|
Plagegeister aller Art und deren Bekämpfung: Habe ich wirklich trojaner, Würmer und BackDoor, laut eScan schonWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
25.08.2007, 13:27 | #1 |
| Habe ich wirklich trojaner, Würmer und BackDoor, laut eScan schon Hallo, Ich möchte nur mal nachfragen ob es sich bei den gefundenen Sachen um etwas ersteres Handelt. Ich habe im Abgesicherten Modus eScan durchlaufen lassen und mit der Find.bat und eScanCheck 1.10 geschaut ob bei den Treffern was übernommen wird. eScanCheck zeigt nur die beiden Dateien an: C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DEVCON.EXE C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DelDrv.exe Die ich auch gelöscht habe, weil sie mir nicht sind so wichtig sind. Was heist das nun? Was ist über Diese Sachen zu sagen: killav.nbd Browser Hijacker (svhost.exe) Die svhost.exe habe ich gar nicht auf den Rechner. Und zu video activex access Trojan ({7e853d72-626a-48ec-a868-ba8d5e23e045})!, shangxing BackDoor (C:\WINDOWS\system32\svkp.sys)! Fri Aug 24 21:23:57 2007 => Offending file found: C:\WINDOWS\system32\svkp.sys Fri Aug 24 21:23:57 2007 => Offending Registry Entry found: hkey_local_machine\system\controlset001\services\svkp Sowie Gator. Die Automatische HijackThis Logfileauswertung ergab sicher bis Sehr sicher. Ich nutze u.a. auch SpybotSD und SpywareBlaster und gehe mit eingeschränkten benutzerrechten ins Netz. Danke Der Find.bat log: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Funde für "infected" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Sun Feb 11 13:04:06 2007 => Total Disinfected Objects: 0 Sun Feb 11 13:04:20 2007 => Total Disinfected Objects: 0 Sun Feb 11 13:21:22 2007 => System found infected with killav.nbd Browser Hijacker (svhost.exe)! Action taken: Entries Removed. Sun Feb 11 13:21:28 2007 => System found infected with wareout Adware (1.dat)! Action taken: Entries Removed. Sun Feb 11 13:22:01 2007 => System found infected with spylax Corrupted Adware/Spyware (C:\WINDOWS\unvise32.exe)! Action taken: Entries Removed. Sun Feb 11 13:23:44 2007 => Scanning Folder: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED\*.* Sun Feb 11 13:23:44 2007 => Scanning File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED\45a2d781.qua Sun Feb 11 13:27:55 2007 => Scanning Folder: C:\Dokumente und Einstellungen\All Users.WINDOWS.1\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED\*.* Sun Feb 11 14:55:20 2007 => Scanning Folder: C:\Programme\AntiVir PersonalEdition Classic\INFECTED\*.* Sun Feb 11 17:40:23 2007 => Total Disinfected Objects: 0 Fri Aug 24 21:22:24 2007 => System found infected with video activex access Trojan ({7e853d72-626a-48ec-a868-ba8d5e23e045})! Action taken: No Action Taken. Fri Aug 24 21:23:57 2007 => System found infected with shangxing BackDoor (C:\WINDOWS\system32\svkp.sys)! Action taken: No Action Taken. Fri Aug 24 21:23:57 2007 => System found infected with shangxing BackDoor (hkey_local_machine\system\controlset001\services\svkp)! Action taken: No Action Taken. Fri Aug 24 21:33:20 2007 => [Scanning Folder: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED] Fri Aug 24 21:33:20 2007 => Scanning File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED\45a2d781.qua Fri Aug 24 21:33:20 2007 => Scanning File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED\46f6456f.qua Fri Aug 24 21:40:48 2007 => [Scanning Folder: C:\Dokumente und Einstellungen\All Users.WINDOWS.1\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED] Fri Aug 24 22:47:12 2007 => [Scanning Folder: C:\Programme\AntiVir PersonalEdition Classic\INFECTED] Sat Aug 25 00:20:19 2007 => File C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DelDrv.exe infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken. Sat Aug 25 00:20:19 2007 => File C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DEVCON.EXE infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken. Sat Aug 25 01:10:46 2007 => Total Disinfected Objects: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Funde für "tagged" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Sun Feb 11 15:53:51 2007 => File C:\Programme\Setup Dateien\xp-iso-builder_final.exe//UPX//data/cmdow.exe tagged as "not-a-virus:RiskTool.Win32.HideWindows". Action Taken: File Deleted. Sun Feb 11 15:59:51 2007 => File C:\Programme\XP Iso Builder\data\cmdow.exe tagged as "not-a-virus:RiskTool.Win32.HideWindows". Action Taken: File Deleted. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Statistiken: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gator.com !!! Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\media-motor.net !!! Sun Feb 11 13:21:14 2007 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!! Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\CurrentControlSet\Services\iprip !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\CurrentControlSet\Services\nwsapagent !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet003\Services\iprip !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet003\Services\nwsapagent !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet004\Services\iprip !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet004\Services\nwsapagent !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartupReg\scanregistry !!! Sun Feb 11 13:21:22 2007 => Offending file found: C:\WINDOWS\system32\svhost.exe Sun Feb 11 13:21:28 2007 => Offending file found: C:\DOKUME~1\Privat\LOKALE~1\ANWEND~1\hp\DIGITA~1\cache\1.dat Sun Feb 11 13:22:01 2007 => Offending file found: C:\WINDOWS\unvise32.exe Fri Aug 24 21:22:28 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gator.com !!! Fri Aug 24 21:22:29 2007 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!! Fri Aug 24 21:22:29 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!! Fri Aug 24 21:23:45 2007 => Offending Folder found: C:\Dokumente und Einstellungen\Privat\Eigene Dateien\roulette Fri Aug 24 21:23:57 2007 => Offending file found: C:\WINDOWS\system32\svkp.sys Fri Aug 24 21:23:57 2007 => Offending Registry Entry found: hkey_local_machine\system\controlset001\services\svkp Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H !!! Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\I !!! Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{00cbe05c-80fb-11d8-9578-0020ed41a7b4} !!! Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e6f6fc87-1085-11d9-9724-0008ca122d0a} !!! Sun Feb 11 13:04:06 2007 => Total Errors: 0 Sun Feb 11 13:04:20 2007 => Total Errors: 0 Sun Feb 11 17:40:23 2007 => Total Errors: 122 Sat Aug 25 01:10:46 2007 => Total Errors: 2787 Sun Feb 11 13:04:06 2007 => Time Elapsed: 00:00:21 Sun Feb 11 13:04:20 2007 => Time Elapsed: 00:00:21 Sun Feb 11 17:40:23 2007 => Time Elapsed: 04:21:37 Sat Aug 25 01:10:46 2007 => Time Elapsed: 03:49:02 Sun Feb 11 13:04:06 2007 => Total Objects Scanned: 757 Sun Feb 11 13:04:20 2007 => Total Objects Scanned: 805 Sun Feb 11 17:40:23 2007 => Total Objects Scanned: 196577 Sat Aug 25 01:10:46 2007 => Total Objects Scanned: 131689 Sun Feb 11 13:04:18 2007 => Virus Database Date: 2/9/2007 Sun Feb 11 13:16:46 2007 => Virus Database Date: 2/9/2007 Sun Feb 11 17:40:23 2007 => Virus Database Date: 2/9/2007 Sun Feb 11 19:35:47 2007 => Virus Database Date: 2/9/2007 Sat Aug 11 19:13:59 2007 => Virus Database Date: 2/9/2007 Sun Aug 12 13:47:34 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:10:26 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:12:06 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:12:35 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:14:22 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:17:55 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:19:59 2007 => Virus Database Date: 8/9/2007 Sat Aug 25 01:10:46 2007 => Virus Database Date: 8/9/2007 Sat Aug 25 01:10:51 2007 => Virus Database Date: 8/9/2007 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~ ~~~~~~~ © Haui ;-) ~~~~~~~ ~~~~~~~ Dank an Cidre ~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Sun Feb 11 13:17:57 2007 => Deleting Registry Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gator.com Sun Feb 11 13:21:14 2007 => Deleting Registry Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\media-motor.net Sun Feb 11 13:21:14 2007 => Deleting Registry Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com Sun Feb 11 13:21:14 2007 => Deleting Registry Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com Sun Aug 12 13:47:25 2007 => Version 9.1.4 (C:\Bases_X\mexe.com) Fri Aug 24 21:12:33 2007 => Version 9.1.4 (C:\Bases_X\mexe.com) Sun Feb 11 13:04:18 2007 => Virus Database Date: 2/9/2007 Sun Feb 11 13:16:46 2007 => Virus Database Date: 2/9/2007 Sun Feb 11 17:40:23 2007 => Virus Database Date: 2/9/2007 Sun Feb 11 19:35:47 2007 => Virus Database Date: 2/9/2007 Sat Aug 11 19:13:59 2007 => Virus Database Date: 2/9/2007 Sun Aug 12 13:47:34 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:10:26 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:12:06 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:12:35 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:14:22 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:17:55 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:19:59 2007 => Virus Database Date: 8/9/2007 Sat Aug 25 01:10:46 2007 => Virus Database Date: 8/9/2007 Sat Aug 25 01:10:51 2007 => Virus Database Date: 8/9/2007 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Infektionsmeldungen ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Sun Feb 11 13:21:22 2007 => System found infected with killav.nbd Browser Hijacker (svhost.exe)! Action taken: Entries Removed. Sun Feb 11 13:21:28 2007 => System found infected with wareout Adware (1.dat)! Action taken: Entries Removed. Sun Feb 11 13:22:01 2007 => System found infected with spylax Corrupted Adware/Spyware (C:\WINDOWS\unvise32.exe)! Action taken: Entries Removed. Fri Aug 24 21:22:24 2007 => System found infected with video activex access Trojan ({7e853d72-626a-48ec-a868-ba8d5e23e045})! Action taken: No Action Taken. Fri Aug 24 21:23:57 2007 => System found infected with shangxing BackDoor (C:\WINDOWS\system32\svkp.sys)! Action taken: No Action Taken. Fri Aug 24 21:23:57 2007 => System found infected with shangxing BackDoor (hkey_local_machine\system\controlset001\services\svkp)! Action taken: No Action Taken. Sun Feb 11 13:21:14 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:14 2007 => Object "medload Adware" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:14 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:14 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:18 2007 => Object "kraze.b Virus" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:22 2007 => Object "killav.nbd Browser Hijacker" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:21:28 2007 => Object "wareout Adware" found in File System! Action Taken: Entries Removed. Sun Feb 11 13:22:01 2007 => Object "spylax Corrupted Adware/Spyware" found in File System! Action Taken: Entries Removed. Fri Aug 24 21:22:28 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken. Fri Aug 24 21:22:29 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken. Fri Aug 24 21:22:29 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken. Fri Aug 24 21:23:45 2007 => Object "ace club casino Spyware/Adware" found in File System! Action Taken: No Action Taken. Fri Aug 24 21:24:03 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken. Fri Aug 24 21:24:03 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken. Fri Aug 24 21:24:03 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken. Fri Aug 24 21:24:03 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken. ~~~~~~~~~~~ Dateien ~~~~~~~~~~~ ~~~~ Infected files ~~~~~~~~~~~ Sat Aug 25 00:20:19 2007 => File C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DelDrv.exe infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken. Sat Aug 25 00:20:19 2007 => File C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DEVCON.EXE infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken. ~~~~~~~~~~~ ~~~~ Offending files ~~~~~~~~~~~ Sun Feb 11 13:21:22 2007 => Offending file found: C:\WINDOWS\system32\svhost.exe Sun Feb 11 13:21:28 2007 => Offending file found: C:\DOKUME~1\Privat\LOKALE~1\ANWEND~1\hp\DIGITA~1\cache\1.dat Sun Feb 11 13:22:01 2007 => Offending file found: C:\WINDOWS\unvise32.exe Fri Aug 24 21:23:57 2007 => Offending file found: C:\WINDOWS\system32\svkp.sys ~~~~~~~~~~~ ~~~~ Tagged files ~~~~~~~~~~~ Sun Feb 11 15:53:51 2007 => File C:\Programme\Setup Dateien\xp-iso-builder_final.exe//UPX//data/cmdow.exe tagged as "not-a-virus:RiskTool.Win32.HideWindows". Action Taken: File Deleted. Sun Feb 11 15:59:51 2007 => File C:\Programme\XP Iso Builder\data\cmdow.exe tagged as "not-a-virus:RiskTool.Win32.HideWindows". Action Taken: File Deleted. ~~~~~~~~~~~ Ordner ~~~~~~~~~~~ Fri Aug 24 21:23:45 2007 => Offending Folder found: C:\Dokumente und Einstellungen\Privat\Eigene Dateien\roulette ~~~~~~~~~~~ Registry ~~~~~~~~~~~ Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gator.com !!! Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\media-motor.net !!! Sun Feb 11 13:21:14 2007 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!! Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\CurrentControlSet\Services\iprip !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\CurrentControlSet\Services\nwsapagent !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet003\Services\iprip !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet003\Services\nwsapagent !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet004\Services\iprip !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet004\Services\nwsapagent !!! Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartupReg\scanregistry !!! Fri Aug 24 21:22:28 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gator.com !!! Fri Aug 24 21:22:29 2007 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!! Fri Aug 24 21:22:29 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!! Fri Aug 24 21:23:57 2007 => Offending Registry Entry found: hkey_local_machine\system\controlset001\services\svkp Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H !!! Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\I !!! Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{00cbe05c-80fb-11d8-9578-0020ed41a7b4} !!! Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e6f6fc87-1085-11d9-9724-0008ca122d0a} !!! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Statistiken: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Sun Feb 11 13:04:06 2007 => Total Errors: 0 Sun Feb 11 13:04:20 2007 => Total Errors: 0 Sun Feb 11 17:40:23 2007 => Total Errors: 122 Sat Aug 25 01:10:46 2007 => Total Errors: 2787 Sun Feb 11 13:04:06 2007 => Time Elapsed: 00:00:21 Sun Feb 11 13:04:20 2007 => Time Elapsed: 00:00:21 Sun Feb 11 17:40:23 2007 => Time Elapsed: 04:21:37 Sat Aug 25 01:10:46 2007 => Time Elapsed: 03:49:02 Sun Feb 11 13:04:06 2007 => Total Objects Scanned: 757 Sun Feb 11 13:04:20 2007 => Total Objects Scanned: 805 Sun Feb 11 17:40:23 2007 => Total Objects Scanned: 196577 Sat Aug 25 01:10:46 2007 => Total Objects Scanned: 131689 Sun Feb 11 13:04:18 2007 => Virus Database Date: 2/9/2007 Sun Feb 11 13:16:46 2007 => Virus Database Date: 2/9/2007 Sun Feb 11 17:40:23 2007 => Virus Database Date: 2/9/2007 Sun Feb 11 19:35:47 2007 => Virus Database Date: 2/9/2007 Sat Aug 11 19:13:59 2007 => Virus Database Date: 2/9/2007 Sun Aug 12 13:47:34 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:10:26 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:12:06 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:12:35 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:14:22 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:17:55 2007 => Virus Database Date: 2/9/2007 Fri Aug 24 21:19:59 2007 => Virus Database Date: 8/9/2007 Sat Aug 25 01:10:46 2007 => Virus Database Date: 8/9/2007 Sat Aug 25 01:10:51 2007 => Virus Database Date: 8/9/2007 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan-Optionen ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Sun Feb 11 13:03:43 2007 => Memory Check: Enabled Sun Feb 11 13:17:14 2007 => Memory Check: Enabled Fri Aug 24 21:20:29 2007 => Memory Check: Enabled Sat Aug 25 01:12:46 2007 => Memory Check: Enabled Sun Feb 11 13:03:43 2007 => Registry Check: Enabled Sun Feb 11 13:17:14 2007 => Registry Check: Enabled Fri Aug 24 21:20:29 2007 => Registry Check: Enabled Sat Aug 25 01:12:46 2007 => Registry Check: Enabled Sun Feb 11 13:03:43 2007 => StartUp Folder Check: Enabled Sun Feb 11 13:17:14 2007 => StartUp Folder Check: Disabled Fri Aug 24 21:20:29 2007 => StartUp Folder Check: Enabled Sat Aug 25 01:12:46 2007 => StartUp Folder Check: Disabled Sun Feb 11 13:03:43 2007 => System Area Check: Disabled Sun Feb 11 13:17:14 2007 => System Area Check: Disabled Fri Aug 24 21:20:29 2007 => System Area Check: Disabled Sat Aug 25 01:12:46 2007 => System Area Check: Disabled Sun Feb 11 13:03:43 2007 => Services Check: Disabled Sun Feb 11 13:17:14 2007 => Services Check: Enabled Fri Aug 24 21:20:29 2007 => Services Check: Enabled Sat Aug 25 01:12:46 2007 => Services Check: Enabled Sun Feb 11 13:03:43 2007 => Drive Check: Disabled Sun Feb 11 13:03:43 2007 => All Drive Check :Enabled Sun Feb 11 13:17:14 2007 => Drive Check: Disabled Sun Feb 11 13:17:14 2007 => All Drive Check :Enabled Fri Aug 24 21:20:29 2007 => Drive Check: Disabled Fri Aug 24 21:20:29 2007 => All Drive Check :Enabled Sat Aug 25 01:12:46 2007 => Drive Check: Disabled Sat Aug 25 01:12:46 2007 => All Drive Check :Enabled Sun Feb 11 13:03:43 2007 => All Drive Check :Enabled Sun Feb 11 13:17:14 2007 => All Drive Check :Enabled Fri Aug 24 21:20:29 2007 => All Drive Check :Enabled Sat Aug 25 01:12:46 2007 => All Drive Check :Enabled Fri Aug 24 21:49:31 2007 => Scanning File C:\Dokumente und Einstellungen\Privat\Eigene Dateien\Dienste Abstellen svc2kxp\dienste deaktiviert.txt |
26.08.2007, 09:50 | #2 |
| Trojaner, Würmer BackDoor Klingt ja nicht gerade Toll! Weiß hier niemand was über diese Gefundenen Sachen?
__________________Die Harmloseste Variante wäre natürlich Fehlalarm durch Hohe Heuristik oder eben nur Werbung zum Kauf des Programms und es ist „nur“ Adware. Aber ich denke hier muß man in diesem Internet Zeitalter nicht all zu Ängstlich sein, oder sehe ich das jetzt falsch? Denn wenn SpybotSD mal was findet (was in letzter Zeit aber nicht vorkam) ist das doch kein Grund das System neu aufzusetzen, oder? Bei der Masse an evt. Schadsoftware muß man doch Abstriche machen. Ich will zwar einerseits ein Sicheres System und andererseits will man aber auch mal das Internet nutzen. Wo liegen denn die zwingenden Bis jetzt hatte ich Wahrscheinlich über Antivir mehr Fehlalarme und das waren die letzten Jahre vielleicht 5 Meldungen. Was sind denn die zwingenden Gründe und wann spricht man denn da von Verseucht und das System neu aufzusetzen? Und außerdem Stelle ich mir die Frage was eine Formatierung bring wenn man nachträglich sogar Teilweise Daten wiederherstellen kann. Das erstaunt mich ehrlich gesagt. Was soll man den noch machen außer Vorsichtig sein und Du vermeidlichen Schutz Software zu Installieren? |
Themen zu Habe ich wirklich trojaner, Würmer und BackDoor, laut eScan schon |
abgesicherten modus, adware, antivir, backdoor, browser, dateien, einstellungen, escan, exe.corrupted, explorer, file, gelöscht, handel, hijackthis, infected, internet, microsoft, mp3, ordner, programme, registry, registry key, software, svhost.exe, system, trojan, trojaner, virus, windows, worm |