![]() |
|
Log-Analyse und Auswertung: Rechner geloggt mit Aufforderung 50,- EUR über ukash zu bezahlenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #16 |
![]() ![]() | ![]() Rechner geloggt mit Aufforderung 50,- EUR über ukash zu bezahlen Okay, hier die gewünschten LOG´s: Malewarebytes: Code:
ATTFilter Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Datenbank Version: 911122308 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 23.12.2011 18:20:10 mbam-log-2011-12-23 (18-20-10).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Durchsuchte Objekte: 338038 Laufzeit: 36 Minute(n), 56 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) Code:
ATTFilter SUPERAntiSpyware Scan Log hxxp://www.superantispyware.com Generated 12/23/2011 at 08:05 PM Application Version : 5.0.1142 Core Rules Database Version : 8086 Trace Rules Database Version: 5898 Scan type : Complete Scan Total Scan Time : 01:01:30 Operating System Information Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601) UAC On - Administrator Memory items scanned : 797 Memory threats detected : 0 Registry items scanned : 70947 Registry threats detected : 0 File items scanned : 166998 File threats detected : 13 Adware.Tracking Cookie C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@2O7[2].TXT [ /2O7 ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@AD.ZANOX[2].TXT [ /AD.ZANOX ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@AD2.ADFARM1.ADITION[1].TXT [ /AD2.ADFARM1.ADITION ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@ADFARM1.ADITION[1].TXT [ /ADFARM1.ADITION ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@ADS.LIVETV[2].TXT [ /ADS.LIVETV ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@ADS2.VRM[1].TXT [ /ADS2.VRM ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@APMEBF[1].TXT [ /APMEBF ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@COUNTER.SEXSUCHE[2].TXT [ /COUNTER.SEXSUCHE ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@FLVTOOLS.SPACASH[1].TXT [ /FLVTOOLS.SPACASH ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@FUCKOVERMYEX[1].TXT [ /FUCKOVERMYEX ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@IM.BANNER.T-ONLINE[1].TXT [ /IM.BANNER.T-ONLINE ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@SEXPARTNERCLUB[1].TXT [ /SEXPARTNERCLUB ] C:\USERS\DIETER\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\DIETER@ZANOX-AFFILIATE[2].TXT [ /ZANOX-AFFILIATE ] Code:
ATTFilter ESETSmartInstaller@High as CAB hook log: OnlineScanner64.ocx - registred OK OnlineScanner.ocx - registred OK # version=7 # iexplore.exe=8.00.7600.16385 (win7_rtm.090713-1255) # OnlineScanner.ocx=1.0.0.6583 # api_version=3.0.2 # EOSSerial= # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2011-12-21 06:34:59 # local_time=2011-12-21 07:34:59 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1797 16775165 100 94 1474027 61020537 1471472 0 # compatibility_mode=5893 16776573 100 94 5053 76117131 0 0 # compatibility_mode=8192 67108863 100 0 3882 3882 0 0 # scanned=218245 # found=27 # cleaned=0 # scan_time=5219 C:\Users\Dieter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6XESETD2\favicon[1].htm HTML/ScrInject.B.Gen virus (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6XESETD2\favicon[4].htm HTML/ScrInject.B.Gen virus (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UVJ7R8LO\favicon[1].htm HTML/ScrInject.B.Gen virus (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\Local\Temp\jar_cache7149448978382821407.tmp a variant of Java/Agent.DM trojan (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\740f0ece-3ca53572 multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\351731cf-7a5d3165 multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\5e42b790-11fcbc3d multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\5062998-3e2edf7c a variant of Java/Agent.DM trojan (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\57361018-2854ee22 multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\1a108559-5a6f5eb3 Java/Agent.DJ trojan (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\522c6f03-2938a9b2-temp multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\4cd19764-62cdbdea multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\4cd19764-7339e05e multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\5a0e54e7-36d90113 a variant of Java/TrojanDownloader.Agent.NDF trojan (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\3c8c4104-1b0cce2e multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\7eabe0c4-3048e31f Java/TrojanDownloader.OpenStream.NCM trojan (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\6e73ff28-7fc6e43d multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\3ec0a6eb-3ae1172c a variant of Java/Exploit.CVE-2011-3544.G trojan (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\708a7572-4e879e63 multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\24128873-239ab961 multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\2f1b0f33-32452359 multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\172b35f9-743e5b3f multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\c72e3fa-5f828215 multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60\629a3f3c-6543a9ee multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\560440fe-6e5de739 multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\562ef547-541a2524 multiple threats (unable to clean) 00000000000000000000000000000000 I C:\Users\Dieter\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\3a4d5849-54b5caa3 a variant of Java/TrojanDownloader.OpenStream.NBF trojan (unable to clean) 00000000000000000000000000000000 I Oliver |
Themen zu Rechner geloggt mit Aufforderung 50,- EUR über ukash zu bezahlen |
administrator, adobe, alternate, antivir, autorun, avira, bho, c:\windows\system32\rundll32.exe, desktop, excel, explorer, format, google earth, home, launch, locker, logfile, maus, microsoft, mywinlocker, neustart, plug-in, problem, programme, realtek, registry, remote control, required, rundll, scan, senden, software, version=1.0, webcheck, windows, winlogon.exe |