![]() |
|
Antiviren-, Firewall- und andere Schutzprogramme: onlinebanking gesperrt da anscheinend trojaner auf pc?Windows 7 Sämtliche Fragen zur Bedienung von Firewalls, Anti-Viren Programmen, Anti Malware und Anti Trojaner Software sind hier richtig. Dies ist ein Diskussionsforum für Sicherheitslösungen für Windows Rechner. Benötigst du Hilfe beim Trojaner entfernen oder weil du dir einen Virus eingefangen hast, erstelle ein Thema in den oberen Bereinigungsforen. |
![]() | #1 |
| ![]() onlinebanking gesperrt da anscheinend trojaner auf pc? hallo! habe googe schon benutzt und bin in diesem forum heir gelandet. wie ich rauslesen konnte habe ich otl.exe durchlaufen lassen und bekam dieses dabei raus:OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 14.10.2010 15:44:07 - Run 1 OTL by OldTimer - Version 3.2.15.2 Folder = C:\Dokumente und Einstellungen\Alle\Eigene Dateien\Downloads Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 1.023,00 Mb Total Physical Memory | 476,00 Mb Available Physical Memory | 47,00% Memory free 2,00 Gb Paging File | 2,00 Gb Available in Paging File | 79,00% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 48,83 Gb Total Space | 33,75 Gb Free Space | 69,12% Space Free | Partition Type: NTFS Computer Name: PC | User Name: Alle | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 "135:TCP" = 135:TCP:*:Enabled:TCP Port 135 "5000:TCP" = 5000:TCP:*:Enabled:TCP Port 5000 "5001:TCP" = 5001:TCP:*:Enabled:TCP Port 5001 "5002:TCP" = 5002:TCP:*:Enabled:TCP Port 5002 "5003:TCP" = 5003:TCP:*:Enabled:TCP Port 5003 "5004:TCP" = 5004:TCP:*:Enabled:TCP Port 5004 "5005:TCP" = 5005:TCP:*:Enabled:TCP Port 5005 "5006:TCP" = 5006:TCP:*:Enabled:TCP Port 5006 "5007:TCP" = 5007:TCP:*:Enabled:TCP Port 5007 "5008:TCP" = 5008:TCP:*:Enabled:TCP Port 5008 "5009:TCP" = 5009:TCP:*:Enabled:TCP Port 5009 "5010:TCP" = 5010:TCP:*:Enabled:TCP Port 5010 "5011:TCP" = 5011:TCP:*:Enabled:TCP Port 5011 "5012:TCP" = 5012:TCP:*:Enabled:TCP Port 5012 "5013:TCP" = 5013:TCP:*:Enabled:TCP Port 5013 "5014:TCP" = 5014:TCP:*:Enabled:TCP Port 5014 "5015:TCP" = 5015:TCP:*:Enabled:TCP Port 5015 "5016:TCP" = 5016:TCP:*:Enabled:TCP Port 5016 "5017:TCP" = 5017:TCP:*:Enabled:TCP Port 5017 "5018:TCP" = 5018:TCP:*:Enabled:TCP Port 5018 "5019:TCP" = 5019:TCP:*:Enabled:TCP Port 5019 "5020:TCP" = 5020:TCP:*:Enabled:TCP Port 5020 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Programme\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe" = C:\Programme\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite 2 -- (Nokia) "C:\Programme\Gemeinsame Dateien\Nokia\Service Layer\A\nsl_host_process.exe" = C:\Programme\Gemeinsame Dateien\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process -- (Nokia Corporation) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{45DF6D99-666D-41FA-8D62-0E183B6240F3}" = PC Connectivity Solution "{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2 "{7148F0A8-6813-11D6-A77B-00B0D0142010}" = Java 2 Runtime Environment, SE v1.4.2_01 "{749A1EDD-16C2-4C63-B013-D38F0F953973}" = OviMPlatform "{8112C6B3-91E1-4560-8AB9-876DADFA37C5}" = Ovi Desktop Sync Engine "{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}" = MSXML 6.0 Parser "{AC76BA86-7AD7-1031-7B44-000000000001}" = Adobe Reader 6.0 - Deutsch "{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86 "{B8B4446F-87E1-4423-A47A-16832C24A199}" = Nokia Ovi Suite "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack "{EE5B5B24-EEFC-4C8B-BF8B-256D705BAD89}" = Nokia Ovi Suite Software Updater "{F1FDAA01-988C-423F-AC12-0D8F333943FD}" = Nokia Connectivity Cable Driver "504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "C-Media Audio Driver" = C-Media WDM Audio Driver "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "ie8" = Windows Internet Explorer 8 "Lexmark 8300 Series" = Lexmark 8300 Series "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Mozilla Firefox (3.6.10)" = Mozilla Firefox (3.6.10) "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP "Nokia Ovi Suite" = Nokia Ovi Suite "NVIDIA Drivers" = NVIDIA Drivers "PCI Audio Applications" = PCI Audio Applications "PCI Audio Driver" = PCI Audio Driver "Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "Windows XP Service Pack" = Windows XP Service Pack 3 "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0 ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 14.10.2010 03:58:06 | Computer Name = PC | Source = OviSuite | ID = 1 Description = 14/10/2010 09:58:06 (OviSuite) - ERROR - MessagesPlugin, Thread GUI, Line 834, .\Application\ItemsView.cpp, CItemsView::getMessageModel(): m_pMsgFilter is NULL. Could not get message model. Error - 14.10.2010 03:58:06 | Computer Name = PC | Source = OviSuite | ID = 1 Description = 14/10/2010 09:58:06 (OviSuite) - ERROR - MessagesPlugin, Thread GUI, Line 834, .\Application\ItemsView.cpp, CItemsView::getMessageModel(): m_pMsgFilter is NULL. Could not get message model. Error - 14.10.2010 03:58:06 | Computer Name = PC | Source = OviSuite | ID = 1 Description = 14/10/2010 09:58:06 (OviSuite) - ERROR - MessagesPlugin, Thread GUI, Line 834, .\Application\ItemsView.cpp, CItemsView::getMessageModel(): m_pMsgFilter is NULL. Could not get message model. Error - 14.10.2010 03:58:06 | Computer Name = PC | Source = OviSuite | ID = 1 Description = 14/10/2010 09:58:06 (OviSuite) - ERROR - MessagesPlugin, Thread GUI, Line 834, .\Application\ItemsView.cpp, CItemsView::getMessageModel(): m_pMsgFilter is NULL. Could not get message model. Error - 14.10.2010 03:58:07 | Computer Name = PC | Source = OviSuite | ID = 1 Description = 14/10/2010 09:58:07 (OviSuite) - ERROR - DALService, Thread 4, Line 86, .\Application\AOContactCreateOperation.cpp, CAOContactCreateOperation::run(): DAL failure detected: (101) converted from MPlatform error [-2147467261:UnknownError(80004003)] / Create loop / @ CAOContactCreateOperation::run (.\Application\AOContactCreateOperation.cpp:86) Error - 14.10.2010 03:58:07 | Computer Name = PC | Source = OviSuite | ID = 1 Description = 14/10/2010 09:58:07 (OviSuite) - ERROR - DALService, Thread 7, Line 86, .\Application\AOContactCreateOperation.cpp, CAOContactCreateOperation::run(): DAL failure detected: (101) converted from MPlatform error [-2147467261:UnknownError(80004003)] / Create loop / @ CAOContactCreateOperation::run (.\Application\AOContactCreateOperation.cpp:86) Error - 14.10.2010 03:58:07 | Computer Name = PC | Source = OviSuite | ID = 1 Description = 14/10/2010 09:58:07 (OviSuite) - ERROR - DALService, Thread 8, Line 86, .\Application\AOContactCreateOperation.cpp, CAOContactCreateOperation::run(): DAL failure detected: (101) converted from MPlatform error [-2147467261:UnknownError(80004003)] / Create loop / @ CAOContactCreateOperation::run (.\Application\AOContactCreateOperation.cpp:86) Error - 14.10.2010 03:58:08 | Computer Name = PC | Source = OviSuite | ID = 1 Description = 14/10/2010 09:58:08 (OviSuite) - ERROR - CommonWidgets, Thread GUI, Line 491, .\Application\CommonNavigationPane2\CommonNavigationPane.cpp, CCommonNavigationPane::getSelectedIndexes(): Selection model is NULL! Error - 14.10.2010 03:58:10 | Computer Name = PC | Source = OviSuite | ID = 1 Description = 14/10/2010 09:58:10 (OviSuite) - ERROR - CommonWidgets, Thread GUI, Line 491, .\Application\CommonNavigationPane2\CommonNavigationPane.cpp, CCommonNavigationPane::getSelectedIndexes(): Selection model is NULL! Error - 14.10.2010 09:24:29 | Computer Name = PC | Source = VSS | ID = 5013 Description = Volumeschattenkopie-Dienstfehler: Von Schattenkopieautor "RemovableStorageManager" aufgerufene Routine "OpenNtmsSessionW" ist mit Status "0x800708ca" (konvertiert in 0x800423f4) fehlgeschlagen. [ System Events ] Error - 27.09.2010 11:40:39 | Computer Name = PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "Windows Installer" wurde mit folgendem Fehler beendet: %%997 Error - 27.09.2010 11:41:09 | Computer Name = PC | Source = DCOM | ID = 10010 Description = Der Server "{000C101C-0000-0000-C000-000000000046}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error - 27.09.2010 13:29:38 | Computer Name = PC | Source = SideBySide | ID = 16842784 Description = Abhängige Assemblierung "Microsoft.VC90.CRT" konnte nicht gefunden werden. "Last Error": Die referenzierte Assemblierung ist nicht auf dem Computer installiert. Error - 27.09.2010 13:29:38 | Computer Name = PC | Source = SideBySide | ID = 16842811 Description = Resolve Partial Assembly ist für Microsoft.VC90.CRT fehlgeschlagen. Referenzfehlermeldung: Die referenzierte Assemblierung ist nicht auf dem Computer installiert. . Error - 27.09.2010 13:29:38 | Computer Name = PC | Source = SideBySide | ID = 16842811 Description = Generate Activation Context ist für C:\DOKUME~1\Alle\LOKALE~1\Temp\RarSFX0\redist.dll fehlgeschlagen. Referenzfehlermeldung: Der Vorgang wurde erfolgreich beendet. . < End of report > bei antivir wurde nichts gefunden. was heisst das? soll ich den pc formatieren,wenn hiervon onlinebanking betrieben wird? hab ihn erst vor paar wochen formatiert... ![]() was soll ich tun? achso zur geschichte: ist der pc meiner eltern. meine mutter rief mich vorhin an und meinte ihr futzi von der bank hätte ihr dies gesagt... |
Themen zu onlinebanking gesperrt da anscheinend trojaner auf pc? |
.dll, adobe, assembly, avira, desktop, ebanking, einstellungen, error, explorer, fehler, firefox.exe, flash player, format, gesperrt, home, location, logfile, mozilla, nvidia, oldtimer, otl.exe, rarsfx0, registry, routine, rundll, saver, scan, security, server, shell32.dll, software, system restore, tcp, temp, trojaner, udp, windows internet |