![]() |
|
Log-Analyse und Auswertung: Trojaner: TAN-Abfrage beim Targobank-OnlinebankingWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
|
![]() | #1 |
![]() ![]() | ![]() Trojaner: TAN-Abfrage beim Targobank-Onlinebanking hier der Link: https://www.virustotal.com/file/17592e1c52f1a65b5d8611f2fb985bf76d8817ddab324fff793bf9d7510494d1/analysis/1338444917/ Gruß Christian |
![]() | #2 |
/// Malwareteam ![]() ![]() ![]() ![]() | ![]() Trojaner: TAN-Abfrage beim Targobank-Onlinebanking Lösche diese Datei!
__________________Lade mir außerdem die extras.txt von OTL hoch, du hast zweimal die OTL:txt gepostet!
__________________ |
![]() | #3 |
![]() ![]() | ![]() Trojaner: TAN-Abfrage beim Targobank-Onlinebanking Datei ist gelöscht, hier ist die extras.txt:
__________________OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 30.05.2012 09:05:40 - Run 1 OTL by OldTimer - Version 3.2.44.0 Folder = C:\Users\***\Desktop Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1,87 Gb Total Physical Memory | 1,14 Gb Available Physical Memory | 60,62% Memory free 3,99 Gb Paging File | 3,04 Gb Available in Paging File | 76,05% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 91,51 Gb Total Space | 42,86 Gb Free Space | 46,83% Space Free | Partition Type: NTFS Drive D: | 20,27 Gb Total Space | 12,50 Gb Free Space | 61,66% Space Free | Partition Type: FAT32 Drive F: | 7,55 Gb Total Space | 6,97 Gb Free Space | 92,30% Space Free | Partition Type: NTFS Computer Name: ***-PC | User Name: *** | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation) https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 ========== Authorized Applications List ========== ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{408444A5-BFCA-4952-A412-806445E6BF46}" = protocol=6 | dir=in | app=c:\users\***\appdata\roaming\dropbox\bin\dropbox.exe | "{5D105FEB-6637-4AA8-82CA-DA71EB63EAAE}" = protocol=17 | dir=in | app=c:\users\***\appdata\roaming\dropbox\bin\dropbox.exe | "TCP Query User{23457CE9-31C6-4A27-BA7C-C225B342485E}C:\program files\nero\nero8\nero showtime\showtime.exe" = protocol=6 | dir=in | app=c:\program files\nero\nero8\nero showtime\showtime.exe | "TCP Query User{282018AE-C646-4178-8576-0DE0E471E35B}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "TCP Query User{4D018B7B-187C-4232-B836-064461CFFC13}C:\program files\java\jre1.6.0_07\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\java.exe | "TCP Query User{5E6110F3-0A34-414B-80EF-719CC8DE46ED}C:\program files\java\jre1.6.0_07\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\java.exe | "TCP Query User{AFF376CB-9A10-479D-B3D1-CD4AE54C4EC8}C:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe | "TCP Query User{B12C791B-B9CD-4D19-8FC3-7572FD4CEAED}C:\users\***\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\***\appdata\roaming\dropbox\bin\dropbox.exe | "TCP Query User{BF72D3AC-816A-40BA-9FD4-866D292E7914}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | "TCP Query User{E35A7FD3-D685-48DB-AD1F-15014007A17D}C:\windows\system32\taskeng.exe" = protocol=6 | dir=in | app=c:\windows\system32\taskeng.exe | "TCP Query User{F2A66624-FE4B-45EE-8AC6-9F8698BE3863}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | "TCP Query User{F35230DF-7655-4748-BE09-A9C98FEC9A42}C:\program files\java\jre1.6.0_06\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.6.0_06\bin\java.exe | "UDP Query User{0A798858-981B-4D9F-A353-CD0C8D89D5CE}C:\program files\java\jre1.6.0_07\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\java.exe | "UDP Query User{1D7CF60E-CE4A-445D-94A5-91823BDA916E}C:\program files\java\jre1.6.0_07\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\bin\java.exe | "UDP Query User{3584B95E-3919-4B37-A239-6D154F29225C}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | "UDP Query User{6B8B7A43-BAFB-4AF4-9289-ED77C4A36B0A}C:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_07\launch4j-tmp\jdownloader.exe | "UDP Query User{71F54F82-0030-466D-9134-0473A711D80B}C:\program files\nero\nero8\nero showtime\showtime.exe" = protocol=17 | dir=in | app=c:\program files\nero\nero8\nero showtime\showtime.exe | "UDP Query User{76DABF9A-4929-4011-B2D2-9B8E4B4D5ACA}C:\program files\java\jre1.6.0_06\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.6.0_06\bin\java.exe | "UDP Query User{8688AB4E-42D7-4E53-8F34-E3D415099351}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | "UDP Query User{A5E2C84E-B48A-4C4E-9DB5-3AFAF8E638E7}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | "UDP Query User{CD4DF72B-7AF2-4441-B622-9ADB757449E1}C:\users\***\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\***\appdata\roaming\dropbox\bin\dropbox.exe | "UDP Query User{DB3B8769-5461-4D42-BD60-1A8FA67BCCAF}C:\windows\system32\taskeng.exe" = protocol=17 | dir=in | app=c:\windows\system32\taskeng.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "{094C28D2-3FE2-417C-AF0B-425FE891F04A}" = Motorola Phone Tools "{0D2E9DCB-9938-475E-B4DD-8851738852FF}" = AIO_Scan "{0FE6B77F-54CD-45ED-BB64-A99477B0A8F1}" = 5600 "{1746EA69-DCB6-4408-B5A5-E75F55439CDF}" = Scan "{179C56A4-F57F-4561-8BBF-F911D26EB435}" = WebReg "{2605461E-AB2E-49F5-8A16-64B7F3595030}" = 5600Trb "{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17 "{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5 "{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6 "{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7 "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works "{3FB39BED-37C8-4E60-8E02-315B8C2B07E3}" = Genesys Logic PC Camera Device "{49F2B650-2D7B-4F59-B33D-346F63776BD3}" = DocProc "{55BFC356-5A7B-482F-A213-9ACFDDFF6037}" = Mouse Driver "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{5943B7F7-678B-477E-9AEE-6E4C6962322B}" = Sparwelt.de Gutschein Alarm "{5BB977A4-E843-4E31-9859-745F442B1031}" = Nero 8 Essentials "{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites "{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder "{67D3F1A0-A1F2-49b7-B9EE-011277B170CD}" = HPProductAssistant "{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder "{7095FD27-37F0-4750-9DE8-D37DC0043706}" = REALTEK RTL8187B Wireless LAN Driver "{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update "{7A7DC702-DEDE-42A8-8722-B3BA724D546F}" = Fax "{7DCBC3D8-8954-491D-A1B9-8C61C563B004}" = 5600_Help "{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder "{895722FE-25FE-4854-95AC-B0C42F9DBEDA}" = REALTEK RTL8187B Wireless LAN Driver "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C6027FD-53DC-446D-BB75-CACD7028A134}" = HP Update "{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System "{95D08F4E-DFC2-4ce3-ACB7-8C8E206217E9}" = MarketResearch "{978C25EE-5777-46e4-8988-732C297CBDBD}" = Status "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9B1FD9CE-0776-4f0b-A6F5-C6AB7B650CDF}" = Destinations "{A36CD345-625C-4d6c-B3E2-76E1248CB451}" = SolutionCenter "{A3B7C670-4A1E-4EE2-950E-C875BC1965D0}" = Copy "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AC76BA86-7AD7-1031-7B44-A81200000003}" = Adobe Reader 8.1.2 - Deutsch "{B727BD4D-0C42-43F7-AC60-4AFBDDC732BD}" = FlexPoints 2.01 "{B74F042E-E1B9-4A5B-8D46-387BB172F0A4}" = Apple Software Update "{B8EF780F-126C-4CF0-AAB2-1B68BF06BA1C}" = Motorola Driver Installation 3.7.0 "{BAD8CA9C-77C0-4663-B00B-A8D3B13C341B}" = Motorola Phone Tools "{BE77A81F-B315-4666-9BF3-AE70C0ADB057}" = BufferChm "{C716522C-3731-4667-8579-40B098294500}" = Toolbox "{C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}" = HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{E06F04B9-45E6-4AC0-8083-85F7515F40F7}" = UnloadSupport "{E09575B2-498D-4C8B-A9D2-623F78574F29}" = AIO_CDB_Software "{E7112940-5F8E-4918-B9FE-251F2F8DC81F}" = AIO_CDB_ProductContext "{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential "{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}" = HPSSupply "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer "{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}" = Update Manager "{FF075778-6E50-47ed-991D-3B07FD4E3250}" = TrayApp "7-Zip" = 7-Zip 4.57 "Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Combined Community Codec Pack_is1" = Combined Community Codec Pack 2008-01-24 "DVD Shrink_is1" = DVD Shrink 3.2 "ESB" = Easy Start Button "FastRenamer_is1" = Fast Renamer 2.0 "Free Studio_is1" = Free Studio version 5.3.3 "HP Imaging Device Functions" = HP Imaging Device Functions 8.0 "HP Solution Center & Imaging Support Tools" = HP Solution Center 8.0 "HPExtendedCapabilities" = HP Customer Participation Program 8.0 "HPOCR" = HP OCR Software 8.0 "InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam "InstallShield_{55BFC356-5A7B-482F-A213-9ACFDDFF6037}" = Mouse Driver "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.61.0.1400 "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "MKV TO AVI CONVERTER_is1" = MKV TO AVI CONVERTER version 3.2 "MKV To AVI With Subtitle_is1" = MKV To AVI With Subtitle version 1.0 "Mozilla Firefox 12.0 (x86 de)" = Mozilla Firefox 12.0 (x86 de) "MozillaMaintenanceService" = Mozilla Maintenance Service "Picasa2" = Picasa 2 "RouterControl" = RouterControl 1.91 "SynTPDeinstKey" = Synaptics Pointing Device Driver "TrueCrypt" = TrueCrypt "VIA Chrome9 HC IGP Family Windows Vista Display" = VIA Display Vista Driver 7.14.14.0019 "VLC media player" = VideoLAN VLC media player 0.8.6h "VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast-Ethernet Adapter "WinAce Archiver" = WinAce Archiver "WinGimp-2.0_is1" = GIMP 2.4.7 "Xvid_is1" = Xvid 1.1.3 final uninstall ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Dropbox" = Dropbox ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 01.04.2012 11:40:19 | Computer Name = ***-PC | Source = WinMgmt | ID = 10 Description = Error - 08.04.2012 15:01:54 | Computer Name = ***-PC | Source = WinMgmt | ID = 10 Description = Error - 13.04.2012 04:45:50 | Computer Name = ***-PC | Source = WinMgmt | ID = 10 Description = Error - 13.04.2012 11:06:10 | Computer Name = ***-PC | Source = WinMgmt | ID = 10 Description = Error - 14.04.2012 06:21:14 | Computer Name = ***-PC | Source = WinMgmt | ID = 10 Description = Error - 15.04.2012 07:05:16 | Computer Name = ***-PC | Source = WinMgmt | ID = 10 Description = Error - 15.04.2012 15:17:14 | Computer Name = ***-PC | Source = WinMgmt | ID = 10 Description = Error - 16.04.2012 09:19:06 | Computer Name = ***-PC | Source = WinMgmt | ID = 10 Description = Error - 16.04.2012 11:10:15 | Computer Name = ***-PC | Source = WinMgmt | ID = 10 Description = Error - 17.04.2012 11:47:20 | Computer Name = ***-PC | Source = WinMgmt | ID = 10 Description = [ System Events ] Error - 29.05.2012 09:55:15 | Computer Name = ***-PC | Source = HTTP | ID = 15016 Description = Error - 29.05.2012 09:56:20 | Computer Name = ***-PC | Source = Dhcp | ID = 1002 Description = Die IP-Adresslease 192.168.178.22 für die Netzwerkkarte mit der Netzwerkadresse 00197003205D wurde durch den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet). Error - 29.05.2012 09:56:47 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7000 Description = Error - 29.05.2012 15:29:33 | Computer Name = ***-PC | Source = HTTP | ID = 15016 Description = Error - 29.05.2012 15:29:41 | Computer Name = ***-PC | Source = Dhcp | ID = 1002 Description = Die IP-Adresslease 192.168.178.22 für die Netzwerkkarte mit der Netzwerkadresse 00197003205D wurde durch den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet). Error - 29.05.2012 15:31:08 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7000 Description = Error - 30.05.2012 01:10:01 | Computer Name = ***-PC | Source = HTTP | ID = 15016 Description = Error - 30.05.2012 01:11:35 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7000 Description = Error - 30.05.2012 02:20:24 | Computer Name = ***-PC | Source = HTTP | ID = 15016 Description = Error - 30.05.2012 02:22:04 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7000 Description = < End of report > [/CODE] |
![]() | #4 |
/// Malwareteam ![]() ![]() ![]() ![]() | ![]() Trojaner: TAN-Abfrage beim Targobank-Onlinebanking Schritt 1: Java update Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.
Schritt 2: Adobe Reader update Dein Adobe Reader ist veraltet. Da einige Schädlinge die Schwachstellen in veralteten Versionen nutzen, werden wir sie aktualisieren.
Schritt 3: VLC-Player update Dein VLC-Player ist veraltet. Um ihn zu aktualisieren, gehe bitte wie folgt vor:
Macht der Rechner noch Probleme?
__________________ Kein Asylrecht für Trojaner! ![]() Proud Member of UNITE Hinweis: Ich bin nur werktags erreichbar! Anfragen über PM werden ignoriert! Du bist zufrieden mit uns? Dann unterstütze das Trojaner-Board! |
![]() | #5 |
![]() ![]() | ![]() Trojaner: TAN-Abfrage beim Targobank-Onlinebanking Das dauert jetzt ein bisschen - Schmalspurhandyinternet sei dank. ![]() Sooo. 1) Java 7 Update 4 installiert, alle früheren Versionen über die Systemsteuerung gelöscht. Unter Systemsteuerung -> Java -> Allgemein -> Temporäre Internetdateien gelöscht. 2) Adobe Reader 10.1.3 installiert, alle früheren Versionen gelöscht. 3) VLC Player Version 2.0.1 installiert, alte Version wurde durch das Update deinstalliert. Gruss Christian Öhm, ist von Deiner Sicht aus die Beseitigung erfolgreich gewesen? Soll ich noch irgendwas abschließendes machen? Gruss Christian Werden heute abend von zuhause aus mal das Banking versuchen - ich gebe dann eine Rückmeldung. Nochmals vielen Dank ! |
![]() | #6 |
![]() ![]() | ![]() Trojaner: TAN-Abfrage beim Targobank-Onlinebanking Lieber Marius, das Online-Banking funktioniert wieder - und es sind auch keine anderen Auffälligkeiten zu bemerken. Nochmal vielen, vielen Dank - auch im Namen meiner Frau - für Deine ausgiebige Hilfe ! Gruß Christian |
![]() | #7 |
/// Malwareteam ![]() ![]() ![]() ![]() | ![]() Trojaner: TAN-Abfrage beim Targobank-Onlinebanking Gerne doch! Schön, dass wir helfen konnten! ![]() Dieses Thema scheint erledigt und wurde aus meinen Abos gelöscht. Solltest du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und ein eigenes Thema erstellen!
__________________ Kein Asylrecht für Trojaner! ![]() Proud Member of UNITE Hinweis: Ich bin nur werktags erreichbar! Anfragen über PM werden ignoriert! Du bist zufrieden mit uns? Dann unterstütze das Trojaner-Board! |
![]() |
Themen zu Trojaner: TAN-Abfrage beim Targobank-Onlinebanking |
.com, administrator, avira, bho, continue, converter, corp./icp, dateisystem, defender, download, ebanking, einloggen, entfernen, excel, explorer, firefox, format, heuristiks/extra, heuristiks/shuriken, home, intranet, logfile, mozilla, mp3, nvidia, nvstor.sys, pdf, plug-in, programme, pup.tool, realtek, registry, searchscopes, software, trojaner, version=1.0, vista |