![]() |
|
Log-Analyse und Auswertung: [WinXP] Kein Wlan, Firefox, ... (Rapid AntiVirus?!)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #3 |
| ![]() [WinXP] Kein Wlan, Firefox, ... (Rapid AntiVirus?!) gesagt getan.
__________________wieso wird das ding auch nich als wichtiges update anerkannt *arghl* naja, nu isser drauf. btw hier schonma die malewarebytes log falls gebraucht^^ Malwarebytes' Anti-Malware 1.32 Datenbank Version: 1616 Windows 5.1.2600 Service Pack 3 07.01.2009 17:30:48 mbam-log-2009-01-07 (17-30-48).txt Scan-Methode: Vollständiger Scan (C:\|D:\|) Durchsuchte Objekte: 86576 Laufzeit: 22 minute(s), 46 second(s) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 4 Infizierte Registrierungsschlüssel: 22 Infizierte Registrierungswerte: 1 Infizierte Dateiobjekte der Registrierung: 2 Infizierte Verzeichnisse: 0 Infizierte Dateien: 19 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: C:\WINDOWS\system32\ddcyWnoN.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\iogklk.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\khfFywUN.dll (Trojan.Vundo) -> Delete on reboot. C:\WINDOWS\system32\dtprpres.dll (Trojan.Vundo.H) -> Delete on reboot. Infizierte Registrierungsschlüssel: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5a26b173-5e04-4329-b3d9-b16dbbf4bbac} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{5a26b173-5e04-4329-b3d9-b16dbbf4bbac} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b23eb999-dde3-41fc-ad4e-7ab4f5d08ed1} (Trojan.Vundo.H) -> Delete on reboot. HKEY_CLASSES_ROOT\CLSID\{b23eb999-dde3-41fc-ad4e-7ab4f5d08ed1} (Trojan.Vundo.H) -> Delete on reboot. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1ee9ba6a-0389-4d11-ad81-8e60ee0e4f71} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{1ee9ba6a-0389-4d11-ad81-8e60ee0e4f71} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5a26b173-5e04-4329-b3d9-b16dbbf4bbac} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> Delete on reboot. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> Delete on reboot. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\khffywun (Trojan.Vundo) -> Delete on reboot. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b23eb999-dde3-41fc-ad4e-7ab4f5d08ed1} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1ee9ba6a-0389-4d11-ad81-8e60ee0e4f71} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\prunnet (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\xpreapp (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\instkey (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully. Infizierte Registrierungswerte: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{6d794cb4-c7cd-4c6f-bfdc-9b77afbdc02c} (Trojan.Vundo) -> Delete on reboot. Infizierte Dateiobjekte der Registrierung: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\ddcywnon -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\ddcywnon -> Delete on reboot. Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: C:\WINDOWS\system32\iogklk.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\ddcyWnoN.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\NonWycdd.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\NonWycdd.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\bhwogipi.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\ipigowhb.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\dtprpres.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\khfFywUN.dll (Trojan.Vundo) -> Delete on reboot. C:\Dokumente und Einstellungen\Markus\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4HUV8XAN\index[1] (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\fwhiaeub.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\senekahlkdhjfg.dll (Trojan.Seneka) -> Delete on reboot. C:\WINDOWS\system32\senekaiixmlrvk.dll (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\senekajkdbobbi.dll (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\senekadf.dat (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\seneka.dat (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\senekalog.dat (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\seneka.sys (Trojan.Agent) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\senekabhxojrqt.sys (Trojan.Agent) -> Delete on reboot. C:\WINDOWS\system32\msiconf.exe (Trojan.Downloader) -> Quarantined and deleted successfully. das internet geht schonma wieder *juche* :P wie gehn wir weiter vor?^^ |
Themen zu [WinXP] Kein Wlan, Firefox, ... (Rapid AntiVirus?!) |
adobe, anti malware, antivirus, einstellungen, excel, explorer, fehler, firefox, hijack, hijackthis, hkus\s-1-5-18, infizierte, internet, internet explorer, kaputt, kis, monitor, mozilla, problem, scan, software, spyware, system, taskmanager, windows, windows xp, windows xp sp3, wlan |