![]() |
|
Log-Analyse und Auswertung: TR/Dldr.WMA.Wimad.NWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #10 |
![]() | ![]() TR/Dldr.WMA.Wimad.N Wie es aussieht, hat Kaspersky noch was gefunden. Was soll ich damit machen bzw. wie kann ich das Zeug entfernen? Anbei der Report von Kaspersky: Sunday, April 27, 2008 6:25:06 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 27/04/2008 Kaspersky Anti-Virus database records: 727826 Scan Settings Scan using the following antivirus database extended Scan Archives true Scan Mail Bases true Scan Target My Computer C:\ D:\ Scan Statistics Total number of scanned objects 56295 Number of viruses found 3 Number of infected objects 4 Number of suspicious objects 0 Duration of the scan process 00:31:15 Infected Object Name Virus Name Last Action C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-07022007-143831.log Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\User\Application Data\Microsoft\Outlook\Outlook.NK2 Object is locked skipped C:\Documents and Settings\User\Application Data\Microsoft\Outlook\Outlook.srs Object is locked skipped C:\Documents and Settings\User\Application Data\Microsoft\Templates\NormalEmail.dotm Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\call256.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\callmember256.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\chat256.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\chat512.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\chatmember256.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\chatmsg256.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\contactgroup256.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\dyncontent\bundle.dat Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\index2.dat Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\profile16384.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\transfer256.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\transfer512.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\user1024.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\user16384.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\user4096.dbb Object is locked skipped C:\Documents and Settings\User\Application Data\Skype\******\voicemail256.dbb Object is locked skipped C:\Documents and Settings\User\Cookies\index.dat Object is locked skipped C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Object is locked skipped C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Outlook\~Outlook.pst.tmp Object is locked skipped C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\User\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{BF7E386C-0273-4A8A-A615-71D4FFEE3724} Object is locked skipped C:\Documents and Settings\User\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\User\Local Settings\History\History.IE5\MSHist012008042720080428\index.dat Object is locked skipped C:\Documents and Settings\User\Local Settings\Temp\fla14F.tmp Object is locked skipped C:\Documents and Settings\User\Local Settings\Temp\~DFA889.tmp Object is locked skipped C:\Documents and Settings\User\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.Word\~WRS{BA727EA0-3D45-495D-BDA4-AC705AF5F03B}.tmp Object is locked skipped C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.Word\~WRS{CCD85FA6-34ED-4723-8FFA-BC7987195EF5}.tmp Object is locked skipped C:\Documents and Settings\User\NTUSER.DAT Object is locked skipped C:\Documents and Settings\User\ntuser.dat.LOG Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{8D25C2A4-C982-42CB-A0D3-5DF83596AB99}\RP8\change.log Object is locked skipped C:\Temp\nkelOT809.exe/data0002 Infected: Trojan-Downloader.Win32.Small.buy skipped C:\Temp\nkelOT809.exe/data0003 Infected: Trojan-Downloader.Win32.Small.usn skipped C:\Temp\nkelOT809.exe NSIS: infected - 2 skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped C:\WINDOWS\system32\config\OSession.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\pnVes05\pnVes051080.exe Infected: Trojan-Downloader.Win32.VB.ebf skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed. |
Themen zu TR/Dldr.WMA.Wimad.N |
add-on, adobe, antivir, avira, bho, content.ie5, defender, download, excel, explorer, helper, hijack, hijackthis, hkus\s-1-5-18, immer wieder, internet, internet explorer, logfile, object, pdf, problem, programm, shockwave, software, system, toolbars, tr/vundo.gen, trojan, virus, windows, windows defender, windows xp |