Bedrohungslevel: 
9
9
Typ: Trojans
Gemeinsame Infektion Symptome:
- Verbindet sich ins Internet ohne Zustimmung
- Zeigt Werbemeldungen an
- Gewöhnliche Systemprogramme stürzen umgehend ab
- Langsame Internetverbindung
- Systemabsturz
- Die Startseite kann nicht geändert werden
- Computer Heruntertaktung
Trojan.BankerTrojan.Banker ist ein bösartiger Trojaner, der sich auch auf Banload und Downloader.Banload bezieht. Trojan.Banker kann über die Sicherheitslücken auf Ihren Computer kommen. Falls ein PC mit Trojan.Banker infiziert ist, beginnt er die Kennwörter für Web-Banking zu übernehmen. Außerdem kann Trojan.Banker große Sicherheitslücken öffnen. Aus diesen Gründen ist es wichtig, das Löschen von Trojan.Banker auszuführen. |
|
Scanner für
Trojan.Banker
herunterladen
|
|
Wie man manuell Trojan.Banker blocken und löschen kann
Mit der Infektion verbundene Dateien löschen (Trojan.Banker):
winlogon.exe
BrwsPtnr.dll
appconf32.exe
xlr.exe
xln.cpl
xlb.cpl
userviet.exe
Nvsvc32.exe
win32.cpl
sbfiv.exe
hostne.exe
services.exe
ctfmon.exe
krn4.exe
msmsgs.exe
nl6.exe
winnt7.exe
winnt.exe
csrrs2.exe
csrrs1.exe
svchost.exe
spoolsvr32.exe
System32.exe
SerialsWorld[skbhyu].exe
spoolsv.exe
wininit.exe
mydpla.exe
Systema.exe
svhost.exe
Z48B83X1LIB.DLL
WPV501258147400.EXE
winmsne.exe
winnt2.exe
smsni.exe
sms.exe
dll.exe
svchosts.exe
winsex.exe
winnt5.exe
winnt6.exe
winnt3.exe
winnt4.exe
gbieh.dll
iexplorer2.exe
ssmss.exe
systm321.exe
sunwin32.exe
csrss.exe
fc.exe
mac.dll
msbcs.exe
nl.exe
ree1.exe
ree2.exe
WindowsUpdate.scr
iexplore.exe
Explorer.exe
AcroIEHelpe.dll
gbiesrv.exe
netfx20.exe
ntos.exe
load[1].exe
Certificado-4.1.10[1].exe
install_en[1].exe
codecpack.v.1.1.18[1].exe
orkutATupdate.exe
ExAlien.exe
BrwsPtnr.dll
appconf32.exe
xlr.exe
xln.cpl
xlb.cpl
userviet.exe
Nvsvc32.exe
win32.cpl
sbfiv.exe
hostne.exe
services.exe
ctfmon.exe
krn4.exe
msmsgs.exe
nl6.exe
winnt7.exe
winnt.exe
csrrs2.exe
csrrs1.exe
svchost.exe
spoolsvr32.exe
System32.exe
SerialsWorld[skbhyu].exe
spoolsv.exe
wininit.exe
mydpla.exe
Systema.exe
svhost.exe
Z48B83X1LIB.DLL
WPV501258147400.EXE
winmsne.exe
winnt2.exe
smsni.exe
sms.exe
dll.exe
svchosts.exe
winsex.exe
winnt5.exe
winnt6.exe
winnt3.exe
winnt4.exe
gbieh.dll
iexplorer2.exe
ssmss.exe
systm321.exe
sunwin32.exe
csrss.exe
fc.exe
mac.dll
msbcs.exe
nl.exe
ree1.exe
ree2.exe
WindowsUpdate.scr
iexplore.exe
Explorer.exe
AcroIEHelpe.dll
gbiesrv.exe
netfx20.exe
ntos.exe
load[1].exe
Certificado-4.1.10[1].exe
install_en[1].exe
codecpack.v.1.1.18[1].exe
orkutATupdate.exe
ExAlien.exe
Dynamische Link-Bibliotheken löschen (Trojan.Banker):
BrwsPtnr.dll
gbieh.dll
mac.dll
AcroIEHelpe.dll
gbieh.dll
mac.dll
AcroIEHelpe.dll
Prozesse abbrechen (Trojan.Banker):
winlogon.exe
SearchSettingsProtection.exe
appconf32.exe
xlr.exe
userviet.exe
Nvsvc32.exe
sbfiv.exe
hostne.exe
services.exe
ctfmon.exe
krn4.exe
msmsgs.exe
nl6.exe
winnt7.exe
winnt.exe
csrrs2.exe
csrrs1.exe
svchost.exe
spoolsvr32.exe
System32.exe
SerialsWorld[skbhyu].exe
spoolsv.exe
wininit.exe
mydpla.exe
Systema.exe
svhost.exe
winmsne.exe
winnt2.exe
smsni.exe
sms.exe
dll.exe
svchosts.exe
winsex.exe
winnt5.exe
winnt6.exe
winnt3.exe
winnt4.exe
iexplorer2.exe
ssmss.exe
systm321.exe
sunwin32.exe
csrss.exe
fc.exe
msbcs.exe
nl.exe
ree1.exe
ree2.exe
iexplore.exe
Explorer.exe
gbiesrv.exe
netfx20.exe
ntos.exe
load[1].exe
Certificado-4.1.10[1].exe
install_en[1].exe
codecpack.v.1.1.18[1].exe
orkutATupdate.exe
ExAlien.exe
ExAlien
SearchSettingsProtection.exe
appconf32.exe
xlr.exe
userviet.exe
Nvsvc32.exe
sbfiv.exe
hostne.exe
services.exe
ctfmon.exe
krn4.exe
msmsgs.exe
nl6.exe
winnt7.exe
winnt.exe
csrrs2.exe
csrrs1.exe
svchost.exe
spoolsvr32.exe
System32.exe
SerialsWorld[skbhyu].exe
spoolsv.exe
wininit.exe
mydpla.exe
Systema.exe
svhost.exe
winmsne.exe
winnt2.exe
smsni.exe
sms.exe
dll.exe
svchosts.exe
winsex.exe
winnt5.exe
winnt6.exe
winnt3.exe
winnt4.exe
iexplorer2.exe
ssmss.exe
systm321.exe
sunwin32.exe
csrss.exe
fc.exe
msbcs.exe
nl.exe
ree1.exe
ree2.exe
iexplore.exe
Explorer.exe
gbiesrv.exe
netfx20.exe
ntos.exe
load[1].exe
Certificado-4.1.10[1].exe
install_en[1].exe
codecpack.v.1.1.18[1].exe
orkutATupdate.exe
ExAlien.exe
ExAlien
Registry-Schlüssel entfernen (Trojan.Banker):
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\CURRENTVERSION\WINLOGON\USERINIT\ userinit
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{B42BF63C-5354-4c5c-A789-66EFEEC5E1B0}
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1260323839
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 2krn
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 3krn
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Avast ! Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ csrss
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ ddos
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ drivevideo
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ gbiesrv
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ GlobalFlagimglog2
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ hostne
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Internet Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Javs
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ krn
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ krn99
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Messenger
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Microsoft security control
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Modulo_Ad_Autorizador
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ msav
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ msbcs
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MSMSGS
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ netfx20
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ PreInstall
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ sbfiv
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SerialsWorld
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Service Pack 3
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ smsnisys
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ svchosts
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ svchosts.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ System More Service
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ System Update
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ System32
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Systm32
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Technology NT
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winkey
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winmsne
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt2
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt3
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt4
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt5
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt6
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt7
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winsex
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ WinSystem
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ wservices
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ xlb
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ xln
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ xlr
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{33161E98-0A6C-4d3c-BD62-3A7D56137F52}
Microsoft\Windows\CurrentVersion\Run\Imparck[1].exe
RUNNING PROGRAM\Explorer.exe
RUNNING PROGRAM\WindowsUpdate.scr
RUNNING PROGRAM\winnt6.exe
{33161E98-0A6C-4d3c-BD62-3A7D56137F52}
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{B42BF63C-5354-4c5c-A789-66EFEEC5E1B0}
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 1260323839
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 2krn
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ 3krn
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Avast ! Antivirus
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ csrss
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ ddos
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ drivevideo
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ gbiesrv
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ GlobalFlagimglog2
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ hostne
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Internet Explorer
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Javs
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ krn
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ krn99
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Messenger
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Microsoft security control
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Modulo_Ad_Autorizador
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ msav
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ msbcs
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ MSMSGS
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ netfx20
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ PreInstall
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ sbfiv
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SerialsWorld
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Service Pack 3
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ smsnisys
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ svchosts
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ svchosts.exe
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ System More Service
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ System Update
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ System32
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Systm32
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ Technology NT
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winkey
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winmsne
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt2
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt3
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt4
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt5
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt6
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winnt7
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ winsex
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ WinSystem
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ wservices
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ xlb
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ xln
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ xlr
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{33161E98-0A6C-4d3c-BD62-3A7D56137F52}
Microsoft\Windows\CurrentVersion\Run\Imparck[1].exe
RUNNING PROGRAM\Explorer.exe
RUNNING PROGRAM\WindowsUpdate.scr
RUNNING PROGRAM\winnt6.exe
{33161E98-0A6C-4d3c-BD62-3A7D56137F52}
Kommentar absenden — WIR BRAUCHEN IHRE MEINUNG!