Skype Infektion

[Klingerdennis]

hallo ich habe leichtsinnig auf nen link geklickt welcher mir ueber skype von einem mir bekannten kontakt gesendet wurde dieser wurde aber wohl automatisch ueber eine malware gesendet weshalb ich eventuell jetzt verseut wurde nach dem klick auf den link wurde ein zip runtergeladen welchen ich aber natuerlich nicht geoeffnet habe
hier mein dds log ich bitte um anweisungen was jetzt zu tun ist

Spoiler

DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by User at 17:06:03 on 2012-10-07
Microsoft Windows 7 Home Premium 6.1.7601.1.932.81.1041.18.8159.6433 [GMT 9:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
C:\Windows\system32\IProsetMonitor.exe
C:\Program Files (x86)\Logitec\Common\RaRegistry.exe
C:\Program Files (x86)\Logitec\Common\RaRegistry64.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
C:\Program Files (x86)\StartNow Toolbar\ToolbarUpdaterService.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\WUDFHost.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\rundll32.exe
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Logitec\Common\RaUI.exe
C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Windows\system32\SearchIndexer.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files (x86)\Naver\LINE\Line.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\conhost.exe
C:\Windows\SysWOW64\cscript.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://klit.startnow.com/?src=startpage&provider=&provider_name=yahoo&provider_code=&partner_id=693&product_id=741&affiliate_id=&channel=&toolbar_id=200&toolbar_version=2.4.0&install_country=JP&install_date=20120916&user_guid=79ED689D032F486EAD69E20DB0D9F302&machine_id=d94becd7d1e3fde5ef54ddb80a72c100&browser=IE&os=win&os_version=6.1-x64-SP1
mWinlogon: Userinit=userinit.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
BHO: StartNow Toolbar Helper: {6e13d095-45c3-4271-9475-f3b48227dd9f} - C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll
BHO: CIESpeechBHO Class: {8d10f6c4-0e01-4bd4-8601-11ac1fdf8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
TB: StartNow Toolbar: {5911488e-9d1e-40ec-8cbb-06b231cc153f} - C:\Program Files (x86)\StartNow Toolbar\Toolbar32.dll
uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
uRun: [Google Update] "C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe" /c
uRun: [BitTorrent] "C:\Program Files (x86)\BitTorrent\BitTorrent.exe" /MINIMIZED
uRun: [GoogleChromeAutoLaunch_BCEA24321E5E4F1401136BBEDFB545FE] "C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe" --no-startup-window
mRun: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
StartupFolder: C:\Users\User\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\User\AppData\Roaming\Dropbox\bin\Dropbox.exe
StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\クライ~1.LNK - C:\Program Files (x86)\Logitec\Common\RaUI.exe
mPolicies-explorer: NoActiveDesktop = 1 (0x1)
mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Free YouTube Download - C:\Users\User\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - C:\Users\User\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: {7815BE26-237D-41A8-A98F-F7BD75F71086} - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{9009D365-4222-41D5-AEFD-059E50E93FEA} : DhcpNameServer = 192.168.1.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
{18DF081C-E8AD-4283-A596-FA578C2EBDC3}
{6E13D095-45C3-4271-9475-F3B48227DD9F}
{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}
{5911488E-9D1E-40ec-8CBB-06B231CC153F}
mRun-x64: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
============= SERVICES / DRIVERS ===============
.
R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-7-28 63960]
R2 AtherosSvc;AtherosSvc;C:\Program Files (x86)\Bluetooth Suite\AdminService.exe [2011-3-13 74912]
R2 IntelR PROSet Monitoring Service;IntelR PROSet Monitoring Service;C:\Windows\system32\IProsetMonitor.exe --> C:\Windows\system32\IProsetMonitor.exe [?]
R2 nvUpdatusService;NVIDIA Update Service Daemon;C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-7-21 1262400]
R2 RalinkRegistryWriter;Ralink Registry Writer;C:\Program Files (x86)\Logitec\Common\RaRegistry.exe [2012-7-21 185632]
R2 RalinkRegistryWriter64;Ralink Registry Writer 64;C:\Program Files (x86)\Logitec\Common\RaRegistry64.exe [2012-7-21 212256]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-5-15 382272]
R2 TeamViewer7;TeamViewer 7;C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-7-22 2673064]
R2 UNS;Intel(R) Management and Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-7-20 2656280]
R2 Updater Service for StartNow Toolbar;Updater Service for StartNow Toolbar;C:\Program Files (x86)\StartNow Toolbar\ToolbarUpdaterService.exe [2012-6-22 265952]
R3 asmthub3;ASMedia USB3 Hub Service;C:\Windows\system32\DRIVERS\asmthub3.sys --> C:\Windows\system32\DRIVERS\asmthub3.sys [?]
R3 asmtxhci;ASMEDIA XHCI Service;C:\Windows\system32\DRIVERS\asmtxhci.sys --> C:\Windows\system32\DRIVERS\asmtxhci.sys [?]
R3 AthBTPort;Atheros Virtual Bluetooth Class;C:\Windows\system32\DRIVERS\btath_flt.sys --> C:\Windows\system32\DRIVERS\btath_flt.sys [?]
R3 BazisVirtualCDBus;WinCDEmu Virtual Bus Driver;C:\Windows\system32\DRIVERS\BazisVirtualCDBus.sys --> C:\Windows\system32\DRIVERS\BazisVirtualCDBus.sys [?]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver;C:\Windows\system32\drivers\btath_a2dp.sys --> C:\Windows\system32\drivers\btath_a2dp.sys [?]
R3 BTATH_BUS;Atheros Bluetooth Bus;C:\Windows\system32\DRIVERS\btath_bus.sys --> C:\Windows\system32\DRIVERS\btath_bus.sys [?]
R3 BTATH_HCRP;Bluetooth HCRP Server driver;C:\Windows\system32\DRIVERS\btath_hcrp.sys --> C:\Windows\system32\DRIVERS\btath_hcrp.sys [?]
R3 BTATH_LWFLT;Bluetooth LWFLT Device;C:\Windows\system32\DRIVERS\btath_lwflt.sys --> C:\Windows\system32\DRIVERS\btath_lwflt.sys [?]
R3 BTATH_RCP;Bluetooth AVRCP Device;C:\Windows\system32\DRIVERS\btath_rcp.sys --> C:\Windows\system32\DRIVERS\btath_rcp.sys [?]
R3 BtFilter;BtFilter;C:\Windows\system32\DRIVERS\btfilter.sys --> C:\Windows\system32\DRIVERS\btfilter.sys [?]
R3 e1cexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver C;C:\Windows\system32\DRIVERS\e1c62x64.sys --> C:\Windows\system32\DRIVERS\e1c62x64.sys [?]
R3 MEIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?]
R3 netr28ux;RT2870 USB Wireless LAN Card Driver for Vista;C:\Windows\system32\DRIVERS\netr28ux.sys --> C:\Windows\system32\DRIVERS\netr28ux.sys [?]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;C:\Windows\system32\drivers\nvhda64v.sys --> C:\Windows\system32\drivers\nvhda64v.sys [?]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-7-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-7-20 250568]
S3 ATHDFU;Atheros Valkyrie USB BootROM;C:\Windows\system32\Drivers\AthDfu.sys --> C:\Windows\system32\Drivers\AthDfu.sys [?]
S3 Futuremark SystemInfo Service;Futuremark SystemInfo Service;C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe [2012-7-20 130976]
S3 IntcDAud;インテル(R) ディスプレイ用オーディオ;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\system32\drivers\TsUsbGD.sys --> C:\Windows\system32\drivers\TsUsbGD.sys [?]
.
=============== Created Last 30 ================
.
2012-10-06 12:56:34 -------- d-----w- C:\Users\User\AppData\Roaming\Malwarebytes
2012-10-06 12:56:28 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys
2012-10-06 12:56:28 -------- d-----w- C:\ProgramData\Malwarebytes
2012-10-06 12:56:28 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-10-06 11:45:50 376688 ----a-w- C:\Windows\System32\drivers\netio.sys
2012-10-06 11:45:50 288624 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS
2012-10-06 11:45:50 1913200 ----a-w- C:\Windows\System32\drivers\tcpip.sys
2012-09-25 08:15:28 679936 ----a-w- C:\Windows\System32\naive_screensaver03.scr
2012-09-25 08:15:28 679936 ------w- C:\Windows\SysWow64\naive_screensaver03.scr
2012-09-25 08:15:28 -------- d-----w- C:\ProgramData\Screentime
2012-09-25 08:13:31 -------- d-----w- C:\Users\User\AppData\Local\Screentime
2012-09-16 20:59:05 -------- d-----w- C:\Users\User\AppData\Roaming\StartNow Toolbar
2012-09-16 12:45:28 -------- d-----w- C:\Program Files (x86)\Haali
2012-09-16 10:40:21 -------- d-----w- C:\Program Files (x86)\StartNow Toolbar
2012-09-16 10:40:02 650752 ----a-w- C:\Windows\SysWow64\xvidcore.dll
2012-09-16 10:40:02 243200 ----a-w- C:\Windows\SysWow64\xvidvfw.dll
2012-09-16 10:40:02 216064 ----a-w- C:\Windows\SysWow64\lagarith.dll
2012-09-16 10:40:02 178688 ----a-w- C:\Windows\SysWow64\unrar.dll
2012-09-16 10:40:02 151552 ----a-w- C:\Windows\SysWow64\ac3acm.acm
2012-09-16 10:40:01 112640 ----a-w- C:\Windows\SysWow64\ff_vfw.dll
2012-09-16 10:40:00 -------- d-----w- C:\Program Files (x86)\K-Lite Codec Pack
2012-09-16 09:42:08 -------- d-----w- C:\Users\User\AppData\Roaming\kSub
2012-09-16 09:42:02 -------- d-----w- C:\Program Files (x86)\kSub
2012-09-15 14:04:46 -------- d-----w- C:\Users\User\AppData\Local\TeamSpeak 3 Client
2012-09-09 14:10:47 108008 ----a-w- C:\Windows\System32\WindowsAccessBridge-64.dll
2012-09-09 14:09:34 916456 ----a-w- C:\Windows\System32\deployJava1.dll
2012-09-09 14:09:34 1034216 ----a-w- C:\Windows\System32\npDeployJava1.dll
2012-09-08 13:06:08 -------- d-----w- C:\Users\User\AppData\Local\Line
2012-09-08 13:01:02 -------- d-----w- C:\Program Files (x86)\Naver
2012-09-07 15:22:02 -------- d-----w- C:\Users\User\AppData\Roaming\.minecraft
2012-09-07 15:20:41 821736 ----a-w- C:\Windows\SysWow64\npDeployJava1.dll
2012-09-07 15:20:41 746984 ----a-w- C:\Windows\SysWow64\deployJava1.dll
.
==================== Find3M ====================
.
2012-08-24 10:31:32 2312704 ----a-w- C:\Windows\System32\jscript9.dll
2012-08-24 10:21:18 1392128 ----a-w- C:\Windows\System32\wininet.dll
2012-08-24 10:20:11 1494528 ----a-w- C:\Windows\System32\inetcpl.cpl
2012-08-24 10:14:45 173056 ----a-w- C:\Windows\System32\ieUnatt.exe
2012-08-24 10:13:29 599040 ----a-w- C:\Windows\System32\vbscript.dll
2012-08-24 10:09:42 2382848 ----a-w- C:\Windows\System32\mshtml.tlb
2012-08-24 06:59:17 1800704 ----a-w- C:\Windows\SysWow64\jscript9.dll
2012-08-24 06:58:36 405152 ----a-w- C:\Windows\SysWow64\Newtonsoft.Json.Net20.dll
2012-08-24 06:51:27 1129472 ----a-w- C:\Windows\SysWow64\wininet.dll
2012-08-24 06:51:02 1427968 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2012-08-24 06:47:26 142848 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2012-08-24 06:47:12 420864 ----a-w- C:\Windows\SysWow64\vbscript.dll
2012-08-24 06:43:58 2382848 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2012-08-23 15:10:14 73416 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2012-08-23 15:10:14 696520 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
2012-08-20 08:23:52 224088 ----a-w- C:\Windows\System32\drivers\VBoxDrv.sys
2012-08-20 08:23:52 166232 ----a-w- C:\Windows\System32\drivers\VBoxNetFlt.sys
2012-08-20 08:23:52 147288 ----a-w- C:\Windows\System32\drivers\VBoxNetAdp.sys
2012-08-20 08:23:52 130904 ----a-w- C:\Windows\System32\drivers\VBoxUSBMon.sys
2012-08-20 08:23:50 320856 ----a-w- C:\Windows\System32\VBoxNetFltNobj.dll
2012-07-18 18:15:06 3148800 ----a-w- C:\Windows\System32\win32k.sys
.
============= FINISH: 17:06:13.31 ===============

Spoiler

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume1
Install Date: 2012/07/20 16:57:48
System Uptime: 2012/10/07 12:46:35 (5 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | P8Z68-V
Processor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz | LGA1155 | 3301/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 119 GiB total, 60.95 GiB free.
D: is CDROM ()
E: is FIXED (NTFS) - 932 GiB total, 792.418 GiB free.
F: is FIXED (NTFS) - 932 GiB total, 495.608 GiB free.
G: is Removable
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP36: 2012/09/09 19:00:15 - Windows バックアップ
RP37: 2012/09/09 23:09:22 - Installed Java 7 Update 7 (64-bit)
RP38: 2012/09/09 23:09:51 - Removed Java 7 Update 7
RP39: 2012/09/09 23:10:03 - Removed Java 7 Update 7 (64-bit)
RP40: 2012/09/09 23:10:41 - Installed Java 7 Update 7 (64-bit)
RP41: 2012/09/16 19:00:12 - Windows バックアップ
RP42: 2012/09/23 19:00:17 - Windows バックアップ
RP43: 2012/10/01 6:02:58 - Windows バックアップ
RP44: 2012/10/06 20:46:02 - Windows Update
.
==== Installed Programs ======================
.
Adobe Flash Player 11 ActiveX
Adobe Reader X (10.1.4) - Japanese
Adobe Shockwave Player 11.6
Anno 2070
Asmedia ASM104x USB 3.0 Host Controller Driver
BitTorrent
Dropbox
FileZilla Client 3.5.3
Free Studio version 5.7.2.825
Free YouTube Download version 3.1.37.918
Futuremark SystemInfo
Google Chrome
Haali Media Splitter
Intel(R) Control Center
Intel(R) Management Engine Components
Intel(R) Processor Graphics
JMicron JMB36X Driver
K-Lite Mega Codec Pack 9.2.0
kSub 2.2.3.0
LINE
Logitecクライアントユーティリティ
Malwarebytes Anti-Malware バージョン 1.65.0.1400
Metro 2033
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
naive_screensaver03
NVIDIA PhysX
NVIDIA Stereoscopic 3D Driver
Realtek High Definition Audio Driver
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Skype(TM) 5.10
StartNow Toolbar
Steam
swMSM
TeamSpeak 3 Client
TeamViewer 7
Ubisoft Game Launcher
VLC media player 2.0.3
WinCDEmu
.
==== End Of File ===========================

die infektion fand wohl gestern nach 21:33 statt

 

[moby_jones]

Alle wichtigen Daten sichern und Windows neu installieren.
Ist wohl die einfachste und sauberste Variante.

 

[Klingerdennis]

ich hab auchn back up aber das waer recht unnoetig wenn gar keine infektion vorhanden ist was ja nicht geklaert ist

 

[Pitam]

http://www.trojaner-board.de/51187-anleitung-malwarebytes-anti-malware.html


Geh mal nach diesem Tutorial vor und poste dann das Ergebnis.
Es kann möglich sein, das dein System noch sauber ist da du die die Zip ja nicht gestartet hast. Genaueres zeigt der Scan.

Zusätzlich kann ein Scan mit Spybot Search & Destroy weiterhelfen.

Sollten die Progs irgendwas ungewöhnliches finden (also mehr als zweifelhafte cookies), schauen wir weiter ;-)

 

[moby_jones]

Sendest du diese Nachricht weiter?
Ist doch dieser berühmte Foto-Link, oder?

 

[Klingerdennis]

danke fuer die hilfe

nachricht

[2012/10/06 21:33:25] \_\/[ /-\: moin , kaum zu glauben was für schöne fotos von dir auf deinem profil link******

hier

es wurde nichts gefunden

 

[Pitam]

hab ein Tutorial gefunden wie der Wurm entfernt werden kann:

http://www.youtube.com/watch?v=2UiU0WESg-Q&feature=g-u-u

Ist auch recht gut erklärt ;-)