Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Vundogen, Agent-LAP, Tiny-IF, Downloader KK (https://www.trojaner-board.de/43799-vundogen-agent-lap-tiny-if-downloader-kk.html)

tutterchen 22.09.2007 11:37

Vundogen, Agent-LAP, Tiny-IF, Downloader KK
 
ich bekomme seit 3 tagen von avast meldungen über verschiedene trojaner. ich habe diverse viren posts gelesen und auch schon tools angewendet:

avg anti spyware -> findet nichts
counterspy -> noch nicht gelaufen
vundofix.exe -> findet nichts (avast meldet aber ab und zu vundo)
fsbl -> findet nichts
combofix -> meldete fehler, bereinigte
gmer.exe -> stürzt ab
cleanup -> durchgeführt

hier mein log, vielleicht kann mir jemand noch helfen:

Logfile of HijackThis v1.99.1
Scan saved at 12:25:03, on 22.09.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\AdAware\aawservice.exe
C:\Programme\Avast4\aswUpdSv.exe
C:\Programme\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Virus\AVG Anti-Spy 7.5\guard.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Virus\CounterSpy\SBCSSvc.exe
C:\WINDOWS\system32\slserv.exe
C:\Programme\Avast4\ashMaiSv.exe
C:\Programme\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Programme\Picasa\PicasaMediaDetector.exe
C:\Virus\AVG Anti-Spy 7.5\avgas.exe
C:\WINDOWS\System32\svchost.exe
C:\Virus\CounterSpy\SBCSTray.exe
C:\Programme\Palm Zire 71\HOTSYNC.EXE
C:\Programme\Opera\Opera.exe
C:\Virus\CounterSpy\Counterspy.exe
C:\Programme\Microsoft Office\Office10\OUTLOOK.EXE
D:\Transfer\software\system\virus\diverse\hijackthis_199\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Programme\Picasa\PicasaMediaDetector
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Virus\AVG Anti-Spy 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SBCSTray] C:\Virus\CounterSpy\SBCSTray.exe
O4 - HKLM\..\Run: [combofix] C:\WINDOWS\system32\cmd.exe /c cd /d C:\ComboFix\ & Combobatch.bat
O4 - Startup: HotSync Manager.lnk = C:\Programme\Palm Zire 71\HOTSYNC.EXE
O4 - Global Startup: HotSync Manager.lnk = C:\Programme\Palm Zire 71\HOTSYNC.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O17 - HKLM\System\CCS\Services\Tcpip\..\{427C1D7A-B7A5-4EA6-B403-501F0496BF33}: NameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{BE07DCF8-645B-4852-991B-123C27663993}: NameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{EFDB77B1-CE6B-4F45-AAB4-9A02AA882666}: NameServer = 192.168.2.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{427C1D7A-B7A5-4EA6-B403-501F0496BF33}: NameServer = 192.168.2.1
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Programme\AdAware\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programme\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programme\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programme\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programme\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Virus\AVG Anti-Spy 7.5\guard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Sunbelt CounterSpy Antispyware (SBCSSvc) - Sunbelt Software - C:\Virus\CounterSpy\SBCSSvc.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Programme\TuneUp Utilities\WinStylerThemeSvc.exe

BataAlexander 22.09.2007 17:10

Zitat:

h**p://***ll.com/seriall/gsak_key.exe\keygen.exe
Kein Wunder, hier musst Du Dir wohl selber helfen :daumenhoc

tutterchen 23.09.2007 13:19

problem gelöst, system neu aufgesetzt.


Alle Zeitangaben in WEZ +1. Es ist jetzt 18:17 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55