| |
| |||||||
Log-Analyse und Auswertung: TR/Crypt.XPACK.Gen(2) und andere ProblemeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
08.09.2011, 14:36
| #1 |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  TR/Crypt.XPACK.Gen(2) und andere Probleme Dann bitte jetzt CF ausführen: ComboFix Ein Leitfaden und Tutorium zur Nutzung von ComboFix
Combofix darf ausschließlich ausgeführt werden, wenn ein Kompetenzler dies ausdrücklich empfohlen hat!
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
08.09.2011, 15:51
| #2 |
 | TR/Crypt.XPACK.Gen(2) und andere Probleme Hier:
__________________Code:
ATTFilter ComboFix 11-09-08.03 - Ginny 08.09.2011 16:32:56.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.49.1031.18.2815.1626 [GMT 2:00]
ausgeführt von:: c:\users\Ginny\Downloads\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Im Speicher befindliches AV aktiv.
.
.
.
((((((((((((((((((((((( Dateien erstellt von 2011-08-08 bis 2011-09-08 ))))))))))))))))))))))))))))))
.
.
2011-09-08 14:41 . 2011-09-08 14:41 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-09-08 13:40 . 2011-09-08 13:40 -------- d-----w- c:\programdata\WEBREG
2011-09-08 13:37 . 2011-09-08 13:37 -------- d-----w- c:\programdata\HP Product Assistant
2011-09-08 13:36 . 2011-09-08 13:36 -------- d-----w- c:\program files\Hewlett-Packard
2011-09-08 13:36 . 2011-09-08 13:36 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
2011-09-08 13:36 . 2011-09-08 13:36 -------- d-----w- c:\program files\Common Files\HP
2011-09-08 13:34 . 2011-09-08 13:37 -------- d-----w- c:\program files\HP
2011-09-08 13:33 . 2011-09-08 13:33 -------- d-----w- c:\programdata\Hewlett-Packard
2011-09-08 13:33 . 2007-10-20 16:21 278016 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpzpp5mu.dll
2011-09-08 13:31 . 2007-11-08 15:52 271704 ----a-w- c:\windows\system32\hpzids01.dll
2011-09-08 13:31 . 2007-10-20 16:25 117760 ----a-w- c:\windows\system32\hpzll5mu.dll
2011-09-08 13:31 . 2011-09-08 13:32 -------- d-----w- c:\windows\LastGood
2011-09-08 13:30 . 2007-10-30 10:25 372736 ----a-w- c:\windows\system32\hppldcoi.dll
2011-09-08 13:30 . 2007-10-30 10:11 729088 ----a-w- c:\windows\system32\hpowiax7.dll
2011-09-08 13:30 . 2007-10-30 10:25 309760 ----a-w- c:\windows\system32\difxapi.dll
2011-09-08 13:30 . 2007-10-30 10:11 303104 ----a-w- c:\windows\system32\hpovst15.dll
2011-09-08 13:30 . 2007-10-30 10:11 581632 ----a-w- c:\windows\system32\hpotscl6.dll
2011-09-08 13:24 . 2011-09-08 13:40 -------- d-----w- c:\programdata\HP
2011-09-05 22:05 . 2011-09-05 22:05 -------- d-----w- C:\_OTL
2011-09-05 19:26 . 2011-09-05 19:32 -------- d-----w- c:\programdata\Lx_cats
2011-09-05 19:22 . 2011-09-05 19:22 -------- d-----w- C:\logs
2011-09-05 19:22 . 2007-03-16 03:08 113664 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\lxdidrpp.dll
2011-09-05 19:20 . 2007-03-30 14:13 344064 ----a-w- c:\windows\system32\lxdicoin.dll
2011-09-05 19:16 . 2007-02-22 07:13 45056 ----a-w- c:\windows\system32\LXF3PMON.DLL
2011-09-05 19:16 . 2007-02-22 07:12 32768 ----a-w- c:\windows\system32\LXF3FXPU.DLL
2011-09-05 19:16 . 2007-02-22 07:15 12288 ----a-w- c:\windows\system32\LXF3PMRC.DLL
2011-09-05 19:16 . 2006-11-07 15:02 36864 ----a-w- c:\windows\system32\lxf3oem.dll
2011-09-05 19:16 . 2006-05-31 19:51 98345 ----a-w- c:\windows\system32\IMHOST32.DLL
2011-09-05 19:16 . 2006-05-31 19:51 98304 ----a-w- c:\windows\system32\IM31XPNG.DEL
2011-09-05 19:16 . 2006-05-31 19:51 69632 ----a-w- c:\windows\system32\IM31XTIF.DEL
2011-09-05 19:16 . 2006-05-31 19:51 339968 ----a-w- c:\windows\system32\IMGMAN32.DLL
2011-09-05 19:16 . 2006-05-31 19:51 49152 ----a-w- c:\windows\system32\IM31IMG.DIL
2011-09-05 19:16 . 2011-09-05 19:16 -------- d-----w- c:\programdata\FaxCtr
2011-09-05 19:16 . 2011-09-05 19:17 -------- d-----w- c:\program files\Lexmark Fax Solutions
2011-09-05 19:15 . 2011-09-05 19:16 -------- d-----w- c:\program files\Abbyy FineReader 6.0 Sprint
2011-09-05 15:00 . 2011-09-05 15:00 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-09-05 12:09 . 2011-09-05 12:09 -------- d-----w- c:\program files\ESET
2011-09-05 01:46 . 2008-07-17 12:27 380928 ----a-w- c:\windows\ACERSTORE.EXE
2011-09-05 01:46 . 2008-05-09 05:58 49152 ----a-w- c:\windows\INTEROP.IWSHRUNTIMELIBRARY.DLL
2011-09-04 18:16 . 2011-09-04 18:16 -------- d-----w- c:\users\Public\CyberLink
2011-09-04 18:11 . 2011-09-04 18:11 -------- d-----w- c:\program files\Common Files\CyberLink
2011-09-04 18:09 . 2011-09-04 18:08 29480 ----a-w- c:\windows\system32\msxml3a.dll
2011-09-04 17:37 . 2011-07-06 17:52 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-09-04 17:37 . 2011-09-04 17:37 -------- d-----w- c:\programdata\Malwarebytes
2011-09-04 17:37 . 2011-07-06 17:52 22712 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-09-04 17:37 . 2011-09-04 17:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-09-04 17:11 . 2011-09-04 17:11 -------- d-----w- c:\program files\Common Files\Ulead Systems
2011-09-04 17:11 . 2002-07-25 15:06 282624 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\agent.exe
2011-09-04 17:11 . 2011-09-04 17:11 -------- d-----w- c:\program files\Ulead Systems
2011-09-04 17:09 . 2011-09-04 17:12 -------- d-----w- c:\programdata\Ulead Systems
2011-09-04 17:09 . 2003-02-27 14:12 696320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2011-09-04 17:09 . 2002-12-05 12:10 155648 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2011-09-04 17:09 . 2002-12-02 13:22 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2011-09-04 17:09 . 2002-12-02 11:33 57344 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2011-09-04 17:09 . 2002-12-02 11:33 237568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2011-09-04 17:09 . 2011-09-04 17:09 163972 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2011-09-04 17:09 . 2011-09-04 17:09 282756 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2011-09-04 17:01 . 2011-09-04 17:06 -------- d-----w- c:\program files\ICQ7.6
2011-09-04 16:43 . 2011-09-04 16:43 -------- d-----w- c:\program files\FileZilla FTP Client
2011-09-04 16:34 . 2011-09-04 16:34 1138440 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-09-04 16:30 . 2011-07-21 10:11 138192 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-09-04 16:30 . 2011-07-21 10:11 66616 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-09-04 16:30 . 2011-09-04 16:30 -------- d-----w- c:\programdata\Avira
2011-09-04 16:30 . 2011-09-04 16:30 -------- d-----w- c:\program files\Avira
2011-09-04 16:18 . 2006-10-19 08:00 187392 ----a-w- c:\windows\Acer(Normal).scr
2011-09-04 16:18 . 2011-09-04 16:18 -------- d-----w- c:\windows\Acer_Wide
2011-09-04 16:18 . 2011-09-04 16:18 -------- d-----w- c:\program files\Acer Incorporated
2011-09-04 16:18 . 2006-10-19 08:00 187392 ----a-w- c:\windows\Acer(Wide).scr
2011-09-04 16:17 . 2011-09-04 16:21 -------- d-----w- c:\windows\Acer_Normal
2011-09-04 16:13 . 2007-07-17 17:33 368640 ----a-w- c:\windows\system32\CheckD2DSystem.exe
2011-09-04 16:13 . 2006-11-12 09:54 327680 ----a-w- c:\windows\system32\Remove_eRecovery.exe
2011-09-04 16:13 . 2006-11-10 15:27 16384 ----a-w- c:\windows\system32\LauncheRyAgentUser.exe
2011-09-04 16:13 . 2005-12-09 07:12 16384 ----a-w- c:\windows\system32\ClearEvent.exe
2011-09-04 16:10 . 2008-06-26 03:29 801280 ----a-w- c:\windows\system32\NaturalLanguage6.dll
2011-09-04 16:10 . 2008-06-26 01:45 2644480 ----a-w- c:\windows\system32\NlsLexicons0009.dll
2011-09-04 16:10 . 2008-06-26 01:45 12240896 ----a-w- c:\windows\system32\NlsLexicons0007.dll
2011-09-04 16:09 . 2008-04-05 03:34 15360 ----a-w- c:\windows\system32\pacerprf.dll
2011-09-04 16:09 . 2008-04-05 01:21 72192 ----a-w- c:\windows\system32\drivers\pacer.sys
2011-09-04 16:09 . 2008-05-10 03:35 564736 ----a-w- c:\windows\system32\emdmgmt.dll
2011-09-04 16:09 . 2008-04-26 08:26 891448 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-09-04 16:09 . 2008-04-12 03:32 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2011-09-04 16:09 . 2008-04-26 08:25 3549240 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-09-04 16:09 . 2008-04-26 08:25 3600952 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-09-04 16:08 . 2008-05-08 21:59 90112 ----a-w- c:\windows\system32\wshext.dll
2011-09-04 16:08 . 2008-05-08 21:59 180224 ----a-w- c:\windows\system32\scrobj.dll
2011-09-04 16:08 . 2008-05-08 21:59 172032 ----a-w- c:\windows\system32\scrrun.dll
2011-09-04 16:08 . 2008-05-08 21:58 135168 ----a-w- c:\windows\system32\wshom.ocx
2011-09-04 16:08 . 2008-05-08 21:59 430080 ----a-w- c:\windows\system32\vbscript.dll
2011-09-04 16:08 . 2008-05-08 21:59 155648 ----a-w- c:\windows\system32\wscript.exe
2011-09-04 16:08 . 2008-05-08 21:58 135168 ----a-w- c:\windows\system32\cscript.exe
2011-09-04 16:05 . 2008-02-22 04:57 295936 ----a-w- c:\windows\system32\gdi32.dll
2011-09-04 16:04 . 2008-02-22 02:50 1383424 ----a-w- c:\windows\system32\mshtml.tlb
2011-09-04 16:04 . 2008-02-22 05:01 826880 ----a-w- c:\windows\system32\wininet.dll
2011-09-04 16:04 . 2008-03-08 04:21 1695744 ----a-w- c:\windows\system32\gameux.dll
2011-09-04 16:04 . 2008-03-08 02:08 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2011-09-04 16:03 . 2008-02-29 04:21 2032128 ----a-w- c:\windows\system32\win32k.sys
2011-09-04 16:02 . 2008-02-29 06:35 6656 ----a-w- c:\windows\system32\kbd106n.dll
2011-09-04 16:02 . 2008-02-29 07:14 19000 ----a-w- c:\windows\system32\kd1394.dll
2011-09-04 16:02 . 2008-02-29 06:53 40960 ----a-w- c:\windows\system32\srclient.dll
2011-09-04 16:02 . 2008-02-29 04:12 14848 ----a-w- c:\windows\system32\srdelayed.exe
2011-09-04 16:02 . 2008-02-22 05:05 615992 ----a-w- c:\windows\system32\ci.dll
2011-09-04 16:02 . 2008-02-29 07:11 927288 ----a-w- c:\windows\system32\winresume.exe
2011-09-04 16:02 . 2008-02-29 07:11 988216 ----a-w- c:\windows\system32\winload.exe
2011-09-04 16:02 . 2008-02-29 06:53 378368 ----a-w- c:\windows\system32\srcore.dll
2011-09-04 16:02 . 2008-02-29 06:53 46592 ----a-w- c:\windows\system32\setbcdlocale.dll
2011-09-04 16:02 . 2008-02-29 04:12 318464 ----a-w- c:\windows\system32\rstrui.exe
2011-09-04 16:01 . 2008-03-17 22:18 2413032 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2011-09-04 15:59 . 2011-09-04 15:59 -------- d-----w- c:\programdata\Partner
2011-09-04 15:58 . 2011-09-04 16:20 -------- d-----w- c:\program files\Google
2011-09-04 15:58 . 2011-09-08 13:32 -------- d-----w- c:\users\Ginny
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-09-04 18:08 . 2007-04-11 06:49 505128 ----a-w- c:\windows\system32\msvcp71.dll
2011-09-04 18:08 . 2007-04-11 06:49 353576 ----a-w- c:\windows\system32\msvcr71.dll
2011-09-08 11:07 . 2011-09-04 16:09 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]
2011-09-04 15:59 157168 ----a-w- c:\programdata\Partner\partner.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-03-04 21:38 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"ICQ"="c:\program files\ICQ7.6\ICQ.exe" [2011-08-29 127040]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"mcagent_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2007-08-03 582992]
"PCMMediaSharing"="c:\program files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-01-25 204908]
"RtHDVCpl"="RtHDVCpl.exe" [2007-06-20 4493312]
"Acer Empowering Technology Monitor"="c:\acer\Empowering Technology\SysMonitor.exe" [2008-01-09 326176]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-03-04 526896]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2011-09-04 30192]
"WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-04-21 281768]
"Ulead AutoDetector v2"="c:\program files\Common Files\Ulead Systems\AutoDetector\monitor.exe" [2004-08-27 90112]
"RemoteControl8"="c:\program files\CyberLink\PowerDVD8\PDVD8Serv.exe" [2008-03-20 83240]
"PDVD8LanguageShortcut"="c:\program files\CyberLink\PowerDVD8\Language\Language.exe" [2007-12-14 50472]
"lxdimon.exe"="c:\program files\Lexmark 3500-4500 Series\lxdimon.exe" [2007-05-07 435120]
"lxdiamon"="c:\program files\Lexmark 3500-4500 Series\lxdiamon.exe" [2007-03-05 20480]
"FaxCenterServer"="c:\program files\\Lexmark Fax Solutions\fm3032.exe" [2007-05-07 312240]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-10-14 49152]
"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2007-08-22 80896]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-4-11 535336]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001
.
R2 0174071315239086mcinstcleanup;McAfee Application Installer Cleanup (0174071315239086);c:\windows\TEMP\017407~1.EXE [x]
R2 lxdiCATSCustConnectService;lxdiCATSCustConnectService;c:\windows\system32\spool\DRIVERS\W32X86\3\\lxdiserv.exe [2007-04-26 99248]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~1\mcafee\SITEAD~1\mcsacore.exe [2011-02-16 88176]
R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2011-09-04 30192]
R3 Partner Service;Partner Service;c:\programdata\partner\partner.exe [2011-09-04 110576]
S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-01-25 269448]
S2 Acer TV Share Service;Acer TV Share Service;c:\program files\Acer Arcade Live\Acer TV Share\Kernel\DMSTV\CLMSServer.exe [2008-01-25 269432]
S2 AntiVirSchedulerService;Avira AntiVir Planer;c:\program files\Avira\AntiVir Desktop\sched.exe [2011-04-21 136360]
S2 lxdi_device;lxdi_device;c:\windows\system32\lxdicoms.exe [2007-04-26 517040]
S3 OmniTV;Cx2388x AvStream Video Capture;c:\windows\system32\DRIVERS\OmniTV.sys [2007-04-25 221184]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 38842063
*Deregistered* - 38842063
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Inhalt des "geplante Tasks" Ordners
.
2007-04-11 c:\windows\Tasks\McDefragTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2007-04-11 13:10]
.
2007-04-11 c:\windows\Tasks\McQcTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2007-04-11 13:10]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp32&d=0911&m=al_5100_/_vl410
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=1&o=vp32&d=0911&m=al_5100_/_vl410
IE: {{7644E42D-B096-457F-8B5B-901238FC81AE} - c:\program files\ICQ7.6\ICQ.exe
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Ginny\AppData\Roaming\Mozilla\Firefox\Profiles\133lrii3.default\
FF - prefs.js: browser.startup.homepage - www.web.de
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-Apanel - c:\acersw\config\SetApanel.cmd
HKLM-Run-eRecoveryService - (no file)
HKLM-Run-Acer Tour Reminder - c:\acer\AcerTour\Reminder.exe
HKU-Default-RunOnce-KeApplet - c:\windows\TEMP\ke64klfsh.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2011-09-08 16:41
Windows 6.0.6001 Service Pack 1 NTFS
.
Scanne versteckte Prozesse...
.
Scanne versteckte Autostarteinträge...
.
Scanne versteckte Dateien...
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'Explorer.exe'(5100)
c:\progra~1\mcafee\SITEAD~1\saHook.dll
c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
c:\acer\Empowering Technology\eDataSecurity\x86\sysenv.dll
.
Zeit der Fertigstellung: 2011-09-08 16:43:49
ComboFix-quarantined-files.txt 2011-09-08 14:43
.
Vor Suchlauf: 12 Verzeichnis(se), 269.119.614.976 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 269.074.067.456 Bytes frei
.
- - End Of File - - 4969FE968E8781F55EE93F520DD341E9
|
|
| Themen zu TR/Crypt.XPACK.Gen(2) und andere Probleme |
| andere probleme, antivir, checkliste, datei, explorer, gelöscht, internet, internet explorer, microsoft, mozilla, neu, neue, ordner, phishing, problem, probleme, programm, seite, startseite, system, temp, tr/crypt.xpack.ge, tr/crypt.xpack.gen, tr/crypt.xpack.gen', trojan, viren, virus, windows, zip ordner, öffnet |
Hybrid-Darstellung
