| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Trojaner! Malware bereits ausgeführt, Virus aber noch da?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
27.05.2011, 21:43
| #12 |
 |  Trojaner! Malware bereits ausgeführt, Virus aber noch da? Okay, hab die Toolbars doch noch gelöscht bekommen.. Zwischendurch ist er allerdings einige Male abgestürzt und hat dann erst einen Blauen Bildschirm voller Text angezeigt, den ich mir leider nicht merken konnte, aber ein Ausschnitt ganz am Anfang war, dass es irgendein Problem gibt und dass der Pc neugestartet wird um das Problem zu beseitigen dann stand da: "KERNEL_DATA_IN...._ERROR" (beim ... weiß ich nicht mehr genau was da stand.. sowas wie "PAGE" oder "BASE" oder so?) Aber hier erstmal die LogFile: ========== OTL ========== Service SearchAnonymizer stopped successfully! Service SearchAnonymizer deleted successfully! HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Search Page| /E : value set successfully! HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully! Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found. C:\Program Files\ICQ6Toolbar\ICQToolBar.dll moved successfully. Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}\ not found. File C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll not found. Prefs.js: "ICQ Search" removed from browser.search.defaultenginename Prefs.js: "Search" removed from browser.search.defaultthis.engineName Prefs.js: "" removed from browser.search.defaulturl Prefs.js: "ICQ Search" removed from browser.search.selectedEngine Prefs.js: true removed from browser.search.useDBForOrder Prefs.js: "hxxp://home.sweetim.com" removed from browser.startup.homepage Prefs.js: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=" removed from keyword.URL Prefs.js: "ICQ Search" removed from sweetim.toolbar.previous.browser.search.defaultenginename Prefs.js: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}" removed from sweetim.toolbar.previous.browser.search.defaulturl Prefs.js: "ICQ Search" removed from sweetim.toolbar.previous.browser.search.selectedEngine Prefs.js: "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13" removed from browser.startup.homepage Prefs.js: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.1&q=" removed from sweetim.toolbar.previous.keyword.URL C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\META-INF folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\chrome folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults\preferences folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\defaults folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}\chrome folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\META-INF folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\defaults\preferences folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\defaults folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\components folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\chrome folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\searchplugin folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\META-INF folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\lib folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\defaults folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\components folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\chrome folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5} folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED}\settings folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED}\plugins folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED}\platform\WINNT\plugins folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED}\platform\WINNT\components folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED}\platform\WINNT folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED}\platform folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED}\defaults\preferences folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED}\defaults folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED}\components folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED}\chrome folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{AA994882-F391-4d2e-806F-8908DA4814ED} folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}\chrome folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\zh-TW folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\zh-CN folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\vi-VN folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\vi folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\uk-UA folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\tr-TR folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\sv-SE folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\sr-RS folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\sl-SI folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\sk-SK folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\ru-RU folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\ro-RO folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\pt-PT folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\pt-BR folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\pl-PL folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\nl-NL folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\nl folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\ko-KR folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\ja-JP folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\it-IT folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\id-ID folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\hu-HU folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\hr-HR folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\he-IL folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\he folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\gl-ES folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\fr-FR folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\fr folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\fi-FI folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\fa-IR folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\eu-ES folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\es-ES folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\en-US folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\de-DE folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\da-DK folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\cs-CZ folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\cs folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\ca-ES folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\ca-AD folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\bn-IN folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\ar-SA folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale\ar folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\locale folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\defaults\preferences folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\defaults folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\content folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}\components folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} folder moved successfully. Folder C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}\ not found. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\staged-xpis\{E2883E8F-472F-4fb0-9522-AC9BF37916A7} folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\staged-xpis folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\toolbar_extras@de.yahoo.com\cache folder moved successfully. C:\Users\Maya\AppData\Roaming\mozilla\Firefox\Profiles\e1pomfab.default\extensions\toolbar_extras@de.yahoo.com folder moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\bing.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\conduit.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin-1.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin-10.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin-2.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin-3.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin-4.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin-5.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin-6.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin-7.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin-8.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin-9.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin.gif moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin.src moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\icqplugin.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\kikin-search.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\sweetim.xml moved successfully. C:\Users\Maya\AppData\Roaming\Mozilla\Firefox\Profiles\e1pomfab.default\searchplugins\winamp-search.xml moved successfully. C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\toolbar_extras@de.yahoo.com\searchplugins folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\toolbar_extras@de.yahoo.com\locale\de folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\toolbar_extras@de.yahoo.com\locale folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\toolbar_extras@de.yahoo.com\defaults\preferences folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\toolbar_extras@de.yahoo.com\defaults folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\toolbar_extras@de.yahoo.com\components folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\toolbar_extras@de.yahoo.com\chrome\skin folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\toolbar_extras@de.yahoo.com\chrome\content folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\toolbar_extras@de.yahoo.com\chrome folder moved successfully. C:\Program Files\Mozilla Firefox\extensions\toolbar_extras@de.yahoo.com folder moved successfully. C:\PROGRAM FILES\COMMON FILES\DVDVIDEOSOFT\DLL\FFCONTEXTMENUY\components folder moved successfully. C:\PROGRAM FILES\COMMON FILES\DVDVIDEOSOFT\DLL\FFCONTEXTMENUY\chrome\content folder moved successfully. C:\PROGRAM FILES\COMMON FILES\DVDVIDEOSOFT\DLL\FFCONTEXTMENUY\chrome folder moved successfully. C:\PROGRAM FILES\COMMON FILES\DVDVIDEOSOFT\DLL\FFCONTEXTMENUY folder moved successfully. Folder C:\PROGRAM FILES\PRICEGONG\2.1.0\FF\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}\ not found. C:\Program Files\PriceGong\2.1.0\PriceGongIE.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{201f27d4-3704-41d6-89c1-aa35e39143ed}\ not found. File C:\Program Files\AskBarDis\bar\bin\askBar.dll not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8e41e543-e069-4197-8608-e8b4c2f75747}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8e41e543-e069-4197-8608-e8b4c2f75747}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E601996F-E400-41CA-804B-CD6373A7EEE2}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E601996F-E400-41CA-804B-CD6373A7EEE2}\ deleted successfully. C:\Program Files\kikin\ie_kikin.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}\ not found. File C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{3041d03e-fd4b-44e0-b742-2d9b88305f98} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3041d03e-fd4b-44e0-b742-2d9b88305f98}\ not found. File C:\Program Files\AskBarDis\bar\bin\askBar.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found. File C:\Program Files\ICQ6Toolbar\ICQToolBar.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{8e41e543-e069-4197-8608-e8b4c2f75747} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8e41e543-e069-4197-8608-e8b4c2f75747}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EEE6C35B-6118-11DC-9C72-001320C79847} not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found. File C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found. File C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\{8CEF2A68-1813-FB99-71EC-974C6400131E} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8CEF2A68-1813-FB99-71EC-974C6400131E}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\DW6 deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{0F7195C2-6713-4d93-A1BC-DA5FA33F0A65}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0F7195C2-6713-4d93-A1BC-DA5FA33F0A65}\ not found. File C:\Program Files\kikin\ie_kikin.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}\ not found. C:\Program Files\ICQ7.2\ICQ.exe moved successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully! C:\autoexec.bat moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1ae05757-6dc3-11df-9a5a-001d72d3e6c5}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1ae05757-6dc3-11df-9a5a-001d72d3e6c5}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1ae05757-6dc3-11df-9a5a-001d72d3e6c5}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1ae05757-6dc3-11df-9a5a-001d72d3e6c5}\ not found. File F:\LaunchU3.exe -a not found. C:\Users\Maya\AppData\Roaming\Hiti folder moved successfully. C:\Users\Maya\AppData\Roaming\Dubog folder moved successfully. C:\Users\Maya\Desktop\NPE.exe moved successfully. C:\Users\Maya\AppData\Roaming\SMRBackup162.dat moved successfully. C:\ProgramData\~45080312r moved successfully. C:\ProgramData\~45080312 moved successfully. C:\ProgramData\45080312 moved successfully. C:\Windows\System32\8e5b993f-dec8-addd-530b-73b476200d78.exe moved successfully. C:\Users\Maya\AppData\Roaming\.# folder moved successfully. ADS C:\ProgramData\TEMP:9E22BBE8 deleted successfully. ADS C:\ProgramData\TEMP:FB914833 deleted successfully. ADS C:\ProgramData\TEMP:95B8F7F6 deleted successfully. ADS C:\ProgramData\TEMP:861A898F deleted successfully. ADS C:\ProgramData\TEMP:E36F5B57 deleted successfully. ADS C:\ProgramData\TEMP:A3B8F70C deleted successfully. ADS C:\ProgramData\TEMP:9F683177 deleted successfully. ADS C:\ProgramData\TEMP:580E04D8 deleted successfully. ADS C:\ProgramData\TEMP:8AB6C1D7 deleted successfully. ADS C:\ProgramData\TEMP:8173A019 deleted successfully. ADS C:\ProgramData\TEMP  61F920D deleted successfully.ADS C:\ProgramData\TEMP:B623B5B8 deleted successfully. ADS C:\ProgramData\TEMP:2B99FE60 deleted successfully. ADS C:\ProgramData\TEMP:193426B4 deleted successfully. ADS C:\ProgramData\TEMP:57B4E612 deleted successfully. ADS C:\ProgramData\TEMP:FC420CE6 deleted successfully. ADS C:\ProgramData\TEMP:588B60C7 deleted successfully. ADS C:\ProgramData\TEMP:225C4FFC deleted successfully. ADS C:\ProgramData\TEMP:8140CB50 deleted successfully. ADS C:\ProgramData\TEMP:4F636E25 deleted successfully. ADS C:\ProgramData\TEMP:4CF61E54 deleted successfully. ADS C:\ProgramData\TEMP:793F316E deleted successfully. ADS C:\ProgramData\TEMP:CF61CE5A deleted successfully. ADS C:\ProgramData\TEMP:131C0EE9 deleted successfully. ========== COMMANDS ========== C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully OTL by OldTimer - Version 3.2.23.0 log created on 05272011_223831 |
| Themen zu Trojaner! Malware bereits ausgeführt, Virus aber noch da? |
| alternate, antivir, askbar, autorun, avira, bho, cdburnerxp, conduit, converter, desktop, device driver, error, firefox, format, google, home, intranet, launch, logfile, malware, mozilla, mp3, object, oldtimer, pando media booster, plug-in, popup, realtek, registry, riskware.tool.ck, scan, searchplugins, software, start menu, super, sweetim, symantec, trojaner, tubebox, virus, vista |
Baum-Darstellung