|
Plagegeister aller Art und deren Bekämpfung: Alles auf einmal: Admilli CoolwwwSearch EffectiveBAndToolbar MediaTickets TibsWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
29.03.2005, 15:23 | #1 |
| Alles auf einmal: Admilli CoolwwwSearch EffectiveBAndToolbar MediaTickets Tibs Guten Tag! Da war ich wohl mal wieder sehr gründlich und habe meinem Kollegen den Rechner konsequent zugesifft: Total Objects Scanned: 2455 Total Virus(es) Found: 93 Das ganze im Detail: Tue Mar 29 14:29:23 2005 => File C:\WINDOWS\SYSTEM\OFA.DLL infected by "Trojan.Win32.StartPage.ix" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:24 2005 => File C:\WINDOWS\SYSTEM\TWIJL.DLL infected by "not-a-virus:AdWare.PurityScan.ak" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:26 2005 => File C:\WINDOWS\hostdll.exe infected by "Trojan-PSW.Win32.Small.x" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:26 2005 => File C:\WINDOWS\SYSTEM\cmd32.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\IZXXZDSAFSAFCZXCR.EXE infected by "Trojan-Clicker.Win32.Blobus.b" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Nbl.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Joo.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Ggn.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Arl.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\Qem.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Usp.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Klf.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\Iil.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\Agn.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\Tmm.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Ueh.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\Jac.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Uaq.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\Mgn.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Pcg.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Vsk.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Aut.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Aut.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\Tbh.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\Qbb.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Mqs.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\Oki.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\Ghf.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Rba.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Oku.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:28 2005 => File C:\WINDOWS\SYSTEM\Dvh.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\Lqp.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\SYSTEM\Ato.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\SYSTEM\Deg.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\Pps.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\Kdh.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\Jlg.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\Mqn.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\Hda.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\SYSTEM\Vgi.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\SYSTEM\Gqa.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\Eoa.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\SYSTEM\Ufp.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\SYSTEM\Ctp.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\SYSTEM\Lpi.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\SYSTEM\Fak.exe infected by "Trojan-Clicker.Win32.Spywad.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:29 2005 => File C:\WINDOWS\SYSTEM\rrst.exe infected by "not-a-virus:AdWare.PurityScan.w" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:33 2005 => System found infected with Alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken. Tue Mar 29 14:29:33 2005 => File System Found infected by "Alexa Spyware/Adware" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:33 2005 => System found infected with 180Solutions Spyware/Adware ({30d02401-6a81-11d0-8274-00c04fd5ae38})! Action taken: No Action Taken. Tue Mar 29 14:29:33 2005 => File System Found infected by "180Solutions Spyware/Adware" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:33 2005 => System found infected with VX2 Spyware/Adware ({0E5CBF21-D15F-11D0-8301-00AA005B4383})! Action taken: No Action Taken. Tue Mar 29 14:29:33 2005 => File System Found infected by "VX2 Spyware/Adware" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:33 2005 => System found infected with kapabout Spyware/Adware! Action taken: No Action Taken. Tue Mar 29 14:29:33 2005 => File System Found infected by "kapabout Spyware/Adware" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:46 2005 => File C:\WINDOWS\SSK_B5.EXE infected by "Trojan-Dropper.Win32.SurfSide.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:49 2005 => File C:\WINDOWS\Pjj.html infected by "Trojan-Clicker.Win32.Spywad.b" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:54 2005 => File C:\WINDOWS\routenplaner_online[rrm-10001,1].exe infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:54 2005 => File C:\WINDOWS\loadclean.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:54 2005 => File C:\WINDOWS\desktop.html infected by "Trojan-Clicker.Win32.Spywad.b" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:54 2005 => File C:\WINDOWS\4.dat infected by "Trojan.Win32.Small.bb" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:55 2005 => File C:\WINDOWS\3.dat infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:55 2005 => File C:\WINDOWS\6.dat infected by "Trojan-Dropper.Win32.Small.ty" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:55 2005 => File C:\WINDOWS\1.dat infected by "not-a-virus:AdWare.ToolBar.ISearch.d" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:55 2005 => File C:\WINDOWS\Ufi.html infected by "Trojan-Clicker.Win32.Spywad.b" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:55 2005 => File C:\WINDOWS\wldr.dll infected by "Trojan-Downloader.Win32.Agent.kf" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:55 2005 => File C:\WINDOWS\VT00.exe infected by "Trojan-Downloader.Win32.Lookme.g" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:55 2005 => File C:\WINDOWS\optimize.exe infected by "Trojan-Downloader.Win32.Dyfuca.dk" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:56 2005 => File C:\WINDOWS\cxtpls_loader.exe infected by "not-a-virus:AdWare.Apropos.b" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:56 2005 => File C:\WINDOWS\edow.exe infected by "Trojan-Downloader.Win32.Wintool.e" Virus. Action Taken: No Action Taken. Tue Mar 29 14:29:56 2005 => File C:\WINDOWS\Ogv.html infected by "Trojan-Clicker.Win32.Spywad.b" Virus. Action Taken: No Action Taken. Tue Mar 29 14:30:46 2005 => File C:\WINDOWS\SYSTEM\izxczxcr.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:10 2005 => File C:\WINDOWS\SYSTEM\intronsad.exe infected by "Trojan-PSW.Win32.Small.x" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:17 2005 => File C:\WINDOWS\SYSTEM\wldr.dll infected by "Trojan-Downloader.Win32.Agent.kf" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:18 2005 => File C:\WINDOWS\SYSTEM\ffInst.exe infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:19 2005 => File C:\WINDOWS\SYSTEM\gcd.dll infected by "Trojan.Win32.StartPage.ix" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:19 2005 => File C:\WINDOWS\SYSTEM\gdndn.dll infected by "Trojan.Win32.StartPage.ix" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:19 2005 => File C:\WINDOWS\TEMP\sp.html infected by "Trojan.JS.StartPage.u" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:20 2005 => File C:\WINDOWS\TEMP\wldr.dll infected by "Trojan-Downloader.Win32.Agent.kf" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:20 2005 => File C:\WINDOWS\TEMP\iF265.TMP infected by "not-a-virus:AdWare.SurfSide.a" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:20 2005 => File C:\WINDOWS\TEMP\SskUpdater.exe infected by "not-a-virus:AdWare.TotalVelocity.v" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:21 2005 => File C:\WINDOWS\TEMP\down.cab infected by "not-a-virus:AdWare.Wintol.y" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:21 2005 => File C:\WINDOWS\TEMP\WToolsB.dll infected by "not-a-virus:AdWare.Wintol.y" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:21 2005 => File C:\WINDOWS\TEMP\WToolsA.exe infected by "not-a-virus:AdWare.Wintol.y" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:40 2005 => File C:\WINDOWS\LOCALS~1\TEMPOR~1\CONTENT.IE5\CD2RST6J\media000[1].html infected by "Trojan-Clicker.JS.Linker.j" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:41 2005 => File C:\WINDOWS\LOCALS~1\TEMPOR~1\CONTENT.IE5\CD2RST6J\a1[1].htm infected by "Trojan-Clicker.JS.Linker.j" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:41 2005 => File C:\WINDOWS\LOCALS~1\TEMPOR~1\CONTENT.IE5\CD2RST6J\media000[2].html infected by "Trojan-Clicker.JS.Linker.j" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:44 2005 => File C:\WINDOWS\LOCALS~1\TEMPOR~1\CONTENT.IE5\YHI123M5\mtrslib2[1].js infected by "Trojan-Downloader.JS.Small.ag" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:44 2005 => File C:\WINDOWS\LOCALS~1\TEMPOR~1\CONTENT.IE5\YHI123M5\mtrslib2[3].js infected by "Trojan-Downloader.JS.Small.ag" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:44 2005 => File C:\WINDOWS\LOCALS~1\TEMPOR~1\CONTENT.IE5\YHI123M5\mtrslib2[2].js infected by "Trojan-Downloader.JS.Small.ag" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:44 2005 => File C:\WINDOWS\LOCALS~1\TEMPOR~1\CONTENT.IE5\YHI123M5\a1[1].htm infected by "Trojan-Clicker.JS.Linker.j" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:44 2005 => File C:\WINDOWS\LOCALS~1\TEMPOR~1\CONTENT.IE5\YHI123M5\a772a97b[1].js infected by "Trojan-Downloader.JS.Small.aq" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:47 2005 => File C:\WINDOWS\LOCALS~1\TEMPOR~1\CONTENT.IE5\WLYZO12R\a772a97b[1].js infected by "Trojan-Downloader.JS.Small.aq" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:47 2005 => File C:\WINDOWS\LOCALS~1\TEMPOR~1\CONTENT.IE5\WLYZO12R\media000[1].html infected by "Trojan-Clicker.JS.Linker.j" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:49 2005 => File C:\WINDOWS\LOCALS~1\TEMPOR~1\CONTENT.IE5\CS8B534U\media000[1].html infected by "Trojan-Clicker.JS.Linker.j" Virus. Action Taken: No Action Taken. Tue Mar 29 14:31:51 2005 => ***** Scanning complete. ***** Tue Mar 29 14:31:51 2005 => Total Objects Scanned: 2455 Tue Mar 29 14:31:51 2005 => Total Virus(es) Found: 93 Tue Mar 29 14:31:51 2005 => Total Disinfected Files: 0 Tue Mar 29 14:31:51 2005 => Total Files Renamed: 0 Tue Mar 29 14:31:51 2005 => Total Deleted Objects: 0 Tue Mar 29 14:31:51 2005 => Total Errors: 0 Tue Mar 29 14:31:51 2005 => Time Elapsed: 00:02:34 Tue Mar 29 14:31:51 2005 => Virus Database Date: 2005/03/28 Tue Mar 29 14:31:51 2005 => Virus Database Count: 123733 Tue Mar 29 14:31:51 2005 => Scan Completed. Ich glaub´, ich brauch ein wenig Hilfe... Grüße Heribert |
29.03.2005, 17:00 | #2 |
| Alles auf einmal: Admilli CoolwwwSearch EffectiveBAndToolbar MediaTickets Tibs @Heribert
__________________Tue Mar 29 14:31:51 2005 => Total Objects Scanned: 2455 Tue Mar 29 14:31:51 2005 => Total Virus(es) Found: 93 Tue Mar 29 14:31:51 2005 => Time Elapsed: 00:02:34 Ich glaub´, ich brauch ein wenig Hilfe... üblicherweise würden wir empfehlen dein system komplett zu scannen, du hast vergessen die häkchen bei all drives zu setzen. aber bei dieser menge.... da hilft nur noch format C. hier, wie gewünscht, eine anleitung http://www.trojaner-board.de/showpos...28&postcount=2 sry chaosman
__________________ |
29.03.2005, 20:23 | #3 |
| Alles auf einmal: Admilli CoolwwwSearch EffectiveBAndToolbar MediaTickets Tibs @chaosman
__________________>üblicherweise würden wir empfehlen dein system komplett zu scannen, du hast vergessen die häkchen bei all drives zu setzen. Ja, chaosman, da hast du recht. >aber bei dieser menge.... >da hilft nur noch format C. Also werden mich meine Gartenbaukollegen die Tage durch den Holzhäcksler schieben. Was solls: Dank dir für deine Unterstützung. Heribert |
Themen zu Alles auf einmal: Admilli CoolwwwSearch EffectiveBAndToolbar MediaTickets Tibs |
admilli, alexa, auf einmal, brauch, c:\windows, c:\windows\temp, cmd, content.ie5, coolwwwsearch, effectivebandtoolbar, errors, file, files, found, guten, infected, intro, media, not-a-virus, online, rechner, scan, scanning, solutions, system, temp, virus, windows, windows\temp |