Win7 start bei Anwendung CPU steigt auf 100%
Seit einigen Wochen Steigt meine Cpu-Leistung rasant und unormal an.
Im Task-Manager steht das Firefox die Auslastung verursacht mit 47% (RuheModus). Wenn ich alle Auslastungen addiere bekomm ich keine CPU-Auslastung von 75%(RuheModus).
Einmal AVG und Avira durchlaufen gelassen und keine Virusfunde.
Neuinstallation brachte keine erfolg.
Pc Daten:
Prozessor:
Intel(R) Pentium(R) 4 CPU 3.00GHz 3.00GHz
RAM:
3,00GB
Systemtyp:
Windows 7 Enterprise 32Bit
Servicepack 1
DDS Logfile:
DDS Logfile: Code:
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421
Run by -.- at 20:59:31 on 2012-04-10
Microsoft Windows 7 Enterprise 6.1.7601.1.1252.49.1031.18.3071.2192 [GMT 2:00]
.
AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
TCP: DhcpNameServer = 192.168.178.1
TCP: Interfaces\{A1536E3D-20CB-4C7B-8388-A0B45D5488AA} : DhcpNameServer = 192.168.178.1
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\-.-\appdata\roaming\mozilla\firefox\profiles\3ylv2fbg.default\
FF - prefs.js: browser.startup.homepage - www.google.de
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.3.21.111\npGoogleUpdate3.dll
.
============= SERVICES / DRIVERS ===============
.
R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [2012-4-10 36000]
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-14 48128]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2012-1-3 63928]
R2 AntiVirSchedulerService;Avira Planer;c:\program files\avira\antivir desktop\sched.exe [2012-4-10 86224]
R2 AntiVirService;Avira Echtzeit Scanner;c:\program files\avira\antivir desktop\avguard.exe [2012-4-10 110032]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2012-4-10 74640]
R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [2012-4-6 21992]
R3 RTL8187B;NETGEAR WG111v3 Wireless-G USB Adapter Win7 Driver;c:\windows\system32\drivers\wg111v3.sys [2012-4-10 376832]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-3-26 15872]
S3 StorSvc;Speicherdienst;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2012-3-30 52224]
S3 V0610Vid;Creative Live! Cam Socialize HD Driver;c:\windows\system32\drivers\V0610Vid.sys [2011-9-1 276640]
S4 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2012-4-6 136176]
S4 gupdatem;Google Update-Dienst (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2012-4-6 136176]
S4 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia updatus\daemonu.exe [2012-3-26 2214504]
.
=============== Created Last 30 ================
.
2012-04-10 17:11:32 6084944 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll
2012-04-10 17:11:20 6582328 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{5c32c257-c200-42d6-84d5-125baef21332}\mpengine.dll
2012-04-10 12:38:13 -------- d-----w- c:\users\-.-\appdata\roaming\Avira
2012-04-10 12:31:17 74640 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2012-04-10 12:31:17 36000 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2012-04-10 12:31:15 -------- d-----w- c:\programdata\Avira
2012-04-10 12:31:15 -------- d-----w- c:\program files\Avira
2012-04-10 12:21:45 -------- d-----w- C:\OEMSettings
2012-04-10 12:17:03 376832 ----a-w- c:\windows\system32\drivers\wg111v3.sys
2012-04-10 12:16:52 -------- d-----w- c:\program files\NETGEAR
2012-04-10 11:49:49 -------- d-----w- c:\windows\Downloaded Installations
2012-04-07 07:32:44 -------- d-----w- c:\windows\system32\directx
2012-04-07 04:52:28 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll
2012-04-07 04:52:27 58880 ----a-w- c:\windows\system32\rdpwsx.dll
2012-04-06 11:10:55 -------- d--h--w- c:\program files\Temp
2012-04-06 11:10:54 1698408 ----a-w- c:\windows\RtlExUpd.dll
2012-04-06 11:10:47 757760 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iKernel.dll
2012-04-06 11:10:47 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\ctor.dll
2012-04-06 11:10:47 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\DotNetInstaller.exe
2012-04-06 11:10:47 32768 ----a-w- c:\program files\common files\installshield\professional\runtime\Objectps.dll
2012-04-06 11:10:47 274432 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iscript.dll
2012-04-06 11:10:47 204800 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iuser.dll
2012-04-06 11:10:42 331908 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\setup.dll
2012-04-06 11:10:42 200836 ----a-w- c:\program files\common files\installshield\professional\runtime\11\50\intel32\iGdi.dll
2012-04-06 10:50:45 21992 ----a-w- c:\windows\system32\drivers\cpuz135_x32.sys
2012-04-06 10:31:37 -------- d-----w- c:\windows\pss
2012-04-06 10:25:06 53248 ----a-w- c:\windows\system32\CSVer.dll
2012-04-06 10:21:57 -------- d-----w- C:\Intel
2012-04-06 10:15:35 -------- d-----w- c:\program files\CCleaner
2012-04-06 10:12:58 -------- d-----w- c:\users\-.-\appdata\local\Google
2012-04-06 10:02:29 319984 ----a-w- c:\windows\DIFxAPI.dll
2012-04-06 09:53:41 -------- d-----w- c:\windows\system32\RTCOM
2012-04-06 09:53:22 69632 ----a-w- c:\windows\ALCMTR.EXE
2012-04-06 09:53:22 2157568 ----a-w- c:\windows\MicCal.exe
2012-04-06 09:53:21 86016 ----a-w- c:\windows\SOUNDMAN.EXE
2012-04-06 09:53:21 4394496 ----a-w- c:\windows\system32\drivers\RtkHDAud.sys
2012-04-06 09:53:21 299008 ----a-w- c:\windows\system32\ALSNDMGR.CPL
2012-04-06 09:53:21 2808832 ----a-w- c:\windows\ALCWZRD.EXE
2012-04-06 09:53:20 2879488 ----a-w- c:\windows\SkyTel.exe
2012-04-06 09:53:20 16269312 ----a-w- c:\windows\RTHDCPL.EXE
2012-04-06 09:53:20 1183744 ----a-w- c:\windows\RtlUpd.exe
2012-03-30 18:21:35 -------- d-----w- c:\windows\system32\SPReview
2012-03-30 18:19:56 -------- d-----w- c:\windows\system32\EventProviders
2012-03-30 18:14:13 1130824 ----a-w- c:\windows\system32\dfshim.dll
2012-03-30 18:12:59 81920 ----a-w- c:\windows\system32\userenv.dll
2012-03-30 18:11:59 859648 ----a-w- c:\windows\system32\OobeFldr.dll
2012-03-30 18:10:52 606208 ----a-w- c:\windows\system32\wbem\fastprox.dll
2012-03-30 18:10:52 363008 ----a-w- c:\windows\system32\wbemcomn.dll
2012-03-30 18:10:52 189952 ----a-w- c:\program files\windows portable devices\sqmapi.dll
2012-03-30 18:10:43 189952 ----a-w- c:\windows\system32\sqmapi.dll
2012-03-28 06:14:31 -------- d-----w- c:\windows\system32\wbem\en-US
2012-03-27 18:39:59 766976 ----a-w- c:\program files\common files\microsoft shared\vgx\VGX.dll
2012-03-27 18:39:59 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-03-27 18:39:59 1798656 ----a-w- c:\windows\system32\jscript9.dll
2012-03-27 15:32:11 -------- d-----w- c:\users\-.-\appdata\local\Adobe
2012-03-27 06:20:41 31232 ----a-w- c:\windows\system32\prevhost.exe
2012-03-27 06:20:36 311808 ----a-w- c:\windows\system32\drivers\srv.sys
2012-03-27 06:20:36 310272 ----a-w- c:\windows\system32\drivers\srv2.sys
2012-03-27 06:20:35 114688 ----a-w- c:\windows\system32\drivers\srvnet.sys
2012-03-27 06:20:31 338944 ----a-w- c:\windows\system32\drivers\afd.sys
2012-03-27 06:20:28 2343424 ----a-w- c:\windows\system32\win32k.sys
2012-03-27 06:19:22 1077248 ----a-w- c:\windows\system32\DWrite.dll
2012-03-27 06:19:18 1290608 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-03-27 06:19:17 187776 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-03-27 06:19:12 1288472 ----a-w- c:\windows\system32\ntdll.dll
2012-03-27 06:18:56 293376 ----a-w- c:\windows\system32\umpnpmgr.dll
2012-03-27 06:18:55 145920 ----a-w- c:\windows\system32\cfgmgr32.dll
2012-03-27 06:16:48 2048 ----a-w- c:\windows\system32\tzres.dll
2012-03-27 06:16:13 542208 ----a-w- c:\windows\system32\kerberos.dll
2012-03-27 06:16:00 233472 ----a-w- c:\windows\system32\oleacc.dll
2012-03-27 06:15:59 571904 ----a-w- c:\windows\system32\oleaut32.dll
2012-03-27 06:15:48 96768 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2012-03-27 06:15:48 223744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2012-03-27 06:15:47 123904 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2012-03-27 06:15:37 741376 ----a-w- c:\windows\system32\inetcomm.dll
2012-03-27 06:15:32 67072 ----a-w- c:\windows\system32\packager.dll
2012-03-27 06:15:29 802304 ----a-w- c:\windows\system32\WFS.exe
2012-03-27 06:15:29 191488 ----a-w- c:\windows\system32\FXSCOVER.exe
2012-03-27 06:15:25 534528 ----a-w- c:\windows\system32\EncDec.dll
2012-03-27 06:15:21 870912 ----a-w- c:\windows\system32\XpsPrint.dll
2012-03-27 06:13:52 288256 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2012-03-27 06:12:59 319488 ----a-w- c:\windows\system32\odbcjt32.dll
2012-03-27 06:11:59 219136 ----a-w- c:\windows\system32\d3d10_1core.dll
2012-03-27 06:11:58 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2012-03-27 06:11:56 38912 ----a-w- c:\windows\system32\csrsrv.dll
2012-03-26 20:50:36 690688 ----a-w- c:\windows\system32\msvcrt.dll
2012-03-26 20:15:02 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-03-26 20:14:59 3913584 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-03-26 20:14:58 442880 ----a-w- c:\windows\system32\ntshrui.dll
2012-03-26 20:13:55 1137664 ----a-w- c:\windows\system32\mfc42.dll
2012-03-26 20:13:54 1164288 ----a-w- c:\windows\system32\mfc42u.dll
2012-03-26 19:55:07 -------- d-----w- c:\users\-.-\appdata\local\ElevatedDiagnostics
2012-03-26 19:54:47 -------- d-----w- c:\users\-.-\appdata\local\Diagnostics
2012-03-26 19:39:03 123904 ----a-w- c:\windows\system32\poqexec.exe
2012-03-26 19:38:56 69632 ----a-w- c:\windows\system32\drivers\bowser.sys
2012-03-26 19:38:52 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2012-03-26 19:38:47 728448 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2012-03-26 19:38:46 219008 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2012-03-26 19:38:46 107520 ----a-w- c:\windows\system32\cdd.dll
2012-03-26 19:05:28 -------- d-----w- c:\windows\system32\drivers\AVG
2012-03-26 19:03:38 -------- d-----w- c:\program files\AVG
2012-03-26 18:51:17 66664 ----a-w- c:\windows\system32\nvshext.dll
2012-03-26 18:51:17 615528 ----a-w- c:\windows\system32\nvvsvc.exe
2012-03-26 18:51:17 543336 ----a-w- c:\windows\system32\easyupdatusapiu.dll
2012-03-26 18:51:17 3693672 ----a-w- c:\windows\system32\nvcpl.dll
2012-03-26 18:51:17 2560616 ----a-w- c:\windows\system32\nvsvcr.dll
2012-03-26 18:51:17 2557544 ----a-w- c:\windows\system32\nvsvc.dll
2012-03-26 18:51:17 111208 ----a-w- c:\windows\system32\nvmctray.dll
2012-03-26 18:50:18 -------- d-----w- c:\programdata\NVIDIA Corporation
2012-03-26 18:50:11 -------- d-----w- c:\program files\NVIDIA Corporation
2012-03-26 18:45:33 -------- d-----w- C:\Windows.old
2012-03-26 18:44:22 -------- d--h--w- c:\programdata\Common Files
2012-03-26 18:26:24 -------- d-----w- c:\users\-.-\appdata\roaming\WinRAR
2012-03-26 18:22:33 -------- d-----w- c:\users\-.-\appdata\roaming\Mozilla
2012-03-26 18:22:33 -------- d-----w- c:\users\-.-\appdata\local\Mozilla
2012-03-26 18:22:07 -------- d-----w- c:\programdata\MFAData
2012-03-26 18:21:33 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe
2012-03-26 18:21:31 919040 ----a-w- c:\windows\system32\rdpcorets.dll
2012-03-26 18:21:30 826880 ----a-w- c:\windows\system32\rdpcore.dll
2012-03-26 18:21:30 183808 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2012-03-26 18:21:30 15872 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys
2012-03-26 18:21:30 134656 ----a-w- c:\windows\system32\rdpudd.dll
2012-03-26 18:21:29 24576 ----a-w- c:\windows\system32\drivers\tdtcp.sys
2012-03-26 18:21:29 18432 ----a-w- c:\windows\system32\drivers\tdpipe.sys
2012-03-26 18:15:10 -------- d-----r- c:\users\-.-\Searches
2012-03-26 18:13:39 -------- d-sh--we c:\programdata\Vorlagen
2012-03-26 18:13:39 -------- d-sh--we c:\programdata\Startmenü
2012-03-26 18:13:39 -------- d-sh--we c:\programdata\Favoriten
2012-03-26 18:13:39 -------- d-sh--we c:\programdata\Dokumente
2012-03-26 18:13:39 -------- d-sh--we c:\programdata\Anwendungsdaten
2012-03-26 18:13:39 -------- d-sh--we c:\program files\Gemeinsame Dateien
2012-03-26 18:01:31 280064 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\hpzppw71.dll
.
==================== Find3M ====================
.
2012-03-30 18:51:55 152576 ----a-w- c:\windows\system32\msclmd.dll
2012-03-27 15:03:36 3204200 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2012-03-27 06:14:23 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-20 08:47:20 3164264 ----a-w- c:\windows\system32\RtkAPO.dll
2012-03-19 17:01:20 85096 ----a-w- c:\windows\system32\RtkCoInstII.dll
2012-03-16 14:25:58 2414184 ----a-w- c:\windows\system32\RtkPgExt.dll
2012-03-08 09:47:34 95840 ----a-w- c:\windows\system32\AERTARen.dll
2012-03-08 09:47:00 176736 ----a-w- c:\windows\system32\AERTACap.dll
2012-03-07 09:09:28 617064 ----a-w- c:\windows\system32\RtkApoApi.dll
2012-02-23 08:18:36 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-02-21 17:45:28 1725784 ----a-w- c:\windows\system32\WavesGUILib.dll
2012-02-21 12:26:00 2190400 ----a-w- c:\windows\system32\FMAPO.dll
2012-02-17 13:54:36 350552 ----a-w- c:\windows\system32\MaxxVolumeSDAPO.dll
2012-02-13 20:36:32 693592 ----a-w- c:\windows\system32\MaxxAudioAPOShell.dll
2012-02-13 20:36:22 7783768 ----a-w- c:\windows\system32\MaxxAudioRealtek.dll
.
============= FINISH: 21:01:12,25 ===============
[/CODE]
--- --- ---
Attach Code:
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Enterprise
Boot Device: \Device\HarddiskVolume1
Install Date: 26.03.2012 20:13:54
System Uptime: 10.04.2012 18:57:01 (3 hours ago)
.
Motherboard: FUJITSU SIEMENS | | P5LD2-FM/DH
Processor: Intel(R) Pentium(R) 4 CPU 3.00GHz | LGA 775 | 3000/200mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 293 GiB total, 263,744 GiB free.
D: is FIXED (NTFS) - 173 GiB total, 172,054 GiB free.
E: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID:
Description:
Device ID: ACPI\AWY0001\4&10AE7ECD&0
Manufacturer:
Name:
PNP Device ID: ACPI\AWY0001\4&10AE7ECD&0
Service:
.
==== System Restore Points ===================
.
RP8: 30.03.2012 20:20:59 - Windows 7 Service Pack 1
RP9: 06.04.2012 13:13:17 - Gerätetreiber-Paketinstallation: Realtek Semiconductor Corp. Audio-, Video- und Gamecontroller
RP10: 07.04.2012 06:52:57 - Windows Update
RP11: 07.04.2012 09:31:00 - SiSoftware Sandra Lite
RP13: 10.04.2012 13:50:24 - Installiert NETGEAR WG111v3 wireless USB 2.0 adapter
RP15: 10.04.2012 13:55:21 - Installiert NETGEAR WG111v3 wireless USB 2.0 adapter
RP17: 10.04.2012 14:15:50 - Installiert NETGEAR WG111v3 wireless USB 2.0 adapter
RP18: 10.04.2012 19:10:45 - Windows Update
.
==== Installed Programs ======================
.
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.2) - Deutsch
Avira Free Antivirus
CCleaner
CPUID CPU-Z 1.60
Creative Live! Cam Socialize HD (VF0610) (1.03.05.00)
Google Chrome
Google Update Helper
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile DEU Language Pack
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Mozilla Firefox 11.0 (x86 de)
NETGEAR WG111v3 wireless USB 2.0 adapter
NVIDIA Grafiktreiber 275.33
NVIDIA Install Application
NVIDIA Systemsteuerung 275.33
NVIDIA Update 1.3.5
NVIDIA Update Components
Realtek High Definition Audio Driver
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
WinRAR 4.11 (32-Bit)
.
==== End Of File ===========================
Code:
GMER 1.0.15.15641 - hxxp://www.gmer.net
Rootkit scan 2012-04-10 21:35:29
Windows 6.1.7601 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP1T0L0-2 ST3500320AS rev.SD04
Running: eqfp175i.exe; Driver: C:\Users\-.-\AppData\Local\Temp\uxldapog.sys
---- System - GMER 1.0.15 ----
SSDT 8E91EC2E ZwCreateSection
SSDT 8E91EC38 ZwRequestWaitReplyPort
SSDT 8E91EC33 ZwSetContextThread
SSDT 8E91EC3D ZwSetSecurityObject
SSDT 8E91EC42 ZwSystemDebugControl
SSDT 8E91EBCF ZwTerminateProcess
---- Kernel code sections - GMER 1.0.15 ----
.text ntoskrnl.exe!ZwSaveKey + 13BD 82C78979 1 Byte [06]
.text ntoskrnl.exe!KiDispatchInterrupt + 5A2 82C984F2 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntoskrnl.exe!KeRemoveQueueEx + 14BF 82C9F87C 4 Bytes [2E, EC, 91, 8E]
.text ntoskrnl.exe!KeRemoveQueueEx + 181B 82C9FBD8 4 Bytes [38, EC, 91, 8E]
.text ntoskrnl.exe!KeRemoveQueueEx + 185F 82C9FC1C 4 Bytes [33, EC, 91, 8E]
.text ntoskrnl.exe!KeRemoveQueueEx + 18DB 82C9FC98 4 Bytes [3D, EC, 91, 8E]
.text ntoskrnl.exe!KeRemoveQueueEx + 192F 82C9FCEC 4 Bytes [42, EC, 91, 8E]
.text ...
? C:\Users\-.-\AppData\Local\Temp\mbr.sys Das System kann die angegebene Datei nicht finden. !
---- User code sections - GMER 1.0.15 ----
.text C:\Program Files\Mozilla Firefox\firefox.exe[3464] ntdll.dll!LdrLoadDll 771E223E 4 Bytes JMP 639B9720 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[3464] kernel32.dll!MapViewOfFile 76A693DB 5 Bytes JMP 63BEE1F4 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[3464] kernel32.dll!VirtualAlloc 76A6C43A 5 Bytes JMP 63BEE21B C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[3464] GDI32.dll!CreateDIBSection 75758850 5 Bytes JMP 63BEE17E C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
---- Devices - GMER 1.0.15 ----
Device \Driver\ACPI_HAL \Device\00000049 halmacpi.dll (Hardware Abstraction Layer DLL/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume1 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume2 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume3 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume4 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
AttachedDevice \Driver\volmgr \Device\HarddiskVolume5 fvevol.sys (BitLocker Drive Encryption Driver/Microsoft Corporation)
---- EOF - GMER 1.0.15 ----
|
