![]() |
|
Plagegeister aller Art und deren Bekämpfung: Trojan:Win32/FakeSysdefWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #5 |
| ![]() Trojan:Win32/FakeSysdef Nr. 2 OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 20.07.2011 12:39:55 - Run 1 OTL by OldTimer - Version 3.2.26.1 Folder = C:\Users\X\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,86 Gb Total Physical Memory | 2,60 Gb Available Physical Memory | 67,42% Memory free 7,73 Gb Paging File | 6,29 Gb Available in Paging File | 81,43% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 451,07 Gb Total Space | 407,44 Gb Free Space | 90,33% Space Free | Partition Type: NTFS Computer Name: X-PC | User Name: X | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 ========== Authorized Applications List ========== ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0090A87C-3E0E-43D4-AA71-A71B06563A4A}" = Dell Support Center "{05BFB060-4F22-4710-B0A2-2801A1B606C5}" = Microsoft Antimalware "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "{1280E900-35DA-4E08-A700-B79A5B2B8532}" = Microsoft Antimalware Service DE-DE Language Pack "{26A24AE4-039D-4CA4-87B4-2F86416014FF}" = Java(TM) 6 Update 14 (64-bit) "{42738DB0-FC3E-4672-A99B-9372F5696E30}" = Microsoft Security Client "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64 "{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{DC911ADF-7B60-40F2-A112-FB1EB6402D07}" = Microsoft Security Client DE-DE Language Pack "{E60B7350-EA5F-41E0-9D6F-E508781E36D2}" = Dell Dock "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "Dell Support Center" = Dell Support Center "Dell Wireless WLAN Card Utility" = Dell Wireless WLAN Card Utility "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "Microsoft Security Client" = Microsoft Security Essentials "SynTPDeinstKey" = Dell Touchpad [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 23 "{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie "{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works "{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform "{3EFEF049-23D4-4B46-8903-4592FEA51018}" = Windows Live Movie Maker "{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module "{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent "{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053 "{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call "{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module "{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD DX "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{70B7A167-0B88-445D-A3EA-97C73AA88CAC}" = Windows Live Toolbar "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2 "{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync "{87434D51-51DB-4109-B68F-A829ECDCF380}" = Accelerometer "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86) "{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System "{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010 "{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010 "{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010 "{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010 "{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010 "{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010 "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010 "{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010 "{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010 "{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010 "{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010 "{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010 "{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German) "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}" = Microsoft Search Enhancement Pack "{A33E7B0C-B99C-4EC9-B702-8A328B161AF9}" = Roxio Burn "{A3AD87C6-6FE1-4217-A70E-2F7FEDD87064}" = phase6_195 "{A9668246-FB70-4103-A1E3-66C9BC2EFB49}" = Dell DataSafe Local Backup - Support Software "{AC76BA86-7AD7-1031-7B44-A91000000001}" = Adobe Reader 9.1.2 - Deutsch "{B2E47DE7-800B-40BB-BD1F-9F221C3AEE87}" = Roxio Burn "{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86) "{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer "{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update "{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant "{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Photoshop 7.0" = Adobe Photoshop 7.0 "Advanced Audio FX Engine" = Advanced Audio FX Engine "AudioShell_is1" = AudioShell 1.3.5 "AutocompletePro3_is1" = AutocompletePro "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "Dell Webcam Central" = Dell Webcam Central "DivX Setup.divx.com" = DivX-Setup "Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7 "Free Audio Converter_is1" = Free Audio Converter version 2.2.18.524 "Free YouTube Download_is1" = Free YouTube Download 2.6 "Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324 "GoToAssist" = GoToAssist 8.0.0.514 "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.1.1800 "McAfee Security Scan" = McAfee Security Scan Plus "Mozilla Firefox 5.0 (x86 de)" = Mozilla Firefox 5.0 (x86 de) "Music Editor Free" = Music Editor Free "Office14.SingleImage" = Microsoft Office Home and Student 2010 "phase-6 Feeding Tool" = phase-6 Feeding Tool 1.0.6 "phase-6-basic" = phase-6-basic 2.1.2.2a "Uninstall_is1" = Uninstall 1.0.0.1 "WinLiveSuite_Wave3" = Windows Live Essentials ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 18.07.2011 22:01:42 | Computer Name = X-PC | Source = SideBySide | ID = 16842811 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_a554a30de6a6e582.manifest" in Zeile 0. Ungültige XML-Syntax. Error - 18.07.2011 22:01:49 | Computer Name = Elena-PC | Source = SideBySide | ID = 16842811 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_a554a30de6a6e582.manifest" in Zeile 0. Ungültige XML-Syntax. Error - 18.07.2011 22:01:56 | Computer Name = X-PC | Source = SideBySide | ID = 16842811 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_a554a30de6a6e582.manifest" in Zeile 0. Ungültige XML-Syntax. Error - 18.07.2011 22:02:03 | Computer Name = X-PC | Source = SideBySide | ID = 16842811 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_a554a30de6a6e582.manifest" in Zeile 0. Ungültige XML-Syntax. Error - 18.07.2011 22:02:10 | Computer Name = X-PC | Source = SideBySide | ID = 16842811 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_a554a30de6a6e582.manifest" in Zeile 0. Ungültige XML-Syntax. Error - 18.07.2011 22:02:17 | Computer Name = X-PC | Source = SideBySide | ID = 16842811 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_a554a30de6a6e582.manifest" in Zeile 0. Ungültige XML-Syntax. Error - 18.07.2011 22:02:24 | Computer Name = X-PC | Source = SideBySide | ID = 16842811 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_a554a30de6a6e582.manifest" in Zeile 0. Ungültige XML-Syntax. Error - 18.07.2011 22:02:31 | Computer Name = X-PC | Source = SideBySide | ID = 16842811 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_a554a30de6a6e582.manifest" in Zeile 0. Ungültige XML-Syntax. Error - 18.07.2011 22:02:38 | Computer Name = X-PC | Source = SideBySide | ID = 16842811 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_a554a30de6a6e582.manifest" in Zeile 0. Ungültige XML-Syntax. Error - 18.07.2011 22:02:45 | Computer Name = X-PC | Source = SideBySide | ID = 16842811 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Dell\Dell Wireless WLAN Card\bcmwltry.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_policy.9.0.microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_a554a30de6a6e582.manifest" in Zeile 0. Ungültige XML-Syntax. [ Dell Events ] Error - 05.05.2011 13:46:37 | Computer Name = X-PC | Source = DataSafe | ID = 17 Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte. [ Media Center Events ] Error - 22.02.2011 02:52:34 | Computer Name = X-PC | Source = MCUpdate | ID = 0 Description = 07:52:34 - Fehler beim Herstellen der Internetverbindung. 07:52:34 - Serververbindung konnte nicht hergestellt werden.. Error - 22.02.2011 02:52:44 | Computer Name = X-PC | Source = MCUpdate | ID = 0 Description = 07:52:39 - Fehler beim Herstellen der Internetverbindung. 07:52:39 - Serververbindung konnte nicht hergestellt werden.. Error - 26.03.2011 06:28:17 | Computer Name = X-PC | Source = MCUpdate | ID = 0 Description = 11:28:17 - Fehler beim Herstellen der Internetverbindung. 11:28:17 - Serververbindung konnte nicht hergestellt werden.. Error - 26.03.2011 06:28:27 | Computer Name = X-PC | Source = MCUpdate | ID = 0 Description = 11:28:22 - Fehler beim Herstellen der Internetverbindung. 11:28:22 - Serververbindung konnte nicht hergestellt werden.. Error - 09.04.2011 05:46:06 | Computer Name = X-PC | Source = MCUpdate | ID = 0 Description = 11:46:06 - Fehler beim Herstellen der Internetverbindung. 11:46:06 - Serververbindung konnte nicht hergestellt werden.. Error - 09.04.2011 05:46:18 | Computer Name = X-PC | Source = MCUpdate | ID = 0 Description = 11:46:12 - Fehler beim Herstellen der Internetverbindung. 11:46:12 - Serververbindung konnte nicht hergestellt werden.. Error - 21.06.2011 21:41:57 | Computer Name = X-PC | Source = MCUpdate | ID = 0 Description = 03:41:57 - Fehler beim Herstellen der Internetverbindung. 03:41:57 - Serververbindung konnte nicht hergestellt werden.. Error - 21.06.2011 21:42:36 | Computer Name = X-PC | Source = MCUpdate | ID = 0 Description = 03:42:29 - Fehler beim Herstellen der Internetverbindung. 03:42:29 - Serververbindung konnte nicht hergestellt werden.. Error - 04.07.2011 00:33:43 | Computer Name = X-PC | Source = MCUpdate | ID = 0 Description = 06:33:43 - Fehler beim Herstellen der Internetverbindung. 06:33:43 - Serververbindung konnte nicht hergestellt werden.. Error - 15.07.2011 22:44:42 | Computer Name = X-PC | Source = MCUpdate | ID = 0 Description = 04:43:57 - Fehler beim Herstellen der Internetverbindung. 04:43:57 - Serververbindung konnte nicht hergestellt werden.. [ System Events ] Error - 18.07.2011 15:39:28 | Computer Name = X-PC | Source = atikmdag | ID = 43029 Description = Display is not active Error - 18.07.2011 15:41:05 | Computer Name = X-PC | Source = Service Control Manager | ID = 7022 Description = Der Dienst "Dell Wireless WLAN Tray Service" wurde nicht richtig gestartet. Error - 18.07.2011 15:42:21 | Computer Name = X-PC | Source = atikmdag | ID = 52236 Description = CPLIB :: General - Invalid Parameter Error - 18.07.2011 15:42:21 | Computer Name = X-PC | Source = atikmdag | ID = 43029 Description = Display is not active Error - 18.07.2011 15:44:02 | Computer Name = X-PC | Source = Service Control Manager | ID = 7022 Description = Der Dienst "Dell Wireless WLAN Tray Service" wurde nicht richtig gestartet. Error - 18.07.2011 15:44:25 | Computer Name = X-PC | Source = Microsoft Antimalware | ID = 3002 Description = Fehler in %%860-Echtzeitschutzfunktion. Funktion: %%835 Fehlercode: 0x80004005 Fehlerbeschreibung: Unbekannter Fehler Ursache: %%842 Error - 20.07.2011 06:28:08 | Computer Name = X-PC | Source = atikmdag | ID = 52236 Description = CPLIB :: General - Invalid Parameter Error - 20.07.2011 06:28:08 | Computer Name = X-PC | Source = atikmdag | ID = 43029 Description = Display is not active Error - 20.07.2011 06:29:44 | Computer Name = X-PC | Source = Service Control Manager | ID = 7022 Description = Der Dienst "Dell Wireless WLAN Tray Service" wurde nicht richtig gestartet. Error - 20.07.2011 06:29:54 | Computer Name = X-PC | Source = Microsoft Antimalware | ID = 3002 Description = Fehler in %%860-Echtzeitschutzfunktion. Funktion: %%835 Fehlercode: 0x80004005 Fehlerbeschreibung: Unbekannter Fehler Ursache: %%842 < End of report > Habe gerade Schritt 2 ausgeführt, also alle Systemdateien sichtbar gemacht (sind jetzt da, aber blass?) Der Versuch Schritt 3 auszuführen ist leider gescheitert, ich wähle beim Betriebssystem Vista aus (habe Win 7), doch diese Eingabe lässt mich das Programm ewig oft wiederholen und ich komme nicht weiter. Und der letzte Daten-Striptease nach Schritt 4: Code:
ATTFilter Accelerometer STMicroelectronics 07.02.2010 1.06.08.17 Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 07.02.2010 10.0.22.87 Adobe Flash Player 10 Plugin Adobe Systems Incorporated 17.06.2011 6,00MB 10.3.181.26 Adobe Photoshop 7.0 Adobe Systems, Inc. 25.06.2010 7.0 Adobe Reader 9.1.2 - Deutsch Adobe Systems Incorporated 07.02.2010 240MB 9.1.2 Advanced Audio FX Engine Creative Technology Ltd 07.02.2010 1.12.05 AudioShell 1.3.5 Softpointer Inc 22.06.2010 1.3.5 AutocompletePro 24.05.2011 0,81MB Avira AntiVir Personal - Free Antivirus Avira GmbH 01.07.2011 61,8MB 10.2.0.696 CCleaner Piriform 19.07.2011 3.08 Cisco EAP-FAST Module Cisco Systems, Inc. 07.02.2010 1,55MB 2.2.14 Cisco LEAP Module Cisco Systems, Inc. 07.02.2010 0,63MB 1.0.19 Cisco PEAP Module Cisco Systems, Inc. 07.02.2010 1,24MB 1.1.6 Compatibility Pack für 2007 Office System Microsoft Corporation 16.07.2011 103,4MB 12.0.6425.1000 Dell DataSafe Local Backup Dell 07.02.2010 9.4.45 Dell DataSafe Local Backup - Support Software Dell 07.02.2010 2.31 Dell Dock Dell 07.02.2010 2.0.0 Dell Support Center Dell Inc. 24.06.2011 128,9MB 3.1.5830.12 Dell Touchpad Synaptics Incorporated 07.02.2010 14.0.2.0 Dell Webcam Central Creative Technology Ltd 07.02.2010 1.40.05 Dell Wireless WLAN Card Utility Dell Inc. 07.02.2010 5.30.21.0 DivX-Setup DivX, Inc. 25.07.2010 1.0.2.23 Free Audio CD Burner version 1.4.7 DVDVideoSoft Limited. 08.04.2011 10,7MB Free Audio Converter version 2.2.18.524 DVDVideoSoft Limited. 24.05.2011 32,2MB Free YouTube Download 2.6 DVDVideoSoft Limited. 05.07.2010 25,4MB Free YouTube to MP3 Converter version 3.9.35.324 DVDVideoSoft Limited. 08.04.2011 36,0MB GoToAssist 8.0.0.514 07.02.2010 ICQ7.2 ICQ 19.06.2010 7.2 Java(TM) 6 Update 14 (64-bit) Sun Microsystems, Inc. 07.02.2010 90,6MB 6.0.140 Java(TM) 6 Update 23 Sun Microsystems, Inc. 07.02.2010 97,5MB 6.0.230 Live! Cam Avatar Creator Creative Technology Ltd 07.02.2010 4.6.3009.1 Malwarebytes' Anti-Malware Version 1.51.1.1800 Malwarebytes Corporation 17.07.2011 13,4MB 1.51.1.1800 McAfee Security Scan Plus McAfee, Inc. 02.10.2010 8,30MB 2.0.181.2 Microsoft .NET Framework 4 Client Profile Microsoft Corporation 23.11.2010 38,8MB 4.0.30319 Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft Corporation 23.11.2010 2,94MB 4.0.30319 Microsoft Office Home and Student 2010 Microsoft Corporation 09.07.2010 14.0.4763.1000 Microsoft Office PowerPoint Viewer 2007 (German) Microsoft Corporation 16.07.2011 121,8MB 12.0.6425.1000 Microsoft Office Suite Activation Assistant Microsoft Corporation 07.02.2010 8,37MB 2.9 Microsoft Security Essentials Microsoft Corporation 15.07.2011 2.1.1116.0 Microsoft Silverlight Microsoft Corporation 16.07.2011 54,5MB 4.0.60531.0 Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Corporation 07.02.2010 1,72MB 3.1.0000 Microsoft Sync Framework Runtime Native v1.0 (x86) Microsoft Corporation 07.02.2010 0,61MB 1.0.1215.0 Microsoft Sync Framework Services Native v1.0 (x86) Microsoft Corporation 07.02.2010 1,45MB 1.0.1215.0 Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 16.07.2011 0,29MB 8.0.61001 Microsoft Visual C++ 2005 Redistributable (x64) Microsoft Corporation 07.02.2010 0,69MB 8.0.61000 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Corporation 07.02.2010 0,77MB 9.0.30729 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 17.07.2011 0,77MB 9.0.30729.6161 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Corporation 17.06.2010 0,58MB 9.0.30729.4148 Microsoft Works Microsoft Corporation 16.07.2011 166,7MB 9.7.0621 Mozilla Firefox 5.0 (x86 de) Mozilla 22.06.2011 32,7MB 5.0 Music Editor Free FAE Inc. 24.05.2011 phase-6 Feeding Tool 1.0.6 phase-6 27.06.2011 1.0.6 phase-6-basic 2.1.2.2a phase-6 27.06.2011 2.1.2.2a phase6_195 phase6 27.06.2011 71,8MB 1.95.0000 PowerDVD DX CyberLink Corp. 07.02.2010 8.3.5424 Quickset64 Dell Inc. 07.02.2010 9.6.11 Roxio Burn Roxio 07.02.2010 36,1MB 1.01 Skype Toolbars Skype Technologies S.A. 14.08.2010 6,09MB 1.0.4051 Skype™ 4.2 Skype Technologies S.A. 14.08.2010 31,7MB 4.2.169 Uninstall 1.0.0.1 08.04.2011 10,9MB Windows Live Anmelde-Assistent Microsoft Corporation 07.02.2010 1,94MB 5.000.818.5 Windows Live Essentials Microsoft Corporation 07.02.2010 14.0.8089.0726 Windows Live Sync Microsoft Corporation 07.02.2010 2,79MB 14.0.8089.726 Windows Live-Uploadtool Microsoft Corporation 07.02.2010 0,22MB 14.0.8014.1029 Windows Media Player Firefox Plugin Microsoft Corp 18.05.2011 0,29MB 1.0.0.8 Geändert von Donau (20.07.2011 um 13:13 Uhr) |
Themen zu Trojan:Win32/FakeSysdef |
antvir, falsche, herunterfahren, microsoft essentials, trojan:win32/fakesysdef, trojaner |