| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: TR/Trash.Gen Trojan erneut von Avira gefundenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
10.07.2012, 21:20
| #1 |
 |  TR/Trash.Gen Trojan erneut von Avira gefunden Hallo ihr lieben Helfer. Ich habe vor kurzer Zeit bereits einige Plagegeister auf meinem Pc gefunden/finden lassen. Dabei wurde mir wundervoll geholfen, Danke nochmal: http://www.trojaner-board.de/118171-...24cfcf0-n.html Vor einigen Minuten ist nun wieder Avira aufgeploppt: Code:
ATTFilter Avira Free Antivirus Report file date: Dienstag, 10. Juli 2012 21:33 Scanning for 3855608 virus strains and unwanted programs. The program is running as an unrestricted full version. Online services are available. Licensee : Avira AntiVir Personal - Free Antivirus Serial number : 0000149996-ADJIE-0000001 Platform : Microsoft Windows XP Windows version : (Service Pack 3) [5.1.2600] Boot mode : Normally booted Username : SYSTEM Computer name : ****** Version information: BUILD.DAT : 12.0.0.1125 41829 Bytes 02.05.2012 17:40:00 AVSCAN.EXE : 12.3.0.15 466896 Bytes 08.05.2012 21:25:43 AVSCAN.DLL : 12.3.0.15 54736 Bytes 08.05.2012 21:25:43 LUKE.DLL : 12.3.0.15 68304 Bytes 08.05.2012 21:25:43 AVSCPLR.DLL : 12.3.0.14 97032 Bytes 08.05.2012 21:25:43 AVREG.DLL : 12.3.0.17 232200 Bytes 14.05.2012 21:25:27 VBASE000.VDF : 7.10.0.0 19875328 Bytes 06.11.2009 07:05:36 VBASE001.VDF : 7.11.0.0 13342208 Bytes 14.12.2010 06:57:15 VBASE002.VDF : 7.11.19.170 14374912 Bytes 20.12.2011 06:57:20 VBASE003.VDF : 7.11.21.238 4472832 Bytes 01.02.2012 21:37:10 VBASE004.VDF : 7.11.26.44 4329472 Bytes 28.03.2012 21:37:16 VBASE005.VDF : 7.11.34.116 4034048 Bytes 29.06.2012 21:25:49 VBASE006.VDF : 7.11.34.117 2048 Bytes 29.06.2012 21:25:49 VBASE007.VDF : 7.11.34.118 2048 Bytes 29.06.2012 21:25:49 VBASE008.VDF : 7.11.34.119 2048 Bytes 29.06.2012 21:25:49 VBASE009.VDF : 7.11.34.120 2048 Bytes 29.06.2012 21:25:49 VBASE010.VDF : 7.11.34.121 2048 Bytes 29.06.2012 21:25:49 VBASE011.VDF : 7.11.34.122 2048 Bytes 29.06.2012 21:25:49 VBASE012.VDF : 7.11.34.123 2048 Bytes 29.06.2012 21:25:49 VBASE013.VDF : 7.11.34.124 2048 Bytes 29.06.2012 21:25:49 VBASE014.VDF : 7.11.34.201 169472 Bytes 02.07.2012 21:25:50 VBASE015.VDF : 7.11.35.19 122368 Bytes 04.07.2012 21:25:54 VBASE016.VDF : 7.11.35.87 146944 Bytes 06.07.2012 21:25:55 VBASE017.VDF : 7.11.35.143 126464 Bytes 09.07.2012 21:25:53 VBASE018.VDF : 7.11.35.144 2048 Bytes 09.07.2012 21:25:53 VBASE019.VDF : 7.11.35.145 2048 Bytes 09.07.2012 21:25:53 VBASE020.VDF : 7.11.35.146 2048 Bytes 09.07.2012 21:25:53 VBASE021.VDF : 7.11.35.147 2048 Bytes 09.07.2012 21:25:53 VBASE022.VDF : 7.11.35.148 2048 Bytes 09.07.2012 21:25:53 VBASE023.VDF : 7.11.35.149 2048 Bytes 09.07.2012 21:25:53 VBASE024.VDF : 7.11.35.150 2048 Bytes 09.07.2012 21:25:53 VBASE025.VDF : 7.11.35.151 2048 Bytes 09.07.2012 21:25:53 VBASE026.VDF : 7.11.35.152 2048 Bytes 09.07.2012 21:25:53 VBASE027.VDF : 7.11.35.153 2048 Bytes 09.07.2012 21:25:53 VBASE028.VDF : 7.11.35.154 2048 Bytes 09.07.2012 21:25:53 VBASE029.VDF : 7.11.35.155 2048 Bytes 09.07.2012 21:25:53 VBASE030.VDF : 7.11.35.156 2048 Bytes 09.07.2012 21:25:53 VBASE031.VDF : 7.11.35.174 36864 Bytes 09.07.2012 21:25:53 Engine version : 8.2.10.106 AEVDF.DLL : 8.1.2.8 106867 Bytes 03.06.2012 21:25:22 AESCRIPT.DLL : 8.1.4.32 455034 Bytes 05.07.2012 21:25:59 AESCN.DLL : 8.1.8.2 131444 Bytes 17.04.2012 21:37:23 AESBX.DLL : 8.2.5.12 606578 Bytes 14.06.2012 21:25:40 AERDL.DLL : 8.1.9.15 639348 Bytes 31.01.2012 06:56:42 AEPACK.DLL : 8.2.16.22 807288 Bytes 21.06.2012 21:26:02 AEOFFICE.DLL : 8.1.2.40 201082 Bytes 28.06.2012 21:25:41 AEHEUR.DLL : 8.1.4.64 5009782 Bytes 05.07.2012 21:25:59 AEHELP.DLL : 8.1.23.2 258422 Bytes 28.06.2012 21:25:37 AEGEN.DLL : 8.1.5.32 434548 Bytes 07.07.2012 21:25:56 AEEXP.DLL : 8.1.0.60 86388 Bytes 05.07.2012 21:25:59 AEEMU.DLL : 8.1.3.0 393589 Bytes 31.01.2012 06:56:38 AECORE.DLL : 8.1.25.10 201080 Bytes 31.05.2012 21:25:25 AEBB.DLL : 8.1.1.0 53618 Bytes 31.01.2012 06:56:38 AVWINLL.DLL : 12.3.0.15 27344 Bytes 08.05.2012 21:25:43 AVPREF.DLL : 12.3.0.15 51920 Bytes 08.05.2012 21:25:43 AVREP.DLL : 12.3.0.15 179208 Bytes 08.05.2012 21:25:43 AVARKT.DLL : 12.3.0.15 211408 Bytes 08.05.2012 21:25:43 AVEVTLOG.DLL : 12.3.0.15 169168 Bytes 08.05.2012 21:25:43 SQLITE3.DLL : 3.7.0.1 398288 Bytes 08.05.2012 21:25:43 AVSMTP.DLL : 12.3.0.15 63440 Bytes 08.05.2012 21:25:43 NETNT.DLL : 12.3.0.15 17104 Bytes 08.05.2012 21:25:43 RCIMAGE.DLL : 12.3.0.15 4450000 Bytes 08.05.2012 21:25:43 RCTEXT.DLL : 12.3.0.15 96720 Bytes 08.05.2012 21:25:43 Configuration settings for the scan: Jobname.............................: AVGuardAsyncScan Configuration file..................: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\AntiVir Desktop\TEMP\AVGUARD_4ffc4b5e\guard_slideup.avp Logging.............................: default Primary action......................: Interactive Secondary action....................: Quarantine Scan master boot sector.............: on Scan boot sector....................: off Process scan........................: on Scan registry.......................: off Search for rootkits.................: off Integrity checking of system files..: off Scan all files......................: All files Scan archives.......................: on Recursion depth.....................: 20 Smart extensions....................: on Macro heuristic.....................: on File heuristic......................: Complete Start of the scan: Dienstag, 10. Juli 2012 21:33 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'firefox.exe' - '1' Module(s) have been scanned Scan process 'OTL.exe' - '1' Module(s) have been scanned Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned Scan process 'ICQ.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'avshadow.exe' - '1' Module(s) have been scanned Scan process 'nSvcAppFlt.exe' - '1' Module(s) have been scanned Scan process 'apache.exe' - '1' Module(s) have been scanned Scan process 'wdfmgr.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'StarWindServiceAE.exe' - '1' Module(s) have been scanned Scan process 'PnkBstrA.exe' - '1' Module(s) have been scanned Scan process 'SupServ.exe' - '1' Module(s) have been scanned Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned Scan process 'nSvcLog.exe' - '1' Module(s) have been scanned Scan process 'nSvcIp.exe' - '1' Module(s) have been scanned Scan process 'mbamservice.exe' - '1' Module(s) have been scanned Scan process 'jqs.exe' - '1' Module(s) have been scanned Scan process 'apache.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'mbamgui.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'RUNDLL32.EXE' - '1' Module(s) have been scanned Scan process 'vsnpstd3.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'nTrayFw.exe' - '1' Module(s) have been scanned Scan process 'TBPanel.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'Explorer.EXE' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'hmpsched.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned Starting the file scan: Begin scan in 'E:\System Volume Information\_restore{7829A386-96FD-4F22-907D-626FF8A9B70D}\RP200\A0066640.dll' E:\System Volume Information\_restore{7829A386-96FD-4F22-907D-626FF8A9B70D}\RP200\A0066640.dll [DETECTION] Is the TR/Trash.Gen Trojan Beginning disinfection: E:\System Volume Information\_restore{7829A386-96FD-4F22-907D-626FF8A9B70D}\RP200\A0066640.dll [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] The file was moved to the quarantine directory under the name '527f2758.qua'. End of the scan: Dienstag, 10. Juli 2012 21:34 Used time: 00:01 Minute(s) The scan has been done completely. 0 Scanned directories 44 Files were scanned 1 Viruses and/or unwanted programs were found 0 Files were classified as suspicious 0 Files were deleted 0 Viruses and unwanted programs were repaired 1 Files were moved to quarantine 0 Files were renamed 0 Files cannot be scanned 43 Files not concerned 0 Archives were scanned 0 Warnings 1 Notes The scan results will be transferred to the Guard. Code:
ATTFilter OTL logfile created on: 10.07.2012 21:31:10 - Run 2 OTL by OldTimer - Version 3.2.53.0 Folder = C:\Dokumente und Einstellungen\ZahalFighter\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 0,21 Gb Available Physical Memory | 10,31% Memory free 4,85 Gb Paging File | 3,21 Gb Available in Paging File | 66,25% Paging File free Paging file location(s): C:\pagefile.sys 3069 6138 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 195,31 Gb Total Space | 174,58 Gb Free Space | 89,39% Space Free | Partition Type: NTFS Drive D: | 7,42 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive E: | 102,78 Gb Total Space | 53,49 Gb Free Space | 52,05% Space Free | Partition Type: NTFS Computer Name: KNUSPERKNUT | User Name: ZahalFighter | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Programme\HitmanPro\hmpsched.exe (SurfRight B.V.) PRC - C:\Dokumente und Einstellungen\ZahalFighter\Desktop\OTL.exe (OldTimer Tools) PRC - E:\ICQ_Data\ICQ7M\ICQ.exe (ICQ, LLC.) PRC - E:\Spiele\World_of_Tanks\WorldOfTanks.exe (Wargaming.net) PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) PRC - E:\Sony\SupServ.exe () PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\WINDOWS\TBPanel.exe (Gainward Co.) PRC - E:\Spiele\alc120%\Alcohol 120\StarWind\StarWindServiceAE.exe (Rocket Division Software) PRC - C:\WINDOWS\vsnpstd3.exe () PRC - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe (NVIDIA Corporation) PRC - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe () PRC - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe (NVIDIA Corporation) PRC - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe (NVIDIA) PRC - C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe (Apache Software Foundation) ========== Modules (No Company Name) ========== MOD - E:\Spiele\World_of_Tanks\voip.dll () MOD - E:\Spiele\World_of_Tanks\ortp.dll () MOD - C:\Programme\Avira\AntiVir Desktop\sqlite3.dll () MOD - E:\Spiele\World_of_Tanks\libcurl.dll () MOD - E:\Sony\SupServ.exe () MOD - C:\WINDOWS\vsnpstd3.exe () MOD - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe () MOD - C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\libeay32.dll () MOD - C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\ssleay32.dll () MOD - C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\modules\mod_auth.so () MOD - C:\WINDOWS\TBManage.dll () ========== Win32 Services (SafeList) ========== SRV - (HitmanProScheduler) -- C:\Programme\HitmanPro\hmpsched.exe (SurfRight B.V.) SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation) SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) SRV - (Steam Client Service) -- C:\Programme\Gemeinsame Dateien\Steam\SteamService.exe (Valve Corporation) SRV - (OMSI download service) -- E:\Sony\SupServ.exe () SRV - (StarWindServiceAE) -- E:\Spiele\alc120%\Alcohol 120\StarWind\StarWindServiceAE.exe (Rocket Division Software) SRV - (ForceWare Intelligent Application Manager (IAM)) ForceWare Intelligent Application Manager (IAM) -- C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe () SRV - (nSvcIp) -- C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe (NVIDIA Corporation) SRV - (nSvcLog) -- C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe (NVIDIA) SRV - (ForcewareWebInterface) -- C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe (Apache Software Foundation) SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation) ========== Driver Services (SafeList) ========== DRV - (WDICA) -- File not found DRV - (PDRFRAME) -- File not found DRV - (PDRELI) -- File not found DRV - (PDFRAME) -- File not found DRV - (PDCOMP) -- File not found DRV - (PCIDump) -- File not found DRV - (lbrtfdc) -- File not found DRV - (i2omgmt) -- File not found DRV - (Changer) -- File not found DRV - (catchme) -- C:\DOKUME~1\ZAHALF~1\LOKALE~1\Temp\catchme.sys File not found DRV - (an2mtha9) -- File not found DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH) DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH) DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation) DRV - (sptd) -- C:\WINDOWS\system32\drivers\sptd.sys () DRV - (avkmgr) -- C:\WINDOWS\system32\drivers\avkmgr.sys (Avira GmbH) DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH) DRV - (s1018mdm) -- C:\WINDOWS\system32\drivers\s1018mdm.sys (MCCI Corporation) DRV - (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM) -- C:\WINDOWS\system32\drivers\s1018unic.sys (MCCI Corporation) DRV - (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\s1018mgmt.sys (MCCI Corporation) DRV - (s1018obex) -- C:\WINDOWS\system32\drivers\s1018obex.sys (MCCI Corporation) DRV - (s1018bus) Sony Ericsson Device 1018 driver (WDM) -- C:\WINDOWS\system32\drivers\s1018bus.sys (MCCI Corporation) DRV - (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS) -- C:\WINDOWS\system32\drivers\s1018nd5.sys (MCCI Corporation) DRV - (s1018mdfl) -- C:\WINDOWS\system32\drivers\s1018mdfl.sys (MCCI Corporation) DRV - (s0017mdm) -- C:\WINDOWS\system32\drivers\s0017mdm.sys (MCCI Corporation) DRV - (s0017unic) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM) -- C:\WINDOWS\system32\drivers\s0017unic.sys (MCCI Corporation) DRV - (s0017mgmt) Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\system32\drivers\s0017mgmt.sys (MCCI Corporation) DRV - (s0017obex) -- C:\WINDOWS\system32\drivers\s0017obex.sys (MCCI Corporation) DRV - (s0017bus) Sony Ericsson Device 0017 driver (WDM) -- C:\WINDOWS\system32\drivers\s0017bus.sys (MCCI Corporation) DRV - (s0017nd5) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS) -- C:\WINDOWS\system32\drivers\s0017nd5.sys (MCCI Corporation) DRV - (s0017mdfl) -- C:\WINDOWS\system32\drivers\s0017mdfl.sys (MCCI Corporation) DRV - (SNPSTD3) USB PC Camera (SNPSTD3) -- C:\WINDOWS\system32\drivers\snpstd3.sys (Sonix Co. Ltd.) DRV - (TBPanel) -- C:\WINDOWS\System32\drivers\TBPanel.sys (Windows (R) 2000 DDK provider) DRV - (Cardex) -- C:\WINDOWS\system32\drivers\TBPanel.sys (Windows (R) 2000 DDK provider) DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.Sys (Realtek Semiconductor Corp.) DRV - (JRAID) -- C:\WINDOWS\system32\drivers\jraid.sys (JMicron Technology Corp.) DRV - (nvata) -- C:\WINDOWS\system32\drivers\nvata.sys (NVIDIA Corporation) DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation) DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation) DRV - (JGOGO) -- C:\WINDOWS\system32\drivers\JGOGO.sys (JMicron ) DRV - (MTsensor) -- C:\WINDOWS\system32\drivers\ASACPI.sys () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.suggest.enabled: false FF - prefs.js..browser.startup.homepage: "about:blank" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:2.0.3 FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.12 FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Programme\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012.06.17 13:32:33 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2012.01.30 21:42:23 | 000,000,000 | ---D | M] [2009.11.14 01:41:29 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\ZahalFighter\Anwendungsdaten\Mozilla\Extensions [2012.07.04 20:42:41 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\ZahalFighter\Anwendungsdaten\Mozilla\Firefox\Profiles\769e3lxv.default\extensions [2012.07.04 20:42:41 | 000,000,000 | ---D | M] (WOT) -- C:\Dokumente und Einstellungen\ZahalFighter\Anwendungsdaten\Mozilla\Firefox\Profiles\769e3lxv.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2012.01.30 21:42:26 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions [2011.08.01 21:38:12 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2011.08.01 21:21:07 | 000,000,000 | ---D | M] (Skype extension) -- C:\Programme\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2012.07.04 20:42:41 | 000,525,327 | ---- | M] () (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\ZAHALFIGHTER\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\769E3LXV.DEFAULT\EXTENSIONS\{73A6FE31-595D-460B-A920-FCC0F8843232}.XPI [2012.02.11 14:51:45 | 000,709,293 | ---- | M] () (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\ZAHALFIGHTER\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\769E3LXV.DEFAULT\EXTENSIONS\{DDC359D1-844A-42A7-9AA1-88A850A938A8}.XPI [2012.06.17 13:32:33 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll [2011.04.13 19:03:44 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll [2012.05.01 17:22:13 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml [2012.05.01 17:22:13 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml [2012.05.01 17:22:13 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml [2012.05.01 17:22:13 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml [2012.05.01 17:22:13 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml [2012.05.01 17:22:13 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2012.06.28 22:36:00 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [Gainward] C:\WINDOWS\TBPanel.exe (Gainward Co.) O4 - HKLM..\Run: [JMB36X Configure] C:\WINDOWS\System32\JMRaidSetup.exe (JMicron Technology Corp.) O4 - HKLM..\Run: [JMB36X IDE Setup] C:\WINDOWS\JM\JMInsIDE.exe () O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) O4 - HKLM..\Run: [nTrayFw] C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe (NVIDIA Corporation) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Programme\NVIDIA Corporation\nview\nwiz.exe () O4 - HKLM..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe () O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O9 - Extra Button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - E:\ICQ_Data\ICQ7M\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - E:\ICQ_Data\ICQ7M\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\WINDOWS\system32\nvappfilter.dll (NVIDIA) O15 - HKCU\..Trusted Domains: fritz.box ([]* in Lokales Intranet) O15 - HKCU\..Trusted Ranges: Range1 ([*] in Lokales Intranet) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1F06834F-A655-46CC-A878-8FD8DC1C9817}: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.11.14 01:34:39 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2007.08.15 09:49:16 | 000,398,600 | R--- | M] (Electronic Arts) - D:\AutoRun.exe -- [ UDF ] O32 - AutoRun File - [2007.08.16 09:48:10 | 000,000,000 | R--D | M] - D:\Autorun -- [ UDF ] O32 - AutoRun File - [2007.08.16 09:48:10 | 002,162,688 | R--- | M] () - D:\autorun.dat -- [ UDF ] O32 - AutoRun File - [2007.08.16 09:48:10 | 000,000,150 | R--- | M] () - D:\autorun.inf -- [ UDF ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) ========== Files/Folders - Created Within 30 Days ========== [2012.07.10 17:39:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\LastGood [2012.06.30 01:28:18 | 000,012,872 | ---- | C] (SurfRight B.V.) -- C:\WINDOWS\System32\bootdelete.exe [2012.06.30 01:25:41 | 000,000,000 | ---D | C] -- C:\Programme\HitmanPro [2012.06.30 01:24:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HitmanPro [2012.06.30 01:24:25 | 007,718,272 | ---- | C] (SurfRight B.V.) -- C:\Dokumente und Einstellungen\ZahalFighter\Desktop\HitmanPro36.exe [2012.06.29 18:31:48 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\ts3overlay [2012.06.29 17:49:17 | 000,000,000 | ---D | C] -- C:\_OTL [2012.06.29 01:45:19 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2012.06.29 01:37:43 | 000,596,992 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\ZahalFighter\Desktop\OTL.exe [2012.06.28 22:36:54 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp [2012.06.28 22:32:12 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2012.06.28 22:32:12 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2012.06.28 22:32:12 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2012.06.28 22:32:12 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2012.06.28 22:31:57 | 000,000,000 | ---D | C] -- C:\Qoobox [2012.06.28 22:31:54 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\ZahalFighter\Startmenü\Programme\Verwaltung [2012.06.28 22:31:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt [2012.06.28 22:15:03 | 004,566,027 | R--- | C] (Swearware) -- C:\Dokumente und Einstellungen\ZahalFighter\Desktop\ComboFix.exe [2012.06.28 20:30:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\ZahalFighter\Anwendungsdaten\Malwarebytes [2012.06.28 20:30:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware [2012.06.28 20:30:14 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2012.06.28 20:30:14 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2012.06.28 20:30:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2012.06.28 20:29:33 | 010,063,000 | ---- | C] (Malwarebytes Corporation ) -- C:\Dokumente und Einstellungen\ZahalFighter\Desktop\mbam-setup-1.61.0.1400.exe [2012.06.19 22:44:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ICQ7M [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012.07.10 21:35:09 | 000,000,558 | ---- | M] () -- C:\WINDOWS\DFC.INI [2012.07.10 17:33:39 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2012.07.09 21:08:35 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2012.07.06 10:22:37 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2012.07.06 01:02:22 | 000,000,343 | ---- | M] () -- C:\Dokumente und Einstellungen\ZahalFighter\Desktop\wot codes.rtf [2012.06.30 01:28:46 | 000,010,160 | ---- | M] () -- C:\Dokumente und Einstellungen\ZahalFighter\Desktop\log.xml [2012.06.30 01:28:18 | 000,012,872 | ---- | M] (SurfRight B.V.) -- C:\WINDOWS\System32\bootdelete.exe [2012.06.30 01:25:42 | 000,001,590 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\HitmanPro.lnk [2012.06.30 01:24:29 | 007,718,272 | ---- | M] (SurfRight B.V.) -- C:\Dokumente und Einstellungen\ZahalFighter\Desktop\HitmanPro36.exe [2012.06.29 01:37:43 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\ZahalFighter\Desktop\OTL.exe [2012.06.28 22:37:51 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2012.06.28 22:36:00 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2012.06.28 22:29:25 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat [2012.06.28 22:15:15 | 004,566,027 | R--- | M] (Swearware) -- C:\Dokumente und Einstellungen\ZahalFighter\Desktop\ComboFix.exe [2012.06.28 20:30:15 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk [2012.06.28 20:28:53 | 010,063,000 | ---- | M] (Malwarebytes Corporation ) -- C:\Dokumente und Einstellungen\ZahalFighter\Desktop\mbam-setup-1.61.0.1400.exe [2012.06.25 19:34:11 | 000,054,272 | ---- | M] () -- C:\Dokumente und Einstellungen\ZahalFighter\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2012.06.19 22:44:16 | 000,000,569 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ICQ7M.lnk [6 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2012.06.30 01:28:46 | 000,010,160 | ---- | C] () -- C:\Dokumente und Einstellungen\ZahalFighter\Desktop\log.xml [2012.06.30 01:25:42 | 000,001,590 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\HitmanPro.lnk [2012.06.28 22:32:12 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe [2012.06.28 22:32:12 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe [2012.06.28 22:32:12 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2012.06.28 22:32:12 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2012.06.28 22:32:12 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2012.06.28 22:29:19 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2012.06.28 20:30:15 | 000,000,756 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk [2012.06.19 22:44:16 | 000,000,569 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ICQ7M.lnk [2012.04.23 22:12:09 | 000,063,040 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe [2012.04.23 22:12:08 | 000,022,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2012.04.23 22:12:02 | 000,103,736 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe [2012.03.14 19:38:44 | 000,293,992 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin [2012.03.14 19:38:44 | 000,293,992 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin [2012.03.14 19:38:43 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin [2012.03.14 19:38:29 | 002,784,050 | ---- | C] () -- C:\WINDOWS\System32\nvdata.data [2011.12.07 01:54:14 | 000,000,091 | ---- | C] () -- C:\WINDOWS\CIV.INI [2011.04.14 17:20:41 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat [2010.11.04 21:56:10 | 000,843,776 | ---- | C] () -- C:\WINDOWS\vsnpstd3.exe [2010.11.04 21:56:10 | 000,015,498 | ---- | C] () -- C:\WINDOWS\snpstd3.ini [2010.11.04 21:56:07 | 000,172,032 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnpstd3.dll [2010.11.04 21:56:07 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd3.dll [2010.11.04 21:56:06 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd3.dll [2010.11.04 21:56:06 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\csnpstd3.dll [2009.11.17 01:57:13 | 000,054,272 | ---- | C] () -- C:\Dokumente und Einstellungen\ZahalFighter\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini < End of report > Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.61.0.1400 www.malwarebytes.org Datenbank Version: v2012.07.10.09 Windows XP Service Pack 3 x86 NTFS Internet Explorer 6.0.2900.5512 ZahalFighter :: ****** [Administrator] Schutz: Aktiviert 10.07.2012 21:44:55 mbam-log-2012-07-10 (21-44-55).txt Art des Suchlaufs: Vollständiger Suchlauf Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 269260 Laufzeit: 29 Minute(n), 52 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Vielen Dank Lg Geändert von Schokofreund (10.07.2012 um 21:21 Uhr) Grund: verabschiedung vergessen |
| Themen zu TR/Trash.Gen Trojan erneut von Avira gefunden |
| .com, .dll, avira, bho, desktop, download, einstellungen, file, helper, heuristiks/extra, heuristiks/shuriken, intranet, juli 2012, logfile, malwarebytes, microsoft, moved, nodrives, nt.dll, nvidia, object, opera, plug-in, realtek, rundll, services.exe, software, svchost.exe, system volume information, temp, trojan, usb, winlogon.exe |
Baum-Darstellung