ich werde den trojaner dropper.gen nicht los

Marv99

ok also malware hat das hier ausgespuckt:

Malwarebytes' Anti-Malware 1.44
Datenbank Version: 3747
Windows 5.1.2600 Service Pack 3, v.3264
Internet Explorer 6.0.2900.3264

16.02.2010 23:46:53
mbam-log-2010-02-16 (23-46-53).txt

Scan-Methode: Vollständiger Scan (C:\|D:\|)
Durchsuchte Objekte: 193486
Laufzeit: 39 minute(s), 57 second(s)

Infizierte Speicherprozesse: 1
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 5
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 4
Infizierte Verzeichnisse: 3
Infizierte Dateien: 11

Infizierte Speicherprozesse:
C:\Dokumente und Einstellungen\HOMEMB\Anwendungsdaten\SystemProc\lsass.exe (Malware.Packer) -> Unloaded process successfully.

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CURRENT_USER\SOFTWARE\BMIMZMHMFM (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\WS9E3IQBKY (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\rthdbpl (Malware.Packer) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Infizierte Verzeichnisse:
C:\Programme\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D} (Trojan.Swisyn) -> Quarantined and deleted successfully.
C:\Programme\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D}\chrome (Trojan.Swisyn) -> Quarantined and deleted successfully.
C:\Programme\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D}\chrome\content (Trojan.Swisyn) -> Quarantined and deleted successfully.

Infizierte Dateien:
C:\Dokumente und Einstellungen\HOMEMB\Anwendungsdaten\SystemProc\lsass.exe (Malware.Packer) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\HOMEMB\Eigene Dateien\Downloads\Die.Sims.2.Mega.Collection.MultiLanguage-iND\Die.Sims.2.Mega.Collection.MultiLanguage-iND\00 Universal Keygen\fff-ea146.exe (Trojan.Orsam) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{8FF140B7-B6B2-4EC0-806D-2D80DDBF6608}\RP360\A0036618.exe (Malware.Packer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{8FF140B7-B6B2-4EC0-806D-2D80DDBF6608}\RP364\A0036791.exe (Malware.Packer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{8FF140B7-B6B2-4EC0-806D-2D80DDBF6608}\RP364\A0038627.exe (Malware.Packer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{8FF140B7-B6B2-4EC0-806D-2D80DDBF6608}\RP365\A0038694.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{8FF140B7-B6B2-4EC0-806D-2D80DDBF6608}\RP365\A0038719.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Programme\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D}\chrome.manifest (Trojan.Swisyn) -> Quarantined and deleted successfully.
C:\Programme\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D}\install.rdf (Trojan.Swisyn) -> Quarantined and deleted successfully.
C:\Programme\Mozilla Firefox\extensions\{8CE11043-9A15-4207-A565-0C94C42D590D}\chrome\content\timer.xul (Trojan.Swisyn) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\h@tkeysh@@k.dll (Trojan.Agent) -> Quarantined and deleted successfully.


bei C:\Programme\Gemeinsame Dateien\BOONTY Shared\Service\Boonty.exe
hat virus total das hier ausgespuckt:
Riskware.Win32.BoontyGames!A2
APPL/BoontyGames
Backdoor/Win32.Agent.gen
Application/BoontyGames

sypstemlook hat dann das hier angezeigt:

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 23:56 on 16/02/2010 by HOMEMB (Administrator - Elevation successful)

========== filefind ==========

Searching for "Reboot.exe"
C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Reboot.exe ------ 409088 bytes [01:46 08/07/2008] [10:35 29/12/2006] 91E955E797B9DAE35E455121BAAF3394

========== regfind ==========

Searching for "Reboot.exe"
No data found.

-=End Of File=-


ich hoffe das bringt was brauchbares bei raus^^