Trojaner-Board - Mein Pc macht leider Probleme Internet Explorer öffnet Seiten nicht usw.

GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-06-14 19:30:54
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP3T0L0-3 WDC_WD5000AAVS-00ZTB0 rev.01.01B01 465,76GB
Running: gmer_2.1.19163.exe; Driver: F:\Users\chris\AppData\Local\Temp\kgloqpod.sys

---- Kernel code sections - GMER 2.1 ----

INITKDBG F:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 560 fffff80002bfb000 71 bytes [68, 44, 8A, 5C, 24, 60, 89, ...]
INITKDBG F:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 632 fffff80002bfb048 23 bytes [00, 00, 02, 75, 10, 85, ED, ...]

---- User code sections - GMER 2.1 ----

.text F:\Program Files (x86)\Common Files\Umbrella\umbrella.exe[2140] F:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000761f1465 2 bytes [1F, 76]
.text F:\Program Files (x86)\Common Files\Umbrella\umbrella.exe[2140] F:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000761f14bb 2 bytes [1F, 76]
.text ... * 2
.text F:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[1380] F:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000761f1465 2 bytes [1F, 76]
.text F:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[1380] F:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000761f14bb 2 bytes [1F, 76]
.text ... * 2
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3092] F:\Windows\SysWOW64\ntdll.dll!NtQueryInformationFile 000000007702f9f0 5 bytes JMP 0000000166d966a0
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3092] F:\Windows\SysWOW64\ntdll.dll!NtQueryValueKey 000000007702fa88 5 bytes JMP 0000000166d1f08a
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3092] F:\Windows\SysWOW64\ntdll.dll!NtSetInformationFile 000000007702fc18 5 bytes JMP 0000000166d965d0
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3092] F:\Windows\SysWOW64\ntdll.dll!NtQueryAttributesFile 000000007702fe3c 5 bytes JMP 0000000166d96730
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3092] F:\Windows\SysWOW64\ntdll.dll!NtSetValueKey 00000000770301a4 5 bytes JMP 0000000166d1f0cf
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3092] F:\Windows\SysWOW64\ntdll.dll!NtQueryFullAttributesFile 000000007703131c 5 bytes JMP 0000000166d968b0
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3092] F:\Windows\syswow64\kernel32.dll!CloseHandle 0000000076211410 5 bytes JMP 0000000166d964d0
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3092] F:\Windows\syswow64\kernel32.dll!CreateFileW 0000000076213f3c 5 bytes JMP 0000000166d96390
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3092] F:\Windows\syswow64\kernel32.dll!CreateFileA 00000000762153ae 5 bytes JMP 0000000166d96250
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3092] F:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000761f1465 2 bytes [1F, 76]
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[3092] F:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000761f14bb 2 bytes [1F, 76]
.text ... * 2
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1592] F:\Windows\SysWOW64\ntdll.dll!NtQueryInformationFile 000000007702f9f0 5 bytes JMP 0000000166d966a0
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1592] F:\Windows\SysWOW64\ntdll.dll!NtQueryValueKey 000000007702fa88 5 bytes JMP 0000000166d1f08a
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1592] F:\Windows\SysWOW64\ntdll.dll!NtSetInformationFile 000000007702fc18 5 bytes JMP 0000000166d965d0
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1592] F:\Windows\SysWOW64\ntdll.dll!NtQueryAttributesFile 000000007702fe3c 5 bytes JMP 0000000166d96730
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1592] F:\Windows\SysWOW64\ntdll.dll!NtSetValueKey 00000000770301a4 5 bytes JMP 0000000166d1f0cf
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1592] F:\Windows\SysWOW64\ntdll.dll!NtQueryFullAttributesFile 000000007703131c 5 bytes JMP 0000000166d968b0
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1592] F:\Windows\syswow64\kernel32.dll!CloseHandle 0000000076211410 5 bytes JMP 0000000166d964d0
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1592] F:\Windows\syswow64\kernel32.dll!CreateFileW 0000000076213f3c 5 bytes JMP 0000000166d96390
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1592] F:\Windows\syswow64\kernel32.dll!CreateFileA 00000000762153ae 5 bytes JMP 0000000166d96250
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1592] F:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 00000000761f1465 2 bytes [1F, 76]
.text F:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1592] F:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000761f14bb 2 bytes [1F, 76]
.text ... * 2

---- EOF - GMER 2.1 ----