| |
| |||||||
Log-Analyse und Auswertung: Volksbank 100 TAN Trojaner wird nicht erkanntWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
23.08.2011, 22:44
| #1 |
| |  Volksbank 100 TAN Trojaner wird nicht erkannt Hallo, mein Laptop ist seit einigen Tagen mit einem Trojaner befallen, was ich daran gemerkt habe, dass ich in sehr schlechtem Deutsch aufgefordert wurde 100 TANs einzugeben, was ich natürlich NICHT gemacht habe. ("Aus Sicherheitsgründen und viele betrugsfälle Ihre Daten muss überprüft werden. Drücken Sie "weiter" und füllen Sie bitte iTAN Tabelle auf nächste Seite aus. Damit bestätigen Sie, dass dieses Bankkonto gehört Ihnen. Wir danken Ihnen um Ihre Verständnis.") Das Problem taucht im Firefox wie im IE auf, ich habe mein OnlineBanking bei der Volksbank direkt sperren lassen. Aber mein stets aktiviertes Avira findet nichts verdächtiges, der Spybot Search&Destroy hat ein paar Kleinigkeiten entfernt, aber nicht den Trojaner, ich habe auf anraten eines Bekannten meine Registry mit Wise Registry Cleaner gesäubert und jetzt weiß ich nicht mehr weiter. Ich habe das Thema natürlich gegoogelt und auch ähnliche Geschichten entdeckt, die über ein Jahr her waren, aber ich habe keine Lösung gefunden, die ich verstanden hätte. Würde nur sehr ungern mein System neu aufsetzen, aber ich habe meine privaten Daten vollständig gesichert, falls das nötig sein sollte. Seit einiger Zeit erkennt auch mein Office-Paket seine Kennung nicht mehr und lässt sich dadurch nicht mehr benutzen - für mich aus heiterem Himmel! Kann es da einen Zusammenhang geben durch irgendwelche Eingriffe ins Betriebssystem durch den Trojaner? Ich habe wirklich keine Ahnung  Habe den Defogger benutzt und Oldtimer-Files erstellt. Ich wäre euch so dankbar, wenn ihr mir verraten könntet, was ich noch tun kann! DANKE im Voraus!! Hier der Logfile von OTL & Extras im Anhang: OTL logfile created on: 23.08.2011 15:12:31 - Run 1 OTL by OldTimer - Version 3.2.26.5 Folder = C:\Users\C*****\Downloads Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 7.0.6002.18005) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 1,96 Gb Available Physical Memory | 65,23% Memory free 6,19 Gb Paging File | 5,07 Gb Available in Paging File | 81,82% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 275,41 Gb Total Space | 99,58 Gb Free Space | 36,15% Space Free | Partition Type: NTFS Drive D: | 22,66 Gb Total Space | 12,51 Gb Free Space | 55,20% Space Free | Partition Type: FAT32 Computer Name: BENUTZER-PC | User Name: C***** | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.08.23 14:58:38 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\C*****\Downloads\OTL.exe PRC - [2011.07.06 19:52:38 | 000,449,584 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe PRC - [2011.07.06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2010.09.06 19:56:38 | 000,247,096 | ---- | M] () -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe PRC - [2010.03.23 13:19:32 | 001,528,616 | ---- | M] (Cisco Systems, Inc.) -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe PRC - [2009.07.21 15:34:28 | 000,185,089 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe PRC - [2009.05.13 17:48:18 | 000,108,289 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2009.04.11 08:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe PRC - [2009.03.02 14:08:43 | 000,209,153 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe PRC - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe PRC - [2008.07.03 11:27:12 | 006,266,880 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe PRC - [2008.01.21 04:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe PRC - [2007.11.02 12:35:42 | 002,564,096 | ---- | M] () -- C:\Program Files\Softex\OmniPass\scureapp.exe PRC - [2007.11.02 12:31:24 | 000,069,632 | ---- | M] () -- C:\Program Files\Softex\OmniPass\opvapp.exe PRC - [2007.11.02 12:31:08 | 000,040,960 | ---- | M] (Softex Inc.) -- C:\Program Files\Softex\OmniPass\OmniServ.exe PRC - [2007.10.03 15:45:02 | 000,358,936 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe PRC - [2007.10.03 15:44:58 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe PRC - [2007.09.11 15:37:58 | 000,118,784 | ---- | M] (Wistron Corp.) -- C:\Program Files\Launch Manager\WisLMSvc.exe PRC - [2007.09.07 09:26:54 | 000,086,016 | ---- | M] (Wistron) -- C:\Program Files\Launch Manager\WButton.exe PRC - [2007.09.06 11:23:36 | 000,188,416 | ---- | M] (Wistron) -- C:\Program Files\Launch Manager\HotkeyApp.exe PRC - [2007.09.01 14:03:50 | 000,032,768 | ---- | M] () -- C:\Program Files\Launch Manager\LaunchAp.exe PRC - [2007.08.31 12:04:26 | 000,102,400 | ---- | M] (Synaptics, Inc.) -- C:\Program Files\Synaptics\SynTP\SynTPStart.exe PRC - [2006.12.26 11:23:34 | 000,180,224 | ---- | M] (Wistron Corp.) -- C:\Program Files\Launch Manager\OSD.exe ========== Modules (No Company Name) ========== MOD - [2011.06.24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2011.06.24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2007.11.02 12:36:16 | 000,048,208 | ---- | M] () -- C:\Program Files\Softex\OmniPass\hdddrv.dll MOD - [2007.11.02 12:35:42 | 002,564,096 | ---- | M] () -- C:\Program Files\Softex\OmniPass\scureapp.exe MOD - [2007.11.02 12:28:16 | 000,434,176 | ---- | M] () -- C:\Program Files\Softex\OmniPass\userdata.dll MOD - [2007.11.02 12:28:04 | 001,077,248 | ---- | M] () -- C:\Program Files\Softex\OmniPass\autheng.dll MOD - [2007.11.02 12:27:48 | 000,532,480 | ---- | M] () -- C:\Program Files\Softex\OmniPass\storeng.dll MOD - [2007.11.02 12:27:40 | 000,061,440 | ---- | M] () -- C:\Program Files\Softex\OmniPass\scuredll.dll MOD - [2007.11.02 12:27:28 | 000,016,896 | ---- | M] () -- C:\Program Files\Softex\OmniPass\cryptodll.dll MOD - [2007.11.02 12:27:26 | 000,013,824 | ---- | M] () -- C:\Program Files\Softex\OmniPass\SSPLogon.dll MOD - [2007.09.01 14:03:50 | 000,032,768 | ---- | M] () -- C:\Program Files\Launch Manager\LaunchAp.exe ========== Win32 Services (SafeList) ========== SRV - [2011.07.06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011.06.06 12:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011.03.21 13:21:24 | 000,632,832 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2010.09.06 19:56:38 | 000,247,096 | ---- | M] () [Auto | Running] -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service) SRV - [2010.03.23 13:19:32 | 001,528,616 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND) SRV - [2009.07.21 15:34:28 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009.05.13 17:48:18 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService) SRV - [2009.01.04 12:44:38 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2008.08.15 06:46:20 | 000,284,016 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe -- (Adobe Version Cue CS4) SRV - [2008.01.21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007.11.02 12:31:08 | 000,040,960 | ---- | M] (Softex Inc.) [Auto | Running] -- C:\Program Files\Softex\OmniPass\OmniServ.exe -- (omniserv) SRV - [2007.10.03 15:45:02 | 000,358,936 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R) SRV - [2007.09.11 15:37:58 | 000,118,784 | ---- | M] (Wistron Corp.) [On_Demand | Running] -- C:\Program Files\Launch Manager\WisLMSvc.exe -- (WisLMSvc) ========== Driver Services (SafeList) ========== DRV - [2011.07.06 19:52:42 | 000,022,712 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector) DRV - [2010.03.23 13:15:36 | 000,308,859 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\CVPNDRVA.sys -- (CVPNDRVA) DRV - [2009.12.07 17:11:00 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt) DRV - [2009.05.11 11:12:20 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009.03.30 11:33:03 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb) DRV - [2009.02.13 13:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2009.01.23 10:49:06 | 000,038,816 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tbhsd.sys -- (tbhsd) DRV - [2009.01.03 22:47:57 | 000,271,360 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt) DRV - [2009.01.03 22:47:42 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt) DRV - [2009.01.03 22:37:13 | 000,717,296 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd) DRV - [2008.11.16 18:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dne2000.sys -- (DNE) DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2008.07.11 05:08:00 | 007,539,744 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2008.03.13 03:36:42 | 002,555,392 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32) Intel(R) DRV - [2007.08.30 20:24:24 | 000,805,416 | ---- | M] (Bison Electronics. Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BisonC07.sys -- (Cam5607) DRV - [2007.08.28 15:47:36 | 000,146,560 | ---- | M] (AuthenTec, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atswpdrv.sys -- (ATSWPDRV) AuthenTec TruePrint USB Driver (SwipeSensor) DRV - [2007.06.25 13:37:24 | 000,084,480 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169) DRV - [2007.06.01 10:29:04 | 000,210,736 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\Si3531.sys -- (Si3531) DRV - [2007.05.25 09:41:00 | 000,017,328 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\SiWinAcc.sys -- (SiFilter) DRV - [2007.05.25 09:40:58 | 000,012,464 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\SiRemFil.sys -- (SiRemFil) DRV - [2007.01.18 20:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA) DRV - [2003.04.28 11:27:06 | 000,009,867 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\HOTKEY.sys -- (Hotkey) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/ IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1 IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "hxxp://mail.google.com/mail/#inbox" FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.071303000004 FF - prefs.js..extensions.enabledItems: {464F169E-ACE1-4C5F-A778-A433A3DABBAE}:1.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.7&q=" FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.65\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=0.9.8a: C:\Program Files\VLC\npvlc.dll (the VideoLAN Team) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.1: C:\Users\C*****\AppData\Roaming\Facebook\npfbplugin_1_0_1.dll ( ) FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\C*****\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( ) FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: File not found FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2009.01.26 21:10:47 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.08.18 11:42:31 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.08.15 15:26:29 | 000,000,000 | ---D | M] FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2009.01.26 21:10:47 | 000,000,000 | ---D | M] [2008.12.04 23:52:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\C*****\AppData\Roaming\mozilla\Extensions [2011.05.08 14:04:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\C*****\AppData\Roaming\mozilla\Firefox\Profiles\ed9xr6m9.default\extensions [2010.09.14 18:41:15 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\C*****\AppData\Roaming\mozilla\Firefox\Profiles\ed9xr6m9.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2009.03.29 21:53:20 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Users\C*****\AppData\Roaming\mozilla\Firefox\Profiles\ed9xr6m9.default\extensions\moveplayer@movenetworks.com [2011.08.16 12:22:53 | 000,000,950 | ---- | M] () -- C:\Users\C*****\AppData\Roaming\Mozilla\Firefox\Profiles\ed9xr6m9.default\searchplugins\icqplugin-1.xml [2011.03.19 22:41:37 | 000,001,056 | ---- | M] () -- C:\Users\C*****\AppData\Roaming\Mozilla\Firefox\Profiles\ed9xr6m9.default\searchplugins\icqplugin.xml [2011.08.01 08:22:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2009.01.04 13:10:41 | 000,000,000 | ---D | M] (Adobe Contribute Toolbar) -- C:\Program Files\Mozilla Firefox\extensions\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2010.02.01 00:57:18 | 000,000,000 | ---D | M] (VMLoad) -- C:\Program Files\Mozilla Firefox\extensions\{464F169E-ACE1-4C5F-A778-A433A3DABBAE} [2011.07.06 16:46:36 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2010.05.01 11:08:10 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2011.08.01 08:22:33 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011.02.08 22:02:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} [2008.12.04 23:52:33 | 000,000,000 | ---D | M] (Yahoo! Deutschland Toolbar und Extras) -- C:\Program Files\Mozilla Firefox\extensions\toolbar_extras@de.yahoo.com File not found (No name found) -- [2011.08.18 11:42:31 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2008.09.04 02:11:24 | 000,054,600 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\mozilla firefox\plugins\npbittorrent.dll [2008.09.10 02:09:32 | 000,079,216 | ---- | M] (Adobe Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npContribute.dll [2010.11.12 19:53:06 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011.06.26 22:51:35 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2011.06.26 22:51:35 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2011.06.26 22:51:35 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2011.06.26 22:51:35 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2011.06.26 22:51:35 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2011.06.26 22:51:35 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009.01.23 15:41:06 | 000,001,254 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll () O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found. O2 - BHO: (VMLoadHBO Class) - {C17C7688-31D1-46D7-8C9B-5D253E4F5D5E} - C:\Users\C*****\AppData\Roaming\VMLoad\addin\VMLoad.dll (TODO: <Company name>) O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll () O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ) O4 - HKLM..\Run: [Adobe_ID0ENQBO] C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.) O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.) O4 - HKLM..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe (Wistron) O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe (Intel Corporation) O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\HomeCinema\PowerDVD\Language\Language.exe () O4 - HKLM..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe () O4 - HKLM..\Run: [LMgrOSD] C:\Program Files\Launch Manager\OSD.exe (Wistron Corp.) O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [OmniPass] C:\Program Files\Softex\OmniPass\scureapp.exe () O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor) O4 - HKLM..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.) O4 - HKLM..\Run: [Wbutton] C:\Program Files\Launch Manager\Wbutton.exe (Wistron) O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation) O4 - HKCU..\Run: [2F7ZUJ7G0IWX6GYWEJEGZJIT] C:\SystemData\217FA9662CC.exe () O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\C*****\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O9 - Extra Button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - File not found O9 - Extra 'Tools' menuitem : eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - File not found O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\cdtp {51d6496b-7e89-42f6-9e21-42c504ac8612} - C:\Program Files\Common Files\aps 1.0\apscdtp.dll (Stegmann Systemberatung) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O24 - Desktop WallPaper: C:\Users\C*****\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O24 - Desktop BackupWallPaper: C:\Users\C*****\AppData\Roaming\Microsoft\Windows Photo Gallery\Hintergrundbild der Windows-Fotogalerie.jpg O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{0628f365-f6f0-11de-900f-00215c2c1c6b}\Shell - "" = AutoRun O33 - MountPoints2\{0628f365-f6f0-11de-900f-00215c2c1c6b}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -a O33 - MountPoints2\{7b1f8afe-d9d6-11dd-b336-001f1602ede8}\Shell - "" = AutoRun O33 - MountPoints2\{7b1f8afe-d9d6-11dd-b336-001f1602ede8}\Shell\AutoRun\command - "" = H:\Autorun.exe O33 - MountPoints2\{c0ea1743-a886-11de-9321-001f1602ede8}\Shell\AutoRun\command - "" = J:\System\Security\DriveGuard.exe -run O33 - MountPoints2\{c0ea1743-a886-11de-9321-001f1602ede8}\Shell\Explore\Command - "" = J:\System\Security\DriveGuard.exe -run O33 - MountPoints2\{c0ea1743-a886-11de-9321-001f1602ede8}\Shell\Open\Command - "" = J:\System\Security\DriveGuard.exe -run O33 - MountPoints2\J\Shell - "" = AutoRun O33 - MountPoints2\J\Shell\AutoRun\command - "" = J:\LaunchU3.exe -a O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Windows Media Player 5.2 ActiveX: {233C1507-6A77-46A4-9443-F871F945D258} - Adobe Shockwave Director 11.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Adobe Shockwave Director 11.0 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1 ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP NetSvcs: FastUserSwitchingCompatibility - File not found NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation) NetSvcs: Nla - File not found NetSvcs: Ntmssvc - File not found NetSvcs: NWCWorkstation - File not found NetSvcs: Nwsapagent - File not found NetSvcs: SRService - File not found NetSvcs: WmdmPmSp - File not found NetSvcs: LogonHours - File not found NetSvcs: PCAudit - File not found NetSvcs: helpsvc - File not found NetSvcs: uploadmgr - File not found CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2011.08.23 14:47:19 | 000,000,000 | ---D | C] -- C:\Users\C*****\AppData\Roaming\Malwarebytes [2011.08.23 14:46:11 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys [2011.08.23 14:45:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2011.08.23 14:45:30 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys [2011.08.23 14:45:29 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware [2011.08.23 13:52:52 | 000,000,000 | ---D | C] -- C:\Users\C*****\AppData\Roaming\Wise Registry Cleaner [2011.08.23 13:52:38 | 000,000,000 | ---D | C] -- C:\Program Files\Wise Registry Cleaner [2011.08.10 16:24:50 | 000,000,000 | ---D | C] -- C:\Users\C*****\Documents\Adobe [2011.08.09 14:41:27 | 000,000,000 | ---D | C] -- C:\Users\C*****\AppData\Roaming\dvdcss [2011.08.06 14:40:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2011.08.06 14:40:14 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime [2011.08.01 08:31:52 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3 [2011.08.01 08:17:25 | 000,000,000 | ---D | C] -- C:\Program Files\Neuer Ordner [2011.08.01 08:17:07 | 000,000,000 | ---D | C] -- C:\Users\C*****\Neuer Ordner [2011.08.01 08:13:27 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\sun [2011.07.31 18:51:14 | 000,000,000 | ---D | C] -- C:\Users\C*****\AppData\Roaming\Template [2011.07.31 12:20:28 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft [2011.07.26 12:34:07 | 000,000,000 | -H-D | C] -- C:\ProgramData\CanonIJScan [2011.07.26 12:34:05 | 000,000,000 | ---D | C] -- C:\Users\C*****\AppData\Roaming\Canon [2011.07.25 14:15:40 | 000,000,000 | ---D | C] -- C:\Users\C*****\Documents\Bewerbungen [2011.07.25 11:52:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes [2011.07.25 11:51:11 | 000,000,000 | ---D | C] -- C:\Program Files\iPod [2011.07.25 11:46:42 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour [2011.07.25 11:32:46 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update [2009.10.05 20:19:38 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\C*****\AppData\Roaming\pcouffin.sys [4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [2 C:\Users\C*****\*.tmp files -> C:\Users\C*****\*.tmp -> ] [1 C:\Users\C*****\Documents\*.tmp files -> C:\Users\C*****\Documents\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.08.23 15:06:10 | 000,094,227 | ---- | M] () -- C:\ProgramData\nvModes.001 [2011.08.23 15:02:11 | 000,001,100 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.08.23 15:01:50 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 [2011.08.23 15:01:50 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 [2011.08.23 15:01:25 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.08.23 15:01:12 | 3219,578,880 | -HS- | M] () -- C:\hiberfil.sys [2011.08.23 14:58:03 | 000,000,020 | ---- | M] () -- C:\Users\C*****\defogger_reenable [2011.08.23 14:46:11 | 000,000,870 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.08.23 14:42:01 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.08.23 14:21:32 | 002,345,872 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT [2011.08.23 14:05:45 | 000,048,724 | ---- | M] () -- C:\Users\C*****\Desktop\Bachelorarbeit.odt [2011.08.23 13:52:40 | 000,000,889 | ---- | M] () -- C:\Users\Public\Desktop\Wise Registry Cleaner.lnk [2011.08.18 11:24:56 | 000,628,742 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2011.08.18 11:24:56 | 000,595,996 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011.08.18 11:24:56 | 000,126,454 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2011.08.18 11:24:56 | 000,104,070 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011.08.15 15:26:29 | 000,001,856 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2011.08.07 21:39:38 | 000,076,800 | ---- | M] () -- C:\Users\C*****\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.08.06 14:40:46 | 000,001,690 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2011.08.01 08:31:53 | 000,000,989 | ---- | M] () -- C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk [2011.08.01 08:20:22 | 000,000,666 | ---- | M] () -- C:\Users\C*****\AppData\Roaming\wklnhst.dat [2011.08.01 08:13:19 | 168,166,968 | ---- | M] () -- C:\Users\C*****\Desktop\OOo_3.3.0_Win_x86_install-wJRE_de.exe [2011.07.31 12:14:15 | 000,001,010 | ---- | M] () -- C:\Users\Public\Desktop\Microsoft Works.lnk [2011.07.25 11:52:49 | 000,001,628 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [4 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ] [2 C:\Users\C*****\*.tmp files -> C:\Users\C*****\*.tmp -> ] [1 C:\Users\C*****\Documents\*.tmp files -> C:\Users\C*****\Documents\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.08.23 14:56:48 | 000,000,020 | ---- | C] () -- C:\Users\C*****\defogger_reenable [2011.08.23 14:46:11 | 000,000,870 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2011.08.23 13:52:40 | 000,000,889 | ---- | C] () -- C:\Users\Public\Desktop\Wise Registry Cleaner.lnk [2011.08.15 15:26:29 | 000,001,856 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk [2011.08.15 15:26:29 | 000,001,804 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk [2011.08.06 14:40:46 | 000,001,690 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2011.08.01 18:51:44 | 000,048,724 | ---- | C] () -- C:\Users\C*****\Desktop\Bachelorarbeit.odt [2011.08.01 08:31:53 | 000,000,989 | ---- | C] () -- C:\Users\Public\Desktop\OpenOffice.org 3.3.lnk [2011.08.01 08:10:05 | 168,166,968 | ---- | C] () -- C:\Users\C*****\Desktop\OOo_3.3.0_Win_x86_install-wJRE_de.exe [2011.07.31 12:14:15 | 000,001,010 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft Works.lnk [2011.07.26 12:30:22 | 001,010,956 | ---- | C] () -- C:\Users\C*****\Desktop\SCN_0001.pdf [2011.07.25 11:52:49 | 000,001,628 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2010.07.17 13:39:36 | 001,407,055 | ---- | C] () -- C:\Users\C*****\AppData\Roaming\com.kennettnet.MusicRescue4.Profiles.plist [2010.06.13 19:13:36 | 000,017,408 | ---- | C] () -- C:\Users\C*****\AppData\Local\WebpageIcons.db [2010.03.23 13:26:48 | 000,201,512 | ---- | C] () -- C:\Windows\System32\vpnapi.dll [2010.02.15 22:38:33 | 000,000,666 | ---- | C] () -- C:\Users\C*****\AppData\Roaming\wklnhst.dat [2009.12.17 11:39:51 | 000,148,769 | ---- | C] () -- C:\Windows\hppins20.dat [2009.12.17 11:39:41 | 000,016,655 | ---- | C] () -- C:\Windows\hppmdl20.dat [2009.10.05 20:19:38 | 000,087,608 | ---- | C] () -- C:\Users\C*****\AppData\Roaming\inst.exe [2009.10.05 20:19:38 | 000,007,887 | ---- | C] () -- C:\Users\C*****\AppData\Roaming\pcouffin.cat [2009.10.05 20:19:38 | 000,001,144 | ---- | C] () -- C:\Users\C*****\AppData\Roaming\pcouffin.inf [2009.09.28 18:43:54 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat [2009.09.24 16:40:12 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll [2009.09.24 16:40:12 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin [2009.09.24 16:39:39 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin [2009.09.08 23:40:39 | 000,027,648 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll [2009.08.18 15:11:56 | 000,000,072 | ---- | C] () -- C:\Windows\ricdb.ini [2009.06.27 12:07:51 | 000,000,069 | ---- | C] () -- C:\Windows\EasyCash.ini [2009.06.27 12:05:20 | 000,000,137 | ---- | C] () -- C:\Windows\EasyCT.INI [2009.01.26 21:47:37 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll [2009.01.26 21:05:59 | 000,187,267 | ---- | C] () -- C:\Windows\hpoins29.dat [2009.01.18 21:38:55 | 000,000,680 | ---- | C] () -- C:\Users\C*****\AppData\Local\d3d9caps.dat [2009.01.03 22:48:52 | 000,094,227 | ---- | C] () -- C:\ProgramData\nvModes.dat [2009.01.03 22:48:52 | 000,094,227 | ---- | C] () -- C:\ProgramData\nvModes.001 [2009.01.03 22:47:57 | 000,271,360 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys [2009.01.03 22:47:42 | 000,018,048 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys [2008.12.31 16:49:51 | 000,693,646 | ---- | C] () -- C:\Users\C*****\AppData\Roaming\com.kennettnet.MusicRescue4.plist [2008.12.25 13:58:48 | 000,010,240 | ---- | C] () -- C:\Windows\System32\vidx16.dll [2008.12.25 13:56:34 | 000,000,280 | ---- | C] () -- C:\Windows\_delis43.ini [2008.12.13 18:48:11 | 000,000,238 | ---- | C] () -- C:\Users\C*****\AppData\Roaming\Default.PLS [2008.12.05 00:23:36 | 000,076,800 | ---- | C] () -- C:\Users\C*****\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008.11.21 23:47:52 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll [2008.11.21 23:44:16 | 000,012,288 | ---- | C] () -- C:\Windows\System32\DivXWMPExtType.dll [2008.07.17 13:56:03 | 000,628,742 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2008.07.17 13:56:03 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2008.07.17 13:56:03 | 000,126,454 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2008.07.17 13:56:03 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2008.07.17 11:54:02 | 000,009,867 | ---- | C] () -- C:\Windows\System32\drivers\HOTKEY.sys [2008.07.17 09:35:24 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2008.07.17 08:04:27 | 000,015,190 | ---- | C] () -- C:\Windows\M3000Twn.ini [2008.07.14 11:32:16 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll [2008.06.09 02:02:37 | 000,000,755 | ---- | C] () -- C:\Windows\hpomdl29.dat [2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2006.11.02 14:47:37 | 002,345,872 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll [2006.11.02 12:33:01 | 000,595,996 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2006.11.02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2006.11.02 12:33:01 | 000,104,070 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2006.11.02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2006.11.02 12:25:26 | 000,557,568 | ---- | C] () -- C:\Windows\System32\hpotscl1.dll [2006.11.02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2006.11.02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini [2006.11.02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat ========== LOP Check ========== [2011.05.05 14:48:50 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\Aqibq [2009.06.17 21:56:04 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\BitTorrent [2009.01.09 19:12:56 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\Buhl Data Service GmbH [2011.07.26 12:34:08 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\Canon [2009.01.04 13:26:49 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\com.adobe.ExMan [2009.05.26 00:26:29 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\DaCamYoWebcam [2009.01.03 22:40:37 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\DAEMON Tools [2009.01.03 22:41:23 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\DAEMON Tools Lite [2009.01.03 22:40:37 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\DAEMON Tools Pro [2011.08.23 14:25:13 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\Dropbox [2011.03.24 23:14:17 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\DVDVideoSoftIEHelpers [2010.06.03 16:00:09 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\Facebook [2009.01.04 16:36:33 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\GHISLER [2011.02.11 00:12:42 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\ICQ [2011.04.30 22:06:19 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\Ifacci [2009.03.03 19:20:16 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\OpenOffice.org [2011.06.10 21:31:23 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\PC Suite [2009.01.26 18:13:32 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\PixelPlanet [2009.09.09 00:03:13 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\Softplicity [2011.07.31 18:51:14 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\Template [2010.08.08 22:36:24 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\VMLoad [2010.12.23 13:38:02 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\Vso [2011.08.23 14:17:23 | 000,000,000 | ---D | M] -- C:\Users\C*****\AppData\Roaming\Wise Registry Cleaner [2011.08.23 14:59:42 | 000,032,558 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2010.12.07 17:13:30 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin [2010.09.17 13:26:40 | 000,000,000 | ---D | M] -- C:\73694fce9747fec268893a48 [2009.09.25 17:54:44 | 000,000,000 | -HSD | M] -- C:\Boot [2011.08.16 11:59:39 | 000,000,000 | -H-D | M] -- C:\Config.Msi [2006.11.02 15:02:03 | 000,000,000 | -HSD | M] -- C:\Documents and Settings [2008.11.25 23:24:03 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen [2010.08.16 20:52:17 | 000,000,000 | -HSD | M] -- C:\found.000 [2010.10.08 18:05:18 | 000,000,000 | -HSD | M] -- C:\found.001 [2008.07.17 04:51:55 | 000,000,000 | ---D | M] -- C:\Intel [2008.07.17 13:04:32 | 000,000,000 | RH-D | M] -- C:\MSOCache [2008.07.17 15:16:32 | 000,000,000 | ---D | M] -- C:\MyWorks [2008.01.21 04:32:31 | 000,000,000 | ---D | M] -- C:\PerfLogs [2011.08.23 14:45:29 | 000,000,000 | ---D | M] -- C:\Program Files [2011.08.23 14:45:41 | 000,000,000 | ---D | M] -- C:\ProgramData [2008.11.25 23:24:03 | 000,000,000 | -HSD | M] -- C:\Programme [2011.07.20 22:31:08 | 000,000,000 | -H-D | M] -- C:\rgotgktjgbt [2011.08.23 15:18:28 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2011.08.18 22:21:09 | 000,000,000 | -H-D | M] -- C:\SystemData [2011.06.03 12:38:20 | 000,000,000 | -H-D | M] -- C:\syufahusjif [2009.05.25 23:36:54 | 000,000,000 | ---D | M] -- C:\temp [2008.12.04 23:42:00 | 000,000,000 | R--D | M] -- C:\Users [2011.07.14 11:50:43 | 000,000,000 | ---D | M] -- C:\Windows < %PROGRAMFILES%\*.exe > < %LOCALAPPDATA%\*.exe > < %systemroot%\*. /mp /s > < MD5 for: EXPLORER.EXE > [2008.10.29 08:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe [2008.10.29 08:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe [2008.10.30 05:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\explorer.exe [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe [2008.10.28 04:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe [2008.01.21 04:24:24 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe < MD5 for: REGEDIT.EXE > [2008.01.21 04:24:53 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows\regedit.exe [2008.01.21 04:24:53 | 000,134,656 | ---- | M] (Microsoft Corporation) MD5=467A3B03E924B7B7EDD16D34740574B0 -- C:\Windows\winsxs\x86_microsoft-windows-registry-editor_31bf3856ad364e35_6.0.6001.18000_none_f42eb564dbd8a697\regedit.exe < MD5 for: USERINIT.EXE > [2008.01.21 04:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe [2008.01.21 04:24:49 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe < MD5 for: WININIT.EXE > [2008.01.21 04:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\System32\wininit.exe [2008.01.21 04:23:42 | 000,096,768 | ---- | M] (Microsoft Corporation) MD5=101BA3EA053480BB5D957EF37C06B5ED -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.0.6001.18000_none_30f2b8cf0450a6a2\wininit.exe < MD5 for: WINLOGON.EXE > [2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe [2009.04.11 08:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe [2008.01.21 04:24:49 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-08-23 07:43:10 < End of report > |
|
24.08.2011, 09:11
| #2 |
| |  Volksbank 100 TAN Trojaner wird nicht erkannt Guten Morgen,
__________________ich habe außerdem einen Quick-Scan mit Malwarebytes gemacht - und 6 infizierte Dateien gefunden! Bei der Volksbank erscheint auch keine falsche TAN-Aufforderung mehr! Kann ich mich freuen oder ist das nur ein augenscheinlicher Sieg? Ich habe in anderen Beiträgen öfters gelesen, dass man danach trotzdem seinen Computer neu aufsetzen sollte...? Vielen Dank auf jeden Fall auch für die ganzen Anleitungen für die Scan-Programme, eine sehr große Hilfe! Der Log von Malwarebytes mit den gefundenen Dateien: Malwarebytes' Anti-Malware 1.51.1.1800 www.malwarebytes.org Datenbank Version: 7544 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 24.08.2011 00:35:10 mbam-log-2011-08-24 (00-34-55).txt Art des Suchlaufs: Quick-Scan Durchsuchte Objekte: 201651 Laufzeit: 18 Minute(n), 28 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 1 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 2 Infizierte Dateien: 3 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\2F7ZUJ7G0IWX6GYWEJEGZJIT (Trojan.SpyEyes.R) -> Value: 2F7ZUJ7G0IWX6GYWEJEGZJIT -> No action taken. Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: c:\syufahusjif (Trojan.SpyEyes) -> No action taken. c:\rgotgktjgbt (Trojan.SpyEyes) -> No action taken. Infizierte Dateien: c:\systemdata\217fa9662cc.exe (Trojan.SpyEyes.R) -> No action taken. c:\syufahusjif\config.bin (Trojan.SpyEyes) -> No action taken. c:\rgotgktjgbt\config.bin (Trojan.SpyEyes) -> No action taken. |
|
| Themen zu Volksbank 100 TAN Trojaner wird nicht erkannt |
| 100 tan, antivir, aus sicherheitsgründen, autorun, avira, bho, bonjour, c:\windows\system32\rundll32.exe, converter, cs4/contributeieplugin.dll, desktop, ebanking, error, firefox, google, google earth, home, hotkey.sys, launch, logfile, mp3, neu aufsetzen, nvlddmkm.sys, plug-in, problem, realtek, registry, registry cleaner, safer networking, scan, security, server, sicherheitsgründe, sicherheitsgründen, software, start menu, system, system neu, system neu aufsetzen, tan 100 volksbank trojaner vista, trojaner, trojaner?, usb, version=1.0, vista, wird nicht erkannt |
Linear-Darstellung
