| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: msn live messenger sendet nachrichten & blockiert systemWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
15.04.2010, 13:39
| #5 |
| |  msn live messenger sendet nachrichten & blockiert system Logfile of The Avenger Version 2.0, (c) by Swandog46 Swandog46's Public Anti-Malware Tools Platform: Windows XP ******************* Script file opened successfully. Script file read successfully. Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: Rootkit scan active. No rootkits found! File "C:\RECYCLER\S-1-5-21-9180908332-8809903437-961132346-5512\xpupdate.exe" deleted successfully. File "c:\windows\servnt.exe" deleted successfully. Error: file "C:\DOCUME~1\***\LOCALS~1\Temp\service.exe" not found! Deletion of file "C:\DOCUME~1\***\LOCALS~1\Temp\service.exe" failed! Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND) --> the object does not exist Completed script processing. ******************* Finished! Terminate. hxxp://www.file-upload.net/download-2436393/backup.zip.html All processes killed ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found. Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{00000000-5736-4205-0008-F7ED0776FB27} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00000000-5736-4205-0008-F7ED0776FB27}\ not found. ========== COMMANDS ========== [EMPTYTEMP] User: Administrator ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 41 bytes User: All Users User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Flash cache emptied: 41 bytes User: LocalService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes User: NetworkService ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes User: ***** ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 67 bytes ->Opera cache emptied: 20058364 bytes ->Flash cache emptied: 405 bytes User: ***** ->Temp folder emptied: 17534061 bytes ->Temporary Internet Files folder emptied: 2439029 bytes ->Java cache emptied: 7902 bytes ->FireFox cache emptied: 2898661 bytes ->Opera cache emptied: 0 bytes ->Flash cache emptied: 6551 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 2162283 bytes %systemroot%\System32 .tmp files removed: 2577 bytes %systemroot%\System32\dllcache .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 8708 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes %systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 43,00 mb OTL by OldTimer - Version 3.2.1.1 log created on 04152010_135117 Files\Folders moved on Reboot... Registry entries deleted on Reboot... gmer hat wieder nicht funktioniert. auch nicht im abgesicherten modus. |
| Themen zu msn live messenger sendet nachrichten & blockiert system |
| adobe, antivirus, backdoor.ircbot, bho, blockiert, browser, converter, disabled.securitycenter, enigma, entfernen, error, eset nod32, explorer, failed, flash player, gupdate, hijack.shell, hkus\s-1-5-18, internet, internet browser, internet explorer, malware, malwarebytes' anti-malware, maus, mp3, msiexec.exe, notepad.exe, notification, plug-in, problem, realtek, registry, rundll, start menu, system, taskman, tastatur, temp, usb 2.0, vlc media player, windows, windows internet, windows internet explorer, windows xp |
Baum-Darstellung