|
Log-Analyse und Auswertung: smitfraud.c logfilesWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
27.08.2005, 11:48 | #1 |
| smitfraud.c logfiles hallo habe das virus nach cronos anleitung entfernt. hier die HijackThis logfile Logfile of HijackThis v1.99.1 Scan saved at 12:27:43, on 27.08.2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe C:\WINDOWS\System32\cmdtel.exe C:\WINDOWS\System32\nvsvc32.exe C:\Programme\Gemeinsame Dateien\Softwin\BitDefender Communicator\xcommsvr.exe C:\Programme\Gemeinsame Dateien\Softwin\BitDefender Scan Server\bdss.exe C:\WINDOWS\Explorer.EXE D:\Progz\System\MOTHER~1\MBM5.EXE C:\WINDOWS\System32\devldr32.exe D:\Progz\Multimedia\itunes\iTunesHelper.exe C:\Programme\QuickTime\qttask.exe C:\Programme\iPod\bin\iPodService.exe C:\WINDOWS\System32\rmctrl.exe C:\WINDOWS\System32\symcsvc.exe C:\Programme\uweo\aoew.exe C:\WINDOWS\System32\?ttrib.exe D:\Progz\System\Spybot - Search & Destroy\TeaTimer.exe C:\Dokumente und Einstellungen\Nico\Desktop\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchcentral.cc/index.php?v=4&aff=2233 R3 - URLSearchHook: (no name) - {A733F6BF-1AFF-4ED8-17A0-AC98E6D9DE4D} - control64.dll (file missing) O1 - Hosts: localhost 127.0.0.1 O1 - Hosts: localhost 127.0.0.1 O2 - BHO: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - C:\WINDOWS\System32\zggfq.dll (file missing) O2 - BHO: (no name) - {10C45269-BDF2-8619-D088-CD6942FDD99A} - C:\WINDOWS\System32\nlwbr.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Progz\System\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {55E9621C-90C2-C52D-FDCD-F44404CDF4A3} - C:\WINDOWS\System32\nlwbr.dll O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file) O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: SearchToolbar - {08BEC6AA-49FC-4379-3587-4B21E286C19E} - C:\WINDOWS\System32\zggfq.dll (file missing) O4 - HKLM\..\Run: [MBM 5] D:\Progz\System\MOTHER~1\MBM5.EXE O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [iTunesHelper] D:\Progz\Multimedia\itunes\iTunesHelper.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\System32\rmctrl.exe O4 - HKLM\..\Run: [combo.exe] combo.exe O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe O4 - HKLM\..\Run: [BDNewsAgent] C:\Programme\Softwin\BitDefender Professional Edition\bdnagent.exe O4 - HKLM\..\Run: [Dest068] xxtoolbar.exe O4 - HKCU\..\Run: [aupd] C:\WINDOWS\System32\symcsvc.exe O4 - HKCU\..\Run: [Cpat] C:\Programme\uweo\aoew.exe O4 - HKCU\..\Run: [Hhknm] C:\WINDOWS\System32\?ttrib.exe O4 - HKCU\..\Run: [driver32] keybdll.exe O4 - HKCU\..\Run: [cmon14] xsetup.exe O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Progz\System\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Microsoft Office.lnk = D:\Progz\Office\MSOffice\Office10\OSA.EXE O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://D:\Progz\Office\MSOffice\Office10\EXCEL.EXE/3000 O9 - Extra button: Recherche-Assistent - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Encarta Researcher\EROPROJ.DLL O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O12 - Plugin for .pdf: C:\Programme\Internet Explorer\PLUGINS\nppdf32.dll O15 - Trusted Zone: *.asdbiz.biz O15 - Trusted Zone: *.clickspring.net O15 - Trusted Zone: *.mt-download.com O15 - Trusted Zone: *.my-internet.info O15 - Trusted Zone: *.searchmiracle.com O15 - Trusted Zone: *.skoobidoo.com O15 - Trusted Zone: *.slotchbar.com O15 - Trusted Zone: *.windupdates.com O15 - Trusted Zone: *.asdbiz.biz (HKLM) O15 - Trusted Zone: *.clickspring.net (HKLM) O15 - Trusted Zone: *.mt-download.com (HKLM) O15 - Trusted Zone: *.my-internet.info (HKLM) O15 - Trusted Zone: *.searchmiracle.com (HKLM) O15 - Trusted Zone: *.skoobidoo.com (HKLM) O15 - Trusted Zone: *.slotchbar.com (HKLM) O15 - Trusted Zone: *.windupdates.com (HKLM) O15 - Trusted IP range: 67.19.178.84 (HKLM) O17 - HKLM\System\CCS\Services\Tcpip\..\{46BC18ED-2758-4941-80B1-50D816BDBED3}: NameServer = 69.50.176.158,85.255.112.8 O17 - HKLM\System\CCS\Services\Tcpip\..\{5B49B127-38C3-4BDC-B3C8-61128BC97858}: NameServer = 69.50.176.158,85.255.112.8 O17 - HKLM\System\CCS\Services\Tcpip\..\{93073CAE-B351-4C0A-A26B-138A2C95A7FB}: NameServer = 69.50.176.158,85.255.112.8 O17 - HKLM\System\CS1\Services\Tcpip\..\{46BC18ED-2758-4941-80B1-50D816BDBED3}: NameServer = 69.50.176.158,85.255.112.8 O17 - HKLM\System\CS2\Services\Tcpip\..\{46BC18ED-2758-4941-80B1-50D816BDBED3}: NameServer = 69.50.176.158,85.255.112.8 O21 - SSODL: System - {3AEDA741-2DFB-469B-86A3-54CCC10FD006} - vr_sys.dll (file missing) O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Programme\Gemeinsame Dateien\Softwin\BitDefender Scan Server\bdss.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe (file missing) O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe (file missing) O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe O23 - Service: Loading Outpost Connections (KDE) - Unknown owner - C:\WINDOWS\System32\cmdtel.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Programme\Softwin\BitDefender Professional Edition\vsserv.exe O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Programme\Gemeinsame Dateien\Softwin\BitDefender Communicator\xcommsvr.exe habe auch noch die ergebnisse von escan und dem tool von noahdfears tool, wenn die von belang sind. was ist jetzt noch zu tun?? danke! |
27.08.2005, 13:15 | #2 | |
| smitfraud.c logfilesZitat:
Je mehr Informationen wir haben, desto besser können wir helfen.
__________________ |
27.08.2005, 15:18 | #3 |
| smitfraud.c logfiles alles klar dann hier die escan log:
__________________~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Funde für "infected" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Sat Aug 27 15:38:32 2005 => File C:\WINDOWS\System32\symcsvc.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:38:32 2005 => File C:\Programme\uweo\aoew.exe infected by "Trojan-Downloader.Win32.PurityScan.ai" Virus! Action Taken: No Action Taken. Sat Aug 27 15:38:38 2005 => File C:\WINDOWS\System32\cmdtel.exe infected by "Email-Worm.Win32.Bagz.i" Virus! Action Taken: No Action Taken. Sat Aug 27 15:38:48 2005 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken. Sat Aug 27 15:38:49 2005 => System found infected with clickspring Spyware/Adware ({9eb320ce-be1d-4304-a081-4b4665414bef})! Action taken: No Action Taken. Sat Aug 27 15:38:52 2005 => System found infected with AdWare.ToolBar.SBSoft.h Spyware/Adware ({08BEC6AA-49FC-4379-3587-4B21E286C19E})! Action taken: No Action Taken. Sat Aug 27 15:38:55 2005 => System found infected with Media Tickets Spyware/Adware ({39da2444-065f-47cb-b27c-ccb1a39c06b7})! Action taken: No Action Taken. Sat Aug 27 15:39:35 2005 => System found infected with ZapSpot Spyware/Adware (latest.exe)! Action taken: No Action Taken. Sat Aug 27 15:41:04 2005 => File C:\Dokumente und Einstellungen\Nico\Lokale Einstellungen\Temporary Internet Files\Content.IE5\05A7KPQN\index[1].htm infected by "Exploit.HTML.Mht" Virus! Action Taken: No Action Taken. Sat Aug 27 15:41:19 2005 => File C:\Dokumente und Einstellungen\Nico\Lokale Einstellungen\Temporary Internet Files\Content.IE5\GPC7KNSV\latest[1].exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:41:28 2005 => File C:\Dokumente und Einstellungen\Nico\Lokale Einstellungen\Temporary Internet Files\Content.IE5\KTIZWDUF\vxxv[1].htm infected by "Trojan-Clicker.JS.Linker.j" Virus! Action Taken: No Action Taken. Sat Aug 27 15:41:34 2005 => File C:\Dokumente und Einstellungen\Nico\Lokale Einstellungen\Temporary Internet Files\Content.IE5\QFMFE5IF\count[1].jar infected by "Exploit.Java.ByteVerify" Virus! Action Taken: No Action Taken. Sat Aug 27 15:41:35 2005 => File C:\Dokumente und Einstellungen\Nico\Lokale Einstellungen\Temporary Internet Files\Content.IE5\QFMFE5IF\hpp3n[1].hta infected by "Trojan.JS.StartPage.a" Virus! Action Taken: No Action Taken. Sat Aug 27 15:41:41 2005 => File C:\Dokumente und Einstellungen\Nico\Lokale Einstellungen\Temporary Internet Files\Content.IE5\SLKXM7KD\latest[1].exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:41:41 2005 => File C:\Dokumente und Einstellungen\Nico\Lokale Einstellungen\Temporary Internet Files\Content.IE5\SLKXM7KD\latest[2].exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:41:48 2005 => Scanning File C:\Dokumente und Einstellungen\Nico\Lokale Einstellungen\Temporary Internet Files\Content.IE5\STW1QZ45\wp(infecteddesktop)zloader3[1].jpg [**] Sat Aug 27 15:41:52 2005 => File C:\Dokumente und Einstellungen\Nico\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UXW32XI5\classload[1].jar infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. Sat Aug 27 15:41:53 2005 => File C:\Dokumente und Einstellungen\Nico\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UXW32XI5\classload[2].jar infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken. Sat Aug 27 15:41:53 2005 => File C:\Dokumente und Einstellungen\Nico\Lokale Einstellungen\Temporary Internet Files\Content.IE5\UXW32XI5\count[1].htm infected by "Exploit.HTML.Mht" Virus! Action Taken: No Action Taken. Sat Aug 27 15:45:09 2005 => Scanning Folder: C:\Programme\Softwin\BitDefender Professional Edition\Infected\*.* Sat Aug 27 15:45:09 2005 => Scanning File C:\Programme\Softwin\BitDefender Professional Edition\Infected\sploit[1].anr [**] Sat Aug 27 15:45:09 2005 => Scanning File C:\Programme\Softwin\BitDefender Professional Edition\Infected\sploit[2].anr [**] Sat Aug 27 15:45:09 2005 => Scanning File C:\Programme\Softwin\BitDefender Professional Edition\Infected\sploit[3].anr [**] Sat Aug 27 15:48:15 2005 => File C:\WINDOWS\sys3124.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:48:15 2005 => File C:\WINDOWS\sys3139.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:48:15 2005 => File C:\WINDOWS\sys322.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:48:15 2005 => File C:\WINDOWS\sys3227.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:48:15 2005 => File C:\WINDOWS\sys3257.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:48:15 2005 => File C:\WINDOWS\sys330.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:48:15 2005 => File C:\WINDOWS\sys3641.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:48:15 2005 => File C:\WINDOWS\sys3718.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:48:15 2005 => File C:\WINDOWS\sys3754.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:48:17 2005 => File C:\WINDOWS\system32\abc.exe infected by "Trojan-PSW.Win32.LdPinch.os" Virus! Action Taken: No Action Taken. Sat Aug 27 15:48:34 2005 => File C:\WINDOWS\system32\csrka.exe infected by "Trojan-Dropper.Win32.Vidro.u" Virus! Action Taken: No Action Taken. Sat Aug 27 15:53:02 2005 => File C:\WINDOWS\system32\doser.exe infected by "Trojan.Win32.Small.fh" Virus! Action Taken: No Action Taken. Sat Aug 27 15:53:17 2005 => File C:\WINDOWS\system32\explorer6s4.exe infected by "Trojan-Downloader.Win32.Small.biq" Virus! Action Taken: No Action Taken. Sat Aug 27 15:53:29 2005 => File C:\WINDOWS\system32\init32m.exe infected by "Trojan-Downloader.Win32.Agent.ho" Virus! Action Taken: No Action Taken. Sat Aug 27 15:53:39 2005 => File C:\WINDOWS\system32\latest.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:53:49 2005 => File C:\WINDOWS\system32\maxd1.exe infected by "Trojan.Win32.Dialer.ay" Virus! Action Taken: No Action Taken. Sat Aug 27 15:54:57 2005 => File C:\WINDOWS\system32\sender.exe infected by "Email-Worm.Win32.Bagz.j" Virus! Action Taken: No Action Taken. Sat Aug 27 15:55:41 2005 => File C:\WINDOWS\system32\vxgamet1.exe infected by "Trojan.Win32.LowZones.y" Virus! Action Taken: No Action Taken. Sat Aug 27 15:55:41 2005 => File C:\WINDOWS\system32\vxh8jkdq1.exe infected by "Trojan-Downloader.Win32.Small.bho" Virus! Action Taken: No Action Taken. Sat Aug 27 15:55:41 2005 => File C:\WINDOWS\system32\vxh8jkdq2.exe infected by "not-virus:Hoax.Win32.Renos.l" Virus! Action Taken: No Action Taken. Sat Aug 27 15:55:41 2005 => File C:\WINDOWS\system32\vxh8jkdq5.exe infected by "Trojan-Downloader.Win32.Small.awa" Virus! Action Taken: No Action Taken. Sat Aug 27 15:55:41 2005 => File C:\WINDOWS\system32\vxh8jkdq7.exe infected by "Trojan-Downloader.Win32.Small.atl" Virus! Action Taken: No Action Taken. Sat Aug 27 15:55:41 2005 => File C:\WINDOWS\system32\vxh8jkdq8.exe infected by "Trojan-Downloader.Win32.Small.bho" Virus! Action Taken: No Action Taken. Sat Aug 27 15:56:06 2005 => File C:\WINDOWS\system32\~update.exe infected by "Trojan.Win32.Crypt.l" Virus! Action Taken: No Action Taken. Sat Aug 27 16:03:48 2005 => Total Disinfected Files: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Funde für "tagged" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Sat Aug 27 15:38:20 2005 => File C:\WINDOWS\System32\nlwbr.dll tagged as "not-a-virus:AdWare.PurityScan.ak". Action Taken: No Action Taken. Sat Aug 27 15:40:10 2005 => File C:\Dokumente und Einstellungen\Administrator\Desktop\OiUninstaller.exe tagged as "not-a-virus:AdWare.PurityScan.bu". Action Taken: No Action Taken. Sat Aug 27 15:54:19 2005 => File C:\WINDOWS\system32\ntfsnlpa.exe tagged as "not-a-virus:AdWare.Msnagent.b". Action Taken: No Action Taken. Sat Aug 27 15:54:50 2005 => File C:\WINDOWS\system32\rdsndin.exe tagged as "not-a-virus:AdWare.FindSpy.a". Action Taken: No Action Taken. Sat Aug 27 15:59:15 2005 => File D:\Progz\Internet\Gamers.IRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.603. No Action Taken. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Statistiken: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Sat Aug 27 15:39:35 2005 => Offending file found: C:\WINDOWS\System32\latest.exe Sat Aug 27 16:03:48 2005 => Total Virus(es) Found: 49 Sat Aug 27 16:03:48 2005 => Total Errors: 323 Sat Aug 27 16:03:48 2005 => Time Elapsed: 00:25:40 Sat Aug 27 16:03:48 2005 => Total Objects Scanned: 49742 Sat Aug 27 15:37:49 2005 => Virus Database Date: 2005/08/24 Sat Aug 27 16:03:48 2005 => Virus Database Date: 2005/08/24 Sat Aug 27 16:05:13 2005 => Virus Database Date: 2005/08/24 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ ~~~~~~~ © Haui ;-) ~~~~~~~ ~~~~~~~ Dank an Cidre ~~~~~~~ und noch die smitfiles smitRem log file version 2.3 by noahdfear ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Pre-run Files Present ~~~ Program Files ~~~ ~~~ Shortcuts ~~~ ~~~ Favorites ~~~ ~~~ system32 folder ~~~ ~~~ Icons in System32 ~~~ ~~~ Windows directory ~~~ ~~~ Drive root ~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Post-run Files Present ~~~ Program Files ~~~ ~~~ Shortcuts ~~~ ~~~ Favorites ~~~ ~~~ system32 folder ~~~ ~~~ Icons in System32 ~~~ ~~~ Windows directory ~~~ ~~~ Drive root ~~~ ~~~ Wininet.dll ~~~ CLEAN! vielen dank für die hilfe! |
27.08.2005, 16:05 | #4 |
| smitfraud.c logfiles Ich hab leider schlechte Nachrichten für dich. Escan hat ja u.a. diesen gefunden: Trojan.Win32.Crypt.l-->das ist folgender: http://securityresponse.symantec.com...n.abwiz.d.html Da dieser Backdoor-Funktionen enthält, ist dein System als kompromittiert zu betrachten und dir kann nur geraten werde, dein System neu aufzusetzen. Gehe nach dieser Anleitung vor, im sowas in Zukunft vermeiden: http://www.trojaner-board.de/showthread.php?t=12154 Auch die beiden Links in meiner Signatur sollten dich interessieren.
__________________ Only cronos endures |
27.08.2005, 16:57 | #5 |
| smitfraud.c logfiles ok, :/ dann werd ich mal loslegen! vbielen dank für deine hilfe gruß, iggo |
Themen zu smitfraud.c logfiles |
.dll, adobe, bho, computer, cyberlink, defender, desktop, einstellungen, escan, excel, explorer, hijack, hijackthis, home, internet, internet explorer, logfile, microsoft, nvidia, programme, rundll, software, system, urlsearchhook, virus, windows, windows xp |