| |
| |||||||
Log-Analyse und Auswertung: Trojaerfund und zwei HijackereinträgeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
07.01.2011, 15:02
| #1 |
 |  Trojaerfund und zwei Hijackereinträge ja, Rechner wurde neugestartet. Log: All processes killed ========== OTL ========== Service FXDrv32 stopped successfully! Service FXDrv32 deleted successfully! File D:\FXDrv32.sys File not found not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5bd54afb-6337-11df-9be0-0018e726c5db}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5bd54afb-6337-11df-9be0-0018e726c5db}\ not found. File J:\installer.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{700bc62d-6c16-11df-826d-0018e726c5db}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{700bc62d-6c16-11df-826d-0018e726c5db}\ not found. File J:\installer.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{918fd52b-6400-11df-ba96-0018e726c5db}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{918fd52b-6400-11df-ba96-0018e726c5db}\ not found. File J:\installer.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f180735f-df73-11df-a8c2-0018e726c5db}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f180735f-df73-11df-a8c2-0018e726c5db}\ not found. File J:\installer.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f87c457f-e7f9-11de-9cd0-0018e726c5db}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f87c457f-e7f9-11de-9cd0-0018e726c5db}\ not found. File I:\Launcher.exe not found. ADS C:\Users\Papi\Desktop\Obama gegen judisches Jerusalem.eml:OECustomProperty deleted successfully. ADS C:\Users\Papi\Desktop\Obama gegn Jerusalem.eml:OECustomProperty deleted successfully. ========== COMMANDS ========== C:\Windows\System32\drivers\etc\Hosts moved successfully. HOSTS file reset successfully [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 33170 bytes ->Flash cache emptied: 41 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Papi ->Temp folder emptied: 10717107 bytes ->Temporary Internet Files folder emptied: 51199975 bytes ->Java cache emptied: 64868078 bytes ->FireFox cache emptied: 87211559 bytes ->Flash cache emptied: 29655 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 145644 bytes RecycleBin emptied: 96600577 bytes Total Files Cleaned = 296.00 mb OTL by OldTimer - Version 3.2.18.0 log created on 01072011_144534 Files\Folders moved on Reboot... File move failed. C:\Windows\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot... Wenn ich das so durchlese, dann scheinen einige Einträge nicht wirklich zu existieren, oder verstecken sich  |
|
| Themen zu Trojaerfund und zwei Hijackereinträge |
| .dll, adobe, alternate, antivirus, askbar, avast, avast!, bho, bonjour, canon, corp./icp, defender, desktop, error, explorer, firefox, firefox.exe, format, google, hijacker.application, home, home premium, hxxp://shell.windows.com/fileassoc/%04x/xml/redir.asp?ext=%s, location, malware, mozilla, mozilla thunderbird, mp3, nvlddmkm.sys, nvstor.sys, oldtimer, otl.exe, plug-in, programdata, realtek, registry, safer networking, scan, searchplugins, software, sptd.sys, spyware, tracker, trojaner, vista, wlan |
Hybrid-Darstellung
