Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: icq virus hat mich erwischt...img0737830249202010.JPG.scr

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Alt 09.06.2010, 20:57   #1
matschi
 
icq virus hat mich erwischt...img0737830249202010.JPG.scr - Standard

icq virus hat mich erwischt...img0737830249202010.JPG.scr



meine Freundin hat sich den ICQ Bild Virus eingefangen.
sie hat von einem Kontakt aus ihrer Liste ein Bild geschickt bekommen und geöffnet!
nun habe ich hier schon einiges gelesen und die OTL und Malwarebytes Logs gepostet.
hoffe ihr könnt mir helfen!
MfG
matschi

hier mein Extras.txt von OTL
OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 09.06.2010 21:44:51 - Run 1
OTL by OldTimer - Version 3.2.6.0     Folder = C:\Dokumente und Einstellungen\HannaH\Eigene Dateien\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 53,00% Memory free
3,00 Gb Paging File | 3,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 149,04 Gb Total Space | 74,02 Gb Free Space | 49,66% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: COMPUTERNAME
Current User Name: HannaH
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Programme\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Programme\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Programme\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\ICQLite\ICQLite.exe" = C:\Programme\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite -- File not found
"C:\Programme\LimeWire\LimeWire.exe" = C:\Programme\LimeWire\LimeWire.exe:*:Enabled:LimeWire -- File not found
"C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\Programme\Electronic Arts\EADM\Core.exe" = C:\Programme\Electronic Arts\EADM\Core.exe:*:Disabled:EA Download Manager -- File not found
"C:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)
"C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"C:\Programme\iWin Games\iWinGames.exe" = C:\Programme\iWin Games\iWinGames.exe:*:Enabled:iWin Games application. -- (iWin Inc.)
"C:\Programme\iWin Games\WebUpdater.exe" = C:\Programme\iWin Games\WebUpdater.exe:*:Enabled:iWin Games updater. -- ()
"C:\Dokumente und Einstellungen\HannaH\Anwendungsdaten\winscdvn.exe" = C:\Dokumente und Einstellungen\HannaH\Anwendungsdaten\winscdvn.exe:*:Enabled:Windows Firewall Manager -- ()
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series" = Canon MP250 series MP Drivers
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{190B4E60-FE37-4B8C-A661-172997347A90}" = Sony Media Manager 2.2
"{192A107E-C6B9-41B9-BDBF-38E3AA226054}" = OpenOffice.org 3.2
"{1A15507A-8551-4626-915D-3D5FA095CC1B}" = Corel Paint Shop Pro X
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = Multimedia Launcher
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{237CD223-1B9D-47E8-A76C-E478B83CCEA2}" = File Uploader
"{266C7330-C0F4-49E5-8F20-A56F9F822875}" = SweetIM Toolbar for Internet Explorer 3.3
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3AC54383-31D1-4907-961B-B12CBB1D0AE8}" = MobileMe Control Panel
"{3AF8FCCD-F51A-4014-9002-F195E1CBC876}" = Logitech QuickCam
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{49FC50FC-F965-40D9-89B4-CBFF80941031}" = Windows Movie Maker 2.0
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{53735ECE-E461-4FD0-B742-23A352436D3A}" = Logitech Updater
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{6179550A-3E7C-499E-BCC9-9E8113E0A285}" = LG ODD Auto Firmware Update
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6E7DD182-9FC6-4651-0095-2E666CC6AF35}" = Die Sims 2
"{70B7A167-0B88-445D-A3EA-97C73AA88CAC}" = Windows Live Toolbar
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73DD6B69-02CB-4DA8-A0E0-FC56EE13EB18}" = SweetIM for Messenger 2.6
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{769033E4-C119-496A-8144-3F468081F8D7}" = Movavi Video Suite 8
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{84DDE556-43EF-43ed-B2DF-37AF9E5DDD75}" = Die Sims™ 2 H&M®-Fashion-Accessoires
"{87441A59-5E64-4096-A170-14EFE67200C3}" = Picture Control Utility
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{91CA0407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Small Business Edition 2003
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95120000-0122-0407-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6
"{994223F3-A99B-4DDD-9E1D-0190A17C6860}" = Windows Live Family Safety
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3 - Deutsch
"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{B97CF5C3-0487-11D8-A36E-0050BAE317E1}" = DVD Solution
"{BD57EA4D-026E-4F08-9B93-080E282B81FE}" = iPod for Windows 2006-06-28
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die*Sims™*3
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = Athlon 64 Processor Driver
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}" = Nikon Message Center
"{D45E8C45-B601-4A80-AFD8-E16338744DE1}" = ArcSoft Panorama Maker 4
"{DB9E4EAB-2717-499F-8D56-4CC8A644AB60}" = MPlayer für Windows (Full Package)
"{DFEF49D9-FC95-4301-99B9-2FB91C6ABA06}" = Die Sims™ 2 Vier Jahreszeiten
"{E09B48B5-E141-427A-AB0C-D3605127224A}" = Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR)
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{E1180142-3B31-4DCC-9D27-7AC2D37662BF}" = LightScribe  1.4.124.1
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E9757890-7EC5-46C8-99AB-B00F07B6525C}" = Nikon Transfer
"{F007CBCE-D714-4C0B-8CE9-9B0D78116468}" = ViewNX
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F439D7AF-03F3-4F8E-AEC4-571BFE977C61}" = iTunes
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"Amelie's Cafe" = Amelie's Cafe (nur deinstallation)
"Antique Shop" = Antique Shop (nur deinstallation)
"AntiVir PersonalEdition Classic" = Avira AntiVir Personal - Free Antivirus
"Ashton's Family Resort" = Ashton's Family Resort (nur deinstallation)
"Ask Toolbar_is1" = Ask Toolbar
"Audacity_is1" = Audacity 1.2.6
"Babysitting Mania" = Babysitting Mania (nur deinstallation)
"Beach Party Craze" = Beach Party Craze (nur deinstallation)
"Burger Shop" = Burger Shop (nur deinstallation)
"Cake Shop" = Cake Shop (nur deinstallation)
"Canon MP250 series Benutzerregistrierung" = Canon MP250 series Benutzerregistrierung
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"Cooking Academy 2" = Cooking Academy 2 (nur deinstallation)
"Cooking Dash" = Cooking Dash (nur deinstallation)
"Costume Chaos" = Costume Chaos (nur deinstallation)
"Daycare Nightmare" = Daycare Nightmare (nur deinstallation)
"Delicious: Emily's Tea Garden" = Delicious: Emily's Tea Garden (nur deinstallation)
"Diner Dash 2" = Diner Dash 2 (nur entfernen)
"Diner Dash 5: BOOM! Standard Edition" = Diner Dash 5: BOOM! Standard Edition (nur deinstallation)
"Diner Dash: Flo on the Go" = Diner Dash: Flo on the Go (nur deinstallation)
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"Doggie Dash" = Doggie Dash (nur deinstallation)
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"Easy-WebPrint EX" = Canon Easy-WebPrint EX
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Family Feud™" = Family Feud™ (nur deinstallation)
"Farm Frenzy" = Farm Frenzy (nur deinstallation)
"Farm Frenzy 2" = Farm Frenzy 2 (nur deinstallation)
"Farm Frenzy 3" = Farm Frenzy 3 (nur deinstallation)
"Farm Frenzy: Pizza Party" = Farm Frenzy: Pizza Party (nur deinstallation)
"Fitness Dash" = Fitness Dash (nur deinstallation)
"Free Studio_is1" = Free Studio version 4.3
"Free YouTube Download_is1" = Free YouTube Download 2.2
"Free YouTube to Mp3 Converter_is1" = Free YouTube to Mp3 Converter version 3.1
"Free YouTube Uploader_is1" = Free YouTube Uploader version 2.2
"Frühling" = Frühling
"Google Chrome" = Google Chrome
"Graffiti Studio 2.0_is1" = Graffiti Studio 2.0
"Herbst" = Herbst
"Home Sweet Home" = Home Sweet Home (nur deinstallation)
"Home Sweet Home 2: Kitchens and Baths" = Home Sweet Home 2: Kitchens and Baths (nur deinstallation)
"Hospital Hustle" = Hospital Hustle (nur deinstallation)
"Hotel Mogul" = Hotel Mogul (nur deinstallation)
"Icy Tower v1.3.1_is1" = Icy Tower v1.3.1
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InCD!UninstallKey" = InCD
"InstallShield_{BD57EA4D-026E-4F08-9B93-080E282B81FE}" = iPod for Windows 2006-06-28
"IrfanView" = IrfanView (remove only)
"iWinArcade" = iWin Games (remove only)
"Janes Hotel" = Janes Hotel (nur deinstallation)
"Janes Hotel Family Hero" = Janes Hotel Family Hero (nur deinstallation)
"Jane's Realty" = Jane's Realty (nur deinstallation)
"Jane's Realty 2" = Jane's Realty 2 (nur deinstallation)
"Jessica's Cupcake Cafe" = Jessica's Cupcake Cafe (nur deinstallation)
"JPGCOMPRESS" = JPGCOMPRESS Version 1.0
"kikin Plugin (Murb.com Edition)" = kikin Plugin (Murb.com Edition) 1.11
"legacyqcam_11.10" = Logitech Legacy USB Camera-Treiberpaket
"Little Farm" = Little Farm (nur deinstallation)
"Little Shop: Memories" = Little Shop: Memories (nur deinstallation)
"lvdrivers_11.80" = Logitech QuickCam-Treiberpaket
"McLoad Preinstaller" = McLoad Preinstaller
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MixPad" = MixPad Audio Mixer
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"MP Navigator EX 3.0" = Canon MP Navigator EX 3.0
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"My Kingdom for the Princess" = My Kingdom for the Princess (nur deinstallation)
"Mysterious City: Vegas" = Mysterious City: Vegas (nur deinstallation)
"Nero - Burning Rom!UninstallKey" = Nero OEM
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"Parking Dash" = Parking Dash (nur deinstallation)
"Party Down" = Party Down (nur deinstallation)
"Pet Show Craze" = Pet Show Craze (nur deinstallation)
"Photo Mania" = Photo Mania (nur deinstallation)
"Picasa 3" = Picasa 3
"Ranch Rush 2: Premium Edition" = Ranch Rush 2: Premium Edition (nur deinstallation)
"Romopolis" = Romopolis (nur deinstallation)
"SearchAnonymizer" = SearchAnonymizer
"Sommer" = Sommer
"SoundTap" = SoundTap Streaming Audio Recorder
"Supermarket Management" = Supermarket Management (nur deinstallation)
"Supermarket Mania" = Supermarket Mania (nur deinstallation)
"Switch" = Switch Sound File Converter
"The Enchanting Islands" = The Enchanting Islands (nur deinstallation)
"Townopolis" = Townopolis (nur deinstallation)
"Uninstall_is1" = Uninstall 1.0.0.1
"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions
"WavePad" = WavePad Sound Editor
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinGimp-2.0_is1" = GIMP 2.6.7
"WinLiveSuite_Wave3" = Windows Live Essentials
"Winter" = Winter
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Youda Marina" = Youda Marina (nur deinstallation)
"Zulu" = Zulu DJ Software
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 03.04.2010 08:45:52 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung babysittingmania.ifn, Version 10.1.0.11,
 fehlgeschlagenes Modul babysittingmania.ifn, Version 10.1.0.11, Fehleradresse 0x0004e89a.
 
Error - 04.04.2010 05:06:00 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung babysittingmania.ifn, Version 10.1.0.11,
 fehlgeschlagenes Modul babysittingmania.ifn, Version 10.1.0.11, Fehleradresse 0x0004e89a.
 
Error - 25.04.2010 07:33:05 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.5512, fehlgeschlagenes
 Modul unknown, Version 0.0.0.0, Fehleradresse 0x00000000.
 
Error - 27.04.2010 09:11:11 | Computer Name = COMPUTERNAME | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung ICQ.exe, Version 7.1.0.2096, Stillstandmodul
 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
 
Error - 28.04.2010 08:22:22 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung javaw.exe, Version 6.0.180.7, fehlgeschlagenes
 Modul java.dll, Version 6.0.180.7, Fehleradresse 0x00005875.
 
Error - 01.05.2010 16:14:00 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung deliciousemilytea.ifn, Version 1.1.0.0, 
fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x0000000f.
 
Error - 01.05.2010 16:28:12 | Computer Name = COMPUTERNAME | Source = Ci | ID = 4124
Description = Der Inhaltsindex auf c:\system volume information\catalog.wci ist 
beschädigt. Fahren Sie den  Indexdienst (cisvc) herunter, und starten Sie ihn erneut.
 
Error - 01.05.2010 16:28:12 | Computer Name = COMPUTERNAME | Source = Ci | ID = 4126
Description = Die Metadaten des Inhaltsindex auf c:\system volume information\catalog.wci
 werden aufgeräumt. Wiederherstellen des Indexes erfolgt  automatisch durch erneutes
 Filtern aller Dokumente.
 
Error - 02.05.2010 15:34:56 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung deliciousemilytea.ifn, Version 1.1.0.0, 
fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x0000000f.
 
Error - 04.05.2010 11:22:22 | Computer Name = COMPUTERNAME | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung javaw.exe, Version 6.0.180.7, fehlgeschlagenes
 Modul java.dll, Version 6.0.180.7, Fehleradresse 0x00005875.
 
[ System Events ]
Error - 06.06.2010 06:58:23 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   i8042prt
 
Error - 06.06.2010 11:29:56 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   i8042prt
 
Error - 07.06.2010 08:19:19 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   i8042prt
 
Error - 08.06.2010 00:52:24 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   i8042prt
 
Error - 08.06.2010 09:01:08 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   i8042prt
 
Error - 08.06.2010 15:45:34 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   i8042prt
 
Error - 09.06.2010 08:52:05 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   i8042prt
 
Error - 09.06.2010 14:14:15 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   i8042prt
 
Error - 09.06.2010 15:18:27 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   i8042prt
 
Error - 09.06.2010 15:37:09 | Computer Name = COMPUTERNAME | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   i8042prt
 
 
< End of report >
         
--- --- ---

Geändert von matschi (09.06.2010 um 21:44 Uhr)

 

Themen zu icq virus hat mich erwischt...img0737830249202010.JPG.scr
.dll, .jpg.scr, adobe, ask toolbar, audacity, avira, benutzerregistrierung, canon, desktop, diner dash, einstellungen, entfernen, error, explorer, extras.txt, firefox.exe, flash player, format, google, google chrome, home, limewire, location, logfile, mozilla, mp3, oldtimer, picasa, realtek, registry, rundll, saver, security, server, shell32.dll, software, starten, studio, sweetim, tower, usb, virus, windows internet, windows internet explorer




Ähnliche Themen: icq virus hat mich erwischt...img0737830249202010.JPG.scr


  1. 50 euro virus - auch mich hats erwischt
    Log-Analyse und Auswertung - 02.08.2015 (24)
  2. ADWare Virus hat mich erwischt
    Plagegeister aller Art und deren Bekämpfung - 10.02.2015 (16)
  3. Repair Virus hat mich auch erwischt. HILFE
    Plagegeister aller Art und deren Bekämpfung - 05.03.2013 (18)
  4. Virus hat mich erwischt und mich Infiziert
    Plagegeister aller Art und deren Bekämpfung - 27.02.2013 (3)
  5. AKM Virus...mich hats ebenfalls erwischt...
    Plagegeister aller Art und deren Bekämpfung - 20.08.2012 (16)
  6. Mich hat's auch erwischt - AKM Virus
    Log-Analyse und Auswertung - 19.05.2012 (31)
  7. Auch mich hat der AKM Virus erwischt!
    Log-Analyse und Auswertung - 17.05.2012 (2)
  8. Auch mich hat der AKM Virus erwischt!
    Mülltonne - 17.05.2012 (1)
  9. AKM Virus hat auch mich erwischt
    Log-Analyse und Auswertung - 15.05.2012 (16)
  10. 50 Euro Virus hat auch mich erwischt
    Plagegeister aller Art und deren Bekämpfung - 28.02.2012 (27)
  11. [2x] 50 euro virus - auch mich hats erwischt
    Mülltonne - 18.02.2012 (1)
  12. Der 50€ Virus hat mich erwischt
    Log-Analyse und Auswertung - 16.02.2012 (11)
  13. Auch mich hat der Virus erwischt-bitte um Hilfe
    Plagegeister aller Art und deren Bekämpfung - 14.02.2012 (1)
  14. 50€ Virus hat auch mich erwischt.
    Log-Analyse und Auswertung - 18.01.2012 (8)
  15. Bundespolizei-Virus: mich hat es auch erwischt!
    Log-Analyse und Auswertung - 23.11.2011 (12)
  16. Bundespolizei Virus hat mich erwischt...
    Plagegeister aller Art und deren Bekämpfung - 20.11.2011 (21)
  17. Virus hat mich erwischt :(
    Log-Analyse und Auswertung - 21.06.2008 (4)

Zum Thema icq virus hat mich erwischt...img0737830249202010.JPG.scr - meine Freundin hat sich den ICQ Bild Virus eingefangen. sie hat von einem Kontakt aus ihrer Liste ein Bild geschickt bekommen und geöffnet! nun habe ich hier schon einiges gelesen - icq virus hat mich erwischt...img0737830249202010.JPG.scr...
Archiv
Du betrachtest: icq virus hat mich erwischt...img0737830249202010.JPG.scr auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.