Trojaner-Board - Security Essentials Trojaner

Hallo und :hallo:

Starte OTLPE über die REATOGO-Boot-CD und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

Code:

:OTL

O4 - HKU\portu_ON_C..\Run: [3FWHZQA3LT] C:\Users\portu\AppData\Local\Temp\Wnl.exe (Alexander Roshal)

O4 - HKU\portu_ON_C..\Run: [handlerfix70700en00.exe] C:\Users\portu\AppData\Roaming\69B5951DA64439ADAB9D08A3F0422B6A\handlerfix70700en00.exe ()

O4 - HKU\portu_ON_C..\Run: [Lvrhhfngqfe] C:\Users\portu\AppData\Local\Temp\mogy6ip.exe ()

O4 - HKU\portu_ON_C..\Run: [Lvrhhfngqhf] C:\Users\portu\AppData\Local\Temp\fwxj1qq.exe ()

O4 - HKU\portu_ON_C..\Run: [Metropolis] C:\Users\portu\AppData\Local\Temp\sshnas21.DLL (Alexander Roshal)

O4 - HKU\portu_ON_C..\Run: [uPc+nrtZkfgneZCxl] C:\Users\portu\AppData\Local\Temp\cho6mg.DLL ()

O4 - HKU\portu_ON_C..\Run: [uPc+nrtZkfgnHaGuo] C:\Users\portu\AppData\Local\Temp\e8w76.DLL ()

O4 - HKU\portu_ON_C..\RunOnce: [*upd_debug.exe] C:\Users\portu\AppData\Roaming\69B5951DA64439ADAB9D08A3F0422B6A\upd_debug.exe ()

O4 - HKU\portu_ON_C..\RunOnce: [3168553] C:\Users\portu\AppData\Local\3168553.exe ()

O4 - HKU\portu_ON_C..\RunOnce: [5738134844] C:\Users\portu\AppData\Local\5738134844.exe ()

[2010/09/21 14:34:06 | 000,664,576 | ---- | C] (Fast Maus AG) -- C:\Users\portu\AppData\Roaming\hotfix.exe

[2010/09/21 14:33:15 | 000,000,000 | ---D | C] -- C:\Users\portu\AppData\Roaming\69B5951DA64439ADAB9D08A3F0422B6A

[2010/09/27 13:38:17 | 000,843,776 | ---- | M] () -- C:\Windows\System32\drivers\ainept.sys

[2010/09/27 13:38:07 | 000,000,286 | -H-- | M] () -- C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

[2010/09/27 13:38:02 | 003,295,005 | -H-- | M] () -- C:\Users\portu\AppData\Local\IconCache.db

[2010/09/27 13:33:05 | 000,000,286 | -H-- | M] () -- C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job

[2010/09/21 14:35:43 | 000,957,440 | ---- | M] () -- C:\Users\portu\AppData\Local\5738134844.exe

[2010/09/21 14:35:21 | 000,955,392 | ---- | M] () -- C:\Users\portu\AppData\Local\3168553.exe

:Commands

[purity]

[resethosts]

[emptytemp]

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.