Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Silentbanker - flacor.dat

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Alt 13.09.2010, 16:04   #20
Mr.X 1991
 
Silentbanker - flacor.dat - Standard

Silentbanker - flacor.dat



ok
hier das neue log
Code:
ATTFilter
All processes killed
========== OTL ==========
Service stllssvr stopped successfully!
Service stllssvr deleted successfully!
File  C:\Program Files\Common Files\SureThing Shared\stllssvr.exe File not found not found.
Error: No service named RichVideo) Cyberlink RichVideo Service(CRVS was found to stop!
Service\Driver key RichVideo) Cyberlink RichVideo Service(CRVS not found.
File  C:\Program Files\CyberLink\Shared files\RichVideo.exe File not found not found.
Service PLFlash DeviceIoControl Service stopped successfully!
Service PLFlash DeviceIoControl Service deleted successfully!
File  C:\Windows\System32\IoctlSvc.exe File not found not found.
Service NwlnkFwd stopped successfully!
Service NwlnkFwd deleted successfully!
File  C:\Windows\System32\DRIVERS\nwlnkfwd.sys File not found not found.
Service NwlnkFlt stopped successfully!
Service NwlnkFlt deleted successfully!
File  C:\Windows\System32\DRIVERS\nwlnkflt.sys File not found not found.
Service IpInIp stopped successfully!
Service IpInIp deleted successfully!
File  C:\Windows\System32\DRIVERS\ipinip.sys File not found not found.
Service blbdrive stopped successfully!
Service blbdrive deleted successfully!
File  C:\Windows\System32\drivers\blbdrive.sys File not found not found.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel\ not found.
Registry key HKEY_USERS\S-1-5-21-2649846486-4142026674-4246215158-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\\{AEB6717E-7E19-11d0-97EE-00C04FD91972} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\ not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk * deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:DfSDKBt deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2649846486-4142026674-4246215158-1003_Classes\.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2649846486-4142026674-4246215158-1003_Classes\ComFile\ not found.
HKEY_LOCAL_MACHINE\Software\Classes\.com\\|comfile /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-2649846486-4142026674-4246215158-1003_Classes\.exe\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-2649846486-4142026674-4246215158-1003_Classes\exefile\ not found.
HKEY_LOCAL_MACHINE\Software\Classes\.exe\\|exefile /E : value set successfully!
Unable to delete ADS C:\Users\Berkay\Pictures:Roxio EMC Stream .
Unable to delete ADS C:\Users\Berkay\Mix:Roxio EMC Stream .
ADS C:\Users\***\Documents\Videos:Roxio EMC Stream deleted successfully.
ADS C:\Users\***\Documents\My Videos:Roxio EMC Stream deleted successfully.
ADS C:\Users\***\Documents\My Games:Roxio EMC Stream deleted successfully.
ADS C:\Users\***\Documents\Meine empfangenen Dateien:Roxio EMC Stream deleted successfully.
ADS C:\Users\***\Documents\Corel User Files:Roxio EMC Stream deleted successfully.
ADS C:\Users\***\Documents\CCWin:Roxio EMC Stream deleted successfully.
ADS C:\Users\***\Documents\Aufzeichnungen:Roxio EMC Stream deleted successfully.
ADS C:\Users\***\Documents\Adobe Scripts:Roxio EMC Stream deleted successfully.
========== FILES ==========
========== COMMANDS ==========
 
[EMPTYFLASH]
 
User: Administrator
 
User: All Users
 
User: ***
->Flash cache emptied: 11621 bytes
 
User: Besucher
 
User: Default
 
User: Default User
 
User: IUSR_NMPR
 
User: Public
 
User: ***
->Flash cache emptied: 4717 bytes
 
Total Flash Files Cleaned = 0.00 mb
 
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 0 bytes
 
User: All Users
 
User: ***
->Temp folder emptied: 778916778 bytes
->Temporary Internet Files folder emptied: 2303753 bytes
->Java cache emptied: 14 bytes
->FireFox cache emptied: 143520397 bytes
->Flash cache emptied: 0 bytes
 
User: Besucher
->Temp folder emptied: 0 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: IUSR_NMPR
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
->Temp folder emptied: 0 bytes
 
User: ***
->Temp folder emptied: 34455 bytes
->Temporary Internet Files folder emptied: 146985 bytes
->Java cache emptied: 33939971 bytes
->FireFox cache emptied: 19075018 bytes
->Flash cache emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 3221600 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 66087 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 11735068 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 25538169 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 971.00 mb
 
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.12.0 log created on 09132010_165639

Files\Folders moved on Reboot...
File\Folder C:\Users\***\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\VNTGI0Z9\00;tid=20578;tid=17082;buid=088;buaid=711001;rtid=1053400;rtid=1053501;rtid=1057256;rtid=1053496;tile=2;sz=156x60,180x180,180x300,120x600,160x600,180x600;ord=1268686844[1] not found!
File\Folder C:\Users\***\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\VNTGI0Z9\00;tid=20578;tid=17082;buid=088;buaid=711001;rtid=1053400;rtid=1053501;rtid=1057256;rtid=1053496;tile=3;sz=156x60,180x180,180x300,120x600,160x600,180x600;ord=1268686844[1] not found!
File\Folder C:\Users\***\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\VDRGYFRT\00;tid=20578;tid=17082;buid=088;buaid=711001;rtid=1053400;rtid=1053501;rtid=1057256;rtid=1053496;tile=4;sz=156x60,180x180,180x300,120x600,160x600,180x600;ord=1268686810[1] not found!
File\Folder C:\Users\***\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7QXS3LSG\00;tid=20578;tid=17082;buid=088;buaid=711001;rtid=1053400;rtid=1053501;rtid=1057256;rtid=1053496;tile=1;sz=156x60,180x180,180x300,120x600,160x600,180x600;ord=1268686810[1] not found!
File\Folder C:\Users\***\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7QXS3LSG\00;tid=20578;tid=17082;buid=088;buaid=711001;rtid=1053400;rtid=1053501;rtid=1057256;rtid=1053496;tile=1;sz=156x60,180x180,180x300,120x600,160x600,180x600;ord=1268686844[1] not found!
File\Folder C:\Users\***\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7QXS3LSG\00;tid=20578;tid=17082;buid=088;buaid=711001;rtid=1053400;rtid=1053501;rtid=1057256;rtid=1053496;tile=2;sz=156x60,180x180,180x300,120x600,160x600,180x600;ord=1268686810[1] not found!
File\Folder C:\Users\***\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\7QXS3LSG\00;tid=20578;tid=17082;buid=088;buaid=711001;rtid=1053400;rtid=1053501;rtid=1057256;rtid=1053496;tile=3;sz=156x60,180x180,180x300,120x600,160x600,180x600;ord=1268686810[1] not found!
File\Folder C:\Users\***\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5\5JVXMGHM\00;tid=20578;tid=17082;buid=088;buaid=711001;rtid=1053400;rtid=1053501;rtid=1057256;rtid=1053496;tile=4;sz=156x60,180x180,180x300,120x600,160x600,180x600;ord=1268686844[1] not found!
C:\Windows\temp\JET1D8E.tmp moved successfully.

Registry entries deleted on Reboot...
         


 

Themen zu Silentbanker - flacor.dat
0 bytes, ad-watch, adobe, anderes, appdata, banker, datei, dll, dll -, dokumente, einzige, gelöst, guten, hochfahren, hotmail, krieg, mail, meldung, modul, namen, neues, pcs, plug-in, problem, problem gelöst, probleme, programm, roaming, sendet, silentbanker, tracker




Ähnliche Themen: Silentbanker - flacor.dat


  1. Trojaner flacor.dat in Adobe updater, ist er neutralisiert?
    Plagegeister aller Art und deren Bekämpfung - 19.12.2010 (14)
  2. flacor.dat Fehlermeldung - wie bekomme ich sie weg?
    Plagegeister aller Art und deren Bekämpfung - 28.11.2010 (1)
  3. flacor.dat (Backdoor- Trojaner) Log- Dateien
    Plagegeister aller Art und deren Bekämpfung - 10.10.2010 (0)
  4. Check der logfiles nach flacor.dat
    Plagegeister aller Art und deren Bekämpfung - 07.09.2010 (5)
  5. flacor.dat -> System neu aufgesetzt
    Plagegeister aller Art und deren Bekämpfung - 29.08.2010 (1)
  6. Flacor.dat entdeckt
    Plagegeister aller Art und deren Bekämpfung - 20.08.2010 (29)
  7. flacor.dat erwischt - System neu aufsetzen
    Log-Analyse und Auswertung - 17.08.2010 (3)
  8. pc sauber nach flacor.dat?
    Log-Analyse und Auswertung - 14.08.2010 (21)
  9. flacor.dat Problem Trojaner?
    Log-Analyse und Auswertung - 05.08.2010 (8)
  10. Datenrettung bei flacor
    Log-Analyse und Auswertung - 05.08.2010 (3)
  11. Flacor.dat: Richtiges Vorgehen bei Datensicherung etc.
    Plagegeister aller Art und deren Bekämpfung - 30.07.2010 (18)
  12. Trojaner: flacor.dat - Anleitung ausgeführt + Logfiles
    Log-Analyse und Auswertung - 26.07.2010 (4)
  13. flacor.dat - bin ich ihn los?
    Plagegeister aller Art und deren Bekämpfung - 23.07.2010 (4)
  14. FLACOR.DAT -> System neu aufgesetzt -> Logs ok? DANKE!
    Log-Analyse und Auswertung - 20.07.2010 (8)
  15. Fehlermeldung RUNDLL......flacor.dat Malware?
    Plagegeister aller Art und deren Bekämpfung - 23.05.2010 (60)
  16. flacor.dat - Windows fährt herunter
    Log-Analyse und Auswertung - 19.05.2010 (2)
  17. Silentbanker/I wird zu Silentbanker/J
    Plagegeister aller Art und deren Bekämpfung - 08.11.2008 (0)

Zum Thema Silentbanker - flacor.dat - ok hier das neue log Code: Alles auswählen Aufklappen ATTFilter All processes killed ========== OTL ========== Service stllssvr stopped successfully! Service stllssvr deleted successfully! File C:\Program Files\Common Files\SureThing Shared\stllssvr.exe File - Silentbanker - flacor.dat...
Archiv
Du betrachtest: Silentbanker - flacor.dat auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.