Hallo zusammen!
Bekomme immer die Meldung:
"[WARNUNG] Ist das Trojanische Pferd TR/Agent.KT!"
Der Trojaner wird immer in einem exe.File unter:
"C:\WINDOWS\SYSTEM32\....exe" sichtbar
Habe AntiVir bei mir drauf. (Win XP Home Edition)
Hoffe Ihr könnt mir helfen!
Habe mit escan alles durchlaufen lassen,im abgesicherten Modus.
Dies ist nur ein Auszug.Wenn ich alles hineinschreibe,zeigt der Browser mir eine Fehlermeldung an.
Aber die Trojaner sind ja drauf!
Bin für jede Hilfe dankbar!


Wed Feb 16 02:10:53 2005 => Options Selected by User:
Wed Feb 16 02:10:53 2005 => Memory Check: Enabled
Wed Feb 16 02:10:53 2005 => Registry Check: Enabled
Wed Feb 16 02:10:53 2005 => StartUp Folder Check: Enabled
Wed Feb 16 02:10:53 2005 => System Folder Check: Enabled
Wed Feb 16 02:10:53 2005 => System Area Check: Disabled
Wed Feb 16 02:10:53 2005 => Services Check: Enabled
Wed Feb 16 02:10:53 2005 => Drive Check Option Disabled
Wed Feb 16 02:10:53 2005 => Folder Check: Disabled
Wed Feb 16 02:11:18 2005 => Scanning File C:\WINDOWS\ipzl.exe
Wed Feb 16 02:11:23 2005 => File C:\WINDOWS\ipzl.exe infected by "Trojan-Downloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken.

Wed Feb 16 02:11:25 2005 => Scanning File C:\WINDOWS\msid32.dll
Wed Feb 16 02:11:25 2005 => File C:\WINDOWS\msid32.dll infected by "Trojan-Downloader.Win32.Agent.jb" Virus. Action Taken: No Action Taken.



Wed Feb 16 02:11:31 2005 => Total Files Scanned: 348
Wed Feb 16 02:11:31 2005 => Total Virus(es) Found: 2
Wed Feb 16 02:11:31 2005 => Total Disinfected Files: 0
Wed Feb 16 02:11:31 2005 => Total Files Renamed: 0
Wed Feb 16 02:11:31 2005 => Total Deleted Files: 0
Wed Feb 16 02:11:31 2005 => Total Errors: 0
Wed Feb 16 02:11:31 2005 => Time Elapsed: 00:00:37

Wed Feb 16 02:11:31 2005 => Scanning HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components

Wed Feb 16 02:11:31 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

Wed Feb 16 02:11:31 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

Wed Feb 16 02:11:31 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Wed Feb 16 02:11:31 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Wed Feb 16 02:11:31 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

Wed Feb 16 02:11:31 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

Wed Feb 16 02:11:31 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce

Wed Feb 16 02:11:31 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Wed Feb 16 02:11:31 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Wed Feb 16 02:11:31 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx

Wed Feb 16 02:11:31 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices

Wed Feb 16 02:11:31 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\Setup

Wed Feb 16 02:11:31 2005 => Scanning HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Wed Feb 16 02:11:31 2005 => Scanning HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Wed Feb 16 02:11:31 2005 => Scanning HKCR\txtfile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\comfile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\exefile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\dllfile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\batfile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\piffile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\scrfile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\scrfile\shell\config\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\regfile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\htmlfile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\htafile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\jsfile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\jsefile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\vbsfile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\vbefile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\wshfile\shell\open\command

Wed Feb 16 02:11:31 2005 => Scanning HKCR\wsffile\shell\open\command

Wed Feb 16 02:11:31 2005 => ***** Scanning complete. *****
Wed Feb 16 02:11:31 2005 => Virus Database Date: 2005/02/16
Wed Feb 16 02:11:31 2005 => Virus Database Count: 118426

Wed Feb 16 02:11:31 2005 => Scan Completed.

Wed Feb 16 02:11:31 2005 => AV Library Unloaded (3)...

@Rocky007

http://www.sophos.de/virusinfo/analy...ojagentbq.html
C:\WINDOWS\ipzl.exe
C:\WINDOWS\msid32.dll

systemwiederherstellung deaktivieren, in abgesicherten modus wechslen, beide dateien manuell löschen, neu booten, systemwiederherstellung aktivieren.

chaosman