Home » Viren, Trojaner & Malware Forum » Internetverbindung plötzlich extrem langsam » Themenansicht

Seite(n): 1 2

Antworten

Internetverbindung plötzlich extrem langsam

03.02.2010, 22:43

tst84

Member

Beiträge: 11

#16 Das schreibt Gmer:

Code

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-02-03 22:39:01
Windows 5.1.2600 Service Pack 3
Running: oqvkf3z8.exe; Driver: C:\DOKUME~1\Besitzer\LOKALE~1\Temp\uwlcraog.sys


---- Modules - GMER 1.0.15 ----

Module   viaide.sys (Generic PCI IDE Bus Driver/Microsoft Corporation)                                                                                                    BADAC000-BADAE000 (8192 bytes)
Module   videX32.sys (VIA Generic PCI IDE Bus Driver/VIA Technologies, Inc.)                                                                                              BAB38000-BAB40000 (32768 bytes)
Module   xfilt.sys (ATA/ATAPI devices hot-plug monitor/VIA Technologies,Inc)                                                                                              BAB40000-BAB48000 (32768 bytes)
Module   PxHelp20.sys (Px Engine Device Driver for Windows 2000/XP/Sonic Solutions)                                                                                       BA8F8000-BA901000 (36864 bytes)
Module   RecAgent.sys ( /Smart Link)                                                                                                                                      BACBC000-BACC0000 (16384 bytes)
Module   \SystemRoot\system32\DRIVERS\vtmini.sys (VIA/S3G Miniport Driver/Copyright (C) VIA/S3 Graphics Co, Ltd.)                                                         B9D4D000-B9D89000 (245760 bytes)
Module   \SystemRoot\System32\Drivers\incdrm.SYS (Ahead MRW Filter Driver/Nero AG)                                                                                        BACA8000-BACAF000 (28672 bytes)
Module   \SystemRoot\System32\DRIVERS\InCDPass.sys (Ahead RW Filter Driver/Nero AG)                                                                                       BACB0000-BACB8000 (32768 bytes)
Module   \SystemRoot\system32\DRIVERS\GEARAspiWDM.sys (CD DVD Filter/GEAR Software Inc.)                                                                                  BAB50000-BAB56000 (24576 bytes)
Module   \SystemRoot\system32\DRIVERS\HDAudBus.sys (High Definition Audio Bus Driver v1.0a/Windows (R) Server 2003 DDK provider)                                          B9CCA000-B9CF2000 (163840 bytes)
Module   \SystemRoot\system32\DRIVERS\ASACPI.sys                                                                                                                          BADF8000-BADFA000 (8192 bytes)
Module   \SystemRoot\system32\DRIVERS\ptilink.sys (Parallel Technologies DirectParallel IO Library/Parallel Technologies, Inc.)                                           BABB8000-BABBD000 (20480 bytes)
Module   \SystemRoot\system32\drivers\ADIHdAud.sys (High Definition Audio Function Driver(Release Candidate 1)/Analog Devices, Inc.)                                      B895A000-B8980000 (155648 bytes)
Module   \SystemRoot\system32\drivers\AEAudio.sys (Andrea Audio Noise Cancellation Driver/Andrea Electronics Corporation)                                                 B8916000-B8936000 (131072 bytes)
Module   \SystemRoot\system32\drivers\Senfilt.sys (Sensaura WDM 3D Audio Driver/Sensaura)                                                                                 B88B6000-B8916000 (393216 bytes)
Module   \SystemRoot\System32\Drivers\InCDrec.SYS (InCD File System Recognizer/Nero AG)                                                                                   BAD60000-BAD63000 (12288 bytes)
Module   \SystemRoot\System32\Drivers\InCDfs.SYS (InCD File System Driver/Nero AG)                                                                                        B7B89000-B7BA2000 (102400 bytes)
Module   \SystemRoot\system32\DRIVERS\avipbb.sys (Avira Driver for RootKit Detection/Avira GmbH)                                                                          B79F6000-B7A12000 (114688 bytes)
Module   \??\C:\Programme\Avira\AntiVir_Desktop\avgio.sys (Avira AntiVir Support for Minifilter/Avira GmbH)                                                               BAE14000-BAE16000 (8192 bytes)
Module   \SystemRoot\System32\vtdisp.dll (VIA/S3G Graphics Driver/VIA/S3 Graphics Co, Ltd.)                                                                               BF9D6000-BFD2C000 (3497984 bytes)
Module   \SystemRoot\System32\ATMFD.DLL (Windows NT OpenType/Type 1 Font Driver/Adobe Systems Incorporated)                                                               BFFA0000-BFFE6000 (286720 bytes)
Module   \SystemRoot\system32\DRIVERS\avgntflt.sys (Avira Minifilter Driver/Avira GmbH)                                                                                   B3442000-B3456000 (81920 bytes)
Module   \??\C:\DOKUME~1\Besitzer\LOKALE~1\Temp\uwlcraog.sys (GMER)                                                                                                       B1F24000-B1F3B000 (94208 bytes)

---- Processes - GMER 1.0.15 ----

Process  C:\Programme\ScanSoft\PaperPort\pptd40nt.exe (PaperPort Print to Desktop for NT/ScanSoft, Inc.)                                                                  148
Library  C:\Programme\ScanSoft\PaperPort\pptd40nt.exe (PaperPort Print to Desktop for NT/ScanSoft, Inc.)                                                                  0x00400000
Library  C:\Programme\ScanSoft\PaperPort\MAXUTIL.dll (PaperPort Utilities Library/ScanSoft, Inc.)                                                                         0x006C0000
Library  C:\Programme\ScanSoft\PaperPort\PPERR.dll (PaperPort Utilities Library/ScanSoft, Inc.)                                                                           0x00700000
Library  C:\Programme\ScanSoft\PaperPort\blicectr.dll (BliceCtr Application/ScanSoft, Inc.)                                                                               0x68600000

Process  C:\Programme\QuickTime\QTTask.exe (QuickTime Task/Apple Inc.)                                                                                                    180
Library  C:\Programme\QuickTime\QTTask.exe (QuickTime Task/Apple Inc.)                                                                                                    0x00400000

Process  C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe (Application Launcher/Sony Ericsson Mobile Communications AB)                   204
Library  C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe (Application Launcher/Sony Ericsson Mobile Communications AB)                   0x00400000
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\Telecalib_logging.dll (Telecalib Logging, Dynamic Link Library. Dll used for logging purposes./Teleca/Popwire AB)  0x10000000
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\boost_log-vc71-mt-1_32.dll                                                                                         0x00330000
Library  C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application LauncherLg.dll (Application Launcher/Sony Ericsson Mobile Communications AB)                 0x003F0000
Library  C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application LauncherBmp.dll (Application Launcher/Sony Ericsson Mobile Communications AB)                0x00BA0000
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\TC Device Mgmt.dll (Device Management type library and proxy/stub dll./Teleca Software Solutions)                  0x017C0000

Process  C:\Programme\CyberLink\PowerDVD\PDVDServ.exe (PowerDVD RC Service/Cyberlink Corp.)                                                                               216
Library  C:\Programme\CyberLink\PowerDVD\PDVDServ.exe (PowerDVD RC Service/Cyberlink Corp.)                                                                               0x00400000
Library  C:\Programme\CyberLink\PowerDVD\CLRCEngine2.dll (Cyberlink Remote Control Module for PCM/CyberLink Corp.)                                                        0x10000000

Process  C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Antivirus System Tray Tool/Avira GmbH)                                                                             228
Library  C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Antivirus System Tray Tool/Avira GmbH)                                                                             0x00400000
Library  C:\Programme\Avira\AntiVir Desktop\cclib.dll (Antivirus Control Center Common Library/Avira GmbH)                                                                0x10000000
Library  c:\programme\avira\antivir desktop\ccgen.dll (Control Center General Plugin/Avira GmbH)                                                                          0x00B00000
Library  c:\programme\avira\antivir desktop\ccgenrc.dll (Control Center General Plugin Resources/Avira GmbH)                                                              0x00B90000
Library  c:\programme\avira\antivir desktop\ccguard.dll (Control Center Guard Plugin/Avira GmbH)                                                                          0x00BB0000
Library  c:\programme\avira\antivir desktop\ccgrdrc.dll (Control Center Guard Plugin Resources/Avira GmbH)                                                                0x00C10000
Library  c:\programme\avira\antivir desktop\avipc.dll (AVIRA IPC Library/Avira GmbH)                                                                                      0x00C30000
Library  c:\programme\avira\antivir desktop\ccupdate.dll (Control Center Updater Plugin/Avira GmbH)                                                                       0x00C60000
Library  c:\programme\avira\antivir desktop\ccupdrc.dll (Control Center Updater Plugin Resources/Avira GmbH)                                                              0x00CB0000
Library  c:\programme\avira\antivir desktop\cclic.dll (Control Center License Plugin/Avira GmbH)                                                                          0x00CD0000
Library  c:\programme\avira\antivir desktop\cclicrc.dll (Control Center License Plugin Resources/Avira GmbH)                                                              0x00D30000
Library  c:\programme\avira\antivir desktop\ccmsg.dll (Control Center Message Plugin/Avira GmbH)                                                                          0x00D50000

Process  C:\Programme\Brother\ControlCenter3\brccMCtl.exe (Control Center 3 Main Program/Brother Industries, Ltd.)                                                        236
Library  C:\Programme\Brother\ControlCenter3\brccMCtl.exe (Control Center 3 Main Program/Brother Industries, Ltd.)                                                        0x00400000
Library  C:\Programme\Brother\ControlCenter3\brccDCtl.dll (ControlCenter DataControl/Brother Industries, Ltd.)                                                            0x10000000
Library  C:\Programme\Brother\ControlCenter3\brccFCtl.dll (ControlCenter FunctionControl/Brother Industries, Ltd.)                                                        0x00340000
Library  C:\Programme\Brother\ControlCenter3\LTDIS12n.dll (LEADTOOLS(r) DLL for Win32/LEAD Technologies, Inc.)                                                            0x1FF70000
Library  C:\Programme\Brother\ControlCenter3\LTKRN12n.dll (LEADTOOLS(r) DLL for Win32 - Japanese build/LEAD Technologies, Inc.)                                           0x1FFF0000
Library  C:\Programme\Brother\ControlCenter3\LTFIL12n.DLL (LEADTOOLS(r) DLL for Win32/LEAD Technologies, Inc.)                                                            0x1FFC0000
Library  C:\Programme\Brother\ControlCenter3\BrImgPDF.dll (BrImgPDF/Brother Industries,LTD.)                                                                              0x00370000
Library  C:\Programme\Brother\ControlCenter3\brccger.dll (ControlCenter3 Resource/Brother Industries, Ltd.)                                                               0x016F0000
Library  C:\Programme\Brother\ControlCenter3\brccimg.dll (ControlCenter Resource/Brother Industries, Ltd.)                                                                0x01710000
Library  C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx (Adobe Flash Player 9.0  r124/Adobe Systems, Inc.)                                                                0x30000000

Process  C:\Programme\iTunes\iTunesHelper.exe (iTunesHelper Module/Apple Inc.)                                                                                            244
Library  C:\Programme\iTunes\iTunesHelper.exe (iTunesHelper Module/Apple Inc.)                                                                                            0x00400000
Library  C:\Programme\iTunes\iTunesHelper.Resources\de.lproj\iTunesHelperLocalized.DLL (iTunesHelper Ressourcebibliothek/Apple Inc.)                                      0x10000000
Library  C:\Programme\iTunes\iTunesHelper.Resources\iTunesHelper.DLL (iTunesHelper Resource Library/Apple Inc.)                                                           0x00B50000
Library  C:\Programme\QuickTime\QTSystem\QuickTime.qts (QuickTime/Apple Inc.)                                                                                             0x66800000
Library  C:\Programme\QuickTime\QTSystem\QTCF.dll                                                                                                                         0x68A40000
Library  C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\CoreFoundation.dll (CoreFoundation/Apple Inc.)                                                   0x00DD0000
Library  C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\pthreadVC2.dll (POSIX Threads for Windows32 Library/Open Source Software community project)      0x00EB0000
Library  C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\objc.dll                                                                                         0x00EC0000
Library  C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\icuin40.dll (IBM ICU I18N DLL/IBM Corporation and others)                                        0x00EF0000
Library  C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\icuuc40.dll (IBM ICU Common DLL/IBM Corporation and others)                                      0x01000000
Library  C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\icudt40.dll (ICU Data DLL/IBM Corporation and others)                                            0x4AD00000
Library  C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\ASL.dll                                                                                          0x01100000
Library  C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\CFNetwork.dll (CFNetwork/Apple, Inc.)                                                            0x012E0000
Library  C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\SQLite3.dll (SQLite3 Dynamic Link Library/Apple Inc.)                                            0x01390000
Library  C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\zlib1.dll                                                                                        0x01410000
Library  C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\iTunesMobileDevice.dll (iTunesMobileDevice/Apple Inc.)                                           0x079C0000

Process  C:\Programme\Java\jre6\bin\jusched.exe (Java(TM) Platform SE binary/Sun Microsystems, Inc.)                                                                      260
Library  C:\Programme\Java\jre6\bin\jusched.exe (Java(TM) Platform SE binary/Sun Microsystems, Inc.)                                                                      0x00400000

Process  C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Acrobat SpeedLauncher/Adobe Systems Incorporated)                                                      288
Library  C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Acrobat SpeedLauncher/Adobe Systems Incorporated)                                                      0x00400000

Process  C:\Programme\Gemeinsame Dateien\Teleca Shared\CapabilityManager.exe (Capability Manager/Teleca Software Solutions AB)                                            408
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\CapabilityManager.exe (Capability Manager/Teleca Software Solutions AB)                                            0x00400000
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\Telecalib_logging.dll (Telecalib Logging, Dynamic Link Library. Dll used for logging purposes./Teleca/Popwire AB)  0x10000000
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\boost_log-vc71-mt-1_32.dll                                                                                         0x00330000

Process  C:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services/Microsoft Corporation)                                                                  592
Library  C:\WINDOWS\System32\strmfilt.dll (Stream Filter Library/Microsoft Corporation)                                                                                   0x66E40000

Process  C:\Programme\Avira\AntiVir Desktop\avguard.exe (Antivirus On-Access Service/Avira GmbH)                                                                          892
Library  C:\Programme\Avira\AntiVir Desktop\avguard.exe (Antivirus On-Access Service/Avira GmbH)                                                                          0x00400000
Library  C:\Programme\Avira\AntiVir Desktop\AVEvtLog.dll (Event Logger/Avira GmbH)                                                                                        0x10000000
Library  C:\Programme\Avira\AntiVir Desktop\guardmsg.dll (AVGuard Messages (Deutsch)/Avira GmbH)                                                                          0x00C20000
Library  C:\Programme\Avira\AntiVir Desktop\sqlite3.dll                                                                                                                   0x00C40000
Library  C:\Programme\Avira\AntiVir Desktop\AVPREF.DLL (Prefix DLL/Avira GmbH)                                                                                            0x00DB0000
Library  C:\Programme\Avira\AntiVir Desktop\SMTPLIB.DLL (SMTPLIB/Avira GmbH)                                                                                              0x00DD0000
Library  C:\Programme\Avira\AntiVir Desktop\AVGIO.DLL (On-access scan support/Avira GmbH)                                                                                 0x01230000
Library  C:\Programme\Avira\AntiVir Desktop\aecore.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                     0x01360000
Library  C:\Programme\Avira\AntiVir Desktop\aevdf.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                      0x013A0000
Library  C:\Programme\Avira\AntiVir Desktop\aescript.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                   0x013D0000
Library  C:\Programme\Avira\AntiVir Desktop\aescn.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                      0x014B0000
Library  C:\Programme\Avira\AntiVir Desktop\aesbx.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                      0x014E0000
Library  C:\Programme\Avira\AntiVir Desktop\aerdl.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                      0x01530000
Library  C:\Programme\Avira\AntiVir Desktop\aepack.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                     0x015C0000
Library  C:\Programme\Avira\AntiVir Desktop\unacev2.dll (UNACE Dynamic Link Library/ACE Compression Software)                                                             0x01640000
Library  C:\Programme\Avira\AntiVir Desktop\aeoffice.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                   0x016A0000
Library  C:\Programme\Avira\AntiVir Desktop\aeheur.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                     0x016F0000
Library  C:\Programme\Avira\AntiVir Desktop\aehelp.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                     0x01940000
Library  C:\Programme\Avira\AntiVir Desktop\aegen.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                      0x01990000
Library  C:\Programme\Avira\AntiVir Desktop\aeemu.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                      0x01A00000
Library  C:\Programme\Avira\AntiVir Desktop\aebb.dll (AntiVir Engine Module for Windows/Avira GmbH)                                                                       0x01A80000
Library  C:\Programme\Avira\AntiVir Desktop\avipc.dll (AVIRA IPC Library/Avira GmbH)                                                                                      0x01B70000

Process  C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Mobile Device Service/Apple Inc.)                            988
Library  C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Mobile Device Service/Apple Inc.)                            0x00400000

Process  C:\Programme\FRITZ!DSL\IGDCTRL.EXE (AVM IGD Service/AVM Berlin)                                                                                                  1016
Library  C:\Programme\FRITZ!DSL\IGDCTRL.EXE (AVM IGD Service/AVM Berlin)                                                                                                  0x00400000
Library  C:\Programme\FRITZ!DSL\avmcsock.dll (AVM CSOCK Library/AVM Berlin)                                                                                               0x10000000
Library  C:\Programme\FRITZ!DSL\avmigd.dll (AVM IGD Library/AVM Berlin)                                                                                                   0x00330000
Library  C:\Programme\FRITZ!DSL\igdapi.dll (AVM IGDAPI Library/AVM Berlin)                                                                                                0x00360000
Library  C:\Programme\FRITZ!DSL\avmssl.dll (AVM SSL Wrapper Library/AVM Berlin)                                                                                           0x00BC0000
Library  C:\Programme\FRITZ!DSL\SSLEAY32.dll (OpenSSL Shared Library/The OpenSSL Project, http://www.openssl.org/)                                                        0x00BD0000
Library  C:\Programme\FRITZ!DSL\LIBEAY32.dll (OpenSSL Shared Library/The OpenSSL Project, http://www.openssl.org/)                                                        0x00C00000
Library  C:\Programme\Gemeinsame Dateien\AVM\Avmconn.dll (avm_conn/AVM Berlin)                                                                                            0x01AB0000

Process  C:\Programme\Ahead\InCD\InCDsrv.exe (incdsrv/Nero AG)                                                                                                            1060
Library  C:\Programme\Ahead\InCD\InCDsrv.exe (incdsrv/Nero AG)                                                                                                            0x01000000
Library  C:\Programme\Gemeinsame Dateien\Ahead\Lib\DriveLocker.dll (DriveLocker/Ahead Software AG)                                                                        0x10000000
Library  C:\Programme\Ahead\InCD\incdshx.dll (UDF Shell Extension DLL/Nero AG)                                                                                            0x1C000000

Process  C:\Programme\Videoload Manager\ContentManager.exe (Content Manager/ACE GmbH)                                                                                     1072
Library  C:\Programme\Videoload Manager\ContentManager.exe (Content Manager/ACE GmbH)                                                                                     0x00400000

Process  C:\Programme\Java\jre6\bin\jqs.exe (Java(TM) Quick Starter Service/Sun Microsystems, Inc.)                                                                       1468
Library  C:\Programme\Java\jre6\bin\jqs.exe (Java(TM) Quick Starter Service/Sun Microsystems, Inc.)                                                                       0x00400000

Process  C:\WINDOWS\system32\spoolsv.exe (Spooler SubSystem App/Microsoft Corporation)                                                                                    1496
Library  C:\WINDOWS\system32\avmprmon.dll (avmprmon/AVM Berlin GmbH)                                                                                                      0x00980000
Library  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\CIBpdfPP.dll (CIB pdf brewer Print Processor/CIB software GmbH, München)                                               0x00D40000
Library  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll (Print Filter Pipeline Proxy/Microsoft Corporation)                                        0x3F420000
Library  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\ppbipr.dll (Windows Print Processor DLL for Black Ice Color Printer Driver/Black Ice Software)                         0x6A900000

Process  C:\Programme\Avira\AntiVir Desktop\sched.exe (Antivirus Scheduler/Avira GmbH)                                                                                    1544
Library  C:\Programme\Avira\AntiVir Desktop\sched.exe (Antivirus Scheduler/Avira GmbH)                                                                                    0x00400000
Library  C:\Programme\Avira\AntiVir Desktop\schedr.dll (avschdr Dynamic Link Library/Avira GmbH)                                                                          0x10000000
Library  C:\Programme\Avira\AntiVir Desktop\avevtlog.dll (Event Logger/Avira GmbH)                                                                                        0x00BC0000
Library  C:\Programme\Avira\AntiVir Desktop\sqlite3.dll                                                                                                                   0x00D10000

Process  C:\WINDOWS\system32\slserv.exe ( /Smart Link)                                                                                                                    1692
Library  C:\WINDOWS\system32\slserv.exe ( /Smart Link)                                                                                                                    0x00400000

Process  C:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Downloads\oqvkf3z8.exe                                                                                    1772
Library  C:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Downloads\oqvkf3z8.exe                                                                                    0x00400000

Process  C:\WINDOWS\Explorer.EXE (Windows Explorer/Microsoft Corporation)                                                                                                 1872
Library  C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll (PDF Shell Extension/Adobe Systems, Inc.)                                                     0x10000000
Library  C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.DEU                                                                                               0x02600000

Process  C:\Programme\Ahead\InCD\InCD.exe (InCD/Nero AG)                                                                                                                  1988
Library  C:\Programme\Ahead\InCD\InCD.exe (InCD/Nero AG)                                                                                                                  0x01000000
Library  C:\Programme\Ahead\InCD\InCdApi.dll (InCDapi/Nero AG)                                                                                                            0x00400000
Library  C:\Programme\Gemeinsame Dateien\Ahead\Lib\DriveLocker.dll (DriveLocker/Ahead Software AG)                                                                        0x10000000
Library  C:\Programme\Ahead\InCD\incdshx.dll (UDF Shell Extension DLL/Nero AG)                                                                                            0x1C000000

Process  C:\WINDOWS\system32\VTTimer.exe (S3 Graphics, Inc.)                                                                                                              1996
Library  C:\WINDOWS\system32\VTTimer.exe (S3 Graphics, Inc.)                                                                                                              0x00400000

Process  C:\WINDOWS\system32\VTtrayp.exe (s3contrl (32-bit)/S3 Graphics Co., Ltd.)                                                                                        2004
Library  C:\WINDOWS\system32\VTtrayp.exe (s3contrl (32-bit)/S3 Graphics Co., Ltd.)                                                                                        0x00400000
Library  C:\WINDOWS\system32\VTDisply.dll (S3 multi-chip display switch utility (32-bit)/S3 Graphics Co., Ltd.)                                                           0x6BB00000
Library  C:\WINDOWS\system32\VTGamma2.dll (S3Gamma Plus (32-bit)/S3 Graphics Co., Ltd.)                                                                                   0x6BE00000
Library  C:\WINDOWS\system32\VTInfo2.dll (S3 Graphics Display Adapter Information Utility (32-bit)/S3 Graphics Co., Ltd.)                                                 0x6C000000
Library  C:\WINDOWS\system32\VTOvrlay.dll (S3ColorPus/S3Overlay Utility/S3 Graphics Co., Ltd.)                                                                            0x6C200000

Process  C:\Programme\Analog Devices\Core\smax4pnp.exe (SMax4PNP/Analog Devices, Inc.)                                                                                    2028
Library  C:\Programme\Analog Devices\Core\smax4pnp.exe (SMax4PNP/Analog Devices, Inc.)                                                                                    0x00400000
Library  C:\Programme\Analog Devices\Core\SMWDMIF.dll (SMWDM Interface DLL/Analog Devices, Inc.)                                                                          0x10000000

Process  C:\Programme\Analog Devices\SoundMAX\Smax4.exe (Audio Control Panel/Analog Devices, Inc.)                                                                        2040
Library  C:\Programme\Analog Devices\SoundMAX\Smax4.exe (Audio Control Panel/Analog Devices, Inc.)                                                                        0x00400000

Process  C:\Programme\Gemeinsame Dateien\Teleca Shared\Generic.exe (Generic Device Management Executable./Teleca Software Solutions)                                      2168
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\Generic.exe (Generic Device Management Executable./Teleca Software Solutions)                                      0x00400000
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\Telecalib_logging.dll (Telecalib Logging, Dynamic Link Library. Dll used for logging purposes./Teleca/Popwire AB)  0x10000000
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\boost_log-vc71-mt-1_32.dll                                                                                         0x00330000
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\TC Device Mgmt.dll (Device Management type library and proxy/stub dll./Teleca Software Solutions)                  0x019B0000
Library  C:\Programme\Sony Ericsson\Mobile2\Device Manager\SpecificMPM.dll (Mobile Phone Monitor specific device management dll./SonyEricsson)                            0x01220000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\anubisps.dll                                                                                             0x01240000
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\SpecificUSB.dll (USB specific device management dll./Popwire AB)                                                   0x01250000
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\tlib_log.dll (Telecalib Logging, Dynamic Link Library used for logging./Popwire AB)                                0x01290000
Library  C:\Programme\Gemeinsame Dateien\Teleca Shared\boost_log-vc71-mt-1_33.dll                                                                                         0x012C0000

Process  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe (CAPI_Worker Module/Sony Ericsson Mobile Communications AB)                                2296
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe (CAPI_Worker Module/Sony Ericsson Mobile Communications AB)                                0x00400000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\ShowMfcDialog.dll (ShowMfcDialog DLL/Sony Ericsson Mobile Communications AB)                             0x10000000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\db_objects.dll (DB_objects Module/Sony Ericsson Mobile Communications AB)                                0x10500000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\anubisps.dll                                                                                             0x013D0000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\cellphone_object.dll (cellphone_object Module/Sony Ericsson Mobile Communications AB)                    0x10400000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\ecsmoddata.dll (ecsmoddata/Sony Ericsson Mobile Communications AB)                                       0x013E0000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\msmeirsock_object.dll (MSMEIrSock_object Module/Sony Ericsson Mobile Communications AB)                  0x10F00000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\ms98irsock_object.dll (MS98IrSock_object Module/Sony Ericsson Mobile Communications AB)                  0x10D00000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\msirsock_object.dll (MSIrSock_object Module/Sony Ericsson Mobile Communications AB)                      0x10E00000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\cabmain.dll (cabmain/Sony Ericsson Mobile Communications AB)                                             0x02200000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\xpbtsock_2_object.dll (xpbtsock_2_object Module/Sony Ericsson Mobile Communications AB)                  0x01D40000
Library  C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\anubisutils.dll (AnubisUtils Module/Sony Ericsson Mobile Communications AB)                              0x11100000

Process  C:\Programme\iPod\bin\iPodService.exe (iPodService Module (32-bit)/Apple Inc.)                                                                                   2708
Library  C:\Programme\iPod\bin\iPodService.exe (iPodService Module (32-bit)/Apple Inc.)                                                                                   0x00400000
Library  C:\Programme\iPod\bin\iPodService.Resources\de.lproj\iPodServiceLocalized.DLL (iPodService Resource Library (32 Bit)/Apple Inc.)                                 0x10000000
Library  C:\Programme\iPod\bin\iPodService.Resources\iPodService.DLL (iPodService Resource Library (32-bit)/Apple Inc.)                                                   0x008A0000

---- Services - GMER 1.0.15 ----

Service  C:\WINDOWS\system32\drivers\ADIHdAud.sys (High Definition Audio Function Driver(Release Candidate 1)/Analog Devices, Inc.)                                       [MANUAL] ADIHdAudAddService
Service  C:\WINDOWS\system32\drivers\AEAudio.sys (Andrea Audio Noise Cancellation Driver/Andrea Electronics Corporation)                                                  [MANUAL] AEAudioService
Service  C:\Programme\Avira\AntiVir Desktop\sched.exe (Antivirus Scheduler/Avira GmbH)                                                                                    [AUTO] AntiVirSchedulerService
Service  C:\Programme\Avira\AntiVir Desktop\avguard.exe (Antivirus On-Access Service/Avira GmbH)                                                                          [AUTO] AntiVirService
Service  C:\xampp\apache\bin\httpd.exe (Apache HTTP Server/Apache Software Foundation)                                                                                    [AUTO] Apache2.2
Service  C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Mobile Device Service/Apple Inc.)                            [AUTO] Apple Mobile Device
Service  system32\DRIVERS\avfsfilter.sys                                                                                                                                  [MANUAL] AVFSFilter
Service  C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira AntiVir Support for Minifilter/Avira GmbH)                                                                   [SYSTEM] avgio
Service  C:\WINDOWS\system32\DRIVERS\avgntflt.sys (Avira Minifilter Driver/Avira GmbH)                                                                                    [AUTO] avgntflt
Service  C:\WINDOWS\system32\DRIVERS\avipbb.sys (Avira Driver for RootKit Detection/Avira GmbH)                                                                           [SYSTEM] avipbb
Service  C:\Programme\FRITZ!DSL\IGDCTRL.EXE (AVM IGD Service/AVM Berlin)                                                                                                  [AUTO] AVM IGD CTRL Service
Service  C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys (Brother USB Scanner Driver/Brother Industries Ltd.)                                                                    [MANUAL] BrScnUsb
Service  C:\Programme\Videoload Manager\ContentManager.exe (Content Manager/ACE GmbH)                                                                                     [AUTO] ContentMgrService
Service  C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe (AVM de_serv/AVM Berlin)                                                                                         [MANUAL] de_serv
Service  C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys (NDIS 5.0 miniport driver/VIA Technologies, Inc.              )                                                         [MANUAL] FETND5BV
Service  C:\WINDOWS\system32\DRIVERS\fetnd5.sys (NDIS 5.0 miniport driver/VIA Technologies, Inc.              )                                                           [MANUAL] FETNDIS
Service  C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys (CD DVD Filter/GEAR Software Inc.)                                                                                   [MANUAL] GEARAspiWDM
Service  C:\WINDOWS\system32\drivers\HdAudio.sys (High Definition Audio Function Driver v1.0a/Windows (R) Server 2003 DDK provider)                                       [MANUAL] HdAudAddService
Service  C:\WINDOWS\system32\DRIVERS\HDAudBus.sys (High Definition Audio Bus Driver v1.0a/Windows (R) Server 2003 DDK provider)                                           [MANUAL] HDAudBus
Service   (InCD File System Driver/Nero AG)                                                                                                                               [DISABLED] InCDfs
Service  C:\WINDOWS\System32\DRIVERS\InCDPass.sys (Ahead RW Filter Driver/Nero AG)                                                                                        [SYSTEM] InCDPass
Service   (InCD File System Recognizer/Nero AG)                                                                                                                           [SYSTEM] InCDrec
Service   (Ahead MRW Filter Driver/Nero AG)                                                                                                                               [SYSTEM] incdrm
Service  C:\Programme\Ahead\InCD\InCDsrv.exe (incdsrv/Nero AG)                                                                                                            [AUTO] InCDsrv
Service  C:\Programme\iPod\bin\iPodService.exe (iPodService Module (32-bit)/Apple Inc.)                                                                                   [MANUAL] iPod Service
Service  C:\Programme\Java\jre6\bin\jqs.exe (Java(TM) Quick Starter Service/Sun Microsystems, Inc.)                                                                       [AUTO] JavaQuickStarterService
Service                                                                                                                                                                   MSDTC Bridge 3.0.0.0
Service  C:\WINDOWS\system32\DRIVERS\Mtlmnt5.sys ( /Smart Link)                                                                                                           [MANUAL] Mtlmnt5
Service  C:\WINDOWS\system32\DRIVERS\Mtlstrm.sys ( /Smart Link)                                                                                                           [MANUAL] Mtlstrm
Service  C:\WINDOWS\system32\DRIVERS\ASACPI.sys                                                                                                                           [MANUAL] MTsensor
Service  C:\WINDOWS\system32\DRIVERS\NtMtlFax.sys ( /Smart Link)                                                                                                          [MANUAL] NtMtlFax
Service  C:\WINDOWS\system32\DRIVERS\PRISMUSB.sys (PRISM Wireless NDIS 5.1 USB Driver/GlobespanVirata, Inc.)                                                              [MANUAL] PRISM_USB
Service  C:\WINDOWS\system32\DRIVERS\ptilink.sys (Parallel Technologies DirectParallel IO Library/Parallel Technologies, Inc.)                                            [MANUAL] Ptilink
Service  C:\WINDOWS\System32\Drivers\PxHelp20.sys (Px Engine Device Driver for Windows 2000/XP/Sonic Solutions)                                                           [BOOT] PxHelp20
Service  C:\WINDOWS\system32\DRIVERS\RecAgent.sys ( /Smart Link)                                                                                                          [BOOT] RecAgent
Service  C:\WINDOWS\system32\DRIVERS\secdrv.sys (Macrovision SECURITY Driver/Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.)    [MANUAL] Secdrv
Service  C:\WINDOWS\system32\drivers\Senfilt.sys (Sensaura WDM 3D Audio Driver/Sensaura)                                                                                  [MANUAL] SenFiltService
Service                                                                                                                                                                   ServiceModelEndpoint 3.0.0.0
Service                                                                                                                                                                   ServiceModelOperation 3.0.0.0
Service                                                                                                                                                                   ServiceModelService 3.0.0.0
Service  C:\WINDOWS\system32\DRIVERS\slnt7554.sys ( /Smart Link)                                                                                                          [MANUAL] Slnt7554
Service  C:\WINDOWS\system32\DRIVERS\Slnthal.sys ( /Smart Link)                                                                                                           [MANUAL] SlNtHal
Service  C:\WINDOWS\system32\slserv.exe ( /Smart Link)                                                                                                                    [AUTO] SLService
Service  C:\WINDOWS\system32\DRIVERS\SlWdmSup.sys ( /Smart Link)                                                                                                          [MANUAL] SlWdmSup
Service                                                                                                                                                                   SMSvcHost 3.0.0.0
Service  C:\WINDOWS\system32\DRIVERS\ssmdrv.sys (AVIRA SnapShot Driver/Avira GmbH)                                                                                        [MANUAL] ssmdrv
Service  C:\WINDOWS\system32\DRIVERS\vtmini.sys (VIA/S3G Miniport Driver/Copyright (C) VIA/S3 Graphics Co, Ltd.)                                                          [MANUAL] viagfx
Service  C:\WINDOWS\system32\DRIVERS\viaide.sys (Generic PCI IDE Bus Driver/Microsoft Corporation)                                                                        [BOOT] ViaIde
Service  C:\WINDOWS\system32\DRIVERS\videX32.sys (VIA Generic PCI IDE Bus Driver/VIA Technologies, Inc.)                                                                  [BOOT] videX32
Service  C:\WINDOWS\system32\DRIVERS\w810bus.sys (Sony Ericsson W810 Driver Driver/MCCI)                                                                                  [MANUAL] w810bus
Service  C:\WINDOWS\system32\DRIVERS\w810mdfl.sys (Sony Ericsson W810 USB WMC Modem Filter Driver/MCCI)                                                                   [MANUAL] w810mdfl
Service  C:\WINDOWS\system32\DRIVERS\w810mdm.sys (Sony Ericsson W810 USB WMC Modem WDM Driver/MCCI)                                                                       [MANUAL] w810mdm
Service  C:\WINDOWS\system32\DRIVERS\w810mgmt.sys (Sony Ericsson W810 USB WMC Device Management Driver/MCCI)                                                              [MANUAL] w810mgmt
Service  C:\WINDOWS\system32\DRIVERS\w810obex.sys (Sony Ericsson W810 USB WMC OBEX Interface Device Driver/MCCI)                                                          [MANUAL] w810obex
Service                                                                                                                                                                   Windows Workflow Foundation 3.0.0.0
Service                                                                                                                                                                   Wmi
Service  C:\WINDOWS\system32\DRIVERS\xfilt.sys (ATA/ATAPI devices hot-plug monitor/VIA Technologies,Inc)                                                                  [BOOT] xfilt

---- EOF - GMER 1.0.15 ----

03.02.2010, 22:48

Swisstreasure

Moderator

Beiträge: 3900

#17 Ist doch kein Rootkit aktiv

Fehlalarm.

Und was sagt der Speed?
__________
Gruss Swiss

*** I'am not infected, i'am a Fighter ***

03.02.2010, 22:52

tst84

Member

Beiträge: 11

#18 Geschwindigkeit von gerade eben:

Download-Geschwindigkeit: [-]8.889 kbit/s (1.111 kByte/s)
Upload-Geschwindigkeit: [-]652 kbit/s (82 kByte/s)

fritz.box sagt aber 12300 kbits und 1000 kbits

Kann das Problem an der Leitung/an der Telekom liegen?

03.02.2010, 22:55

Swisstreasure

Moderator

Beiträge: 3900

#19 Ja ich habe das Gefühl. Versuche einmal mit Speedtest:
http://www.speedtest.net/
__________
Gruss Swiss

*** I'am not infected, i'am a Fighter ***

04.02.2010, 07:26

tst84

Member

Beiträge: 11

#20 Das sagt speedtest:

http://www.speedtest.net/result/705217768.png

lohnt es sich den RegistryBooster zu kaufen? (über 900 Felher bei mir gefunden)

04.02.2010, 18:31

Swisstreasure

Moderator

Beiträge: 3900

#21 Nein nichts solches kaufen!

CCleaner installieren und einstellen
• CCleaner ist ein Bereinigungstool, welches für Windows 98/NT4/ME/2000/XP/2003/Vista geeignet ist.
• CCleaner löscht unnötige Dateien und säubert die Registrierung.
• Falls Du die aktuelle Version: 2.23.993 schon hast, kannst Du den Download und die Installation natürlich überspringen.
• CCleaner (Slim ohne Toolbar)[/url] herunterladen und installieren.
• CCleaner starten und => unter options settings => german einstellen.
• Gehe auf den Button links oben "Cleaner" => Reiter "Windows"
setze Häkchen wie folgt:
alle außer "Eingabefeld Verlauf" und bei
Erweitert nur ein Häkchen bei "Alte Prefetchdaten" und "Benutzerdefinierte Dateien und Ordner".
• Wechsel zum Reiter "Anwendungen",
dort alle Häkchen setzen außer bei Firefox/Mozilla (falls vorhanden) "Gespeicherte Formulardaten".

Registry mit CCleaner bereinigen

Gehe links auf den Button "Einstellungen" und kontrolliere, ob bei "Erweitert" ein Haken bei
"Zeige Aufforderung für ein Backup der Registry" vorhanden ist, falls nicht, bitte anhaken.
Zur Registry-Bereinigung klicke links auf "Registry", setze alle Häkchen und starte die Suche
unten mit dem Button "nach Fehlern suchen". Die gefundenen Fehler kannst Du durch den
Button "Fehler beheben" entfernen lassen. Diesen Vorgang wiederholen, bis keine Fehler
mehr gefunden werden. Den Rechner neu starten. Teile uns hier mit, wie viele Fehler
bereinigt wurden.
__________
Gruss Swiss

*** I'am not infected, i'am a Fighter ***

05.02.2010, 08:51

tst84

Member

Beiträge: 11

#22 Das habe ich doch schon einmal gemacht!? Nochmal?

05.02.2010, 12:39

Swisstreasure

Moderator

Beiträge: 3900

#23 Jo sorry, ich meinte einfach nochmals durchführen beides. Vorallem Registry nach Fehler durchsuchen

__________
Gruss Swiss

*** I'am not infected, i'am a Fighter ***

07.02.2010, 16:58

tst84

Member

Beiträge: 11

#24 Hi,

ich habe beide Aufgaben ausgeführt. In der Registry waren 19 Fehler, die bis auf einen behoben wurden. Die I-netverbindung ist nach wie vor langsam!!

Was kann ich noch machen??

07.02.2010, 20:05

Swisstreasure

Moderator

Beiträge: 3900

#25 Lade ComboFix von einem der unten aufgeführten Links herunter. Du musst diese umbenennen, bevor Du es auf den Desktop speicherst. Speichere ComboFix auf deinen Desktop.
• BleepingComputer
• ForoSpyware
**NB: Es ist wichtig, das ComboFix.exe auf dem Desktop gespeichert wird**

• Doppel-klicke auf ComboFix.exe und folge den Aufforderungen.
• Wenn ComboFix fertig ist, wird es ein Log für dich erstellen.
• Bitte füge das C:\ComboFix.txt Log in deiner Antwort im Forum bei, so dass wir uns diese analysieren können.
__________
Gruss Swiss

*** I'am not infected, i'am a Fighter ***

08.02.2010, 11:41

tst84

Member

Beiträge: 11

#26

Code

ComboFix 10-02-07.07 - Besitzer 08.02.2010  11:29:20.1.2 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1252.49.1031.18.2494.2059 [GMT 1:00]
ausgeführt von:: c:\dokumente und einstellungen\Besitzer\Desktop\umbenannt.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

Achtung - Auf diesem PC ist keine Wiederherstellungskonsole installiert !!
.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\dokumente und einstellungen\Katja\Anwendungsdaten\AD ON Multimedia
c:\dokumente und einstellungen\Katja\Anwendungsdaten\AD ON Multimedia\eBay Shortcuts\config.ini
c:\programme\ICQ6.5\updates\ICQLRun.exe.91c2e91e127ccb34d0b0bbd8b0533169
c:\windows\system32\logs
c:\windows\system32\logs\svchost.log
c:\windows\system32\Thumbs.db

.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_TDSSSERV


(((((((((((((((((((((((   Dateien erstellt von 2010-01-08 bis 2010-02-08  ))))))))))))))))))))))))))))))
.

2010-02-07 15:50 . 2010-02-07 15:52    --------    d-----w-    c:\dokumente und einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Temp
2010-02-07 15:50 . 2010-02-07 15:50    --------    d-----w-    c:\dokumente und einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Deployment
2010-02-06 19:16 . 2010-02-06 19:16    --------    d-s---w-    c:\dokumente und einstellungen\max\UserData
2010-02-04 06:20 . 2010-02-04 06:20    --------    d-----w-    c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\Uniblue
2010-02-02 17:21 . 2005-11-21 09:41    367104    ----a-w-    c:\windows\system32\drivers\Netfwdsl.sys
2010-02-02 17:21 . 2005-11-21 09:41    11264    ----a-w-    c:\windows\system32\drivers\NETDSL.SYS
2010-02-02 17:21 . 2005-11-21 09:34    28160    ----a-w-    c:\windows\system32\drivers\Aadev.sys
2010-02-02 17:21 . 2003-07-11 15:51    31232    ----a-w-    c:\windows\system32\i2errDeu.dll
2010-02-02 17:21 . 2010-02-02 17:21    --------    d-----w-    c:\programme\Gemeinsame Dateien\AVM
2010-02-02 17:21 . 2006-05-29 00:00    16384    ----a-r-    c:\windows\system32\avmprmon.dll
2010-02-02 17:21 . 2006-01-20 11:43    55808    ----a-r-    c:\windows\system32\avmadd32.dll
2010-02-02 17:21 . 2010-02-02 17:21    --------    d-----w-    c:\programme\FRITZ!BoxPrint
2010-02-02 17:21 . 2010-02-02 17:21    --------    d-----w-    c:\programme\FRITZ!Box
2010-02-02 16:44 . 2010-02-02 16:44    --------    d-----w-    c:\programme\[url="http://www.ccleaner.de"]CCleaner[/url]
2010-02-02 16:18 . 2010-02-02 16:18    --------    d-----w-    C:\_OTL
2010-02-01 18:53 . 2010-02-01 18:53    --------    d-----w-    c:\dokumente und einstellungen\max\Anwendungsdaten\Fighters
2010-02-01 18:53 . 2010-02-01 18:53    --------    d-----w-    c:\dokumente und einstellungen\Katja\Anwendungsdaten\Common Toolkit Suite
2010-01-29 11:39 . 2010-01-29 11:39    --------    d-----w-    c:\dokumente und einstellungen\Katja\Anwendungsdaten\Fighters
2010-01-28 20:07 . 2010-01-28 20:07    --------    d-----w-    c:\dokumente und einstellungen\All Users\Anwendungsdaten\clp
2010-01-28 19:58 . 2010-01-28 19:58    --------    d-----w-    c:\programme\Fighters
2010-01-28 19:54 . 2010-01-28 19:54    --------    d-----w-    c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\Fighters
2010-01-28 19:54 . 2010-01-28 19:54    --------    d-----w-    c:\dokumente und einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\PackageAware
2010-01-22 14:17 . 2010-01-22 14:17    --------    d-----w-    c:\programme\notpadportable
2010-01-17 15:37 . 2010-01-17 15:37    --------    d-----w-    c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\DivX
2010-01-13 06:50 . 2009-11-21 15:54    471552    -c----w-    c:\windows\system32\dllcache\aclayers.dll

.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-08 08:33 . 2008-09-01 14:07    --------    d-----w-    c:\programme\StarMoney 6.0
2010-02-07 16:15 . 2008-01-09 21:47    --------    d-----w-    c:\programme\FRITZ!DSL
2010-02-07 12:12 . 2007-04-19 06:23    --------    d-----w-    c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\IBP
2010-02-07 12:11 . 2009-08-10 15:44    --------    d-----w-    c:\programme\IBP 11
2010-02-05 19:47 . 2009-07-14 18:03    --------    d-----w-    c:\programme\ICQ6.5
2010-02-05 19:46 . 2007-02-05 15:43    --------    d-----w-    c:\programme\Trillian
2010-02-02 16:18 . 2006-02-28 12:00    84524    ----a-w-    c:\windows\system32\perfc007.dat
2010-02-02 16:18 . 2006-02-28 12:00    459152    ----a-w-    c:\windows\system32\perfh007.dat
2010-02-02 16:11 . 2007-02-19 09:17    --------    d-----w-    c:\programme\Watchtower
2010-02-01 08:10 . 2008-09-10 16:53    --------    d-----w-    c:\programme\Malwarebytes' Anti-Malware
2010-02-01 08:08 . 2008-09-10 16:54    5115824    ----a-w-    c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2010-01-16 10:38 . 2009-05-10 14:45    --------    d---a-w-    c:\dokumente und einstellungen\All Users\Anwendungsdaten\TEMP
2010-01-16 07:28 . 2009-05-10 14:45    --------    d-----w-    c:\dokumente und einstellungen\Katja\Anwendungsdaten\MyPhoneExplorer
2010-01-11 08:11 . 2008-08-13 08:55    --------    d-----w-    c:\programme\UltraFXP
2010-01-10 19:24 . 2008-08-02 11:41    --------    d-----w-    c:\programme\DivX
2010-01-10 19:23 . 2009-12-15 19:24    --------    d-----w-    c:\programme\Gemeinsame Dateien\DivX Shared
2010-01-07 15:07 . 2008-09-10 16:53    38224    ----a-w-    c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-07 15:07 . 2008-09-10 16:53    19160    ----a-w-    c:\windows\system32\drivers\mbam.sys
2009-12-22 05:07 . 2006-02-28 12:00    672768    ----a-w-    c:\windows\system32\wininet.dll
2009-12-22 05:07 . 2006-02-28 12:00    81920    ----a-w-    c:\windows\system32\ieencode.dll
2009-12-19 17:19 . 2009-12-19 17:19    --------    d-----w-    c:\dokumente und einstellungen\Katja\Anwendungsdaten\DivX
2009-12-16 13:42 . 2009-12-27 06:58    872960    ----a-w-    c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\vxx7f03i.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2009-12-16 13:42 . 2009-12-27 06:58    43008    ----a-w-    c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\vxx7f03i.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2009-12-16 13:42 . 2009-12-27 06:58    340480    ----a-w-    c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\vxx7f03i.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2009-12-16 13:41 . 2009-12-27 06:58    346624    ----a-w-    c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\vxx7f03i.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2009-12-15 19:39 . 2009-12-15 19:39    --------    d-----w-    c:\programme\Gemeinsame Dateien\Adobe
2009-12-14 19:33 . 2007-02-04 17:30    50968    ----a-w-    c:\dokumente und einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2009-12-08 14:57 . 2009-03-17 16:00    56816    ----a-w-    c:\windows\system32\drivers\avgntflt.sys
2009-12-06 14:28 . 2009-12-06 14:28    152576    ----a-w-    c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\Sun\Java\jre1.6.0_17\lzma.dll
2009-12-06 14:28 . 2009-11-21 06:17    79488    ----a-w-    c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\Sun\Java\jre1.6.0_17\gtapi.dll
2009-12-06 11:27 . 2009-11-21 06:30    79488    ----a-w-    c:\dokumente und einstellungen\Katja\Anwendungsdaten\Sun\Java\jre1.6.0_17\gtapi.dll
2009-12-01 10:13 . 2008-12-04 13:06    50968    ----a-w-    c:\dokumente und einstellungen\Katja\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
2009-11-24 11:32 . 2009-11-24 11:32    79488    ----a-w-    c:\dokumente und einstellungen\mobile\Anwendungsdaten\Sun\Java\jre1.6.0_17\gtapi.dll
2009-11-21 15:54 . 2006-02-28 12:00    471552    ----a-w-    c:\windows\AppPatch\aclayers.dll
2009-11-14 00:49 . 2009-12-15 19:25    9464    ------w-    c:\windows\system32\drivers\cdralw2k.sys
2009-11-14 00:49 . 2009-12-15 19:25    9336    ------w-    c:\windows\system32\drivers\cdr4_xp.sys
2009-11-14 00:49 . 2009-12-15 19:25    43528    ------w-    c:\windows\system32\drivers\PxHelp20.sys
2009-11-14 00:49 . 2009-12-15 19:25    129784    ------w-    c:\windows\system32\pxafs.dll
2009-11-14 00:49 . 2009-12-15 19:25    120056    ------w-    c:\windows\system32\pxcpyi64.exe
2009-11-14 00:49 . 2009-12-15 19:25    118520    ------w-    c:\windows\system32\pxinsi64.exe
2009-11-14 00:47 . 2009-11-14 00:47    90112    ----a-w-    c:\windows\system32\dpl100.dll
2009-11-14 00:47 . 2009-11-14 00:47    856064    ----a-w-    c:\windows\system32\divx_xx0c.dll
2009-11-14 00:47 . 2009-11-14 00:47    856064    ----a-w-    c:\windows\system32\divx_xx07.dll
2009-11-14 00:47 . 2009-11-14 00:47    847872    ----a-w-    c:\windows\system32\divx_xx0a.dll
2009-11-14 00:47 . 2009-11-14 00:47    843776    ----a-w-    c:\windows\system32\divx_xx16.dll
2009-11-14 00:47 . 2009-11-14 00:47    839680    ----a-w-    c:\windows\system32\divx_xx11.dll
2009-11-14 00:47 . 2009-11-14 00:47    696320    ----a-w-    c:\windows\system32\DivX.dll
2008-12-24 10:50 . 2008-12-24 10:49    10125963    ----a-w-    c:\programme\druckshopcd-label.exe
2008-09-01 14:06 . 2008-09-01 14:05    63596200    ----a-w-    c:\programme\smoney_m_18__4000738245_2_.exe
2008-01-09 21:47 . 2008-01-09 21:47    10262832    ----a-w-    c:\programme\fritzdsl_2_04_02.exe
2007-12-04 21:12 . 2007-12-04 21:12    25842760    ----a-w-    c:\programme\wmp11-windowsxp-x86-DE-DE(2).exe
2007-12-04 21:11 . 2007-12-04 21:11    881192    ----a-w-    c:\programme\WGAPluginInstall.exe
2007-12-04 20:59 . 2007-12-04 20:59    7045391    ----a-w-    c:\programme\XP_Codec_Pack-2.3.3.exe
2007-12-04 09:56 . 2007-12-04 09:56    14782496    ----a-w-    c:\programme\IE7-WindowsXP-x86-deu.exe
2007-12-03 15:00 . 2007-12-03 15:00    693840    ----a-w-    c:\programme\wmv9VCMsetup.exe
2007-12-03 12:37 . 2007-02-02 07:02    25842736    ----a-w-    c:\programme\wmp11-windowsxp-x86-DE-DE.exe
2007-10-26 19:56 . 2007-10-26 19:56    10050902    ----a-w-    c:\programme\Codecs6030_allin1.exe
2007-10-26 19:55 . 2007-10-26 19:55    17976688    ----a-w-    c:\programme\Install_Messenger.exe
2007-10-07 09:14 . 2007-10-07 09:14    3458079    ----a-w-    c:\programme\FileZilla_2_2_32_setup.exe
2007-02-04 19:18 . 2007-02-04 19:06    14464888    ----a-w-    c:\programme\antivir_workstation_win7u_de_h.exe
2007-01-01 16:57 . 2007-02-02 07:03    5007104    ----a-w-    c:\programme\GoogleVideoPlayerSetup.exe
2006-12-26 13:55 . 2007-02-02 07:03    14842672    ----a-w-    c:\programme\IE7-WindowsXP-x86-deu_2.exe
2006-10-12 20:05 . 2007-02-02 07:03    142848    ----a-w-    c:\programme\ProgrammDienstwocheDeck.doc
2006-05-23 17:13 . 2007-02-02 07:03    4363368    ----a-w-    c:\programme\pdfmailer3stdde.exe
2006-02-09 17:35 . 2007-02-02 07:03    10178122    ----a-w-    c:\programme\Cole2k Media - Codec Pack V5.57 Standard[Codec-Download.de].exe
2006-02-09 17:14 . 2007-02-02 07:03    1416944    ----a-w-    c:\programme\WM9Codecs[Codec-Download.de].exe
2006-02-08 17:43 . 2007-02-02 07:03    3782705    ----a-w-    c:\programme\wace26i.exe
2006-02-04 18:30 . 2007-02-02 07:03    2609152    ----a-w-    c:\programme\wz90gev.exe
2006-01-15 18:16 . 2007-02-02 07:03    3798666    ----a-w-    c:\programme\tvc.exe
2006-01-02 17:03 . 2007-02-02 07:03    9000041    ----a-w-    c:\programme\trillian-v3.1.exe
2005-07-14 11:31 . 2005-07-14 11:31    27648    --sha-r-    c:\windows\system32\AVSredirect.dll
2005-06-26 14:32 . 2005-06-26 14:32    616448    --sha-r-    c:\windows\system32\cygwin1.dll
2005-06-21 21:37 . 2005-06-21 21:37    45568    --sha-r-    c:\windows\system32\cygz.dll
2006-05-03 09:06 . 2008-06-06 14:04    163328    --sh--r-    c:\windows\system32\flvDX.dll
2004-01-24 23:00 . 2004-01-24 23:00    70656    --sha-r-    c:\windows\system32\i420vfw.dll
2007-02-21 10:47 . 2008-06-06 14:04    31232    --sh--r-    c:\windows\system32\msfDX.dll
2007-12-17 12:43 . 2008-06-06 14:04    27648    --sh--w-    c:\windows\system32\Smab0.dll
2005-02-28 12:16 . 2005-02-28 12:16    240128    --sha-r-    c:\windows\system32\x.264.exe
2004-01-24 23:00 . 2004-01-24 23:00    70656    --sha-r-    c:\windows\system32\yv12vfw.dll
.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="c:\dokumente und einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Google\Update\GoogleUpdate.exe" [2010-02-07 135664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"InCD"="c:\programme\Ahead\InCD\InCD.exe" [2005-07-25 1397760]
"VTTimer"="VTTimer.exe" [2005-03-08 53248]
"VTTrayp"="VTtrayp.exe" [2005-11-01 163840]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" [2004-10-27 61952]
"SoundMAXPnP"="c:\programme\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696]
"SSBkgdUpdate"="c:\programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 155648]
"PaperPort PTD"="c:\programme\ScanSoft\PaperPort\pptd40nt.exe" [2005-03-17 57393]
"IndexSearch"="c:\programme\ScanSoft\PaperPort\IndexSearch.exe" [2005-03-17 40960]
"BrMfcWnd"="c:\programme\Brother\Brmfcmon\BrMfcWnd.exe" [2006-03-28 622592]
"ControlCenter3"="c:\programme\Brother\ControlCenter3\brctrcen.exe" [2006-04-10 61440]
"QuickTime Task"="c:\programme\QuickTime\QTTask.exe" [2009-09-04 417792]
"Sony Ericsson PC Suite"="c:\programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2005-10-26 159744]
"RemoteControl"="c:\programme\CyberLink\PowerDVD\PDVDServ.exe" [2005-01-12 32768]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2009-09-21 305440]
"SunJavaUpdateSched"="c:\programme\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"Adobe Reader Speed Launcher"="c:\programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\dokumente und einstellungen\All Users\Startmen\Programme\Autostart\
Microsoft Office.lnk - c:\programme\Microsoft Office\Office\OSA9.EXE [2000-1-21 65588]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\Trillian\\trillian.exe"=
"c:\\Programme\\Windows Media Player\\wmplayer.exe"=
"c:\\Programme\\ICQ6.5\\ICQ.exe"=
"c:\\Programme\\iTunes\\iTunes.exe"=
"c:\\Programme\\FRITZ!DSL\\IGDCTRL.EXE"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1196:UDP"= 1196:UDP:Windows Media Format SDK (firefox.exe)
"1197:UDP"= 1197:UDP:Windows Media Format SDK (firefox.exe)
"1198:UDP"= 1198:UDP:Windows Media Format SDK (firefox.exe)

R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [04.02.2007 20:56 11264]
R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [03.06.2009 04:36 108289]
R2 ContentMgrService;Content Management Service;c:\programme\Videoload Manager\ContentManager.exe [12.03.2008 17:26 508928]
S2 Apache2.2;Apache2.2;c:\xampp\apache\bin\httpd.exe [10.12.2008 00:10 24636]
S3 AVFSFilter;AVFSFilter;c:\windows\system32\DRIVERS\avfsfilter.sys --> c:\windows\system32\DRIVERS\avfsfilter.sys [?]
S3 PRISM_USB;D-Link Air Wireless USB Adapter Driver;c:\windows\system32\drivers\PRISMUSB.sys [02.10.2003 13:47 666624]
S3 Slnt7554;USB Soft Modem Driver;c:\windows\system32\drivers\slnt7554.sys [25.04.2007 18:07 129535]
.
Inhalt des "geplante Tasks" Ordners

2010-02-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-854245398-1647877149-682003330-1003Core.job
- c:\dokumente und einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Google\Update\GoogleUpdate.exe [2010-02-07 15:50]

2010-02-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-854245398-1647877149-682003330-1003UA.job
- c:\dokumente und einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Google\Update\GoogleUpdate.exe [2010-02-07 15:50]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://start.icq.com/
uInternet Settings,ProxyOverride = *.local
IE: Google AdSense Preview-Tool - http://pagead2.googlesyndication.com/pagead/preview/de/preview.html
Handler: fluxhttp - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - c:\programme\Gemeinsame Dateien\fluxDVD\Lib\XEB\xebnavigation.ax
Handler: fluxhttp\0x00000007 - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - c:\programme\Gemeinsame Dateien\fluxDVD\Lib\XEB\xebnavigation.ax
DPF: {162247AF-26A7-44FC-A93A-69506EA244F3} - hxxp://maxdomeservice.1und1.de/de/systemcheck/HWTest.CAB
FF - ProfilePath - c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\vxx7f03i.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: c:\dokumente und einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\vxx7f03i.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - plugin: c:\dokumente und einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.2.183.13\npGoogleOneClick8.dll
FF - plugin: c:\programme\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\programme\Gemeinsame Dateien\fluxDVD\APIX\NPAPIX.dll
FF - plugin: c:\programme\Gemeinsame Dateien\fluxDVD\BrowserIntegration\NPFluxBrowserHelper.dll
FF - plugin: c:\programme\Gemeinsame Dateien\mpDRM\NPMPDRM.dll
FF - plugin: c:\programme\Gemeinsame Dateien\mpDRM\NPWMDRMWrapper.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX Richtlinien ----
c:\programme\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency",   1600);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug",            false);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight",       2);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize",       1);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight",   25);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight",     5);
c:\programme\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\programme\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\programme\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\programme\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\programme\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-08 11:35
Windows 5.1.2600 Service Pack 3 NTFS

Scanne versteckte Prozesse... 

Scanne versteckte Autostarteinträge... 

Scanne versteckte Dateien... 

Scan erfolgreich abgeschlossen
versteckte Dateien: 0

**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{1036D5BA-CA0B-6EFB-A816166A3C4364C2}\{9AB25E74-55C5-EF48-A2C588CFA5A2438C}\{DC8259A3-8AE9-348D-2F7CC1007F2DBE93}*]
"H35SBU1TDACDN4RUAHZ4TWNZVG1"=hex:01,00,01,00,00,00,00,00,2a,e8,d8,b5,da,1c,28,
   8f,35,81,92,71,e8,29,5a,84,14,35,16,70,d8,6e,ff,61

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7FAFFD5B-ECA5-8590-06385EB5239D555A}\{E5D513A6-5530-C183-13C6195B3F88B339}\{5B7495F9-FD9A-8C8C-FD87354974961E7A}*]
"H35SBU1TDACDN4RUAHZ4TWNZVG1"=hex:01,00,01,00,00,00,00,00,2a,e8,d8,b5,da,1c,28,
   8f,35,81,92,71,e8,29,5a,84,14,35,16,70,d8,6e,ff,61

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AD7DA6D0-C8A5-2AB7-AFAFBAF6CCA2EFA4}\{BFF22B84-84BD-C376-CF902D4CFF2D2B8A}\{C30500AE-8022-F8A1-791309212C4775E7}*]
"H35SBU1TDACDN4RUAHZ4TWNZVG1"=hex:01,00,01,00,00,00,00,00,2a,e8,d8,b5,da,1c,28,
   8f,35,81,92,71,e8,29,5a,84,14,35,16,70,d8,6e,ff,61
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------

- - - - - - - > 'explorer.exe'(4012)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\programme\Ahead\InCD\InCDsrv.exe
c:\programme\Avira\AntiVir Desktop\avguard.exe
c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\programme\FRITZ!DSL\IGDCTRL.EXE
c:\programme\Java\jre6\bin\jqs.exe
c:\windows\system32\VTTimer.exe
c:\windows\system32\VTtrayp.exe
c:\programme\Brother\ControlCenter3\brccMCtl.exe
c:\programme\Gemeinsame Dateien\Teleca Shared\CapabilityManager.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\dokumente und einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.2.183.13\GoogleCrashHandler.exe
c:\programme\iPod\bin\iPodService.exe
c:\programme\Gemeinsame Dateien\Teleca Shared\Generic.exe
c:\programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2010-02-08  11:39:09 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2010-02-08 10:39

Vor Suchlauf: 12 Verzeichnis(se), 28.776.628.224 Bytes frei
Nach Suchlauf: 14 Verzeichnis(se), 31.532.122.112 Bytes frei

Current=1 Default=1 Failed=0 LastKnownGood=5 Sets=1,2,3,4,5
- - End Of File - - 79E7643D335F4117B899E7EE980767A7

08.02.2010, 21:00

Swisstreasure

Moderator

Beiträge: 3900

#27 Und?

Es nicht mich mal etwas wunder. Findest Du sowas:

Start => ausführen => devmgmt.msc reinschreiben => OK
Es öffnet sich das Fenster des Geräte-Managers.
Im Menü unter Ansicht => Ausgeblendete Geräte anzeigen wählen.
Nicht-PnP-Treiber aufklappen (auf das +Zeichen drücken).
Suche nach dem Treiber TDSSserv.sys (oder ähnlich).
Rechtsklick auf den Treiber => Deaktivieren wählen.
Rechner neu starten.

Lade den
Avenger herunter und entzippe ihn auf den Desktop.
Nicht gezippt direkt als EXE ist der Avenger hier erhältlich.

Starte die avenger.exe durch Doppelklick und akzeptiere mit OK die
Nutzungsbedingungen.Hacke "automativaly disable all found Rootkits" an und klicke auf
"Execute". Beantworte die Frage mit "Ja".

Beantworte die Frage zum Neustart des Rechners (Reboot now?) ebenfalls mit "Ja".
Nachdem der Rechner neu gestartet ist (das kann auch zweimal nötig sein und passieren!)
und das DOS-Fenster, das der Avenger geöffnet hat, wieder geschlossen ist, öffnet Avenger
Deinen Editor mit dem Avengerlog, zu finden auch unter C:\avenger.txt. Den Inhalt
bitte posten. Ein Backup der entfernten Objekte wurde als C:\avenger\backup.zip
angelegt.
__________
Gruss Swiss

*** I'am not infected, i'am a Fighter ***

08.02.2010, 22:30

tst84

Member

Beiträge: 11

#28 Hallo, Internetverbindung nicht besser

zu 1: Was soll ich deaktivieren? siehe

zu 2:

Code

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform:  Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!


Completed script processing.

*******************

Finished!  Terminate.

09.02.2010, 11:36

Swisstreasure

Moderator

Beiträge: 3900

#29 Nichts

Aber bitte ruf einmal Deinen Provider an und frag nach was der Grund sein kann. Weils sonst suchen wir und hier nur dumm und dämlich

__________
Gruss Swiss

*** I'am not infected, i'am a Fighter ***

Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!

Folgende Themen könnten Dich auch interessieren:

Seite(n): 1 2