Trojaner Sytem Repair

Ninche

Hallo,

ich habe leider das selbe Problem wie viele andere auch. Hatte Trojaner auf meinem Computer und mein Desktop war schwarz und alle Dateien waren versteckt.

Hier ist meine Auswertung:

alwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Datenbank Version: 7311

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

28.07.2011 20:48:26
mbam-log-2011-07-28 (20-48-26).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 178760
Laufzeit: 13 Minute(n), 10 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 9
Infizierte Registrierungswerte: 2
Infizierte Dateiobjekte der Registrierung: 5
Infizierte Verzeichnisse: 0
Infizierte Dateien: 6

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\htyxdudafqp (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\dm Fotowelt (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MediaHoldings (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{81c6d0b7-e3e8-25ae-3f49-7f1d6d57b4fc} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{81c6d0b7-e3e8-25ae-3f49-7f1d6d57b4fc} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{81C6D0B7-E3E8-25AE-3F49-7F1D6D57B4FC} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B956CA9A-4BF5-3EA3-1FB0-1917376D8E2E} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{B956CA9A-4BF5-3EA3-1FB0-1917376D8E2E} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B956CA9A-4BF5-3EA3-1FB0-1917376D8E2E} (Trojan.BHO) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{4FE1F4AE-63A3-367A-107B-34EA764C32FD} (Trojan.ZbotR.Gen) -> Value: {4FE1F4AE-63A3-367A-107B-34EA764C32FD} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\pgrcneuyak (Trojan.Agent) -> Value: pgrcneuyak -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallPaper (PUM.Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop (PUM.Hidden.Desktop) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search\Local Page (Hijack.SearchPage) -> Bad: (hxxp://www.iesearch.com/) Good: (hxxp://www.Google.com/) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\dokumente und einstellungen\all users\anwendungsdaten\p1kalmig2kb7fz.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\htyxdudafqp.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\marktmedia\lokale einstellungen\Temp\nss2E.tmp\installoptions.dll (Adware.AdRotator) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\marktmedia\lokale einstellungen\Temp\nss2E.tmp\wansis.dll (Adware.AdRotator) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\marktmedia\lokale einstellungen\Temp\nss2E.tmp\downloads\68.ex_ (Adware.SnappyAds) -> Quarantined and deleted successfully.
c:\uninstall.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Hoffe es kann mir jemand helfen.

Gruß
Nina