Teil 2:
Zitat:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "tagged"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mon Oct 03 11:27:05 2005 => File C:\WINDOWS\system32\r_server.exe tagged as not-a-virus:RemoteAdmin.Win32.RAdmin.22. No Action Taken.
Mon Oct 03 11:35:33 2005 => File C:\Dokumente und Einstellungen\*****\Eigene Dateien\Downloads\Cracktools\rainbowcrack-1.2-win.zip tagged as not-a-virus:PSWTool.Win32.Rainbow.12.a. No Action Taken.
Mon Oct 03 11:47:37 2005 => File C:\Dokumente und Einstellungen\*****\Eigene Dateien\Downloads\Hackertools\a_msn_monitor.exe tagged as not-a-virus:Monitor.Win32.MsnChatMonitor.33. No Action Taken.
Mon Oct 03 11:57:41 2005 => File C:\Dokumente und Einstellungen\*****\Eigene Dateien\Downloads\slimftpd\SlimFTPd.exe tagged as not-a-virus:Server-FTP.Win32.SlimFTPd.316. No Action Taken.
Mon Oct 03 11:57:41 2005 => File C:\Dokumente und Einstellungen\*****\Eigene Dateien\Downloads\slimftpd.zip tagged as not-a-virus:Server-FTP.Win32.SlimFTPd.316. No Action Taken.
Mon Oct 03 11:57:58 2005 => File C:\Dokumente und Einstellungen\*****\Eigene Dateien\Downloads\susetup.exe tagged as not-a-virus:Server-FTP.Win32.Serv-U.6000. No Action Taken.
Mon Oct 03 12:10:57 2005 => File C:\Dokumente und Einstellungen\*****\Eigene Dateien\Downloads\Tools\Desktopstyling\Style XP\61178.exe tagged as "not-a-virus:AdWare.Win32.Quick.a". Action Taken: No Action Taken.
Mon Oct 03 12:13:21 2005 => File C:\Dokumente und Einstellungen\*****\Eigene Dateien\Downloads\Tools\Internettools\Filesharetools\BSINSTALL.exe tagged as "not-a-virus:AdWare.Win32.SaveNow.z". Action Taken: No Action Taken.
Mon Oct 03 12:44:34 2005 => File C:\Dokumente und Einstellungen\*****\Eigene Dateien\Downloads\Tools\Voicekommunikation\mirc614.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.614. No Action Taken.
Mon Oct 03 13:39:56 2005 => File C:\My Downloads\MiRC.v6.16.WinALL.Incl.Keygen-NGEN.rar tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
Mon Oct 03 13:41:26 2005 => File C:\My Downloads\Remote Administrator (Radmin) 2.2 + serial + manual + tools.rar tagged as not-a-virus:RemoteAdmin.Win32.RAdmin.20. No Action Taken.
Mon Oct 03 16:08:46 2005 => File C:\Programme\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
Mon Oct 03 16:12:35 2005 => File C:\Programme\Radmin\raddrv.dll tagged as not-a-virus:RemoteAdmin.Win32.RAdmin.20. No Action Taken.
Mon Oct 03 16:12:35 2005 => File C:\Programme\Radmin\radmin.exe tagged as not-a-virus:RemoteAdmin.Win32.RAdmin.22. No Action Taken.
Mon Oct 03 16:12:36 2005 => File C:\Programme\Radmin\r_server.exe tagged as not-a-virus:RemoteAdmin.Win32.RAdmin.22. No Action Taken.
Mon Oct 03 17:06:57 2005 => File C:\System Volume Information\_restore{BB004485-BFF1-4856-BBA8-D475C2DDE5ED}\RP156\A0031840.exe tagged as not-a-virus:Monitor.Win32.MsnChatMonitor.33. No Action Taken.
Mon Oct 03 18:07:56 2005 => File C:\System Volume Information\_restore{BB004485-BFF1-4856-BBA8-D475C2DDE5ED}\RP216\A0051700.exe tagged as "not-a-virus:Dialer.Win32.gen". Action Taken: No Action Taken.
Mon Oct 03 18:57:07 2005 => File C:\WINDOWS\system32\raddrv.dll tagged as not-a-virus:RemoteAdmin.Win32.RAdmin.20. No Action Taken.
Mon Oct 03 19:15:29 2005 => File D:\Sicherung\Eigene Dateien\Funstuff\Animationen und Games\Games\sex2000.exe tagged as "not-a-virus:Porn-Dialer.Win32.Generic". Action Taken: No Action Taken.
Mon Oct 03 19:54:07 2005 => File D:\System Volume Information\_restore{BB004485-BFF1-4856-BBA8-D475C2DDE5ED}\RP151\A0031095.exe tagged as not-a-virus:Server-FTP.Win32.Serv-U.6000. No Action Taken.
Mon Oct 03 20:46:26 2005 => File D:\System Volume Information\_restore{BB004485-BFF1-4856-BBA8-D475C2DDE5ED}\RP151\A0031176.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.614. No Action Taken.
Mon Oct 03 21:17:45 2005 => File D:\System Volume Information\_restore{BB004485-BFF1-4856-BBA8-D475C2DDE5ED}\RP151\A0031294.exe tagged as "not-a-virus:AdWare.Win32.SaveNow.z". Action Taken: No Action Taken.
Mon Oct 03 21:18:41 2005 => File D:\System Volume Information\_restore{BB004485-BFF1-4856-BBA8-D475C2DDE5ED}\RP151\A0031305.exe tagged as "not-a-virus:AdWare.Win32.Quick.a". Action Taken: No Action Taken.
Mon Oct 03 21:34:46 2005 => File D:\System Volume Information\_restore{BB004485-BFF1-4856-BBA8-D475C2DDE5ED}\RP151\A0031363.exe tagged as not-a-virus:Server-FTP.Win32.SlimFTPd.316. No Action Taken.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "offending"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mon Oct 03 11:27:18 2005 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uninstall\bearshare !!!
Mon Oct 03 11:27:18 2005 => Offending Key found: HKLM\Software\magnet\handlers\bearshare !!!
Mon Oct 03 11:27:18 2005 => Offending Key found: HKLM\Software\bearshare !!!
Mon Oct 03 11:27:18 2005 => Offending Key found: HKLM\Software\freshdevices !!!
Mon Oct 03 11:27:18 2005 => Offending value found in HKLM\Software\Licenses: {i56b3cf0d9ab991e1} !!!
Mon Oct 03 11:27:18 2005 => Offending value found in HKLM\Software\Licenses: {056b3cf0d9ab991e1} !!!
Mon Oct 03 11:27:22 2005 => Offending file found: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\internet\filesharing\bearshare.lnk
Mon Oct 03 11:27:23 2005 => Offending file found: C:\Dokumente und Einstellungen\All Users\Startmenü\programme\internet\filesharing\bearshare.lnk
Mon Oct 03 11:27:24 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\emulation\mame32\folders\version.ini
Mon Oct 03 11:27:25 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\flash\flash_chec3f8c1a3ee6939\index.html
Mon Oct 03 11:27:26 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\hackertools\back orifice 2000\pelck204\readme.url
Mon Oct 03 11:27:26 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\hackertools\optix\optixpro133\builder\pelck204\readme.url
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\documentation\installation guide\data\install.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\tools_and_scripts\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\tools_and_scripts\ssi_templates\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\cache\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\ips_kernel\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\lang\en\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\modules\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\retail\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\skin_acp\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\skin_acp\ipb2_standard\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\skin_cache\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\sources\admin\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\sources\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\sources\lib\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\sources\misc\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\sources\sql\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\style_avatars\index.html
Mon Oct 03 11:27:27 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\style_emoticons\default\index.html
Mon Oct 03 11:27:28 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\style_images\1\folder_mime_types\index.html
Mon Oct 03 11:27:28 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\style_images\1\folder_team_icons\index.html
Mon Oct 03 11:27:28 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\style_images\1\index.html
Mon Oct 03 11:27:28 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\style_images\index.html
Mon Oct 03 11:27:28 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\php\invision powerboard\2p0p0pf3\upload\uploads\index.html
Mon Oct 03 11:27:30 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\phpbb\phpbb2-2.0.17-deutsch\phpbb2\docs\install.html
Mon Oct 03 11:27:31 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\phpbb-2.0.14\phpbb2\docs\install.html
Mon Oct 03 11:27:32 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\tools\internettools\icq\icq server\icqservr\server.exe
Mon Oct 03 11:27:34 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\tools\programmieren\googleapi\googleapi\javadoc\index.html
Mon Oct 03 11:27:34 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\tools\videobearbeitung\hypercamv1.72.00loaderlash\loader.exe
Mon Oct 03 11:27:35 2005 => Offending Folder found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\tools\webserver\phpmyadmin-2.6.4-rc1\phpmyadmin\libraries\dbi
Mon Oct 03 11:27:35 2005 => Offending Folder found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\downloads\tools\webserver\phpmyadmin-2.6.4-rc1\phpmyadmin-2.6.4-rc1\libraries\dbi
Mon Oct 03 11:27:39 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\visual studio projects\windowsapplication1\bin\axinterop.shdocvw.dll
Mon Oct 03 11:27:39 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\visual studio projects\windowsapplication1\bin\interop.shdocvw.dll
Mon Oct 03 11:27:39 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\visual studio projects\windowsapplication1\obj\axinterop.shdocvw.dll
Mon Oct 03 11:27:39 2005 => Offending file found: C:\Dokumente und Einstellungen\*****\Eigene Dateien\visual studio projects\windowsapplication1\obj\interop.shdocvw.dll
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Statistiken:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mon Oct 03 21:59:28 2005 => Total Virus(es) Found: 120
Mon Oct 03 21:59:28 2005 => Total Errors: 702
Mon Oct 03 21:59:28 2005 => Time Elapsed: 10:32:20
Mon Oct 03 21:59:28 2005 => Total Objects Scanned: 211517
Mon Oct 03 11:25:53 2005 => Virus Database Date: 2005/10/03
Mon Oct 03 21:59:28 2005 => Virus Database Date: 2005/10/03
Mon Oct 03 22:17:41 2005 => Virus Database Date: 2005/10/03
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~ © Haui ;-) ~~~~~~~
~~~~~~~ Dank an Cidre ~~~~~~~
|
P.S.: Ist 10,5 Stunden Scanzeit eigentlich normal? (ca. 107 GB Daten)
04.10.2005, 14:36
Baum-Darstellung