Großes Problem mit Trojan-Downloader.WIN.32.Agent.variant

alex02061990

So das ist rausgekommen, hab zwar null Ahnung, hoffe aber es passt so.
Ach, Veränderungen, welche das Programm machen wollte hat es nicht machen dürfen.
Was soll ich jetzt weiter machen?

Username "Alexander Thumfort" - 24.05.2008 18:33:45 [Fixwareout edited 9/01/2007]

~~~~~ Prerun check

Error: Key: software\microsoft\windows\currentversion\run does not exist!

HKLM\SOFTWARE\~\Winlogon\ "System"="kdahc.exe"

HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{ACC76144-A3F8-4680-9D4A-4B73E81D0858}
"nameserver"="85.255.114.30,85.255.112.152" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{CE1958D6-8CE6-4515-8308-306F64720D1A}
"nameserver"="85.255.114.30,85.255.112.152" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{D804B34E-9BC2-43D0-99F3-AAE4BB60DEDC}
"nameserver"="85.255.114.30,85.255.112.152" <Value cleared.
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{ACC76144-A3F8-4680-9D4A-4B73E81D0858}
"DhcpNameServer"="85.255.114.30,85.255.112.152" <Value cleared.

Der DNS-Auflösungscache wurde geleert.


System was rebooted successfully.

~~~~~ Postrun check
HKLM\SOFTWARE\~\Winlogon\ "system"="kdahc.exe"
....
....
~~~~~ Misc files.
....
~~~~~ Checking for older varients.
....

~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATIPTA"="\"C:\\Programme\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe\""
"SoundMan"="SOUNDMAN.EXE"
"AGRSMMSG"="AGRSMMSG.exe"
"SynTPEnh"="C:\\Programme\\Synaptics\\SynTP\\SynTPEnh.exe"
"AntivirusRegistration"="C:\\Programme\\CA\\Etrust Antivirus\\Register.exe"
"PestPatrolRegistration"="C:\\Programme\\PestPatrol\\Register.exe"
"PestPatrol Control Center"="C-\\Programme\\PestPatrol\\PPControl.exe"
"RemoteControl"="C:\\Programme\\CyberLink\\PowerDVD\\PDVDServ.exe"
"mmtask"="c:\\Program Files\\MusicMatch\\MusicMatch Jukebox\\mmtask.exe"
"PPMemCheck"="C:\\Programme\\PestPatrol\\PPMemCheck.exe"
"CookiePatrol"="C:\\Programme\\PestPatrol\\CookiePatrol.exe"
"Marvell-CB35P"="\"C:\\Programme\\Marvell CB35P\\Mrv8000x.exe\" \"-h\""
"HP Software Update"="C:\\Programme\\HP\\HP Software Update\\HPWuSchd2.exe"
"CameraFixer"="C:\\WINDOWS\\CameraFixer.exe"
"tsnpstd3"="C:\\WINDOWS\\tsnpstd3.exe"
"snpstd3"="C:\\WINDOWS\\vsnpstd3.exe"
"swewpae"="C:\\WINDOWS\\system32\\swewpae.exe"
"UVS11 Preload"="C:\\Programme\\Ulead Systems\\Ulead VideoStudio 11\\uvPL.exe"
"QuickTime Task"="\"C:\\Programme\\QuickTime\\qttask.exe\" -atboottime"
"iTunesHelper"="\"C:\\Programme\\iTunes\\iTunesHelper.exe\""
"egui"="\"C:\\Programme\\ESET\\ESET Smart Security\\egui.exe\" /hide /waitservice"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"Power2GoExpress"="\"C:\\Programme\\CyberLink\\Power2Go\\Power2GoExpress.exe\" /Startup"
"QuickTime Task"="\"C:\\Programme\\QuickTime\\qttask.exe\" -atboottime"
"PowerBar"=""
"PPMemCheck"="C:\\Programme\\PestPatrol\\PPMemCheck.exe"
"PestPatrol Control Center"="C:\\Programme\\PestPatrol\\PPControl.exe"
"CookiePatrol"="C:\\Programme\\PestPatrol\\CookiePatrol.exe"
"MsnMsgr"="\"C:\\Programme\\Windows Live\\Messenger\\MsnMsgr.Exe\" /background"
"updateMgr"="\"C:\\Programme\\Adobe\\Acrobat 7.0\\Reader\\AdobeUpdateManager.exe\" AcRdB7_0_9 -reboot 1"
"SpybotSD TeaTimer"="C:\\Programme\\Spybot - Search & Destroy\\TeaTimer.exe"
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~