und nochmal Gema-Trojaner auf Notebook

toni_tornado

Malware-Log:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Datenbank Version: 8316

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

05.12.2011 21:33:36
mbam-log-2011-12-05 (21-33-36).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 195526
Laufzeit: 1 Minute(n), 36 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)




Superantispyware-Log:

SUPERAntiSpyware Scann-Protokoll
hxxp://www.superantispyware.com

Generiert 12/05/2011 bei 09:27 PM

Version der Applikation : 5.0.1136

Version der Kern-Datenbank : 8014
Version der Spur-Datenbank : 5826

Scan Art : Schneller Scann
Totale Scann-Zeit : 00:04:05

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC Off - Administrator

Gescannte Speicherelemente : 602
Erfasste Speicher-Bedrohungen : 0
Gescannte Register-Elemente : 60026
Erfasste Register-Bedrohungen : 0
Gescannte Datei-Elemente : 10552
Erfasste Datei-Elemente : 0


Resultat eset-Onlinescanner:

ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=902b8f09de80c7438e71b7af7ba57a55
# end=stopped
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-11-30 09:45:42
# local_time=2011-11-30 10:45:42 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 94817 94817 0 0
# compatibility_mode=5893 16776573 100 94 31351 74319127 0 0
# compatibility_mode=8192 67108863 100 0 3824 3824 0 0
# scanned=1613
# found=0
# cleaned=0
# scan_time=285
ESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=53251
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=902b8f09de80c7438e71b7af7ba57a55
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-11-30 11:01:50
# local_time=2011-12-01 12:01:50 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 95200 95200 0 0
# compatibility_mode=5893 16776573 100 94 31734 74319510 0 0
# compatibility_mode=8192 67108863 100 0 4207 4207 0 0
# scanned=151021
# found=10
# cleaned=0
# scan_time=4470
C:\Users\Tino\AppData\Local\Temp\jar_cache8338524055180184138.tmp Win32/LockScreen.AJB trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\37db3fe2-70156796 Java/TrojanDownloader.Agent.ME trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\107b4eab-7463012a multiple threats (unable to clean) 00000000000000000000000000000000 I
C:\Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-2db97218 a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-3537e679 a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-3a2338b5 a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-437c8323 a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-5d939231 a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-7845a0ca a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\Users\Tino\AppData\Roaming\5032\components\AcroFF.dll probably a variant of Win32/Spy.Agent.HPCCCXU trojan (unable to clean) 00000000000000000000000000000000 I
ESETSmartInstaller@High as downloader log:
all ok
# version=7
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6583
# api_version=3.0.2
# EOSSerial=902b8f09de80c7438e71b7af7ba57a55
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2011-12-05 09:53:40
# local_time=2011-12-05 10:53:40 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1792 16777215 100 0 523104 523104 0 0
# compatibility_mode=5893 16776573 100 94 9886 74747414 0 0
# compatibility_mode=8192 67108863 100 0 432111 432111 0 0
# scanned=150999
# found=9
# cleaned=0
# scan_time=4458
C:\_OTL\MovedFiles\12012011_184709\C_Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\37db3fe2-70156796 Java/TrojanDownloader.Agent.ME trojan (unable to clean) 00000000000000000000000000000000 I
C:\_OTL\MovedFiles\12012011_184709\C_Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\107b4eab-7463012a multiple threats (unable to clean) 00000000000000000000000000000000 I
C:\_OTL\MovedFiles\12012011_184709\C_Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-2db97218 a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\_OTL\MovedFiles\12012011_184709\C_Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-3537e679 a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\_OTL\MovedFiles\12012011_184709\C_Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-3a2338b5 a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\_OTL\MovedFiles\12012011_184709\C_Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-437c8323 a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\_OTL\MovedFiles\12012011_184709\C_Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-5d939231 a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\_OTL\MovedFiles\12012011_184709\C_Users\Tino\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\5024297e-7845a0ca a variant of Java/Exploit.CVE-2010-4452.B trojan (unable to clean) 00000000000000000000000000000000 I
C:\_OTL\MovedFiles\12012011_184709\C_Users\Tino\AppData\Roaming\5032\components\AcroFF.dll probably a variant of Win32/Spy.Agent.HPCCCXU trojan (unable to clean) 00000000000000000000000000000000 I