Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: "TR/ATRAPS.Gen" & "TR/ATRAPS.Gen2" gefunden

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 05.06.2012, 16:19   #1
sYren
 
"TR/ATRAPS.Gen" & "TR/ATRAPS.Gen2" gefunden - Standard

"TR/ATRAPS.Gen" & "TR/ATRAPS.Gen2" gefunden



Hallo,
habe seit gestern die Meldung von AntiVir, dass "TR/ATRAP.Gen" und "TR/ATRAP.Gen2" gefunden wird.. Entfernen bringt leider gar nichts. Weiß nicht was ich machen soll.

Nutze den Rechner auf für Online Banking, soll ich das Sperren lassen?

Hier der OTL Log:

Zitat:
OTL logfile created on: 05.06.2012 16:56:49 - Run 1
OTL by OldTimer - Version 3.2.46.1 Folder = C:\Users\Kevin\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

4,00 Gb Total Physical Memory | 2,96 Gb Available Physical Memory | 73,99% Memory free
8,00 Gb Paging File | 6,81 Gb Available in Paging File | 85,12% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 68,26 Gb Total Space | 12,86 Gb Free Space | 18,84% Space Free | Partition Type: NTFS
Drive D: | 397,40 Gb Total Space | 301,63 Gb Free Space | 75,90% Space Free | Partition Type: NTFS
Drive G: | 931,51 Gb Total Space | 79,77 Gb Free Space | 8,56% Space Free | Partition Type: NTFS
Drive I: | 1,97 Gb Total Space | 1,77 Gb Free Space | 90,04% Space Free | Partition Type: FAT32

Computer Name: KEVIN-PC | User Name: Kevin | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.06.05 16:54:37 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Kevin\Desktop\OTL.exe
PRC - [2012.05.10 19:21:14 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2012.05.10 19:21:13 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.05.10 19:21:13 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.03.31 16:08:14 | 000,080,896 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2011.02.23 23:19:22 | 000,371,200 | ---- | M] (shbox.de) -- C:\Program Files (x86)\FreePDF_XP\fpassist.exe
PRC - [2010.03.06 04:04:24 | 000,310,224 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
PRC - [2009.09.27 16:48:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe


========== Modules (No Company Name) ==========


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2010.11.20 15:26:50 | 000,084,992 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Mcx2Svc.dll -- (Mcx2Svc)
SRV:64bit: - [2009.07.14 03:41:27 | 000,097,792 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\mprdim.dll -- (RemoteAccess)
SRV - [2012.06.02 15:26:32 | 000,529,232 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012.05.10 19:21:14 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.10 19:21:13 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.04.25 16:01:33 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2011.03.31 16:08:14 | 000,080,896 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2011.02.04 13:10:20 | 000,341,296 | ---- | M] (Nitro PDF Software) [Auto | Running] -- C:\Programme\Common Files\Nitro PDF\Reader\1.0\NitroPDFReaderDriverServicex64.exe -- (NitroReaderDriverReadSpool)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2010.01.09 22:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2010.01.09 22:20:56 | 000,174,440 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\Source Engine\OSE.EXE -- (ose64)
SRV - [2009.10.27 10:26:36 | 000,657,408 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2009.09.27 16:48:00 | 000,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009.09.23 17:37:30 | 000,051,168 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files (x86)\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) @C:\Program Files (x86)
SRV - [2009.08.18 13:48:02 | 002,291,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009.07.14 03:15:41 | 000,075,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\mprdim.dll -- (RemoteAccess)
SRV - [2009.06.29 15:43:12 | 000,545,792 | ---- | M] (Sphinx Software) [Auto | Running] -- C:\Programme\Windows7FirewallControl\Windows7FirewallService.exe -- (Windows7FirewallService)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.06.10 22:39:58 | 000,089,920 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012.05.10 19:21:14 | 000,132,832 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2012.05.10 19:21:14 | 000,098,848 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.10.11 15:00:01 | 000,027,760 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avkmgr.sys -- (avkmgr)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 12:43:57 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)
DRV:64bit: - [2010.11.20 11:26:11 | 000,328,192 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\udfs.sys -- (udfs)
DRV:64bit: - [2010.06.25 16:08:10 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\htcnprot.sys -- (htcnprot)
DRV:64bit: - [2010.03.18 20:52:18 | 000,295,000 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\haP17v2k.sys -- (hap17v2k)
DRV:64bit: - [2010.03.18 20:52:10 | 000,259,672 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\haP16v2k.sys -- (hap16v2k)
DRV:64bit: - [2010.03.18 20:52:02 | 001,360,984 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ha10kx2k.sys -- (ha10kx2k)
DRV:64bit: - [2010.03.18 20:51:50 | 000,147,544 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\emupia2k.sys -- (emupia)
DRV:64bit: - [2010.03.18 20:40:10 | 000,141,912 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTERFXFX.sys -- (CTERFXFX.SYS)
DRV:64bit: - [2010.03.18 20:40:10 | 000,141,912 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTERFXFX.sys -- (CTERFXFX)
DRV:64bit: - [2010.03.18 20:40:02 | 000,681,048 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTSBLFX.sys -- (CTSBLFX.SYS)
DRV:64bit: - [2010.03.18 20:40:02 | 000,681,048 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTSBLFX.sys -- (CTSBLFX)
DRV:64bit: - [2010.03.18 20:39:54 | 000,706,648 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTAUDFX.sys -- (CTAUDFX.SYS)
DRV:64bit: - [2010.03.18 20:39:54 | 000,706,648 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CTAUDFX.sys -- (CTAUDFX)
DRV:64bit: - [2010.03.18 20:39:44 | 000,158,808 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\COMMONFX.sys -- (COMMONFX.SYS)
DRV:64bit: - [2010.03.18 20:39:44 | 000,158,808 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\COMMONFX.sys -- (COMMONFX)
DRV:64bit: - [2009.11.01 19:16:50 | 000,033,736 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009.10.06 12:56:34 | 000,172,544 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsux64.sys -- (nmwcdnsux64)
DRV:64bit: - [2009.10.06 12:56:32 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nmwcdnsucx64.sys -- (nmwcdnsucx64)
DRV:64bit: - [2009.10.06 12:54:18 | 000,008,704 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64j.sys -- (UsbserFilt)
DRV:64bit: - [2009.10.06 12:53:56 | 000,025,088 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdcx64)
DRV:64bit: - [2009.10.06 12:53:56 | 000,008,704 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev)
DRV:64bit: - [2009.10.06 12:53:54 | 000,018,944 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcdx64)
DRV:64bit: - [2009.08.13 23:10:18 | 000,073,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\xusb21.sys -- (xusb21)
DRV:64bit: - [2009.07.30 13:58:42 | 000,236,544 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:47:48 | 000,024,144 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\crcdisk.sys -- (crcdisk)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 02:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ws2ifsl.sys -- (ws2ifsl)
DRV:64bit: - [2009.07.14 01:19:47 | 000,092,160 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cdfs.sys -- (cdfs)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.23 01:08:37 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)
DRV:64bit: - [2009.02.17 19:11:25 | 000,031,400 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2008.08.28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = B9 69 66 41 C2 53 CA 01 [binary data]
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.t-online.de/"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 48
FF - prefs.js..extensions.enabledItems: {59c81df5-4b7a-477b-912d-4e0fdf64e5f2}:0.9.85
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.071303000004
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {e9911ec6-1bcc-40b0-9993-e0eea7f6953f}:2.5.8.6
FF - prefs.js..extensions.enabledItems: exif_viewer@mozilla.doslash.org:1.55
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..keyword.URL: "hxxp://go.web.de/tb/mff_keyurl_search/?su="


FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_10_2_161.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: C:\Program Files (x86)\TVUPlayer\npTVUAx.dll (TVU networks)
FF - HKLM\Software\MozillaPlugins\@veetle.com/vbp;version=0.9.17: C:\Program Files (x86)\Veetle\VLCBroadcast\npvbp.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKCU\Software\MozillaPlugins\@facebook.com/FBPlugin,version=1.0.3: C:\Users\Kevin\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: File not found
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Kevin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\electronicarts.com/GameFacePlugin: C:\Users\Kevin\AppData\Roaming\Electronic Arts\Game Face\1.0.0.18\npGameFacePlugin.dll (Electronic Arts)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: C:\Program Files (x86)\Nokia\Nokia PC Suite 7\bkmrksync\ [2009.12.21 18:42:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.04.25 16:01:33 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.02.01 21:54:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011.08.21 14:23:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins

[2011.05.30 20:40:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kevin\AppData\Roaming\mozilla\Extensions
[2011.05.30 20:40:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kevin\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012.05.22 20:00:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kevin\AppData\Roaming\mozilla\Firefox\Profiles\ql9fn1am.default\extensions
[2012.04.08 18:17:36 | 000,000,000 | ---D | M] (ChatZilla) -- C:\Users\Kevin\AppData\Roaming\mozilla\Firefox\Profiles\ql9fn1am.default\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}
[2010.05.31 13:54:23 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Kevin\AppData\Roaming\mozilla\Firefox\Profiles\ql9fn1am.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.05.15 18:24:20 | 000,000,000 | ---D | M] (ReImage Helper) -- C:\Users\Kevin\AppData\Roaming\mozilla\Firefox\Profiles\ql9fn1am.default\extensions\bbrs_006@blabbers.com
[2012.05.22 20:00:30 | 000,000,000 | ---D | M] (FoxyProxy Standard) -- C:\Users\Kevin\AppData\Roaming\mozilla\Firefox\Profiles\ql9fn1am.default\extensions\foxyproxy@eric.h.jung
[2009.10.23 11:47:31 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Users\Kevin\AppData\Roaming\mozilla\Firefox\Profiles\ql9fn1am.default\extensions\moveplayer@movenetworks.com
[2011.10.23 11:08:35 | 000,000,853 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\ql9fn1am.default\searchplugins\11-suche.xml
[2011.10.23 11:08:35 | 000,002,226 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\ql9fn1am.default\searchplugins\englische-ergebnisse.xml
[2011.10.23 11:08:35 | 000,010,506 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\ql9fn1am.default\searchplugins\gmx-suche.xml
[2012.06.01 16:15:52 | 000,000,950 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\ql9fn1am.default\searchplugins\icqplugin-1.xml
[2008.06.22 17:07:52 | 000,000,950 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\ql9fn1am.default\searchplugins\icqplugin-2.xml
[2009.11.06 17:26:37 | 000,000,961 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\ql9fn1am.default\searchplugins\icqplugin-3.xml
[2008.02.09 10:49:56 | 000,000,950 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\ql9fn1am.default\searchplugins\icqplugin.xml
[2011.10.23 11:08:35 | 000,002,457 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\ql9fn1am.default\searchplugins\lastminute.xml
[2011.10.23 11:08:34 | 000,005,489 | ---- | M] () -- C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\ql9fn1am.default\searchplugins\webde-suche.xml
[2011.12.22 21:49:31 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2009.10.25 11:56:42 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files (x86)\mozilla firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2012.02.12 10:53:17 | 000,176,819 | ---- | M] () (No name found) -- C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QL9FN1AM.DEFAULT\EXTENSIONS\{C36177C0-224A-11DA-8CD6-0800200C9A91}.XPI
[2012.02.15 16:34:15 | 000,204,717 | ---- | M] () (No name found) -- C:\USERS\KEVIN\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\QL9FN1AM.DEFAULT\EXTENSIONS\EXIF_VIEWER@MOZILLA.DOSLASH.ORG.XPI
[2012.04.25 16:01:33 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.09.23 03:52:52 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.09.23 03:46:24 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.09.23 03:52:52 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.09.23 03:52:52 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.09.23 03:52:52 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.09.23 03:52:52 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2011.03.17 21:55:37 | 000,000,822 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (CmjBrowserHelperObject Object) - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files (x86)\Mindjet\MindManager 8\Mm8InternetExplorer.dll (Mindjet)
O2 - BHO: (ReImage Helper Verifier) - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files (x86)\ReImageCompanion\updatebhoWin32.dll ( )
O2 - BHO: (ReImage Browser Helper) - {a0e8bc7d-6959-40b6-8e05-204d9768ad6e} - C:\Program Files (x86)\ReImageCompanion\jsloader.dll (ReImage)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Windows7FirewallControl] C:\Programme\Windows7FirewallControl\Windows7FirewallControl.exe (Sphinx Software)
O4 - HKLM..\Run: [AsioThk32Reg] REGSVR32.EXE /S CTASIO.DLL File not found
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Browser companion helper] C:\Program Files (x86)\BrowserCompanion\BCHelper.exe /T=3 /CHI=gmdfpnpdmnjaffhcdbobdjpolhpacaem File not found
O4 - HKLM..\Run: [CTHelper] CTHELPER.EXE File not found
O4 - HKLM..\Run: [FreePDF Assistant] C:\Program Files (x86)\FreePDF_XP\fpassist.exe (shbox.de)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: ʹÓÃUUSee¼ÓËÙ²¥·Å - C:\Program Files (x86)\uusee\geturltoplay.htm ()
O8:64bit: - Extra context menu item: ʹÓÃUUSeeÏÂÔØ - C:\Program Files (x86)\uusee\geturltodown.htm ()
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Kevin\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Kevin\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: ʹÓÃUUSee¼ÓËÙ²¥·Å - C:\Program Files (x86)\uusee\geturltoplay.htm ()
O8 - Extra context menu item: ʹÓÃUUSeeÏÂÔØ - C:\Program Files (x86)\uusee\geturltodown.htm ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\Kevin\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Kevin\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 File not found
O9 - Extra Button: An Mindjet MindManager senden - {2F72393D-2472-4F82-B600-ED77F354B7FF} - C:\Program Files (x86)\Mindjet\MindManager 8\Mm8InternetExplorer.dll (Mindjet)
O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: ºÜ¿ìÊÓƵËÑË÷ - {998A88A0-A355-809B-831C-B83A80000991} - hxxp://www.henkuai.com/?from=iebannel File not found
O9 - Extra 'Tools' menuitem : ºÜ¿ìÊÓƵËÑË÷ - {998A88A0-A355-809B-831C-B83A80000991} - hxxp://www.henkuai.com/?from=iebannel File not found
O9 - Extra Button: Æô¶¯UUSee ÍøÂçµçÊÓ - {998A88A0-A355-809B-831C-B83A80000992} - C:\Program Files (x86)\uusee\UUSeePlayer.exe ()
O9 - Extra 'Tools' menuitem : Æô¶¯UUSee ÍøÂçµçÊÓ - {998A88A0-A355-809B-831C-B83A80000992} - C:\Program Files (x86)\uusee\UUSeePlayer.exe ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 10.2.0)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DC050DC5-DF8B-495E-A457-A4B366AAF434}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\base64 - No CLSID value found
O18:64bit: - Protocol\Handler\chrome - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18:64bit: - Protocol\Handler\prox - No CLSID value found
O18 - Protocol\Handler\base64 {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\ReImageCompanion\tdataprotocol.dll (reimage)
O18 - Protocol\Handler\chrome {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\ReImageCompanion\tdataprotocol.dll (reimage)
O18 - Protocol\Handler\ms-help - No CLSID value found
O18 - Protocol\Handler\prox {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\ReImageCompanion\tdataprotocol.dll (reimage)
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012.06.05 16:54:32 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Kevin\Desktop\OTL.exe
[2012.06.05 16:29:37 | 004,537,537 | ---- | C] (Swearware) -- C:\Users\Kevin\Desktop\ComboFix.exe
[2012.06.02 15:28:53 | 000,000,000 | ---D | C] -- C:\ProgramData\TrackMania
[2012.06.02 15:28:46 | 000,000,000 | ---D | C] -- C:\Users\Kevin\Documents\TrackMania
[2012.05.31 17:07:00 | 000,000,000 | ---D | C] -- C:\Users\Kevin\Desktop\Screenshots
[2012.05.20 16:38:49 | 000,000,000 | ---D | C] -- C:\Users\Kevin\Desktop\München - CL Finale 2012
[2012.05.17 11:38:14 | 000,000,000 | ---D | C] -- C:\Users\Kevin\Desktop\FCB Songs
[2012.05.15 18:24:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
[2012.05.15 18:24:27 | 000,000,000 | ---D | C] -- C:\rei
[2012.05.15 18:24:24 | 000,000,000 | ---D | C] -- C:\Program Files\Reimage
[2012.05.15 18:24:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ReImageCompanion
[2012.05.15 18:22:49 | 000,283,048 | ---- | C] (Reimage®) -- C:\Users\Kevin\Desktop\ReimageRepair.exe
[2012.05.14 18:43:06 | 000,000,000 | ---D | C] -- C:\Users\Kevin\Desktop\wp
[2012.05.14 18:39:40 | 000,000,000 | ---D | C] -- C:\Users\Kevin\Desktop\sk
[2012.05.11 17:21:55 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.06.05 16:54:37 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Kevin\Desktop\OTL.exe
[2012.06.05 16:54:17 | 000,000,000 | ---- | M] () -- C:\Users\Kevin\defogger_reenable
[2012.06.05 16:53:06 | 000,050,477 | ---- | M] () -- C:\Users\Kevin\Desktop\Defogger.exe
[2012.06.05 16:30:39 | 000,013,728 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.06.05 16:30:39 | 000,013,728 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.06.05 16:29:48 | 004,537,537 | ---- | M] (Swearware) -- C:\Users\Kevin\Desktop\ComboFix.exe
[2012.06.05 16:27:28 | 001,498,742 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.06.05 16:27:28 | 000,654,150 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.06.05 16:27:28 | 000,616,032 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.06.05 16:27:28 | 000,130,022 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.06.05 16:27:28 | 000,106,412 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.06.05 16:23:18 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.06.05 16:23:04 | 3220,033,536 | -HS- | M] () -- C:\hiberfil.sys
[2012.06.03 17:08:04 | 000,138,821 | ---- | M] () -- C:\Users\Kevin\Desktop\DDDS.rar
[2012.06.03 14:28:43 | 000,065,326 | ---- | M] () -- C:\Users\Kevin\Desktop\249709_175796829140070_4785474_n.jpg
[2012.06.02 19:34:39 | 000,105,490 | ---- | M] () -- C:\Users\Kevin\Desktop\524393_3697207910851_1294973637_3666233_1364601787_n.jpg
[2012.06.02 14:16:18 | 000,058,804 | ---- | M] () -- C:\Users\Kevin\Desktop\306368_297093296975088_100000232610827_1222894_287959247_n.jpg
[2012.05.31 18:28:08 | 000,148,977 | ---- | M] () -- C:\Users\Kevin\Desktop\166019_399813090060969_100000968450126_1066751_350633344_n.jpg
[2012.05.29 19:28:22 | 000,218,101 | ---- | M] () -- C:\Users\Kevin\Desktop\457888_323130764412978_1380523303_o.jpg
[2012.05.25 20:29:09 | 000,060,333 | ---- | M] () -- C:\Users\Kevin\Desktop\284796_133646960060341_100002451142702_209393_1161049_n.jpg
[2012.05.23 16:48:47 | 000,032,033 | ---- | M] () -- C:\Users\Kevin\Desktop\430051_128415583950768_100003469827100_112076_192870726_n.jpg
[2012.05.20 19:09:54 | 000,067,823 | ---- | M] () -- C:\Users\Kevin\Desktop\35530_431722563512124_100000231534760_88716684_73161904_n.jpg
[2012.05.20 18:23:01 | 000,042,266 | ---- | M] () -- C:\Users\Kevin\Desktop\148719_391746604200951_100000968450126_1044757_1174099117_n.jpg
[2012.05.20 11:54:50 | 000,706,216 | ---- | M] () -- C:\Users\Kevin\Desktop\auto_jarov.jpg
[2012.05.17 11:57:18 | 006,530,176 | ---- | M] () -- C:\Users\Kevin\Desktop\Queen - We Are The Champions.mp3
[2012.05.15 20:28:38 | 000,108,765 | ---- | M] () -- C:\Users\Kevin\Desktop\404606_274144835984250_100001662076608_771687_960778834_n.jpg
[2012.05.15 19:40:46 | 097,383,621 | ---- | M] () -- C:\Users\Kevin\Desktop\MildWild CM-4.3.zip
[2012.05.15 18:26:06 | 000,000,286 | ---- | M] () -- C:\Windows\reimage.ini
[2012.05.15 18:24:27 | 000,001,901 | ---- | M] () -- C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk
[2012.05.15 18:22:51 | 000,283,048 | ---- | M] (Reimage®) -- C:\Users\Kevin\Desktop\ReimageRepair.exe
[2012.05.15 17:34:22 | 097,308,681 | ---- | M] () -- C:\Users\Kevin\Desktop\MildWild V-4.0.zip
[2012.05.15 17:21:48 | 000,449,359 | ---- | M] () -- C:\Users\Kevin\Desktop\MIUIcamera_v17_Fixed2.apk
[2012.05.14 22:08:31 | 000,002,263 | ---- | M] () -- C:\Users\Kevin\Desktop\bwl_33.gif
[2012.05.14 20:23:44 | 000,030,860 | ---- | M] () -- C:\Users\Kevin\Desktop\Finanzierungsformen.png
[2012.05.13 22:07:29 | 000,119,411 | ---- | M] () -- C:\Users\Kevin\Desktop\39695_145976982086685_100000231534760_347424_571149_n.jpg
[2012.05.13 22:01:51 | 000,230,771 | ---- | M] () -- C:\Users\Kevin\Desktop\ego-gestern.jpg
[2012.05.13 21:58:28 | 000,071,969 | ---- | M] () -- C:\Users\Kevin\Desktop\558570_395903320454120_104587302919058_1208544_2094487827_n.jpg
[2012.05.13 21:58:21 | 000,079,465 | ---- | M] () -- C:\Users\Kevin\Desktop\544114_395903390454113_104587302919058_1208545_1045016483_n.jpg
[2012.05.13 14:52:41 | 002,104,093 | ---- | M] () -- C:\Users\Kevin\Desktop\Foto_2.JPG
[2012.05.13 14:52:27 | 002,069,421 | ---- | M] () -- C:\Users\Kevin\Desktop\Foto (1)_2.JPG
[2012.05.13 13:27:49 | 000,188,437 | ---- | M] () -- C:\Users\Kevin\Desktop\rewe shop.jpg
[2012.05.13 11:45:44 | 000,071,099 | ---- | M] () -- C:\Users\Kevin\Desktop\408925_345105648863677_100000927330894_1019519_617799731_n.jpg
[2012.05.12 18:35:43 | 000,102,063 | ---- | M] () -- C:\Users\Kevin\Desktop\fcb.png
[2012.05.12 18:28:20 | 000,045,519 | ---- | M] () -- C:\Users\Kevin\Desktop\528872_10150771605906533_297910456532_9709114_858757865_n.jpg
[2012.05.12 12:54:41 | 000,606,127 | ---- | M] () -- C:\Users\Kevin\Desktop\fc bayern 2012 - cl mannschaft.jpg
[2012.05.12 12:48:34 | 000,053,500 | ---- | M] () -- C:\Users\Kevin\Desktop\379769_245704738821869_100001470355608_697034_1016154660_n.jpg
[2012.05.11 19:22:45 | 004,984,712 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.05.10 19:21:14 | 000,132,832 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2012.05.10 19:21:14 | 000,098,848 | ---- | M] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2012.05.08 15:18:55 | 000,077,942 | ---- | M] () -- C:\Users\Kevin\Desktop\385720_354433271276059_100001281680058_1054027_378097551_n.jpg
[2012.05.08 13:23:51 | 233,420,295 | ---- | M] () -- C:\Users\Kevin\Desktop\FC Bayern 2012 - The road to the final - Finale dahoam!.mp4
[2012.05.06 19:53:41 | 000,021,791 | ---- | M] () -- C:\Users\Kevin\Desktop\387370_201065193315137_100002349722054_403545_1541651163_n.jpg
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.06.05 16:54:17 | 000,000,000 | ---- | C] () -- C:\Users\Kevin\defogger_reenable
[2012.06.05 16:53:06 | 000,050,477 | ---- | C] () -- C:\Users\Kevin\Desktop\Defogger.exe
[2012.06.03 17:07:59 | 000,138,821 | ---- | C] () -- C:\Users\Kevin\Desktop\DDDS.rar
[2012.06.03 14:28:42 | 000,065,326 | ---- | C] () -- C:\Users\Kevin\Desktop\249709_175796829140070_4785474_n.jpg
[2012.06.02 19:34:37 | 000,105,490 | ---- | C] () -- C:\Users\Kevin\Desktop\524393_3697207910851_1294973637_3666233_1364601787_n.jpg
[2012.06.02 14:16:15 | 000,058,804 | ---- | C] () -- C:\Users\Kevin\Desktop\306368_297093296975088_100000232610827_1222894_287959247_n.jpg
[2012.05.31 18:28:06 | 000,148,977 | ---- | C] () -- C:\Users\Kevin\Desktop\166019_399813090060969_100000968450126_1066751_350633344_n.jpg
[2012.05.29 19:28:21 | 000,218,101 | ---- | C] () -- C:\Users\Kevin\Desktop\457888_323130764412978_1380523303_o.jpg
[2012.05.25 20:29:08 | 000,060,333 | ---- | C] () -- C:\Users\Kevin\Desktop\284796_133646960060341_100002451142702_209393_1161049_n.jpg
[2012.05.23 16:48:47 | 000,032,033 | ---- | C] () -- C:\Users\Kevin\Desktop\430051_128415583950768_100003469827100_112076_192870726_n.jpg
[2012.05.20 19:09:53 | 000,067,823 | ---- | C] () -- C:\Users\Kevin\Desktop\35530_431722563512124_100000231534760_88716684_73161904_n.jpg
[2012.05.20 18:22:58 | 000,042,266 | ---- | C] () -- C:\Users\Kevin\Desktop\148719_391746604200951_100000968450126_1044757_1174099117_n.jpg
[2012.05.20 16:45:17 | 000,706,216 | ---- | C] () -- C:\Users\Kevin\Desktop\auto_jarov.jpg
[2012.05.17 11:56:58 | 006,530,176 | ---- | C] () -- C:\Users\Kevin\Desktop\Queen - We Are The Champions.mp3
[2012.05.15 19:27:32 | 097,383,621 | ---- | C] () -- C:\Users\Kevin\Desktop\MildWild CM-4.3.zip
[2012.05.15 18:25:55 | 000,000,286 | ---- | C] () -- C:\Windows\reimage.ini
[2012.05.15 18:24:27 | 000,001,901 | ---- | C] () -- C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk
[2012.05.15 17:30:01 | 097,308,681 | ---- | C] () -- C:\Users\Kevin\Desktop\MildWild V-4.0.zip
[2012.05.15 17:21:47 | 000,449,359 | ---- | C] () -- C:\Users\Kevin\Desktop\MIUIcamera_v17_Fixed2.apk
[2012.05.14 22:08:30 | 000,002,263 | ---- | C] () -- C:\Users\Kevin\Desktop\bwl_33.gif
[2012.05.14 20:23:43 | 000,030,860 | ---- | C] () -- C:\Users\Kevin\Desktop\Finanzierungsformen.png
[2012.05.13 22:06:08 | 000,119,411 | ---- | C] () -- C:\Users\Kevin\Desktop\39695_145976982086685_100000231534760_347424_571149_n.jpg
[2012.05.13 22:01:50 | 000,230,771 | ---- | C] () -- C:\Users\Kevin\Desktop\ego-gestern.jpg
[2012.05.13 21:58:28 | 000,071,969 | ---- | C] () -- C:\Users\Kevin\Desktop\558570_395903320454120_104587302919058_1208544_2094487827_n.jpg
[2012.05.13 21:58:20 | 000,079,465 | ---- | C] () -- C:\Users\Kevin\Desktop\544114_395903390454113_104587302919058_1208545_1045016483_n.jpg
[2012.05.13 14:52:39 | 002,104,093 | ---- | C] () -- C:\Users\Kevin\Desktop\Foto_2.JPG
[2012.05.13 14:52:25 | 002,069,421 | ---- | C] () -- C:\Users\Kevin\Desktop\Foto (1)_2.JPG
[2012.05.13 13:27:49 | 000,188,437 | ---- | C] () -- C:\Users\Kevin\Desktop\rewe shop.jpg
[2012.05.12 18:35:43 | 000,102,063 | ---- | C] () -- C:\Users\Kevin\Desktop\fcb.png
[2012.05.12 18:28:16 | 000,045,519 | ---- | C] () -- C:\Users\Kevin\Desktop\528872_10150771605906533_297910456532_9709114_858757865_n.jpg
[2012.05.12 12:54:41 | 000,606,127 | ---- | C] () -- C:\Users\Kevin\Desktop\fc bayern 2012 - cl mannschaft.jpg
[2012.05.12 12:48:33 | 000,053,500 | ---- | C] () -- C:\Users\Kevin\Desktop\379769_245704738821869_100001470355608_697034_1016154660_n.jpg
[2012.05.08 15:18:53 | 000,077,942 | ---- | C] () -- C:\Users\Kevin\Desktop\385720_354433271276059_100001281680058_1054027_378097551_n.jpg
[2012.05.08 13:18:36 | 233,420,295 | ---- | C] () -- C:\Users\Kevin\Desktop\FC Bayern 2012 - The road to the final - Finale dahoam!.mp4
[2012.05.06 19:53:40 | 000,021,791 | ---- | C] () -- C:\Users\Kevin\Desktop\387370_201065193315137_100002349722054_403545_1541651163_n.jpg
[2011.10.26 18:48:01 | 000,148,480 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2011.10.26 18:48:01 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2011.09.18 16:04:04 | 000,000,132 | ---- | C] () -- C:\Users\Kevin\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2011.09.10 13:15:09 | 000,000,132 | ---- | C] () -- C:\Users\Kevin\AppData\Roaming\Adobe BMP Format CS5 Prefs
[2011.04.09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat

========== LOP Check ==========

[2012.05.16 21:28:10 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Amzak
[2011.10.27 15:47:59 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Ciokbib
[2011.06.17 18:07:06 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Downloaded Installations
[2011.06.26 21:06:38 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Dropbox
[2012.05.02 21:26:29 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\DVDVideoSoft
[2012.05.01 20:55:22 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.10.15 23:14:01 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Ecxye
[2010.10.14 17:01:13 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Electronic Arts
[2010.09.04 17:06:38 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Engelmann Media
[2010.07.03 15:05:14 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Exif Viewer
[2010.06.28 21:13:31 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Facebook
[2011.12.14 19:29:32 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\FreePDF
[2012.03.04 12:38:01 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\gtk-2.0
[2012.05.14 23:31:00 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\ICQ
[2009.12.14 00:32:49 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\IrfanView
[2009.10.24 11:30:59 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Miranda
[2012.02.11 14:21:52 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\mp3DirectCut
[2011.09.18 16:00:34 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\NeatImage PS 64
[2012.05.26 20:21:50 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Nitro PDF
[2009.12.21 18:44:17 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Nokia
[2009.10.23 13:13:01 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\OpenOffice.org
[2009.12.21 18:44:17 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\PC Suite
[2010.08.07 17:23:14 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\PhotoScape
[2010.01.10 15:55:13 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\PMS
[2011.05.30 20:40:40 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Thunderbird
[2012.04.27 17:41:48 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\TS3Client
[2012.05.05 19:08:19 | 000,000,000 | ---D | M] -- C:\Users\Kevin\AppData\Roaming\Umitip
[2012.03.13 17:33:37 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



< End of report >

Was kann ich tun? Bin leicht am verzweifeln

Alt 08.06.2012, 10:37   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
"TR/ATRAPS.Gen" & "TR/ATRAPS.Gen2" gefunden - Standard

"TR/ATRAPS.Gen" & "TR/ATRAPS.Gen2" gefunden



Zitat:
habe seit gestern die Meldung von AntiVir, dass "TR/ATRAP.Gen" und "TR/ATRAP.Gen2" gefunden wird.. Entfernen bringt leider gar nichts. Weiß nicht was ich machen soll.
Solche Angaben reichen nicht, bitte poste die vollständigen Angaben/Logs der Virenscanner.

Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:
ATTFilter
 hier steht das Log
         

Zitat:
Nutze den Rechner auf für Online Banking, soll ich das Sperren lassen?
Ja solltest du unbedingt!
Und überlegen ob du den riskanten Versuch einer Bereinigung überhaupt machen willst, wenn in Zukunft noch Dinge wie Banking an diesem Rechner erledigt werden sollen!
__________________

__________________

Antwort

Themen zu "TR/ATRAPS.Gen" & "TR/ATRAPS.Gen2" gefunden
adobe, antivir, autorun, avg, avira, bho, converter, document, entfernen, explorer, firefox, format, google, home, langs, logfile, mozilla, mp3, nvidia, opera, plug-in, realtek, registry, reimage, scan, searchscopes, senden, software, updates, windows




Ähnliche Themen: "TR/ATRAPS.Gen" & "TR/ATRAPS.Gen2" gefunden


  1. Trojaner "TR/ATRAPS.Gen2" auf Rechner
    Log-Analyse und Auswertung - 04.11.2013 (21)
  2. Windows 8 x64 - "TR/ATRAPS.Gen2" in C:\Program Files (x86)\Google\Desktop\...\80000032.@ und ...\80000064.@ und ...{80000000.@
    Log-Analyse und Auswertung - 10.08.2013 (5)
  3. "TR/ATRAPS.Gen2" in "C:\$Recycle.Bin\S-1-5-18\ " gefunden
    Log-Analyse und Auswertung - 27.04.2013 (15)
  4. Avira meldet Trojaner "TR/Sirefef.AG.9" und "TR/ATRAPS.Gen2"
    Plagegeister aller Art und deren Bekämpfung - 26.04.2013 (9)
  5. Virus ATRAPS.Gen2 sowie "services.exe" infiziert
    Plagegeister aller Art und deren Bekämpfung - 13.04.2013 (17)
  6. TR/ATRAPS.Gen2 in der "services.exe" und in "C:\Windows\Installer.."
    Plagegeister aller Art und deren Bekämpfung - 08.02.2013 (5)
  7. services.exe mit "W32/Patched.UC" infiziert || TR/ATRAPS.GEN2 und TR/Sirefref.W.16896 gefunden
    Log-Analyse und Auswertung - 18.10.2012 (1)
  8. "TR/ATRAPS.Gen2 in C:\Windows\Installer\{8cf887ed-840d-0eaa-7d51-11911c07a980}\U\80000032.@"
    Log-Analyse und Auswertung - 13.10.2012 (16)
  9. "ATRAPS.gen" und "ATRAPS.gen2" Trojaner Fund
    Plagegeister aller Art und deren Bekämpfung - 12.09.2012 (14)
  10. Facebook-Virus "weeeeeeerrrr ist daaaaaass? " TR/ATRAPS.Gen2
    Plagegeister aller Art und deren Bekämpfung - 28.08.2012 (11)
  11. "TR/ATRAPS.Gen2" - Win32/Sirefef.EV trojan
    Log-Analyse und Auswertung - 27.08.2012 (1)
  12. W32/Patched.UA in "C:\Windows\System32\services.exe" + TR/Small.FI, TR/ATRAPS.Gen und TR/ATRAPS.GEN2
    Plagegeister aller Art und deren Bekämpfung - 26.08.2012 (2)
  13. "TR/ATRAPS.Gen2" und "TR/Kazy.79800.1"
    Plagegeister aller Art und deren Bekämpfung - 31.07.2012 (2)
  14. AVIRA meldet "W32/Patched.ZA", "TR/ATRAPS.Gen2", "TR/ATRAPS.Gen", "ZR/sirefe.P.487"
    Log-Analyse und Auswertung - 30.07.2012 (9)
  15. unbekannter prozess "datfc86.tmp.exe*32" zusammen mit TR/ATRAPS.gen2
    Plagegeister aller Art und deren Bekämpfung - 05.07.2012 (5)
  16. TR/Small.FI, TR/ATRAPS.Gen, TR/ATRAPS.GEN2 und W32/Patched.UA in "C:\Windows\System32\services.exe"
    Plagegeister aller Art und deren Bekämpfung - 04.07.2012 (15)
  17. "TR/ATRAPS.Gen2 PC" Performance & Stability Analysis Report
    Log-Analyse und Auswertung - 09.11.2011 (1)

Zum Thema "TR/ATRAPS.Gen" & "TR/ATRAPS.Gen2" gefunden - Hallo, habe seit gestern die Meldung von AntiVir, dass "TR/ATRAP.Gen" und "TR/ATRAP.Gen2" gefunden wird.. Entfernen bringt leider gar nichts. Weiß nicht was ich machen soll. Nutze den Rechner auf für - "TR/ATRAPS.Gen" & "TR/ATRAPS.Gen2" gefunden...
Archiv
Du betrachtest: "TR/ATRAPS.Gen" & "TR/ATRAPS.Gen2" gefunden auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.