Trojaner-Board - #NewHeur_PE Virus# gefunden

Hallo TB-Board,

ESET-Online Scaner meldet mir den oben genannten Virus und noch ein paar andere Sachen, habe diesbezüglich schon mal gegoogelt aber leider nichts dazu gefunden.

Nun wollte ich mich einmal an euch wenden und um Durchsicht meines Rechners zu bitten.

Hier mal das Log-File von ESET:
Code:
ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6889

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# end=finished

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-01-27 09:33:51

# local_time=2013-01-27 10:33:51 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 100 91 7901 136032303 0 0

# compatibility_mode=5893 16776573 100 94 147359 110952281 0 0

# scanned=141536

# found=0

# cleaned=0

# scan_time=2124

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=13093

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-02-10 10:06:17

# local_time=2013-02-10 11:06:17 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 100 91 90844 137243849 0 0

# compatibility_mode=5893 16776574 100 94 1355305 112163827 0 0

# scanned=115952

# found=3

# cleaned=3

# scan_time=2849

sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Carsten\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D8230ZA5\ApnIC[1].0"

sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Carsten\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZHMSP7JG\ApnIC[1].0"

sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="Variante von Win32/Bundled.Toolbar.Ask Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\Carsten\AppData\Local\Temp\AskSLib.dll"

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=13117

# end=finished

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-02-10 11:15:31

# local_time=2013-02-11 12:15:31 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 100 91 98598 137248003 0 0

# compatibility_mode=5893 16776574 100 94 1363059 112167981 0 0

# scanned=115784

# found=0

# cleaned=0

# scan_time=2700

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=13171

# end=finished

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-02-16 04:22:43

# local_time=2013-02-16 05:22:43 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 100 91 332389 137741635 0 0

# compatibility_mode=5893 16776574 100 94 1853091 112661613 0 0

# scanned=118687

# found=0

# cleaned=0

# scan_time=2969

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=14346

# end=stopped

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-07-10 10:30:41

# local_time=2013-07-11 12:30:41 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 91 85219 150205313 0 0

# compatibility_mode=5893 16776574 100 94 85096 125125291 0 0

# scanned=104093

# found=3

# cleaned=0

# scan_time=3349

sh=5DB117E423FA14205BCB026FA011ADBCF22F01E6 ft=1 fh=7357e4ea35d32fbb vn="Win32/OpenCandy Anwendung" ac=I fn="C:\Program Files (x86)\Alternative Flash Player Auto-Updater\update.exe"

sh=F7C72C5EC5334C58465B8A4257978531B19C4098 ft=1 fh=0ab1d01b6bb0271d vn="Win32/OpenCandy Anwendung" ac=I fn="C:\Users\DTM\Desktop\FreeYouTubeDownload_3.2.1.320.exe"

sh=5DB117E423FA14205BCB026FA011ADBCF22F01E6 ft=1 fh=7357e4ea35d32fbb vn="Win32/OpenCandy Anwendung" ac=I fn="C:\Users\DTM\Documents\Alternative Flash Player Auto-Updater\update.exe"

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=14358

# end=stopped

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-07-11 06:24:53

# local_time=2013-07-11 08:24:53 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 91 3179 150276965 0 0

# compatibility_mode=5893 16776574 100 94 156748 125196943 0 0

# scanned=327

# found=0

# cleaned=0

# scan_time=13

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=14358

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-07-11 07:52:13

# local_time=2013-07-11 09:52:13 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 91 8419 150282205 0 0

# compatibility_mode=5893 16776574 100 94 161988 125202183 0 0

# scanned=134720

# found=3

# cleaned=3

# scan_time=4955

sh=5DB117E423FA14205BCB026FA011ADBCF22F01E6 ft=1 fh=7357e4ea35d32fbb vn="Win32/OpenCandy Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\Alternative Flash Player Auto-Updater\update.exe"

sh=F7C72C5EC5334C58465B8A4257978531B19C4098 ft=1 fh=0ab1d01b6bb0271d vn="Win32/OpenCandy Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\DTM\Desktop\FreeYouTubeDownload_3.2.1.320.exe"

sh=5DB117E423FA14205BCB026FA011ADBCF22F01E6 ft=1 fh=7357e4ea35d32fbb vn="Win32/OpenCandy Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\DTM\Documents\Alternative Flash Player Auto-Updater\update.exe"

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=14364

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-07-12 01:57:00

# local_time=2013-07-12 03:57:00 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 91 73506 150347292 0 0

# compatibility_mode=5893 16776574 100 94 227075 125267270 0 0

# scanned=134969

# found=0

# cleaned=0

# scan_time=5152

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=14605

# end=finished

# remove_checked=false

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-07-31 08:36:38

# local_time=2013-07-31 10:36:38 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 91 535236 152012870 0 0

# compatibility_mode=5893 16776574 100 94 1892653 126932848 0 0

# scanned=136189

# found=0

# cleaned=0

# scan_time=5452

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=14776

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-08-14 09:10:42

# local_time=2013-08-14 11:10:42 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 91 354628 153224514 0 0

# compatibility_mode=5893 16776574 100 94 3104297 128144492 0 0

# scanned=138954

# found=1

# cleaned=1

# scan_time=4242

sh=E64481B860A007799D011E1EC6E79226D9E070EB ft=1 fh=e5fcce4834a4a98e vn="Win32/OpenCandy Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\DTM\Documents\Alternative Flash Player Auto-Updater\update.exe"

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=14920

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-08-27 03:39:06

# local_time=2013-08-27 05:39:06 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 91 447305 154327818 0 0

# compatibility_mode=5893 16776574 100 94 4207601 129247796 0 0

# scanned=138103

# found=2

# cleaned=2

# scan_time=4121

sh=F7C72C5EC5334C58465B8A4257978531B19C4098 ft=1 fh=0ab1d01b6bb0271d vn="Win32/OpenCandy Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\DTM\Desktop\FreeYouTubeDownload_3.2.1.320.exe"

sh=5DB117E423FA14205BCB026FA011ADBCF22F01E6 ft=1 fh=7357e4ea35d32fbb vn="Win32/OpenCandy Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\DTM\Documents\Alternative Flash Player Auto-Updater\update.exe"

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=15094

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-09-11 07:31:37

# local_time=2013-09-11 09:31:37 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 91 196448 155637769 0 0

# compatibility_mode=5893 16776574 100 94 5517552 130557747 0 0

# scanned=138615

# found=2

# cleaned=2

# scan_time=4084

sh=5DB117E423FA14205BCB026FA011ADBCF22F01E6 ft=1 fh=7357e4ea35d32fbb vn="Win32/OpenCandy Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\Alternative Flash Player Auto-Updater\update.exe"

sh=5DB117E423FA14205BCB026FA011ADBCF22F01E6 ft=1 fh=7357e4ea35d32fbb vn="Win32/OpenCandy Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\DTM\Documents\Alternative Flash Player Auto-Updater\update.exe"

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=f539af377a2502408d1a65c8cda10ad0

# engine=15177

# end=finished

# remove_checked=true

# archives_checked=false

# unwanted_checked=true

# unsafe_checked=true

# antistealth_checked=true

# utc_time=2013-09-18 03:31:35

# local_time=2013-09-18 05:31:35 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1031

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 91 230172 156228167 0 0

# compatibility_mode=5893 16776574 100 94 6107950 131148145 0 0

# scanned=138709

# found=2

# cleaned=2

# scan_time=4285

sh=6BFA513F3622B36A6213132F5BEF5053FA935068 ft=1 fh=ea5a920848189c63 vn="möglicherweise unbekannter Virus NewHeur_PE Virus (gelöscht - in Quarantäne kopiert)" ac=C fn="C:\Program Files (x86)\Auslogics\DiskDefrag\DiskDefrag.exe"

sh=5D11E337A024E939DA4DC2D917698EA807D46A19 ft=1 fh=d4ac60c0f829146a vn="Variante von Win32/DownloadSponsor.A Anwendung (Gesäubert durch Löschen - in Quarantäne kopiert)" ac=C fn="C:\Users\DTM\Downloads\Passfoto Manager Installer.exe"
Zusätzlich habe ich noch einen Scan mit Malwarebytes und AVAST gemacht dort wurde aber nichts gefunden.