Michael_w | 05.01.2012 22:58 | Hi Arne,
dann werde ich morgen die Systempartition formatieren und neu bespielen.
Eine andere Frage: Ich habe die externe Festplatte gecheckt, erst bey Malwarebytes (hat nichts gefunden) und dann nochmal mit ESET.
Da gab es Alarm. Hab den Trojaner nicht gelöscht und kopier hier mal das Logfile rein. Was soll ich jetzt machen, mit ESET löschen? Code:
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=95a1215cc3d2204cae5ef332a0918ef2
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-12-20 07:35:58
# local_time=2011-12-20 08:35:58 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1797 16774142 0 1 71573 71573 0 0
# compatibility_mode=5892 16776638 66 100 78963 161934583 0 0
# compatibility_mode=8192 67108863 100 0 13093 13093 0 0
# scanned=207713
# found=5
# cleaned=0
# scan_time=7902
C:\Users\Mankel\AppData\Local\Temp\msimg32.dll Win32/Sirefef.DB trojan (unable to clean) 00000000000000000000000000000000 I
C:\Windows\System32\drivers\smb.sys Win32/Patched.NBE trojan (unable to clean) 00000000000000000000000000000000 I
C:\Windows\winsxs\x86_microsoft-windows-nbsmb_31bf3856ad364e35_6.0.6002.18005_none_61560a3ff5180c84\smb.sys Win32/Patched.NBE trojan (unable to clean) 00000000000000000000000000000000 I
F:\Program Files\SASCore.exe Win32/Patched.HN trojan (unable to clean) 00000000000000000000000000000000 I
${Memory} a variant of Win32/Sirefef.CH trojan 00000000000000000000000000000000 I
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=95a1215cc3d2204cae5ef332a0918ef2
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-12-29 02:52:13
# local_time=2011-12-29 03:52:13 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1797 16774142 0 1 833523 833523 0 0
# compatibility_mode=5892 16776638 66 100 840913 162696533 0 0
# compatibility_mode=8192 67108863 100 0 775043 775043 0 0
# scanned=205082
# found=4
# cleaned=2
# scan_time=6527
C:\Windows\System32\drivers\smb.sys Win32/Patched.NBE trojan (unable to clean) 00000000000000000000000000000000 I
C:\Windows\winsxs\x86_microsoft-windows-nbsmb_31bf3856ad364e35_6.0.6002.18005_none_61560a3ff5180c84\smb.sys Win32/Patched.NBE trojan (deleted - quarantined) 00000000000000000000000000000000 C
F:\Program Files\SASCore.exe Win32/Patched.HN trojan (cleaned - quarantined) 00000000000000000000000000000000 C
${Memory} a variant of Win32/Sirefef.CH trojan 00000000000000000000000000000000 I
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internet# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=95a1215cc3d2204cae5ef332a0918ef2
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-12-29 03:50:20
# local_time=2011-12-29 04:50:20 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1797 16774142 0 1 843298 843298 0 0
# compatibility_mode=5892 16776638 66 100 850688 162706308 0 0
# compatibility_mode=8192 67108863 100 0 784818 784818 0 0
# scanned=1429
# found=0
# cleaned=0
# scan_time=240
ESETSmartInstaller@High as downloader log:
all ok
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=95a1215cc3d2204cae5ef332a0918ef2
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-01-04 10:49:33
# local_time=2012-01-04 11:49:33 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1797 16774142 0 1 1378847 1378847 0 0
# compatibility_mode=5892 16776638 66 100 1386237 163241857 0 0
# compatibility_mode=8192 67108863 100 0 1320367 1320367 0 0
# scanned=204432
# found=1
# cleaned=0
# scan_time=8243
C:\Qoobox\Quarantine.zip a variant of Win32/Sirefef.CH trojan (unable to clean) 00000000000000000000000000000000 I
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=95a1215cc3d2204cae5ef332a0918ef2
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-01-05 09:33:42
# local_time=2012-01-05 10:33:42 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1797 16774142 0 1 1465820 1465820 0 0
# compatibility_mode=5892 16776638 66 100 1473210 163328830 0 0
# compatibility_mode=8192 67108863 100 0 1407340 1407340 0 0
# scanned=105287
# found=1
# cleaned=0
# scan_time=3120
G:\Seagate Backup\MANKEL-PC\History\Level2\F\Users\Mankel\Music\Eighties classic.wma WMA/TrojanDownloader.Wimad.K trojan (unable to clean) 00000000000000000000000000000000 I
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=95a1215cc3d2204cae5ef332a0918ef2
# end=stopped
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2012-01-05 09:51:19
# local_time=2012-01-05 10:51:19 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.0.6002 NT Service Pack 2
# compatibility_mode=1797 16774142 0 1 1469120 1469120 0 0
# compatibility_mode=5892 16776638 66 100 1476510 163332130 0 0
# compatibility_mode=8192 67108863 100 0 1410640 1410640 0 0
# scanned=14525
# found=0
# cleaned=0
# scan_time=876 |