Problem mit Trojaner Sirefef und Small und Rootkit.0Access

ikos · 27.06.2012, 20:14

Hier die Logs:

Code:

ATTFilter

Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.06.26.08

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
*** :: ***-PC [administrator]

Protection: Enabled

27.06.2012 19:07:00
mbam-log-2012-06-27 (19-07-00).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 550548
Time elapsed: 1 hour(s), 53 minute(s), 7 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Qoobox\Quarantine\C\Windows\Installer\{1076b8ef-fe8b-072c-6b9f-e2fc8d0b214a}\U\00000001.@.vir (Trojan.Small) -> Quarantined and deleted successfully.

(end)

Code:

ATTFilter

SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 06/27/2012 at 02:36 AM

Application Version : 5.5.1006

Core Rules Database Version : 8800
Trace Rules Database Version: 6612

Scan type       : Complete Scan
Total Scan Time : 02:44:53

Operating System Information
Windows 7 Professional 32-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 598
Memory threats detected   : 0
Registry items scanned    : 38645
Registry threats detected : 0
File items scanned        : 410432
File threats detected     : 124

Adware.Tracking Cookie
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@ad.dyntracker[1].txt [ /ad.dyntracker ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@ad2.adfarm1.adition[2].txt [ /ad2.adfarm1.adition ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@ad4.adfarm1.adition[1].txt [ /ad4.adfarm1.adition ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@adx.chip[1].txt [ /adx.chip ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@imrworldwide[2].txt [ /imrworldwide ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@media6degrees[2].txt [ /media6degrees ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@tracking.mindshare[1].txt [ /tracking.mindshare ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@tracking.quisma[2].txt [ /tracking.quisma ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\***@zbox.zanox[1].txt [ /zbox.zanox ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\9JB3WMA1.txt [ /partypoker.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\RB5MEA3V.txt [ /ad.dyntracker.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\0WGUVQ7U.txt [ /ad.zanox.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\MGNT7QCN.txt [ /ad.adc-serv.net ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Z23VO3PQ.txt [ /bs.serving-sys.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\05G2OSO1.txt [ /invitemedia.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\8HQ40PGB.txt [ /zanox.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\INQQ1OBU.txt [ /tracking.mlsat02.de ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\VJTRK124.txt [ /adtech.de ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Z2WFZQOF.txt [ /ad.360yield.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\DXBLHHFH.txt [ /ad2.adfarm1.adition.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\7X5882PF.txt [ /www.etracker.de ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\E87M9MWQ.txt [ /adfarm1.adition.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\1Y3IVR6H.txt [ /ad.adserver01.de ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\NF9SW3TO.txt [ /www.zanox-affiliate.de ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\WFVI6MFW.txt [ /cheaptickets.122.2o7.net ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\W7VB9NSL.txt [ /tracking.quisma.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\D7BJLY4T.txt [ /ad3.adfarm1.adition.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\57MJGGG3.txt [ /serving-sys.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\SRXTWYG2.txt [ /track.adform.net ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\OVDVIG3B.txt [ /content.yieldmanager.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\DZU6J9ZD.txt [ /specificclick.net ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\414N0OKQ.txt [ /ad.ad-srv.net ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\5EIIG9O4.txt [ /adbrite.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\0EMNY1QP.txt [ /zanox-affiliate.de ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\LD18QT2E.txt [ /ads.adk2.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\5UUTFQJ5.txt [ /ad1.adfarm1.adition.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\ODCIHY20.txt [ /www.active-tracking.de ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\MIBYQBJK.txt [ /ads.creative-serving.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\9GA8U27O.txt [ /revsci.net ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\HDXIY1K7.txt [ /smartadserver.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\WU5Z3K22.txt [ /dyntracker.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\9UFOSRAA.txt [ /webmasterplan.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\28LHRD41.txt [ /earlyexperience.partyaccount.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\YH8VOT8M.txt [ /adserver.adtechus.com ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\4ST50P0D.txt [ /adform.net ]
	C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\DZ9FJ52S.txt [ /mediafire.com ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\0G6QPU37.txt [ Cookie:***@ich.adscale.de/adserver-ich/ ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\91A5BHLM.txt [ Cookie:***@clkads.com/adServe/banners ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\JU3EP1EU.txt [ Cookie:***@clkads.com/adServe ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\42HBC959.txt [ Cookie:***@ad.yieldmanager.com/ ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***@bs.serving-sys[1].txt [ Cookie:***@bs.serving-sys.com/ ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\KMVJL3Q8.txt [ Cookie:***@adtech.de/ ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\CZJDRV43.txt [ Cookie:***@adfarm1.adition.com/ ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***@serving-sys[1].txt [ Cookie:***@serving-sys.com/ ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***@msnportal.112.2o7[1].txt [ Cookie:***@msnportal.112.2o7.net/ ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***@statse.webtrendslive[2].txt [ Cookie:***@statse.webtrendslive.com/ ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\6EV02ASB.txt [ Cookie:***@revsci.net/ ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\NATXG8X4.txt [ Cookie:***@imrworldwide.com/cgi-bin ]
	C:\USERS\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\YMNFY736.txt [ Cookie:***@de.sitestat.com/hugoboss/ ]
	C:\USERS\***\Cookies\0G6QPU37.txt [ Cookie:***@ich.adscale.de/adserver-ich/ ]
	C:\USERS\***\Cookies\9JB3WMA1.txt [ Cookie:***@partypoker.com/ ]
	C:\USERS\***\Cookies\RB5MEA3V.txt [ Cookie:***@ad.dyntracker.com/ ]
	C:\USERS\***\Cookies\0WGUVQ7U.txt [ Cookie:***@ad.zanox.com/ ]
	C:\USERS\***\Cookies\***@ad.dyntracker[1].txt [ Cookie:***@ad.dyntracker.de/ ]
	C:\USERS\***\Cookies\Z23VO3PQ.txt [ Cookie:***@bs.serving-sys.com/ ]
	C:\USERS\***\Cookies\05G2OSO1.txt [ Cookie:***@invitemedia.com/ ]
	C:\USERS\***\Cookies\***@zbox.zanox[1].txt [ Cookie:***@zbox.zanox.com/ ]
	C:\USERS\***\Cookies\8HQ40PGB.txt [ Cookie:***@zanox.com/ ]
	C:\USERS\***\Cookies\91A5BHLM.txt [ Cookie:***@clkads.com/adServe/banners ]
	C:\USERS\***\Cookies\INQQ1OBU.txt [ Cookie:***@tracking.mlsat02.de/tmobile/ ]
	C:\USERS\***\Cookies\VJTRK124.txt [ Cookie:***@adtech.de/ ]
	C:\USERS\***\Cookies\***@ad4.adfarm1.adition[1].txt [ Cookie:***@ad4.adfarm1.adition.com/ ]
	C:\USERS\***\Cookies\DXBLHHFH.txt [ Cookie:***@ad2.adfarm1.adition.com/ ]
	C:\USERS\***\Cookies\7X5882PF.txt [ Cookie:***@www.etracker.de/ ]
	C:\USERS\***\Cookies\E87M9MWQ.txt [ Cookie:***@adfarm1.adition.com/ ]
	C:\USERS\***\Cookies\1Y3IVR6H.txt [ Cookie:***@ad.adserver01.de/ ]
	C:\USERS\***\Cookies\NF9SW3TO.txt [ Cookie:***@www.zanox-affiliate.de/ ]
	C:\USERS\***\Cookies\WFVI6MFW.txt [ Cookie:***@cheaptickets.122.2o7.net/ ]
	C:\USERS\***\Cookies\***@adx.chip[1].txt [ Cookie:***@adx.chip.de/ ]
	C:\USERS\***\Cookies\W7VB9NSL.txt [ Cookie:***@tracking.quisma.com/ ]
	C:\USERS\***\Cookies\D7BJLY4T.txt [ Cookie:***@ad3.adfarm1.adition.com/ ]
	C:\USERS\***\Cookies\57MJGGG3.txt [ Cookie:***@serving-sys.com/ ]
	C:\USERS\***\Cookies\SRXTWYG2.txt [ Cookie:***@track.adform.net/ ]
	C:\USERS\***\Cookies\OVDVIG3B.txt [ Cookie:***@content.yieldmanager.com/ ]
	C:\USERS\***\Cookies\DZU6J9ZD.txt [ Cookie:***@specificclick.net/ ]
	C:\USERS\***\Cookies\***@tracking.mindshare[1].txt [ Cookie:***@tracking.mindshare.de/ ]
	C:\USERS\***\Cookies\5EIIG9O4.txt [ Cookie:***@adbrite.com/ ]
	C:\USERS\***\Cookies\0EMNY1QP.txt [ Cookie:***@zanox-affiliate.de/ ]
	C:\USERS\***\Cookies\5UUTFQJ5.txt [ Cookie:***@ad1.adfarm1.adition.com/ ]
	C:\USERS\***\Cookies\9GA8U27O.txt [ Cookie:***@revsci.net/ ]
	C:\USERS\***\Cookies\***@media6degrees[2].txt [ Cookie:***@media6degrees.com/ ]
	C:\USERS\***\Cookies\WU5Z3K22.txt [ Cookie:***@dyntracker.com/ ]
	C:\USERS\***\Cookies\***@imrworldwide[2].txt [ Cookie:***@imrworldwide.com/cgi-bin ]
	C:\USERS\***\Cookies\JU3EP1EU.txt [ Cookie:***@clkads.com/adServe ]
	C:\USERS\***\Cookies\9UFOSRAA.txt [ Cookie:***@webmasterplan.com/ ]
	C:\USERS\***\Cookies\YH8VOT8M.txt [ Cookie:***@adserver.adtechus.com/ ]
	C:\USERS\***\Cookies\4ST50P0D.txt [ Cookie:***@adform.net/ ]
	C:\USERS\***\Cookies\DZ9FJ52S.txt [ Cookie:***@mediafire.com/ ]
	.winzip.122.2o7.net [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.xm.xtendmedia.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ad.yieldmanager.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.content.yieldmanager.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.content.yieldmanager.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	ww251.smartadserver.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.smartadserver.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.smartadserver.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.smartadserver.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.smartadserver.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.webmasterplan.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.tracking.quisma.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.traffictrack.de [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.tracking.quisma.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.smartadserver.com [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	.divx.112.2o7.net [ C:\USERS\***\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\COOKIES ]
	C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@FASTCLICK[1].TXT [ /FASTCLICK ]
	C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@2O7[1].TXT [ /2O7 ]
	C:\USERS\***\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\***@ATDMT[1].TXT [ /ATDMT ]

Problem mit Trojaner Sirefef und Small und Rootkit.0Access

Log-Analyse und Auswertung: Problem mit Trojaner Sirefef und Small und Rootkit.0Access

Problem mit Trojaner Sirefef und Small und Rootkit.0Access

Ähnliche Themen: Problem mit Trojaner Sirefef und Small und Rootkit.0Access