Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Virus mit dem Titel: "Cyber Crime Investigation Departement"

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 26.07.2012, 23:08   #1
t'john
/// Helfer-Team
 
Virus mit dem Titel: "Cyber Crime Investigation Departement" - Standard

Virus mit dem Titel: "Cyber Crime Investigation Departement"



Suche mal nach dem OTL-Fix-Log!

sieht so aus: datum-zahlen.txt

poste es hier.
__________________
Mfg, t'john
Das TB unterstützen

Alt 26.07.2012, 23:10   #2
cettt
 
Virus mit dem Titel: "Cyber Crime Investigation Departement" - Standard

Virus mit dem Titel: "Cyber Crime Investigation Departement"



Hier das Log:

All processes killed
========== PROCESSES ==========
========== OTL ==========
Service tvnserver stopped successfully!
Service tvnserver deleted successfully!
Service SkypeUpdate stopped successfully!
Service SkypeUpdate deleted successfully!
Service JavaQuickStarterService stopped successfully!
Service JavaQuickStarterService deleted successfully!
Service WDICA stopped successfully!
Service WDICA deleted successfully!
Service PDRFRAME stopped successfully!
Service PDRFRAME deleted successfully!
Service PDRELI stopped successfully!
Service PDRELI deleted successfully!
Service PDFRAME stopped successfully!
Service PDFRAME deleted successfully!
Service PDCOMP stopped successfully!
Service PDCOMP deleted successfully!
Service PCIDump stopped successfully!
Service PCIDump deleted successfully!
Service pccsmcfd stopped successfully!
Service pccsmcfd deleted successfully!
Service lbrtfdc stopped successfully!
Service lbrtfdc deleted successfully!
Service i2omgmt stopped successfully!
Service i2omgmt deleted successfully!
Service Changer stopped successfully!
Service Changer deleted successfully!
Error: Unable to stop service LHidUsbK!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LHidUsbK deleted successfully.
C:\WINDOWS\system32\drivers\LHidUsbK.sys moved successfully.
Service L8042mou stopped successfully!
Service L8042mou deleted successfully!
C:\WINDOWS\system32\drivers\L8042mou.Sys moved successfully.
Error: Unable to stop service LMouKE!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LMouKE deleted successfully.
C:\WINDOWS\system32\drivers\LMouKE.Sys moved successfully.
Error: Unable to stop service LHidKe!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LHidKe deleted successfully.
C:\WINDOWS\system32\drivers\LHidKE.Sys moved successfully.
HKLM\Software\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Registry key HKEY_USERS\Cetnick_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks not found.
Registry key HKEY_USERS\Cetnick_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BC4FFE41-DE9F-46fa-B455-AAD49B9F9938}\ not found.
Unable to set value : HKU\Cetnick_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E!
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@java.com/JavaPlugin\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\MozillaPlugins\@adobe.com/FlashPlayer\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{346FDE31-DFF9-418A-90C8-BA31DC9FF2EF}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{346FDE31-DFF9-418A-90C8-BA31DC9FF2EF}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{2E924F4F-67F0-4BD8-9560-49F468E843D2} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2E924F4F-67F0-4BD8-9560-49F468E843D2}\ deleted successfully.
Registry key HKEY_USERS\Cetnick_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2E924F4F-67F0-4BD8-9560-49F468E843D2}\ not found.
Registry key HKEY_USERS\Cetnick_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
Registry key HKEY_USERS\Cetnick_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BC4FFE41-DE9F-46FA-B455-AAD49B9F9938}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\POINTER deleted successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\\Nokia.PCSync deleted successfully.
Registry key HKEY_USERS\Cetnick_ON_C\Software\Microsoft\Windows\CurrentVersion\Run not found.
C:\Dokumente und Einstellungen\Cetnick\Startmenü\Programme\Autostart\ctfmon.lnk moved successfully.
File X:\minint\SYSTEM32\RUNDLL32.EXE not found.
C:\Dokumente und Einstellungen\Cetnick\Startmenü\Programme\Autostart\PowerReg Scheduler.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\HonorAutoRunSetting deleted successfully.
Registry value HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry key HKEY_USERS\Cetnick_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer not found.
Registry key HKEY_USERS\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer not found.
Registry key HKEY_USERS\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer not found.
Registry key HKEY_USERS\UpdatusUser_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{70AF6C9F-0818-4cf7-924A-BBDBB24211D3}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{70AF6C9F-0818-4cf7-924A-BBDBB24211D3}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B863453A-26C3-4e1f-A54D-A2CD196348E9}\ not found.
Starting removal of ActiveX control {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
C:\WINDOWS\Downloaded Program Files\erma.inf moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\skype-ie-addon-data\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91774881-D725-4E58-B298-07617B9B86A8}\ deleted successfully.
File {91774881-D725-4E58-B298-07617B9B86A8} - File not found not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\GinaDLL:RtlGina2.dll deleted successfully.
C:\WINDOWS\system32\RtlGina2.dll moved successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
C:\AUTOEXEC.BAT moved successfully.
File X:\AUTORUN.INF not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f3e1a580-4600-11df-af10-00184dcce78d}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f3e1a580-4600-11df-af10-00184dcce78d}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f3e1a580-4600-11df-af10-00184dcce78d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f3e1a580-4600-11df-af10-00184dcce78d}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f3e1a580-4600-11df-af10-00184dcce78d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f3e1a580-4600-11df-af10-00184dcce78d}\ not found.
File C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL autorun.html not found.
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session manager\\BootExecute:autocheck autochk * deleted successfully.
File C:\Dokumente und Einstellungen\Cetnick\Anwendungsdaten\Mozilla\Firefox\Profiles\a7jv1izp.default\searchplugins\sweeti m.xml not found.
C:\WINDOWS\tasks\OGALogon.job moved successfully.
C:\WINDOWS\tasks\1-Klick-Wartung.job moved successfully.
C:\WINDOWS\tasks\Adobe Flash Player Updater.job moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\z7_0ytr.pad moved successfully.
C:\Dokumente und Einstellungen\Cetnick\Startmenü\Programme\Autostart\ctfmon.lnk moved successfully.
========== FILES ==========
< ipconfig /flushdns /c >
Windows-IP-Konfiguration
Der DNS-Auflösungscache wurde geleert.
C:\Dokumente und Einstellungen\Cetnick\Desktop\cmd.bat deleted successfully.
C:\Dokumente und Einstellungen\Cetnick\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Cetnick
->Temp folder emptied: 1035864 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 55499639 bytes
->Google Chrome cache emptied: 13317409 bytes
->Flash cache emptied: 940 bytes

User: Default User
->Temp folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 66016 bytes

User: NetworkService
->Temp folder emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 2951 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 7643136 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 74,00 mb


[EMPTYFLASH]

User: All Users

User: Cetnick
->Flash cache emptied: 0 bytes

User: Default User

User: LocalService

User: NetworkService

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYJAVA]

User: All Users

User: Cetnick
->Java cache emptied: 0 bytes

User: Default User

User: LocalService

User: NetworkService

User: UpdatusUser

Total Java Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.54.1 log created on 07262012_223533

Files\Folders moved on Reboot...
File\Folder C:\Dokumente und Einstellungen\Cetnick\Lokale Einstellungen\Temp\WERae1e.dir00\iexplore.exe.mdmp not found!
C:\Dokumente und Einstellungen\Cetnick\Lokale Einstellungen\Temp\rty0_7z.exe moved successfully.

Registry entries deleted on Reboot...
__________________


Antwort

Themen zu Virus mit dem Titel: "Cyber Crime Investigation Departement"
.com, bho, browser, computer, converter, crime, ctfmon.lnk, cyber crime, desktop, einstellungen, error, firefox, flash player, format, gesperrt, homepage, investigation, langs, logfile, mozilla, mp3, netgear, plug-in, registry, rundll, scan, server, software, tvnserver, virus, windows, windows xp




Ähnliche Themen: Virus mit dem Titel: "Cyber Crime Investigation Departement"


  1. Cyber Crime Investigation Virus Schweiz - kann mir jemand helfen bitte?
    Log-Analyse und Auswertung - 04.10.2013 (13)
  2. Malware POLIZEI Cyber Crime Departement
    Plagegeister aller Art und deren Bekämpfung - 23.01.2013 (5)
  3. Trojaner "cyber crime investigation department"
    Log-Analyse und Auswertung - 03.12.2012 (15)
  4. "Polizei: Cyber Crime Investigation Department" Schadsoftware
    Plagegeister aller Art und deren Bekämpfung - 23.11.2012 (13)
  5. "Polizei: Cyber Crime Investigation Department" Trojaner: habe bereits OTL.Txt und Extras.Txt. erstellt
    Plagegeister aller Art und deren Bekämpfung - 13.11.2012 (16)
  6. Cyber Crime Investigation Department Virus
    Plagegeister aller Art und deren Bekämpfung - 28.10.2012 (12)
  7. cyber crime investigation department österreich - virus?
    Log-Analyse und Auswertung - 24.10.2012 (2)
  8. Cyber Crime Investigation Department Virus
    Log-Analyse und Auswertung - 23.10.2012 (4)
  9. Polizei Cyber Crime Investigation Departement Virus auf meinem Vista Laptop
    Plagegeister aller Art und deren Bekämpfung - 21.10.2012 (11)
  10. Polizei Virus - Cyber Crime Investigation Department
    Log-Analyse und Auswertung - 09.10.2012 (28)
  11. Cyber Crime Investigation Depatment Virus
    Plagegeister aller Art und deren Bekämpfung - 10.09.2012 (15)
  12. Cyber Crime Investigation Virus
    Log-Analyse und Auswertung - 04.09.2012 (1)
  13. Cyber Crime Investigation Department Virus
    Plagegeister aller Art und deren Bekämpfung - 04.09.2012 (10)
  14. cyber crime investigation departement trojaner
    Plagegeister aller Art und deren Bekämpfung - 04.09.2012 (3)
  15. Cyber Crime Investigation Department Virus
    Plagegeister aller Art und deren Bekämpfung - 03.09.2012 (5)
  16. Bitte um Hilfe gegen Virus cyber crime investigation department österreich
    Plagegeister aller Art und deren Bekämpfung - 02.09.2012 (11)
  17. Habe den Virus Cyber Crime Investigation Österreich, bitte um Hilfe.
    Log-Analyse und Auswertung - 27.08.2012 (1)

Zum Thema Virus mit dem Titel: "Cyber Crime Investigation Departement" - Suche mal nach dem OTL-Fix-Log! sieht so aus: datum-zahlen.txt poste es hier. - Virus mit dem Titel: "Cyber Crime Investigation Departement"...
Archiv
Du betrachtest: Virus mit dem Titel: "Cyber Crime Investigation Departement" auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.