| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: eSCan zeigt Viren ohne Ende an.....Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
30.11.2005, 21:23
| #1 |
 |  eSCan zeigt Viren ohne Ende an..... Hallo Leute, beim durchlaufen von escan im abges. Modus hat es mir 91 Viren oder sowat angezeigt. Hier das Log von find.bat. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Funde für "infected" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Wed Nov 30 18:44:37 2005 => System found infected with ExactSearchBar Spyware/Adware ({014da6c1-189f-421a-88cd-07cfe51cff10})! Action taken: No Action Taken. Wed Nov 30 18:44:39 2005 => System found infected with mybar Spyware/Adware ({014da6c9-189f-421a-88cd-07cfe51cff10})! Action taken: No Action Taken. Wed Nov 30 18:54:49 2005 => System found infected with cws.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken. Wed Nov 30 18:55:05 2005 => System found infected with zipitpro Spyware/Adware (C:\WINDOWS\iun6002.exe)! Action taken: No Action Taken. Wed Nov 30 19:03:37 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\1Click DVD Copy Pro 1.0.0.6.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:38 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\3DS Max7+SP13DS Max8.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:38 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Ahead Nero Premium 7.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:39 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Ashampoo Burning Studio 5.5.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:39 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Ashampoo Burning Studio 5.5.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:39 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Come and See.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:40 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Corel Painter Essentials 3.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:40 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Cucusoft Video Converter Pro 7.07.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:41 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Directory Opus 8.2.0.2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:41 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Doom - Soundtrack (2005).zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:42 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Easy CD-DA Extractor 8.2.4.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:42 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\File & Folder Protectors AIO.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:42 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Hacker 2005 - The Broken Link.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:43 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Harry Potter And The Goblet Of Fire.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:43 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Hide IP Platinum 2.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:43 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Hiren`s BootCD 7.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:44 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Jarhead (2005).zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:44 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\NewLive All Media Fixer Pro 5.3.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:44 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Nico`s Commander 5.58.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:45 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\NTI CD & DVD Maker Platinum 7.0.0.4703.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:45 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\PC-Cillin Internet Security 2006.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:46 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Pinnacle TitleDeko Pro 2.0.1634.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:46 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Power Video Converter 1.5.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:46 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\RapidShare Harvester.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:47 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Rapidshare Premium Accounts.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:47 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\RegDoctor 1.43.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:48 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Selteco Bannershop GIF Animator 5.0.6.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:48 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\SpyRemover 2.45.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:48 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Stardock Aquarium Desktop 2006.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:49 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Symantec WinFax Pro 10.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:49 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\System Mechanic Professional 6.0 m.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:49 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\The Modern Survival Retreat.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:50 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\The Perfect Man 2005.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:50 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Trillian Pro 3.1.0.121.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:51 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Tuneup Utilities 2006 5.0.2331.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:51 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Vista Explorer.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:51 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\WinDVD Platinum 7.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:52 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\WinDVD Recorder 5 Platinum.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:52 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Worms 4 Mayhem.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:03:53 2005 => File C:\Dokumente und Einstellungen\Besitzer\Complete\Zoo Tycoon 2 Endangered Species.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:07 2005 => File C:\My Shared Folder\1Click DVD Copy Pro 1.0.0.6.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:07 2005 => File C:\My Shared Folder\3DS Max7+SP13DS Max8.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:08 2005 => File C:\My Shared Folder\Ahead Nero Premium 7.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:08 2005 => File C:\My Shared Folder\Ashampoo Burning Studio 5.5.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:09 2005 => File C:\My Shared Folder\Ashampoo Burning Studio 5.5.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:09 2005 => File C:\My Shared Folder\Come and See.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:09 2005 => File C:\My Shared Folder\Corel Painter Essentials 3.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:10 2005 => File C:\My Shared Folder\Cucusoft Video Converter Pro 7.07.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:10 2005 => File C:\My Shared Folder\Directory Opus 8.2.0.2.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:10 2005 => File C:\My Shared Folder\Doom - Soundtrack (2005).zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:11 2005 => File C:\My Shared Folder\Easy CD-DA Extractor 8.2.4.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:11 2005 => File C:\My Shared Folder\File & Folder Protectors AIO.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:12 2005 => File C:\My Shared Folder\Hacker 2005 - The Broken Link.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:12 2005 => File C:\My Shared Folder\Harry Potter And The Goblet Of Fire.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:12 2005 => File C:\My Shared Folder\Hide IP Platinum 2.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:13 2005 => File C:\My Shared Folder\Hiren`s BootCD 7.5.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:13 2005 => File C:\My Shared Folder\Jarhead (2005).zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:13 2005 => File C:\My Shared Folder\NewLive All Media Fixer Pro 5.3.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:14 2005 => File C:\My Shared Folder\Nico`s Commander 5.58.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:14 2005 => File C:\My Shared Folder\NTI CD & DVD Maker Platinum 7.0.0.4703.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:14 2005 => File C:\My Shared Folder\PC-Cillin Internet Security 2006.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:15 2005 => File C:\My Shared Folder\Pinnacle TitleDeko Pro 2.0.1634.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:15 2005 => File C:\My Shared Folder\Power Video Converter 1.5.1.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:16 2005 => File C:\My Shared Folder\RapidShare Harvester.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:16 2005 => File C:\My Shared Folder\Rapidshare Premium Accounts.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:16 2005 => File C:\My Shared Folder\RegDoctor 1.43.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:17 2005 => File C:\My Shared Folder\Selteco Bannershop GIF Animator 5.0.6.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:17 2005 => File C:\My Shared Folder\SpyRemover 2.45.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:18 2005 => File C:\My Shared Folder\Stardock Aquarium Desktop 2006.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:18 2005 => File C:\My Shared Folder\Symantec WinFax Pro 10.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:18 2005 => File C:\My Shared Folder\System Mechanic Professional 6.0 m.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:19 2005 => File C:\My Shared Folder\The Modern Survival Retreat.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:19 2005 => File C:\My Shared Folder\The Perfect Man 2005.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:19 2005 => File C:\My Shared Folder\Trillian Pro 3.1.0.121.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:20 2005 => File C:\My Shared Folder\Tuneup Utilities 2006 5.0.2331.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:20 2005 => File C:\My Shared Folder\Vista Explorer.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:20 2005 => File C:\My Shared Folder\WinDVD Platinum 7.0.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:21 2005 => File C:\My Shared Folder\WinDVD Recorder 5 Platinum.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:21 2005 => File C:\My Shared Folder\Worms 4 Mayhem.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 19:18:22 2005 => File C:\My Shared Folder\Zoo Tycoon 2 Endangered Species.zip infected by "Worm.Win32.VB.an" Virus! Action Taken: No Action Taken. Wed Nov 30 20:15:31 2005 => Total Disinfected Files: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Funde für "tagged" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Wed Nov 30 18:44:05 2005 => File C:\Programme\MySearch\bar\1.bin\S4BAR.DLL tagged as "not-a-virus:AdWare.Win32.MySearch.g". Action Taken: No Action Taken. Wed Nov 30 19:40:43 2005 => File C:\Programme\Mozilla Firefox\plugins\NPMySrch.dll tagged as "not-a-virus:AdWare.Win32.MyWebSearch.i". Action Taken: No Action Taken. Wed Nov 30 19:40:54 2005 => File C:\Programme\MySearch\bar\1.bin\NPMYSRCH.DLL tagged as "not-a-virus:AdWare.Win32.MyWebSearch.i". Action Taken: No Action Taken. Wed Nov 30 19:40:54 2005 => File C:\Programme\MySearch\bar\1.bin\S4PLUGIN.DLL tagged as "not-a-virus:AdWare.Win32.MyWebSearch.l". Action Taken: No Action Taken. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Funde für "offending" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Wed Nov 30 18:45:24 2005 => Offending value found in HKCU\Software\gnu !!! Wed Nov 30 18:47:47 2005 => Offending value found in HKLM\Software\Microsoft\Windows\CurrentVersion\uninstall\limewire !!! Wed Nov 30 18:47:47 2005 => Offending value found in HKLM\Software\magnet\handlers\limewire !!! Wed Nov 30 18:47:47 2005 => Offending value found in HKLM\Software\limewire !!! Wed Nov 30 18:47:47 2005 => Offending value found in HKCU\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\limewire !!! Wed Nov 30 18:47:47 2005 => Offending Folder found: C:\PROGRA~1\limewire Wed Nov 30 18:47:47 2005 => Offending Folder found: C:\DOKUME~1\Besitzer\STARTM~1\PROGRA~1\limewire Wed Nov 30 18:48:01 2005 => Offending value found in HKLM\Software\mysearch !!! Wed Nov 30 18:48:01 2005 => Offending Folder found: C:\PROGRA~1\mysearch Wed Nov 30 18:55:05 2005 => Offending file found: C:\WINDOWS\iun6002.exe ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Statistiken: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Wed Nov 30 20:15:31 2005 => Total Virus(es) Found: 91 Wed Nov 30 20:15:31 2005 => Total Errors: 471 Wed Nov 30 20:15:31 2005 => Time Elapsed: 01:31:37 Wed Nov 30 20:15:31 2005 => Total Objects Scanned: 71507 Wed Nov 30 18:42:58 2005 => Virus Database Date: 2005/11/30 Wed Nov 30 20:15:31 2005 => Virus Database Date: 2005/11/30 Wed Nov 30 20:44:09 2005 => Virus Database Date: 2005/11/30 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~ © Haui ;-) ~~~~~~~ ~~~~~~~ Dank an Cidre ~~~~~~~ bin ich komplett am Ar**** oder hab ich einfach nur viel Arbeit vor mir?? Bitte help me Meisters.... Im übrigen meldet mir jedes mal mein virenprogramm (McAffee) aber auch NUR DANN, wenn ich ad-aware starte, den wurm alcan. ich lösche ihn auch aus dem ordner wo er gefunden wird, allerdings vergebens, ist nach dem neustart wieder da |
| Themen zu eSCan zeigt Viren ohne Ende an..... |
| ad-aware, besitzer, converter, desktop, einstellungen, escan, essentials, file, firefox, help, infected, internet, internet security, limewire, log, mozilla, mozilla firefox, mysearch, neustart, ordner, programme, security, software, soundtrack, start menu, studio, symantec, system, tuneup utilities, video converter, viren, virus, vista, windows, wurm |
Baum-Darstellung