|
Plagegeister aller Art und deren Bekämpfung: tr crypt xpack gen - fragenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
13.04.2011, 15:45 | #16 |
| tr crypt xpack gen - fragen Hier GMER, der Rest kommt später GMER Logfile: Code:
ATTFilter GMER 1.0.15.15570 - GMER - Rootkit Detector and Remover Rootkit scan 2011-04-13 16:44:14 Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 WDC_WD800JD-55MUA1 rev.10.01E01 Running: 8ykvpt3d.exe; Driver: C:\DOKUME~1\MCHI~1\LOKALE~1\Temp\pgtdypow.sys ---- System - GMER 1.0.15 ---- SSDT F7C2E50E ZwCreateKey SSDT F7C2E504 ZwCreateThread SSDT F7C2E513 ZwDeleteKey SSDT F7C2E51D ZwDeleteValueKey SSDT F7C2E522 ZwLoadKey SSDT F7C2E4F0 ZwOpenProcess SSDT F7C2E4F5 ZwOpenThread SSDT F7C2E52C ZwReplaceKey SSDT F7C2E527 ZwRestoreKey SSDT F7C2E518 ZwSetValueKey ---- Kernel code sections - GMER 1.0.15 ---- .text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xF5F863A0, 0x5CC259, 0xE8000020] ---- User code sections - GMER 1.0.15 ---- .text C:\Programme\Pando Networks\Media Booster\PMB.exe[2144] kernel32.dll!SetUnhandledExceptionFilter 7C84495D 5 Bytes [33, C0, C2, 04, 00] {XOR EAX, EAX; RET 0x4} ---- Devices - GMER 1.0.15 ---- AttachedDevice \Driver\Tcpip \Device\Tcp fssfltr_tdi.sys (Family Safety Filter Driver (TDI)/Microsoft Corporation) AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation) ---- EOF - GMER 1.0.15 ---- |
13.04.2011, 19:15 | #18 |
| tr crypt xpack gen - fragen Hier MBR, OSAM konnte ich nicht extrahieren:
__________________MBRCheck, version 1.2.3 (c) 2010, AD Command-line: Windows Version: Windows XP Professional Windows Information: Service Pack 3 (build 2600) Logical Drives Mask: 0x0000000d Kernel Drivers (total 122): 0x804D7000 \WINDOWS\system32\ntkrnlpa.exe 0x806E6000 \WINDOWS\system32\hal.dll 0xF7B10000 \WINDOWS\system32\KDCOM.DLL 0xF7A20000 \WINDOWS\system32\BOOTVID.dll 0xF74E0000 ACPI.sys 0xF7B12000 \WINDOWS\system32\DRIVERS\WMILIB.SYS 0xF74CF000 pci.sys 0xF7610000 isapnp.sys 0xF7BD8000 pciide.sys 0xF7890000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS 0xF7620000 MountMgr.sys 0xF74B0000 ftdisk.sys 0xF7B14000 dmload.sys 0xF748A000 dmio.sys 0xF7898000 PartMgr.sys 0xF7630000 VolSnap.sys 0xF7472000 atapi.sys 0xF7640000 disk.sys 0xF7650000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS 0xF7452000 fltmgr.sys 0xF7440000 sr.sys 0xF7429000 KSecDD.sys 0xF739C000 Ntfs.sys 0xF736F000 NDIS.sys 0xF7660000 sisagp.sys 0xF7670000 viaagp.sys 0xF7355000 Mup.sys 0xF7680000 agp440.sys 0xF7690000 amdagp.sys 0xF7331000 adpu320.sys 0xF7319000 \WINDOWS\system32\DRIVERS\SCSIPORT.SYS 0xF76D0000 \SystemRoot\system32\DRIVERS\intelppm.sys 0xF5B33000 \SystemRoot\system32\DRIVERS\nv4_mini.sys 0xF5B1F000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS 0xF5AF7000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0xF78D0000 \SystemRoot\system32\DRIVERS\usbuhci.sys 0xF5AD3000 \SystemRoot\system32\DRIVERS\USBPORT.SYS 0xF78D8000 \SystemRoot\system32\DRIVERS\usbehci.sys 0xF5ABE000 \SystemRoot\system32\DRIVERS\Rtnicxp.sys 0xF5AAB000 \SystemRoot\system32\DRIVERS\oxpar.sys 0xF78E0000 \SystemRoot\system32\DRIVERS\fdc.sys 0xF76E0000 \SystemRoot\system32\DRIVERS\serial.sys 0xF7B08000 \SystemRoot\system32\DRIVERS\serenum.sys 0xF76F0000 \SystemRoot\system32\DRIVERS\imapi.sys 0xF7700000 \SystemRoot\system32\DRIVERS\cdrom.sys 0xF7710000 \SystemRoot\system32\DRIVERS\redbook.sys 0xF5A88000 \SystemRoot\system32\DRIVERS\ks.sys 0xF7C52000 \SystemRoot\system32\DRIVERS\audstub.sys 0xF7720000 \SystemRoot\system32\DRIVERS\rasl2tp.sys 0xF72F5000 \SystemRoot\system32\DRIVERS\ndistapi.sys 0xF5A71000 \SystemRoot\system32\DRIVERS\ndiswan.sys 0xF7730000 \SystemRoot\system32\DRIVERS\raspppoe.sys 0xF7740000 \SystemRoot\system32\DRIVERS\raspptp.sys 0xF78E8000 \SystemRoot\system32\DRIVERS\TDI.SYS 0xF5A60000 \SystemRoot\system32\DRIVERS\psched.sys 0xF7750000 \SystemRoot\system32\DRIVERS\msgpc.sys 0xF78F0000 \SystemRoot\system32\DRIVERS\ptilink.sys 0xF78F8000 \SystemRoot\system32\DRIVERS\raspti.sys 0xF7900000 \SystemRoot\system32\DRIVERS\hamachi.sys 0xF5A30000 \SystemRoot\system32\DRIVERS\rdpdr.sys 0xF7760000 \SystemRoot\system32\DRIVERS\termdd.sys 0xF7908000 \SystemRoot\system32\DRIVERS\kbdclass.sys 0xF7910000 \SystemRoot\system32\DRIVERS\mouclass.sys 0xF7B46000 \SystemRoot\system32\DRIVERS\swenum.sys 0xF59D2000 \SystemRoot\system32\DRIVERS\update.sys 0xF72D9000 \SystemRoot\system32\DRIVERS\mssmbios.sys 0xF7918000 \SystemRoot\system32\DRIVERS\flpydisk.sys 0xF7790000 \SystemRoot\System32\Drivers\NDProxy.SYS 0xF3409000 \SystemRoot\system32\drivers\RtkHDAud.sys 0xF33E5000 \SystemRoot\system32\drivers\portcls.sys 0xF77A0000 \SystemRoot\system32\drivers\drmk.sys 0xF77B0000 \SystemRoot\system32\DRIVERS\usbhub.sys 0xF7B52000 \SystemRoot\system32\DRIVERS\USBD.SYS 0xF7AFC000 \SystemRoot\System32\Drivers\i2omgmt.SYS 0xF7B00000 \SystemRoot\system32\DRIVERS\hidusb.sys 0xF77C0000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS 0xF7920000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS 0xF7B54000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0xF7CF6000 \SystemRoot\System32\Drivers\Null.SYS 0xF7B56000 \SystemRoot\System32\Drivers\Beep.SYS 0xF7938000 \SystemRoot\System32\drivers\vga.sys 0xF7B58000 \SystemRoot\System32\Drivers\mnmdd.SYS 0xF7B5A000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0xF7940000 \SystemRoot\System32\Drivers\Msfs.SYS 0xF7948000 \SystemRoot\System32\Drivers\Npfs.SYS 0xF59CE000 \SystemRoot\system32\DRIVERS\rasacd.sys 0xF30A2000 \SystemRoot\system32\DRIVERS\ipsec.sys 0xF3049000 \SystemRoot\system32\DRIVERS\tcpip.sys 0xF2FF9000 \SystemRoot\system32\DRIVERS\netbt.sys 0xF2FD3000 \SystemRoot\system32\DRIVERS\ipnat.sys 0xF59BE000 \SystemRoot\System32\drivers\ws2ifsl.sys 0xF2FB1000 \SystemRoot\System32\drivers\afd.sys 0xF77E0000 \SystemRoot\system32\DRIVERS\wanarp.sys 0xF77F0000 \SystemRoot\system32\DRIVERS\netbios.sys 0xF7950000 \SystemRoot\system32\DRIVERS\ssmdrv.sys 0xF7958000 \SystemRoot\system32\DRIVERS\usbccgp.sys 0xF2F86000 \SystemRoot\system32\DRIVERS\rdbss.sys 0xF2F16000 \SystemRoot\system32\DRIVERS\mrxsmb.sys 0xF7810000 \SystemRoot\System32\Drivers\Fips.SYS 0xF24A9000 \SystemRoot\system32\DRIVERS\avipbb.sys 0xF59B6000 \SystemRoot\system32\DRIVERS\mouhid.sys 0xF7B64000 \??\C:\Programme\Avira\AntiVir Desktop\avgio.sys 0xF33E1000 \SystemRoot\system32\DRIVERS\kbdhid.sys 0xF2470000 \SystemRoot\System32\Drivers\Udfs.SYS 0xBF800000 \SystemRoot\System32\win32k.sys 0xF3045000 \SystemRoot\System32\drivers\Dxapi.sys 0xF79A8000 \SystemRoot\System32\watchdog.sys 0xBD000000 \SystemRoot\System32\drivers\dxg.sys 0xF7C85000 \SystemRoot\System32\drivers\dxgthk.sys 0xBD012000 \SystemRoot\System32\nv4_disp.dll 0xBD623000 \SystemRoot\System32\ATMFD.DLL 0xB7E1E000 \SystemRoot\system32\DRIVERS\avgntflt.sys 0xF77D0000 \SystemRoot\system32\DRIVERS\fssfltr_tdi.sys 0xB7E0E000 \SystemRoot\system32\DRIVERS\ndisuio.sys 0xB7AF9000 \SystemRoot\system32\DRIVERS\mrxdav.sys 0xB79F4000 \SystemRoot\system32\drivers\wdmaud.sys 0xB7BB6000 \SystemRoot\system32\drivers\sysaudio.sys 0xB775B000 \SystemRoot\System32\Drivers\HTTP.sys 0xB7613000 \SystemRoot\system32\DRIVERS\srv.sys 0xB6C17000 \SystemRoot\System32\Drivers\Fastfat.SYS 0xB68CC000 \SystemRoot\system32\drivers\kmixer.sys 0x7C910000 \WINDOWS\system32\ntdll.dll Processes (total 53): 0 System Idle Process 4 System 712 C:\WINDOWS\system32\smss.exe 760 csrss.exe 784 C:\WINDOWS\system32\winlogon.exe 828 C:\WINDOWS\system32\services.exe 840 C:\WINDOWS\system32\lsass.exe 1036 C:\WINDOWS\system32\nvsvc32.exe 1108 C:\WINDOWS\system32\svchost.exe 1176 svchost.exe 1528 C:\WINDOWS\system32\svchost.exe 1620 svchost.exe 1828 svchost.exe 1940 C:\WINDOWS\system32\spoolsv.exe 2012 C:\Programme\Avira\AntiVir Desktop\sched.exe 192 svchost.exe 580 C:\WINDOWS\explorer.exe 636 C:\Programme\Avira\AntiVir Desktop\avguard.exe 756 C:\Programme\LogMeIn Hamachi\hamachi-2.exe 1308 C:\WINDOWS\system32\svchost.exe 1428 C:\Programme\Java\jre6\bin\jqs.exe 1080 C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE 1852 C:\Programme\Avira\AntiVir Desktop\avshadow.exe 736 C:\WINDOWS\RTHDCPL.EXE 916 C:\Programme\Canon\MyPrinter\BJMYPRT.EXE 144 C:\Programme\Java\jre6\bin\jusched.exe 844 C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe 1060 C:\Programme\Avira\AntiVir Desktop\avgnt.exe 1396 C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe 1508 C:\WINDOWS\system32\rundll32.exe 1600 C:\Programme\LogMeIn Hamachi\hamachi-2-ui.exe 1664 C:\Programme\Windows Live\Messenger\msnmsgr.exe 2184 C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe 2412 C:\WINDOWS\system32\svchost.exe 2792 C:\Programme\IObit\Advanced SystemCare 3\AWC.exe 2936 C:\Programme\aon\OnlineFestplatte\OnlineFestplatte.exe 3064 wmpnetwk.exe 3312 C:\Programme\Pando Networks\Media Booster\PMB.exe 3604 C:\Programme\Windows Media Player\wmpnscfg.exe 3768 C:\Programme\InterVideo\Common\Bin\WinCinemaMgr.exe 3776 C:\Programme\WinZip\WZQKPICK.EXE 1272 C:\WINDOWS\system32\wscntfy.exe 2828 C:\WINDOWS\system32\wbem\wmiapsrv.exe 3580 alg.exe 2932 C:\Programme\Windows Live\Contacts\wlcomm.exe 2608 C:\WINDOWS\system32\ctfmon.exe 2212 C:\WINDOWS\system32\wuauclt.exe 3736 C:\Programme\Mozilla Firefox\firefox.exe 1636 C:\Programme\Gemeinsame Dateien\Teleca Shared\Generic.exe 2684 C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe 1648 C:\Programme\Java\jre6\bin\jucheck.exe 1580 C:\Programme\Mozilla Firefox\plugin-container.exe 3704 C:\Dokumente und Einstellungen\Míchi\Eigene Dateien\Downloads\MBRCheck.exe \\.\C: --> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS) PhysicalDrive0 Model Number: WDCWD800JD-55MUA1, Rev: 10.01E01 Size Device Name MBR Status -------------------------------------------- 74 GB \\.\PhysicalDrive0 Windows XP MBR code detected SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A Done! |
13.04.2011, 20:42 | #19 |
/// Winkelfunktion /// TB-Süch-Tiger™ | tr crypt xpack gen - fragen ja du brauchst WinRAR oder 7zip
__________________ Logfiles bitte immer in CODE-Tags posten |
13.04.2011, 20:43 | #20 |
| tr crypt xpack gen - fragen Ok, das mach ich morgen... |
14.04.2011, 15:08 | #21 |
| tr crypt xpack gen - fragen Hier noch Osam: OSAM Logfile: Code:
ATTFilter Report of OSAM: Autorun Manager v5.0.11926.0 Online Solutions. Complex Protection for Information Systems Saved at 16:06:56 on 14.04.2011 OS: Windows XP Professional Service Pack 3 (Build 2600) Default Browser: Mozilla Corporation Firefox 3.6.16 Scanner Settings [x] Rootkits detection (hidden registry) [x] Rootkits detection (hidden files) [x] Retrieve files information [x] Check Microsoft signatures Filters [ ] Trusted entries [ ] Empty entries [x] Hidden registry entries (rootkit activity) [x] Exclusively opened files [x] Not found files [x] Files without detailed information [x] Existing files [ ] Non-startable services [ ] Non-startable drivers [x] Active entries [x] Disabled entries [Common] -----( %SystemRoot%\Tasks )----- "AppleSoftwareUpdate.job" - "Apple Inc." - C:\Programme\Apple Software Update\SoftwareUpdate.exe "GoogleUpdateTaskUserS-1-5-21-3781786827-3209571363-1898468133-1008Core.job" - "Google Inc." - C:\Dokumente und Einstellungen\Melanie\Lokale Einstellungen\Anwendungsdaten\Google\Update\GoogleUpdate.exe "GoogleUpdateTaskUserS-1-5-21-3781786827-3209571363-1898468133-1008UA.job" - "Google Inc." - C:\Dokumente und Einstellungen\Melanie\Lokale Einstellungen\Anwendungsdaten\Google\Update\GoogleUpdate.exe "videopadShakeIcon.job" - "NCH Software" - C:\Programme\NCH Software\VideoPad\videopad.exe [Control Panel Objects] -----( %SystemRoot%\system32 )----- "ImageDrive.cpl" - "Ahead Software AG" - C:\WINDOWS\system32\ImageDrive.cpl "infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS\system32\infocardcpl.cpl "javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS\system32\javacpl.cpl "nvcpl.cpl" - "NVIDIA Corporation" - C:\WINDOWS\system32\nvcpl.cpl -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )----- "Avira AntiVir Personal" - "Avira GmbH" - C:\PROGRA~1\Avira\ANTIVI~1\avconfig.cpl "ECSEPM" - "Sony Ericsson Mobile Communications AB" - C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\ecsepm.cpl "mlcfg32.cpl" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\MLCFG32.CPL "Pando" - "Pando Networks" - C:\Programme\Pando Networks\Media Booster\PMB.cpl "QuickTime" - "Apple Inc." - C:\Programme\QuickTime\QTSystem\QuickTime.cpl [Drivers] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- "adpu320" (adpu320) - "Adaptec, Inc." - C:\WINDOWS\System32\DRIVERS\adpu320.sys "avgio" (avgio) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avgio.sys "avgntflt" (avgntflt) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avgntflt.sys "avipbb" (avipbb) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avipbb.sys "catchme" (catchme) - ? - C:\DOKUME~1\MCHI~1\LOKALE~1\Temp\catchme.sys (File not found) "Changer" (Changer) - ? - C:\WINDOWS\system32\drivers\Changer.sys (File not found) "EagleNT" (EagleNT) - ? - C:\WINDOWS\system32\drivers\EagleNT.sys (File not found) "FssFltr" (fssfltr) - "Microsoft Corporation" - C:\WINDOWS\System32\DRIVERS\fssfltr_tdi.sys "Hamachi Network Interface" (hamachi) - "LogMeIn, Inc." - C:\WINDOWS\System32\DRIVERS\hamachi.sys "Huawei DataCard USB Modem and USB Serial" (hwdatacard) - ? - C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys (File not found) "lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS\system32\drivers\lbrtfdc.sys (File not found) "Logitech QuickCam Express(PID_0928)" (PID_0928) - ? - C:\WINDOWS\System32\DRIVERS\LV561AV.SYS (File not found) "Logitech USB Monitor Filter" (LVUSBSta) - ? - C:\WINDOWS\System32\drivers\LVUSBSta.sys (File not found) "PCIDump" (PCIDump) - ? - C:\WINDOWS\system32\drivers\PCIDump.sys (File not found) "PDCOMP" (PDCOMP) - ? - C:\WINDOWS\system32\drivers\PDCOMP.sys (File not found) "PDFRAME" (PDFRAME) - ? - C:\WINDOWS\system32\drivers\PDFRAME.sys (File not found) "PDRELI" (PDRELI) - ? - C:\WINDOWS\system32\drivers\PDRELI.sys (File not found) "PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS\system32\drivers\PDRFRAME.sys (File not found) "Sony Ericsson 750 driver (WDM)" (k750bus) - ? - C:\WINDOWS\System32\DRIVERS\k750bus.sys (File not found) "Sony Ericsson 750 USB WMC Device Management Drivers" (k750mgmt) - ? - C:\WINDOWS\System32\DRIVERS\k750mgmt.sys (File not found) "Sony Ericsson 750 USB WMC Modem Drivers" (k750mdm) - ? - C:\WINDOWS\System32\DRIVERS\k750mdm.sys (File not found) "Sony Ericsson 750 USB WMC Modem Filter" (k750mdfl) - ? - C:\WINDOWS\System32\DRIVERS\k750mdfl.sys (File not found) "Sony Ericsson 750 USB WMC OBEX Interface Drivers" (k750obex) - ? - C:\WINDOWS\System32\DRIVERS\k750obex.sys (File not found) "ssmdrv" (ssmdrv) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\ssmdrv.sys "WDICA" (WDICA) - ? - C:\WINDOWS\system32\drivers\WDICA.sys (File not found) [Explorer] -----( HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )----- {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? - (File not found | COM-object registry key not found) {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? - (File not found | COM-object registry key not found) {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? - (File not found | COM-object registry key not found) {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} "DropboxExt" - ? - (File not found | COM-object registry key not found) -----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )----- {89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install -----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )----- {F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll -----( HKLM\Software\Classes\Protocols\Filter )----- {1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll {1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll {1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll {807563E5-5146-11D5-A672-00B0D022E945} "Microsoft Office InfoPath XML Mime Filter" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\MSOXMLMF.DLL -----( HKLM\Software\Classes\Protocols\Handler )----- {314111c7-a502-11d2-bbca-00c04f8ec294} "HxProtocol Class" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class" - "Skype Technologies" - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL {828030A1-22C1-4009-854F-8E305202313F} "livecall" - "Microsoft Corporation" - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL {828030A1-22C1-4009-854F-8E305202313F} "msnim" - "Microsoft Corporation" - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL {03C514A3-1EFB-4856-9F99-10D7BE1653C0} "Windows Live Mail HTML Asynchronous Pluggable Protocol Handler" - "Microsoft Corporation" - C:\Programme\Windows Live\Mail\mailcomm.dll -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )----- {0563DB41-F538-4B37-A92D-4659049B7766} "CLSID_WLMCMimeFilter" - "Microsoft Corporation" - C:\Programme\Windows Live\Mail\mailcomm.dll {42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung" - ? - deskpan.dll (File not found) {1CDB2949-8F65-4355-8456-263E7C208A5D} "Desktop Explorer" - "NVIDIA Corporation" - C:\Programme\NVIDIA Corporation\nView\nvshell.dll {1E9B04FB-F9E5-4718-997B-B8DA88302A47} "Desktop Explorer Menu" - "NVIDIA Corporation" - C:\Programme\NVIDIA Corporation\nView\nvshell.dll {A70C977A-BF00-412C-90B7-034C51DA2439} "DesktopContext Class" - "NVIDIA Corporation" - C:\WINDOWS\system32\nvcpl.dll {1D2680C9-0E2A-469d-B787-065558BC7D43} "Fusion Cache" - "Microsoft Corporation" - c:\WINDOWS\system32\mscoree.dll {FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} "IE User Assist" - ? - (File not found | COM-object registry key not found) {853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung" - ? - (File not found | COM-object registry key not found) {42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Programme\Microsoft Office\Office12\msohevi.dll {993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll {00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\MLSHEXT.DLL {C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll {FFB699E0-306A-11d3-8BD1-00104B6F7516} "NVIDIA CPL Extension" - "NVIDIA Corporation" - C:\WINDOWS\system32\nvcpl.dll {1E9B04FB-F9E5-4718-997B-B8DA88302A48} "nView Desktop Context Menu" - "NVIDIA Corporation" - C:\Programme\NVIDIA Corporation\nView\nvshell.dll {0006F045-0000-0000-C000-000000000046} "Outlook File Icon Extension" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\OLKFSTUB.DLL {45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\shlext.dll {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - c:\WINDOWS\system32\dfshim.dll {764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung" - ? - (File not found | COM-object registry key not found) {e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - c:\WINDOWS\system32\dfshim.dll {03DAACC5-10BA-4E3E-9D54-2A569F6B4B87} "Sony Ericsson File Manager" - "Popwire AB" - C:\Programme\Sony Ericsson\Mobile2\File Manager\FM.dll {738D66C6-0149-4D40-84E4-A7BB2D0CE949} "Sony Ericsson File Manager" - "Popwire AB" - C:\Programme\Sony Ericsson\Mobile2\File Manager\FM.dll {BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Web Folders" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\MSONSEXT.DLL {2BE99FD4-A181-4996-BFA9-58C5FFD11F6C} "Windows Live Photo Gallery Autoplay Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe {00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} "Windows Live Photo Gallery Editor Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe {00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} "Windows Live Photo Gallery Editor Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll {00F30F90-3E96-453B-AFCD-D71989ECC2C7} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll {00F33137-EE26-412F-8D71-F84E4C2C6625} "Windows Live Photo Gallery Viewer Autoplay Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll {00F374B7-B390-4884-B372-2FC349F2172B} "Windows Live Photo Gallery Viewer Drop Target" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoGallery.exe {00F346CB-35A4-465B-8B8F-65A29DBAB1F6} "Windows Live Photo Gallery Viewer Shim" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\PhotoViewerShim.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - "Alexander Roshal" - C:\Programme\WinRAR\rarext.dll {E0D79304-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing LP" - C:\PROGRA~1\WINZIP\WZSHLSTB.DLL {E0D79305-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing LP" - C:\PROGRA~1\WINZIP\WZSHLSTB.DLL {E0D79306-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing LP" - C:\PROGRA~1\WINZIP\WZSHLSTB.DLL {E0D79307-84BE-11CE-9641-444553540000} "WinZip" - "WinZip Computing LP" - C:\PROGRA~1\WINZIP\WZSHLSTB.DLL {06A2568A-CED6-4187-BB20-400B8C02BE5A} "{06A2568A-CED6-4187-BB20-400B8C02BE5A}" - "Microsoft Corporation" - C:\Programme\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe [Internet Explorer] -----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )----- <binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Programme\Windows Live\Toolbar\wltcore.dll ITBar7Height "ITBar7Height" - ? - (File not found | COM-object registry key not found) <binary data> "ITBar7Layout" - ? - (File not found | COM-object registry key not found) <binary data> "ITBarLayout" - ? - (File not found | COM-object registry key not found) <binary data> "{A057A204-BACC-4D26-9990-79A187E2698E}" - ? - (File not found | COM-object registry key not found) -----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )----- {20A60F0D-9AFA-4515-A0FD-83BD84642501} "Checkers Class" - "Microsoft Corporation" - C:\WINDOWS\Downloaded Program Files\msgrchkr.dll / hxxp://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab {8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_17" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_17.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} "Java Plug-in 1.6.0_17" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_17.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_17" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_17.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab {C3F79A2B-B9B4-4A66-B012-3EE46475B072} "MessengerStatsClient Class" - "Microsoft Corporation" - C:\WINDOWS\Downloaded Program Files\MessengerStatsPAClient.dll / hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab {5D6F45B3-9043-443D-A792-115447494D24} "UnoCtrl Class" - "Microsoft" - C:\WINDOWS\Downloaded Program Files\GAME_UNO1.dll / hxxp://messenger.zone.msn.com/DE-AT/a-UNO1/GAME_UNO1.cab -----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )----- {5F7B1267-94A9-47F5-98DB-E99415F33AEC} "In Blog veröffentlichen" - "Microsoft Corporation" - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll {FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Research" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL -----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar )----- <binary data> "&Windows Live Toolbar" - "Microsoft Corporation" - C:\Programme\Windows Live\Toolbar\wltcore.dll -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )----- {18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll {DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll {E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll {C08DF07A-3E49-4E25-9AB0-D3882835F153} "QUICKfind BHO Object" - "IDM" - C:\Programme\IDM\QUICKfind\PlugIns\IEHelp.dll {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} "Search Helper" - "Microsoft Corporation" - C:\Programme\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll {9030D464-4C02-4ABF-8ECC-5164760863C6} "Windows Live Anmelde-Hilfsprogramm" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} "Windows Live Toolbar Helper" - "Microsoft Corporation" - C:\Programme\Windows Live\Toolbar\wltcore.dll {5C255C8A-E604-49b4-9D64-90988571CECB} "{5C255C8A-E604-49b4-9D64-90988571CECB}" - ? - (File not found | COM-object registry key not found) [Logon] -----( %AllUsersProfile%\Startmenü\Programme\Autostart )----- "Adobe Gamma Loader.lnk" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe (Shortcut exists | File exists) "desktop.ini" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini "InterVideo WinCinema Manager.lnk" - "InterVideo Inc." - C:\Programme\InterVideo\Common\Bin\WinCinemaMgr.exe (Shortcut exists | File exists) "WinZip Quick Pick.lnk" - "WinZip Computing LP" - C:\Programme\WinZip\WZQKPICK.EXE (Shortcut exists | File exists) -----( %UserProfile%\Startmenü\Programme\Autostart )----- "desktop.ini" - ? - C:\Dokumente und Einstellungen\Míchi\Startmenü\Programme\Autostart\desktop.ini "Dropbox.lnk" - "Dropbox, Inc." - C:\Dokumente und Einstellungen\Míchi\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Shortcut exists | File exists) -----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )----- "Advanced SystemCare 3" - "IObit" - "C:\Programme\IObit\Advanced SystemCare 3\AWC.exe" /startup "MsnMsgr" - "Microsoft Corporation" - "C:\Programme\Windows Live\Messenger\MsnMsgr.Exe" /background "OnlineFestplatte" - "Telekom Austria TA AG" - C:\Programme\aon\Onlinefestplatte\OnlineFestplatte.exe /tray "Pando Media Booster" - ? - C:\Programme\Pando Networks\Media Booster\PMB.exe -----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )----- "Adobe ARM" - "Adobe Systems Incorporated" - "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" "Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" "avgnt" - "Avira GmbH" - "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min "CanonMyPrinter" - "CANON INC." - C:\Programme\Canon\MyPrinter\BJMyPrt.exe /logon "CanonSolutionMenu" - "CANON INC." - C:\Programme\Canon\SolutionMenu\CNSLMAIN.exe /logon "LogMeIn Hamachi Ui" - "LogMeIn Inc." - "C:\Programme\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start "NeroFilterCheck" - "Ahead Software Gmbh" - C:\WINDOWS\system32\NeroCheck.exe "NvCplDaemon" - "NVIDIA Corporation" - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup "NvMediaCenter" - "NVIDIA Corporation" - RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit "nwiz" - "NVIDIA Corporation" - C:\Programme\NVIDIA Corporation\nView\nwiz.exe /installquiet "QuickTime Task" - "Apple Inc." - "C:\Programme\QuickTime\QTTask.exe" -atboottime "Sony Ericsson PC Suite" - ? - "C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions "SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Programme\Java\jre6\bin\jusched.exe" [Print Monitors] -----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )----- "PDFCreator" - ? - C:\WINDOWS\system32\pdfcmnnt.dll (File found, but it contains no detailed information) [Services] -----( HKLM\SYSTEM\CurrentControlSet\Services )----- ".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe "ASP.NET State Service" (aspnet_state) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe "Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avguard.exe "Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\sched.exe "InstallDriver Table Manager" (IDriverT) - "Macrovision Corporation" - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe "Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe "LogMeIn Hamachi 2.0 Tunneling Engine" (Hamachi2Svc) - "LogMeIn Inc." - C:\Programme\LogMeIn Hamachi\hamachi-2.exe "Machine Debug Manager" (MDM) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE "Microsoft Office Diagnostics Service" (odserv) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE "NVIDIA Display Driver Service" (NVSvc) - "NVIDIA Corporation" - C:\WINDOWS\system32\nvsvc32.exe "Office Source Engine" (ose) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE "SeaPort" (SeaPort) - "Microsoft Corporation" - C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe "Windows CardSpace" (idsvc) - "Microsoft Corporation" - c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe "Windows Live Family Safety-Dienst" (fsssvc) - "Microsoft Corporation" - C:\Programme\Windows Live\Family Safety\fsssvc.exe "Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [Winlogon] -----( HKCU\Control Panel\IOProcs )----- "MVB" - ? - mvfs32.dll (File not found) -----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )----- "WgaLogon" - "Microsoft Corporation" - C:\WINDOWS\system32\WgaLogon.dll ===[ Logfile end ]=========================================[ Logfile end ]=== If You have questions or want to get some help, You can visit Online Solutions :: Index |
14.04.2011, 15:10 | #22 |
/// Winkelfunktion /// TB-Süch-Tiger™ | tr crypt xpack gen - fragen Sieht ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs. Denk dran beide Tools zu updaten vor dem Scan!!
__________________ Logfiles bitte immer in CODE-Tags posten |
14.04.2011, 15:21 | #23 |
| tr crypt xpack gen - fragen Bin dabei.. Könntest du mir erklären was mit meinem PC los ist? |
14.04.2011, 19:59 | #24 |
| tr crypt xpack gen - fragen malewarebytes: Malwarebytes' Anti-Malware 1.50.1.1100 Malwarebytes Datenbank Version: 6361 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 14.04.2011 17:21:13 mbam-log-2011-04-14 (17-21-13).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Durchsuchte Objekte: 304639 Laufzeit: 1 Stunde(n), 6 Minute(n), 33 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
15.04.2011, 07:52 | #25 |
/// Winkelfunktion /// TB-Süch-Tiger™ | tr crypt xpack gen - fragen Wa sist mit dem anderen Log?
__________________ Logfiles bitte immer in CODE-Tags posten |
16.04.2011, 07:55 | #26 |
| tr crypt xpack gen - fragen War gestern fast nicht zu Hause... |
16.04.2011, 12:03 | #27 |
/// Winkelfunktion /// TB-Süch-Tiger™ | tr crypt xpack gen - fragen Dann mach es wenn du Zeit hast
__________________ Logfiles bitte immer in CODE-Tags posten |
16.04.2011, 18:28 | #28 |
| tr crypt xpack gen - fragen hatte auch heute am nachmittag keine Zeit, sry Hier superantispyware: SUPERAntiSpyware Scan Log SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware! Generated 04/16/2011 at 10:37 AM Application Version : 4.50.1002 Core Rules Database Version : 6854 Trace Rules Database Version: 4666 Scan type : Complete Scan Total Scan Time : 01:35:09 Memory items scanned : 547 Memory threats detected : 0 Registry items scanned : 7555 Registry threats detected : 0 File items scanned : 124788 File threats detected : 2 Adware.Tracking Cookie C:\Dokumente und Einstellungen\***\Cookies\míchi@atdmt[2].txt C:\Dokumente und Einstellungen\***\Cookies\míchi@atdmt.combing[2].txt |
17.04.2011, 19:35 | #29 |
/// Winkelfunktion /// TB-Süch-Tiger™ | tr crypt xpack gen - fragen Sieht ok aus, da wurden nur Cookies gefunden. Noch Probleme oder weitere Funde in der Zwischenzeit?
__________________ Logfiles bitte immer in CODE-Tags posten |
17.04.2011, 19:38 | #30 |
| tr crypt xpack gen - fragen Naja, mein Computer ist trotz geringer auslastung noch immer sehr langsam... aber mich würd jetzt interessieren, was eigentlich los war?? |
Themen zu tr crypt xpack gen - fragen |
absoluter, antivir, ausgeführt, crypt, dokumente, einstellungen, frage, fragen, gen, lokale, neuling, pferd, quarantäne, schei, temp, theme, themen, tr crypt xpack gen, tr/crypt.xpack.ge, tr/crypt.xpack.gen, troja, trojanische, trojanische pferd, viren, virus, vorbeugen, wirklich, worte, xpack |