Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Recycler Virus ?? (https://www.trojaner-board.de/74395-recycler-virus.html)

egolectro 21.06.2009 20:14

Recycler Virus ??
 
Hallo

Bin neu und total ratloß :-(

hier meine log

Zitat:

Malwarebytes' Anti-Malware 1.38
Datenbank Version: 2319
Windows 5.1.2600 Service Pack 3

21.06.2009 20:53:54
mbam-log-2009-06-21 (20-53-54).txt

Scan-Methode: Vollständiger Scan (C:\|D:\|)
Durchsuchte Objekte: 185114
Laufzeit: 27 minute(s), 6 second(s)

Infizierte Speicherprozesse: 3
Infizierte Speichermodule: 2
Infizierte Registrierungsschlüssel: 3
Infizierte Registrierungswerte: 3
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 22

Infizierte Speicherprozesse:
C:\WINDOWS.0\system32\B.tmp (Trojan.Dropper) -> Failed to unload process.
C:\Dokumente und Einstellungen\egolectro\reader_s.exe (Trojan.FakeAlert) -> Unloaded process successfully.
C:\WINDOWS.0\system32\reader_s.exe (Trojan.FakeAlert) -> Unloaded process successfully.

Infizierte Speichermodule:
C:\WINDOWS.0\system32\iknszg.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\WINDOWS.0\system32\iknszg32.dll (Trojan.FakeAlert) -> Delete on reboot.

Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\iknszg (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Protect (Rootkit.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\AGprotect (Malware.Trace) -> Quarantined and deleted successfully.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\reader_s (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\reader_s (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\reader_s (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\WINDOWS.0\system32\iknszg.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\WINDOWS.0\system32\iknszg32.dll (Trojan.FakeAlert) -> Delete on reboot.
C:\WINDOWS.0\system32\B.tmp (Trojan.Dropper) -> Delete on reboot.
C:\Dokumente und Einstellungen\noname\reader_s.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS.0\system32\reader_s.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\noname\lokale einstellungen\anwendungsdaten\Mozilla\Firefox\Profiles\pwa7702u.default\Cache\3607235Ad01 (Trojan.Agent) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\noname\lokale einstellungen\temporary internet files\Content.IE5\HY51FVMX\abb[1].txt (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\dokumente und einstellungen\noname\lokale einstellungen\temporary internet files\Content.IE5\ILKYJBYU\em[1].htm (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\WINDOWS.0\system32\5.tmp (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\WINDOWS.0\system32\8.tmp (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\WINDOWS.0\system32\A5.tmp (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\WINDOWS.0\system32\drivers\protect.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS.0\system32\2.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS.0\system32\3.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS.0\system32\4.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS.0\system32\6.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS.0\system32\7.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS.0\system32\A.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS.0\Temp\BN1.tmp (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS.0\Temp\BNB5.tmp (Trojan.Agent) -> Quarantined and deleted successfully.

Ich hoffe es ist alles richtig gepostet


Alle Zeitangaben in WEZ +1. Es ist jetzt 10:01 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131