| |
| |||||||
Log-Analyse und Auswertung: Trojanisches Pferd TR/Dropper.GenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
19.04.2009, 14:58
| #16 |
 |  Trojanisches Pferd TR/Dropper.Gen Malwarebytes' Anti-Malware 1.36 Datenbank Version: 2009 Windows 6.0.6001 Service Pack 1 19.04.2009 15:25:08 mbam-log-2009-04-19 (15-25-08).txt Scan-Methode: Vollständiger Scan (C:\|D:\|) Durchsuchte Objekte: 216612 Laufzeit: 1 hour(s), 10 minute(s), 31 second(s) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 1 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: C:\Windows\NV_Teilnehmer.exe (Backdoor.Bot) -> Quarantined and deleted successfully. |
|
19.04.2009, 15:00
| #17 |
  | Trojanisches Pferd TR/Dropper.Gen Bitte poste noch ein SUPERAntiSpyware Scan bericht, falls du noch keinen hast, dann downloade dir SASW.
__________________Edit: wie sieht es mit CCleaner aus? Hast du diesen schon erledigt? Wenn nein, dann tu dies bitte jetzt bis keine fehler mehr auftreten.
__________________ |
|
19.04.2009, 15:28
| #18 |
| | Trojanisches Pferd TR/Dropper.Gen sry hab den edit grad erst gesehen, ja habe ich...bis schritt 3 bei HijackThis wo ich irg was fixen musste, wusste ich ncihmehr weiter
__________________ superantispyware läuft gerade durch |
|
19.04.2009, 16:16
| #19 |
| | Trojanisches Pferd TR/Dropper.Gen SUPERAntiSpyware Scan Log SUPERAntiSpyware.com - AntiAdware, AntiSpyware, AntiMalware! Generated 04/19/2009 at 05:06 PM Application Version : 4.26.1000 Core Rules Database Version : 3852 Trace Rules Database Version: 1805 Scan type : Complete Scan Total Scan Time : 00:56:14 Memory items scanned : 672 Memory threats detected : 0 Registry items scanned : 7296 Registry threats detected : 0 File items scanned : 135379 File threats detected : 3 Adware.Tracking Cookie C:\Users\Nico\AppData\Roaming\Microsoft\Windows\Cookies\nico@ad.71i[1].txt C:\Users\Nico\AppData\Roaming\Microsoft\Windows\Cookies\nico@atwola[2].txt Adware.Vundo/Variant-MSFake C:\PROGRAM FILES\NAVILOG1\REG.EXE |
|
19.04.2009, 16:32
| #20 |
| | Trojanisches Pferd TR/Dropper.Gen Lass folgendes laufen: http://www.trojaner-board.de/72020-a...g-zhpdiag.html Bitte das Log davon hier rein. Wenn es zu groß ist lade es bei Materialordner hoch.
__________________ Avira Upgrade 10 ist auf dem Markt! Agressive Einstellung von Avira What goes around comes around!  |
|
19.04.2009, 16:38
| #21 |
| | Trojanisches Pferd TR/Dropper.Gen wie kann ich bei anti vir diesen echtzeitschutz aktivieren?weil jedesmal wenn ich sonst das programm starte kommt "keine rückmeldung" |
|
19.04.2009, 16:40
| #22 |
| | Trojanisches Pferd TR/Dropper.Gen rechtsklick auf das Avira Symbol und dann Antivir Guard aktivieren Häckchen rein. Wenn das nicht geht dann Deinstallation, dann neu downloaden von avira.com, neu installieren.
__________________ Avira Upgrade 10 ist auf dem Markt! Agressive Einstellung von Avira What goes around comes around! |
|
19.04.2009, 16:43
| #23 |
| | Trojanisches Pferd TR/Dropper.GenCode:
ATTFilter Rapport de ZHPDiag v1.18 par Nicolas Coolman Enregistré le 19.04.2009 17:42:13 Platform : Windows Vista (TM) Home Premium (6.0.6001) Service Pack 1 MSIE: Internet Explorer v7.0.6001.18000 MFIE: Mozilla Firefox (3.0.8) ---\\ Processus lancés %ProgramFiles%\Windows Defender\MSASCui.exe RtHDVCpl.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe ---\\ Plugin du navigateur Opera (P1) P1 - OPN:Opera Plugin Navigator - C:\Program Files\Opera\Program\Plugins\libdivx.dll P1 - OPN:Opera Plugin Navigator - C:\Program Files\Opera\Program\Plugins\npdivx32.dll P1 - OPN:Opera Plugin Navigator - C:\Program Files\Opera\Program\Plugins\ssldivx.dll ---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2) F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=explorer.exe ---\\ Pages de démarrage d'Internet Explorer (R0) R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 ---\\ Pages de recherche d'Internet Explorer (R1) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local ---\\ Redirection du fichier Hosts (O1) O1 - Hosts: ::1 localhost ---\\ Browser Helper Objects de navigateur(O2) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll ---\\ Internet Explorer Toolbars (O3) O3 - Toolbar: 1 - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: (no name) - {D0943516-5076-4020-A3B5-AEFAF26AB263} - ---\\ Applications démarrées automatiquement par le registre (O4) O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [] O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: inetcpl.cpl=no ---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8) O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000 ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll O9 - Extra button: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll,103 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFBARH.ICO O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe,1040 O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe,1040 ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab ---\\ Protocole additionnel et piratage de protocole (O18) O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: SABWINLOStartup - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll ---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22) O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP O40 - ASIC: Internet Explorer - {26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig O40 - ASIC: Browser Customizations - {60B49E34-C7CC-11D0-8953-00A0C90347FF} - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP O40 - ASIC: Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - (not file) O40 - ASIC: (no name) - {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - (not file) O40 - ASIC: Microsoft Windows Media Player 11.0 - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\System32\wmpdxm.dll O40 - ASIC: .NET Framework - {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - (not file) O40 - ASIC: Themes Setup - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - C:\Windows\system32\regsvr32.exe /s /n /i:/UserInstall C:\Windows\system32\themeui.dll O40 - ASIC: Offline Browsing Pack - {3af36230-a269-11d1-b5bf-0000f8051515} - (not file) O40 - ASIC: Microsoft Windows Mail 7 - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE O40 - ASIC: (no name) - {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - (not file) O40 - ASIC: DirectDrawEx - {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - (not file) O40 - ASIC: Internet Explorer Help - {45ea75a0-a269-11d1-b5bf-0000f8051515} - (not file) O40 - ASIC: Microsoft Windows Script 5.6 - {4f645220-306d-11d2-995d-00c04f98bbc9} - (not file) O40 - ASIC: Internet Explorer Setup Tools - {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Browsing Enhancements - {630b1da0-b465-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Microsoft Windows Media Player - {6BF52A52-394A-11d3-B153-00C04F79FAA6} - C:\Windows\system32\unregmp2.exe /FirstLogon /Shortcuts /RegBrowsers /ResetMUI O40 - ASIC: MSN Site Access - {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - (not file) O40 - ASIC: Address Book 7 - {7790769C-0471-11d2-AF11-00C04FA35D02} - (not file) O40 - ASIC: .NET Framework - {7C028AF8-F614-47B3-82DA-BA94E41B1089} - (not file) O40 - ASIC: Windows Desktop Update - {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll O40 - ASIC: Internet Explorer - {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings O40 - ASIC: (no name) - {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install O40 - ASIC: Dynamic HTML Data Binding - {9381D8F2-0288-11D0-9501-00AA00B911A5} - (not file) O40 - ASIC: Internet Explorer Core Fonts - {C9E9A340-D1F1-11D0-821E-444553540600} - (not file) O40 - ASIC: (no name) - {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - (not file) O40 - ASIC: Adobe Flash Player 9 ActiveX - {D27CDB6E-AE6D-11CF-96B8-444553540000} - C:\Windows\system32\Macromed\Flash\Flash10a.ocx O40 - ASIC: HTML Help - {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - (not file) O40 - ASIC: Active Directory Service Interface - {E92B03AB-B707-11d2-9CBD-0000F87A369E} - (not file) ---\\ Logiciels installés (O42) O42 - Logiciel: Activation Assistant for the 2007 Microsoft Office suites O42 - Logiciel: Adobe Flash Player 10 ActiveX O42 - Logiciel: Adobe Flash Player 10 Plugin O42 - Logiciel: Adobe Shockwave Player 11.5 O42 - Logiciel: Alcatech BPM Studio Professional v4.9.1 O42 - Logiciel: Ask Toolbar O42 - Logiciel: AV Voice Changer Software 6.0 O42 - Logiciel: Avira AntiVir Personal - Free Antivirus O42 - Logiciel: DivX Plus DirectShow Filters O42 - Logiciel: Favorit O42 - Logiciel: Free YouTube to Mp3 Converter version 3.1 O42 - Logiciel: FreeStar Free iPod Video Converter 3.0.6 O42 - Logiciel: FUSSBALL MANAGER 09 O42 - Logiciel: HijackThis 2.0.2 O42 - Logiciel: HLSW v1.2.1.2 O42 - Logiciel: Microsoft Office Home and Student 2007 O42 - Logiciel: Sonic MyDVD-VR O42 - Logiciel: Malwarebytes' Anti-Malware O42 - Logiciel: Messenger Plus! Live & Sponsor (CiD) O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - DEU O42 - Logiciel: Microsoft .NET Framework 3.5 SP1 O42 - Logiciel: Mozilla Firefox (3.0.8) O42 - Logiciel: Mumble and Murmur O42 - Logiciel: Navilog1 3.7.6 O42 - Logiciel: Norton Security Scan (Symantec Corporation) O42 - Logiciel: NVIDIA Drivers O42 - Logiciel: Winamp Remote O42 - Logiciel: Project Torque O42 - Logiciel: PSP Video 9 2.25 O42 - Logiciel: Registry Easy v4.9 O42 - Logiciel: Adobe Flash Player 9 ActiveX O42 - Logiciel: SHOUTcast Source DSP 1.9.0 (remove only) O42 - Logiciel: Counter-Strike: Source O42 - Logiciel: TeamSpeak 2 RC2 O42 - Logiciel: TeamViewer 3 O42 - Logiciel: TeamViewer 4 O42 - Logiciel: TmNationsForever O42 - Logiciel: Tobit.Software clipinc.fx O42 - Logiciel: Uninstall 1.0.0.1 O42 - Logiciel: VLC media player 0.9.9 O42 - Logiciel: Winamp O42 - Logiciel: Winamp Toolbar for Internet Explorer O42 - Logiciel: Windows Live Essentials O42 - Logiciel: WinRAR O42 - Logiciel: Windows Live OneCare O42 - Logiciel: Steam O42 - Logiciel: OpenOffice.org 3.0 O42 - Logiciel: Microsoft .NET Framework 3.5 Language Pack SP1 - deu O42 - Logiciel: Bonjour O42 - Logiciel: Windows Live Fotogalerie O42 - Logiciel: LevelR O42 - Logiciel: Windows Live-Uploadtool O42 - Logiciel: QuickTime O42 - Logiciel: MSVCRT O42 - Logiciel: FIFA 09 O42 - Logiciel: Java(TM) 6 Update 7 O42 - Logiciel: Microsoft Windows OneCare Live v2.5.2900.20 Idcrl Install O42 - Logiciel: Microsoft Works O42 - Logiciel: Windows Live Communications Platform O42 - Logiciel: Junk Mail filter update O42 - Logiciel: Windows Live Anmelde-Assistent O42 - Logiciel: Windows Live Family Safety O42 - Logiciel: TuneUp Utilities 2009 O42 - Logiciel: Microsoft Windows Live OneCare Resources v2.5.2900.20 O42 - Logiciel: Microsoft Office Live Add-in 1.3 O42 - Logiciel: Windows Live Mail O42 - Logiciel: Skype™ 3.8 O42 - Logiciel: iTunes O42 - Logiciel: Windows Live Call O42 - Logiciel: ICQ6.5 O42 - Logiciel: PX Engine O42 - Logiciel: Apple Software Update O42 - Logiciel: NVIDIA PhysX v8.08.01 O42 - Logiciel: Windows Media Player Firefox Plugin O42 - Logiciel: Windows Live Toolbar O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable O42 - Logiciel: VC80CRTRedist - 8.0.50727.762 O42 - Logiciel: DivX Codec O42 - Logiciel: Windows Live Writer O42 - Logiciel: Windows Live Messenger O42 - Logiciel: MSXML 4.0 SP2 (KB954430) O42 - Logiciel: Microsoft Silverlight O42 - Logiciel: Microsoft Sync Framework Runtime Native v1.0 (x86) O42 - Logiciel: DivX Player O42 - Logiciel: GTOneCare O42 - Logiciel: Choice Guard O42 - Logiciel: Microsoft Office Excel MUI (German) 2007 O42 - Logiciel: Update for Microsoft Office Excel 2007 Help (KB957242) O42 - Logiciel: 2007 Microsoft Office Suite Service Pack 1 (SP1) O42 - Logiciel: Microsoft Office PowerPoint MUI (German) 2007 O42 - Logiciel: Microsoft Office Word MUI (German) 2007 O42 - Logiciel: Microsoft Office Proof (German) 2007 O42 - Logiciel: Microsoft Office Proof (English) 2007 O42 - Logiciel: Microsoft Office Proof (French) 2007 O42 - Logiciel: Microsoft Office Proof (Italian) 2007 O42 - Logiciel: Compatibility Pack für 2007 Office System O42 - Logiciel: Microsoft Office Proofing (German) 2007 O42 - Logiciel: Microsoft Office Shared MUI (German) 2007 O42 - Logiciel: Microsoft Office OneNote MUI (German) 2007 O42 - Logiciel: Security Update for Microsoft Office Word 2007 (KB956358) O42 - Logiciel: Security Update for Microsoft Office PowerPoint 2007 (KB951338) O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB954326) O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951944) O42 - Logiciel: Security Update for Microsoft Office system 2007 (KB956828) O42 - Logiciel: Security Update for Microsoft Office Excel 2007 (KB959997) O42 - Logiciel: Update for Office 2007 (KB946691) O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB951550) O42 - Logiciel: Security Update for 2007 Microsoft Office System (KB960003) O42 - Logiciel: Security Update for Microsoft Office OneNote 2007 (KB950130) O42 - Logiciel: Microsoft Protection Service O42 - Logiciel: Microsoft Office PowerPoint Viewer 2007 (German) O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 O42 - Logiciel: Microsoft Search Enhancement Pack O42 - Logiciel: Pro Evolution Soccer 2009 O42 - Logiciel: Adobe Reader 9 - Deutsch O42 - Logiciel: Apple Mobile Device Support O42 - Logiciel: DivX Converter O42 - Logiciel: Spybot - Search & Destroy O42 - Logiciel: DivX Web Player O42 - Logiciel: Microsoft Sync Framework Services Native v1.0 (x86) O42 - Logiciel: MSXML 4.0 SP2 (KB936181) O42 - Logiciel: MSXML 4.0 SP2 (KB941833) O42 - Logiciel: SUPERAntiSpyware Free Edition O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) O42 - Logiciel: Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) O42 - Logiciel: Microsoft Windows OneCare Live v2.5.2900.20 O42 - Logiciel: Norton Security Scan O42 - Logiciel: Roxio WinOnCD 9 Basic O42 - Logiciel: Microsoft Windows OneCare Live AntiSpyware and AntiVirus O42 - Logiciel: Windows Live Sync O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] O42 - Logiciel: Realtek High Definition Audio Driver ---\\ Contenu des dossiers Fichiers Communs (O43) O43 - CFD:Common File Directory - C:\Program Files\Common Files\Adobe O43 - CFD:Common File Directory - C:\Program Files\Common Files\Apple O43 - CFD:Common File Directory - C:\Program Files\Common Files\DESIGNER O43 - CFD:Common File Directory - C:\Program Files\Common Files\DivX Shared O43 - CFD:Common File Directory - C:\Program Files\Common Files\DVDVideoSoft O43 - CFD:Common File Directory - C:\Program Files\Common Files\InstallShield O43 - CFD:Common File Directory - C:\Program Files\Common Files\Java O43 - CFD:Common File Directory - C:\Program Files\Common Files\Logitech O43 - CFD:Common File Directory - C:\Program Files\Common Files\microsoft shared O43 - CFD:Common File Directory - C:\Program Files\Common Files\PX Storage Engine O43 - CFD:Common File Directory - C:\Program Files\Common Files\Roxio Shared O43 - CFD:Common File Directory - C:\Program Files\Common Files\Services O43 - CFD:Common File Directory - C:\Program Files\Common Files\Skype O43 - CFD:Common File Directory - C:\Program Files\Common Files\Sonic Shared O43 - CFD:Common File Directory - C:\Program Files\Common Files\Sony Shared O43 - CFD:Common File Directory - C:\Program Files\Common Files\SpeechEngines O43 - CFD:Common File Directory - C:\Program Files\Common Files\Steam O43 - CFD:Common File Directory - C:\Program Files\Common Files\SureThing Shared O43 - CFD:Common File Directory - C:\Program Files\Common Files\Symantec Shared O43 - CFD:Common File Directory - C:\Program Files\Common Files\System O43 - CFD:Common File Directory - C:\Program Files\Common Files\Tobit O43 - CFD:Common File Directory - C:\Program Files\Common Files\Windows Live O43 - CFD:Common File Directory - C:\Program Files\Common Files\WindowsLiveInstaller O43 - CFD:Common File Directory - C:\Program Files\Common Files\Wise Installation Wizard ---\\ Derniers fichiers modifiés ou crées sous System32 (O44) O44 - LFC:Last File Created - C:\Windows\System32\amxread.dll -->17.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\apilogen.dll -->17.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\authuitu.dll -->20.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\Bar.OCX -->17.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\DataRnvx.dat -->26.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\device.OCX -->25.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\DivX.dll -->27.01.2009 O44 - LFC:Last File Created - C:\Windows\System32\divx_xx07.dll -->27.01.2009 O44 - LFC:Last File Created - C:\Windows\System32\divx_xx0a.dll -->27.01.2009 O44 - LFC:Last File Created - C:\Windows\System32\divx_xx0c.dll -->27.01.2009 O44 - LFC:Last File Created - C:\Windows\System32\divx_xx11.dll -->27.01.2009 O44 - LFC:Last File Created - C:\Windows\System32\dpl100.dll -->27.01.2009 O44 - LFC:Last File Created - C:\Windows\System32\FNTCACHE.DAT -->12.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\HPOINS08.TXT -->24.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\html.iec -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\iasads.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\iasdatastore.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\iashost.exe -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\iasrecst.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\ieaksie.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\iedkcs32.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\ieencode.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\ieframe.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\iertutil.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\ieUnatt.exe -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\jsproxy.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\kernel32.dll -->13.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\lsasrv.dll -->13.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\mrt.exe -->06.04.2009 O44 - LFC:Last File Created - C:\Windows\System32\MSCOMCTL.OCX -->01.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\msfeeds.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\mshtml.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\mshtml.tlb -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\mstime.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\ntkrnlpa.exe -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\ntoskrnl.exe -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\occache.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\perfc007.dat -->19.04.2009 O44 - LFC:Last File Created - C:\Windows\System32\perfc009.dat -->19.04.2009 O44 - LFC:Last File Created - C:\Windows\System32\perfh007.dat -->19.04.2009 O44 - LFC:Last File Created - C:\Windows\System32\perfh009.dat -->19.04.2009 O44 - LFC:Last File Created - C:\Windows\System32\PerfStringBackup.INI -->19.04.2009 O44 - LFC:Last File Created - C:\Windows\System32\printfilterpipelineprxy.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\printfilterpipelinesvc.exe -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\rpcss.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\sdohlp.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\secur32.dll -->13.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\SENXPCTL.OCX -->15.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\sirenacm.dll -->06.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\TuneUpDefragService.exe -->02.04.2009 O44 - LFC:Last File Created - C:\Windows\System32\TUProgSt.exe -->02.04.2009 O44 - LFC:Last File Created - C:\Windows\System32\urlmon.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\usbaaplrc.dll -->26.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\uxtuneup.dll -->20.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\win32k.sys -->09.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\wininet.dll -->03.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\drivers\avgntflt.sys -->13.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\drivers\avipbb.sys -->13.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\drivers\fssfltr.sys -->06.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\drivers\GEARAspiWDM.sys -->19.03.2009 O44 - LFC:Last File Created - C:\Windows\System32\drivers\mbam.sys -->06.04.2009 O44 - LFC:Last File Created - C:\Windows\System32\drivers\mbamswissarmy.sys -->06.04.2009 O44 - LFC:Last File Created - C:\Windows\System32\drivers\ssmdrv.sys -->13.02.2009 O44 - LFC:Last File Created - C:\Windows\System32\drivers\usbaapl.sys -->26.03.2009 ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL ---\\ Déni du service LSA (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages - O48 - LSA:Local Security Authority Notification Packages - ---\\ Trojan Driver Search Data (TDSD) (O52) O52 - TDSD:HKLM\...\Drivers\"timer"="timer.drv" O52 - TDSD:HKLM\...\Drivers32\"vidc.mrle"="msrle32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.msvc"="msvidc32.dll" O52 - TDSD:HKLM\...\Drivers32\"msacm.imaadpcm"="imaadp32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msg711"="msg711.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msgsm610"="msgsm32.acm" O52 - TDSD:HKLM\...\Drivers32\"msacm.msadpcm"="msadp32.acm" O52 - TDSD:HKLM\...\Drivers32\"midimapper"="midimap.dll" O52 - TDSD:HKLM\...\Drivers32\"wavemapper"="msacm32.drv" O52 - TDSD:HKLM\...\Drivers32\"vidc.uyvy"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.yuy2"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.yvyu"="msyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.iyuv"="iyuv_32.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.i420"="i420vfw.dll" O52 - TDSD:HKLM\...\Drivers32\"vidc.yvu9"="tsbyuv.dll" O52 - TDSD:HKLM\...\Drivers32\"msacm.l3acm"="C:\Windows\system32\l3codecp.acm" O52 - TDSD:HKLM\...\Drivers32\"vidc.cvid"="iccvid.dll" O52 - TDSD:HKLM\...\Drivers32\"wave"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"midi"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"mixer"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"aux"="wdmaud.drv" O52 - TDSD:HKLM\...\Drivers32\"msacm.lhacm"="lhacm.acm" O52 - TDSD:HKLM\...\Drivers32\"vidc.yv12"="DivX.dll" O52 - TDSD:HKLM\...\Drivers32\"msacm.siren"="sirenacm.dll" O52 - TDSD:HKLM\...\Drivers32\"msacm.l3codec"="C:\Windows\system32\l3codecp.acm" O52 - TDSD:HKLM\...\Drivers32\"vidc.DIVX"="DivX.dll" End of the scan: |
|
19.04.2009, 16:53
| #24 |
| | Trojanisches Pferd TR/Dropper.Gen Deinstallie die Askbar. Du hast dir Navipromo vom Messenger Plus geholt, bei seiner Installation.
__________________ Avira Upgrade 10 ist auf dem Markt! Agressive Einstellung von Avira What goes around comes around! |
|
19.04.2009, 16:55
| #25 |
| | Trojanisches Pferd TR/Dropper.Gen ok, ist unten... was muss ich noch machen? |
|
19.04.2009, 16:56
| #26 |
| | Trojanisches Pferd TR/Dropper.Gen Was ist unten? Hast du Askbar deinstalliert?
__________________ Avira Upgrade 10 ist auf dem Markt! Agressive Einstellung von Avira What goes around comes around! |
|
19.04.2009, 16:57
| #27 |
| | Trojanisches Pferd TR/Dropper.Gen jap askbar ist deinstalliert |
|
19.04.2009, 17:01
| #28 |
| | Trojanisches Pferd TR/Dropper.Gen Perfekt. Mache bitte einen Kaspersky Online Scan. Hier der Link zum Online Scan von Kaspersky: Kaspersky Online Scanner
__________________ Avira Upgrade 10 ist auf dem Markt! Agressive Einstellung von Avira What goes around comes around! |
|
| Themen zu Trojanisches Pferd TR/Dropper.Gen |
| absolut, antivir, appdata, bereit, bräuchte, dankbar, erklären, icq, jungs, local, pferd, problem, quelle, seite, tagen, total, tr/dropper.gen, troja, trojanisches, trojanisches pferd, umgang, umgehen, unerfahren, users, über icq |
Linear-Darstellung
