![]() |
|
Log-Analyse und Auswertung: TR/Dldr.leser.A und TR/Delprot.A auf dem RechnerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
|
![]() | #1 |
| ![]() TR/Dldr.leser.A und TR/Delprot.A auf dem Rechner so hier die logfile vom escan ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Funde für "infected" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Mon May 23 19:38:11 2005 => File C:\WINDOWS\explorer.exe infected by "Virus.Win32.Bube.l" Virus! Action Taken: No Action Taken. Mon May 23 19:38:29 2005 => File C:\WINDOWS\explorer.exe infected by "Virus.Win32.Bube.l" Virus! Action Taken: No Action Taken. Mon May 23 19:38:55 2005 => System found infected with SexList Spyware/Adware (_{CFBFAE00-17A6-11D0-99CB-00C04FD64497})! Action taken: No Action Taken. Mon May 23 19:38:55 2005 => System found infected with SideFind Spyware/Adware ({8cba1b49-8144-4721-a7b1-64c578c9eed7})! Action taken: No Action Taken. Mon May 23 19:38:55 2005 => System found infected with SideFind Spyware/Adware ({10e42047-deb9-4535-a118-b3f6ec39b807})! Action taken: No Action Taken. Mon May 23 19:38:56 2005 => System found infected with Zango Spyware/Adware ({99410cde-6f16-42ce-9d49-3807f78f0287})! Action taken: No Action Taken. Mon May 23 19:39:35 2005 => System found infected with ISTsvc Spyware/Adware (shortcuts.txt)! Action taken: No Action Taken. Mon May 23 19:39:35 2005 => System found infected with YourSiteBar Spyware/Adware (YSBactivex.dll)! Action taken: No Action Taken. Mon May 23 19:40:18 2005 => File C:\WINDOWS\sefe.exe infected by "Hoax.Win32.Renos.a" Virus! Action Taken: No Action Taken. Mon May 23 19:40:18 2005 => File C:\WINDOWS\sefer.exe infected by "Trojan-Clicker.Win32.Small.ga" Virus! Action Taken: No Action Taken. Mon May 23 19:40:56 2005 => File C:\WINDOWS\System32\dgdgd.exe infected by "Backdoor.Win32.Naninf.e" Virus! Action Taken: No Action Taken. Mon May 23 19:42:34 2005 => File C:\WINDOWS\System32\protect.exe infected by "Trojan-Downloader.Win32.Agent.nr" Virus! Action Taken: No Action Taken. Mon May 23 19:43:41 2005 => File C:\DOKUME~1\Andreas\LOKALE~1\Temp\iinstall.exe infected by "Trojan-Downloader.Win32.IstBar.jj" Virus! Action Taken: No Action Taken. Mon May 23 19:44:02 2005 => File C:\DOKUME~1\Andreas\LOKALE~1\Temp\temp.fr4CB6\istsvc.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus! Action Taken: No Action Taken. Mon May 23 19:44:03 2005 => Total Disinfected Files: 0 Mon May 23 19:56:30 2005 => File C:\WINDOWS\Explorer.exe infected by "Virus.Win32.Bube.l" Virus! Action Taken: No Action Taken. Mon May 23 19:57:11 2005 => File C:\WINDOWS\Explorer.exe infected by "Virus.Win32.Bube.l" Virus! Action Taken: No Action Taken. Mon May 23 19:57:35 2005 => System found infected with SexList Spyware/Adware (_{CFBFAE00-17A6-11D0-99CB-00C04FD64497})! Action taken: No Action Taken. Mon May 23 19:57:36 2005 => System found infected with SideFind Spyware/Adware ({8cba1b49-8144-4721-a7b1-64c578c9eed7})! Action taken: No Action Taken. Mon May 23 19:57:36 2005 => System found infected with SideFind Spyware/Adware ({10e42047-deb9-4535-a118-b3f6ec39b807})! Action taken: No Action Taken. Mon May 23 19:57:36 2005 => System found infected with Zango Spyware/Adware ({99410cde-6f16-42ce-9d49-3807f78f0287})! Action taken: No Action Taken. Mon May 23 19:58:15 2005 => System found infected with YourSiteBar Spyware/Adware (YSBactivex.dll)! Action taken: No Action Taken. Mon May 23 19:58:57 2005 => File C:\WINDOWS\sefe.exe infected by "Hoax.Win32.Renos.a" Virus! Action Taken: No Action Taken. Mon May 23 19:58:57 2005 => File C:\WINDOWS\sefer.exe infected by "Trojan-Clicker.Win32.Small.ga" Virus! Action Taken: No Action Taken. Mon May 23 19:59:34 2005 => File C:\WINDOWS\System32\dgdgd.exe infected by "Backdoor.Win32.Naninf.e" Virus! Action Taken: No Action Taken. Mon May 23 20:01:09 2005 => File C:\WINDOWS\System32\protect.exe infected by "Trojan-Downloader.Win32.Agent.nr" Virus! Action Taken: No Action Taken. Mon May 23 20:03:19 2005 => File C:\Dokumente und Einstellungen\Andreas\protect.exe infected by "Trojan-Downloader.Win32.Agent.nr" Virus! Action Taken: No Action Taken. Mon May 23 20:03:19 2005 => File C:\Dokumente und Einstellungen\Andreas\sefe.exe infected by "Hoax.Win32.Renos.a" Virus! Action Taken: No Action Taken. Mon May 23 20:03:19 2005 => File C:\Dokumente und Einstellungen\Andreas\sefer.exe infected by "Trojan-Clicker.Win32.Small.ga" Virus! Action Taken: No Action Taken. Mon May 23 20:05:23 2005 => Scanning Folder: C:\Programme\AVPersonal\INFECTED\*.* Mon May 23 20:23:05 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.1\ysbactivex.dll infected by "Trojan-Downloader.Win32.IstBar.gen" Virus! Action Taken: No Action Taken. Mon May 23 20:23:05 2005 => File C:\WINDOWS\Downloaded Program Files\rdgDE1742.exe infected by "Trojan.Win32.Dialer.ht" Virus! Action Taken: No Action Taken. Mon May 23 20:23:05 2005 => File C:\WINDOWS\Downloaded Program Files\ysbactivex.dll infected by "Trojan-Downloader.Win32.IstBar.gen" Virus! Action Taken: No Action Taken. Mon May 23 20:32:17 2005 => File C:\WINDOWS\sefe.exe infected by "Hoax.Win32.Renos.a" Virus! Action Taken: No Action Taken. Mon May 23 20:32:17 2005 => File C:\WINDOWS\sefer.exe infected by "Trojan-Clicker.Win32.Small.ga" Virus! Action Taken: No Action Taken. Mon May 23 20:33:00 2005 => File C:\WINDOWS\system32\dgdgd.exe infected by "Backdoor.Win32.Naninf.e" Virus! Action Taken: No Action Taken. Mon May 23 20:34:03 2005 => File C:\WINDOWS\system32\dllcache\explorer.exe infected by "Virus.Win32.Bube.l" Virus! Action Taken: No Action Taken. Mon May 23 20:39:11 2005 => File C:\WINDOWS\system32\protect.exe infected by "Trojan-Downloader.Win32.Agent.nr" Virus! Action Taken: No Action Taken. Mon May 23 20:45:12 2005 => Total Disinfected Files: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Funde für "tagged" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Mon May 23 19:38:16 2005 => File C:\WINDOWS\System32\nsl34.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 19:38:22 2005 => File C:\WINDOWS\System32\nsl34.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 19:38:34 2005 => File C:\WINDOWS\isrvs\desktop.exe tagged as "not-a-virus:AdWare.ToolBar.ISearch.d". Action Taken: No Action Taken. Mon May 23 19:38:35 2005 => File C:\WINDOWS\System32\jt0vs976.exe tagged as "not-a-virus:AdWare.Sahat.aa". Action Taken: No Action Taken. Mon May 23 19:40:13 2005 => File C:\WINDOWS\down.exe tagged as "not-a-virus:AdWare.ToolBar.ISearch.d". Action Taken: No Action Taken. Mon May 23 19:40:15 2005 => File C:\WINDOWS\kszcgc.exe tagged as "not-a-virus:AdWare.BetterInternet.c". Action Taken: No Action Taken. Mon May 23 19:40:17 2005 => File C:\WINDOWS\Nail.exe tagged as "not-a-virus:AdWare.BetterInternet.b". Action Taken: No Action Taken. Mon May 23 19:40:19 2005 => File C:\WINDOWS\tool.exe tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 19:42:20 2005 => File C:\WINDOWS\System32\nsl17.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 19:42:21 2005 => File C:\WINDOWS\System32\nsp11.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 19:43:23 2005 => File C:\DOKUME~1\Andreas\LOKALE~1\Temp\1.exe tagged as "not-a-virus:AdWare.BetterInternet". Action Taken: No Action Taken. Mon May 23 19:43:23 2005 => File C:\DOKUME~1\Andreas\LOKALE~1\Temp\180sainstaller.exe tagged as "not-a-virus:AdWare.180Solutions.b". Action Taken: No Action Taken. Mon May 23 19:56:38 2005 => File C:\WINDOWS\isrvs\desktop.exe tagged as "not-a-virus:AdWare.ToolBar.ISearch.d". Action Taken: No Action Taken. Mon May 23 19:56:38 2005 => File C:\WINDOWS\System32\jt0vs976.exe tagged as "not-a-virus:AdWare.Sahat.aa". Action Taken: No Action Taken. Mon May 23 19:57:02 2005 => File C:\WINDOWS\System32\nsi93.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 19:57:15 2005 => File C:\WINDOWS\isrvs\desktop.exe tagged as "not-a-virus:AdWare.ToolBar.ISearch.d". Action Taken: No Action Taken. Mon May 23 19:57:16 2005 => File C:\WINDOWS\System32\jt0vs976.exe tagged as "not-a-virus:AdWare.Sahat.aa". Action Taken: No Action Taken. Mon May 23 19:58:52 2005 => File C:\WINDOWS\down.exe tagged as "not-a-virus:AdWare.ToolBar.ISearch.d". Action Taken: No Action Taken. Mon May 23 19:58:55 2005 => File C:\WINDOWS\kszcgc.exe tagged as "not-a-virus:AdWare.BetterInternet.c". Action Taken: No Action Taken. Mon May 23 19:58:56 2005 => File C:\WINDOWS\Nail.exe tagged as "not-a-virus:AdWare.BetterInternet.b". Action Taken: No Action Taken. Mon May 23 19:58:58 2005 => File C:\WINDOWS\tool.exe tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 20:00:56 2005 => File C:\WINDOWS\System32\nsl17.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 20:00:57 2005 => File C:\WINDOWS\System32\nsl34.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 20:00:57 2005 => File C:\WINDOWS\System32\nsp11.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 20:03:02 2005 => File C:\Dokumente und Einstellungen\Andreas\down.exe tagged as "not-a-virus:AdWare.ToolBar.ISearch.d". Action Taken: No Action Taken. Mon May 23 20:03:21 2005 => File C:\Dokumente und Einstellungen\Andreas\tool.exe tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 20:05:28 2005 => File C:\Programme\common files\qowu\qowup.exe tagged as "not-a-virus:AdWare.Xupiter.m". Action Taken: No Action Taken. Mon May 23 20:23:04 2005 => File C:\WINDOWS\down.exe tagged as "not-a-virus:AdWare.ToolBar.ISearch.d". Action Taken: No Action Taken. Mon May 23 20:29:59 2005 => File C:\WINDOWS\isrvs\isearch.xpi tagged as "not-a-virus:AdWare.ToolBar.ISearch.e". Action Taken: No Action Taken. Mon May 23 20:30:09 2005 => File C:\WINDOWS\isrvs\mfiltis.dll tagged as "not-a-virus:AdWare.ToolBar.ISearch.d". Action Taken: No Action Taken. Mon May 23 20:30:11 2005 => File C:\WINDOWS\kszcgc.exe tagged as "not-a-virus:AdWare.BetterInternet.c". Action Taken: No Action Taken. Mon May 23 20:30:54 2005 => File C:\WINDOWS\Nail.exe tagged as "not-a-virus:AdWare.BetterInternet.b". Action Taken: No Action Taken. Mon May 23 20:38:46 2005 => File C:\WINDOWS\system32\nsl17.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 20:38:46 2005 => File C:\WINDOWS\system32\nsl34.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 20:38:47 2005 => File C:\WINDOWS\system32\nsp11.dll tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 20:40:45 2005 => File C:\WINDOWS\tool.exe tagged as "not-a-virus:AdWare.ToolBar.HotSearchBar.g". Action Taken: No Action Taken. Mon May 23 20:42:09 2005 => File D:\Programme\Alcohol Soft\Alcohol 120\Patch.exe tagged as not-a-virus:Tool.Win32.TPE.a. No Action Taken. Mon May 23 20:42:22 2005 => File D:\Programme\Software\Alcohol 14822.zip tagged as not-a-virus:Tool.Win32.TPE.a. No Action Taken. Mon May 23 20:42:24 2005 => File D:\Programme\Software\DivX502Bundle.exe tagged as not-a-virus:Tool.WinCap.Reboot. No Action Taken. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Statistiken: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Mon May 23 19:44:03 2005 => Total Virus(es) Found: 31 Mon May 23 20:45:12 2005 => Total Virus(es) Found: 55 Mon May 23 19:44:03 2005 => Total Errors: 29 Mon May 23 20:45:12 2005 => Total Errors: 39 Mon May 23 19:44:03 2005 => Time Elapsed: 00:06:32 Mon May 23 20:45:12 2005 => Time Elapsed: 00:49:06 Mon May 23 19:44:03 2005 => Total Objects Scanned: 13229 Mon May 23 20:45:12 2005 => Total Objects Scanned: 33884 Mon May 23 19:36:30 2005 => Virus Database Date: 2005/05/23 Mon May 23 19:44:03 2005 => Virus Database Date: 2005/05/23 Mon May 23 19:44:10 2005 => Virus Database Date: 2005/05/23 Mon May 23 19:55:38 2005 => Virus Database Date: 2005/05/23 Mon May 23 20:45:12 2005 => Virus Database Date: 2005/05/23 Mon May 23 20:46:30 2005 => Virus Database Date: 2005/05/23 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~ © Haui ;-) ~~~~~~~ ~~~~~~~ Dank an Cidre ~~~~~~~ |
![]() | #2 |
| ![]() TR/Dldr.leser.A und TR/Delprot.A auf dem Rechner was ist jetzt zu tun?
__________________mfg joeyp |
![]() | #3 | |
![]() ![]() ![]() | ![]() TR/Dldr.leser.A und TR/Delprot.A auf dem RechnerZitat:
Warum? z.B. darum: infected by "Backdoor.Win32.Naninf.e" (Link zu einem "Verwandten") EDIT: War ich wohl zu langsam ![]() ![]() |
![]() | #4 |
![]() ![]() ![]() ![]() | ![]() TR/Dldr.leser.A und TR/Delprot.A auf dem Rechner Da dieser auf dem Rechner ist: Mon May 23 20:33:00 2005 => File C:\WINDOWS\system32\dgdgd.exe infected by "Backdoor.Win32.Naninf.e kommst du um ein Neuaufsetzen, am besten nach folgender Anleitung nicht herum: http://www.trojaner-board.de/showthread.php?t=12154 Warum eine Bereinigung nicht helfen kann: http://www.mathematik.uni-marburg.de...c-removal.html
__________________ ![]() ![]() |
![]() |
Themen zu TR/Dldr.leser.A und TR/Delprot.A auf dem Rechner |
ad-aware, adobe, adobe reader, antivir, antivir update, avgnt.exe, bho, check, dateien, explorer, file missing, helfen, hijack, hotkey, ics, internet, internet explorer, links, logfile, microsoft, namen, programme, software, system, system32, trojaner, update, urlsearchhook, windows, windows xp, yahoo |