Trojaner-Board - Makrovirus Böttcher Büromarkt

Das hat geklappt:

Code:

Emsisoft Emergency Kit - Version 10.0

Letztes Update: 18.12.2015 20:33:57

Benutzerkonto: ACERLAPTOP\Karsten Weikamp
 

Scan-Einstellungen:
 

Scan-Methode: Malware-Scan

Objekte: Rootkits, Speicher, Traces, Dateien
 

PUPs-Erkennung: An

Archiv-Scan: Aus

ADS Scan: An

Dateitypen-Filter: Aus

Erweitertes Caching: An

Direkter Festplattenzugriff: Aus
 

Scan-Beginn:        18.12.2015 20:34:38

Key: HKEY_USERS\S-1-5-21-281819993-3161343549-3081365374-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{02478D38-C3F9-4EFB-9B51-7695ECA05670}         Gefunden: Application.AdInstall (A)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{EF99BD32-C1FB-11D2-892F-0090271D4F88}         Gefunden: Application.AdInstall (A)

Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS         Gefunden: Setting.DisableRegistryTools (A)

Value: HKEY_USERS\S-1-5-21-281819993-3161343549-3081365374-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS         Gefunden: Setting.DisableRegistryTools (A)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\TRACING\AU__RASAPI32         Gefunden: Application.Win32.InstallExt (A)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\TRACING\AU__RASMANCS         Gefunden: Application.Win32.InstallExt (A)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\MOBOGENIEADD         Gefunden: Application.AdGenie (A)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\PROTECTOR_DLL.PROTECTORBHO         Gefunden: Application.AdReg (A)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\PROTECTOR_DLL.PROTECTORBHO.1         Gefunden: Application.AdReg (A)

C:\Users\Karsten Weikamp\AppData\Roaming\Win System\handle.exe         Gefunden: Adware.Agent.PLZ (B)
 

Gescannt:        82365

Gefunden        10
 

Scan-Ende:        18.12.2015 20:44:27

Scan-Zeit:        0:09:49
 

C:\Users\Karsten Weikamp\AppData\Roaming\Win System\handle.exe        Quarantäne Adware.Agent.PLZ (B)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\PROTECTOR_DLL.PROTECTORBHO.1        Quarantäne Application.AdReg (A)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\PROTECTOR_DLL.PROTECTORBHO        Quarantäne Application.AdReg (A)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\MOBOGENIEADD        Quarantäne Application.AdGenie (A)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\TRACING\AU__RASMANCS        Quarantäne Application.Win32.InstallExt (A)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\TRACING\AU__RASAPI32        Quarantäne Application.Win32.InstallExt (A)

Value: HKEY_USERS\S-1-5-21-281819993-3161343549-3081365374-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS        Quarantäne Setting.DisableRegistryTools (A)

Value: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\SYSTEM -> DISABLEREGISTRYTOOLS        Quarantäne Setting.DisableRegistryTools (A)

Key: HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{EF99BD32-C1FB-11D2-892F-0090271D4F88}        Quarantäne Application.AdInstall (A)

Key: HKEY_USERS\S-1-5-21-281819993-3161343549-3081365374-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{02478D38-C3F9-4EFB-9B51-7695ECA05670}        Quarantäne Application.AdInstall (A)
 

Quarantäne        10

Und jetzt hat es auch mit ESET geklappt, nach über 2 Stunden Laufzeit hier das Log (wie kommt eine Android Malware/Adware auf einen Windoes Rechner ?) :

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=init

# utc_time=2015-12-17 09:02:47

# local_time=2015-12-17 10:02:47 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=init

# utc_time=2015-12-17 09:20:14

# local_time=2015-12-17 10:20:14 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 27248

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=updated

# utc_time=2015-12-17 09:25:53

# local_time=2015-12-17 10:25:53 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=init

# utc_time=2015-12-17 10:04:14

# local_time=2015-12-17 11:04:14 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

esets_scanner_update returned -1 esets_gle=53251

Update Finalize

Updated modules version: 27248

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=updated

# utc_time=2015-12-17 10:04:41

# local_time=2015-12-17 11:04:41 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 ESETSmartInstaller@High as downloader log:

Can not open internetESETSmartInstaller@High as downloader log:

Can not open internetCan not open internetESETSmartInstaller@High as downloader log:

Can not open internetCan not open internetESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=init

# utc_time=2015-12-18 01:57:16

# local_time=2015-12-18 02:57:16 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 27260

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=updated

# utc_time=2015-12-18 01:57:53

# local_time=2015-12-18 02:57:53 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# engine=27260

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-12-18 02:24:11

# local_time=2015-12-18 03:24:11 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Norton Security'

# compatibility_mode=3604 16777213 100 97 178076 43151177 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 76750240 202079842 0 0

# scanned=56527

# found=0

# cleaned=0

# scan_time=1577

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=init

# utc_time=2015-12-18 02:25:11

# local_time=2015-12-18 03:25:11 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

esets_scanner_update returned -1 esets_gle=53251

Update Finalize

Updated modules version: 27260

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=updated

# utc_time=2015-12-18 02:25:33

# local_time=2015-12-18 03:25:33 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=init

# utc_time=2015-12-18 05:25:27

# local_time=2015-12-18 06:25:27 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 27263

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=updated

# utc_time=2015-12-18 05:26:01

# local_time=2015-12-18 06:26:01 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=restart

# utc_time=2015-12-18 06:07:04

# local_time=2015-12-18 07:07:04 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Norton Security'

# compatibility_mode=3604 16777213 100 97 191443 43164544 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 76763607 202093209 0 0

# scanned=76969

# found=0

# cleaned=0

# scan_time=2456

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=init

# utc_time=2015-12-18 07:57:52

# local_time=2015-12-18 08:57:52 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

Update Init

Update Download

Update Finalize

Updated modules version: 27266

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# end=updated

# utc_time=2015-12-18 07:58:30

# local_time=2015-12-18 08:58:30 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.1.7601 NT Service Pack 1

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=5289962617e92a41922bbe7526cdb9c4

# engine=27266

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2015-12-18 09:57:33

# local_time=2015-12-18 10:57:33 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode_1='Norton Security'

# compatibility_mode=3604 16777213 100 97 205278 43178379 0 0

# compatibility_mode_1=''

# compatibility_mode=5893 16776574 100 94 76777442 202107044 0 0

# scanned=247473

# found=1

# cleaned=0

# scan_time=7143

sh=334E9800F866EBC949DCF9F5117155A01BBC8778 ft=0 fh=0000000000000000 vn="Variante von Android/Domob.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Karsten Weikamp\Documents\HTCSensationXE_SDCard\appmonster2\backup\com.advancedprocessmanager\rev\35.apk"