Hallo,

ich bräuchte mal Hilfe mit meinem heute erstellten Escan-Log.
Habe die Scan-Optionen vorweg reinkopiert. Die "infected"-Hinweise habe ich fett markiert.
Was bedeuten diese Hinweise.
Vor allem 00guard.com !?

Für eure Hilfe wäreich sehr dankbar.

Gruß

VincentVega


Fri Feb 24 16:10:02 2006 => ***** Scanning Registry and File system for Adware/Spyware *****
Fri Feb 24 16:10:02 2006 => Loading Spyware Signatures from new External Database (Size: 152733).
Fri Feb 24 16:10:02 2006 => Indexed Spyware Databases Successfully Created...

Fri Feb 24 16:10:03 2006 => Offending Key found: HKLM\Software\freshdevices !!!
Fri Feb 24 16:10:05 2006 => Object "fresh devices Spyware/Adware" found in File System! Action Taken: No Action Taken.

Fri Feb 24 15:48:07 2006 => **********************************************************
Fri Feb 24 15:48:07 2006 => MicroWorld Anti Virus & Spyware Toolkit Utility.
Fri Feb 24 15:48:07 2006 => Copyright © 2003-2006, MicroWorld Technologies Inc.
Fri Feb 24 15:48:07 2006 => **********************************************************
Fri Feb 24 15:48:07 2006 => Version 8.1.8 (C:\BASES_X\MWAVSCAN.COM)
Fri Feb 24 15:48:07 2006 => Log File: C:\BASES_X\MWAV.LOG
Fri Feb 24 15:48:07 2006 => Last Scan Date and Time: 04.02.2006 21:13:57
Fri Feb 24 15:48:07 2006 => MWAV Registered: FALSE.
Fri Feb 24 15:48:07 2006 => OS Type: Windows Workstation
Fri Feb 24 15:48:07 2006 => Local Fixed Drives: c:\,d:\
Fri Feb 24 15:48:07 2006 => MWAV Mode: Only Scan files.
Fri Feb 24 15:48:07 2006 => Latest Date of files inside MWAV: 16 Feb 2006 12:40:42.
Fri Feb 24 15:48:10 2006 => AV Library Loaded...
Fri Feb 24 15:48:10 2006 => MWAV doing self scanning...
Fri Feb 24 15:48:10 2006 => Scanning File C:\BASES_X\kavss.exe
Fri Feb 24 15:48:10 2006 => Scanning File C:\BASES_X\Getvlist.exe
Fri Feb 24 15:48:10 2006 => Scanning File C:\BASES_X\kavss.dll
Fri Feb 24 15:48:10 2006 => Scanning File C:\BASES_X\kavssdi.dll
Fri Feb 24 15:48:10 2006 => Scanning File C:\BASES_X\kavssi.dll
Fri Feb 24 15:48:10 2006 => Scanning File C:\BASES_X\kavvlg.dll
Fri Feb 24 15:48:10 2006 => Scanning File C:\BASES_X\msvlclnt.dll
Fri Feb 24 15:48:10 2006 => Scanning File C:\BASES_X\ipc.dll
Fri Feb 24 15:48:10 2006 => Scanning File C:\BASES_X\main.avi
Fri Feb 24 15:48:10 2006 => Scanning File C:\BASES_X\virus.avi
Fri Feb 24 15:48:10 2006 => MWAV files are clean.
Fri Feb 24 15:48:12 2006 => Virus Database Date: 2/16/2006
Fri Feb 24 15:48:12 2006 => Virus Database Count: 177018
Fri Feb 24 15:48:24 2006 => Downloading AntiVirus and Anti-Spyware Databases...
Fri Feb 24 15:49:12 2006 => Downloads Successful...
Fri Feb 24 16:00:28 2006 => Indexed Spyware Databases Successfully Created...
Fri Feb 24 16:00:29 2006 => Reload of AntiVirus Signatures successfully done.
Fri Feb 24 16:00:29 2006 => Virus Database Date: 2/24/2006
Fri Feb 24 16:00:29 2006 => Virus Database Count: 174343

Fri Feb 24 16:09:24 2006 => **********************************************************
Fri Feb 24 16:09:24 2006 => MicroWorld Anti Virus & Spyware Toolkit Utility.
Fri Feb 24 16:09:24 2006 => Copyright © 2003-2006, MicroWorld Technologies Inc.
Fri Feb 24 16:09:24 2006 =>
Fri Feb 24 16:09:24 2006 => Support: support@mwti.net
Fri Feb 24 16:09:24 2006 => Web: http://www.mwti.net
Fri Feb 24 16:09:24 2006 => **********************************************************
Fri Feb 24 16:09:24 2006 => Version 8.1.8 (C:\BASES_X\MWAVSCAN.COM)
Fri Feb 24 16:09:24 2006 => Log File: C:\BASES_X\MWAV.LOG
Fri Feb 24 16:09:24 2006 => User Account: Workstation
Fri Feb 24 16:09:24 2006 => Windows Root Folder: C:\WINDOWS
Fri Feb 24 16:09:24 2006 => Windows Sys32 Folder: C:\WINDOWS\system32
Fri Feb 24 16:09:24 2006 => OS: Windows XP
Fri Feb 24 16:09:24 2006 => Latest Date of files inside MWAV: 24 Feb 2006 14:50:20.

Fri Feb 24 16:09:24 2006 => Options Selected by User:
Fri Feb 24 16:09:24 2006 => Memory Check: Enabled
Fri Feb 24 16:09:24 2006 => Registry Check: Enabled
Fri Feb 24 16:09:24 2006 => StartUp Folder Check: Enabled
Fri Feb 24 16:09:24 2006 => System Folder Check: Enabled
Fri Feb 24 16:09:24 2006 => System Area Check: Disabled
Fri Feb 24 16:09:24 2006 => Services Check: Enabled
Fri Feb 24 16:09:24 2006 => Drive Check: Disabled
Fri Feb 24 16:09:24 2006 => All Drive Check :Enabled
Fri Feb 24 16:09:24 2006 => Folder Check: Disabled


Fri Feb 24 16:10:05 2006 => Offending Key found: HKCU\Software\freshdevices !!!
Fri Feb 24 16:10:05 2006 => Object "fresh devices Spyware/Adware" found in File System! Action Taken: No Action Taken.

Fri Feb 24 16:10:06 2006 => Offending file found: C:\WINDOWS\system32\plugin.dll
Fri Feb 24 16:10:06 2006 => System found infected with 007guard.com hijacker Spyware/Adware (plugin.dll)! Action taken: No Action Taken.

Fri Feb 24 16:10:06 2006 => Offending Folder found: C:\Programme\freshdevices
Fri Feb 24 16:10:06 2006 => Object "fresh devices Spyware/Adware" found in File System! Action Taken: No Action Taken.

@VincentVega
hier findest du mehr info
http://securityresponse.symantec.com...e.2search.html
http://www.softwaretipsandtricks.com...7guardexe.html
lade adaware und spybot
beide programme updaten
Lade regseeker
wechsle in den abgesicherten modus und lösche diese datei manuell
C:\Programme\freshdevices
scanne danach mit adaware und spybot, löschen was vorgeschlagen wird.
lasse regseeker dein registrierung durchsuchen.

chaosman