Malwarebyte Antimalware hat folgendes log:
Code:
Alles auswählen Aufklappen ATTFilter
Malwarebytes' Anti-Malware 1.28
Datenbank Version: 1208
Windows 5.1.2600 Service Pack 3
26.09.2008 13:00:01
mbam-log-2008-09-26 (12-59-45).txt
Scan-Methode: Vollständiger Scan (C:\|D:\|)
Durchsuchte Objekte: 603764
Laufzeit: 4 hour(s), 23 minute(s), 42 second(s)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 3
Infizierte Registrierungsschlüssel: 15
Infizierte Registrierungswerte: 2
Infizierte Dateiobjekte der Registrierung: 2
Infizierte Verzeichnisse: 1
Infizierte Dateien: 86
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
C:\WINDOWS\system32\jkkIXrsS.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\kpnwwj.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\iiffcbCV.dll (Trojan.Vundo.H) -> No action taken.
Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{61e7545c-35f1-4c12-8751-388f130cdbb6} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{61e7545c-35f1-4c12-8751-388f130cdbb6} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{858fde05-345a-4182-b40a-fc23a3a56924} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\iiffcbcv (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{858fde05-345a-4182-b40a-fc23a3a56924} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a6249b2f-3cb9-42b0-b65c-13fad1308a16} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{a6249b2f-3cb9-42b0-b65c-13fad1308a16} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IProxyProvider (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adware away v3.1.2_is1 (Rogue.AdwareAway) -> No action taken.
Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{858fde05-345a-4182-b40a-fc23a3a56924} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bm5f34dcd6 (Trojan.Vundo) -> No action taken.
Infizierte Dateiobjekte der Registrierung:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Security Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\jkkixrss -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\jkkixrss -> No action taken.
Infizierte Verzeichnisse:
C:\Programme\Adware Away (Rogue.AdwareAway) -> No action taken.
Infizierte Dateien:
C:\WINDOWS\system32\kpnwwj.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\iiffcbCV.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\jkkIXrsS.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\SsrXIkkj.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\SsrXIkkj.ini2 (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\rdqpoxar.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\raxopqdr.ini (Trojan.Vundo.H) -> No action taken.
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temporary Internet Files\Content.IE5\MMJ6M4K2\kb678031[1] (Trojan.Vundo) -> No action taken.
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temporary Internet Files\Content.IE5\NK12BSP0\upd105320[2] (Trojan.Vundo) -> No action taken.
C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Temporary Internet Files\Content.IE5\VBK802QI\nd82m0[1] (Trojan.Vundo) -> No action taken.
C:\Programme\Adobe\Acrobat 8.0\Acrobat\keygen.exe (Backdoor.Bot) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP20\A0013014.exe (Spyware.OnlineGames) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP41\A0016801.EXE (Trojan.Agent) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP62\A0028176.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP62\A0028183.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP62\A0028184.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP62\A0028187.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP62\A0028259.exe (Malware.Tool) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP62\A0029299.exe (Malware.Tool) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP63\A0029364.dll (Trojan.Vundo.H) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP63\A0029365.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP63\A0029366.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP63\A0029820.dll (Trojan.Vundo) -> No action taken.
C:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP65\A0029970.exe (Malware.Tool) -> No action taken.
C:\WINDOWS\system32\mnsrkh.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\lpijjr.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\gqpvybmg.dll_old (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\xiqnbgqu.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\xokvdgjh.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\llahfbqj.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\amxksljb.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\qailewqg.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\ggfciyfc.dll (Trojan.Vundo) -> No action taken.
D:\Sicherungen\CD Brennen\Zip 44\XP Prof legal machen\KeyGen.exe (Malware.Tool) -> No action taken.
D:\System Volume Information\_restore{ACCAEF84-C542-40A7-AA2B-5F0D54D8985C}\RP20\A0013207.exe (Spyware.OnlineGames) -> No action taken.
C:\Programme\Adware Away\activex.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\AdAway.dll (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\AdAway.exe (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\AdwareAway.chm (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\autorun.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\EnumAutoRun.exe (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\EnumDlls.exe (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\EProcess.exe (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\explorerbar.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\fa.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\FixDesktopBackground.exe (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\fixreport.log (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\folderdll.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\global.dll (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\iebhotoolbar.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\iepage.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\ietoolbarbutton.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\ieurlprefix.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\ieurlsearchhook.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\lsp.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\nameserver.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\notifydll.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\overall.log (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\process.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\protocolfilter.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\proxy.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\ScanAtStartup.exe (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\screenshot.exe (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\securitysite.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\service.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\shellextension.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\shellextensionhook.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\svchostdll.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\sysrestriction.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\unins000.dat (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\unins000.exe (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\uninstall.tmp (Rogue.AdwareAway) -> No action taken.
C:\Programme\Adware Away\Update2.exe (Rogue.AdwareAway) -> No action taken.
C:\WINDOWS\system32\tdssadw.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\tdssl.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\tdssserf.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\tdssmain.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\tdssinit.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\tdsslog.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\tdssservers.dat (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\drivers\tdssserv.sys (Trojan.Agent) -> No action taken.
C:\winpcap-nmap-3.1.B.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\pskt.ini (Trojan.Vundo) -> No action taken.
C:\WINDOWS\BM5f34dcd6.xml (Trojan.Vundo) -> No action taken.
C:\WINDOWS\BM5f34dcd6.txt (Trojan.Vundo) -> No action taken.
C:\WINDOWS\adaway.lic (Rogue.AdwareAway) -> No action taken.
Habe alles entfernen lassen wie vorgeschlagen.
So und nun? Könnt ihr mir bitte helfen?