Hallo an alle guten Geister,

als unerfahrener Boardnutzer musste ich mich erst einmal durcharbeiten und auch Anleitungen lesen lernen. Jetzt habe ich ein Log erzeugt, welches duch find verdichtet wurde. Ich hoffe jetzt komme ich einen Schritt weiter.

Funde für "infected"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sun Feb 12 12:44:33 2006 => File C:\WINDOWS\system32\dxmpp.dll infected by "not-virus:Hoax.Win32.Renos.bg" Virus! Action Taken: No Action Taken.
Sun Feb 12 12:44:36 2006 => File C:\WINDOWS\system32\dxmpp.dll infected by "not-virus:Hoax.Win32.Renos.bg" Virus! Action Taken: No Action Taken.
Sun Feb 12 12:44:50 2006 => System found infected with searchexe Spyware/Adware ({807553e5-5146-11d5-a672-00b0d022e945})! Action taken: No Action Taken.
Sun Feb 12 12:44:51 2006 => System found infected with adware.toolbar.sbsoft.h Spyware/Adware ({08bec6aa-49fc-4379-3587-4b21e286c19e})! Action taken: No Action Taken.
Sun Feb 12 12:44:55 2006 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.
Sun Feb 12 12:44:58 2006 => System found infected with hotbar Spyware/Adware (wbemess.lo_)! Action taken: No Action Taken.
Sun Feb 12 12:46:14 2006 => Scanning File C:\Dokumente und Einstellungen\aaaaa home\Favoriten\WinTotal Forum - Spy Trooper (SpyAxe) your computer is infected.url
Sun Feb 12 12:47:28 2006 => Scanning Folder: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED\*.*
Sun Feb 12 12:48:13 2006 => Scanning File C:\Programme\a-squared\infected.txt
Sun Feb 12 13:22:13 2006 => File C:\WINDOWS\system32\favset.exe infected by "Trojan.Win32.Favadd.an" Virus! Action Taken: No Action Taken.
Sun Feb 12 13:38:40 2006 => File G:\aaaaa\Dokumente und Einstellungen\Family\Anwendungsdaten\Sun\Java\Depl oyment\cache\javapi\v1.0\file\Counter.class-4c7a9dbf-6d8bbc0d.class infected by "Trojan.Java.ClassLoader.c" Virus! Action Taken: No Action Taken.
Sun Feb 12 13:38:41 2006 => File G:\aaaaa\Dokumente und Einstellungen\Family\Anwendungsdaten\Sun\Java\Depl oyment\cache\javapi\v1.0\file\Counter.class-5c16ed82-69431dee.class infected by "Trojan.Java.ClassLoader.ab" Virus! Action Taken: No Action Taken.
Sun Feb 12 13:38:41 2006 => File G:\aaaaa\Dokumente und Einstellungen\Family\Anwendungsdaten\Sun\Java\Depl oyment\cache\javapi\v1.0\file\Counter.class-6e56380e-1f650856.class infected by "Trojan.Java.ClassLoader.ab" Virus! Action Taken: No Action Taken.
Sun Feb 12 13:38:52 2006 => File G:\aaaaa\Dokumente und Einstellungen\Family\Anwendungsdaten\Sun\Java\Depl oyment\cache\javapi\v1.0\file\omfg.class-38670071-4830b70c.class infected by "Trojan-Downloader.Java.OpenStream.y" Virus! Action Taken: No Action Taken.
Sun Feb 12 13:40:46 2006 => File G:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\TIBS.zip infected by "Password-protected-EXE" Virus! Action Taken: No Action Taken.
Sun Feb 12 13:44:11 2006 => Total Disinfected Objects: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "tagged"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sun Feb 12 12:44:36 2006 => File C:\WINDOWS\system32\ctseqchk.dll tagged as "not-a-virus:AdWare.Win32.BHO.aa". Action Taken: No Action Taken.
Sun Feb 12 12:52:22 2006 => Scanning File C:\Programme\ALDI Sued Foto Service\ALDI_Foto_Manager_Free\Icons\Tagged Image File Format.ico
Sun Feb 12 13:23:33 2006 => File C:\WINDOWS\system32\tsapqcmp.dll tagged as "not-a-virus:AdWare.Win32.BHO.aa". Action Taken: No Action Taken.
Sun Feb 12 13:34:41 2006 => File F:\Utilities\Antiviren\translator.exe tagged as "not-a-virus:AdWare.Win32.BHO.aa". Action Taken: No Action Taken.
Sun Feb 12 13:35:22 2006 => File F:\Utilities\Kopieren\BSINSTALL.exe tagged as "not-a-virus:AdWare.Win32.SaveNow.bi". Action Taken: No Action Taken.
Sun Feb 12 13:44:06 2006 => File G:\seuchenfolder\hostetc\hosts.20040213-075733.backup tagged as "not-a-virus:AdWare.Win32.XmlMimeFilter.a". Action Taken: No Action Taken.
Sun Feb 12 13:44:06 2006 => File G:\seuchenfolder\hostetc\hosts.20040217-181211.backup tagged as "not-a-virus:AdWare.Win32.XmlMimeFilter.a". Action Taken: No Action Taken.
Sun Feb 12 13:44:07 2006 => File G:\seuchenfolder\hostetc\hosts.20040229-122411.backup tagged as "not-a-virus:AdWare.Win32.XmlMimeFilter.a". Action Taken: No Action Taken.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "offending"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sun Feb 12 12:44:55 2006 => Offending file found: C:\Dokumente und Einstellungen\aaaaa home\Desktop\internet.lnk
Sun Feb 12 12:44:56 2006 => Offending Folder found: C:\Dokumente und Einstellungen\aaaaa home\Eigene Dateien\spysheriff
Sun Feb 12 12:44:58 2006 => Offending file found: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\spybot - search & destroy\backups\wbemess.lo_
Sun Feb 12 12:44:58 2006 => Offending Folder found: C:\Dokumente und Einstellungen\aaaaa home\Eigene Dateien\spysheriff
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Statistiken:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sun Feb 12 13:44:11 2006 => Total Objects Scanned: 68856
Sun Feb 12 13:44:11 2006 => Total Critical Objects: 21
Sun Feb 12 13:44:11 2006 => Total Disinfected Objects: 0
Sun Feb 12 13:44:11 2006 => Total Deleted Objects: 0
Sun Feb 12 13:44:11 2006 => Total Errors: 234
Sun Feb 12 13:44:11 2006 => Time Elapsed: 00:59:48
Sun Feb 12 12:01:22 2006 => Virus Database Date: 2/3/2006
Sun Feb 12 12:08:59 2006 => Virus Database Date: 2/12/2006
Sun Feb 12 12:17:42 2006 => Virus Database Date: 2/12/2006
Sun Feb 12 12:43:40 2006 => Virus Database Date: 2/12/2006
Sun Feb 12 13:44:11 2006 => Virus Database Date: 2/12/2006
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~ © Haui ;-) ~~~~~~~
~~~~~~~ Dank an Cidre ~~~~~~~

Danke für die Hilfe!

Gruß
aff_un_zo

Hallo,

unterlasse zukünftig diese Crosspostings!

Ein Thread sollte für dein Problem völlig ausreichend sein und deshalb geht's hier weiter -> http://www.trojaner-board.de/showthread.php?t=26733.

Danke!

btw:
Thread in die Tonne verschoben!