Trojaner-Board - Firewall Fehler Code: 0x6d9

Entschuldigung, hat etwas gedauert, aber hier die loggs :

Malwarebyte - Logs :

Code:

 Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org
 

Datenbank Version: 6385
 

Windows 6.0.6002 Service Pack 2

Internet Explorer 9.0.8112.16421
 

22.03.2012 18:35:16

mbam-log-2012-03-22 (18-35-01).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)

Durchsuchte Objekte: 419799

Laufzeit: 2 Stunde(n), 40 Minute(n), 55 Sekunde(n)
 

Infizierte Speicherprozesse: 0

Infizierte Speichermodule: 0

Infizierte Registrierungsschlüssel: 1

Infizierte Registrierungswerte: 0

Infizierte Dateiobjekte der Registrierung: 0

Infizierte Verzeichnisse: 0

Infizierte Dateien: 3
 

Infizierte Speicherprozesse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel:

HKEY_CURRENT_USER\Software\VB and VBA Program Settings\SrvID (Malware.Trace) -> No action taken.
 

Infizierte Registrierungswerte:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung:

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien:

c:\Users\Elena\AppData\Local\Temp\serials.exe (RiskWare.Tool.CK) -> No action taken.

c:\Users\Elena\documents\calypso-2 client 2012\calypso-2.exe.exe (RiskWare.Tool.CK) -> No action taken.

c:\Users\Elena\AppData\Local\Temp\svchost.exe (Trojan.Agent) -> No action taken.

Eset - Logs :

Code:

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=5e7efe691372d24790e3f1430aa4c906

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2012-03-22 05:57:58

# local_time=2012-03-22 06:57:58 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=5121 16776573 100 96 67828563 147163960 0 0

# compatibility_mode=5892 16776574 66 100 4932076 169971630 0 0

# compatibility_mode=8192 67108863 100 0 4028 4028 0 0

# compatibility_mode=9217 16777214 25 22 41322572 54711864 0 0

# scanned=170

# found=0

# cleaned=0

# scan_time=223

ESETSmartInstaller@High as downloader log:

all ok

esets_scanner_update returned -1 esets_gle=53251

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=5e7efe691372d24790e3f1430aa4c906

# end=stopped

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2012-03-22 09:30:20

# local_time=2012-03-22 10:30:20 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=5121 16776573 100 96 67828923 147164320 0 0

# compatibility_mode=5892 16776574 66 100 4932436 169971990 0 0

# compatibility_mode=8192 67108863 100 0 4388 4388 0 0

# compatibility_mode=9217 16777214 25 22 41322932 54712224 0 0

# scanned=112411

# found=11

# cleaned=0

# scan_time=12601

C:\Downloads\Software\registrybooster.exe        a variant of Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\Local\Temp\9675793.exe        a variant of Win32/Kryptik.ZKW trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\3cc664c-12195203        Java/Exploit.CVE-2010-4452.A trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\7a43fc8f-1b871a36        a variant of Java/TrojanDownloader.OpenStream.NCC trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\7061701b-6f2c5fe1        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\15e75edc-3e9ea8f7        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\477f4e1-398d7cc7        Java/Exploit.CVE-2011-3544.AC trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\32ad0d46-431ef839        a variant of Java/TrojanDownloader.OpenStream.NCE trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60\198818fc-1257ea49        a variant of Java/TrojanDownloader.OpenConnection.MU trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\734cfb3f-5e9cb3a0        Java/TrojanDownloader.OpenStream.NBV trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\7be78a09-54edc2c0        probably a variant of Java/TrojanDownloader.OpenStream.NCC trojan (unable to clean)        00000000000000000000000000000000        I

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=5e7efe691372d24790e3f1430aa4c906

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2012-03-23 07:23:22

# local_time=2012-03-23 08:23:22 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.0.6002 NT Service Pack 2

# compatibility_mode=5121 16776573 100 96 67895485 147230882 0 0

# compatibility_mode=5892 16776574 66 100 4998998 170038552 0 0

# compatibility_mode=8192 67108863 100 0 70950 70950 0 0

# compatibility_mode=9217 16777214 25 22 41389494 54778786 0 0

# scanned=258368

# found=14

# cleaned=0

# scan_time=24822

C:\Downloads\Software\registrybooster.exe        a variant of Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\Local\Temp\9675793.exe        a variant of Win32/Kryptik.ZKW trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\3cc664c-12195203        Java/Exploit.CVE-2010-4452.A trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\7a43fc8f-1b871a36        a variant of Java/TrojanDownloader.OpenStream.NCC trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\7061701b-6f2c5fe1        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\15e75edc-3e9ea8f7        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\477f4e1-398d7cc7        Java/Exploit.CVE-2011-3544.AC trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\32ad0d46-431ef839        a variant of Java/TrojanDownloader.OpenStream.NCE trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60\198818fc-1257ea49        a variant of Java/TrojanDownloader.OpenConnection.MU trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\734cfb3f-5e9cb3a0        Java/TrojanDownloader.OpenStream.NBV trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Elena\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\7be78a09-54edc2c0        probably a variant of Java/TrojanDownloader.OpenStream.NCC trojan (unable to clean)        00000000000000000000000000000000        I

C:\Windows\$NtUninstallKB51177$\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\6e9f4719-711e0616        a variant of Java/Exploit.CVE-2011-3544.AO trojan (unable to clean)        00000000000000000000000000000000        I

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\6e9f4719-711e0616        a variant of Java/Exploit.CVE-2011-3544.AO trojan (unable to clean)        00000000000000000000000000000000        I

C:\Windows\winsxs\x86_microsoft-windows-dfsclient_31bf3856ad364e35_6.0.6002.18451_none_894b9dbde369cb1f\dfsc.sys        a variant of Win32/Rootkit.Kryptik.IM trojan (unable to clean)        00000000000000000000000000000000        I

außerdem hab ich noch eine Frage, und zwar hat mein Laptop das selbe Problem mit der Firewall, soll ich diese Schritte auch auf dem durchführen ?