trojan dropper.SEH oder W32/Agent.HZTR

   --------------------\\  Lop S&D 4.2.5-0   XP/Vista

   Microsoft® Windows Vista™ Home Premium  ( v6.0.6001 ) Service Pack 1
   X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 5000+ )
   BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
   USER : user ( Administrator )
   BOOT : Normal boot
   Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)
   C:\ (Local Disk) - NTFS - Total:97 Go (Free:69 Go)
   D:\ (Local Disk) - NTFS - Total:135 Go (Free:115 Go)
   E:\ (CD or DVD)
   F:\ (USB)
   G:\ (USB)
   H:\ (USB)
   I:\ (USB)
   J:\ (Local Disk) - NTFS - Total:232 Go (Free:232 Go)
   K:\ (USB)

   "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
   Option : [1] ( 28.02.2009|23:28 )

   [ UAC => 1 ]
 
   --------------------\\  Ordner Verzeichnis unter Local

   [18.07.2008|14:12] C:\Users\user\AppData\Local\Adobe
   [06.05.2008|11:58] C:\Users\user\AppData\Local\Anwendungsdaten 
   [17.07.2008|14:44] C:\Users\user\AppData\Local\Apple
   [22.02.2009|21:23] C:\Users\user\AppData\Local\Apple Computer
   [13.08.2008|22:12] C:\Users\user\AppData\Local\d3d9caps.dat
   [14.11.2008|13:44] C:\Users\user\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
   [27.02.2009|23:15] C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT
   [28.02.2009|21:04] C:\Users\user\AppData\Local\Google
   [24.09.2008|12:15] C:\Users\user\AppData\Local\HP
   [28.02.2009|22:58] C:\Users\user\AppData\Local\IconCache.db
   [28.02.2009|20:28] C:\Users\user\AppData\Local\Microsoft
   [05.02.2009|13:45] C:\Users\user\AppData\Local\Microsoft Games
   [16.05.2008|15:06] C:\Users\user\AppData\Local\Mozilla
   [28.02.2009|23:28] C:\Users\user\AppData\Local\Temp
   [06.05.2008|11:58] C:\Users\user\AppData\Local\Temporary Internet Files 
   [06.05.2008|11:58] C:\Users\user\AppData\Local\Verlauf 
   [16.05.2008|15:06] C:\Users\user\AppData\Local\VirtualStore
   [28.02.2009|20:18] C:\Users\user\AppData\Local\ysvpbm.bat
   [5|Datei(en),] C:\Users\user\AppData\Local\Bytes
   [15|Verzeichnis(se),] C:\Users\user\AppData\Local\Bytes frei
 
   --------------------\\  Geplante Aufgaben unter C:\Windows\Tasks

   [27.02.2009 20:24][--a------] C:\Windows\tasks\Ad-Aware Update (Weekly).job
   [28.02.2009 10:52][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{FD9B0677-31DC-48C0-A9B6-CA07857BA5DD}.job
   [28.02.2009 23:22][--ah-----] C:\Windows\tasks\SA.DAT
   [28.02.2009 23:20][--a------] C:\Windows\tasks\SCHEDLGU.TXT

   --------------------\\  Ordner Verzeichnis unter C:\ProgramData
   
   [26.12.2008|16:32] C:\ProgramData\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
   [18.07.2008|14:10] C:\ProgramData\Adobe
   [06.05.2008|11:55] C:\ProgramData\Anwendungsdaten 
   [17.07.2008|14:44] C:\ProgramData\Apple
   [26.12.2008|16:32] C:\ProgramData\Apple Computer
   [02.11.2006|14:02] C:\ProgramData\Application Data 
   [14.10.2008|15:09] C:\ProgramData\Avira
   [18.12.2008|20:42] C:\ProgramData\Azureus
   [02.11.2006|14:02] C:\ProgramData\Desktop 
   [02.11.2006|14:02] C:\ProgramData\Documents 
   [06.05.2008|11:55] C:\ProgramData\Dokumente 
   [06.05.2008|11:55] C:\ProgramData\Favoriten 
   [02.11.2006|14:02] C:\ProgramData\Favorites 
   [20.06.2008|17:54] C:\ProgramData\fotobuch.de AG
   [28.02.2009|21:03] C:\ProgramData\Google
   [22.05.2008|19:00] C:\ProgramData\Hewlett-Packard
   [22.05.2008|19:22] C:\ProgramData\HP
   [10.07.2008|19:39] C:\ProgramData\HP Product Assistant
   [21.11.2008|19:40] C:\ProgramData\hps
   [22.05.2008|19:05] C:\ProgramData\HPSSUPPLY
   [22.05.2008|19:21] C:\ProgramData\hpzinstall.log
   [28.02.2009|21:21] C:\ProgramData\Lavasoft
   [27.02.2009|23:01] C:\ProgramData\Malwarebytes
   [25.05.2008|15:52] C:\ProgramData\Microsoft
   [16.05.2008|15:05] C:\ProgramData\Mozilla
   [02.11.2006|14:02] C:\ProgramData\Start Menu 
   [06.05.2008|11:55] C:\ProgramData\Startmenü 
   [28.02.2009|21:20] C:\ProgramData\TEMP
   [02.11.2006|14:02] C:\ProgramData\Templates 
   [06.05.2008|11:55] C:\ProgramData\Vorlagen 
   [22.05.2008|19:21] C:\ProgramData\WEBREG
   [18.01.2009|11:48] C:\ProgramData\wmp
   [1|Datei(en),] C:\ProgramData\Bytes
   [33|Verzeichnis(se),] C:\ProgramData\Bytes frei

   --------------------\\  Ordner Verzeichnis unter C:\Program Files

   [18.07.2008|14:10] C:\Program Files\Adobe
   [08.10.2008|19:29] C:\Program Files\Apple Software Update
   [14.10.2008|15:09] C:\Program Files\Avira
   [28.02.2009|21:30] C:\Program Files\Bonjour
   [27.02.2009|23:50] C:\Program Files\CCleaner
   [08.10.2008|17:25] C:\Program Files\Common Files
   [22.02.2009|21:23] C:\Program Files\DivX
   [13.08.2008|23:00] C:\Program Files\EA GAMES
   [20.06.2008|17:54] C:\Program Files\fotobuch.de AG
   [06.05.2008|11:55] C:\Program Files\Gemeinsame Dateien [C:\Program Files\Common Files]
   [28.02.2009|21:03] C:\Program Files\Google
   [22.05.2008|19:02] C:\Program Files\Hewlett-Packard
   [22.05.2008|19:05] C:\Program Files\HP
   [28.02.2009|23:19] C:\Program Files\Internet Explorer
   [26.12.2008|16:32] C:\Program Files\iPod
   [06.08.2008|11:09] C:\Program Files\IrfanView
   [26.12.2008|16:32] C:\Program Files\iTunes
   [18.01.2009|14:59] C:\Program Files\Java
   [28.02.2009|21:21] C:\Program Files\Lavasoft
   [27.02.2009|23:01] C:\Program Files\Malwarebytes' Anti-Malware
   [02.11.2006|13:37] C:\Program Files\Microsoft Games
   [25.05.2008|15:53] C:\Program Files\Microsoft Office
   [25.05.2008|15:53] C:\Program Files\Microsoft Works
   [28.02.2009|23:19] C:\Program Files\Movie Maker
   [06.02.2009|08:08] C:\Program Files\Mozilla Firefox
   [02.11.2006|13:37] C:\Program Files\MSBuild
   [24.05.2008|06:47] C:\Program Files\MSXML 4.0
   [28.02.2009|20:28] C:\Program Files\Navilog1
   [21.11.2008|19:40] C:\Program Files\OnlineFotoservice
   [03.11.2008|19:52] C:\Program Files\OpenOffice.org 3
   [26.12.2008|16:31] C:\Program Files\QuickTime
   [09.05.2008|21:12] C:\Program Files\Real
   [02.11.2006|13:37] C:\Program Files\Reference Assemblies
   [27.02.2009|23:03] C:\Program Files\Trend Micro
   [02.11.2006|14:01] C:\Program Files\Uninstall Information
   [27.02.2009|22:22] C:\Program Files\Vuze
   [28.02.2009|23:19] C:\Program Files\Windows Calendar
   [28.02.2009|23:19] C:\Program Files\Windows Collaboration
   [28.02.2009|23:18] C:\Program Files\Windows Defender
   [28.02.2009|23:19] C:\Program Files\Windows Journal
   [28.02.2009|23:19] C:\Program Files\Windows Mail
   [28.02.2009|23:19] C:\Program Files\Windows Media Player
   [06.05.2008|11:55] C:\Program Files\Windows NT
   [28.02.2009|23:19] C:\Program Files\Windows Photo Gallery
   [28.02.2009|23:19] C:\Program Files\Windows Sidebar
   [04.07.2008|18:29] C:\Program Files\WinRAR
   [0|Datei(en),] C:\Program Files\Bytes
   [48|Verzeichnis(se),] C:\Program Files\Bytes frei

   --------------------\\  Ordner Verzeichnis unter C:\Program Files\Common Files

   [18.07.2008|14:09] C:\Program Files\Common Files\Adobe
   [18.07.2008|14:10] C:\Program Files\Common Files\Adobe AIR
   [26.12.2008|16:32] C:\Program Files\Common Files\Apple
   [22.05.2008|19:02] C:\Program Files\Common Files\Hewlett-Packard
   [22.05.2008|19:03] C:\Program Files\Common Files\HP
   [08.06.2008|21:35] C:\Program Files\Common Files\InstallShield
   [27.09.2008|19:14] C:\Program Files\Common Files\Java
   [25.05.2008|15:53] C:\Program Files\Common Files\microsoft shared
   [16.05.2008|18:51] C:\Program Files\Common Files\PX Storage Engine
   [09.05.2008|21:12] C:\Program Files\Common Files\Real
   [02.11.2006|12:18] C:\Program Files\Common Files\Services
   [02.11.2006|12:18] C:\Program Files\Common Files\SpeechEngines
   [28.02.2009|23:18] C:\Program Files\Common Files\System
   [09.05.2008|21:12] C:\Program Files\Common Files\xing shared
   [0|Datei(en),] C:\Program Files\Common Files\Bytes
   [16|Verzeichnis(se),] C:\Program Files\Common Files\Bytes frei

   --------------------\\  Process

   ( 64 Processes )

   ... OK !

   --------------------\\  Ueberpruefung mit S_Lop

   C:\ProgramData\fotobuch.de AG
 
   --------------------\\  Suche nach Lop Dateien - Ordnern

   C:\Users\user\AppData\Local\Temp\nsj215.tmp
   C:\Users\user\AppData\Local\Temp\nsx2740.tmp
 
   --------------------\\  Suche innerhalb der Registry

   [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 

   [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
 
   ..... OK !

   --------------------\\  Ueberpruefung der Hosts Datei

   Hosts Datei SAUBER


   --------------------\\  Suche nach verborgenen Dateien mit Catchme
 
   catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
   Rootkit scan 2009-02-28 23:28:53
   Windows 6.0.6001 Service Pack 1 NTFS
   scanning hidden processes ...
   scanning hidden files ...
   scan completed successfully
   hidden processes: 0
   hidden files: 0
 
   --------------------\\  Suche nach anderen Infektionen


   Kein anderen Infektionen gefunden !

   [F:42][D:8]-> C:\Users\user\AppData\Local\Temp
   [F:33][D:1]-> C:\Users\user\AppData\Roaming\MICROS~1\Windows\Cookies
   [F:227][D:4]-> C:\Users\user\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
   [F:1][D:1]-> C:\$Recycle.Bin

   1 - "C:\Lop SD\LopR_1.txt" - 28.02.2009|23:30 - Option : [1]

   --------------------\\  Scan beendet um 23:30:55
   [ UAC => 1 ]