Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Bitte um auswertung! (https://www.trojaner-board.de/11380-bitte-um-auswertung.html)

daniel1 30.12.2004 10:44

So ich hab jetzt den scann laufen lassen!!!
hier das ergebnis:
Thu Dec 30 10:12:28 2004 => File C:\WINDOWS\Downloaded Program Files\axload.dll infected by "Trojan.Win32.Dialer.ep" Virus. Action Taken: File Deleted.
Thu Dec 30 10:12:28 2004 => File C:\WINDOWS\Downloaded Program Files\d_loader.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
hu Dec 30 10:25:10 2004 => File C:\WINDOWS\SYSsfit.exe infected by "Trojan.Win32.StartPage.ey" Virus. Action Taken: File Deleted.
Thu Dec 30 10:25:10 2004 => Scanning File C:\WINDOWS\SYSsfitb.exe
Thu Dec 30 10:25:10 2004 => File C:\WINDOWS\SYSsfitb.exe tagged as not-a-virus:AdWare.EZula.i. No Action Taken.
Thu Dec 30 10:30:22 2004 => File C:\WINDOWS\Temp\Altnet\adm.exe tagged as not-a-virus:AdWare.Altnet.a. No Action Taken.
Thu Dec 30 10:30:22 2004 => File C:\WINDOWS\Temp\Altnet\adm25.dll tagged as not-a-virus:AdWare.Altnet.a. No Action Taken.
Thu Dec 30 10:30:22 2004 => File C:\WINDOWS\Temp\Altnet\adm4.dll tagged as not-a-virus:AdWare.Altnet.a. No Action Taken.
Thu Dec 30 10:30:23 2004 => File C:\WINDOWS\Temp\Altnet\admprog.dll tagged as not-a-virus:AdWare.Altnet.a. No Action Taken.
Thu Dec 30 10:30:24 2004 => File C:\WINDOWS\Temp\Altnet\pmfiles.cab tagged as not-a-virus:AdWare.BrilliantDigital.1007. No Action Taken.
Thu Dec 30 10:30:24 2004 => File C:\WINDOWS\Temp\Altnet\Setup.exe tagged as not-a-virus:AdWare.Altnet.b. No Action Taken.
Thu Dec 30 10:30:31 2004 => File C:\WINDOWS\Temp\~TMP.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.

ich bin erstaund wieviele viren ich auf dem PC hatte!!!!

was soll ich mit diesen sachen machen???alle löschen???

daniel1 30.12.2004 14:14

Zitat:

Zitat von daniel1
So ich hab jetzt den scann laufen lassen!!!
hier das ergebnis:
Thu Dec 30 10:12:28 2004 => File C:\WINDOWS\Downloaded Program Files\axload.dll infected by "Trojan.Win32.Dialer.ep" Virus. Action Taken: File Deleted.
Thu Dec 30 10:12:28 2004 => File C:\WINDOWS\Downloaded Program Files\d_loader.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: File Deleted.
hu Dec 30 10:25:10 2004 => File C:\WINDOWS\SYSsfit.exe infected by "Trojan.Win32.StartPage.ey" Virus. Action Taken: File Deleted.
Thu Dec 30 10:25:10 2004 => Scanning File C:\WINDOWS\SYSsfitb.exe
Thu Dec 30 10:25:10 2004 => File C:\WINDOWS\SYSsfitb.exe tagged as not-a-virus:AdWare.EZula.i. No Action Taken.
Thu Dec 30 10:30:22 2004 => File C:\WINDOWS\Temp\Altnet\adm.exe tagged as not-a-virus:AdWare.Altnet.a. No Action Taken.
Thu Dec 30 10:30:22 2004 => File C:\WINDOWS\Temp\Altnet\adm25.dll tagged as not-a-virus:AdWare.Altnet.a. No Action Taken.
Thu Dec 30 10:30:22 2004 => File C:\WINDOWS\Temp\Altnet\adm4.dll tagged as not-a-virus:AdWare.Altnet.a. No Action Taken.
Thu Dec 30 10:30:23 2004 => File C:\WINDOWS\Temp\Altnet\admprog.dll tagged as not-a-virus:AdWare.Altnet.a. No Action Taken.
Thu Dec 30 10:30:24 2004 => File C:\WINDOWS\Temp\Altnet\pmfiles.cab tagged as not-a-virus:AdWare.BrilliantDigital.1007. No Action Taken.
Thu Dec 30 10:30:24 2004 => File C:\WINDOWS\Temp\Altnet\Setup.exe tagged as not-a-virus:AdWare.Altnet.b. No Action Taken.
Thu Dec 30 10:30:31 2004 => File C:\WINDOWS\Temp\~TMP.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.

ich bin erstaund wieviele viren ich auf dem PC hatte!!!!

was soll ich mit diesen sachen machen???alle löschen???

up
bitte helft mir

HerrKautz 30.12.2004 14:26

Die Files wurden ja gelöscht

"File deleted"

Lass aber nochmal Spybot laufen,vorher updaten die markierten Probleme dann löschen,und neues Logfile posten!

http://beam.to/spybotsd

daniel1 30.12.2004 14:37

aber die werbung kommt immer noch!!!


beim scan (spybot) kommt dann das:

http://www.webmaster-hilfen.de/websp...der/screen.gif

wenn ich das lösche und dann nochmal überprüfe kommt das glieche wieder her.(das bild ist von destern aber ist gleich geblieben)

daniel1 30.12.2004 15:15

ich hab jetzt auch noch SpySubtract PRo downgeloadet und es durchlaufen lassen!
Hier das ergebnis:
--------------------------------- SpySubtract session started ---------------------------------
Machine=NAME-G311O56VLS
Time=Thu Dec 30 14:52:43 2004
Product Version=1, 0, 1, 49
OS Version=Microsoft Windows XP Home Edition Service Pack 2 (Build 2600)

--------------------------------- SpySubtract session ended ---------------------------------

--------------------------------- SpySubtract session started ---------------------------------
Machine=NAME-G311O56VLS
Time=Thu Dec 30 14:53:02 2004
Product Version=1, 0, 1, 49
OS Version=Microsoft Windows XP Home Edition Service Pack 2 (Build 2600)

Started Scanning
Programs in Memory
Finished Scanning
Started Scanning
Internet Cookies
Found 'unicast.com' in 'Internet Explorer Cache'
Programs in Memory
Windows Registry
Found '' in 'Software\Kazaa'
Found '' in 'Software\Kazaa\Settings'
Found '' in 'Software\Kazaa\Transfer'
Found '' in 'Software\KaZaA\CloudLoad'
Found '' in 'Software\KaZaA\ConnectionInfo'
Found '' in 'Software\KaZaA\LocalContent'
Found '' in 'SOFTWARE\Classes\ed2k'
Found '' in 'SOFTWARE\Classes\ed2k\shell\open\command'
Found '' in 'Software\Kazaa'
Found '' in 'Software\Kazaa\Advanced'
Found '' in 'Software\Kazaa\InstantMessaging'
Found '' in 'Software\Kazaa\LocalContent'
Found '' in 'Software\Kazaa\Promotions\Broadband'
Found '' in 'SOFTWARE\TSA'
Found '' in 'SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TSA'
Found '' in 'SOFTWARE\TSA\update'
Found 'Tmp' in 'Software\Kazaa'
Found 'Status' in 'Software\Kazaa\Advanced'
Found 'DisableListFiles' in 'Software\Kazaa\LocalContent'
Found 'BBDbLoc' in 'Software\Kazaa\Promotions\Broadband'
Found 'NullImageLoc' in 'Software\Kazaa\Promotions\Broadband'
Found 'NullImageLoc2' in 'Software\Kazaa\Promotions\Broadband'
Found 'DatabaseDir' in 'SOFTWARE\Kazaa\LocalContent'
Found 'Date' in 'Software\Kazaa\Settings'
Found 'DownloadDir' in 'SOFTWARE\Kazaa\LocalContent'
Found 'UseCount' in 'Software\Kazaa\Settings'
Found 'NoUploadLimitWhenIdle' in 'Software\Kazaa\Transfer'
Found 'Tmp' in 'SOFTWARE\Kazaa'
Found 'ShareDir' in 'SOFTWARE\Kazaa\CloudLoad'
Found 'KazaaNet' in 'SOFTWARE\Kazaa\ConnectionInfo'
Found '' in 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1'
Found 'DisplayName' in 'SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TSA'
Found 'UninstallString' in 'SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TSA'
Internet URL Shortcuts
Files and Directories
Found 'asmfiles.cab' in 'C:\Dokumente und Einstellungen\Reischl Daniel.NAME-G311O56VLS\Lokale Einstellungen\Temp'
Found 'cd_clint.dll' in 'C:\Dokumente und Einstellungen\Reischl Daniel.NAME-G311O56VLS\Lokale Einstellungen\Temp'
Found 'p2psetup.exe' in 'C:\Dokumente und Einstellungen\Reischl Daniel.NAME-G311O56VLS\Lokale Einstellungen\Temp'
Found '__unin__.exe' in 'C:\Dokumente und Einstellungen\Reischl Daniel.NAME-G311O56VLS\Lokale Einstellungen\Temp'
Found '' in 'C:\Programme\ClockSync'
Found '' in 'C:\Programme\ClockSync\screen'
Found 'system.cfg' in 'C:\Programme\Common Files\SearchUpgrader'
Found 'class-barrel' in 'C:\Programme\Common Files\tsa\rainbow'
Found 'classify.dll' in 'C:\Programme\Common Files\tsa\rainbow'
Found 'vocabulary' in 'C:\Programme\Common Files\tsa\rainbow'
Found 'tsl.exe' in 'C:\Programme\Common Files\tsa'
Found 'tsl2.exe' in 'C:\Programme\Common Files\tsa'
Found 'tsp2.exe' in 'C:\Programme\Common Files\tsa'
Found 'tsuninst.exe' in 'C:\Programme\Common Files\tsa'
Found '' in 'C:\Programme\DR_S'
Found 'SYSsfitb.exe' in 'C:\WINDOWS'
Found '' in 'C:\WINDOWS\Temp\Altnet'
Found 'adm.exe' in 'C:\WINDOWS\Temp\Altnet'
Found 'adm25.dll' in 'C:\WINDOWS\Temp\Altnet'
Found 'adm4.dll' in 'C:\WINDOWS\Temp\Altnet'
Found 'admdata.dll' in 'C:\WINDOWS\Temp\Altnet'
Found 'admdloader.dll' in 'C:\WINDOWS\Temp\Altnet'
Found 'admfdi.dll' in 'C:\WINDOWS\Temp\Altnet'
Found 'admprog.dll' in 'C:\WINDOWS\Temp\Altnet'
Found 'dmfiles.cab' in 'C:\WINDOWS\Temp\Altnet'
Found 'DMinfo3.cab' in 'C:\WINDOWS\Temp\Altnet'
Found 'dminstall7.cab' in 'C:\WINDOWS\Temp\Altnet'
Found 'pmexe.cab' in 'C:\WINDOWS\Temp\Altnet'
Found 'pmfiles.cab' in 'C:\WINDOWS\Temp\Altnet'
Found 'pminstall.cab' in 'C:\WINDOWS\Temp\Altnet'
Found 'Setup.cab' in 'C:\WINDOWS\Temp\Altnet'
Found 'Setup.exe' in 'C:\WINDOWS\Temp\Altnet'
Found 'bulldownload.exe' in 'C:\WINDOWS\Temp\BullGuard'
Finished Scanning

ich schätze mal das soll ich alles löschen oder?

Cidre 30.12.2004 18:20

Bezüglich DSO Exploit:
http://www.trojaner-board.de/showpos...42&postcount=4

Die von SpySubtract Pro beanstandeten Dateien entfernen und am besten in der Zukunft die Malwareschleuder Kazaa nicht mehr benutzen!

daniel1 31.12.2004 09:47

Zitat:

Zitat von Cidre
Bezüglich DSO Exploit:
http://www.trojaner-board.de/showpos...42&postcount=4

Die von SpySubtract Pro beanstandeten Dateien entfernen und am besten in der Zukunft die Malwareschleuder Kazaa nicht mehr benutzen!

danke!!!!
werd ich machen!!!

Nochmal vielen Dank für eure Hilfe!!!!!


Alle Zeitangaben in WEZ +1. Es ist jetzt 21:47 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19