![]() |
| |||||||
Log-Analyse und Auswertung: Trojaner Updater.exeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
| |
| | #1 |
![]() ![]() | Trojaner Updater.exe SystemLook 30.07.11 by jpshortstuff Log created at 13:29 on 23/06/2013 by viktoria Administrator - Elevation successful ========== filefind ========== Searching for "*SoftwareUpdater*" C:\Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe --a---- 60928 bytes [09:38 07/05/2013] [19:49 20/06/2013] 4D62C3A7FA7C4FF08D5015D75124C92A C:\Program Files\SoftwareUpdater\SoftwareUpdater.dll --a---- 168960 bytes [19:48 20/06/2013] [19:48 20/06/2013] 1EF11ADFB5DD20F4F78D5AACC309F633 C:\Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe --a---- 1281536 bytes [19:48 20/06/2013] [19:48 20/06/2013] 99345050F950EAD86726BB63715FEDE6 C:\Windows\Prefetch\SOFTWAREUPDATER.BOOTSTRAPPER.-C1C0EF1D.pf --a---- 95920 bytes [11:19 02/04/2013] [11:28 23/06/2013] 617FE636AAB6DC0C12438BBA8BAA4777 C:\_OTL\MovedFiles\06182013_182330\C_Program Files\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe --a---- 60928 bytes [14:11 05/02/2013] [18:29 08/06/2013] 4D62C3A7FA7C4FF08D5015D75124C92A C:\_OTL\MovedFiles\06182013_182330\C_Program Files\SoftwareUpdater\SoftwareUpdater.dll --a---- 168960 bytes [20:25 24/03/2013] [18:32 08/06/2013] 1EF11ADFB5DD20F4F78D5AACC309F633 C:\_OTL\MovedFiles\06182013_182330\C_Program Files\SoftwareUpdater\SoftwareUpdater.Ui.exe --a---- 1281536 bytes [20:25 24/03/2013] [18:33 08/06/2013] 99345050F950EAD86726BB63715FEDE6 ========== folderfind ========== Searching for "*SoftwareUpdater*" C:\Program Files\SoftwareUpdater d------ [19:48 20/06/2013] C:\_OTL\MovedFiles\06182013_182330\C_Program Files\SoftwareUpdater d------ [20:25 24/03/2013] ========== regfind ========== Searching for "SoftwareUpdater" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Features\832AB1599439F4C48B17F26DC82AF097] "SoftwareUpdater"="ProductFeature" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders] "C:\Program Files\SoftwareUpdater\"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\832AB1599439F4C48B17F26DC82AF097\Features] "SoftwareUpdater"="ProductFeature" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SystemStoreService] "ImagePath"=""C:\Program Files\SoftwareUpdater\SystemStore.exe" -displayname "System Store" -servicename "SystemStoreService"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SystemStoreService] "ImagePath"=""C:\Program Files\SoftwareUpdater\SystemStore.exe" -displayname "System Store" -servicename "SystemStoreService"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SystemStoreService] "ImagePath"=""C:\Program Files\SoftwareUpdater\SystemStore.exe" -displayname "System Store" -servicename "SystemStoreService"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\SystemStoreService] "ImagePath"=""C:\Program Files\SoftwareUpdater\SystemStore.exe" -displayname "System Store" -servicename "SystemStoreService"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\SystemStoreService] "ImagePath"=""C:\Program Files\SoftwareUpdater\SystemStore.exe" -displayname "System Store" -servicename "SystemStoreService"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet006\Services\SystemStoreService] "ImagePath"=""C:\Program Files\SoftwareUpdater\SystemStore.exe" -displayname "System Store" -servicename "SystemStoreService"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet007\Services\SystemStoreService] "ImagePath"=""C:\Program Files\SoftwareUpdater\SystemStore.exe" -displayname "System Store" -servicename "SystemStoreService"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet008\Services\SystemStoreService] "ImagePath"=""C:\Program Files\SoftwareUpdater\SystemStore.exe" -displayname "System Store" -servicename "SystemStoreService"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet009\Services\SystemStoreService] "ImagePath"=""C:\Program Files\SoftwareUpdater\SystemStore.exe" -displayname "System Store" -servicename "SystemStoreService"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet010\Services\SystemStoreService] "ImagePath"=""C:\Program Files\SoftwareUpdater\SystemStore.exe" -displayname "System Store" -servicename "SystemStoreService"" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SystemStoreService] "ImagePath"=""C:\Program Files\SoftwareUpdater\SystemStore.exe" -displayname "System Store" -servicename "SystemStoreService"" -= EOF =- |
| | #2 |
![]() ![]() | Trojaner Updater.exe All processes killed
__________________========== FILES ========== C:\Program Files\SoftwareUpdater folder moved successfully. ========== REGISTRY ========== Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\832AB1599439F4C48B17F26DC82AF097\Features\ deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Malisa ->Temp folder emptied: 0 bytes User: Public ->Temp folder emptied: 0 bytes User: viktoria ->Temp folder emptied: 114232 bytes ->Temporary Internet Files folder emptied: 12818004 bytes ->FireFox cache emptied: 17376084 bytes ->Google Chrome cache emptied: 0 bytes ->Opera cache emptied: 0 bytes ->Flash cache emptied: 840 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 17947876 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 46,00 mb OTL by OldTimer - Version 3.2.69.0 log created on 06282013_230121 Files\Folders moved on Reboot... File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot. PendingFileRenameOperations files... Registry entries deleted on Reboot... SystemLook 30.07.11 by jpshortstuff Log created at 00:25 on 29/06/2013 by viktoria Administrator - Elevation successful ========== filefind ========== Searching for "*Systemlook*" C:\Users\viktoria\AppData\Roaming\Microsoft\Windows\Recent\SystemLook.lnk --a---- 493 bytes [18:37 17/06/2013] [21:18 28/06/2013] 922B9C1BD656782365FD6F258DD95C7C C:\Users\viktoria\Desktop\SystemLook.exe --a---- 139264 bytes [11:28 23/06/2013] [11:28 23/06/2013] DEDB5F9E28EE2C9363E83A2A94BA83B9 C:\Users\viktoria\Desktop\SystemLook.txt --a---- 378 bytes [11:29 23/06/2013] [22:25 28/06/2013] C880D80CB0AFE82A17AB2EE914A1171F ========== folderfind ========== Searching for "*Systemlook*" No folders found. ========== regfind ========== Searching for "Systemlook" [HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\viktoria\Desktop\SystemLook.exe"="SystemLook" [HKEY_USERS\S-1-5-21-3688788964-3904659950-1743870479-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\viktoria\Desktop\SystemLook.exe"="SystemLook" [HKEY_USERS\S-1-5-21-3688788964-3904659950-1743870479-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\viktoria\Desktop\SystemLook.exe"="SystemLook" -= EOF =- SystemLook 30.07.11 by jpshortstuff Log created at 00:25 on 29/06/2013 by viktoria Administrator - Elevation successful ========== filefind ========== Searching for "*Systemlook*" C:\Users\viktoria\AppData\Roaming\Microsoft\Windows\Recent\SystemLook.lnk --a---- 493 bytes [18:37 17/06/2013] [21:18 28/06/2013] 922B9C1BD656782365FD6F258DD95C7C C:\Users\viktoria\Desktop\SystemLook.exe --a---- 139264 bytes [11:28 23/06/2013] [11:28 23/06/2013] DEDB5F9E28EE2C9363E83A2A94BA83B9 C:\Users\viktoria\Desktop\SystemLook.txt --a---- 378 bytes [11:29 23/06/2013] [22:25 28/06/2013] C880D80CB0AFE82A17AB2EE914A1171F ========== folderfind ========== Searching for "*Systemlook*" No folders found. ========== regfind ========== Searching for "Systemlook" [HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\viktoria\Desktop\SystemLook.exe"="SystemLook" [HKEY_USERS\S-1-5-21-3688788964-3904659950-1743870479-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\viktoria\Desktop\SystemLook.exe"="SystemLook" [HKEY_USERS\S-1-5-21-3688788964-3904659950-1743870479-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\Users\viktoria\Desktop\SystemLook.exe"="SystemLook" -= EOF =- |
| | #3 |
![]() ![]() | Trojaner Updater.exe ========== REGISTRY ==========
__________________Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\SystemStoreService\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SystemStoreService\ deleted successfully. ========== COMMANDS ========== Error: Unable to interpret <reboot> in the current context! OTL by OldTimer - Version 3.2.69.0 log created on 06292013_132119 |
| | #4 |
![]() ![]() | Trojaner Updater.exe Nein, es scheint jetzt erstmal so, als ob wieder alles rund laufen würde. Wenn wieder was sein sollte, melde ich mich... Vielen Dank für alles! Nur was mich immernoch wundert ist, dass bei jeden hoch- und runterfahren dies erscheint: "Updates werden Konfiguriert. Abschnitt 3 von 3 - 0% abgeschlossen. Schalten Sie den Rechner nicht aus." Immer wieder! Bekommt mein PC die Updates nicht installiert, oder was ist da los? |
![]() |
| Themen zu Trojaner Updater.exe |
| angemeldet, betriebssystem, brauch, erklären, erklärt, fenster, forum, gespeichert, infos, interne, internet, langsamer, leute, nennt, neu, ordner, problem, programm, sekunden, troja, trojaner, unterschied, updater.exe, wegbekomme, überhaupt |