|
Generic Trojan - Trojan Patch F Hi Leute, bei einem Scan mit Panda Internet Security wurde die Meldung Generic trojan ausgegeben. Beivirus Total wurde mit 45,35 % der Trojan Patch F ausgegeben. die herunter geladene Datei wurde meines Wissens nicht ausgeführt. dennoch um auf nummer Sicher zu gehen, bevor ich in Panik verfalle wollte ich euch bitten einmal den HijackThis Log euch anzusehen. Auf meinem System befindet sich WinXP mit SP2 inkl. allen updates Panda Internet Security 12.01.00 Danke euch vorab für eure Hilfe Logfile of HijackThis v1.99.1 Scan saved at 14:04:39, on 13.02.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16608) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Programme\Panda Security\Panda Internet Security 2008\TPSrv.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe C:\WINDOWS\system32\nvsvc32.exe C:\Programme\Panda Security\Panda Internet Security 2008\PsCtrls.exe C:\Programme\Panda Security\Panda Internet Security 2008\PavFnSvr.exe C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe C:\Programme\Panda Security\Panda Internet Security 2008\pavsrv51.exe C:\Programme\Panda Security\Panda Internet Security 2008\AntiSpam\pskmssvc.exe C:\Programme\Panda Security\Panda Internet Security 2008\AVENGINE.EXE c:\programme\panda security\panda internet security 2008\firewall\PSHOST.EXE C:\Programme\Panda Security\Panda Internet Security 2008\PsImSvc.exe C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\WINDOWS\system32\svchost.exe C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe C:\Programme\eigene\UPHClean\uphclean.exe C:\WINDOWS\Explorer.EXE C:\Programme\eigene\Acronis\TrueImageHome\TrueImageMonitor.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Programme\Panda Security\Panda Internet Security 2008\APVXDWIN.EXE C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE C:\Programme\Panda Security\Panda Internet Security 2008\SRVLOAD.EXE C:\Programme\Panda Security\Panda Internet Security 2008\WebProxy.exe C:\Programme\Panda Security\Panda Internet Security 2008\PavBckPT.exe C:\WINDOWS\system32\wuauclt.exe C:\Programme\Panda Security\Panda Internet Security 2008\PAVJOBS.EXE C:\Programme\eigene\Mozilla Firefox\firefox.exe C:\Programme\eigene\totalcmd\TOTALCMD.EXE C:\Programme\eigene\totalcmd\TOTALCMD.EXE C:\Programme\Panda Security\Panda Internet Security 2008\psimreal.exe C:\Security\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = h**p://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = h**p://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Programme\eigene\GetRight\xx2gr.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\eigene\java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Programme\eigene\Acronis\TrueImageHome\TrueImageMonitor.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [APVXDWIN] "C:\Programme\Panda Security\Panda Internet Security 2008\APVXDWIN.EXE" /s O4 - HKLM\..\Run: [SCANINICIO] "C:\Programme\Panda Security\Panda Internet Security 2008\Inicio.exe" O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S8F.tmp" /EF "HKCU" O4 - HKCU\..\Run: [EPSON Stylus DX5000 Series auf MWORX-BASE (von MWORX_NOTE2)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE /FU "C:\WINDOWS\TEMP\E_S2C.tmp" /EF "HKCU" O8 - Extra context menu item: Download with GetRight Pro - C:\Programme\eigene\GetRight\GRdownload.htm O8 - Extra context menu item: Mit GetRight downloaden - C:\Programme\eigene\GetRight\GRdownload.htm O8 - Extra context menu item: Mit Getright-Browser öffnen - C:\Programme\eigene\GetRight\GRbrowse.htm O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\eigene\MICROS~1\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Open with GetRight Pro Browser - C:\Programme\eigene\GetRight\GRbrowse.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\eigene\java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\eigene\java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\eigene\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\eigene\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\eigene\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O10 - Broken Internet access because of LSP provider 'c:\programme\bonjour\mdnsnsp.dll' missing O11 - Options group: [INTERNATIONAL] International* O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Panda Software Controller - Panda Software International - C:\Programme\Panda Security\Panda Internet Security 2008\PsCtrls.exe O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Programme\Panda Security\Panda Internet Security 2008\PavFnSvr.exe O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Programme\Gemeinsame Dateien\Panda Software\PavShld\pavprsrv.exe O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Programme\Panda Security\Panda Internet Security 2008\pavsrv51.exe O23 - Service: Panda Antispam Engine (pmshellsrv) - Panda Software International - C:\Programme\Panda Security\Panda Internet Security 2008\AntiSpam\pskmssvc.exe O23 - Service: Panda Host Service (PSHost) - Panda Software International - c:\programme\panda security\panda internet security 2008\firewall\PSHOST.EXE O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - C:\Programme\Panda Security\Panda Internet Security 2008\PsImSvc.exe O23 - Service: Panda TPSrv (TPSrv) - Panda Software International - C:\Programme\Panda Security\Panda Internet Security 2008\TPSrv.exe O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe Virustotal Scan Antivirus Version letzte aktualisierung Ergebnis AhnLab-V3 2008.2.13.11 2008.02.13 - AntiVir 7.6.0.65 2008.02.13 TR/Patch.F.15 Authentium 4.93.8 2008.02.13 - Avast 4.7.1098.0 2008.02.13 Win32:Neptunia-BR AVG 7.5.0.516 2008.02.13 - BitDefender 7.2 2008.02.13 Trojan.Patch.F CAT-QuickHeal None 2008.02.12 - ClamAV 0.92 2008.02.13 - DrWeb 4.44.0.09170 2008.02.13 - eSafe 7.0.15.0 2008.02.11 - eTrust-Vet 31.3.5533 2008.02.13 - Ewido 4.0 2008.02.13 - FileAdvisor 1 2008.02.13 High threat detected Fortinet 3.14.0.0 2008.02.13 Patch.F!tr F-Prot 4.4.2.54 2008.02.12 - F-Secure 6.70.13260.0 2008.02.13 - Ikarus T3.1.1.20 2008.02.13 Trojan.Keygen.Q Kaspersky 7.0.0.125 2008.02.13 - McAfee 5228 2008.02.12 - Microsoft 1.3204 2008.02.13 HackTool:Win32/Patch.A NOD32v2 2871 2008.02.13 - Norman 5.80.02 2008.02.12 - Panda 9.0.0.4 2008.02.13 Generic Trojan Prevx1 V2 2008.02.13 TROJAN.PATCH.F Sophos 4.26.0 2008.02.13 Troj/Patch-F Sunbelt 2.2.907.0 2008.02.13 Trojan.Patch.F Symantec 10 2008.02.13 Backdoor.Graybird TheHacker 6.2.9.218 2008.02.12 - VBA32 3.12.6.0 2008.02.11 - VirusBuster 4.3.26:9 2008.02.12 Packed/FSG Webwasher-Gateway 6.6.2 2008.02.13 Trojan.Patch.F.15 weitere Informationen File size: 154201 bytes MD5: cfc3fccc4d1527f3b16a584e4bb81286 SHA1: 8e25dcdb37d150fb810e1909b96ee8a162ec6873 PEiD: - Bit9 info: h**p://fileadvisor.bit9.com/services/extinfo.aspx?md5=cfc3fccc4d1527f3b16a584e4bb81286 packers: RAR, embedded, FSG packers: FSG Prevx info: h**p://info.prevx.com/aboutprogramtext.asp?PX5=4ED3C22C59A505885A12021D6DA798005BB47D7E |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 09:26 Uhr. |
Copyright ©2000-2025, Trojaner-Board