Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.
Hier schonmal das LogFile nach dem Fix.
Allerdings gab es keinen Neustart, soll ich den Manuell vornehmen?!
Den Quarantäne Ordner werde ich gleich Packen, dauert ein bisschen da ich mit dem Infizierten Notebook keine Internetverbindung habe und alles über eine Externe laufen lasse.
Code:
ATTFilter
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\IjmrHbDDJ3PyrXc not found.
File C:\Users\Marc\AppData\Roaming\5suxrt589cxuftg.exe not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\\IjmrHbDDJ3PyrXc not found.
File C:\Windows\System32\config\systemprofile\AppData\Roaming\5suxrt589cxuftg.exe not found.
Registry value HKEY_USERS\Marc_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\IjmrHbDDJ3PyrXc not found.
File C:\Users\Marc\AppData\Roaming\5suxrt589cxuftg.exe not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000022\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000023\ not found.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000024\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Users\Marc\AppData\Roaming\5suxrt589cxuftg.exe deleted successfully.
File C:\Users\Marc\AppData\Roaming\5suxrt589cxuftg.exe not found.
Registry value HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Windows\system32\config\systemprofile\AppData\Roaming\5suxrt589cxuftg.exe deleted successfully.
File C:\Windows\System32\config\systemprofile\AppData\Roaming\5suxrt589cxuftg.exe not found.
Registry value HKEY_USERS\Marc_ON_C\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Users\Marc\AppData\Roaming\5suxrt589cxuftg.exe deleted successfully.
File C:\Users\Marc\AppData\Roaming\5suxrt589cxuftg.exe not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\nykkygy\ not found.
File C:\Windows\System32\config\systemprofile\AppData\Local\nykkygy.dll not found.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
File C:\autoexec.bat not found.
File C:\Users\Marc\AppData\Roaming\dwlGina3.dll not found.
File C:\Users\Marc\AppData\Local\glx.exe not found.
Folder C:\Users\Marc\AppData\Roaming\redsn0w\ not found.
File C:\Users\Marc\AppData\Roaming\dwlGina3.dll not found.
File C:\ProgramData\68w65pw831ojuie12t7gh7q8nwn4c2txecqn2w3r2v273 not found.
File C:\Users\Marc\AppData\Local\68w65pw831ojuie12t7gh7q8nwn4c2txecqn2w3r2v273 not found.
File C:\Windows\tasks\GoogleUpdateTaskMachineUA.job not found.
File C:\Users\Marc\AppData\Roaming\5suxrt589cxuftg.exe not found.
File C:\Users\Marc\AppData\Local\glx.exe not found.
File C:\Users\Marc\AppData\Roaming\5suxrt589cxuftg.exe not found.
File C:\Users\Marc\AppData\Local\68w65pw831ojuie12t7gh7q8nwn4c2txecqn2w3r2v273 not found.
File C:\ProgramData\68w65pw831ojuie12t7gh7q8nwn4c2txecqn2w3r2v273 not found.
File C:\Windows\System\zlib1.dll not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
OTLPE by OldTimer - Version 3.1.48.0 log created on 01052012_225707
Zum Thema "5suxrt589cxuftg.exe" - Hier schonmal das LogFile nach dem Fix.
Allerdings gab es keinen Neustart, soll ich den Manuell vornehmen?!
Den Quarantäne Ordner werde ich gleich Packen, dauert ein bisschen da ich mit - "5suxrt589cxuftg.exe"...
05.01.2012, 23:02
Hybrid-Darstellung
