Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
System verseucht mit Trojan.Win32.Jorik1456291289

System verseucht mit Trojan.Win32.Jorik1456291289


Log-Analyse und Auswertung: System verseucht mit Trojan.Win32.Jorik1456291289

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 25.08.2012, 18:44   #3
Ruper
 
System verseucht mit Trojan.Win32.Jorik1456291289 - Standard

System verseucht mit Trojan.Win32.Jorik1456291289


Code:
ATTFilter
All processes killed
========== OTL ==========
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearchScopes\DefaultScope| /E : value set successfully!
64bit-Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{0633EE93-D776-472f-A0FF-E1416B8B2E3A} not found.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearchScopes\DefaultScope| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{0633EE93-D776-472f-A0FF-E1416B8B2E3A} not found.
HKCUSOFTWAREMicrosoftInternet ExplorerMain\Start Page| /E : value set successfully!
Registry value HKEY_CURRENT_USERSOFTWAREMicrosoftInternet ExplorerURLSearchHooks\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully.
C:Program Files (x86)Ask.comGenericAskToolbar.dll moved successfully.
HKEY_CURRENT_USERSOFTWAREMicrosoftInternet ExplorerSearchScopes\DefaultScope| /E : value set successfully!
Registry key HKEY_CURRENT_USERSOFTWAREMicrosoftInternet ExplorerSearchScopes{A1D5327E-0719-43CE-BC12-07727B6BDAF1} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{A1D5327E-0719-43CE-BC12-07727B6BDAF1} not found.
HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings\ProxyEnable|dword:0 /E : value set successfully!
HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings\ProxyOverride| /E : value set successfully!
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "Google" removed from browser.search.selectedEngine
Prefs.js: "hxxp://www.google.de/" removed from browser.startup.homepage
Prefs.js: 0 removed from network.proxy.type
64bit-Registry key HKEY_LOCAL_MACHINESoftwareMozillaPlugins@adobe.com/FlashPlayer deleted successfully.
Registry key HKEY_LOCAL_MACHINESoftwareMozillaPlugins@Apple.com/iTunes,version= deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerToolbar\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerToolbar\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
File C:Program Files (x86)Ask.comGenericAskToolbar.dll not found.
Registry value HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerToolbar\Locked deleted successfully.
Registry value HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun\ deleted successfully.
Registry value HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun\ApnUpdater deleted successfully.
C:Program Files (x86)Ask.comUpdaterUpdater.exe moved successfully.
Registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer\NoActiveDesktopChanges deleted successfully.
Registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem\ConsentPromptBehaviorAdmin deleted successfully.
Registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem\ConsentPromptBehaviorUser deleted successfully.
Registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem\EnableLUA deleted successfully.
Registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem\PromptOnSecureDesktop deleted successfully.
Registry value HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer\NoDriveTypeAutoRun deleted successfully.
64bit-Registry key HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMenuExtAn OneNote s&enden deleted successfully.
64bit-Registry key HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMenuExtNach Microsoft E&xcel exportieren deleted successfully.
Registry key HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMenuExtAn OneNote s&enden not found.
Registry key HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerMenuExtNach Microsoft E&xcel exportieren not found.
64bit-Registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon\VMApplet:/pagefile deleted successfully.
Registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon\VMApplet:/pagefile deleted successfully.
64bit-Registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad\WebCheck deleted successfully.
64bit-Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{E6FB5E20-DE35-11CF-9C87-00AA005127ED} not found.
Registry value HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShellServiceObjectDelayLoad\WebCheck deleted successfully.
Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{E6FB5E20-DE35-11CF-9C87-00AA005127ED} not found.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesCdrom\AutoRun|DWORD:1 /E : value set successfully!
Folder C:UsersabcAppDataRoamingOpenCandy not found.
C:WindowsInstaller{e98f47b8-6818-7ee8-758e-57d62ed72e4a}L0000004.@ moved successfully.
C:WindowsInstaller{e98f47b8-6818-7ee8-758e-57d62ed72e4a}@ moved successfully.
File C:UsersabcAppDataLocal{e98f47b8-6818-7ee8-758e-57d62ed72e4a}@ not found.
========== FILES ==========
C:windowsInstaller{e98f47b8-6818-7ee8-758e-57d62ed72e4a}U folder moved successfully.
C:windowsInstaller{e98f47b8-6818-7ee8-758e-57d62ed72e4a}L folder moved successfully.
C:windowsInstaller{e98f47b8-6818-7ee8-758e-57d62ed72e4a} folder moved successfully.
Folder C:UsersabcAppDataLocal{e98f47b8-6818-7ee8-758e-57d62ed72e4a} not found.
FileFolder C:UsersabcAppDataLocal{*} not found.
C:ProgramDataFullRemove.exe moved successfully.
C:ProgramDataTemp{CB099890-1D5F-11D5-9EA9-0050BAE317E1} folder moved successfully.
C:ProgramDataTemp{C59C179C-668D-49A9-B6EA-0121CCFC1243} folder moved successfully.
C:ProgramDataTemp{B7A0CE06-068E-11D6-97FD-0050BACBF861} folder moved successfully.
C:ProgramDataTemp{5DB1DF0C-AABC-4362-8A6D-CEFDFB036E41} folder moved successfully.
C:ProgramDataTemp{40BF1E83-20EB-11D8-97C5-0009C5020658} folder moved successfully.
C:ProgramDataTemp{2BF2E31F-B8BB-40A7-B650-98D28E0F7D47} folder moved successfully.
C:ProgramDataTemp{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} folder moved successfully.
C:ProgramDataTemp{01FB4998-33C4-4431-85ED-079E3EEFE75D} folder moved successfully.
C:ProgramDataTemp folder moved successfully.
FileFolder C:UsersabcAppDataLocalTemp*.exe not found.
FileFolder C:UsersabcAppDataLocalLowSunJavaDeploymentcache not found.
< ipconfig /flushdns /c >
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
C:UsersasaDesktopcmd.bat deleted successfully.
C:UsersasaDesktopcmd.txt deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: asa
->Temp folder emptied: 17599883 bytes
->Temporary Internet Files folder emptied: 1809508 bytes
->FireFox cache emptied: 86956200 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 859 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%System32 .tmp files removed: 0 bytes
%systemroot%System32 (64bit) .tmp files removed: 0 bytes
%systemroot%System32drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 209076 bytes
%systemroot%sysnativeconfigsystemprofileAppDataLocalMicrosoftWindowsTemporary Internet Files folder emptied: 36030261 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 136.00 mb
 
 
OTL by OldTimer - Version 3.2.58.1 log created on 08252012_192741
 
FilesFolders moved on Reboot...
C:UsersasaAppDataLocalTempFXSAPIDebugLogFile.txt moved successfully.
 
PendingFileRenameOperations files...
 
Registry entries deleted on Reboot...
__________________
 

Themen zu System verseucht mit Trojan.Win32.Jorik1456291289
anhang, befinden, bild, compu, computer, datei, extras.txt, facebook, freundin, home, otl.txt, system, troja, verseucht, windows, windows 7, windows 7 home


« Trojaner, evtl. Rootkit / Live Security Platinum | Trojaner Bundespolizei? »


Ähnliche Themen: System verseucht mit Trojan.Win32.Jorik1456291289


  1. Kaspersky findet Backdoor.Win32.Zaccess, Trojan-Ransom.Win32.Gimeno, Trojan.Win32.Inject
    Log-Analyse und Auswertung - 01.02.2014 (17)
  2. Windows 8.1: Trojan:Win32/Meredrop, Trojan:Win32/Malagent, Trojan:Win32/Matsnu.L und Worm:Win32/Ainslot.A
    Log-Analyse und Auswertung - 19.01.2014 (5)
  3. Desinfizierung durch Kaspersky nicht möglich: Trojan.Win32.Bromngr.k, HEUR:Trojan.Win32.Generic, Trojan-Downloader.Win32.MultiDL.I
    Plagegeister aller Art und deren Bekämpfung - 28.11.2013 (1)
  4. Vista - Firefox keine funktion, System langsam, Abstürze - System verseucht?
    Plagegeister aller Art und deren Bekämpfung - 18.11.2013 (18)
  5. Win7, Advanced System Protector, System verseucht?
    Log-Analyse und Auswertung - 15.09.2013 (19)
  6. Trojan:Win32/Bublik.b vom MSEssentials entfernt. Ist das System jetzt sicher?
    Log-Analyse und Auswertung - 17.02.2012 (4)
  7. Trojan:Win32/Alureon.FL | PWS:Win32/Fareit.A | Trojan:Win32/Sirefef.P....Auch MBR infiziert?
    Plagegeister aller Art und deren Bekämpfung - 06.01.2012 (7)
  8. Trojan-spy.win32 agent + system volume viren + pc abstürtze
    Plagegeister aller Art und deren Bekämpfung - 15.12.2011 (4)
  9. Trojan-Downloader.Win32.Geral.zvj; System Kompromittiert!
    Plagegeister aller Art und deren Bekämpfung - 04.02.2011 (19)
  10. Trojan-Spy.Win32.Pophot.gzv / Trojan.Win32.Buzus.alwl / Virus.Win32.Virut.ce
    Plagegeister aller Art und deren Bekämpfung - 19.02.2009 (1)
  11. Trojan.Win32.Gerneric in System Volume Information?
    Log-Analyse und Auswertung - 25.12.2008 (2)
  12. System Volume Information / Win32:Trojan-gen
    Plagegeister aller Art und deren Bekämpfung - 05.11.2008 (3)
  13. Vierenfund (Win32:Trojan-gen {VC}), system jetzt sauber?
    Log-Analyse und Auswertung - 07.04.2008 (5)
  14. Win32:Trojan gen (other) System Volume Information
    Mülltonne - 21.02.2008 (0)
  15. system alert: trojan-spy.win32@mx
    Plagegeister aller Art und deren Bekämpfung - 07.08.2007 (4)
  16. system alert:trojan-soy.win32@mx
    Mülltonne - 14.12.2006 (0)
  17. brauch hilfe bei: Win32/Oleloa.gen!, Trojan.Win32.Golid.g, Trojan.Win32.Small.ev
    Plagegeister aller Art und deren Bekämpfung - 29.11.2005 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema System verseucht mit Trojan.Win32.Jorik1456291289 - Code: Alles auswählen Aufklappen ATTFilter All processes killed ========== OTL ========== HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearchScopes\DefaultScope| /E : value set successfully! 64bit-Registry key HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerSearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{0633EE93-D776-472f-A0FF-E1416B8B2E3A} not found. HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet - System verseucht mit Trojan.Win32.Jorik1456291289...
Archiv
Du betrachtest: System verseucht mit Trojan.Win32.Jorik1456291289 auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131