|
Log-Analyse und Auswertung: HijackauswertungWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
31.01.2005, 15:43 | #1 |
| Hijackauswertung Bitte um Hijack Auswertung Logfile of HijackThis v1.99.0 Scan saved at 15:39:51, on 31.01.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Programme\Java\j2re1.4.2_04\bin\jusched.exe C:\Programme\CyberLink DVD Solution\PowerDVD\PDVDServ.exe C:\WINDOWS\system32\sstray.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe C:\Programme\Archive\archive.exe C:\WINDOWS\qfxvbhlb.exe C:\Programme\ISTsvc\istsvc.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe C:\Programme\Norton Internet Security\Norton AntiVirus\navapsvc.exe C:\WINDOWS\system32\netdde.exe C:\Programme\MA311 PCI Adapter Configuration Utility\wlanutil.exe C:\Programme\Norton Internet Security\Norton AntiVirus\SAVScan.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Internet Explorer\iexplore.exe D:\Downloads\Hijack\hijackthis\HijackThis.exe C:\Programme\Messenger\msmsgs.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.utanet.at R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.utanet.at R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ebay.at R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ebay.at O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programme\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programme\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx O4 - HKLM\..\Run: [Corel Graphics Suite 1117] C:\Programme\Corel\Corel Graphics 11\Register\registration.exe /title="Corel Graphics Suite 11" /date=021205 serial=DR11CRD-0012082-DGW O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Programme\Norton Internet Security\UrlLstCk.exe O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_04\bin\jusched.exe O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Programme\Alcatel\Dragdiag.exe" /icon O4 - HKLM\..\Run: [RemoteControl] "C:\Programme\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r O4 - HKLM\..\Run: [ccApp] C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe O4 - HKLM\..\Run: [Archive] C:\Programme\Archive\archive.exe O4 - HKLM\..\Run: [kHeOCGXb5] C:\WINDOWS\qfxvbhlb.exe O4 - HKLM\..\Run: [IST Service] C:\Programme\ISTsvc\istsvc.exe O4 - HKLM\..\Run: [- ] C:\WINDOWS\qfxvbhlb.exe O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit O4 - Global Startup: Configuration Utility.lnk = C:\Programme\MA311 PCI Adapter Configuration Utility\wlanutil.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_04\bin\npjpi142_04.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_04\bin\npjpi142_04.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Programme\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ubisoft.com/dev/packages/GSManager.cab O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F98} (CR64Loader Object) - http://www.miniclip.com/platypus/miniclipGameLoader.dll O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/EPUWALControl_v1-0-3-17.cab O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/20040428/qtinstall.info.apple.com/saba/de/win/QuickTimeInstaller.exe O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{7730D399-B9B2-4F28-B378-0BAACC7C6E39}: NameServer = 195.96.0.4,195.70.224.45 O23 - Service: Ati HotKey Poller - Unknown - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Network Proxy - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe O23 - Service: Symantec Password Validation - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe O23 - Service: Norton AntiVirus Auto-Protect-Dienst - Symantec Corporation - C:\Programme\Norton Internet Security\Norton AntiVirus\navapsvc.exe O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: SAVScan - Symantec Corporation - C:\Programme\Norton Internet Security\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe |
31.01.2005, 17:42 | #2 |
| Hijackauswertung Hallo,
__________________mach bitte einen escan im abgesicherten Modus geh dazu nach Anelitung vor: http://www.trojaner-board.de/42731-escan-anleitung.html Download von escan: http://www.mwti.net/antivirus/free_utilities.asp Teile uns dann das Ergebnis des eScan mit: welche Viren wurden auf Deinem Rechner gefunden: "öffne die mwav.log -> Bearbeiten -> Suchen -> infected eingeben -> Weitersuchen -> Treffer markieren/kopieren und ins Forum übertragen." (Zitat Cidre) Gruss |
02.02.2005, 10:09 | #3 |
| Hijackauswertung eScan hat zahlreiche Einträge gefunden.Wie kann ich die Plagegeister entfernen.
__________________NAV 2004 findet beim Scan keine Viren. Danke roja54 File C:\Programme\Archive\archive.exe infected by "Trojan-Downloader.Win32.Small.agn" Virus. Action Taken: No Action Taken. File C:\Programme\ISTsvc\istsvc.exe infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. File C:\Programme\ISTsvc\istsvc.exe infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\3BHK6X.exe infected by "Trojan-Downloader.Win32.IstBar.gn" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\pony41.exe infected by "Trojan-Downloader.Win32.Small.agn" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\temp.fr5D11\istsvc.exe infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~13.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~15.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~17.exe File C:\DOKUME~1\user\LOKALE~1\Temp\~17.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~19.exe File C:\DOKUME~1\user\LOKALE~1\Temp\~19.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~25.exe File C:\DOKUME~1\user\LOKALE~1\Temp\~25.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~8.exe File C:\DOKUME~1\user\LOKALE~1\Temp\~8.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~A.exe File C:\DOKUME~1\user\LOKALE~1\Temp\~A.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~C0.exe File C:\DOKUME~1\user\LOKALE~1\Temp\~C0.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~C5.exe File C:\DOKUME~1\user\LOKALE~1\Temp\~C5.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~CA.exe File C:\DOKUME~1\user\LOKALE~1\Temp\~CA.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~CE.exe File C:\DOKUME~1\user\LOKALE~1\Temp\~CE.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~D.exe File C:\DOKUME~1\user\LOKALE~1\Temp\~D.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~D4.exe File C:\DOKUME~1\user\LOKALE~1\Temp\~D4.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~E4.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\Temp\~F.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\89ABCDEF\38de12476f0e691cf127f74c103038c1[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\G1K3CN4R\protect[1].htm infected by "Trojan-Downloader.JS.IstBar.d" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\ITGJUH65\818b23d18ff0527ee22e4452e5f2804c[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\OPAJGXEJ\a570a077[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\URQBQ5A7\3fd2e9aa97ea23e8e3d06873ede6e03d[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\W56N0963\istsvc[1].exe infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. File C:\Programme\Archive\archive.exe infected by "Trojan-Downloader.Win32.Small.agn" Virus. Action Taken: No Action Taken. File C:\WINDOWS\qfxvbhlb.exe infected by "Trojan-Downloader.Win32.IstBar.go" Virus. Action Taken File C:\Programme\ISTsvc\istsvc.exe infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Anwendungsdaten\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-6b9fccb8-364995e5.class infected by "Trojan.Java.ClassLoader.Dummy.d" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Anwendungsdaten\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-3cc46f89-21f7bf31.zip infected by "Trojan-Downloader.Java.OpenStream.u" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Anwendungsdaten\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv160.jar-121c520f-66f45d25.zip infected by "TrojanDownloader.Java.OpenStream.c" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\3BHK6X.exe infected by "Trojan-Downloader.Win32.IstBar.gn" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\pony41.exe infected by "Trojan-Downloader.Win32.Small.agn" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\temp.fr5D11\istsvc.exe infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~13.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~15.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~17.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~19.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~25.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~8.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~A.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~C0.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~C5.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~CA.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~CE.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~D.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~D4.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~E4.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~F.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temporary Internet Files\Content.IE5\URQBQ5A7\3fd2e9aa97ea23e8e3d06873ede6e03d[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken. File C:\laufwerk\Eigene Dateien\Briefe\Outlook Express\Robert Janisch\Mail\Gelöschte Objekte.mbx infected by "not-a-virus:AdWare.Gator.3124" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{A4A3D34E-0FD2-4C1C-8024-DE9A510B5DBF}\RP4\A0003361.exe infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\miniclipGameLoader.dll infected by "TrojanDownloader.Win32.Agent.de" Virus. Action Taken: No Action Taken. |
02.02.2005, 15:43 | #4 |
| Hijackauswertung Hi, also ich würde gerne das ganze Log mal sehen. (Teile uns dann das Ergebnis des eScan mit: welche Viren wurden auf Deinem Rechner gefunden: "öffne die mwav.log -> Bearbeiten -> Suchen -> infected eingeben -> Weitersuchen -> Treffer markieren/kopieren und ins Forum übertragen." (Zitat Cidre) ) Du solltest dich aber seelisch und moralisch schonmal darauf einstellen,dein System neu zu machen ich sehe nämlich keinen Sinn darin,es zu retten! http://www.trojaner-board.de/showthread.php?t=12154 Norton ist mit einer der schlechtesten Scanner... Gehst du über DSL ins Netz,wenn nein sichere schonmal die ganzen Dailer auf Diskette,damit du ggf. was in der Hand hast! |
02.02.2005, 20:17 | #5 |
| Hijackauswertung Mon Jan 31 19:47:07 2005 => File C:\Programme\Archive\archive.exe infected by "Trojan- Downloader.Win32.Small.agn" Virus. Action Taken: No Action Taken. Mon Jan 31 19:47:07 2005 => File C:\Programme\ISTsvc\istsvc.exe infected by "Trojan- Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. Mon Jan 31 19:47:24 2005 => File C:\Programme\ISTsvc\istsvc.exe infected by "Trojan- Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. Mon Jan 31 19:52:13 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\3BHK6X.exe infected by "Trojan-Downloader.Win32.IstBar.gn" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:20 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\pony41.exe infected by "Trojan-Downloader.Win32.Small.agn" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:24 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\temp.fr5D11\istsvc.exe infected by "Trojan- Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:31 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~13.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:31 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~15.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:31 2005 => Scanning File C:\DOKUME~1\user\LOKALE~1\Temp\~17.exe Mon Jan 31 19:54:31 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~17.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:31 2005 => Scanning File C:\DOKUME~1\user\LOKALE~1\Temp\~19.exe Mon Jan 31 19:54:31 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~19.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:31 2005 => Scanning File C:\DOKUME~1\user\LOKALE~1\Temp\~25.exe Mon Jan 31 19:54:32 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~25.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:32 2005 => Scanning File C:\DOKUME~1\user\LOKALE~1\Temp\~8.exe Mon Jan 31 19:54:32 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~8.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:32 2005 => Scanning File C:\DOKUME~1\user\LOKALE~1\Temp\~A.exe Mon Jan 31 19:54:32 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~A.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:32 2005 => Scanning File C:\DOKUME~1\user\LOKALE~1\Temp\~C0.exe Mon Jan 31 19:54:32 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~C0.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:32 2005 => Scanning File C:\DOKUME~1\user\LOKALE~1\Temp\~C5.exe Mon Jan 31 19:54:33 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~C5.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:33 2005 => Scanning File C:\DOKUME~1\user\LOKALE~1\Temp\~CA.exe Mon Jan 31 19:54:33 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~CA.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:33 2005 => Scanning File C:\DOKUME~1\user\LOKALE~1\Temp\~CE.exe Mon Jan 31 19:54:33 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~CE.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:33 2005 => Scanning File C:\DOKUME~1\user\LOKALE~1\Temp\~D.exe Mon Jan 31 19:54:34 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~D.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:34 2005 => Scanning File C:\DOKUME~1\user\LOKALE~1\Temp\~D4.exe Mon Jan 31 19:54:34 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~D4.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:34 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~E4.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 19:54:34 2005 => File C:\DOKUME~1\user\LOKALE~1\Temp\~F.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. Mon Jan 31 19:57:00 2005 => File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\89ABCDEF\38de12476f0e691c f127f74c103038c1[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken. Mon Jan 31 20:02:01 2005 => File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\G1K3CN4R\protect[1].htm infected by "Trojan-Downloader.JS.IstBar.d" Virus. Action Taken: No Action Taken. Mon Jan 31 20:03:20 2005 => File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\ITGJUH65\818b23d18ff0527ee 22e4452e5f2804c[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken. Mon Jan 31 20:07:45 2005 => File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\OPAJGXEJ\a570a077[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken. Mon Jan 31 20:09:06 2005 => File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\URQBQ5A7\3fd2e9aa97ea23e8 e3d06873ede6e03d[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken. Mon Jan 31 20:10:56 2005 => File C:\DOKUME~1\user\LOKALE~1\TEMPOR~1\Content.IE5\W56N0963\istsvc[1].exe infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. Mon Jan 31 20:24:41 2005 => File C:\Programme\Archive\archive.exe infected by "Trojan- Downloader.Win32.Small.agn" Virus. Action Taken: No Action Taken. Mon Jan 31 20:24:41 2005 => File C:\WINDOWS\qfxvbhlb.exe infected by "Trojan- Downloader.Win32.IstBar.go" Virus. Action Taken Mon Jan 31 20:24:41 2005 => File C:\Programme\ISTsvc\istsvc.exe infected by "Trojan- Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. Mon Jan 31 20:38:08 2005 => File C:\Dokumente und Einstellungen\user\Anwendungsdaten\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.cl ass-6b9fccb8-364995e5.class infected by "Trojan.Java.ClassLoader.Dummy.d" Virus. Action Taken: No Action Taken. Mon Jan 31 20:38:46 2005 => File C:\Dokumente und Einstellungen\user\Anwendungsdaten\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstalle r.jar-3cc46f89-21f7bf31.zip infected by "Trojan-Downloader.Java.OpenStream.u" Virus. Action Taken: No Action Taken. Mon Jan 31 20:38:47 2005 => File C:\Dokumente und Einstellungen\user\Anwendungsdaten\Sun\Java\Deployment\cache\javapi\v1.0\jar\loaderadv1 60.jar-121c520f-66f45d25.zip infected by "TrojanDownloader.Java.OpenStream.c" Virus. Action Taken: No Action Taken. |
02.02.2005, 20:19 | #6 |
| Hijackauswertung Mon Jan 31 20:42:32 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\3BHK6X.exe infected by "Trojan-Downloader.Win32.IstBar.gn" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:33 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\pony41.exe infected by "Trojan-Downloader.Win32.Small.agn" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:38 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\temp.fr5D11\istsvc.exe infected by "Trojan- Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~13.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~15.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~17.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~19.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~25.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~8.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~A.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~C0.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~C5.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~CA.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~CE.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:43 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~D.exe infected by "not-a-virus:Porn-Dialer.Win32.ALifeDialer" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:44 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~D4.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:44 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~E4.exe infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 20:44:44 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temp\~F.exe infected by "Trojan.Win32.StartPage.ow" Virus. Action Taken: No Action Taken. Mon Jan 31 20:49:09 2005 => File C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Temporary Internet Files\Content.IE5\URQBQ5A7\3fd2e9aa97ea23e8e3d06873ede6e03d[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken. Mon Jan 31 20:50:18 2005 => File C:\laufwerk\Eigene Dateien\Briefe\Outlook Express\Robert Janisch\Mail\Gelöschte Objekte.mbx infected by "not-a- virus:AdWare.Gator.3124" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:48 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\048178B2.class infected by "Trojan.Java.ClassLoader.d" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:48 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\061636E9 infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:49 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\0D3920C8 infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:49 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\0D3D4AC5 infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:49 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\0D4074C1 infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:49 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\0D431EBE infected by "TrojanDownloader.Win32.Small.op" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:49 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\0D4748BA infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:49 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\0D4A72B6 infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:49 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\1168658C infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:49 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\146F090C infected by "Trojan-Downloader.JS.IstBar.b" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:49 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\15BF657D infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:49 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\1CF8218B infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:50 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\1DDD041C infected by "Trojan-Downloader.JS.IstBar.b" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:50 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\23B6282B infected by "Worm.Win32.Lovesan.a" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:50 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\253578B1 infected by "Worm.P2P.SdDrop.e" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:50 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\25F42844 infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:50 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\26A21A71.class infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:50 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\26E65C1C.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:50 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\2996783A infected by "I-Worm.NetSky.aa" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:50 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\2A357C9A infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. |
02.02.2005, 20:20 | #7 |
| Hijackauswertung Mon Jan 31 21:20:50 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\2AAD67F5.dat infected by "Worm.P2P.SpyBot.dv" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:51 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\2D7528E5.dat infected by "Win32.HLLP.Hantaner.a" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:51 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\30975E7F.zip infected by "TrojanDownloader.Java.OpenConnection.b" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:51 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\31EB5A4A infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:51 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\32637E85.zip infected by "TrojanDownloader.Java.OpenConnection.b" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:51 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\36E922D8 infected by "Trojan-Downloader.JS.IstBar.b" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:51 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\41D628E7 infected by "TrojanDownloader.Java.OpenStream.c" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:51 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\4BA0078D infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:51 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\4BC25451 infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:51 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\4C083CC7 infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:51 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\4DA97332.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:52 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\4DAD1D2E.class infected by "Trojan.Java.ClassLoader.h" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:52 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\4F643662.dll infected by "TrojanDownloader.Win32.Small.se" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:52 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\525E14A7 infected by "TrojanDownloader.Win32.IstBar.er" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:52 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\52623EA3 infected by "Trojan-Downloader.Win32.IstBar.go" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:52 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\526568A0 infected by "Trojan-Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:52 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\526C3C98 infected by "Trojan-Downloader.JS.IstBar.b" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:52 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\5730438B infected by "not-a-virus:Porn-Dialer.Win32.Generic" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:52 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\632E00DD infected by "Trojan.Java.Femad" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:53 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\6BBD0643 infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:53 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\6CBF7696.class infected by "Trojan.Java.Femad" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:53 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\6D397378.zip infected by "TrojanDownloader.Java.OpenConnection.b" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:53 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\73372204 infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:53 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\75067004 infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:53 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\76F77194.dat infected by "P2P-Worm.Win32.Tibick.d" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:53 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\77181570.dat infected by "P2P-Worm.Win32.Tibick.d" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:53 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\788E3EB6.html infected by "TrojanDownloader.JS.Small.d" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:53 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\789512AF.class infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:53 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\789C58C7 infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:53 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\78D459D8.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:54 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\792F7B23.dat infected by "P2P-Worm.Win32.Tibick.d" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:54 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\7F2E20B3 infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:54 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\7F324AB0 infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:54 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\7F4F448F infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Mon Jan 31 21:20:54 2005 => File C:\Programme\Norton Internet Security\Norton AntiVirus\Quarantine\7F526E8C infected by "Trojan-Downloader.JS.IstBar.b" Virus. Action Taken: No Action Taken. Mon Jan 31 21:47:24 2005 => File C:\System Volume Information\_restore{A4A3D34E- 0FD2-4C1C-8024-DE9A510B5DBF}\RP4\A0003361.exe infected by "Trojan- Downloader.Win32.IstBar.gm" Virus. Action Taken: No Action Taken. Mon Jan 31 21:53:25 2005 => File C:\WINDOWS\Downloaded Program Files\miniclipGameLoader.dll infected by "TrojanDownloader.Win32.Agent.de" Virus. Action Taken: No Action Taken. Habe DSL Danke |
02.02.2005, 20:26 | #8 |
| Hijackauswertung Hi, mach doch bitte mal den Quarantäne-Ordner von Norton leer!! Dann Systemwiederherstellung ausschalten, Rechner ausschalten, dann Rechner Anschalten, Systemwiederherstellung an. Dann lade dir clearprog runter, mache alle Häkchen bei IE und Windows und clicke auf Löschen, wenn fertig auf beenden. Dann mach einen neuen eScan. Mal schauen was noch übrig ist.
__________________ Der Mensch sollte eine Hundeseele haben |
02.02.2005, 20:27 | #9 |
| Hijackauswertung @roja54 bei dieser sammlung würde ich formatieren. speichere die dialer auf diskette, wenn du nicht per reines DSL unterwegs bist. mache format C hier eine hilfestellung http://www.trojaner-board.de/showpos...28&postcount=2 sry chaosman
__________________ Bonus vir semper tiro |
Themen zu Hijackauswertung |
adapter, adobe, alcatel, antivirus, bho, cyberlink, dateien, diagnostics, drivers, excel, explorer, hijack, hijackthis, hotkey, internet, internet explorer, internet security, microsoft, monitor, nvcpl.dll, nvidia, object, programme, rundll, security, settings manager, software, solution, sun java, symantec, system, tcpip, usb, windows, windows messenger, windows xp |