Trojaner-Board - Nach einem Virus kann ich meine Festplatte nicht mehr benutzen

Das ist von Malwarebytes

Code:

 

Malwarebytes Anti-Malware (Trial) 1.60.0.1800

www.malwarebytes.org
 

Database version: v2011.12.24.05
 

Windows Vista Service Pack 1 x86 NTFS

Internet Explorer 7.0.6001.18000

tugay :: LALALA [administrator]
 

Protection: Enabled
 

30.12.2011 02:18:00

mbam-log-2011-12-30 (13-43-53).txt
 

Scan type: Full scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 366930

Time elapsed: 1 hour(s), 37 minute(s), 39 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 13

HKCR\CLSID\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} (PUP.VShareRedir) -> No action taken.

HKCR\TypeLib\{BB7256DD-EBA9-480B-8441-A00388C2BEC3} (PUP.VShareRedir) -> No action taken.

HKCR\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000} (PUP.VShareRedir) -> No action taken.

HKCR\MyNewsBarLauncher.IE5BarLauncherBHO.1 (PUP.VShareRedir) -> No action taken.

HKCR\MyNewsBarLauncher.IE5BarLauncherBHO (PUP.VShareRedir) -> No action taken.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} (PUP.VShareRedir) -> No action taken.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} (PUP.VShareRedir) -> No action taken.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} (PUP.VShareRedir) -> No action taken.

HKCR\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> No action taken.

HKCR\MyNewsBarLauncher.IE5BarLauncher.1 (PUP.VShareRedir) -> No action taken.

HKCR\MyNewsBarLauncher.IE5BarLauncher (PUP.VShareRedir) -> No action taken.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> No action taken.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> No action taken.
 

Registry Values Detected: 5

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|firefox.exe (Trojan.Dropper) -> Data: C:\Users\tugay\AppData\Roaming\Mozilla\Firefox\firefox.exe -> No action taken.

HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser|{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> Data: ;áÃzÊ;XA³0öm»Áµ -> No action taken.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> Data: VShareTB -> No action taken.

HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> Data:  -> No action taken.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} (PUP.VShareRedir) -> Data:  -> No action taken.
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 13

C:\Users\tugay\AppData\Roaming\Mozilla\Firefox\firefox.exe (Trojan.Dropper) -> No action taken.

C:\Program Files\vShare.tv plugin\BarLcher.dll (PUP.VShareRedir) -> No action taken.

C:\$RECYCLE.BIN\S-1-5-21-879891803-3053790700-4026085382-1002\$R3KYYER.exe (Adware.Agent) -> No action taken.

C:\System Volume Information\SystemRestore\FRStaging\Users\tugay\AppData\Local\Temp\ICReinstall\MusicConverterSetup.exe (Adware.Agent) -> No action taken.

C:\System Volume Information\SystemRestore\FRStaging\Users\tugay\AppData\Roaming\mahmud.exe (Spyware.Zeus) -> No action taken.

C:\System Volume Information\SystemRestore\FRStaging\Users\tugay\Downloads\MusicConverterSetup.exe (Adware.Agent) -> No action taken.

C:\Users\Gast\AppData\Roaming\mahmud.exe (Trojan.Zbot.CBCGen) -> No action taken.

C:\Users\tugay\AppData\Local\Temp\0.1852808961593828.exe (Trojan.Dropper) -> No action taken.

C:\Users\tugay\AppData\Local\Temp\ICReinstall\MusicConverterSetup.exe (Adware.Agent) -> No action taken.

C:\Users\tugay\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\4c1827cd-1cdfb187 (Trojan.Dropper) -> No action taken.

C:\Users\tugay\AppData\Roaming\mahmud.exe (Trojan.Zbot.CBCGen) -> No action taken.

C:\Users\tugay\Desktop\Spiele\Medal of Honor 2010\Binaries\loader.dll (Riskware.Tool.CK) -> No action taken.

C:\Users\tugay\Downloads\WiNlOgOn.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.
 

(end)

und das ist von ESET Online Scanner

Code:



ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=ad21fdc4689b2646b0f7f43585d0fad1

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2011-12-30 04:44:35

# local_time=2011-12-30 05:44:35 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.0.6001 NT Service Pack 1

# compatibility_mode=1792 16777215 100 0 4731215 4731215 0 0

# compatibility_mode=5892 16776573 100 100 0 162783248 0 0

# compatibility_mode=8192 67108863 100 0 3868 3868 0 0

# scanned=159048

# found=37

# cleaned=0

# scan_time=12955

C:\$RECYCLE.BIN\S-1-5-21-879891803-3053790700-4026085382-1002\$RJJYYCS.exe        Win32/Adware.ADON application (unable to clean)        00000000000000000000000000000000        I

C:\Program Files\Uniblue\RegistryBooster\Launcher.exe        Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe        Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Program Files\Uniblue\RegistryBooster\rbnotifier.exe        Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Program Files\Uniblue\RegistryBooster\rb_move_serial.exe        Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Program Files\Uniblue\RegistryBooster\rb_ubm.exe        Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Program Files\Uniblue\RegistryBooster\registrybooster.exe        Win32/RegistryBooster application (unable to clean)        00000000000000000000000000000000        I

C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L1YKFZ7D\main[1]        Win32/LockScreen.AHO trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LOS29DKF\main[1]        Win32/LockScreen.AHO trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\Gast\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\3f31b9ec-5a9c9b06        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Users\Imparator\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\17c6b134-65e527ac        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Users\Imparator\Desktop\UndergroundMt2\Liederhttpwww.youtube.comuserFuntLi1#pu133eV4jnZpvE\Microsoft.Office.2010.Professional.Plus.GERMAN.WOR\wlx-office2010.iso        Win32/HackKMS.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\Imparator\Downloads\Facemoods.exe        a variant of Win32/SweetIM.B application (unable to clean)        00000000000000000000000000000000        I

C:\Users\Imparator\Downloads\SoftonicDownloader_fuer_jdownloader.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\Imparator\Downloads\SoftonicDownloader_fuer_marxio-timer.exe        a variant of Win32/SoftonicDownloader.A application (unable to clean)        00000000000000000000000000000000        I

C:\Users\tugay\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\3c3882e2-794e8150        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Users\tugay\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\12595e4-1ac52469        a variant of Java/Exploit.CVE-2011-3544.G trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\tugay\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\660125e6-79ee2de3        a variant of Java/TrojanDownloader.OpenConnection.AQ trojan (unable to clean)        00000000000000000000000000000000        I

C:\Users\tugay\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\5aecbbc4-69ce070d        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Users\tugay\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\113eb22f-11733057        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Users\tugay\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\5bb93e46-1e3f0a94        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Users\tugay\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\1bf362be-7f09ed82        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Users\tugay\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\e1adb89-6db4526a        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Windows\$NtUninstallKB62735$\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\d79c319-62aa1d0d        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Windows\$NtUninstallKB62735$\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\1f66b49d-5e62a302        Java/TrojanDownloader.OpenStream.NCO trojan (unable to clean)        00000000000000000000000000000000        I

C:\Windows\$NtUninstallKB62735$\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\4dd297ad-4a02f335        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Windows\$NtUninstallKB62735$\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\516733ed-75631d4d        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Windows\$NtUninstallKB62735$\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\2546a005-1682bc20        Java/TrojanDownloader.OpenStream.NCO trojan (unable to clean)        00000000000000000000000000000000        I

C:\Windows\$NtUninstallKB62735$\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\4ed4ffba-3ea9c095        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Windows\$NtUninstallKB62735$\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\45ecd888-50a9b366        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\d79c319-62aa1d0d        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\1f66b49d-5e62a302        Java/TrojanDownloader.OpenStream.NCO trojan (unable to clean)        00000000000000000000000000000000        I

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\4dd297ad-4a02f335        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\516733ed-75631d4d        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\2546a005-1682bc20        Java/TrojanDownloader.OpenStream.NCO trojan (unable to clean)        00000000000000000000000000000000        I

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\4ed4ffba-3ea9c095        multiple threats (unable to clean)        00000000000000000000000000000000        I

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\45ecd888-50a9b366        multiple threats (unable to clean)        00000000000000000000000000000000        I

und ich wollte noch fragen was ich mit Quarantine machen soll?
Soll ich die löschen?