Seite 2 von 2 ErsteErste 12
Ergebnis 11 bis 13 von 13
  1. #11
    Anfänger
    Registriert seit
    17.12.2008
    Beiträge
    12

    Standard

    Zitat Zitat von AlterHacker Beitrag anzeigen
    Hast du zufällig TuneUp drauf? Also n anderen Bootscreen?
    Weil daher könnten die redirections kommen. Versuch mal den "normalen" Kernel zu booten (auswahlmenu vorm windows-start)
    Ja, ich habe TuneUp drauf mit einem anderen bootscreen. Habe auch TrueCrypt installiert.

    habs im abgesicherten modus probiert, es kommt dabei folgende meldung:

    Could not communicate with RSPSC32.sys. You May need to reinstall and reboot.

  2. #12
    Der `Toastflüsterer` Avatar von AlterHacker
    Registriert seit
    27.09.2008
    Beiträge
    690

    Standard

    Poste mal den Inhalt deiner C:\boot.ini-Datei

    Security is an illusion.
    Cheater : 8=o
    Normaluser : 8=======o
    Ich : 8================o

    BM: (4|2|0)

  3. #13
    Anfänger
    Registriert seit
    17.12.2008
    Beiträge
    12

    Standard

    Zitat Zitat von AlterHacker Beitrag anzeigen
    Poste mal den Inhalt deiner C:\boot.ini-Datei
    auf C:\ gibts keine Datei mit diesem Namen (habe die Ordner-Einstellungen so das ich Alle versteckte & Systemordner sehe.).
    Fand aber im Windowsverzeichnis unter C:\Windows\pss eine boot.ini.backup - Datei.
    Weiss das sich die boot.ini irgendwo befinden sollte weiss aber nichtmehr wo genau sorry :o

    Zitat Zitat von boot.ini.backup
    [boot loader]
    timeout=3
    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOW S
    [operating systems]
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Micro soft Windows XP Home Edition" /fastdetect /NoExecute=OptIn /TUTag=Q2WUZP /Kernel=TUKernel.exe
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Micro soft Windows XP Home Edition (TuneUp Backup)" /fastdetect /NoExecute=OptIn /TUTag=Q2WUZP-BAK
    evtl könnte es auch an dem damals installiertem liegen (hatte es später wieder

    deinstalliert:
    Zitat Zitat von labtec
    Labtec® wireless desktop optical
    Description:Wireless Desktop Software v3.0Supported Operating Systems:Windows XP, 2000, 98, MEFile Size:10.6MbDownload File:wireless_desktop_v3.0.exe
    habe es auf virustotal hochgeladen, wobei nirgends ein Fund kahm.

    Beim Download liegt die Registry-Datei "MagickeyGerman" mit dabei dort steht sowas:

    Zitat Zitat von magickeygerman
    REGEDIT4

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato]

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\Enviro nment]
    "Repeat Timer"=dword:00000032
    "Run Same Instance"=dword:00000001
    "Enable Player Auto Select"=dword:00000001
    "Enable Auto Select"=dword:00000001
    "Keyboard UI"="V3D.exe"
    "KeyboardUI Caption"="Versato Retail UI"
    "OSD Enabled"=dword:00000000
    "OSD Exe File"="OSD.EXE"
    "OSD Caption"="OSDMain"
    "Keyboard(95)"="Wtkbd.vxd"
    "PageButton"=dword:0000000f
    "OSD Font"="System"
    "OSD Font Size"=dword:00000048
    "OSD Color"=dword:0000ff00
    "OSD timeout"=dword:00000001
    "OSD Font Color"=dword:0000ffff
    "Enable Page Hint"=dword:00000001
    "Support Multiple CD-ROM"=dword:00000001
    "Media Player"="VsPlayer.exe"
    "help"="overview.htm"
    "Default DVD Player"=dword:00000000
    "OSD Bold"=dword:00000000
    "OSD 3D"=dword:00000001
    "Section Length"=dword:00000008
    "Default CD drive"=""
    "Support Multiple-page"=dword:00000001
    "Enable Scroll Lock On Startup"=dword:00000000
    "Show Player Startup"=dword:00000000
    "Show UI Startup"=dword:00000000
    "Show Taskbar Icon Startup"=dword:00000001
    "UIPath"="default"
    "Append CD to Playlist"=dword:00000000
    "OptionDlg Font"="MS Sans Serif"
    "OptionDlg Font Size"=dword:00000008
    "BrowseDir"=""
    "Keyboard(NT)"="kbfilter.sys" 'könnte da was dran liegen?! bei KIS steht auch \DRIVER\KBFILTER
    "button3UI"=dword:00003006
    "ButtonNum"=dword:0000000f
    "Default CD Player"="VsPlayer.exe"
    "WWW Search URL"="www.yahoo.com.tw"
    "WWW Shopping URL"="www.coolbid.com.tw"
    "WWW Stock URL"="www.polaris.com.tw"
    "WWW News URL"="www.chinatimes.com.tw"
    "WWW People URL"="www.renren.com"
    "Num Icon"=dword:00000001
    "Cap Icon"=dword:00000001
    "Scr Icon"=dword:00000000

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\Functi on Table]
    "0000000B"="Show MediaPlayer"
    "00000001"="Help"
    "00000002"="About"
    "00000004"="Enable OSD"
    "00000009"="Enable PageHint"
    "00000000"="Exit"
    "00000006"="Default Setting"
    "00000005"="Disable OSD"
    "0000000A"="Disable PageHint"
    "00000003"="On Screen Menu"
    "00000007"="Select CD"
    "00000008"="Set OSD Time"
    "00000100"="Option"
    "00001012"="File Explorer"
    "00001013"="Macro"
    "0000100C"="Mail To"
    "0000101A"="Mail"
    "00001017"="Calculator"
    "00001002"="Control Panel"
    "00001008"="Display Property"
    "00001010"="Dos Shell"
    "00001011"="My Document"
    "00001000"="PowerOff"
    "0000100F"="Screen Saver"
    "0000100B"="Scroll Down"
    "0000100A"="Scroll Up"
    "00001007"="Switch Window"
    "00001009"="System Property"
    "00001018"="X'fer"
    "00002000"="Previous"
    "00002007"="Stop"
    "00002008"="Volume Down"
    "00002002"="Play/Pause"
    "0000200C"="Stop/Eject"
    "0000200A"="Mute"
    "00002005"="Next"
    "00002009"="Volume Up"
    "00003005"="WWW Refresh"
    "00003000"="WWW"
    "00003001"="Search"
    "00003002"="WWW Home"
    "00003003"="WWW Back"
    "00003004"="WWW Forward"
    "00003006"="Shopping"
    "00003007"="Stock"
    "00003008"="News"
    "00003009"="People"
    "0000300a"="WWW Search"
    "0000300b"="Favorite"
    "0000300c"="WWW Stop"
    "00005001"="Close"
    "00005002"="Play"
    "00005003"="Pause"
    "00005004"="Play/Pause"
    "00005005"="Stop"
    "00005006"="Eject"
    "00005007"="Previous"
    "00005008"="Next"
    "00005009"="Volume Up"
    "0000500a"="Volume Down"
    "0000500b"="Minimize"
    "0000500c"="Open Playlist Editor"
    "0000500d"="Config panel"
    "0000500e"="Mini UI"
    "0000500f"="Large UI"
    "00005010"="Random On/Off"
    "00005011"="Repeat On/Off"
    "00005012"="Mute"
    "00005013"="New PlayList"
    "00005014"="Open PlayList"
    "00005015"="Save PlayList"
    "00005016"="PlayList Option"
    "00005017"="Add File(s)"
    "00005018"="Add Directory"
    "00005019"="Selected Item(s) Up"
    "0000501a"="Selected Item(s) Down"
    "0000501b"="Delete Selected item(s)"
    "0000501c"="Switch Page"
    "0000501d"="Drag Playlist Window"
    "0000501e"="Minimize PlayList"
    "0000501f"="Close PlayList"
    "00005020"=""
    "00005000"=""
    "00005021"=""
    "00005022"=""
    "00005023"=""
    "00005100"=""
    "00005024"="Stop/Eject"
    "0000101e"="My Favorite"
    "0000101f"="My Computer"
    "00001020"="Media Select"

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\TypeMa tic]
    "00002008"=""
    "00002009"=""
    "0000100A"=""
    "0000100B"=""
    "00005009"=""
    "0000500a"=""
    "00005019"=""
    "0000501A"=""
    "00005020"=""
    "00005021"=""

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\String Table]
    "00000000"="Labtec Wireless Desktop deaktivieren"
    "00000001"="&Help"
    "00000002"="&About"
    "00000003"="On-Screen &Wireless Keyboard"
    "00000004"="Enable OSD"
    "00000005"="Disable OSD"
    "00000006"="Default Setting"
    "00000007"="Select CD"
    "00000008"="Set OSD Timeout"
    "0000000c"="Hide Wireless Keyboard Icon"
    "0000000d"="Set OSD Timeout"
    "00000009"="Enable PageHint"
    "0000000A"="Disable PageHint"
    "0000000B"="Magic &Player"
    "0000000E"="Labtec Wireless Desktop aktivieren"
    "00000100"="&Options"
    "00000111"="Enable Num Lock Status"
    "00000112"="Disable Num Lock Status"
    "00000113"="Enable Caps Lock Status"
    "00000114"="Disable Caps Lock Status"
    "00000115"="Enable Scroll Lock Status"
    "00000116"="Disable Scroll Lock Status"
    "00001000"="PowerOff"
    "00001001"="Sleep"
    "00001002"="Control Panel"
    "00001003"="Maximize Window"
    "00001004"="Minimize Window"
    "00001005"="Restore Window"
    "00001006"="Close Window"
    "00001007"="Switch Window"
    "00001008"="Display Property"
    "00001009"="System Property"
    "0000100A"="Scroll Up"
    "0000100B"="Scroll Down"
    "0000100C"="Mail To"
    "0000100D"="Record"
    "0000100E"="Rewind"
    "0000100F"="Screen Saver"
    "00001010"="Dos Shell"
    "00001011"="My Document"
    "00001012"="File Explorer"
    "00001013"="Macro"
    "00001015"="Toggle Desktop"
    "00001016"="Dial Up"
    "00001017"="Calculator"
    "00001018"="X'fer"
    "00001019"="Suspend"
    "0000101A"="Mail"
    "00002000"="Previous"
    "00002001"="Backward"
    "00002002"="Play/Pause"
    "00002003"="Play"
    "00002004"="Pause"
    "00002005"="Next"
    "00002006"="Forward"
    "00002007"="Stop"
    "00002008"="Volume Down"
    "00002009"="Volume Up"
    "0000200A"="Mute"
    "0000200B"="Eject"
    "0000200C"="Stop/Eject"
    "0000200D"="Volume UP"
    "0000200E"="Volume Down"
    "00003000"="WWW"
    "00003001"="WWW Search"
    "00003002"="WWW Home"
    "00003003"="WWW Back"
    "00003004"="WWW Forward"
    "00003005"="WWW Refresh"
    "00004000"="DVD Previous"
    "00004001"="DVD Backward"
    "00004002"="DVD Play/Pause"
    "00004003"="DVD Play"
    "00004004"="DVD Pause"
    "00004005"="DVD Next"
    "00004006"="DVD Forward"
    "00004007"="DVD Stop"
    "00005000"="Magic Player"
    "00005001"="Close"
    "00005002"="Play"
    "00005003"="Pause"
    "00005004"="Play/Pause"
    "00005005"="Stop"
    "00005006"="Eject"
    "00005007"="Previous"
    "00005008"="Next"
    "00005009"="Volume Up"
    "0000500a"="Volume Down"
    "0000500b"="Minimize"
    "0000500c"="Open Playlist Editor"
    "0000500d"="Config panel"
    "0000500e"="Mini UI"
    "0000500f"="Large UI"
    "00005010"="Random On/Off"
    "00005011"="Repeat On/Off"
    "00005012"="Mute"
    "00005013"="New PlayList"
    "00005014"="Open PlayList"
    "00005015"="Save PlayList"
    "00005016"="PlayList Option"
    "00005017"="Add File(s)"
    "00005018"="Add Directory"
    "00005019"="Selected Item(s) Up"
    "0000501a"="Selected Item(s) Down"
    "0000501b"="Delete Selected item(s)"
    "0000501c"="Switch Page"
    "0000501d"="Resize Playlist Window"
    "0000501e"="Minimize PlayList"
    "0000501f"="Close PlayList"
    "00005020"=""
    "00005021"=""
    "00005022"=""
    "00005023"=""
    "00005024"="Stop/Eject"
    "00005030"="Mute Off"
    "00005031"="Mute On"
    "00005032"="&Random"
    "00005033"="By File&name"
    "00005034"="Re&verse"
    "00005035"="&Full Screen"
    "00005036"="&Top Window"
    "00005037"="Pre&vous"
    "00005038"="&Next"
    "00005039"="&Play"
    "0000503A"="&Stop"
    "0000503B"="Pa&use"
    "0000503C"="&Eject"
    "00005040"=""
    "00005041"=""
    "00005042"="&Always On Top"
    "00005043"="Auto &Hide"
    "00005044"="E&xit"
    "00005050"="Select a directory"
    "00005051"="Add file to Playlist"
    "00005052"="Open PlayList File(s)"
    "00005053"="Save List As"
    "00005054"="Volume Slider"
    "00005055"="Search Bar"
    "00005100"="Registry Error! Cannot Load UI Information."
    "00005FFF"="Test"
    "00006000"="Print Label"
    "00007000"="Options"
    "00007001"="OK"
    "00007002"="Cancel"
    "00007003"="Load Default Settings"
    "00007100"="Display Setting"
    "00007101"="Startup Settings"
    "00007102"="Show Magic Player on Startup"
    "00007103"="Show On-Screen Wireless Keyboard on Startup"
    "00007104"="On Screen Status Display Settings"
    "00007105"="Enable On Screen Status Display"
    "00007106"="On Screen Status Display Text"
    "00007107"="3D Text"
    "00007108"="Text Size"
    "00007109"="Text Color"
    "0000710a"="Status Display Timeout"
    "0000710b"="On Screen Status Display Timeout as"
    "0000710c"="Seconds"
    "0000710d"="Test"
    "0000710e"="Small"
    "0000710f"="Medium"
    "00007110"="Large"
    "00007111"="Show Taskbar Icon on Startup"
    "00007200"="Function Setting"
    "00007201"="Page"
    "00007202"="Function Key"
    "00007203"="Caption"
    "00007204"="Icon"
    "00007300"="Preset Functions"
    "00007301"="Class:"
    "00007302"="Functions"
    "00007303"="All"
    "00007304"="System Control"
    "00007305"="Player Control"
    "00007306"="Internet Control"
    "00007307"="Input Your Web Site:"
    "00007308"="Run the Application with the Same Instance"
    "00007400"="Player Setting"
    "00007401"="Select CD/VCD/DVD Player Order"
    "00007402"="Play When a Known Format in CD Tray"
    "00007403"="Append CD/VCD to Playlist"
    "00007404"="CD Drive Selection"
    "00007405"="CD Drive"
    "00007406"="Auto Select"
    "00007407"="DVD Player Selection"
    "00007408"="DVD Player"
    "00007500"="Trigger Key"
    "00007501"="Trigger Key Settings"
    "00007502"="Tirgger Key Settings"
    "00007503"="Left"
    "00007504"="Right"
    "00007505"="Left+Right"
    "00007506"="Use Scroll Lock for Hot Key Functions"
    "00007507"="Active Scroll Lock On Startup"
    "00007600"="Shortcut"
    "00007601"="Type in the Name and Path of the Excutable File:"
    "00007602"="File Name:"
    "00007603"="Browse"
    "00007604"="Select a file"
    "00007700"="Macro"
    "00007701"="Input predefined text below and click Save Button"
    "00007702"="Save"
    "00007703"="Clear"
    "00007900"="About Wireless Keyboard"
    "00012000"="Previous\\r\\nTrack%02d"
    "00012002"="Play\\r\\n%02d"
    "00012005"="Next\\r\\nTrack%02d"
    "0001200A"="Mute On"
    "0002200A"="Mute Off"
    "00015002"="Play\\r\\nTrack%02d"
    "00003006"="Shopping"
    "00003007"="Stock"
    "00003008"="News"
    "00003009"="People"
    "0000300a"="WWW Search"
    "0000300b"="Favorite"
    "0000300c"="WWW Stop"
    "00007800"="Internet Setting"
    "00007801"="WWW"
    "00007802"="Browse"
    "00007803"="E-Mail"
    "00007804"="Browse"
    "00000101"="Labtec Wireless Desktop"
    "00000102"="Labtec Wireless Desktop 1.0"
    "00000103"="About Labtec Wireless Desktop"
    "00000104"="(C)2002 WayTech Development, Incorporation. All rights reserved."
    "00000105"="OSD Timeout"
    "00000106"="Das Programm arbeitet gerade!"
    "00000107"="Connect Device"
    "00000108"="Stellen Sie bitte sicher, dass die Batterien in ^Ihr Gerät eingelegt wurden. Drücken Sie bitte zur ^Verbindung den Verbindungsknopf auf der Tastatur ^und/oder Maus."
    "00000109"="Geräte verbinden"
    "00007004"="Apply"
    "00007005"="Default"
    "00007112"="There is already an auto hidden window on this edge.Only one auto hidden window is allowed on each edge."
    "0000101e"="My Favorite"
    "0000101f"="My Computer"
    "00001020"="Media Select"
    "0000300c"="WWW Stop"

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\Page]
    "Page"=dword:00000000

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\Path]
    "00000000"="System"

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\AddIns]
    "Internet Control"="WTInter.dll"
    "Media Control"="MediaCtl.dll"
    "System"="WTSystem.dll"

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\Menu]
    "0001000E"="Enable Labtec Wireless Desktop"
    "00000000"="Disable Labtec Wireless Desktop"

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\System]
    "button0"="00003003"
    "button1"="00003004"
    "button2"="0000300c"
    "button3"="00003005"
    "button4"="0000300a"
    "button5"="0000300b"
    "button6"="00003000"
    "button7"="0000101A"
    "button8"="00002002"
    "button9"="00002007"
    "button10"="00002000"
    "button11"="00002005"
    "button12"="00001020"
    "button13"="0000101f"
    "button14"="00001017"
    "button15"="0000200a"
    "button16"="00002008"
    "button17"="00002009"
    "button18"="00000000"
    "UI0"="Back"
    "UI1"="Forward"
    "UI2"="WWW Stop"
    "UI3"="Refresh"
    "UI4"="Search"
    "UI5"="My Favorite"
    "UI6"="WWW"
    "UI7"="Mail"
    "UI8"="Play/Pause"
    "UI9"="Stop"
    "UI10"="Previous"
    "UI11"="Next"
    "UI12"="Media Select"
    "UI13"="My Computer"
    "UI14"="Calculator"
    "UI15"="Mute"
    "UI16"="Volume Down"
    "UI17"="Volume up"
    "ID0"="WWW Back"
    "ID1"="WWW Forward"
    "ID2"="WWW Stop"
    "ID3"="WWW Refresh"
    "ID4"="WWW Search"
    "ID5"="My Favorite"
    "ID6"="WWW"
    "ID7"="Mail"
    "ID8"="Play/Pause"
    "ID9"="Stop"
    "ID10"="Previous Track"
    "ID11"="Next Track"
    "ID12"="Media Select"
    "ID13"="My Computer"
    "ID14"="Calculator"

    "Redefine button"=hex:0f,00,01,02,03,04,05,06,07,08,09,0a,0b ,0c,0d,0e
    "Button with Icon"=hex:00

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\Availb le Function]
    "00001017"="Calculator"
    "00001002"="Control Panel"
    "00001008"="Display Property"
    "00001010"="Dos Shell"
    "00001012"="File Explorer"
    "0000101A"="Mail"
    "0000100C"="Mail To"
    "00001011"="My Document"
    "00001007"="Switch Window"
    "00001009"="System Property"
    "0000100F"="Screen Saver"
    "0000100B"="Scroll Down"
    "0000100A"="Scroll Up"
    "00003006"="Shopping"
    "00003007"="Stock"
    "00003008"="News"
    "00003009"="People"
    "00003000"="WWW"
    "00003003"="WWW Back"
    "00003004"="WWW Forward"
    "00003005"="WWW Refresh"
    "0000300a"="WWW Search"
    "0000300b"="My Favorite"
    "0000300c"="WWW Stop"
    "0000101f"="My Computer"
    "00001020"="Media Select"
    "00002002"="Play/Pause"
    "00002007"="Stop"
    "00002000"="Previous"
    "00002005"="Next"

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\Vendor]
    @="Software\\WayTech\\Versato\\PS2KBD"

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\PS2KBD]
    "ButtonNum"=dword:00000014
    "button0"=dword:0000006a
    "button1"=dword:00000069
    "button2"=dword:00000068
    "button3"=dword:00000067
    "button4"=dword:00000065
    "button5"=dword:00000066
    "button6"=dword:00000032
    "button7"=dword:0000006c
    "button8"=dword:00000022
    "button9"=dword:00000024
    "button10"=dword:00000010
    "button11"=dword:00000019
    "button12"=dword:0000006d
    "button13"=dword:0000006b
    "button14"=dword:00000021
    "button15"=dword:00000020
    "button16"=dword:0000002e
    "button17"=dword:00000030
    "button18"=dword:00000079
    "button19"=dword:00000003

    [HKEY_LOCAL_MACHINE\Software\WayTech\Versato\Device \PS2Keyboard]
    "Data"=hex:00,00,00,00,88,00,01,00,1c,00,00,00,00, 00,00,00,00,00,00,00,00,00,\
    00,00,14,00,24,00,00,00,88,00,00,00,88,00,00,6a,e0 ,00,00,01,69,e0,00,00,02,\
    68,e0,00,00,03,67,e0,00,00,04,65,e0,00,00,05,66,e0 ,00,00,06,32,e0,00,00,07,\
    6c,e0,00,00,08,22,e0,00,00,09,24,e0,00,00,0a,10,e0 ,00,00,0b,19,e0,00,00,0c,\
    6d,e0,00,00,0d,6b,e0,00,00,0e,21,e0,00,00,0f,20,e0 ,00,00,10,2e,e0,00,00,11,\
    30,e0,00,00,12,79,e0,00,00,13,03,e0,00,00
    Kaspersky hat inzwischen 680 zeilen berichtet :S

    ..?
    Geändert von newcode (05.08.2010 um 19:21 Uhr) Grund: Automerged Doublepost

Seite 2 von 2 ErsteErste 12

Ähnliche Themen

  1. Brauche Hilfe bei Keylogger
    Von Ice-Cu-Be im Forum Trashbox
    Antworten: 1
    Letzter Beitrag: 07.04.2010, 22:02
  2. VB.Net, Keylogger, Fehlermeldung, brauche Hilfe!
    Von Breekachu im Forum .NET Sprachen - Techniken
    Antworten: 6
    Letzter Beitrag: 01.08.2009, 16:14
  3. Suche Keylogger hilfe
    Von SwordlessLink im Forum Suche Tutorials
    Antworten: 2
    Letzter Beitrag: 14.12.2008, 13:29
  4. Hilfe! Keylogger
    Von farfaya im Forum Sicherheit
    Antworten: 4
    Letzter Beitrag: 08.03.2008, 23:41

Stichworte

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •