Help need ;-( hab ich nen Hijacker ?

Makuzi · 15.01.2005, 05:02

Hallo erstmal

Also erstmal muss ich sagen das ich es geil finde das es ein Board wie dieses gibt wo einem bei solchen Dingen geholfen wird und wo sich Leute die Zeit nehmen anderen zu helfen.
Ich gehöre nämlich zu denen die den Rechner Anmachen und er muss funktionieren sonst hab ich ein Prob

Also hier mal mein Problem

bei mir ändert sich ständig die Startseite im IE. Ich hatte dort eigentlich immer about blank stehen aber nun pflanzt sich da immer ein ***http://default.home*** ein und kommt auch immer wieder.

Also habe ich hier ein bisschen gelesen und dachte der about blank Hijacker.
Dann habe ich mir dieses Tool geladen ***SpHjfix.exe*** aber das findet nichts

Der Link der sich im IE festsetzt bringt mich immer auf irgendwelche ***Search the Web*** Seiten wo schon immer im Suchfeld ***spyware removal*** eingetragen ist.

Ab und zu lässt sich auch garkeine Seite mehr aufrufen dann kommt im IE Fenster immer eine rote Viruswarnung angeblich vom IE

wer´s glaubt

. Nja dann lass ich ihn seine Seite aufrufen und dann kann ich auch wieder andere Seiten aufrufen.

Ich hoffe ihr kennt das Ding und könnt mir helfen das Ding nervt nämlich

Mfg
Makuzi

chaosman · 15.01.2005, 11:30

@Makuzi
poste doch mal ein HJT logfile
download hier
anleitung hier
chaosman

Makuzi · 15.01.2005, 13:44

Ich habe vorhin nochmal Ad-Aware geupdatet da gab es heute was neues.
Und zwar erkennt er nun den ***StartPage.lj*** Trojaner und ich bekomme nun auch ständig wieder eine Meldung das der da ist. Ich lösche den auch aber der kommt halt immer wieder. Nun die frage wie bekomme ich den restlos wech

aber hier trotzdem mal das logfile

Logfile of HijackThis v1.99.0
Scan saved at 13:40:04, on 15.01.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\0190WA~1\WARN0190.EXE
C:\Programme\ScanSoft\PaperPort\pptd40nt.exe
C:\Programme\AVPersonal\AVGNT.EXE
C:\Programme\Meaya\Popup Ad Filter\PopFilter.exe
C:\Programme\OnlineCounter 2004\OnlineCounter.exe
C:\Programme\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\SYSTEM32\GEARSEC.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\PROGRA~1\ICQ\ICQ.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\AVPersonal\AVGUARD.EXE
C:\Programme\Internet Explorer\iexplore.exe
C:\DOKUME~1\MARC-O~1\LOKALE~1\Temp\Temporäres Verzeichnis 1 für hijackthis_199.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://default.home
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://default.home
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
O2 - BHO: DOMP Class - {4C1B116F-2860-46db-8E6C-B4BFC4DFD683} - C:\WINDOWS\ietlbass32.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CSShell.BHO - {E6B64F67-B100-4636-8D51-D113E1F5FF93} - C:\Programme\ContentSaver\CSShell.dll
O3 - Toolbar: ContentSaver-Bearbeitungsleiste - {86B09C4E-4137-4863-B585-380205F1F774} - C:\Programme\ContentSaver\CSShell.dll
O3 - Toolbar: ContentSaver-Symbolleiste - {4D63CEBE-B169-426C-B092-C130C498B6E6} - C:\Programme\ContentSaver\CSShell.dll
O4 - HKLM\..\Run: [0190 Warner] C:\PROGRA~1\0190WA~1\WARN0190.EXE
O4 - HKLM\..\Run: [PaperPort PTD] C:\Programme\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Programme\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [AVGCtrl] C:\Programme\AVPersonal\AVGNT.EXE /min
O4 - HKCU\..\Run: [Popup Ad Filter] C:\Programme\Meaya\Popup Ad Filter\PopFilter.exe
O4 - Startup: OnlineCounter 2004-Autostart.lnk = C:\Programme\OnlineCounter 2004\OnlineCounter-Autostart.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Allow Popups - C:\Programme\Meaya\Popup Ad Filter\WhiteGetUrl.js
O8 - Extra context menu item: Bild mit ContentSaver &speichern - res://C:\PROGRA~1\CONTEN~1\csshell.dll/#101
O8 - Extra context menu item: Bild mit ContentSaver ein&ordnen/speichern... - res://C:\PROGRA~1\CONTEN~1\csshell.dll/#108
O8 - Extra context menu item: Link-Adresse mit ContentSaver &notieren... - res://C:\PROGRA~1\CONTEN~1\csshell.dll/#110
O8 - Extra context menu item: Markierte Link-Ziele mit ContentSaver &speichern... - res://C:\PROGRA~1\CONTEN~1\csshell.dll/#111
O8 - Extra context menu item: Markierung mit ContentSaver &speichern - res://C:\PROGRA~1\CONTEN~1\csshell.dll/#104
O8 - Extra context menu item: Markierung mit ContentSaver ein&ordnen/speichern... - res://C:\PROGRA~1\CONTEN~1\csshell.dll/#109
O8 - Extra context menu item: Seitenbereich (Frame) mit ContentSaver &speichern - res://C:\PROGRA~1\CONTEN~1\csshell.dll/#102
O8 - Extra context menu item: Seitenbereich (Frame) mit ContentSaver ein&ordnen/speichern... - res://C:\PROGRA~1\CONTEN~1\csshell.dll/#106
O8 - Extra context menu item: Ziel mit ContentSaver &speichern - res://C:\PROGRA~1\CONTEN~1\csshell.dll/#103
O8 - Extra context menu item: Ziel mit ContentSaver ein&ordnen/speichern... - res://C:\PROGRA~1\CONTEN~1\csshell.dll/#107
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: Preispiraten 2.02 - {86DE8B3B-1EB7-4386-84BD-EBE94348A913} - C:\Programme\Preispiraten 2.0b\preispiraten2.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O12 - Plugin for .mpeg: C:\Programme\Internet Explorer\PLUGINS\npqtplugin3.dll
O13 - DefaultPrefix:
O13 - WWW Prefix:
O13 - WWW. Prefix: http://ehttp.cc/?
O16 - DPF: {1C955F3B-5B32-4393-A05D-24B4970CD2A1} - http://streamp.babenet.com/cabs/videox.cab
O16 - DPF: {42F2D240-B23C-11D6-8C73-70A05DC10000} - http://www.andlotsmore.com/factory/058343de.exe
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/...eInstaller.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1095771776968
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptemp...veSecurity.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex...trol_v1-32.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/de/check/qdiagh.cab?310
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents...r/imloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4600C8D7-073F-44E2-BDA6-041CDE894C0C}: NameServer = 217.237.149.161 217.237.151.225
O23 - Service: AntiVir Service - H+BEDV Datentechnik GmbH - C:\Programme\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\SYSTEM32\GEARSEC.EXE
O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Mfg
Makuzi

Chris14 · 15.01.2005, 14:17

ok.. ja da is n hijacker und anders zeugs..
behebe das so:

1.escan
-lade dir escan runter und gehe genau nach dieser anleitung vor

2.einträge löschen
-fixe mit HijackThis diese einträge:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://default.home
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://default.home
O2 - BHO: DOMP Class - {4C1B116F-2860-46db-8E6C-B4BFC4DFD683} - C:\WINDOWS\ietlbass32.dll
O13 - DefaultPrefix:
O13 - WWW Prefix:
O13 - WWW. Prefix: http://ehttp.cc/?
O16 - DPF: {1C955F3B-5B32-4393-A05D-24B4970CD2A1} - http://streamp.babenet.com/cabs/videox.cab
O16 - DPF: {42F2D240-B23C-11D6-8C73-70A05DC10000} - http://www.andlotsmore.com/factory/058343de.exe
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe
O16 - DPF: {75D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin.SecureControl) - http://secure2.comned.com/signuptem...iveSecurity.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/content...er/imloader.cab

3.datei löschen
-lösche die datei ietlbass32.dll in c:\windows\system32
falls die dateien nicht angezeigt werden:
klicke auf extras, dann auf ordneroptionen
dann auf ansicht
mach den haken bei "systemdateien ausblenden" weg
mach einen haken bei "inhalte von systemordnern anzeigen" hin
selektiere "alle dateien und ordner anzeigen"

4.ergebnisse
-gehe wieder in den normalen modus
-öffne die datei mwav.log,klicke auf bearbeiten dann auf suchen
-gebe infected ein
-suche weiter,markiere die treffer und kopiere sie ins forum
-poste ein neues HijackThis log

Makuzi · 16.01.2005, 14:33

Also ein halber Erfolg ist schon da nach dem fixen

Also als erstes habe ich mit escan gescannt nur wusste ich nicht ob ich die einträge die er gefunden hat ausser den *no action taken* ob ich die nun von Hand aus den Dateien löschen muss

Wie gesagt das Fixen habe ich nach Anleitung gemacht war ja einfach

Die datei ietlbass32.dll in c:\windows\system32 konnte ich nicht löschen weil nicht mehr da, auch nicht nach dem umstellen der Ordneroptionen.

So hier nun die infected Ergebnisse:

File C:\WINDOWS\toolband.dll infected by "not-a-virus:AdWare.ToolBar.FastLook.a" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winini.exe infected by "Trojan-Dropper.Win32.Small.pb" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\flpycntl.exe infected by "TrojanDownloader.Win32.Crypter" Virus. Action Taken: No Action Taken.
C:\DOKUME~1\MARC-O~1\LOKALE~1\TEMPOR~1\Content.IE5\B39NJ7UA\adv475[1].htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken.
C:\DOKUME~1\MARC-O~1\LOKALE~1\TEMPOR~1\Content.IE5\SBNR2W9P\help[1].htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Marc-Oliver\Anwendungsdaten\Sun\Java\Deployment\cache\javapi\v1.0\file\BlackBox.class-3f13e3e1-530c003b.class infected by "Exploit.JS.ScriptSrc.a" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Marc-Oliver\Lokale Einstellungen\Temporary Internet Files\Content.IE5\B39NJ7UA\adv475[1].htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Marc-Oliver\Lokale Einstellungen\Temporary Internet Files\Content.IE5\SBNR2W9P\help[1].htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken.
Sat Jan 15 15:23:23 2005 => Scanning Folder: C:\Programme\AVPersonal\INFECTED\*.*
Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\058623DE[1].EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\058623DE[1].EXE.VIR tagged as not-a-virus:Porn-Dialer.Win32.PlayGames. No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\1558_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\1558_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\16631_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\16631_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\16683_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\16683_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\17182_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\17182_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\19253_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\19253_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\19264_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\19264_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\22480_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\22480_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\23601_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\23601_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\24285_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\24285_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\29082_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\29082_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\29959_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\29959_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\32420_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\32420_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\3539_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\3539_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\3722_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\3722_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\3895_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\3895_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\4008_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\4008_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\4426_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\4426_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\8631_UP.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\8631_UP.EXE.VIR infected by "Worm.Win32.Sasser.c" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\9306_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\9306_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\966_UPLOAD.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\966_UPLOAD.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\A0019024.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\A0019024.EXE.VIR infected by "TrojanDownloader.Win32.Dluca.n" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\A0019025.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\A0019025.EXE.VIR infected by "TrojanDownloader.Win32.Dluca.m" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\A0026775.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\A0026775.EXE.VIR infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\A0075818.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\A0075818.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\A0075823.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\A0075823.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\A0115184.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\A0115184.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\A0115191.EXE.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\A0115191.EXE.VIR infected by "Worm.Win32.Sasser.d" Virus. Action Taken: No Action Taken.

Makuzi · 16.01.2005, 14:37

Sat Jan 15 15:23:23 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\AR3.JAR-1BD1FC2B-6B690D30.ZIP.VIR
Sat Jan 15 15:23:23 2005 => File C:\Programme\AVPersonal\INFECTED\AR3.JAR-1BD1FC2B-6B690D30.ZIP.VIR infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\ARC.JAR-5A77690F-194770EC.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\ARC.JAR-5A77690F-194770EC.ZIP.VIR infected by "TrojanDownloader.Java.OpenConnection.a" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\ARCHIVE.JAR-61F21744-3EAAC284.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\ARCHIVE.JAR-61F21744-3EAAC284.ZIP.VIR infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\ARCHIVEN.JAR-26CC6137-1F90C94A.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\ARCHIVEN.JAR-26CC6137-1F90C94A.ZIP.VIR infected by "Trojan.Java.ClassLoader.f" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\BELT.EXE.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\BELT.EXE.VIR infected by "TrojanDownloader.Win32.Stubby.a" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\BLACKBOX.CLASS-222B5BF4-2CF427B5.CLASS.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\BLACKBOX.CLASS-222B5BF4-2CF427B5.CLASS.VIR infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\CLASSLOAD.JAR-11FAA9ED-509FAD3D.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\CLASSLOAD.JAR-11FAA9ED-509FAD3D.ZIP.VIR infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNT.CLASS-255402C1-5C196324.CLASS.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNT.CLASS-255402C1-5C196324.CLASS.VIR infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNT.CLASS-2CE3FDFE-1CE12FCC.CLASS.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNT.CLASS-2CE3FDFE-1CE12FCC.CLASS.VIR infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNT.JAR-6F603A77-1D479A9E.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNT.JAR-6F603A77-1D479A9E.ZIP.VIR infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNT.JAR-6F603A77-2CF031C8.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNT.JAR-6F603A77-2CF031C8.ZIP.VIR infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNT.JAR-713E7D0D-3CA3D2EB.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNT.JAR-713E7D0D-3CA3D2EB.ZIP.VIR infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNT.JAR-FCC94EC-5C94703A.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNT.JAR-FCC94EC-5C94703A.ZIP.VIR infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNT4.JAR-47B4436F-1A26EB96.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNT4.JAR-47B4436F-1A26EB96.ZIP.VIR infected by "Trojan.Java.ClassLoader.o" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNT4.JAR-47B4436F-2738EF20.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNT4.JAR-47B4436F-2738EF20.ZIP.VIR infected by "Trojan.Java.ClassLoader.o" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNT4.JAR-47B4436F-64A29D72.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNT4.JAR-47B4436F-64A29D72.ZIP.VIR infected by "Trojan.Java.ClassLoader.o" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNT4.JAR-52D901F2-4D20062A.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNT4.JAR-52D901F2-4D20062A.ZIP.VIR infected by "Trojan.Java.ClassLoader.o" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNT4.JAR-5DA93167-4568FA76.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNT4.JAR-5DA93167-4568FA76.ZIP.VIR infected by "Trojan.Java.ClassLoader.o" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNTER.JAR-22500802-2FA17AC7.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNTER.JAR-22500802-2FA17AC7.ZIP.VIR infected by "Trojan.Java.ClassLoader.b" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNTER.JAR-53F0E3D6-21617F72.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNTER.JAR-53F0E3D6-21617F72.ZIP.VIR infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNTER.JAR-68DC35FF-77CA12FB.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNTER.JAR-68DC35FF-77CA12FB.ZIP.VIR infected by "Trojan.Java.ClassLoader.o" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\COUNTERS.JAR-2C076771-6B936756.ZIP.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\COUNTERS.JAR-2C076771-6B936756.ZIP.VIR infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\D0R1T1S.EXE.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\D0R1T1S.EXE.VIR tagged as not-a-virus:RiskWare.Tool.PrcView.3725. No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\DESEX.EXE.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\DESEX.EXE.VIR infected by "Trojan.Win32.Dialer.e" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\DESEX01.EXE.VIR
Sat Jan 15 15:23:24 2005 => File C:\Programme\AVPersonal\INFECTED\DESEX01.EXE.VIR infected by "Trojan.Win32.Dialer.e" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:24 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\DNXFSA.EXE.VIR
Sat Jan 15 15:23:25 2005 => File C:\Programme\AVPersonal\INFECTED\DNXFSA.EXE.VIR infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:25 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\DUMMY.CLASS-634618DB-12C2437A.CLASS.VIR
Sat Jan 15 15:23:25 2005 => File C:\Programme\AVPersonal\INFECTED\DUMMY.CLASS-634618DB-12C2437A.CLASS.VIR infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:25 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\DUMMY.CLASS-774D500D-5F1D2635.CLASS.VIR
Sat Jan 15 15:23:25 2005 => File C:\Programme\AVPersonal\INFECTED\DUMMY.CLASS-774D500D-5F1D2635.CLASS.VIR infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:25 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\DUMMY.CLASS-78C57FA2-2EB3F1C3.CLASS.VIR
Sat Jan 15 15:23:25 2005 => File C:\Programme\AVPersonal\INFECTED\DUMMY.CLASS-78C57FA2-2EB3F1C3.CLASS.VIR infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:25 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\DUMMY.CLASS-78C57FA2-7A4A4C6C.CLASS.VIR
Sat Jan 15 15:23:25 2005 => File C:\Programme\AVPersonal\INFECTED\DUMMY.CLASS-78C57FA2-7A4A4C6C.CLASS.VIR infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:25 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\DUMMY.CLASS-79FBDAD7-3542BA5C.CLASS.VIR
Sat Jan 15 15:23:25 2005 => File C:\Programme\AVPersonal\INFECTED\DUMMY.CLASS-79FBDAD7-3542BA5C.CLASS.VIR infected by "Trojan.Java.Nocheat" Virus. Action Taken: No Action Taken.

Sat Jan 15 15:23:25 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\EXPLORE.EXE.VIR
Sat Jan 15 15:23:25 2005 => File C:\Programme\AVPersonal\INFECTED\EXPLORE.EXE.VIR infected by "Worm.P2P.SpyBot.gen" Virus. Action Taken: No Action Taken.

Help need ;-( hab ich nen Hijacker ?

Plagegeister aller Art und deren Bekämpfung: Help need ;-( hab ich nen Hijacker ?