Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Wurm Cekar.d und trojaner Win32:Injected AZ + Trojan.win32 gen.

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 26.08.2011, 00:04   #3
Korkmaz
 
Wurm Cekar.d und  trojaner  Win32:Injected AZ + Trojan.win32 gen. - Standard

Wurm Cekar.d und trojaner Win32:Injected AZ + Trojan.win32 gen.



und hier der 2OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 26.08.2011 01:02:08 - Run 1
OTL by OldTimer - Version 3.2.26.5     Folder = C:\Dokumente und Einstellungen\Meister\Desktop\druck
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
767,49 Mb Total Physical Memory | 405,16 Mb Available Physical Memory | 52,79% Memory free
1,84 Gb Paging File | 1,43 Gb Available in Paging File | 77,86% Paging File free
Paging file location(s): C:\pagefile.sys 1160 2404 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 37,26 Gb Total Space | 7,56 Gb Free Space | 20,28% Space Free | Partition Type: NTFS
Drive D: | 50,89 Gb Total Space | 3,88 Gb Free Space | 7,62% Space Free | Partition Type: NTFS
Drive E: | 34,34 Gb Total Space | 9,94 Gb Free Space | 28,93% Space Free | Partition Type: NTFS
Drive F: | 2,92 Gb Total Space | 2,25 Gb Free Space | 76,91% Space Free | Partition Type: FAT32
Drive G: | 50,89 Gb Total Space | 6,52 Gb Free Space | 12,81% Space Free | Partition Type: NTFS
Drive H: | 50,89 Gb Total Space | 4,01 Gb Free Space | 7,88% Space Free | Partition Type: NTFS
 
Computer Name: CM | User Name: Meister | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"33335:TCP" = 33335:TCP:*:Enabled:EE-AOC
"33336:TCP" = 33336:TCP:*:Enabled:EE-AOC
"33334:UDP" = 33334:UDP:*:Enabled:EE-AOC
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"G:\Programme\spiele\Half-Life 2\Steam.exe" = G:\Programme\spiele\Half-Life 2\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\WINDOWS\system32\dplaysvr.exe" = C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"C:\Programme\NetMeeting\conf.exe" = C:\Programme\NetMeeting\conf.exe:*:Enabled:Windows® NetMeeting® -- (Microsoft Corporation)
"G:\Programme\spiele\Viking Invasion Totoal-War\Medieval_TW.exe" = G:\Programme\spiele\Viking Invasion Totoal-War\Medieval_TW.exe:*:Enabled:Medieval_TW -- (Creative Assembly)
"C:\WINDOWS\system32\javaw.exe" = C:\WINDOWS\system32\javaw.exe:*:Enabled:javaw -- (Sun Microsystems, Inc.)
"G:\Programme\spiele\spieleTactical Ops\System\TacticalOps.exe" = G:\Programme\spiele\spieleTactical Ops\System\TacticalOps.exe:*:Enabled:TacticalOps -- ()
"C:\Programme\Java\jre1.5.0_10\bin\javaw.exe" = C:\Programme\Java\jre1.5.0_10\bin\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary -- (Sun Microsystems, Inc.)
"C:\Programme\Real\RealPlayer\realplay.exe" = C:\Programme\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer -- (RealNetworks, Inc.)
"C:\Programme\EA GAMES\Battlefield Vietnam\BfVietnam.exe" = C:\Programme\EA GAMES\Battlefield Vietnam\BfVietnam.exe:*:Enabled:BfVietnam -- ()
"C:\Programme\Total War\Medieval - Total War\Medieval_TW.exe" = C:\Programme\Total War\Medieval - Total War\Medieval_TW.exe:*:Enabled:Medieval_TW -- (Creative Assembly)
"C:\Programme\FrostWire\FrostWire.exe" = C:\Programme\FrostWire\FrostWire.exe:*:Enabled:LimeWire -- (FrostWire Group)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{043671DC-DE3A-4A5B-B7A2-34F7DF6F5523}" = Haufe iDesk-Browser
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam(TM)
"{04858915-9F49-4B2A-AED4-DC49A7DE6A7B}" = Battlefield 2(TM)
"{0AC49543-9CE2-4434-AD42-5AA6E2967FA5}" = Windows Live Toolbar
"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel
"{11BBAE1C-27AE-4ABA-A54C-9FFE3844CCEC}" = GMX Firefox Paket
"{1AD473D7-7A47-5AEC-B45D-3B87414ED975}" = FLV VideoConstructor  v2.3.0.37 FREE
"{1B324010-E837-4E06-8355-13F5F5421112}" = Autostart-Manager
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{218761F6-CBF6-4973-B910-A33E6563A1EA}" = Windows Live Toolbar-Erweiterung (Windows Live Toolbar)
"{2447500B-22D7-47BD-9B13-1A927F43A267}" = Empire Earth
"{26FD9A86-7505-46CB-83A7-AC1DF1E9C300}" = ATI Remote Wonder 1.3
"{279DB581-239C-4E13-97F8-0F48E40BE75C}" = Windows Live Messenger
"{2D0BB7BF-5076-4ECB-BB33-CE81CB2117C3}" = 
"{2DD6C198-FA9A-40B4-8DE5-CE5206E3EB34}" = Smart Menus (Windows Live Toolbar)
"{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3AF0CCF7-3D25-470A-91D3-ABBBA7F30327}" = OneCare Advisor (Windows Live Toolbar)
"{3B7458C7-3F03-4415-AC39-D51EDEACDCCC}" = Steuer 2007
"{53EF6570-21A4-47ED-A40A-E6470A5677A3}" = Studio 8
"{590D4F8F-98FE-47FA-AC2B-3F22FDCF7C09}" = ShareIns
"{5E581E1A-976B-4FB1-BC36-FB35CF357977}" = DVDx 2.2 de
"{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}" = Windows Genuine Advantage v1.3.0254.0
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{757AD3D4-036B-42FA-B0A4-96BD6F4605A0}" = Ulead VideoStudio 7 SE VCD
"{7677634B-E04E-4D2A-89CE-C6EF2370B498}" = Popupblocker (Windows Live Toolbar)
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}" = Windows Live Favorites für Windows Live Toolbar
"{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}" = Text-To-Speech-Runtime
"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = pdf24
"{83E2CFA9-E0EB-4E08-9F85-43E577FF3D60}" = Windows Live Anmelde-Assistent
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8C3727F2-8E37-49E4-820C-03B1677F53B6}" = Stronghold Crusader
"{8F25DADA-F618-4D78-8009-256F8110014A}" = Steuer Update 14.01
"{90850407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{90AF0407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office PowerPoint Viewer 2003
"{95F48480-6D51-49A5-BFC3-7D8043AC5386}" = XP-Clean
"{99052DB7-9592-4522-A558-5417BBAD48EE}" = Microsoft ActiveSync
"{9B04D453-4C9E-41C9-BA7C-B2B8FF32DE6D}" = Das große Steuer-Sparpaket 2006-2007
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9E78C42C-4FF9-4F41-BBC4-BF872606E79D}_is1" = Driver Robot 1.1.0.14
"{9E80D3DE-DB5E-4B5A-92BD-BB714935D7D9}" = QuickSteuer 2006
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A4E86B6A-6EEC-41FD-8960-26947F0E3353}" = Haufe iDesk-Service
"{A642BB6B-CA1D-4142-8DD4-318C3F3DC834}" = Rome - Total War(TM)
"{A6903FF6-895A-4EA6-BDCC-BE1DD911103A}" = PC Camer@
"{A8DF8593-F619-47DE-AD27-BCABF233433A}" = STOIK Video Converter 2
"{AC76BA86-7AD7-1031-7B44-A70900000002}" = Adobe Reader 7.0.9 - Deutsch
"{B49C924C-A651-4378-94F6-5D9BF44A959F}" = EE-ZDE
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B8E952E3-A823-443A-8493-39A0CCE0E3EB}" = HP Photo and Imaging 1.0 - Scanjet 3500c Series
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C7340571-7773-4A8C-9EBC-4E4243B38C76}" = Microsoft XML Parser
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D066C0E0-A915-11D5-B078-00C0F6A04C3E}" = 
"{D07643A3-CE41-4286-8C78-EB9C83E76DDB}" = PunkBuster für Battlefield Vietnam
"{D0AC6844-79D4-11D4-AFEE-00C04F443448}" = Microsoft Works 6.0
"{D45EC259-4A19-4656-B588-C2C360DD18EA}" = Half-Life(R) 2
"{D8E1DFEE-622B-46BA-AEFF-AB7E541C0B21}" = Steuer-Spar-Erklärung 2010
"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
"{E35B3C63-E958-4E31-A178-95D22024109A}" = Battlefield Vietnam(TM)
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9-Reihe
"{E728E952-DD4F-4BCD-A5C8-40FBFEFF91FE}" = OpenOffice.org Installer 1.0
"{EBA672FF-F80E-48B1-8FC4-616825318810}" = Feederkennung (Windows Live Toolbar)
"{EFD8E454-EE12-402A-BFC1-7EA096599CBA}" = Windows Live Outlook-Toolbar (Windows Live Toolbar)
"{F027C8E3-6DBD-492A-9959-7B36B1DE0D65}" = Ad-Aware
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Avance AC'97 Audio
"{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ATI Display Driver" = ATI Display Driver
"Audacity_is1" = Audacity 1.2.3
"AVS DVD Player_is1" = AVS DVD Player version 2.4
"Batak 4 Ýhaleli" = Batak 4 Ýhaleli
"Debut" = Debut
"DVDx_is1" = DVDx
"ElsterFormular 11.5.0.4546" = ElsterFormular
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.00
"Firebird SQL Server D" = Firebird SQL Server - MAGIX Edition 2.0.0.1 (D)
"FRITZ!DSL" = AVM FRITZ!DSL
"FrostWire" = FrostWire 4.13.5
"GSmart Mini 2" = GSmart Mini 2
"HaufeReader" = HaufeReader
"HDCleaner" = HDCleaner
"Hollywood FX 4.6" = Pinnacle Hollywood FX 4.6
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{26FD9A86-7505-46CB-83A7-AC1DF1E9C300}" = ATI Remote Wonder 1.3
"InstallShield_{A642BB6B-CA1D-4142-8DD4-318C3F3DC834}" = Rome - Total War(TM)
"InstallShield_{A6903FF6-895A-4EA6-BDCC-BE1DD911103A}" = PC Camer@
"IZArc 3.4.1.2_is1" = IZArc 3.4.1.2
"Katarn Corp's KFK_is1" = Katarn Corp's KFK
"MAGIX Music Maker Basic Edition D" = MAGIX Music Maker Basic Edition 12.1.0.3 (D)
"MAGIX Online Druck Service D" = MAGIX Online Druck Service 2.3.2.0 (D)
"MAGIX Xtreme Foto Designer 6 D" = MAGIX Xtreme Foto Designer 6 6.0.19.0 (D)
"Medieval Total War" = Medieval Total War
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (2.0.0.20)" = Mozilla Firefox (2.0.0.20)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"PokerStars.net" = PokerStars.net
"Prism" = Prism
"PS2" = PS2
"Putzi4Win 1.5-f" = Putzi4Win 1.5-f
"Python 1.5 combined Win32 extensions" = Python 1.5 combined Win32 extensions
"Python 1.5.2 (final)" = Python 1.5.2 (final)
"Quick Zip_is1" = Quick Zip 4.60.019
"QuickTime" = QuickTime
"RealPlayer 6.0" = RealPlayer Basic
"Security Task Manager" = Security Task Manager 1.8d
"Simplyzip" = Simplyzip (remove only)
"SiSLan" = SiS 900 PCI Fast Ethernet Adapter Driver
"StreetPlugin" = Learn2 Player (Uninstall Only)
"Sunplus CA504A Camera" = GSmart Mini 2 WDM Video Capture
"Tcl 8.0.5 for Windows" = Tcl 8.0.5 for Windows
"Trojan Remover_is1" = Trojan Remover 6.8.2
"Uninstall_is1" = Uninstall 1.0.0.1
"ViewpointMediaPlayer" = Viewpoint Media Player
"VLC media player" = VideoLAN VLC media player 0.8.4a
"Windows Live Toolbar" = Windows Live Toolbar
"Windows Media Encoder 9" = Windows Media Encoder 9-Reihe
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinPcapInst" = WinPcap 3.1 beta3
"Wise Registry Cleaner_is1" = Wise Registry Cleaner 6.14
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XLViewer97" = Microsoft Excel Viewer 97
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 20.08.2011 23:09:51 | Computer Name = CM | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{c78aa045-28ee-11d9-b720-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 21.08.2011 07:02:12 | Computer Name = CM | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{c78aa044-28ee-11d9-b720-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 21.08.2011 07:02:12 | Computer Name = CM | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{c78aa045-28ee-11d9-b720-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 21.08.2011 08:00:54 | Computer Name = CM | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{c78aa044-28ee-11d9-b720-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 21.08.2011 08:00:54 | Computer Name = CM | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{c78aa045-28ee-11d9-b720-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 21.08.2011 08:18:04 | Computer Name = CM | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{c78aa044-28ee-11d9-b720-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 21.08.2011 08:18:04 | Computer Name = CM | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{c78aa045-28ee-11d9-b720-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 21.08.2011 08:27:37 | Computer Name = CM | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{c78aa044-28ee-11d9-b720-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 21.08.2011 08:27:37 | Computer Name = CM | Source = VSS | ID = 12289
Description = Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "CreateFileW(\\?\Volume{c78aa045-28ee-11d9-b720-806d6172696f},0xc0000000,0x00000003,...)".
 hr = 0x80070005.
 
Error - 21.08.2011 19:15:27 | Computer Name = CM | Source = Haufe iDesk-Service | ID = 61440
Description = Installation von Produkt PI11282 gescheitert: 1
 
[ System Events ]
Error - 24.08.2011 12:09:39 | Computer Name = CM | Source = Disk | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\Harddisk1\D.
 
Error - 24.08.2011 12:09:40 | Computer Name = CM | Source = Disk | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\Harddisk1\D.
 
Error - 24.08.2011 12:09:42 | Computer Name = CM | Source = Disk | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\Harddisk1\D.
 
Error - 24.08.2011 17:18:50 | Computer Name = CM | Source = Disk | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\Harddisk1\D.
 
Error - 24.08.2011 19:39:40 | Computer Name = CM | Source = Print | ID = 23
Description = Der Drucker Lexmark 640 Series,0 konnte nicht initialisiert werden,
 da der Treiber Lexmark 640 Series nicht gefunden wurde.
 
Error - 25.08.2011 12:01:50 | Computer Name = CM | Source = Print | ID = 23
Description = Der Drucker Lexmark 640 Series,0 konnte nicht initialisiert werden,
 da der Treiber Lexmark 640 Series nicht gefunden wurde.
 
Error - 25.08.2011 14:32:30 | Computer Name = CM | Source = Print | ID = 23
Description = Der Drucker Lexmark 640 Series,0 konnte nicht initialisiert werden,
 da der Treiber Lexmark 640 Series nicht gefunden wurde.
 
Error - 25.08.2011 15:13:37 | Computer Name = CM | Source = Service Control Manager | ID = 7034
Description = Dienst "GMX Firefox Update" wurde unerwartet beendet. Dies ist bereits
 1 Mal passiert.
 
Error - 25.08.2011 15:47:13 | Computer Name = CM | Source = Print | ID = 23
Description = Der Drucker Lexmark 640 Series,0 konnte nicht initialisiert werden,
 da der Treiber Lexmark 640 Series nicht gefunden wurde.
 
Error - 25.08.2011 15:47:13 | Computer Name = CM | Source = Service Control Manager | ID = 7000
Description = Der Dienst "GMX Firefox Update" wurde aufgrund folgenden Fehlers nicht
 gestartet:   %%2
 
 
< End of report >
         
--- --- ---
__________________

 

Themen zu Wurm Cekar.d und trojaner Win32:Injected AZ + Trojan.win32 gen.
ad-aware, antivirus, auswerten, bho, desktop, druck, firefox, google, helper, hijack, hijackthis, hkus\s-1-5-18, internet, internet explorer, langsam, object, problem, remote control, rojaner gefunden, scan, security, software, stick, system, trojaner, trojaner gefunden, viren, warum, windows, windows xp, wurm




Ähnliche Themen: Wurm Cekar.d und trojaner Win32:Injected AZ + Trojan.win32 gen.


  1. 2 Trojaner eingefangen durch E-Mail-Anhänge // Trojan-Banker.Win32.Agent.ubo und Trojan.Win32.Yakes.ghny
    Log-Analyse und Auswertung - 19.07.2015 (28)
  2. Win32:Malware-gen und Trojan.Win32.WinloadSDA.dewcdw und PUA.Win32.Packer.Upx-28 - falsch positive Meldungen?
    Plagegeister aller Art und deren Bekämpfung - 20.09.2014 (1)
  3. Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner)
    Log-Analyse und Auswertung - 16.04.2014 (7)
  4. Win 7 x64: Setup[1].exe (Win32/Injected.F trojan) in Temporary Internet Files und weitere Funde
    Log-Analyse und Auswertung - 16.03.2014 (13)
  5. Kaspersky findet Backdoor.Win32.Zaccess, Trojan-Ransom.Win32.Gimeno, Trojan.Win32.Inject
    Log-Analyse und Auswertung - 01.02.2014 (17)
  6. Windows 8.1: Trojan:Win32/Meredrop, Trojan:Win32/Malagent, Trojan:Win32/Matsnu.L und Worm:Win32/Ainslot.A
    Log-Analyse und Auswertung - 19.01.2014 (5)
  7. Desinfizierung durch Kaspersky nicht möglich: Trojan.Win32.Bromngr.k, HEUR:Trojan.Win32.Generic, Trojan-Downloader.Win32.MultiDL.I
    Plagegeister aller Art und deren Bekämpfung - 28.11.2013 (1)
  8. Verschlüsselungs-Trojaner: Trojan.Win32.Yakes.bshd, Trojan.Win32.Bublik.abyj
    Plagegeister aller Art und deren Bekämpfung - 25.01.2013 (1)
  9. Trojaner auf PC :Trojan.Win32.Jpgiframe!E2/trojan.win32.Generic!BT
    Log-Analyse und Auswertung - 25.07.2012 (1)
  10. Trojaner: Trojan-PSW.Win32.Coced.219 sowie Trojan-BNK.Win32.Keylogger.gen
    Log-Analyse und Auswertung - 24.01.2012 (42)
  11. Trojan:Win32/Alureon.FL | PWS:Win32/Fareit.A | Trojan:Win32/Sirefef.P....Auch MBR infiziert?
    Plagegeister aller Art und deren Bekämpfung - 06.01.2012 (7)
  12. Trojan:Win32/Fakesysdef, Win32/FakeRean und TrojanDownloader:Win32/Karagany.G
    Log-Analyse und Auswertung - 05.01.2012 (2)
  13. trojaner win32: injected -AZ
    Plagegeister aller Art und deren Bekämpfung - 13.02.2011 (65)
  14. Trojan.Win32.Agent.delx ; Trojan-Downloader.Win32.Agent.bvst; HackTool.Win32.Kiser.fb
    Plagegeister aller Art und deren Bekämpfung - 05.01.2010 (3)
  15. Trojan-Spy.Win32.Pophot.gzv / Trojan.Win32.Buzus.alwl / Virus.Win32.Virut.ce
    Plagegeister aller Art und deren Bekämpfung - 19.02.2009 (1)
  16. eventuell noch trojaner? Trojan-PSW.Win32.Delf.cqp, Backdoor.Win32.Poison.jmo
    Log-Analyse und Auswertung - 21.11.2008 (0)
  17. brauch hilfe bei: Win32/Oleloa.gen!, Trojan.Win32.Golid.g, Trojan.Win32.Small.ev
    Plagegeister aller Art und deren Bekämpfung - 29.11.2005 (1)

Zum Thema Wurm Cekar.d und trojaner Win32:Injected AZ + Trojan.win32 gen. - und hier der 2OTL EXTRAS Logfile: Code: Alles auswählen Aufklappen ATTFilter OTL Extras logfile created on: 26.08.2011 01:02:08 - Run 1 OTL by OldTimer - Version 3.2.26.5 Folder = C:\Dokumente - Wurm Cekar.d und trojaner Win32:Injected AZ + Trojan.win32 gen....
Archiv
Du betrachtest: Wurm Cekar.d und trojaner Win32:Injected AZ + Trojan.win32 gen. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.