![]() |
| |||||||
Log-Analyse und Auswertung: PC von Freundin bleibt hängenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
| | #16 |
![]() | PC von Freundin bleibt hängen Naja was soll man machen =/ Hier ist 4)^^ Blacklight: 11/29/08 00:19:10 [Info]: BlackLight Engine 2.2.1092 initialized 11/29/08 00:19:10 [Info]: OS: 5.1 build 2600 (Service Pack 2) 11/29/08 00:19:10 [Note]: 7019 4 11/29/08 00:19:10 [Note]: 7005 0 11/29/08 00:19:17 [Note]: 7006 0 11/29/08 00:19:17 [Note]: 7011 1664 11/29/08 00:19:17 [Note]: 7035 0 11/29/08 00:19:17 [Note]: 7026 0 11/29/08 00:19:17 [Note]: 7026 0 11/29/08 00:19:19 [Note]: FSRAW library version 1.7.1024 11/29/08 00:22:13 [Note]: 7007 0 Und Malwarebytes Anti-Malware Malwarebytes' Anti-Malware 1.30 Datenbank Version: 1433 Windows 5.1.2600 Service Pack 2 29.11.2008 01:00:10 mbam-log-2008-11-29 (01-00-10).txt Scan-Methode: Vollständiger Scan (C:\|D:\|) Durchsuchte Objekte: 118935 Laufzeit: 26 minute(s), 34 second(s) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 5 Infizierte Registrierungsschlüssel: 12 Infizierte Registrierungswerte: 5 Infizierte Dateiobjekte der Registrierung: 5 Infizierte Verzeichnisse: 5 Infizierte Dateien: 47 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: C:\WINDOWS\system32\gafuyowo.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\tosokevo.dll (Trojan.Vundo) -> Delete on reboot. C:\WINDOWS\system32\nukatojo.dll (Trojan.Vundo) -> Delete on reboot. C:\WINDOWS\system32\wogutopa.dll (Trojan.Vundo) -> Delete on reboot. c:\WINDOWS\system32\dakegopu.dll (Trojan.BHO) -> Delete on reboot. Infizierte Registrierungsschlüssel: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c8ab6c4f-30b5-4251-9062-e9a242f3ab09} (Trojan.BHO.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{c8ab6c4f-30b5-4251-9062-e9a242f3ab09} (Trojan.BHO.H) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{c8ab6c4f-30b5-4251-9062-e9a242f3ab09} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> Delete on reboot. HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{037c7b8a-151a-49e6-baed-cc05fcb50328} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1a93c934-025b-4c3a-b38e-9654a7003239} (Adware.Gamesbar) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully. Infizierte Registrierungswerte: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\447d57b9 (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\muwadayupu (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.BHO) -> Delete on reboot. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.BHO) -> Delete on reboot. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpm474e6425 (Trojan.Agent) -> Delete on reboot. Infizierte Dateiobjekte der Registrierung: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo) -> Data: c:\windows\system32\tosokevo.dll -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo) -> Data: c:\windows\system32\tosokevo.dll -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo) -> Data: system32\tosokevo.dll -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.BHO) -> Data: c:\windows\system32\dakegopu.dll -> Delete on reboot. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.BHO) -> Data: system32\dakegopu.dll -> Delete on reboot. Infizierte Verzeichnisse: C:\Programme\Antivirus 2009 (Rogue.Antivirus 2009) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\ressources (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\ressources\favoris (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\skins (Adware.EGDAccess) -> Quarantined and deleted successfully. Infizierte Dateien: C:\WINDOWS\system32\gafuyowo.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\owoyufag.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\jisagoyi.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\iyogasij.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\laroriwa.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\awiroral.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\tayanage.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\eganayat.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\zuyisuro.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\orusiyuz.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\nukatojo.dll (Trojan.BHO.H) -> Delete on reboot. C:\WINDOWS\system32\tosokevo.dll (Trojan.Vundo) -> Delete on reboot. C:\WINDOWS\system32\wogutopa.dll (Trojan.Vundo) -> Delete on reboot. c:\WINDOWS\system32\dakegopu.dll (Trojan.BHO) -> Delete on reboot. C:\WINDOWS\system32\deluguba.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\pikumivu.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\TDSSbrsr.dll (Trojan.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\system32\TDSSoiqh.dll (Trojan.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\system32\TDSSriqp.dll (Trojan.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\system32\tehunevo.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\bisomasu.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\jibuvuna.dll (Trojan.Vundo) -> Quarantined and deleted successfully. C:\WINDOWS\system32\cmdow.exe (Malware.Tool) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\TDSSpqlt.sys (Trojan.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\Temp\TDSS2a85.tmp (Trojan.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\Temp\TDSS2ce7.tmp (Trojan.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\Temp\TDSS2de1.tmp (Trojan.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\Temp\TDSS2edb.tmp (Trojan.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\Temp\TDSS31c9.tmp (Trojan.TDSS) -> Quarantined and deleted successfully. C:\WINDOWS\Temp\TDSScb78.tmp (Trojan.TDSS) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\InternetGameBox.exe (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\language (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\ressources\AttenteOff.html (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\ressources\AttenteOn.html (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\ressources\configv2_en.xml (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\ressources\configv2_es.xml (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\ressources\configv2_fr.xml (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\ressources\favoris\defaultv2.swf (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\Programme\InternetGameBox\skins\skinv2.skn (Adware.EGDAccess) -> Quarantined and deleted successfully. C:\WINDOWS\system32\TDSSlxwp.dll (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\Temp\TDSS272a.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\Temp\TDSSc723.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temp\TDSSa6a1.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temp\TDSSb8ea.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temp\TDSSb8fa.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temp\TDSSbb3c.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\system32\TDSStkdu.log (Trojan.TDSS) -> Quarantined and deleted successfully. |
| Themen zu PC von Freundin bleibt hängen |
| 1.exe, abgesicherten modus, add-on, adobe, antivir, antivirus, aufgehangen, avgnt, avgnt.exe, avira, besitzer, bho, excel, explorer, festplatte, helper, hijack, hijackthis, hkus\s-1-5-18, hängen, hängt, internet, internet explorer, jusched.exe, konvertieren, launch, mozilla, neu aufgesetzt, neue festplatte, nvidia, pdf-datei, problem, rundll, sicherheitshalber, software, system, taskmanager, toolbars, windows, windows xp, öffnet |