Windows

Device ID: ROOT\NET\0000

Manufacturer: Cisco Systems

Name: Cisco Systems VPN Adapter for 64-bit Windows

PNP Device ID: ROOT\NET\0000

Service: CVirtA

.

Class GUID: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Description: Photosmart B110 series

Device ID: ROOT\IMAGE\0000

Manufacturer: HP

Name: Photosmart B110 series

PNP Device ID: ROOT\IMAGE\0000

Service: StillCam

.

==== System Restore Points ===================

.

RP537: 07.03.2013 10:38:20 - Geplanter Prüfpunkt

.

==== Installed Programs ======================

.

 Update for Microsoft Office 2007 (KB2508958)

64 Bit HP CIO Components Installer

7-Zip 9.20

Add or Remove Adobe Premiere Pro CS5

Adobe AIR

Adobe Community Help

Adobe Download Assistant

Adobe Download Manager

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Media Player

Adobe Photoshop Elements 8.0

Adobe Premiere Pro CS5 Third Party Royalty Content

Adobe Reader 9.5.4 - Deutsch

Adobe Shockwave Player 11.6

AirSnare

Akamai NetSession Interface

Akamai NetSession Interface Service

Allway Sync version 12.2.3

µTorrent

Audials

Audiograbber 1.83 SE 

Audiograbber MP3-Plugin (64 bit)

Avira Free Antivirus

B110

BufferChm

Bulk Image Downloader v4.14.0.2

CamStudio Lossless Codec

CANON iMAGE GATEWAY Task for ZoomBrowser EX

Canon Internet Library for ZoomBrowser EX

Canon RAW Image Task for ZoomBrowser EX

Canon Utilities CameraWindow

Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX

Canon Utilities Digital Photo Professional 3.3

Canon Utilities EOS Utility

Canon Utilities MyCamera

Canon Utilities Picture Style Editor

Canon Utilities RemoteCapture Task for ZoomBrowser EX

Canon Utilities ZoomBrowser EX

Canon ZoomBrowser EX Memory Card Utility

CDBurnerXP

Cisco Systems VPN Client 5.0.07.0290

Cryptophane+GnuPG 0.7.0

Dawn

Destinations

DeviceDiscovery

DHTML Editing Component

Dir-It!

DivX-Setup

Dropbox

EasySaver B9.1214.1 

Eraser 6.0.7.1893

ERUNT 1.1j

ESET Online Scanner v3

Ethereal 0.99.0

Express Talk

Eye-Fi Center 3.4

Fake Voice 2.0.0

FileZilla Client 3.5.2

FireBurner

Free WMA to MP3 Converter 1.16

FreePDF (Remove only)

Garmin ANT Agent

Garmin BaseCamp

Garmin MapSource

Garmin USB Drivers

Gigabyte Raid Configurer

GNU Privacy Guard

GnuPT Version 3.7.6

Google Earth Plug-in

Google Update Helper

GPBaseService2

Gpg4win (2.0.4)

GPL Ghostscript 8.71

Hewlett-Packard ACLM.NET v1.1.0.0

HP Imaging Device Functions 14.0

HP Photosmart Wireless B110 All-In-One Driver Software 14.0 Rel. 7

HP Product Detection

HP Solution Center 14.0

HP Update

HPAppStudio

HPDiagnosticAlert

HPPhotoGadget

HPProductAssistant

inSSIDer 2.0

IrfanView (remove only)

Java Auto Updater

Java(TM) 6 Update 29

Junction Link Magic 2.0

KeePass Password Safe 2.19

Last.fm Scrobbler 2.1.33

LEGO Digital Designer

LibreOffice 3.6

Malwarebytes Anti-Malware Version 1.70.0.1100

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Client Profile DEU Language Pack

Microsoft Application Error Reporting

Microsoft Choice Guard

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access MUI (German) 2007

Microsoft Office Enterprise 2007

Microsoft Office Excel MUI (German) 2007

Microsoft Office File Validation Add-In

Microsoft Office Groove MUI (German) 2007

Microsoft Office InfoPath MUI (German) 2007

Microsoft Office Live Add-in 1.5

Microsoft Office Office 64-bit Components 2007

Microsoft Office OneNote MUI (German) 2007

Microsoft Office Outlook MUI (German) 2007

Microsoft Office PowerPoint MUI (German) 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (German) 2007

Microsoft Office Proof (Italian) 2007

Microsoft Office Proofing (German) 2007

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Publisher MUI (German) 2007

Microsoft Office Shared 64-bit MUI (German) 2007

Microsoft Office Shared MUI (German) 2007

Microsoft Office Word MUI (German) 2007

Microsoft Silverlight

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

Microsoft_VC80_ATL_x86

Microsoft_VC80_CRT_x86

Microsoft_VC80_CRT_x86_x64

Microsoft_VC80_MFC_x86

Microsoft_VC80_MFC_x86_x64

Microsoft_VC80_MFCLOC_x86

Microsoft_VC80_MFCLOC_x86_x64

Microsoft_VC90_ATL_x86

Microsoft_VC90_ATL_x86_x64

Microsoft_VC90_CRT_x86

Microsoft_VC90_CRT_x86_x64

Microsoft_VC90_MFC_x86

Microsoft_VC90_MFC_x86_x64

MiniTool Partition Wizard Home Edition 7.6.1

Miranda IM 0.9.4

Mozilla Firefox 19.0 (x86 de)

Mozilla Maintenance Service

Mozilla Thunderbird 17.0.3 (x86 de)

Mp3tag v2.50

MSVC80_x64_v2

MSVC80_x86_v2

MSVC90_x64

MSVC90_x86

MSVCRT

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

MyPhoneExplorer

NEC Electronics USB 3.0 Host Controller Driver

NETGEAR WG111v3 wireless USB 2.0 adapter

Network64

Nokia Connectivity Cable Driver

Nokia Ovi Suite

Nokia Ovi Suite Software Updater

Nokia PC Suite

NVIDIA 3D Vision Treiber 306.97

NVIDIA Display Control Panel

NVIDIA Grafiktreiber 306.97

NVIDIA Install Application

NVIDIA PhysX

NVIDIA Stereoscopic 3D Driver

NVIDIA Systemsteuerung 306.97

NVIDIA Update 1.10.8

NVIDIA Update Components

ON_OFF Charge B10.0409.1

OpenVPN 2.2.1

OpenVPN Connect

Opera 12.00

Ovi Desktop Sync Engine

OviMPlatform

PC Connectivity Solution

PDF OCR 4.2

Pdfedit

Phase 5 HTML-Editor

PhotoImpact X3

Picasa 3

Pidgin

pidgin-otr 3.2.0-1

PixiePack Codec Pack

Polipo 1.0.4.1

PS_AIO_07_B110_SW_Min

PVSonyDll

PxMergeModule

QuickTransfer

Realtek Ethernet Controller Driver For Windows 7

Realtek High Definition Audio Driver

RedMon - Redirection Port Monitor

Rightload 2.0.1

Samsung Kies

SAMSUNG USB Driver for Mobile Phones

Scan

Secure Download Manager

Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870)

Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition 

Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition 

Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition 

Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition 

Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition

Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition 

Sentinel Protection Installer 7.4.0

Shutdown Timer

simfy

SimpleOCR 3.1

Skype™ 5.10

Smart Data Recovery v4.3

SolutionCenter

Status

swMSM

Toolbox

Tor 0.2.2.38

TrayApp

TreeSize Free V2.4

TrueCrypt

Tunebite

TweetDeck

Unlocker 1.9.0

Update für Microsoft Office Excel 2007 Help (KB963678)

Update für Microsoft Office Outlook 2007 Help (KB963677)

Update für Microsoft Office Powerpoint 2007 Help (KB963669)

Update für Microsoft Office Word 2007 Help (KB963665)

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2473228)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2767848) 32-Bit Edition

VC80CRTRedist - 8.0.50727.6195

VG JPEG-Repair Online

Vidalia 0.2.20

VLC media player 2.0.2

WebReg

Winamp

Windows-Treiberpaket - Nokia Modem  (06/09/2010 4.5)

Windows-Treiberpaket - Nokia Modem  (06/09/2010 7.01.0.7)

Windows-Treiberpaket - Nokia pccsmcfd  (08/22/2008 7.0.0.0)

Windows Driver Package - Dynastream Innovations (libusb0) LibUsbDevices  (07/07/2009 1.12.2)

Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0)

Windows Live-Uploadtool

Windows Live Anmelde-Assistent

Windows Live Call

Windows Live Communications Platform

Windows Live Essentials

Windows Live Messenger

Windows Live Writer

Windows Media Player Firefox Plugin

WinPcap 4.1.2

WinRAR

WinSCP 4.3.7

Wireshark 1.6.2

X-Lite

Yahoo! Detect

ZIP PASSWORD FINDER

ZOTAC FireStorm

.

==== End Of File ===========================