08.06.2010, 14:01
|
#9 |
| |  Dropper.Gen und anscheinend Sasser
Zitat:
All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ScanRegistry deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Firewall deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8841d3a7-37f9-11df-8ea8-806e6f6e6963}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8841d3a7-37f9-11df-8ea8-806e6f6e6963}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8841d3a7-37f9-11df-8ea8-806e6f6e6963}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8841d3a7-37f9-11df-8ea8-806e6f6e6963}\ not found.
File move failed. E:\SH4Autorun.exe scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9be39c1a-3a61-11df-bba4-001e8c5be77d}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9be39c1a-3a61-11df-bba4-001e8c5be77d}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9be39c1a-3a61-11df-bba4-001e8c5be77d}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9be39c1a-3a61-11df-bba4-001e8c5be77d}\ not found.
File J:\autorun.exe not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
User: Firli
->Temp folder emptied: 487462901 bytes
->Temporary Internet Files folder emptied: 29314484 bytes
->Java cache emptied: 6186544 bytes
->FireFox cache emptied: 111564268 bytes
->Flash cache emptied: 36421 bytes
User: Public
User: Rena
->Temp folder emptied: 10926850 bytes
->Temporary Internet Files folder emptied: 26334708 bytes
->Java cache emptied: 1694933 bytes
->FireFox cache emptied: 93994267 bytes
->Flash cache emptied: 8089 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 4149341 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 67765 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 736,00 mb
OTL by OldTimer - Version 3.2.5.3 log created on 06082010_145603
Files\Folders moved on Reboot...
File move failed. E:\SH4Autorun.exe scheduled to be moved on reboot.
C:\Users\Firli\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
Registry entries deleted on Reboot...
| Und nun? 
|
Baum-Darstellung
