Opfer von Kreditkartenbetrug - Trojaner die Ursache!?

Thomas39
Gast

« am: 04.05.09, 17:23:41 »

Liebe Community,
von meinem Kreditkartenkonto wurden in drei Buchungen insgesamt 1096 Euro verfügt, die nicht von mir getätigt wurden. Zwar wurde mir der Schaden ersetzt, dennoch frage ich mich natürlich, ob ich evtl. Schuld daran trage und evtl. mit einem Trojaner infiziert bin.
Gemäß der Anleitung habe ich mir die notwendigen Programme geladen und entsprechende Logfiles erstellt.

1. Malwarebytes
Malwarebytes' Anti-Malware 1.36
Datenbank Version: 2072
Windows 6.0.6001 Service Pack 1

04.05.2009 16:29:58
mbam-log-2009-05-04 (16-29-58).txt

Scan-Methode: Vollständiger Scan (C:\|D:\|)
Durchsuchte Objekte: 228161
Laufzeit: 1 hour(s), 32 minute(s), 55 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

2. V/W-SCAN
Die 30 neuesten Dateien im Ordner Windows:

***** ***** ***** ***** *****
***** Scanning C:\Windows *****
***** ***** ***** ***** *****

04.05.2009 bootstat.dat 16 31:67.584
04.05.2009 bthservsdp.dat 16 31:4.226
04.05.2009 WindowsUpdate.log 16 31:1.667.121
01.05.2009 win.ini 13 48:229
29.04.2009 NeroDigital.ini 07 17:69
27.04.2009 BRWMARK.INI 21 05:416
27.04.2009 BRPP2KA.INI 21 05:26
28.03.2009 Telescope.ini 21 25:1.398
27.03.2009 HMHud.INI 11 47:0
02.03.2009 ODBC.INI 10 43:28
28.02.2009 BO5130.INI 18 28:40
23.02.2009 cdplayer.ini 22 11:25
22.02.2009 nsreg.dat 23 55:0
21.02.2009 WindowsShell.Manifest 18 56:749
21.02.2009 ocsetup_install_NetFx3.etl 17 04:21.495.808
21.02.2009 ocsetup_cbs_install_NetFx3.perf 17 04:327.680
21.02.2009 ocsetup_cbs_install_NetFx3.dpx 17 04:65.536
21.02.2009 explorer.exe 16 34:2.927.104
19.01.2008 regedit.exe 09 33:134.656
19.01.2008 notepad.exe 09 33:151.040
19.01.2008 HelpPane.exe 09 33:498.176
19.01.2008 fveupdate.exe 09 33:13.312
19.01.2008 bfsvc.exe 09 33:58.880
10.10.2007 OEM02Cfg.exe 18 02:28.672
20.09.2007 NuNInst.exe 11 36:238.888
20.09.2007 UNRecode.exe 10 59:972.072
20.09.2007 UNNeroMediaHome.exe 10 55:972.072

Die 50 neuesten Dateien im Ordner Windows\system32:

***** ***** ***** ***** *****
***** Scanning C:\Windows\system32 *****
***** ***** ***** ***** *****

04.05.2009 7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 16 31:4.048
04.05.2009 7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 16 31:4.048
04.05.2009 JkDefragScreenSaver.log 14 42:38
03.05.2009 perfh009.dat 22 43:590.082
03.05.2009 perfc009.dat 22 43:102.094
03.05.2009 perfh007.dat 22 43:621.952
03.05.2009 perfc007.dat 22 43:123.658
03.05.2009 PerfStringBackup.INI 22 43:1.427.212
01.05.2009 FNTCACHE.DAT 13 55:368.648
06.04.2009 mrt.exe 16 57:24.921.544
23.03.2009 brss01a.ini 16 43:30
23.03.2009 brsvc01a.bsi 16 43:184
17.03.2009 apilogen.dll 05 38:13.824
17.03.2009 amxread.dll 05 38:24.064
08.03.2009 iedkcs32.dll 23 09:391.536
08.03.2009 mshtml.dll 13 41:5.937.152
08.03.2009 ieframe.dll 13 39:11.063.808
08.03.2009 html.iec 13 35:385.024
08.03.2009 wininet.dll 13 34:914.944
08.03.2009 urlmon.dll 13 34:1.206.784
08.03.2009 inetcpl.cpl 13 34:1.469.440
08.03.2009 WinFXDocObj.exe 13 34:208.384
08.03.2009 webcheck.dll 13 34:236.544
08.03.2009 licmgr10.dll 13 34:43.008
08.03.2009 url.dll 13 34:105.984
08.03.2009 msrating.dll 13 34:193.536
08.03.2009 occache.dll 13 34:109.568
08.03.2009 corpol.dll 13 33:18.944
08.03.2009 jsproxy.dll 13 33:25.600
08.03.2009 iesysprep.dll 13 33:109.056
08.03.2009 PDMSetup.exe 13 33:109.568
08.03.2009 RegisterIEPKEYs.exe 13 33:107.520
08.03.2009 SetIEInstalledDate.exe 13 33:107.008
08.03.2009 ieUnatt.exe 13 33:132.608
08.03.2009 SetDepNx.exe 13 33:103.936
08.03.2009 jscript.dll 13 33:726.528
08.03.2009 ieaksie.dll 13 33:229.376
08.03.2009 vbscript.dll 13 33:420.352
08.03.2009 ieakeng.dll 13 33:125.952
08.03.2009 admparse.dll 13 32:72.704
08.03.2009 ie4uinit.exe 13 32:173.056
08.03.2009 ieakui.dll 13 32:163.840
08.03.2009 iesetup.dll 13 32:71.680
08.03.2009 iernonce.dll 13 32:55.808
08.03.2009 advpack.dll 13 32:128.512
08.03.2009 inseng.dll 13 32:94.720
08.03.2009 wextract.exe 13 32:66.560

***** ***** ***** ***** *****
***** Scanning C:\Windows\system32\drivers\etc\hosts *****
***** ***** ***** ***** *****

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
::1 localhost
# Start of entries inserted by Spybot - Search & Destroy
127.0.0.1 www.007guard.com
...
## zur besseren Übersicht von mir entfernt##
...
127.0.0.1 www.zinblog.com
# End of entries inserted by Spybot - Search & Destroy

***** ***** ***** ***** *****
***** Scanning Processe *****
***** ***** ***** ***** *****

Abbildname PID Sitzungsname Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process 0 Services 0 24 K
System 4 Services 0 3.180 K
smss.exe 544 Services 0 728 K
csrss.exe 656 Services 0 5.544 K
wininit.exe 708 Services 0 4.688 K
csrss.exe 720 Console 1 10.028 K
services.exe 752 Services 0 7.528 K
lsass.exe 768 Services 0 10.484 K
lsm.exe 776 Services 0 4.176 K
svchost.exe 940 Services 0 6.172 K
nvvsvc.exe 984 Services 0 3.288 K
svchost.exe 1012 Services 0 7.340 K
svchost.exe 1056 Services 0 23.716 K
svchost.exe 1108 Services 0 13.188 K
svchost.exe 1152 Services 0 77.892 K
svchost.exe 1168 Services 0 27.544 K
audiodg.exe 1256 Services 0 15.532 K
svchost.exe 1284 Services 0 4.708 K
SLsvc.exe 1328 Services 0 9.948 K
svchost.exe 1384 Services 0 11.920 K
winlogon.exe 1488 Console 1 5.480 K
svchost.exe 1552 Services 0 17.400 K
aawservice.exe 1656 Services 0 1.972 K
wlanext.exe 1672 Services 0 17.808 K
rundll32.exe 1848 Console 1 6.124 K
BRSVC01A.EXE 2036 Services 0 2.376 K
spoolsv.exe 440 Services 0 11.280 K
sched.exe 480 Services 0 1.076 K
svchost.exe 564 Services 0 15.452 K
BRSS01A.EXE 932 Services 0 2.868 K
upeksvr.exe 724 Console 1 12.320 K
AEstSrv.exe 924 Services 0 1.640 K
avguard.exe 1988 Services 0 19.696 K
bmwebcfg.exe 664 Services 0 3.536 K
svchost.exe 620 Services 0 3.712 K
EvtEng.exe 2144 Services 0 15.912 K
IAANTmon.exe 2168 Services 0 5.664 K
InCDsrv.exe 2276 Services 0 6.664 K
mdm.exe 2304 Services 0 4.704 K
NBService.exe 2340 Services 0 7.240 K
pg_ctl.exe 2700 Services 0 7.680 K
svchost.exe 2728 Services 0 5.680 K
RegSrvc.exe 2748 Services 0 4.036 K
stacsv.exe 2768 Services 0 6.500 K
postgres.exe 2792 Services 0 10.932 K
postgres.exe 2984 Services 0 6.408 K
svchost.exe 3084 Services 0 6.120 K
svchost.exe 3116 Services 0 2.236 K
SearchIndexer.exe 3152 Services 0 22.588 K
postgres.exe 3176 Services 0 7.032 K
postgres.exe 3188 Services 0 6.800 K
postgres.exe 3208 Services 0 7.088 K
postgres.exe 3216 Services 0 6.520 K
WmiPrvSE.exe 3784 Services 0 9.016 K
dwm.exe 2372 Console 1 93.148 K
taskeng.exe 2672 Console 1 9.352 K
explorer.exe 2920 Console 1 71.640 K
taskeng.exe 3500 Services 0 4.192 K
MSASCui.exe 3464 Console 1 8.976 K
avgnt.exe 3860 Console 1 2.392 K
rundll32.exe 3872 Console 1 5.708 K
rundll32.exe 3884 Console 1 3.736 K
OEM02Mon.exe 4032 Console 1 4.464 K
Apoint.exe 3876 Console 1 9.656 K
IAAnotif.exe 4064 Console 1 5.824 K
sttray.exe 2368 Console 1 10.060 K
ipoint.exe 3324 Console 1 508 K
winampa.exe 2856 Console 1 3.052 K
realsched.exe 3012 Console 1 912 K
reader_sl.exe 2780 Console 1 3.524 K
fdm.exe 3368 Console 1 21.596 K
ICQ.exe 3604 Console 1 18.156 K
NMBgMonitor.exe 1796 Console 1 11.184 K
BTTray.exe 2292 Console 1 10.156 K
quickset.exe 3844 Console 1 9.552 K
NMIndexingService.exe 936 Services 0 10.988 K
NMIndexStoreSvr.exe 3108 Console 1 20.076 K
BTStackServer.exe 4204 Console 1 12.996 K
unsecapp.exe 4216 Console 1 4.352 K
WmiPrvSE.exe 4288 Services 0 6.608 K
ApMsgFwd.exe 4356 Console 1 2.824 K
psqltray.exe 4376 Console 1 13.280 K
hidfind.exe 4424 Console 1 3.404 K
ApntEx.exe 4436 Console 1 3.824 K
SearchProtocolHost.exe 6084 Services 0 8.588 K
SearchFilterHost.exe 6132 Services 0 6.212 K
MobileConnect.exe 5216 Console 1 57.404 K
DeviceListener.exe 5644 Console 1 18.756 K
ConAppM.exe 5704 Console 1 24.308 K
bmctl.exe 5908 Console 1 5.280 K
firefox.exe 4884 Console 1 65.580 K
cmd.exe 5184 Console 1 2.892 K
wercon.exe 5628 Console 1 4.956 K
tasklist.exe 5480 Console 1 4.648 K

Microsoft Windows [Version 6.0.6001]

http://www.paules-pc-forum.de
***** Malware Team *****

***** Ende des Scans 04.05.2009 um 16:34:37,10 ***

Moderator informieren

Thomas39
Gast

Re: Opfer von Kreditkartenbetrug - Trojaner die Ursache!?

« Antwort #1 am: 04.05.09, 17:24:59 »

3. HIJackThis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:36:56, on 04.05.2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Windows\OEM02Mon.exe
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Adobe Acrobat Reader\Reader\reader_sl.exe
C:\Program Files\Free Download Manager\fdm.exe
C:\Program Files\ICQ\ICQ6.5\ICQ.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\WIDCOMM Bluetooth Software\BTTray.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\WIDCOMM Bluetooth Software\BtStackServer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\Fingerprint Reader Suite\psqltray.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Program Files\Vodafone Mobile Connect\Bin\MobileConnect.exe
C:\Program Files\Vodafone Mobile Connect\Bin\DeviceListener.exe
C:\Program Files\Vodafone Mobile Connect\Bin\ConAppM.exe
C:\Program Files\Vodafone Mobile Connect\Optimization Client\bmctl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\prevhost.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
O4 - HKLM\..\Run: [systray] C:\Program Files\Dell\Dell Mobile Broadband\systray.exe
O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [PSQLLauncher] "C:\Program Files\Fingerprint Reader Suite\launcher.exe" /startup
O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe Acrobat Reader\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-21-1826325135-4163427803-3346083327-1003\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'postgres')
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe
O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Program Files\Titan Poker\casino.exe
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Program Files\Titan Poker\casino.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyPoker\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyPoker\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ\ICQ6.5\ICQ.exe
O10 - Unknown file in Winsock LSP: bmnet.dll
O10 - Unknown file in Winsock LSP: bmnet.dll
O10 - Unknown file in Winsock LSP: bmnet.dll
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{3D531691-DD93-4B67-8846-A0786441E1AF}: NameServer = 139.7.30.125 139.7.30.126
O17 - HKLM\System\CCS\Services\Tcpip\..\{FD10F02C-B0C8-463A-800D-800E6E423524}: NameServer = 192.168.2.1
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft Ad-Aware\aawservice.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\aestsrv.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Bytemobile Web Configurator (bmwebcfg) - Bytemobile, Inc. - C:\Windows\system32\bmwebcfg.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\Windows\system32\brsvc01a.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero - Burning Rom\Nero 8\InCD\InCDsrv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero - Burning Rom\Nero 8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_c09c50a2\STacSV.exe

--
End of file - 9471 bytes

Als Virenscanner verwende ich AVfree, als Firewall die integrierte von WindowsVista. Alle verfügbaren Updates für das System wurden sofort eingespielt.

Kann mir jemand bei der Auswertung der Logfiles behilflich sein und evtl. feststellen, ob mein System sauber ist?
Vielen Dank für Eure Mithilfe,

Gruß
Thomas

Moderator informieren