Ist vermutlich ein Treiberkonflikt. Weiter mit ESET.

Hoi,

Teil 1: Siehe oben wegen MalwareBytes.

Teil 2: Eset.

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=5041f90990a78849a438f52df2ce6878
# engine=14605
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-01 12:44:58
# local_time=2013-08-01 02:44:58 (+0100, Westeuropäische Sommerzeit)
# country="Switzerland"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=3590 16777214 100 90 1707819 194379284 0 0
# scanned=352677
# found=11
# cleaned=0
# scan_time=44368
sh=2710FAE8641C1848FD76CB35A10B166B8AFDCDA7 ft=0 fh=0000000000000000 vn="probably a variant of Win32/Agent.LSUJJUM trojan" ac=I fn="C:\Dokumente und Einstellungen\Craig Hesser Admin\_gsdata_\_saved_\Desktop\ResellRightsPack_1996-2002\IncreaseWebSales1700.zip"
sh=66D4D2F67FADC566861C7F73EA6B33CEF4A36EDF ft=0 fh=0000000000000000 vn="PHP/Kryptik.AB trojan" ac=I fn="C:\Dokumente und Einstellungen\JC\Documents\Gemeinsame Dokumente\Gemeinsame Dokumente\_Gemeinsame Webs\__WordPress\_themes\creativity-bulb-10.zip"
sh=8B718F805E48F5B2CB272328FE8B75283F1A8A85 ft=0 fh=0000000000000000 vn="PHP/Kryptik.AB trojan" ac=I fn="C:\Dokumente und Einstellungen\JC\Documents\Gemeinsame Dokumente\Gemeinsame Dokumente\_Gemeinsame Webs\__WordPress\_themes\creativity-bulb-10\footer.php"
sh=26477E7695A8BC4C87BC2273ED3C4A10E01C38AC ft=0 fh=0000000000000000 vn="PHP/Kryptik.AB trojan" ac=I fn="C:\Dokumente und Einstellungen\JC\Documents\Gemeinsame Dokumente\Gemeinsame Dokumente\_Gemeinsame Webs\__WordPress\_themes\freshy1.0\header.php"
sh=925AB629C608F43906E1107E9446FD11495028F0 ft=0 fh=0000000000000000 vn="PHP/Kryptik.AB trojan" ac=I fn="C:\Dokumente und Einstellungen\JC\Documents\Gemeinsame Dokumente\Gemeinsame Dokumente\_Gemeinsame Webs\__WordPress\_themes\weight control related\healthystyle\template.php"
sh=66D4D2F67FADC566861C7F73EA6B33CEF4A36EDF ft=0 fh=0000000000000000 vn="PHP/Kryptik.AB trojan" ac=I fn="C:\Dokumente und Einstellungen\JC\Documents\Gemeinsame Dokumente\_Gemeinsame Webs\__WordPress\_themes\creativity-bulb-10.zip"
sh=8B718F805E48F5B2CB272328FE8B75283F1A8A85 ft=0 fh=0000000000000000 vn="PHP/Kryptik.AB trojan" ac=I fn="C:\Dokumente und Einstellungen\JC\Documents\Gemeinsame Dokumente\_Gemeinsame Webs\__WordPress\_themes\creativity-bulb-10\footer.php"
sh=26477E7695A8BC4C87BC2273ED3C4A10E01C38AC ft=0 fh=0000000000000000 vn="PHP/Kryptik.AB trojan" ac=I fn="C:\Dokumente und Einstellungen\JC\Documents\Gemeinsame Dokumente\_Gemeinsame Webs\__WordPress\_themes\freshy1.0\header.php"
sh=925AB629C608F43906E1107E9446FD11495028F0 ft=0 fh=0000000000000000 vn="PHP/Kryptik.AB trojan" ac=I fn="C:\Dokumente und Einstellungen\JC\Documents\Gemeinsame Dokumente\_Gemeinsame Webs\__WordPress\_themes\weight control related\healthystyle\template.php"
sh=2710FAE8641C1848FD76CB35A10B166B8AFDCDA7 ft=0 fh=0000000000000000 vn="probably a variant of Win32/Agent.LSUJJUM trojan" ac=I fn="C:\Dokumente und Einstellungen\JC\Favoriten\_gsdata_\_saved_\Desktop\ResellRightsPack_1996-2002\IncreaseWebSales1700.zip"
sh=E6B19AE6EE1F556C510A4BA25603E8447566B432 ft=0 fh=0000000000000000 vn="probably unknown NewHeur_PE virus" ac=I fn="C:\RECYCLER\S-1-5-21-776561741-1383384898-839522115-1004\Dc198.zip"
         

Teil 3: Security Check

 Results of screen317's Security Check version 0.99.71  
 Windows XP Service Pack 3 x86   
 Internet Explorer 8  
``````````````Antivirus/Firewall Check:`````````````` 
 Norton AntiVirus     
`````````Anti-malware/Other Utilities Check:````````` 
 MVPS Hosts File  
 Out of date HijackThis  installed! 
 Norton Ghost 9.0   
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 HijackThis 2.0.2    
 Java 7 Update 15  
 Java version out of Date! 
 Adobe Flash Player 	11.7.700.224  
 Adobe Reader 10.1.7 Adobe Reader out of Date!  
 Mozilla Firefox (22.0) 
````````Process Check: objlist.exe by Laurent````````  
 Norton ccSvcHst.exe 
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C::  
````````````````````End of Log``````````````````````
         

Eine Note: Die Fragmentation auf dem C-Laufwerk ist meistens in 4 .pst-Dateien von Outlook 2k und die sind riesend gross - zwischen 800MB und 1.5GB. Ich bin am überlegen ob ich die radieren darf (wegen notwendige Informationen).

Grüssli

Jimmy Craig 2