revoluzzer | 17.01.2012 21:33 | Firefox öffnet Tab zu Kreditwerbung oder FIrefox startet auch selbsbt mit der Krditwerbung Hallo Trojanerboard,
ich habe das selbe Problem wie andere. Firefox öffnet ein Tab zur seite "hxxp://www.delta-credit.de/anfrage/textads/textads.php?type=3&js=1" oder Firefox öffnet sich selbst. Habe mir paar Sachen durchgelesen und cosinus riet Malwarebytes auszuprobieren. Ich habe mal gescannt und es kamen auch paar infizierte Objekte, die dann auch in Quarantäne kamen und dann auch gelöscht wurden. Heute aber kam nebenbei eine Meldung von Malwarebytes, die mich stutzig machte und dann habe ich mal in den Logs bei Malwarebytes nachgelesen. Code:
2012/01/17 08:22:20 +0100 Windows-PC windows MESSAGE Starting protection
2012/01/17 08:22:27 +0100 Windows-PC windows MESSAGE Protection started successfully
2012/01/17 08:22:31 +0100 Windows-PC windows MESSAGE Starting IP protection
2012/01/17 08:22:35 +0100 Windows-PC windows MESSAGE IP Protection started successfully
2012/01/17 13:48:36 +0100 Windows-PC windows IP-BLOCK 83.128.56.43 (Type: outgoing, Port: 39121, Process: skype.exe)
2012/01/17 13:48:36 +0100 Windows-PC windows IP-BLOCK 83.128.56.43 (Type: outgoing, Port: 39121, Process: skype.exe)
2012/01/17 13:48:44 +0100 Windows-PC windows IP-BLOCK 83.128.56.43 (Type: outgoing, Port: 39121, Process: skype.exe)
2012/01/17 14:02:58 +0100 Windows-PC windows MESSAGE Executing scheduled update: Daily
2012/01/17 14:03:07 +0100 Windows-PC windows MESSAGE Starting database refresh
2012/01/17 14:03:07 +0100 Windows-PC windows MESSAGE Scheduled update executed successfully: database updated from version v2012.01.16.02 to version v2012.01.17.02
2012/01/17 14:03:07 +0100 Windows-PC windows MESSAGE Stopping IP protection
2012/01/17 14:05:47 +0100 Windows-PC windows MESSAGE IP Protection stopped
2012/01/17 14:05:51 +0100 Windows-PC windows MESSAGE Database refreshed successfully
2012/01/17 14:05:51 +0100 Windows-PC windows MESSAGE Starting IP protection
2012/01/17 14:05:53 +0100 Windows-PC windows MESSAGE IP Protection started successfully
2012/01/17 17:00:39 +0100 Windows-PC windows IP-BLOCK 213.226.202.68 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 17:00:39 +0100 Windows-PC windows IP-BLOCK 213.226.202.68 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 17:00:39 +0100 Windows-PC windows IP-BLOCK 213.226.202.68 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 17:00:39 +0100 Windows-PC windows IP-BLOCK 213.226.202.68 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 17:00:47 +0100 Windows-PC windows IP-BLOCK 213.226.202.68 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 18:40:42 +0100 Windows-PC windows IP-BLOCK 89.28.56.106 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:06:44 +0100 Windows-PC windows IP-BLOCK 89.28.56.106 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:11 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:12 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:12 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:12 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:12 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:12 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:12 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:51:20 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 19:52:16 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 20:01:12 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: outgoing, Port: 39121, Process: skype.exe)
2012/01/17 20:01:13 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: outgoing, Port: 39121, Process: skype.exe)
2012/01/17 20:01:21 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: outgoing, Port: 39121, Process: skype.exe)
2012/01/17 20:02:01 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: outgoing, Port: 39121, Process: skype.exe)
2012/01/17 20:02:01 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: outgoing, Port: 39121, Process: skype.exe)
2012/01/17 20:02:09 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: outgoing, Port: 39121, Process: skype.exe)
2012/01/17 20:27:46 +0100 Windows-PC windows IP-BLOCK 195.216.178.27 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 20:27:54 +0100 Windows-PC windows IP-BLOCK 195.216.178.27 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 20:27:54 +0100 Windows-PC windows IP-BLOCK 195.216.178.27 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 20:27:54 +0100 Windows-PC windows IP-BLOCK 195.216.178.27 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 20:28:02 +0100 Windows-PC windows IP-BLOCK 195.216.178.27 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 20:28:02 +0100 Windows-PC windows IP-BLOCK 195.216.178.27 (Type: incoming, Port: 39121, Process: skype.exe)
2012/01/17 20:33:06 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: outgoing, Port: 39121, Process: skype.exe)
2012/01/17 20:33:06 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: outgoing, Port: 39121, Process: skype.exe)
2012/01/17 20:33:14 +0100 Windows-PC windows IP-BLOCK 89.28.110.155 (Type: outgoing, Port: 39121, Process: skype.exe) . Wie man sieht erhalte ich Pakete an mein Skype Port, ob nun mein Skype infiziert ist oder mein Skype nur ein Paket mit dem Befehl erhält die Seite zu öffnen, kann ich jetzt im moment nicht sagen. Ich bin auch kein Superhirni was IT-Sicherheit und Malware betrifft, aber grundlegend verstehe ich schon was da passiert als Entwickler(bin leider als unvorsichtig :D). Würde mich da aber auch bissi einlesen, da es mich eh immer interessiert hat.
Ich hoffe bissi geholfen zu haben und evtl. wisst ihr auch Rat was ich machen sollte.
Danke im Voraus
revo |