System Tool Befall - Logdatei

sam85

Liebe Gemeinde,

bei mir tauchte die unschöne Malware System Tool auf.

Ich habe mich an die Anleitung von diesem Board gehalten.

http://www.trojaner-board.de/92246-s...entfernen.html

Ich habe rkill ausgeführt und einen scan mit Malwarebytes durchgeführt.

Soll ich die in Quarantöne befindlichen Dateien nun alle löschen???

Hier das logfile meines scans:

Über eure Analyse, Hilfestellung würde ich mich sehr freuen.

Danke im Vorraus

----------------------------------------------------------

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 5659

Windows 6.1.7600 (Safe Mode)
Internet Explorer 8.0.7600.16385

02.02.2011 17:21:00
mbam-log-2011-02-02 (17-21-00).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 356312
Laufzeit: 35 Minute(n), 33 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 32

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\kBbHmOg15400 (Rogue.SystemTool) -> Value: kBbHmOg15400 -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\programdata\kbbhmog15400\kbbhmog15400.exe (Rogue.SystemTool) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\44FHG0DU\az3[1].exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\44FHG0DU\az3[2].exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\44FHG0DU\az3[3].exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\44FHG0DU\cptrlg[3].htm (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\44FHG0DU\hyfaitavt[1].htm (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\6YJL1BX5\hyfaitavt[1].htm (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\6YJL1BX5\izgowq[3].htm (Malware.Packer.Gen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\6YJL1BX5\iztbjhowu[1].htm (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\6YJL1BX5\qhlkrzhf[2].htm (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\K5N1IIOE\sjnlgn[1].htm (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\K5N1IIOE\xavdxsz[3].htm (Worm.Rimecud) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\Z8G2DMHK\izgowq[1].htm (Malware.Packer.Gen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\Z8G2DMHK\kbwdyfeyta[1].htm (Trojan.Proxy) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\Z8G2DMHK\kbwdyfeyta[2].htm (Trojan.Proxy) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\Z8G2DMHK\qhlkrzhf[3].htm (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\Z8G2DMHK\tyfnhc[2].htm (Rogue.SystemTool) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\microsoft\Windows\temporary internet files\Content.IE5\Z8G2DMHK\xbvqxsa[1].htm (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\Temp\19792079 (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\Temp\2701.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\Temp\7E66.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\Temp\8318.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\Temp\aeotwed.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\Temp\bufee.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\Temp\fenpcn.exe (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\Temp\narxemwcso.exe (Trojan.FraudPack.Gen) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\Temp\setup2609544720.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\Temp\tvljxpe.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\Users\***\AppData\Local\Temp\vvifjepc.exe (Worm.Rimecud) -> Quarantined and deleted successfully.
c:\Users\***\Desktop\LIFE\Musik\programme\reason 4 + tut + keygen\KEYGEN.EXE (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
c:\Users\Public\documents\Reason\KEYGEN.EXE (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
c:\Users\***\Desktop\system tool 2011.lnk (Rogue.SystemTool) -> Quarantined and deleted successfully.