hallo leute,
ich hab mal wieder ein paar viren auf dem pc und weiß net so genau was ich machen soll.
ich hab mal das programm eScan im abgesicherten modus über den pc laufen lassen und dabei kam folgendes raus:

Sun Jan 23 17:20:43 2005 => File C:\Programme\CashBack\bin\cashback.exe infected by "not-a-virus:AdWare.BargainBuddy.j" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:20:43 2005 => File c:\temp\salm.exe infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:20:43 2005 => File C:\PROGRA~2\DESKAD~1\DESKAD~2.EXE infected by "not-a-virus:AdWare.WinAD.m" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:20:43 2005 => File C:\WINDOWS\wrup.exe infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:20:43 2005 => File C:\PROGRA~2\WINDOW~1\WinCtlAd.exe infected by "not-a-virus:AdWare.WinAD.f" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:20:44 2005 => File C:\PROGRA~1\COMMON~1\tsa\tsm2.exe infected by "Trojan-Downloader.Win32.TSUpdate.g" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:20:54 2005 => ERROR!!! Invalid Entry \SystemRoot\system32\drivers\Wbutton.sys. Removing SYSTEM\CurrentControlSet\Services\Wbutton...
Sun Jan 23 17:21:03 2005 => File C:\WINDOWS\preInsln.exe infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:21:03 2005 => File C:\WINDOWS\P2P[p2p-10805,de,1].exe infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:47:39 2005 => Result: ERROR!!! File C:\pagefile.sys: Scanning Failure!!!
Sun Jan 23 17:47:39 2005 => ERROR!!! ScanFile fails for C:\pagefile.sys
Sun Jan 23 17:47:47 2005 => File C:\Temp\NCasePackage.exe infected by "Trojan-Dropper.Win32.180Solutions.a" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:47:48 2005 => File C:\Temp\SearchRelevancy.exe infected by "not-a-virus:AdWare.Relevance.b" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:47:48 2005 => File C:\Temp\SAHPackage.exe infected by "not-a-virus:AdWare.Sahat.h" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:47:48 2005 => File C:\Temp\sahagent.exe infected by "not-a-virus:AdWare.Sahat.h" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:47:48 2005 => File C:\Temp\salmhook.dll infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:51:49 2005 => File C:\WINDOWS\system32\ATPartners.dll infected by "TrojanDownloader.Win32.Rameh.c" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:51:51 2005 => File C:\WINDOWS\system32\InstaFinder_inst.exe infected by "not-a-virus:AdWare.InstaFinder.a" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:51:52 2005 => File C:\WINDOWS\system32\WebRebates_1_InstallAS.exe infected by "not-a-virus:AdWare.WebRebates.d" Virus. Action Taken: No Action Taken.
Sun Jan 23 17:51:52 2005 => File C:\WINDOWS\system32\winakrules.dll infected by "TrojanDownloader.Win32.Agent.bt" Virus. Action Taken: No Action Taken.
Sun Jan 23 18:16:23 2005 => File C:\Dokumente und Einstellungen\Michael&Dagmar\Lokale Einstellungen\Temp\GLF3DGLF3D.EXE infected by "TrojanDownloader.Win32.TSUpdate.e" Virus. Action Taken: No Action Taken.
Sun Jan 23 18:16:24 2005 => File C:\Dokumente und Einstellungen\Michael&Dagmar\Lokale Einstellungen\Temp\winakcore.dll infected by "not-a-virus:AdWare.Coreak" Virus. Action Taken: No Action Taken.
Sun Jan 23 18:16:24 2005 => File C:\Dokumente und Einstellungen\Michael&Dagmar\Lokale Einstellungen\Temp\winakrules.dll infected by "TrojanDownloader.Win32.Agent.bt" Virus. Action Taken: No Action Taken.
Sun Jan 23 18:16:24 2005 => File C:\Dokumente und Einstellungen\Michael&Dagmar\Lokale Einstellungen\Temp\winaklsp.dll infected by "TrojanDownloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
Sun Jan 23 18:16:25 2005 => File C:\Dokumente und Einstellungen\Michael&Dagmar\Lokale Einstellungen\Temp\tsinstall_4_0_3_7.exe infected by "Trojan-Downloader.Win32.TSUpdate.i" Virus. Action Taken: No Action Taken.
Sun Jan 23 18:16:25 2005 => File C:\Dokumente und Einstellungen\Michael&Dagmar\Lokale Einstellungen\Temp\GLF94GLF94.EXE infected by "TrojanDownloader.Win32.TSUpdate.e" Virus. Action Taken: No Action Taken.
Sun Jan 23 18:42:21 2005 => File C:\Programme\Common Files\tsa\tsl.exe infected by "TrojanDownloader.Win32.TSUpdate.e" Virus. Action Taken: No Action Taken.
Sun Jan 23 18:42:21 2005 => File C:\Programme\Common Files\tsa\tsl2.exe infected by "Trojan-Downloader.Win32.TSUpdate.g" Virus. Action Taken: No Action Taken.
Sun Jan 23 18:42:21 2005 => File C:\Programme\Common Files\tsa\ts2.exe infected by "Trojan-Downloader.Win32.TSUpdate.h" Virus. Action Taken: No Action Taken.
Sun Jan 23 18:42:22 2005 => File C:\Programme\Common Files\tsa\tsp2.exe infected by "Trojan-Downloader.Win32.TSUpdate.g" Virus. Action Taken: No Action Taken.
Sun Jan 23 19:04:26 2005 => File C:\Recycled\Dc163.exe infected by "TrojanDownloader.Win32.TSUpdate.e" Virus. Action Taken: No Action Taken.
Sun Jan 23 19:04:26 2005 => File C:\Recycled\Dc168.tmp\localNrd.cab infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
Sun Jan 23 19:04:26 2005 => File C:\Recycled\Dc168.tmp\localNRD.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
Sun Jan 23 19:04:26 2005 => File C:\Recycled\Dc168.tmp\preInsln.exe infected by "not-a-virus:AdWare.BiSpy.o" Virus. Action Taken: No Action Taken.


ich hoffe ihr könnt mir damit nun weiter helfen!

danke schon mal im voraus!

felima915

Hi,


setz dein System bitte neu auf,du hast einen Trojaner mit Backdoor Funktion

http://www.sophos.de/virusinfo/analy...ojagentza.html

Les den Thread hier genau durch und handel auch so :

http://trojaner-board.de/showthread.php?t=12154

Gruss

@felima915
vielleicht mußt Du auch mal über Dein Surfverhalten nachdenken, Dein andere Thread sah auch schon nicht besser aus. Versuch es auch mal mit einem anderen Browser.
Sonst bist Du hier ständig auf Hilfesuche.


Gruß Gigamail