Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Trojaner "Antivirus XP 2008"

Trojaner "Antivirus XP 2008"


Plagegeister aller Art und deren Bekämpfung: Trojaner "Antivirus XP 2008"

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 10.08.2008, 02:23   #1
ArtOnTheWeb
 
Trojaner "Antivirus XP 2008" - Frage

Trojaner "Antivirus XP 2008"


Hallo,

leider habe ich mir gestern den Trojaner "Antivirus XP 2008" eingefangen und seit dem kann ich mein WinXP nur im abgesicherten Modus hochfahren. Das Internet ist im abgesicherten Modus auch verfügbar.

Ich wäre für Ihre Hilfe dankbar. Ihre Malwarebytes Anti-Malware Anleitung habe ich gelesen.

Hier ist also der Logfile:

Code:
ATTFilter
Malwarebytes' Anti-Malware 1.24
Datenbank Version: 1036
Windows 5.1.2600 Service Pack 2

22:54:52 09.08.2008
mbam-log-8-9-2008 (22-54-52).txt

Scan-Methode: Vollständiger Scan (C:\|E:\|F:\|H:\|I:\|L:\|)
Durchsuchte Objekte: 492622
Laufzeit: 1 hour(s), 16 minute(s), 11 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 33
Infizierte Registrierungswerte: 18
Infizierte Dateiobjekte der Registrierung: 23
Infizierte Verzeichnisse: 15
Infizierte Dateien: 46

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\Interface\{967a494a-6aec-4555-9caf-fa6eb00acf91} (Rogue.PestPatrol) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{9692be2f-eb8f-49d9-a11c-c24c1ef734d5} (Rogue.PestPatrol) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{a8954909-1f0f-41a5-a7fa-3b376d69e226} (Rogue.PestPatrol) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a3628b71-12f5-82e7-9b56-0d7e91241adb} (Rogue.PestPatrol) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a3628b71-12f5-82e7-9b56-0d7e91241adb} (Rogue.PestPatrol) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b69a9db4-d0a1-4722-b56b-f20757a29cdf} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b69a9db4-d0a1-4722-b56b-f20757a29cdf} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{36dbc179-a19f-48f2-b16a-6a3e19b42a87} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{a93a1ba9-9ee8-469f-a9fe-fd1c26700bda} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\alewinsecure.winsecure (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\alewinsecure.winsecure.1 (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a1789eb6-b263-4bd6-8830-d3daaf78949a} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{7be6b643-6201-4cf7-b8b1-d79ffae57cba} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{58696980-c6b3-4ad2-ab53-718f1c3c57ca} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A61098D-612B-4EF2-943D-64E920684061} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{09f1adac-76d8-4d0f-99a5-5c907dadb988} (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{5adf3862-9e2e-4ad3-86f7-4510e6550cd0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5adf3862-9e2e-4ad3-86f7-4510e6550cd0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{e12bff69-38a7-406e-a8ef-2738107a7831} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\tcpsr (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\tcpsr (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\altcompare (Dialer) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\rhcnfjj0et3e (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\rhcnfjj0et3e (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Live_TV (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\msvcl1.bhoapp (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\msvcl1.bhoapp.1 (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\WR (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Juan (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\webHancer (Adware.WebHancer) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\AleWinSecure.EXE (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\WUSN.1 (Adware.WhenUSave) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{b69a9db4-d0a1-4722-b56b-f20757a29cdf} (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{02ffac45-0b10-5633-4296-1801f1a36678} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\{f710fa10-2031-3106-8872-93a2b5c5c620} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\DriverLoad (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\DriverCheck (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\SystemDriverLoad (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\winhost (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\winhost1 (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\winhost2 (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\winhost3 (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\winhost4 (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\FDriver (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\ADriver (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\SystemDriver (Trojan.Clicker) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Control Panel\Desktop\wallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Control Panel\Desktop\originalwallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Control Panel\Desktop\convertedwallpaper (Hijack.Wallpaper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Control Panel\Desktop\scrnsave.exe (Hijack.Wallpaper) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83 85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{638753c0-bf3c-4f8e-8a53-ff7184946675}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{6672e2f4-4513-40d4-8108-cb3697fd3a78}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{8fe473ac-28e2-4d15-a25a-562a01b07a6c}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{c801fa85-f755-45f4-b14b-06f37d6146a1}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83 85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{638753c0-bf3c-4f8e-8a53-ff7184946675}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{6672e2f4-4513-40d4-8108-cb3697fd3a78}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{8fe473ac-28e2-4d15-a25a-562a01b07a6c}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{c801fa85-f755-45f4-b14b-06f37d6146a1}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83 85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{638753c0-bf3c-4f8e-8a53-ff7184946675}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{638753c0-bf3c-4f8e-8a53-ff7184946675}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{6672e2f4-4513-40d4-8108-cb3697fd3a78}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{8fe473ac-28e2-4d15-a25a-562a01b07a6c}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\Parameters\Interfaces\{c801fa85-f755-45f4-b14b-06f37d6146a1}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83 85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\Tcpip\Parameters\Interfaces\{638753c0-bf3c-4f8e-8a53-ff7184946675}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\Tcpip\Parameters\Interfaces\{6672e2f4-4513-40d4-8108-cb3697fd3a78}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\Tcpip\Parameters\Interfaces\{8fe473ac-28e2-4d15-a25a-562a01b07a6c}\NameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet004\Services\Tcpip\Parameters\Interfaces\{c801fa85-f755-45f4-b14b-06f37d6146a1}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.115.83,85.255.112.206 -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispBackgroundPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Infizierte Verzeichnisse:
E:\Programme\Live_TV (Adware.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wsnpoem (Trojan.Agent) -> Quarantined and deleted successfully.
E:\Programme\altcmd (Trojan.Agent) -> Quarantined and deleted successfully.
E:\Programme\rhcnfjj0et3e (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\a*** ****t\Anwendungsdaten\rhcnfjj0et3e (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\a*** ****t\Anwendungsdaten\rhcnfjj0et3e\Quarantine (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\a*** ****t\Anwendungsdaten\rhcnfjj0et3e\Quarantine\Autorun (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\a*** ****t\Anwendungsdaten\rhcnfjj0et3e\Quarantine\Autorun\HKCU (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\a*** ****t\Anwendungsdaten\rhcnfjj0et3e\Quarantine\Autorun\HKCU\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\a*** ****t\Anwendungsdaten\rhcnfjj0et3e\Quarantine\Autorun\HKLM (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\a*** ****t\Anwendungsdaten\rhcnfjj0et3e\Quarantine\Autorun\HKLM\RunOnce (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\a*** ****t\Anwendungsdaten\rhcnfjj0et3e\Quarantine\Autorun\StartMenuAllUsers (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\a*** ****t\Anwendungsdaten\rhcnfjj0et3e\Quarantine\Autorun\StartMenuCurrentUser (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\a*** ****t\Anwendungsdaten\rhcnfjj0et3e\Quarantine\BrowserObjects (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\a*** ****t\Anwendungsdaten\rhcnfjj0et3e\Quarantine\Packages (Rogue.Multiple) -> Quarantined and deleted successfully.

Infizierte Dateien:
E:\Programme\altcmd\altcmd32.dll (Rogue.PestPatrol) -> Quarantined and deleted successfully.
E:\Programme\Live_TV\tbLiv1.dll (Adware.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\b129.exe (Adware.Webhancer) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\tcpsr.sys (Trojan.Agent) -> Quarantined and deleted successfully.
E:\Azureus\Download2\ACDSee.Pro.v8.1.99.Incl.Keymaker-CORE\CORE10k.EXE (Trojan.Agent) -> Quarantined and deleted successfully.
E:\Programme\Online_TV\tbOnl0.dll (Adware.Shopper) -> Quarantined and deleted successfully.
H:\UseNext_Download\Tools\Driver.Magician.v3.27.Incl.Keymaker-CORE\CORE10k.EXE (Trojan.Agent) -> Quarantined and deleted successfully.
H:\UseNext_Download\Tools\Fine.Software.Fine.Metronome.v3.4.1.Incl.Keygen-ViRiLiTY\keygen.exe (Spyware.OnlineGames) -> Quarantined and deleted successfully.
H:\UseNext_Download\wizard\Incomedia - Website X5 - Designer\keygen-CORE\CORE10k.EXE (Trojan.Agent) -> Quarantined and deleted successfully.
I:\Temporary Internet Files\Content.IE5\YYJB5W3V\dnlsvc[1].exe (Proxy.Agent) -> Quarantined and deleted successfully.
I:\UseNext_Download\Software\Multilizer 2007 Enterprise v7.0.14.243\CORE10k.EXE (Trojan.Agent) -> Quarantined and deleted successfully.
I:\UseNext_Download\wizard\Windows XP Professional 100 % Original m (Windows\KeyGen.exe (Malware.Tool) -> Quarantined and deleted successfully.
E:\Programme\Live_TV\INSTALL.LOG (Adware.Agent) -> Quarantined and deleted successfully.
E:\Programme\Live_TV\tbLive.dll (Adware.Agent) -> Quarantined and deleted successfully.
E:\Programme\Live_TV\toolbar.cfg (Adware.Agent) -> Quarantined and deleted successfully.
E:\Programme\Live_TV\UNWISE.EXE (Adware.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\wsnpoem\audio.dll.cla (Trojan.Agent) -> Quarantined and deleted successfully.
E:\Programme\altcmd\altcmd.inf (Trojan.Agent) -> Quarantined and deleted successfully.
E:\Programme\altcmd\uninstall.bat (Trojan.Agent) -> Quarantined and deleted successfully.
E:\Programme\rhcnfjj0et3e\database.dat (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Programme\rhcnfjj0et3e\license.txt (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Programme\rhcnfjj0et3e\MFC71.dll (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Programme\rhcnfjj0et3e\MFC71ENU.DLL (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Programme\rhcnfjj0et3e\msvcp71.dll (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Programme\rhcnfjj0et3e\msvcr71.dll (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Programme\rhcnfjj0et3e\rhcnfjj0et3e.exe (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Programme\rhcnfjj0et3e\rhcnfjj0et3e.exe.local (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Programme\rhcnfjj0et3e\Uninstall.exe (Rogue.Multiple) -> Quarantined and deleted successfully.
E:\Dokumente und Einstellungen\axel hundt\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Antivirus XP 2008.lnk (Rogue.Antivirus2008) -> Quarantined and deleted successfully.
C:\WINDOWS\neos.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\back.exe.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\alt.exe.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\0xf9.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\regscan.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\WINDOWS\crock+mock.config (Worm.Zhelatin) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\blphcjfjj0et3e.scr (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lphcjfjj0et3e.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\phcjfjj0et3e.bmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\pphcjfjj0et3e.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\winsub.xml (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\svcp.csv (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\wr.txt (Malware.Trace) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\All Users\Desktop\Antivirus XP 2008.lnk (Rogue.Antivirus) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\a*** ****t\Lokale Einstellungen\TEMP\.tt1.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\a*** ****t\Lokale Einstellungen\TEMP\.tt3.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\a*** ****t\Lokale Einstellungen\TEMP\dnlsvc.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
Geändert von ArtOnTheWeb (10.08.2008 um 02:29 Uhr)

 

Themen zu Trojaner "Antivirus XP 2008"
adware.agent, adware.bho, adware.shopper, adware.webhancer, adware.whenusave, antivirus xp 2008, compare, controlset002, dialer, hijack.displayproperties, hijack.wallpaper, install.exe, launch, malware.tool, malware.trace, proxy.agent, quara, rogue.antivirus2008, rogue.multiple, rogue.pestpatrol, spyware.onlinegames, trojan.agent, trojan.bho, trojan.clicker, trojan.dnschanger, trojan.downloader, trojan.vundo, usenext, windows\system32\drivers, worm.zhelatin


« Probleme mit InternetExplorer bzw. WLAN Laptop | Und es wurde schlimmer(csrss, smss?) »


Ähnliche Themen: Trojaner "Antivirus XP 2008"


  1. Diverse Malware ("CoolSaleCoupon", "ddownlloaditkeep", "omiga-plus", "SaveSense", "SaleItCoupon"); lahmer PC & viel Werbung!
    Plagegeister aller Art und deren Bekämpfung - 11.01.2015 (16)
  2. Anti Spyware+ Antivirus ohne funktion, PC langsam, "Setting.DisableTaskMgr", "Setting.DisableRegistryTools"
    Plagegeister aller Art und deren Bekämpfung - 10.12.2014 (9)
  3. "monstermarketplace.com" Infektion und ihre Folgen; "Anti-Virus-Blocker"," unsichtbare Toolbars" + "Browser-Hijacker" von selbst installiert
    Log-Analyse und Auswertung - 16.11.2013 (21)
  4. "search.ueep.com" und "Antivirus Security Pro" entfernen
    Plagegeister aller Art und deren Bekämpfung - 08.11.2013 (36)
  5. Gibt es einen Schutz vor "Malware Defense", "Antivirus 2010pro" und Co?
    Antiviren-, Firewall- und andere Schutzprogramme - 30.12.2012 (25)
  6. Trojaner "TDSS" / Antivirus 2009 Spyware -Ist das System jetzt wieder sauber???
    Log-Analyse und Auswertung - 15.02.2009 (3)
  7. Selbständiges öffnen von "Sicherheitssoftware" Spyware Guard 2008
    Plagegeister aller Art und deren Bekämpfung - 01.01.2009 (3)
  8. "ANTIVIRUS XP 2008 license agreement"wer kann mir helfen?
    Log-Analyse und Auswertung - 15.09.2008 (3)
  9. Weblinks funktionieren nach "AntivirusXP 2008" nicht mehr, obwohl eliminiert.
    Log-Analyse und Auswertung - 15.09.2008 (4)
  10. Logfiles mit "XP-Antivirus 2008"
    Plagegeister aller Art und deren Bekämpfung - 02.09.2008 (5)
  11. Frage zu diesem widerlichen "XP Antivirus 2008"
    Plagegeister aller Art und deren Bekämpfung - 28.08.2008 (18)
  12. "Adware.Virtumonde"/"Downloader.MisleadApp"/"TR/VB.agt.4"/"NewDotNet.A.1350"/"Fakerec
    Plagegeister aller Art und deren Bekämpfung - 22.08.2008 (6)
  13. "Hijacked Internet access by WebHancer" installiert "Antivirus 2009 XP"
    Log-Analyse und Auswertung - 18.08.2008 (1)
  14. Antivirus 2008 XP (nicht "Antivirus XP 2008"!)
    Plagegeister aller Art und deren Bekämpfung - 10.08.2008 (1)
  15. HJT-Logfile nach "Vista Antivirus 2008"-Befall
    Log-Analyse und Auswertung - 30.07.2008 (1)
  16. hatte "Antivirus 2008 XP" auf dem Rechner
    Log-Analyse und Auswertung - 15.07.2008 (2)
  17. Seid 1&1 Trojaner -kein Zugang auf "Antivirus-Steiten" im Netz
    Plagegeister aller Art und deren Bekämpfung - 10.01.2007 (4)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Trojaner "Antivirus XP 2008" - Hallo, leider habe ich mir gestern den Trojaner "Antivirus XP 2008" eingefangen und seit dem kann ich mein WinXP nur im abgesicherten Modus hochfahren. Das Internet ist im abgesicherten Modus - Trojaner "Antivirus XP 2008"...
Archiv
Du betrachtest: Trojaner "Antivirus XP 2008" auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19