![]() |
| |||||||
Log-Analyse und Auswertung: Firefox öffnet neues Fenster, Verlinkungen auf falsche Webseiten, Bluescreen, PC-langsamWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
| | #15 |
![]() ![]() | Firefox öffnet neues Fenster, Verlinkungen auf falsche Webseiten, Bluescreen, PC-langsam Hallo, das ging doch schneller als gedacht, konnte auch gleich noch einen Quick Scan mit Antimalware ausführen, Ergebnis ist dieses : Malwarebytes' Anti-Malware 1.51.0.1200 www.malwarebytes.org Datenbank Version: 6988 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 30.06.2011 20:57:43 mbam-log-2011-06-30 (20-57-43).txt Art des Suchlaufs: Quick-Scan Durchsuchte Objekte: 173782 Laufzeit: 5 Minute(n), 37 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 1 Infizierte Registrierungswerte: 3 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 1 Infizierte Dateien: 73 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srenum (Rootkit.Agent) -> Quarantined and deleted successfully. Infizierte Registrierungswerte: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{E8278950-A001-5784-8F3D-6FD1944EEB83} (Trojan.ZbotR.Gen) -> Value: {E8278950-A001-5784-8F3D-6FD1944EEB83} -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{6C0AC0A2-E9F3-D3A9-8F3D-6FD1944EEB83} (Trojan.ZbotR.Gen) -> Value: {6C0AC0A2-E9F3-D3A9-8F3D-6FD1944EEB83} -> Delete on reboot. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\4E3E0230AEBB4E96 (Trojan.SpyEyes) -> Value: 4E3E0230AEBB4E96 -> Quarantined and deleted successfully. Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: c:\Recycle.Bin (Trojan.Spyeyes) -> Quarantined and deleted successfully. Infizierte Dateien: c:\Windows\Temp\0.02982361313694637.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.06304959499790941.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.09543347874946073.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.10300292243575238.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.1123859815417605.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.11830981378451855.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.16701568119025378.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.19892284299261365.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.2544712715638041.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.2700757312103772.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.2818967605712479.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.3285626909836967.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.3518482552556148.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.352948370245038.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.38241413599697915.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.41592840264870024.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.4415245087438.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.47095806914749816.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.508090140629153.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache1019428240765865564.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache1413420405328620918.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache1773901548270056310.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache1845326683656910383.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache1972373427017235995.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache2036616603733637164.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache2117399220869105996.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache2186857289031873534.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache2198686028480056912.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache226435340890434754.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache2767952463414582473.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache2936127381059979390.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache7012222302967810518.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache7489981094826435220.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache7520265481452380455.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache841626957316226260.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache842511308754773140.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache8459773770949981073.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache876102640827813143.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache8952469836558831783.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache905977793916706702.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache9141738042089062894.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.6699255493257086.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache3096526791625388121.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache3102642627187352873.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache3274181603513373370.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache3356608356017638046.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache3393579051805727639.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache431222772015663167.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache4553689054590791538.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache5044754694494494437.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache5395154821186458460.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache5407441157636782015.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache5412206462808943710.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache5760427262883043701.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache6031642783049983989.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\jar_cache6408941054642479696.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.709193262980863.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.7110913109357835.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.7671819673147506.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.7673662084175875.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.78506759477088.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.7938880080060021.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.8342415222567076.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.8597828915376454.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.8629951993909257.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.9075565698654047.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.9113239021670663.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.9197759715445485.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\0.929861419626731.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully. c:\Windows\Temp\w1 (Spyware.Passwords) -> Quarantined and deleted successfully. c:\Windows\Temp\0.03134971657898944.exe (Exploit.Drop.2) -> Quarantined and deleted successfully. c:\Users\obelix\AppData\Roaming\Ruiv\iwqe.exe (Trojan.ZbotR.Gen) -> Quarantined and deleted successfully. c:\Recycle.Bin\config.bin (Trojan.Spyeyes) -> Quarantined and deleted successfully. Hoffe das war so richtig. ![]() Grüße No Suspicion |
| Themen zu Firefox öffnet neues Fenster, Verlinkungen auf falsche Webseiten, Bluescreen, PC-langsam |
| adblock, alternate, autorun, bluescreen, bonjour, cdburnerxp, emsisoft anti-malware, error 404, excel.exe, exploit.drop.2, flash player, home, jar_cache, langsam, mbamservice.exe, microsoft office word, nodrives, nt.dll, ntdll.dll, office 2007, plug-in, rechner hängt, recycle.bin, sched.exe, searchplugins, security update, sehr langsam, software, start menu, svchost.exe, trojan.downloader, trojan.fakeav, trojan.spyeyes, verlinkungen, warnung |