Trojaner-Board - externe festplatte, kein zugriff auf dateien möglich

ESET

Code:

ESETSmartInstaller@High as downloader log:

all ok

ESETSmartInstaller@High as downloader log:

all ok

esets_scanner_update returned -1 esets_gle=0

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=f433621521ddb74f921705f1f57a45d4

# end=finished

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2011-11-07 04:36:44

# local_time=2011-11-07 05:36:44 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.1.7600 NT 

# compatibility_mode=1792 16777215 100 0 1359051 1359051 0 0

# compatibility_mode=2560 16777215 100 0 0 0 0 0

# compatibility_mode=5893 16776573 100 94 109733 72313654 0 0

# compatibility_mode=8192 67108863 100 0 10208 10208 0 0

# scanned=0

# found=0

# cleaned=0

# scan_time=0

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=f433621521ddb74f921705f1f57a45d4

# end=finished

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2011-11-07 07:37:22

# local_time=2011-11-07 08:37:22 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.1.7600 NT 

# compatibility_mode=1792 16777215 100 0 1359311 1359311 0 0

# compatibility_mode=2560 16777215 100 0 0 0 0 0

# compatibility_mode=5893 16776573 100 94 109993 72313914 0 0

# compatibility_mode=8192 67108863 100 0 10468 10468 0 0

# scanned=377251

# found=23

# cleaned=0

# scan_time=10599

C:\Users\meindirk\AppData\Roaming\1B4.exe        a variant of Win32/Injector.KEB trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\AppData\Roaming\43B5.exe        a variant of Win32/Injector.KEB trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_cryptload.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_jdownloader.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_mobydock.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_rocketdock.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_virtual-clonedrive.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Start Menu\Programs\Startup\wt4.exe        a variant of Win32/Injector.KEB trojan (unable to clean)        00000000000000000000000000000000        I

H:\$RECYCLE.BIN.lnk        Win32/Dorkbot.D worm (unable to clean)        00000000000000000000000000000000        I

H:\Wise Guys.lnk        Win32/Dorkbot.D worm (unable to clean)        00000000000000000000000000000000        I

H:\Filme.lnk        Win32/Dorkbot.D worm (unable to clean)        00000000000000000000000000000000        I

H:\Bibi Mukke.lnk        Win32/Dorkbot.D worm (unable to clean)        00000000000000000000000000000000        I

H:\Fotos.lnk        Win32/Dorkbot.D worm (unable to clean)        00000000000000000000000000000000        I

H:\Dirk Mukke.lnk        Win32/Dorkbot.D worm (unable to clean)        00000000000000000000000000000000        I

H:\Hörbücher.lnk        Win32/Dorkbot.D worm (unable to clean)        00000000000000000000000000000000        I

H:\Black Dagger.lnk        Win32/Dorkbot.D worm (unable to clean)        00000000000000000000000000000000        I

H:\PVR.lnk        Win32/Dorkbot.D worm (unable to clean)        00000000000000000000000000000000        I

H:\Dirk.lnk        Win32/Dorkbot.D worm (unable to clean)        00000000000000000000000000000000        I

H:\Kinderhörbücher.lnk        Win32/Dorkbot.D worm (unable to clean)        00000000000000000000000000000000        I

H:\Dirk\Downloads\SoftonicDownloader_for_german-truck-simulator.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

H:\Dirk\Downloads\SoftonicDownloader_fuer_cryptload.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

H:\Dirk\Downloads\SoftonicDownloader_fuer_virtual-clonedrive(1).exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

H:\Dirk\Downloads\SoftonicDownloader_fuer_virtual-clonedrive.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=f433621521ddb74f921705f1f57a45d4

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2011-12-20 05:42:40

# local_time=2011-12-20 06:42:40 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.1.7600 NT 

# compatibility_mode=1792 16777215 100 0 5049326 5049326 0 0

# compatibility_mode=5893 16776573 100 94 8097 76003929 0 0

# compatibility_mode=8192 67108863 100 0 3700483 3700483 0 0

# scanned=269813

# found=8

# cleaned=0

# scan_time=28902

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_cryptload.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_jdownloader.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_mobydock.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_rocketdock.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_virtual-clonedrive.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\giga\Anno 1404 Venedig Addon\extracted\de-a14v.iso        Win32/Packed.VMProtect.D trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\giga\OMSI The Bus Simulator SKIDROW-sr-omsi\extracted\sr-omsi.iso        a variant of MSIL/TrojanDropper.Agent.HX trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Start Menu\Programs\Startup\wt4.exe        Win32/CoinMiner.I trojan (unable to clean)        00000000000000000000000000000000        I

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=f433621521ddb74f921705f1f57a45d4

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2011-12-20 07:43:50

# local_time=2011-12-20 08:43:50 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=5.1.2600 NT Service Pack 2

# compatibility_mode=1792 16777215 100 0 5078281 5078281 0 0

# compatibility_mode=5893 16776573 100 94 37052 76032884 0 0

# compatibility_mode=8192 67108863 100 0 3729438 3729438 0 0

# scanned=82680

# found=0

# cleaned=0

# scan_time=7216

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=f433621521ddb74f921705f1f57a45d4

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2011-12-21 12:46:29

# local_time=2011-12-21 01:46:29 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.1.7600 NT 

# compatibility_mode=1792 16777215 100 0 5136530 5136530 0 0

# compatibility_mode=5893 16776573 100 94 11627 76091133 0 0

# compatibility_mode=8192 67108863 100 0 3787687 3787687 0 0

# scanned=359805

# found=10

# cleaned=0

# scan_time=10306

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_cryptload.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_jdownloader.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_mobydock.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_rocketdock.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Downloads\SoftonicDownloader_fuer_virtual-clonedrive.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\giga\Anno 1404 Venedig Addon\extracted\de-a14v.iso        Win32/Packed.VMProtect.D trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\giga\OMSI The Bus Simulator SKIDROW-sr-omsi\extracted\sr-omsi.iso        a variant of MSIL/TrojanDropper.Agent.HX trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\meindirk\Start Menu\Programs\Startup\wt4.exe        Win32/CoinMiner.I trojan (unable to clean)        00000000000000000000000000000000        I

C:\_OTL\MovedFiles\12192011_153523\C_Users\meindirk\AppData\Roaming\1B4.exe        Win32/CoinMiner.I trojan (unable to clean)        00000000000000000000000000000000        I

C:\_OTL\MovedFiles\12192011_153523\C_Users\meindirk\AppData\Roaming\43B5.exe        Win32/CoinMiner.I trojan (unable to clean)        00000000000000000000000000000000        I

Malwarebytes

Code:

Malwarebytes' Anti-Malware 1.51.2.1300

www.malwarebytes.org
 

Datenbank Version: 911122103
 

Windows 6.1.7600

Internet Explorer 8.0.7600.16385
 

21.12.2011 10:52:39

mbam-log-2011-12-21 (10-52-39).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|G:\|)

Durchsuchte Objekte: 544552

Laufzeit: 1 Stunde(n), 6 Minute(n), 49 Sekunde(n)
 

Infizierte Speicherprozesse: 0

Infizierte Speichermodule: 0

Infizierte Registrierungsschlüssel: 0

Infizierte Registrierungswerte: 0

Infizierte Dateiobjekte der Registrierung: 0

Infizierte Verzeichnisse: 0

Infizierte Dateien: 0
 

Infizierte Speicherprozesse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung:

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien:

(Keine bösartigen Objekte gefunden)

SUPERAntiSpyware

Code:

SUPERAntiSpyware Scan Log

hxxp://www.superantispyware.com
 

Generated 12/21/2011 at 09:43 AM
 

Application Version : 5.0.1142
 

Core Rules Database Version : 8076

Trace Rules Database Version: 5888
 

Scan type       : Complete Scan

Total Scan Time : 01:01:44
 

Operating System Information

Windows 7 Home Premium 64-bit (Build 6.01.7600)

UAC On - Limited User
 

Memory items scanned      : 551

Memory threats detected   : 0

Registry items scanned    : 72335

Registry threats detected : 0

File items scanned        : 82863

File threats detected     : 5
 

Trojan.Agent/Gen-SoftonicDownloader

        C:\USERS\MEINDIRK\DOWNLOADS\SOFTONICDOWNLOADER_FUER_CRYPTLOAD.EXE

        C:\USERS\MEINDIRK\DOWNLOADS\SOFTONICDOWNLOADER_FUER_ROCKETDOCK.EXE

        C:\USERS\MEINDIRK\DOWNLOADS\SOFTONICDOWNLOADER_FUER_JDOWNLOADER.EXE

        C:\USERS\MEINDIRK\DOWNLOADS\SOFTONICDOWNLOADER_FUER_MOBYDOCK.EXE

        C:\USERS\MEINDIRK\DOWNLOADS\SOFTONICDOWNLOADER_FUER_VIRTUAL-CLONEDRIVE.EXE