Auswertung hijackthis log-file

menelvagor

Hi,

hier das Ergebnis vom Avenger:

Logfile of The Avenger Version 2.0, (c) by Swandog46
Swandog46's Public Anti-Malware Tools

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!


Error: file "C:\WINDOWS\system32\mUAtULD.dll.vir Cloaked Malware" not found!
Deletion of file "C:\WINDOWS\system32\mUAtULD.dll.vir Cloaked Malware" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\WINDOWS\system32\sdpvaqvl.dll Cloaked Malware" not found!
Deletion of file "C:\WINDOWS\system32\sdpvaqvl.dll Cloaked Malware" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\WINDOWS\system32\spwxxkia.dll Cloaked Malware" not found!
Deletion of file "C:\WINDOWS\system32\spwxxkia.dll Cloaked Malware" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\WINDOWS\system32\xenjrbjf.dll Cloaked Malware" not found!
Deletion of file "C:\WINDOWS\system32\xenjrbjf.dll Cloaked Malware" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Completed script processing.

*******************

Finished! Terminate.

die Ergebnisse vom Registry Search:

1.

Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.5.0

; Results at 20.05.2008 16:46:01 for strings:
; 'c.\windows\system32\muatuld.dll.vir'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS


; End Of The Log...

2.

Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.5.0

; Results at 20.05.2008 16:48:24 for strings:
; 'c:\windows\system32\sdpvaqvl.dll'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS


; End Of The Log...

3.

Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.5.0

; Results at 20.05.2008 16:50:50 for strings:
; 'c:\windows\system32\spwxxkia.dll'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS


; End Of The Log...

4.

Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.5.0

; Results at 20.05.2008 16:53:01 for strings:
; 'c:\windows\system32\xenjrbjf.dll'
; Strings excluded from search:
; (None)
; Search in:
; Registry Keys Registry Values Registry Data
; HKEY_LOCAL_MACHINE HKEY_USERS

beim Prevx CSI kam folgendes heraus:

C:\WINDOWS\system32\mUAtULD.dll.vir Cloaked Malware
C:\WINDOWS\system32\sdpvaqvl.dll Cloaked Malware
C:\WINDOWS\system32\spwxxkia.dll Cloaked Malware
C:\WINDOWS\system32\xenjrbjf.dll Cloaked Malware
C:\Dokumente und Einstellungen\Notti\Desktop\SmitfraudFix..
Malicious Software

neu hinzu kam:

C:\WINDOWS\system32\trjgqxba.dll Cloaked Malware

Mit freundlichen Grüßen

menelvagor
; End Of The Log...

beim