![]() |
|
Plagegeister aller Art und deren Bekämpfung: Trojaner TR/Agent.ruo in C:\Windows\system32\ntntlc.dll gefundenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #22 |
![]() ![]() | ![]() Trojaner TR/Agent.ruo in C:\Windows\system32\ntntlc.dll gefunden Und hier noch Extras.Txt. OTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 24.12.2010 11:37:27 - Run 1 OTL by OldTimer - Version 3.2.18.0 Folder = C:\Dokumente und Einstellungen\Gastkonto\Desktop Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 71,00% Memory free 5,00 Gb Paging File | 4,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 372,60 Gb Total Space | 332,91 Gb Free Space | 89,35% Space Free | Partition Type: NTFS Computer Name: HOME-PC | User Name: Gastkonto | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* http [open] -- C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -url "%1" (Mozilla Corporation) https [open] -- C:\PROGRA~1\MOZILL~1\FIREFOX.EXE -url "%1" (Mozilla Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /k "cd %L" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002 "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Programme\ICQ7.0\ICQ.exe" = C:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.) "C:\Programme\ICQ7.0\aolload.exe" = C:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC) "C:\Programme\Microsoft ActiveSync\rapimgr.exe" = C:\Programme\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager -- (Microsoft Corporation) "C:\Programme\Microsoft ActiveSync\wcescomm.exe" = C:\Programme\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager -- (Microsoft Corporation) "C:\Programme\Microsoft ActiveSync\WCESMgr.exe" = C:\Programme\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.) "C:\Dokumente und Einstellungen\Gastkonto\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\chrome.exe" = C:\Dokumente und Einstellungen\Gastkonto\Lokale Einstellungen\Anwendungsdaten\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome -- (Google Inc.) "C:\Programme\Steam\steamapps\janhilli\counter-strike source\hl2.exe" = C:\Programme\Steam\steamapps\janhilli\counter-strike source\hl2.exe:*:Enabled:hl2 -- () "C:\Programme\Nero\Nero 7\Nero Home\NeroHome.exe" = C:\Programme\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home -- (Nero AG) "C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.) "C:\Programme\ICQ7.0\ICQ.exe" = C:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.) "C:\Programme\ICQ7.0\aolload.exe" = C:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC) "C:\Programme\Steam\steam.exe" = C:\Programme\Steam\steam.exe:*:Enabled:Steam 732897 -- (Valve Corporation) "C:\Programme\Electronic Arts\Need for Speed Carbon\NFSC.exe" = C:\Programme\Electronic Arts\Need for Speed Carbon\NFSC.exe:*:Enabled:NFSC -- () "C:\Dokumente und Einstellungen\Gastkonto\Anwendungsdaten\winsvcn.exe" = C:\Dokumente und Einstellungen\Gastkonto\Anwendungsdaten\winsvcn.exe:*:Enabled:Windows System Guard -- File not found "C:\Programme\Microsoft ActiveSync\rapimgr.exe" = C:\Programme\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager -- (Microsoft Corporation) "C:\Programme\Microsoft ActiveSync\wcescomm.exe" = C:\Programme\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager -- (Microsoft Corporation) "C:\Programme\Microsoft ActiveSync\WCESMgr.exe" = C:\Programme\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application -- (Microsoft Corporation) "C:\Programme\UltraMixer\jre\launch4j-tmp\UltraMixer.exe" = C:\Programme\UltraMixer\jre\launch4j-tmp\UltraMixer.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.) "C:\Dokumente und Einstellungen\Gastkonto\Lokale Einstellungen\Temp\jivexviewer\jre\bin\JiveX[dv] light" = C:\Dokumente und Einstellungen\Gastkonto\Lokale Einstellungen\Temp\jivexviewer\jre\bin\JiveX[dv] light:*:Enabled:Java(TM) 2 Platform Standard Edition binary "C:\WINDOWS\explorer.exe" = C:\WINDOWS\explorer.exe:*:Disabled:Windows Explorer -- (Microsoft Corporation) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4808" = CanoScan 5600F Scanner Driver "{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter "{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime "{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate "{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe "{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}" = Need for Speed™ Carbon "{26A24AE4-039D-4CA4-87B4-2F83216014FF}" = Java(TM) 6 Update 14 "{32E2F180-247C-4077-B06A-20F9868568E0}_is1" = UltraMixer 2.4.1 "{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3E9D596A-61D4-4239-BD19-2DB984D2A16F}" = mIWA "{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker "{42347B75-9660-2DA4-63FD-D35E344E1031}" = Nero 7 Premium "{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth "{4A57592C-FF92-4083-97A9-92783BD5AFB4}" = WebCam "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762 "{76BC2442-0002-47FA-9617-43BAD82BEF4C}" = Bonjour "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec "{829CD169-E692-48E8-9BDE-A3E8D8B65538}" = mSCfg "{85309D89-7BE9-4094-BB17-24999C6118FC}" = ArcSoft PhotoStudio 5.5 "{868D7896-99D4-4513-BC62-2B3AD3E24926}" = TuneUp Utilities 2006 "{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7 "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player "{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr "{8C6BB412-D3A8-4AAE-A01B-35B681789D68}" = mHelp "{8DB77BE4-629D-458D-BD68-9F36667C2177}" = TubeBox! "{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90B0D222-8C21-4B35-9262-53B042F18AF9}" = mPfWiz "{94658027-9F16-4509-BBD7-A59FE57C3023}" = mZConfig "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9CCB8F6D-33FC-4E79-8616-7BE5DF32A955}" = BPM-Studio 4 Demo "{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}" = mDriver "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A67BB21E-D419-45BB-AB86-7D87D14BBCE2}" = Safari "{A6FDF86A-F541-4E7B-AEA0-8849A2A700D5}" = iTunes "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder "{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter "{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support "{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3.3 - Deutsch "{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter "{B208806F-A231-4FA0-AB3F-5C1B8979223E}" = Microsoft ActiveSync 4.0 "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio 3 "{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver "{CB6075D9-F912-40AE-BEA6-E590DA24F16B}" = Adobe Photoshop Elements 7.0 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows by Toshiba "{D5B35376-6F9E-47B3-A9F8-791824EBFE0D}" = Samsung PC Studio 3 "{E1B2DF7C-A176-4A1D-9D32-3CEC5037A524}" = Apple Application Support "{E81667C6-2856-46D6-ABEA-6A2F42166779}" = mCore "{EA61BCD3-FA73-4F6B-A525-8BD816E7C840}" = TubeBox! "{EB863CFD-6889-47B0-9D79-492DE0D07EE7}" = OSDInstall "{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe "{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}" = HighMAT-Erweiterung für den Microsoft Windows XP-Assistenten zum Schreiben von CDs "Absurd Terminator" = Absurd Terminator "Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Photoshop Elements 7" = Adobe Photoshop Elements 7.0 "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "Bridge Building Game" = Bridge Building Game "CanonSolutionMenu" = Canon Utilities Solution Menu "DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters "ICQToolbar" = ICQ Toolbar "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mixxx" = Mixxx 1.7.2 "Mozilla Firefox (1.5)" = Mozilla Firefox (1.5) "MP Navigator EX 2.0" = Canon MP Navigator EX 2.0 "NVIDIA Drivers" = NVIDIA Drivers "OpenAL" = OpenAL "PokerStars.net" = PokerStars.net "ProInst" = Intel(R) PROSet/Wireless Software "SAMSUNG CDMA Modem" = SAMSUNG CDMA Modem Driver Set "SAMSUNG Mobile Composite Device" = SAMSUNG Mobile Composite Device Software "Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software "SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software "SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software "SMSERIAL" = Motorola SM56 Data Fax Modem "Steam App 240" = Counter-Strike: Source "Switch" = Switch Audiodatei-Konverter "VLC media player" = VideoLAN VLC media player 0.8.2 "WIC" = Windows Imaging Component "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "WinRAR archiver" = WinRAR Archivierer "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0.0 (Pre-Release 5348) ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Google Chrome" = Google Chrome "Mixxx (1.8.0~beta2)" = Mixxx 1.8.0~beta2 (64-bit) ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 12.12.2010 07:26:58 | Computer Name = HOME-PC | Source = Bonjour Service | ID = 100 Description = 244: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 12.12.2010 07:26:58 | Computer Name = HOME-PC | Source = Bonjour Service | ID = 100 Description = 232: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 12.12.2010 07:26:58 | Computer Name = HOME-PC | Source = Bonjour Service | ID = 100 Description = 400: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 12.12.2010 07:26:58 | Computer Name = HOME-PC | Source = Bonjour Service | ID = 100 Description = 392: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 12.12.2010 07:26:58 | Computer Name = HOME-PC | Source = Bonjour Service | ID = 100 Description = 412: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 15.12.2010 09:57:10 | Computer Name = HOME-PC | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung termin~1.exe, Version 0.0.0.0, fehlgeschlagenes Modul termin~1.exe, Version 0.0.0.0, Fehleradresse 0x00055626. Error - 15.12.2010 09:57:24 | Computer Name = HOME-PC | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung terminator.exe, Version 0.0.0.0, fehlgeschlagenes Modul terminator.exe, Version 0.0.0.0, Fehleradresse 0x00055626. Error - 15.12.2010 09:58:06 | Computer Name = HOME-PC | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung terminator.exe, Version 0.0.0.0, fehlgeschlagenes Modul terminator.exe, Version 0.0.0.0, Fehleradresse 0x00055626. Error - 16.12.2010 10:03:59 | Computer Name = HOME-PC | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung terminator.exe, Version 0.0.0.0, fehlgeschlagenes Modul terminator.exe, Version 0.0.0.0, Fehleradresse 0x00055626. Error - 24.12.2010 06:29:59 | Computer Name = HOME-PC | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung terminator.exe, Version 0.0.0.0, fehlgeschlagenes Modul terminator.exe, Version 0.0.0.0, Fehleradresse 0x00055626. [ System Events ] Error - 13.12.2010 11:45:08 | Computer Name = HOME-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "SSHNAS" wurde mit folgendem Fehler beendet: %%126 Error - 13.12.2010 11:45:08 | Computer Name = HOME-PC | Source = Service Control Manager | ID = 7034 Description = Dienst "OsdService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error - 14.12.2010 11:07:27 | Computer Name = HOME-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "SSHNAS" wurde mit folgendem Fehler beendet: %%126 Error - 14.12.2010 11:07:27 | Computer Name = HOME-PC | Source = Service Control Manager | ID = 7034 Description = Dienst "OsdService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error - 15.12.2010 08:52:39 | Computer Name = HOME-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "SSHNAS" wurde mit folgendem Fehler beendet: %%126 Error - 15.12.2010 08:52:39 | Computer Name = HOME-PC | Source = Service Control Manager | ID = 7034 Description = Dienst "OsdService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error - 16.12.2010 09:47:17 | Computer Name = HOME-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "SSHNAS" wurde mit folgendem Fehler beendet: %%126 Error - 16.12.2010 09:47:17 | Computer Name = HOME-PC | Source = Service Control Manager | ID = 7034 Description = Dienst "OsdService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error - 24.12.2010 05:50:27 | Computer Name = HOME-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "SSHNAS" wurde mit folgendem Fehler beendet: %%126 Error - 24.12.2010 05:50:27 | Computer Name = HOME-PC | Source = Service Control Manager | ID = 7034 Description = Dienst "OsdService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. < End of report >
__________________ Rettet die Wälder, esst mehr Biber ! ![]() |
Themen zu Trojaner TR/Agent.ruo in C:\Windows\system32\ntntlc.dll gefunden |
ahnung, antivir, c:\windows, einfachste, erkannt, gefunde, laptop, lösung, neu, ntntlc.dll, richtet, system, system32, tr/agent.ruo, troja, trojaner, virus, wenig, wenig ahnung, windows |