avira meldet mehrere trojaner

Mr.Icetea

Hi Arne,

mbam hat eine menge gefunden :-(
darunter auch gabpath. Der ist mir schonmal bei meinem antivir aufgefallen...
sasw kommt gleich hinterher.



Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4432

Windows 6.0.6000
Internet Explorer 7.0.6000.17037

16.08.2010 10:38:16
mbam-log-2010-08-16 (10-38-16).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 130763
Laufzeit: 18 Minute(n), 48 Sekunde(n)

Infizierte Speicherprozesse: 3
Infizierte Speichermodule: 1
Infizierte Registrierungsschlüssel: 5
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 3
Infizierte Dateien: 8

Infizierte Speicherprozesse:
C:\ProgramData\ResultDns\resultdns111.exe (Adware.ResultDns) -> Unloaded process successfully.
C:\Program Files\ResultDns\resultdns.exe (Adware.ResultDns) -> Unloaded process successfully.
C:\Users\amueller\AppData\Roaming\GabPath\gabpath.exe (Adware.GabPath) -> Unloaded process successfully.

Infizierte Speichermodule:
C:\Program Files\ResultDns\resultdns.dll (Adware.ResultDns) -> Delete on reboot.

Infizierte Registrierungsschlüssel:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\gabpath (Adware.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\resultdns (Adware.ResultDns) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\GabPath (Adware.Adparatus) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\ResultDns (Adware.ResultDns) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ResultDns Service (Adware.ResultDns) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\gabpath (Adware.GabPath) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
C:\Users\amueller\AppData\Roaming\GabPath (Adware.Agent) -> Quarantined and deleted successfully.
C:\ProgramData\ResultDns (Adware.ResultDns) -> Quarantined and deleted successfully.
C:\Program Files\ResultDns (Adware.ResultDns) -> Delete on reboot.

Infizierte Dateien:
C:\ProgramData\ResultDns\resultdns111.exe (Adware.ResultDns) -> Quarantined and deleted successfully.
C:\Program Files\ResultDns\resultdns.exe (Adware.ResultDns) -> Quarantined and deleted successfully.
C:\Users\amueller\AppData\Roaming\GabPath\gabpath.exe (Adware.GabPath) -> Quarantined and deleted successfully.
C:\Users\amueller\AppData\Local\temp\smewcraonx.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\Users\amueller\AppData\Roaming\GabPath\config.cfg (Adware.Agent) -> Quarantined and deleted successfully.
C:\Users\amueller\AppData\Roaming\GabPath\GPUninstall.exe (Adware.Agent) -> Quarantined and deleted successfully.
C:\Program Files\ResultDns\resultdns.dll (Adware.ResultDns) -> Delete on reboot.
C:\Program Files\ResultDns\uninstall.exe (Adware.ResultDns) -> Quarantined and deleted successfully.

__________________
action is the enemy of thought