uppsala ^^ hab den scan gemacht mit anti-malware...hier das ergebnis:
Zitat:
Malwarebytes' Anti-Malware 1.25
Datenbank Version: 1103
Windows 5.1.2600 Service Pack 2
18:28:21 01.09.2008
mbam-log-09-01-2008 (18-28-21).txt
Scan-Methode: Vollständiger Scan (C:\|D:\|E:\|X:\|)
Durchsuchte Objekte: 148615
Laufzeit: 36 minute(s), 38 second(s)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 2
Infizierte Registrierungsschlüssel: 11
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 21
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
C:\WINDOWS\system32\rsvjuuyg.dll (Trojan.Vundo) -> Delete on reboot.
C:\WINDOWS\system32\xrtknx.dll (Trojan.Vundo) -> Delete on reboot.
Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{dc8e625a-c3db-4eec-b0b9-ebdca0ed5381} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{dc8e625a-c3db-4eec-b0b9-ebdca0ed5381} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Trojan.Vundo) -> Quarantined and deleted successfully.
Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bm5b4eea28 (Trojan.Vundo) -> Quarantined and deleted successfully.
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
C:\WINDOWS\system32\xrtknx.dll (Trojan.Vundo.H) -> Delete on reboot.
C:\WINDOWS\system32\dgupynsg.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\gsnypugd.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\rsvjuuyg.dll (Trojan.Vundo) -> Delete on reboot.
C:\Dokumente und Einstellungen\Lukas\Lokale Einstellungen\Temporary Internet Files\Content.IE5\4B09KZIR\kb65666[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Lukas\Lokale Einstellungen\Temporary Internet Files\Content.IE5\DTHE7B1Y\kb767887[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Lukas\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EARZ98VN\kb456456[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Lukas\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IHATIDWB\kb671231[1] (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Dokumente und Einstellungen\Lukas\Lokale Einstellungen\Temporary Internet Files\Content.IE5\J75BR98W\CAKTURO1 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{5AD0C2B7-914C-4F07-90B4-1CAC62361721}\RP609\A0083697.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{5AD0C2B7-914C-4F07-90B4-1CAC62361721}\RP609\A0083719.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{5AD0C2B7-914C-4F07-90B4-1CAC62361721}\RP609\A0083720.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{5AD0C2B7-914C-4F07-90B4-1CAC62361721}\RP611\A0083860.exe (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{5AD0C2B7-914C-4F07-90B4-1CAC62361721}\RP611\A0083861.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\bfwvounu.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drfhpssf.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\eipugjfb.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\hnfigr.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\pskt.ini (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BM5b4eea28.xml (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\WINDOWS\BM5b4eea28.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
|
lg vio