Und das ist der Rest von den Treffern:

File C:\Programme\Common files\SearchUpgrader\SearchUpgrader.exe infected by "TrojanDownloader.Win32.Keenval.g" Virus. Action Taken: No Action Taken.
File C:\Programme\MyTotalSearch\bar\2.bin\MTSBAR.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyTotalSearch\bar\2.bin\MTSOEMON.EXE infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\6.bin\F3REPROX.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\6.bin\MWSOEMON.EXE infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\6.bin\MWSOEPLG.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\F3PSSAVR.SCR infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\F3REPROX.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\F3REPROX.DLL_tobedeleted infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\F3REPROX.DLL_tobedeleted_tobedeleted infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\F3RESTUB.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\F3SCHMON.EXE infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\F3SCRCTR.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\F3WPHOOK.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\M3OUTLCN.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\M3SKIN.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\MWSBAR.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\MWSBAR.DLL_tobedeleted infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\MWSBAR.DLL_tobedeleted_tobedeleted infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\MWSOEMON.EXE infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\MWSOEMON.EXE_tobedeleted infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\MWSOEMON.EXE_tobedeleted_tobedeleted infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\MWSOEPLG.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\MWSOESTB.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\bar\7.bin\MWSOESTB.DLL_tobedeleted infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\SrchAstt\6.bin\MWSSRCAS.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\MyWebSearch\SrchAstt\7.bin\MWSSRCAS.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\04394C06 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\0617727B infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\07ED0296 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\0C8540FB infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\0D1E29F0 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\0D344FD7 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\192461F7 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\1B644957 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\1B7E193A infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\1CC66149 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\1CFF1FA3 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\1D627D2D infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\1D7C4D10 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\258C7BBD infected by "Trojan-Downloader.Win32.Swizzor.cg" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\27723AAA infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\29C82286 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\2CE3368A infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\54E43B55 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\6DD45A33 infected by "I-Worm.Sober.i" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\f3PSSavr.scr infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Temp\Altnet\adm.exe infected by "not-a-virus:AdWare.Altnet.a" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Temp\Altnet\adm25.dll infected by "not-a-virus:AdWare.Altnet.a" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Temp\Altnet\adm4.dll infected by "not-a-virus:AdWare.Altnet.a" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Temp\Altnet\admprog.dll infected by "not-a-virus:AdWare.Altnet.a" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Temp\Altnet\mysearch.cab infected by "not-a-virus:AdWare.ToolBar.MyWay.g" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Temp\Altnet\pmfiles.cab infected by "not-a-virus:AdWare.BrilliantDigital.1007" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Temp\Altnet\Setup.exe infected by "not-a-virus:AdWare.Altnet.b" Virus. Action Taken: No Action Taken.
File D:\Benutzer\Claudio\meine empfangenen dateien\Nur mit der Ruhe.exe infected by "not-virus:Hoax.Win32.ComputerSchock" Virus. Action Taken: No Action Taken.
File D:\Benutzer\Claudio\min pc alt\Quarantine\subseven sub7 trojaner 2-2.exe infected by "Backdoor.SubSeven.22.a" Virus. Action Taken: No Action Taken.
File D:\Benutzer\Claudio\Setup(2-lke-0-0-,CH).exe infected by "not-a-virus:AdWare.PornWare.Dialer.AGBDial" Virus. Action Taken: No Action Taken.
File D:\Benutzer\Claudio\SmileyCentralPFSetup2.0.3.3-2.exe infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken.
File D:\Program Files\Altnet\Download Manager\asmps.dll infected by "not-a-virus:AdWare.Altnet.b" Virus. Action Taken: No Action Taken.
File D:\Von HD-Alt\Profile\Sandro\Anwendungsdateien\Flap style eggs\cizdxnyg.exe infected by "TrojanDownloader.Win32.Swizzor.bz" Virus. Action Taken: No Action Taken.
File D:\Von HD-Alt\Profile\Sandro\Anwendungsdateien\Flap style eggs\CopyOkay4Type.exe infected by "Trojan-Downloader.Win32.Swizzor.cc" Virus. Action Taken: No Action Taken.
File D:\Von HD-Alt\Profile\Sandro\Anwendungsdateien\Flap style eggs\cxnqcpse.exe infected by "TrojanDownloader.Win32.Swizzor.bz" Virus. Action Taken: No Action Taken.
File D:\Von HD-Alt\Profile\Sandro\Anwendungsdateien\Flap style eggs\kdzhavau.exe infected by "TrojanDownloader.Win32.Swizzor.bz" Virus. Action Taken: No Action Taken.
File D:\Von HD-Alt\Profile\Sandro\Anwendungsdateien\Flap style eggs\Poll Glue Media.exe infected by "TrojanDownloader.Win32.Swizzor.cb" Virus. Action Taken: No Action Taken.
File D:\Von HD-Alt\Profile\Sandro\Anwendungsdateien\Flap style eggs\shyysuri.exe infected by "TrojanDownloader.Win32.Swizzor.bz" Virus. Action Taken: No Action Taken.
File D:\Von HD-Alt\Profile\Sandro\Anwendungsdateien\Flap style eggs\Supportviewexit.exe infected by "not-a-virus:AdWare.Lop.e" Virus. Action Taken: No Action Taken.
File D:\Von HD-Alt\Profile\Sandro\Anwendungsdateien\Flap style eggs\tvvhddjw.exe infected by "TrojanDownloader.Win32.Swizzor.bz" Virus. Action Taken: No Action Taken.
File D:\Von HD-Alt\Profile\Sandro\Anwendungsdateien\Flap style eggs\ufkhgsol.exe infected by "TrojanDownloader.Win32.Swizzor.bz" Virus. Action Taken: No Action Taken.
File D:\Von HD-Alt\Profile\Sandro\Anwendungsdateien\Flap style eggs\ywqfcnll.exe infected by "TrojanDownloader.Win32.Swizzor.bz" Virus. Action Taken: No Action Taken.

Hallo Claudio,

das zu reinigen, dürfte mühsamer werden, als wenn Du Dein System neu aufsetzt. Du hast zuviele einzelne Ordner und viel zu viel Malware auf dem System. Ich weiss nicht, was die Kollegen Dir empfehlen, sie mögen sich zu Wort melden. Ich empfehle zu formatieren ... analog Cidres Rat:

Setze das System neu auf, da dies nicht mehr vertrauenswürdig ist.
http://oschad.de/wiki/index.php/Kompromittierung
http://faq.underflow.de/#SECTION000120000000000000000

Nach dem Neuaufsetzen und vor der ersten Internet Verbindung solltest du folgende Punkte abarbeiten:

1. Eingeschränktes Benutzerkonto erstellen und zum Surfen benutzen http://freenet.meome.de/app/fn/artco...sp?catId=79426
2. Internetverbindungsfirewall aktivieren http://www.computerhilfe-euskirchen....xp/tipp16.html
3. Das System updaten und stets aktuell halten http://v5.windowsupdate.microsoft.co...r/default.aspx
4. NT-Dienste sicher konfigurieren http://www.ntsvcfg.de/ oder www.dingens.org
5. IE sicherer konfigurieren und nur noch für das Windows Update benutzen http://www.datenschutzzentrum.de/se...msie/config.htm oder http://www.blafusel.de/ie.html
6. Sichere und komfortablere Browser wie z.B. Mozilla oder Firefox verwenden http://www.mozilla.org/
7. MS Outlook und Outlook Express sicherer konfigurieren
http://www.fz-juelich.de/zam/net/sec...ok-config.html oder http://www.datenschutz-bremen.de/tip...riffe/mail.htm
Besser wäre es, sichere eMail Clients wie Thunderbird einzusetzen http://www.thunderbird-mail.de/
8. Deine Passwörter ändern
9. Image der Systempartition erstellen mit z.B. Acronis True Image 7
10. Surfverhalten überdenken

Info zur Installation von Win XP findest du hier:
http://8ung.at/chemikers-home/SETUP.html
und
http://chip-faq.rufisplanet.ch/installation.html

Für die Zukunft:
http://www.mathematik.uni-marburg.de...ompromise.html

@Shadowdance

9. Image der Systempartition erstellen mit z.B. Acronis True Image 7

sollten wir mal ändern in 8


chaosman
:aplaus:

@ chaosman

Das ist richtig,

@ SD

Leere doch mal deine PN Box!

- Beitrag editiert .. Mailbox geleert -

SD