Antivir findet Trojaner "TR/Spy.Agent.wck

sir.steffus
Gast

« am: 30.01.09, 22:40:30 »

Kann den Trojaner über Antivir nicht löschen, habe in einem anderen Forum den Tip bekommen Malwarebytes zu downloaden, hier das log:
Malwarebytes' Anti-Malware 1.33
Datenbank Version: 1709
Windows 5.1.2600 Service Pack 2

30.01.2009 21:02:43
mbam-log-2009-01-30 (21-02-15).txt

Scan-Methode: Quick-Scan
Durchsuchte Objekte: 52091
Laufzeit: 4 minute(s), 39 second(s)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 3
Infizierte Registrierungsschlüssel: 13
Infizierte Registrierungswerte: 5
Infizierte Dateiobjekte der Registrierung: 7
Infizierte Verzeichnisse: 3
Infizierte Dateien: 87

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
C:\WINDOWS\system32\zijokomo.dll (Trojan.Vundo.H) -> No action taken.
c:\WINDOWS\system32\laroriwa.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\sohibesi.dll (Trojan.Vundo.H) -> No action taken.

Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{08ef66d0-908e-4bec-89ff-41c5f06ba7fe} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{08ef66d0-908e-4bec-89ff-41c5f06ba7fe} (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{037c7b8a-151a-49e6-baed-cc05fcb50328} (Trojan.BHO) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{08ef66d0-908e-4bec-89ff-41c5f06ba7fe} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\userinit.exe (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b85b6e6c-0c8e-b251-5d6d-66d148ba5791} (Adware.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{b85b6e6c-0c8e-b251-5d6d-66d148ba5791} (Adware.BHO) -> No action taken.

Infizierte Registrierungswerte:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\teyafukosi (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpm0b66ce78 (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\rjmynsudkv (Trojan.Agent) -> No action taken.

Infizierte Dateiobjekte der Registrierung:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\laroriwa.dll -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\laroriwa.dll -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\sohibesi.dll -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\sohibesi.dll -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\sohibesi.dll -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: c:\windows\system32\userinit.exe -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: system32\userinit.exe -> No action taken.

Infizierte Verzeichnisse:
C:\Programme\Antivirus 2009 (Rogue.Antivirus 2009) -> No action taken.
C:\Dokumente und Einstellungen\sir.steffus\Anwendungsdaten\DriveCleaner Free (Rogue.DriveCleaner) -> No action taken.
C:\Dokumente und Einstellungen\sir.steffus\Anwendungsdaten\DriveCleaner Free\Logs (Rogue.DriveCleaner) -> No action taken.

Infizierte Dateien:
C:\WINDOWS\system32\bebutepo.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\opetubeb.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\doriyubi.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\ibuyirod.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\fapilizu.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\uzilipaf.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\fikomake.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\ekamokif.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\fopijunu.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\unujipof.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\giveyaha.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\ahayevig.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\gohifodi.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\idofihog.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\gokuteho.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\ohetukog.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\guromome.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\emomorug.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\hetiguta.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\atugiteh.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\hisakite.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\etikasih.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\juteruno.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\onuretuj.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\lapomefe.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\efemopal.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\mogeviga.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\agivegom.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\moharira.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\arirahom.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\rafaweti.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\itewafar.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\rewuguti.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\ituguwer.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\rurirovi.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\ivorirur.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\sikizela.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\alezikis.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\soyeviwa.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\awiveyos.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\tegavipo.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\opivaget.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\tijebevi.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\ivebejit.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\vetahadu.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\udahatev.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\vinelewe.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\eweleniv.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\wekenopo.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\oponekew.ini (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\zijokomo.dll (Trojan.Vundo.H) -> No action taken.
c:\WINDOWS\system32\laroriwa.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\lavusita.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\sohibesi.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\pubinibu.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\berateno.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\dapotado.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\dfhane.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\fikuyelu.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\jqvtns.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\sawafena.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\sazukojo.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\rigivika.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\ropofotu.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\visegobu.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\vofehafi.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\todolaze.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\kiropevu.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\sigilawo.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\lewuseze.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\napihive.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\miwajiho.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\fuwojake.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\drivers\beep.sys (Trojan.Patched) -> No action taken.
C:\Programme\Antivirus 2009\av2009.exe (Rogue.Antivirus 2009) -> No action taken.
C:\Dokumente und Einstellungen\sir.steffus\Anwendungsdaten\DriveCleaner Free\Logs\update.log (Rogue.DriveCleaner) -> No action taken.
C:\WINDOWS\system32\zbjgrfgbezn.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\3wx0bFK2.exe.a_a (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\5a1w38JH.exe.a_a (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\gopikobi.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\bubefiya.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\mazimiru.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\ruyupuno.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\leheziti.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\pugohawu.dll (Trojan.Vundo) -> No action taken.
C:\WINDOWS\system32\wuwasomo.dll (Trojan.Vundo) -> No action taken.
C:\Dokumente und Einstellungen\sir.steffus\Lokale Einstellungen\Temp\ie3.tmp (Trojan.Agent) -> No action taken.

Kann mir jemand empfehlen wie es weitergeht, bin eher eine laie in der sache

gruss

Moderator informieren

Antworten zu Antivir findet Trojaner "TR/Spy.Agent.wck:

sir.steffus
Gast

Re: Antivir findet Trojaner "TR/Spy.Agent.wck

« Antwort #1 am: 30.01.09, 22:47:24 »

hier noch das hijack log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:46:22, on 30.01.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Programme\Apoint\Apoint.exe
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programme\Sony\HotKey Utility\HKserv.exe
C:\Programme\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\WINDOWS\ATK0100\Hcontrol.exe
C:\Programme\sony\isb utility\ISBMgr.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\Fighters\spywarefighter\SpywarefighterUser.exe
C:\Programme\Apoint\Apntex.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\Sony\HotKey Utility\HKWnd.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programme\FRITZ!DSL\IGDCTRL.EXE
C:\WINDOWS\system32\cisvc.exe
C:\Programme\Fighters\configservice.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\sony\VAIO Media Integrated Server\VMISrv.exe
C:\Programme\Gemeinsame Dateien\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Programme\Canon\CAL\CALMAIN.exe
C:\Programme\Fighters\licenseservice.exe
C:\Programme\Fighters\updateservice.exe
C:\Programme\Fighters\ScannerService.exe
C:\Programme\sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
C:\Programme\Gemeinsame Dateien\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Programme\sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
C:\Programme\Gemeinsame Dateien\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\Programme\Gemeinsame Dateien\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Programme\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.club-vaio.com/de
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: addestination - {6a8fed03-dfed-736c-7457-54b571320b78} - C:\WINDOWS\system32\nse9.dll
O4 - HKLM\..\Run: [Apoint] C:\Programme\Apoint\Apoint.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HKSERV.EXE] C:\Programme\Sony\HotKey Utility\HKserv.exe
O4 - HKLM\..\Run: [Switcher.exe] C:\Programme\Sony\Wireless Switch Setting Utility\Switcher.exe
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe
O4 - HKLM\..\Run: [ISBMgr.exe] C:\Programme\sony\isb utility\ISBMgr.exe
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [spywarefighterguard] C:\Programme\Fighters\spywarefighter\SpywarefighterUser.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [teyafukosi] Rundll32.exe "C:\WINDOWS\system32\zijokomo.dll",s (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST')
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O15 - Trusted Zone: *.club-vaio.com
O15 - Trusted Zone: *.sony-europe.com
O15 - Trusted Zone: *.sonystyle-europe.com
O15 - Trusted Zone: *.vaio-link.com
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.de/SnapfishActivia.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - AppInit_DLLs: etseil.dll c:\windows\system32\rejanote.dll C:\WINDOWS\system32\zayezeru.dll ,
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Programme\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVM IGD CTRL Service - AVM Berlin - C:\Programme\FRITZ!DSL\IGDCTRL.EXE
O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Programme\Canon\CAL\CALMAIN.exe
O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - D:\Tools\i-pod\bin\iPodService.exe
O23 - Service: PTK License-FIGHTERS-18668899 - SPAMfighter - C:\Programme\Fighters\licenseservice.exe
O23 - Service: PTK Live Update-FIGHTERS-18668899 - SPAMfighter - C:\Programme\Fighters\updateservice.exe
O23 - Service: PTK Scanner-FIGHTERS-18668899 - SPAMfighter - C:\Programme\Fighters\ScannerService.exe
O23 - Service: PTK SharedAccess-FIGHTERS-18668899 - SPAMfighter - C:\Programme\Fighters\configservice.exe
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
O23 - Service: VAIO Entertainment Task Scheduler - Sony Corporation - C:\Programme\sony\vaio entertainment\VzTaskScheduler.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Programme\sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Programme\sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Programme\sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Programme\sony\VAIO Media Integrated Server\Platform\VmGateway.exe
O23 - Service: VAIO Cooporated Initialisation (VCI) - Sony Corporation - C:\Programme\Sony\VAIO Cooperated Initialisation\VCI_SVC.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe

--
End of file - 9654 bytes

Moderator informieren

Zidane
Gast

Re: Antivir findet Trojaner "TR/Spy.Agent.wck

« Antwort #2 am: 30.01.09, 23:00:02 »

hallo,

Formatieren oder falls vorhanden Image zurückspielen.
nach neuaufsetzen direkt auf SP3 updaten.

mfg Zidane

« Letzte Änderung: 30.01.09, 23:03:37 von Zidane »

Moderator informieren

« Virus nicht desinfizierbar! bitte hilfe!		Neuer Virus?? Fake oder nicht ???? »

Antivir findet Trojaner "TR/Spy.Agent.wck

Antworten zu Antivir findet Trojaner "TR/Spy.Agent.wck:

Re: Antivir findet Trojaner "TR/Spy.Agent.wck

Mehr zu Antivir findet Trojaner "TR/Spy.Agent.wck