![]() |
|
Plagegeister aller Art und deren Bekämpfung: Trojaner, Schwarzer Bildschirm inkl. Deutschlandflagge, 50 EuroWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
![]() | ![]() Trojaner, Schwarzer Bildschirm inkl. Deutschlandflagge, 50 Euro Hallo und vielen Dank soweit. Da ich beim ersten Mal den Usernamen nur einmal ersetzt habe und einmal übersehen hatte, dass nochmals *** im Skript steht, habe ich das vorgeschlagene Vorgehen mit dem Fix Button zweimal durchgeführt, deshalb im Folgenden die zwei daraus resultierenden Textdokumente: All processes killed ========== OTL ========== Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SkypePM deleted successfully. File C:\Documents and Settings\***\Local Settings\Application Data\Skype\SkypePM.exe not found. ========== COMMANDS ========== [EMPTYFLASH] User: 02602522 User: Administrator User: All Users User: Columbusx User: Default User User: hsg-item99 User: HSG-Spezial User: LocalService User: mgrdhe User: ** User: NetworkService User: *** ->Flash cache emptied: 13649 bytes Total Flash Files Cleaned = 0.00 mb [EMPTYTEMP] User: 02602522 User: Administrator User: All Users User: Columbusx User: Default User ->Temp folder emptied: 0 bytes Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. ->Temporary Internet Files folder emptied: 44843026 bytes User: hsg-item99 User: HSG-Spezial User: LocalService User: mgrdhe User: ** User: NetworkService User: *** ->Temp folder emptied: 233476539 bytes ->Temporary Internet Files folder emptied: 248120650 bytes ->Java cache emptied: 23662194 bytes ->FireFox cache emptied: 187837649 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 2577 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Windows Temp folder emptied: 157619652 bytes RecycleBin emptied: 105219796 bytes Total Files Cleaned = 954.00 mb OTL by OldTimer - Version 3.2.39.2 log created on 03252012_110646 Files\Folders moved on Reboot... Registry entries deleted on Reboot... Nach dem zweiten Durchlauf wurde folgendes Textdokument ausgegeben: All processes killed ========== OTL ========== Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SkypePM not found. C:\Documents and Settings\***\Local Settings\Application Data\Skype\SkypePM.exe moved successfully. ========== COMMANDS ========== [EMPTYFLASH] User: 02602522 User: Administrator User: All Users User: Columbusx User: Default User User: hsg-item99 User: HSG-Spezial User: LocalService User: mgrdhe User: ** User: NetworkService User: *** ->Flash cache emptied: 456 bytes Total Flash Files Cleaned = 0.00 mb [EMPTYTEMP] User: 02602522 User: Administrator User: All Users User: Columbusx User: Default User ->Temp folder emptied: 0 bytes Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. ->Temporary Internet Files folder emptied: 44843026 bytes User: hsg-item99 User: HSG-Spezial User: LocalService User: mgrdhe User: ** User: NetworkService User: *** ->Temp folder emptied: 16662 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Java cache emptied: 0 bytes ->FireFox cache emptied: 18579617 bytes ->Flash cache emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Unable to locate HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce key. Windows Temp folder emptied: 16702 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 61.00 mb OTL by OldTimer - Version 3.2.39.2 log created on 03252012_113410 Files\Folders moved on Reboot... Registry entries deleted on Reboot... Hallo markusg Der Upload hat soweit gut funktioniert. Geändert von Stehle (25.03.2012 um 11:24 Uhr) |
![]() |
Themen zu Trojaner, Schwarzer Bildschirm inkl. Deutschlandflagge, 50 Euro |
andere, bestimmte, bestimmten, bezahlen, bildschirm, deutsche, deutschen, eingefangen, erscheint, euro, gefangen, gen, interne, internet, neu, rechner, schonmal, schwarzer, schwarzer bildschirm, sicherheitsupdate, starte, tan, troja, trojaner, verseuchung |