Hab leider nichts anderes, kann es sein, dass es daran liegt, dass ich escan nicht online im abgesicherten Modus ausführen konnte, da mein PC im abgesicherten Modus mit Netzwerktreibern trotzdem nicht ins Netz gegangen ist???

Lesen erspart Fragen: Anleitung

Tschuldigung, hab nochmals gescannt, hier das Ergebnis

Mon Jan 24 11:32:04 2005 => File C:\WINDOWS\system32\kvdqdjmw.exe infected by "Trojan-Proxy.Win32.Agent.l" Virus. Action Taken: No Action Taken.
Mon Jan 24 11:33:27 2005 => File C:\WINDOWS\system32\ttctvsql.dll infected by "Trojan-Downloader.Win32.Agent.gn" Virus. Action Taken: No Action Taken.
Mon Jan 24 11:34:01 2005 => ***** Scanning complete. *****

Mon Jan 24 11:34:01 2005 => Total Files Scanned: 3612
Mon Jan 24 11:34:01 2005 => Total Virus(es) Found: 2
Mon Jan 24 11:34:01 2005 => Total Disinfected Files: 0
Mon Jan 24 11:34:01 2005 => Total Files Renamed: 0
Mon Jan 24 11:34:01 2005 => Total Deleted Files: 0
Mon Jan 24 11:34:01 2005 => Total Errors: 6
Mon Jan 24 11:34:01 2005 => Time Elapsed: 00:04:38
Mon Jan 24 11:34:01 2005 => Virus Database Date: 2005/01/24
Mon Jan 24 11:34:01 2005 => Virus Database Count: 116554

Mon Jan 24 11:34:01 2005 => Scan Completed.

Hier noch die ERRORS

Mon Jan 24 11:29:55 2005 => ERROR!!! Invalid Entry {42071714-76d4-11d1-8b24-00a0c9068ff3}
Mon Jan 24 11:30:23 2005 => Scanning File

C:\WINDOWS\IE4 Error Log.txt [**]
Mon Jan 24 11:29:59 2005 => ERROR!!! Invalid Entry {D3796116-94D3-4009-96D7-51578411CC7D}

Mon Jan 24 11:29:59 2005 => ERROR!!! Invalid Entry {D3796116-94D3-4009-96D7-51578411CC7D} = C:\PROGRA~1\Agnitum\OUTPOS~1.0\oshdlr.dll (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved). Removing it.

Mon Jan 24 11:30:03 2005 => ERROR!!! Invalid Entry Microsoft Works Update Detection = C:\Programme\Microsoft Works\WkDetect.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). Removing it.

Mon Jan 24 11:30:05 2005 => ERROR!!! Invalid Entry \??\C:\DOKUME~1\MARTIN~1\LOKALE~1\Temp\cel90xbe.sys. Removing SYSTEM\CurrentControlSet\Services\cel90xbe...SYSTEM\CurrentControlSet\Services\cel90xbe...

Mon Jan 24 11:30:06 2005 => ERROR!!! Invalid Entry \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys. Removing SYSTEM\CurrentControlSet\Services\ENTECH...

Nochmals vollständig, ich glaube unten, die rot gemarkten, gehören nicht dazu.

Mon Jan 24 11:29:55 2005 => ERROR!!! Invalid Entry {42071714-76d4-11d1-8b24-00a0c9068ff3} = deskpan.dll (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved). Removing it.

Mon Jan 24 11:29:59 2005 => ERROR!!! Invalid Entry {D3796116-94D3-4009-96D7-51578411CC7D} = C:\PROGRA~1\Agnitum\OUTPOS~1.0\oshdlr.dll (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved). Removing it.

Mon Jan 24 11:30:03 2005 => ERROR!!! Invalid Entry Microsoft Works Update Detection = C:\Programme\Microsoft Works\WkDetect.exe (in key SOFTWARE\Microsoft\Windows\CurrentVersion\Run). Removing it.

Mon Jan 24 11:30:05 2005 => ERROR!!! Invalid Entry \??\C:\DOKUME~1\MARTIN~1\LOKALE~1\Temp\cel90xbe.sys. Removing SYSTEM\CurrentControlSet\Services\cel90xbe...


Mon Jan 24 11:30:06 2005 => ERROR!!! Invalid Entry \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys. Removing SYSTEM\CurrentControlSet\Services\ENTECH...

Mon Jan 24 11:30:09 2005 => ERROR!!! Invalid Entry C:\WINDOWS\system32\msupd4.exe. Removing SYSTEM\CurrentControlSet\Services\MsUpdate4...

Mon Jan 24 11:30:23 2005 => Scanning File C:\WINDOWS\IE4 Error Log.txt [**]

Mon Jan 24 11:30:43 2005 => Scanning File C:\WINDOWS\system32\asferror.dll

Mon Jan 24 11:33:42 2005 => Scanning File C:\WINDOWS\system32\wmerror.dll

Mon Jan 24 11:33:44 2005 => Scanning File C:\WINDOWS\system32\wmserror.dll

Wiederholung: Mon Jan 24 11:34:01 2005 => Total Files Scanned: 3612

Hallo, ich hoffe ich kann den PC noch anders säubern, außer die Festplatte zu löschen???!!

Mon Jan 24 14:13:44 2005 => File C:\WINDOWS\system32\kvdqdjmw.exe infected by "Trojan-Proxy.Win32.Agent.l" Virus. Action Taken: No Action Taken.

Mon Jan 24 14:15:09 2005 => File C:\WINDOWS\system32\ttctvsql.dll infected by "Trojan-Downloader.Win32.Agent.gn" Virus. Action Taken: No Action Taken.

Mon Jan 24 14:17:51 2005 => File C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Temporary Internet Files\Content.IE5\XLNQ1IZP\a_4_0[1].txt infected by "Trojan-Downloader.Win32.Agent.gn" Virus. Action Taken: No Action Taken.

Mon Jan 24 14:24:36 2005 => File C:\Download\backups\backup-20050123-211438-461.dll infected by "Trojan.Win32.Golid.e" Virus. Action Taken: No Action Taken.

Mon Jan 24 14:30:02 2005 => Scanning Folder: C:\Programme\AVPersonal\INFECTED\*.*

Mon Jan 24 14:30:02 2005 => Scanning FileMon Jan 24 14:30:02 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\A0167422.INF.VIR [**]

7Mon Jan 24 14:30:02 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\A0169470.INF.VIR [**]

Mon Jan 24 14:30:02 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\A0169513.INF.VIR [**]

Mon Jan 24 14:30:02 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\F482C95F83F1B59228F1B1E720F2EDF1.VIR [**]

Mon Jan 24 14:30:02 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\GDNDE331[1].EXE.001

Mon Jan 24 14:30:02 2005 => File C:\Programme\AVPersonal\INFECTED\GDNDE331[1].EXE.001 infected by "Trojan.Win32.Dialer.ay" Virus. Action Taken: No Action Taken.

Mon Jan 24 14:30:02 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\GDNDE331[1].EXE.VIR

Mon Jan 24 14:30:02 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\KOMTEL.INF.001 [**]

Mon Jan 24 14:30:02 2005 => Scanning File C:\Programme\AVPersonal\INFECTED\KOMTEL.INF.VIR [**]

Mon Jan 24 14:42:29 2005 => File C:\Programme\MySearch\bar\1.bin\NPMYSRCH.DLL infected by "not-a-virus:AdWare.ToolBar.MyWay.f" Virus. Action Taken: No Action Taken.

Mon Jan 24 14:42:29 2005 => File C:\Programme\MySearch\bar\1.bin\S4BAR.DLL infected by "not-a-virus:AdWare.ToolBar.MyWay.f" Virus. Action Taken: No Action Taken.

Mon Jan 24 15:10:18 2005 => File C:\WINDOWS\system32\kvdqdjmw.exe infected by "Trojan-Proxy.Win32.Agent.l" Virus. Action Taken: No Action Taken.

Mon Jan 24 15:12:26 2005 => File C:\WINDOWS\system32\ttctvsql.dll infected by "Trojan-Downloader.Win32.Agent.gn" Virus. Action Taken: No Action Taken.

Mon Jan 24 15:20:36 2005 => Total Files Scanned: 76907
Mon Jan 24 15:20:36 2005 => Total Virus(es) Found: 21
Mon Jan 24 15:20:36 2005 => Total Disinfected Files: 0
Mon Jan 24 15:20:36 2005 => Total Files Renamed: 0
Mon Jan 24 15:20:37 2005 => Total Deleted Files: 0
Mon Jan 24 15:20:37 2005 => Total Errors: 42
Mon Jan 24 15:20:37 2005 => Time Elapsed: 01:09:16
Mon Jan 24 15:20:37 2005 => Virus Database Date: 2005/01/24
Mon Jan 24 15:20:37 2005 => Virus Database Count: 116582

Mon Jan 24 15:20:37 2005 => Scan Completed.

Mon Jan 24 15:35:39 2005 => Virus Database Date: 2005/01/24
Mon Jan 24 15:35:39 2005 => Virus Database Count: 116582
Mon Jan 24 15:36:07 2005 => AV Library Unloaded (3)...

ERRORS:1.Teil


Mon Jan 24 14:12:06 2005 => Scanning File C:\WINDOWS\IE4 Error Log.txt [**]
Mon Jan 24 14:15:28 2005 => Scanning File C:\WINDOWS\system32\wmserror.dll
Mon Jan 24 14:16:55 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit13.zip is Not Scanned
Mon Jan 24 14:16:55 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit14.zip is Not Scanned
Mon Jan 24 14:16:55 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit15.zip is Not Scanned
Mon Jan 24 14:16:55 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit16.zip is Not Scanned
Mon Jan 24 14:16:55 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit17.zip is Not Scanned
Mon Jan 24 14:16:55 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit18.zip is Not Scanned
Mon Jan 24 14:16:55 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit19.zip is Not Scanned
Mon Jan 24 14:16:55 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit2.zip is Not Scanned
Mon Jan 24 14:16:55 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit20.zip is Not Scanned
Mon Jan 24 14:16:55 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit21.zip is Not Scanned
Mon Jan 24 14:16:56 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit22.zip is Not Scanned
Mon Jan 24 14:16:56 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit23.zip is Not Scanned
Mon Jan 24 14:16:56 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit24.zip is Not Scanned
Mon Jan 24 14:16:56 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit25.zip is Not Scanned
Mon Jan 24 14:16:56 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit26.zip is Not Scanned
Mon Jan 24 14:16:56 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit27.zip is Not Scanned
Mon Jan 24 14:16:56 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit28.zip is Not Scanned
Mon Jan 24 14:16:56 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit29.zip is Not Scanned
Mon Jan 24 14:16:56 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit3.zip is Not Scanned
Mon Jan 24 14:16:57 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit30.zip is Not Scanned
Mon Jan 24 14:16:57 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit31.zip is Not Scanned
Mon Jan 24 14:16:57 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit32.zip is Not Scanned
Mon Jan 24 14:16:57 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit4.zip is Not Scanned
Mon Jan 24 14:16:57 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit5.zip is Not Scanned
Mon Jan 24 14:16:57 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit6.zip is Not Scanned
Mon Jan 24 14:16:57 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit7.zip is Not Scanned

Mon Jan 24 14:16:57 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit8.zip is Not Scanned
Mon Jan 24 14:16:57 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\DSOExploit9.zip is Not Scanned
Mon Jan 24 14:16:57 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\Hackerag.zip is Not Scanned
Mon Jan 24 14:16:58 2005 => Result: ERROR!!! File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy\Recovery\NetComGmbH.zip is Not Scanned
Mon Jan 24 14:22:33 2005 => Scanning File C:\Dokumente und Einstellungen\.....\Favoriten\PC-hilfen\CHIP Online - Forum Instant Messenger - ICQ C++ Runtime Error - 1.url [**]
Mon Jan 24 14:22:33 2005 => Scanning File C:\Dokumente und Einstellungen\.....\Favoriten\PC-hilfen\[ DFÜ - Infocenter ] - TIPPS RAS & Outlook ERROR CODES und vieles mehr.url [**]
Mon Jan 24 14:24:39 2005 => Result: ERROR!!! File C:\Download\dp(1).zip is Not Scanned
Mon Jan 24 14:24:39 2005 => Result: ERROR!!! File C:\Download\dp(2).zip is Not Scanned
Mon Jan 24 14:24:39 2005 => Result: ERROR!!! File C:\Download\dp(3).zip is Not Scanned
Mon Jan 24 14:24:39 2005 => C:\Download\dp(3).zip not Scanned. Possibly password
Mon Jan 24 14:24:39 2005 => Result: ERROR!!! File C:\Download\dp(4).zip is Not Scanned
Mon Jan 24 14:24:39 2005 => C:\Download\dp(4).zip not Scanned. Possibly password protected...
Mon Jan 24 14:24:40 2005 => Result: ERROR!!! File C:\Download\dp(5).zip is Not Scanned
Mon Jan 24 14:24:40 2005 => Result: ERROR!!! File C:\Download\dp.zip is Not Scanned
Mon Jan 24 14:24:40 2005 => C:\Download\dp.zip not Scanned. Possibly password protected...
Mon Jan 24 14:25:25 2005 => Result: ERROR!!! File C:\My Download Files\dp.zip is Not Scanned
Mon Jan 24 14:25:25 2005 => C:\My Download Files\dp.zip not Scanned. Possibly password protected...
Mon Jan 24 14:31:13 2005 => Scanning File C:\Programme\Clicktionary\Data\ErrorLog.log [**]
Mon Jan 24 14:32:21 2005 => Scanning File C:\Programme\eBay\eBay Toolbar\Htm\App\error.html
Mon Jan 24 14:32:27 2005 => Scanning File C:\Programme\Elaborate Bytes\CloneCD\Sounds\ERROR.WAV [**]
Mon Jan 24 14:33:20 2005 => Scanning File C:\Programme\Gemeinsame Dateien\Microsoft Shared\MSSearch\Bin\MSSERROR.DLLC:\Programme\MAXON\CINEMA_4D_CE6\Resource\html\error.html
Mon Jan 24 14:37:16 2005 => Scanning File C:\Programme\Medion\MD 40256\ManagerError.log [**]
Mon Jan 24 14:37:58 2005 => Scanning File C:\Programme\Medion\PowerVCR II\Error.txt [**]
Mon Jan 24 14:37:58 2005 => Scanning File C:\Programme\Medion\PowerVCR II\ErrPoster.dll
Mon Jan 24 14:43:14 2005 => Scanning File C:\Programme\Putzi4Win 1.5-e\_ERROR.WAV [**]
Mon Jan 24 14:44:34 2005 => Scanning File C:\Programme\Teledat\WCOM\SYSTEM\AUDIO\error.wav [**]C:\Programme\Teledat\WCOM\SYSTEM\AUDIO\ERRORSMS.WAV [**]
Mon Jan 24 14:44:34 2005 => Scanning File C:\Programme\Teledat\WCOM\SYSTEM\AUDIO\NEWERROR.WAV [**]

Mon Jan 24 14:47:15 2005 => Scanning File C:\Programme\Winamp\Plugins\freeform\xml\wasabi\window\error.png [**]
Mon Jan 24 14:47:34 2005 => Scanning File C:\Programme\Winamp3\Wacs\xml\guiobjects\wasabi\window\error.png [**]
Mon Jan 24 14:47:58 2005 => Scanning File C:\Programme\Zone Labs\ZoneAlarm\ErrorLog.txt [**]
Mon Jan 24 14:49:05 2005 => Scanning File C:\WINDOWS\$NtServicePackUninstall$\asferror. C:\WINDOWS\$NtServicePackUninstall$\asferror.dll.000
Mon Jan 24 14:49:59 2005 => Scanning File C:\WINDOWS\$NtServicePackUninstall$\error.js
Mon Jan 24 14:54:29 2005 => Scanning File C:\WINDOWS\$NtServicePackUninstall$\wmerror.dll

Mon Jan 24 14:56:35 2005 => Scanning File C:\WINDOWS\I386\ACTERROR.HT_ [**]
Mon Jan 24 14:56:36 2005 => Scanning File C:\WINDOWS\I386\ASFERROR.DL_ [**]
Mon Jan 24 14:56:43 2005 => Scanning File C:\WINDOWS\I386\COMPDATA\APMERROR.HTM
Mon Jan 24 14:56:43 2005 => Scanning File C:\WINDOWS\I386\COMPDATA\APMERROR.TXT [**]
Mon Jan 24 14:56:43 2005 => Scanning File C:\WINDOWS\I386\COMPDATA\BOSERROR.HTM
Mon Jan 24 14:56:43 2005 => Scanning File C:\WINDOWS\I386\COMPDATA\BOSERROR.TXT [**]
Mon Jan 24 14:56:58 2005 => Scanning File C:\WINDOWS\I386\ERROR.JS_ [**]
Mon Jan 24 14:56:58 2005 => Scanning File C:\WINDOWS\I386\ERROR.XM_ [**]
Mon Jan 24 14:57:54 2005 => Scanning File C:\WINDOWS\I386\XPERROR.WA_ [**]
Mon Jan 24 14:57:56 2005 => Scanning File C:\WINDOWS\IE4 Error Log.txt [**]
Mon Jan 24 14:59:40 2005 => Scanning File C:\WINDOWS\Internet Logs\ErrorLog.txt [**]
Mon Jan 24 15:00:44 2005 => Scanning File C:\WINDOWS\PCHEALTH\HELPCTR\System\ErrMsg\ErrorMessagesOffline.htm
Mon Jan 24 15:00:44 2005 => Scanning Folder: C:\WINDOWS\PCHEALTH\HELPCTR\System\errors\*.*
Mon Jan 24 15:00:44 2005 => Scanning File C:\WINDOWS\PCHEALTH\HELPCTR\System\errors\badurl.htm
Mon Jan 24 15:00:44 2005 => Scanning File C:\WINDOWS\PCHEALTH\HELPCTR\System\errors\connection.htm
Mon Jan 24 15:00:44 2005 => Scanning File C:\WINDOWS\PCHEALTH\HELPCTR\System\errors\indexfirstlevel.htmC:\WINDOWS\PCHEALTH\HELPCTR\System\errors\notfound.htm
Mon Jan 24 15:00:44 2005 => Scanning File C:\WINDOWS\PCHEALTH\HELPCTR\System\errors\offline.htmC:\WINDOWS\PCHEALTH\HELPCTR\System\errors\offline.htm
Mon Jan 24 15:00:44 2005 => Scanning File C:\WINDOWS\PCHEALTH\HELPCTR\System\errors\redirect.htm
Mon Jan 24 15:00:44 2005 => Scanning File C:\WINDOWS\PCHEALTH\HELPCTR\System\errors\unreachable.htm
Mon Jan 24 15:00:45 2005 => Scanning File C:\WINDOWS\PCHEALTH\HELPCTR\System\images\error.gif [**]
Mon Jan 24 15:00:49 2005 => Scanning File C:\WINDOWS\PCHEALTH\HELPCTR\System\Remote Assistance\Interaction\Common\ErrorMsgs.htm
Mon Jan 24 15:00:51 2005 => Scanning File C:\WINDOWS\PCHEALTH\HELPCTR\System\sysinfo\graphics\error.gif [**]
Mon Jan 24 15:01:07 2005 => Scanning File C:\WINDOWS\RegisteredPackages\{3695EB93-6443-448D-8E2E-1F6F4FC79BC1}\asferror.dllC:\WINDOWS\RegisteredPackages\{89FDAB62-6F46-4C7E-A559-E00B9A0BACB6}\wmserror.dll
Mon Jan 24 15:01:16 2005 => Scanning FileMon Jan 24 15:01:27 2005 => Scanning File C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\asferror.dll
Mon Jan 24 15:01:28 2005 => Scanning File C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}\wmerror.dll
Mon Jan 24 15:01:29 2005 => Scanning File C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\asferror.dll
Mon Jan 24 15:01:30 2005 => Scanning File C:\WINDOWS\RegisteredPackages\{DD90D410-1823-43EB-9A16-A2331BF08799}$BACKUP$\System\wmerror.dll
Mon Jan 24 15:01:43 2005 => Scanning File C:\WINDOWS\ServicePackFiles\i386\asferror.dll
Mon Jan 24 15:02:14 2005 => Scanning File C:\WINDOWS\ServicePackFiles\i386\error.js
Mon Jan 24 15:04:25 2005 => Scanning File C:\WINDOWS\ServicePackFiles\i386\wmerror.dll
Mon Jan 24 15:05:10 2005 => Scanning File C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\93b9023ce74cc2dad700644c5dc522ef\backup\asferror.dll
Mon Jan 24 15:05:38 2005 => Scanning File C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\93b9023ce74cc2dad700644c5dc522ef\backup\error.js
Mon Jan 24 15:07:00 2005 => Scanning File C:\WINDOWS\srchasst\mui\0407\error.xml
Mon Jan 24 15:07:15 2005 => Scanning File C:\WINDOWS\system32\asferror.dll
Mon Jan 24 15:08:08 2005 => Scanning File C:\WINDOWS\system32\dllcache\asferror.dll
Mon Jan 24 15:09:18 2005 => Scanning File C:\WINDOWS\system32\dllcache\wmerror.dll
Mon Jan 24 15:11:15 2005 => Scanning Folder: C:\WINDOWS\system32\oobe\error\*.*
Mon Jan 24 15:11:15 2005 => Scanning File C:\WINDOWS\system32\oobe\error\cnncterr.htm

Mon Jan 24 15:11:15 2005 => Scanning File C:\WINDOWS\system32\oobe\error\dialtone.htm
Mon Jan 24 15:11:15 2005 => Scanning File C:\WINDOWS\system32\oobe\error\hndshake.htm
Mon Jan 24 15:11:15 2005 => Scanning File C:\WINDOWS\system32\oobe\error\isp2busy.htm
Mon Jan 24 15:11:15 2005 => Scanning File C:\WINDOWS\system32\oobe\error\noanswer.htm
Mon Jan 24 15:11:16 2005 => Scanning File C:\WINDOWS\system32\oobe\error\pberr.htm
Mon Jan 24 15:11:16 2005 => Scanning File C:\WINDOWS\system32\oobe\error\pulse.htm
Mon Jan 24 15:11:16 2005 => Scanning File C:\WINDOWS\system32\oobe\error\toobusy.htm
Mon Jan 24 15:11:16 2005 => Scanning File C:\WINDOWS\system32\oobe\error.js
Mon Jan 24 15:11:18 2005 => Scanning Folder: C:\WINDOWS\system32\oobe\icserror\*.*
Mon Jan 24 15:11:18 2005 => Scanning File C:\WINDOWS\system32\oobe\icserror\icsdc.htm
Mon Jan 24 15:11:20 2005 => Scanning Folder: C:\WINDOWS\system32\oobe\isperror\*.*
Mon Jan 24 15:11:20 2005 => Scanning File C:\WINDOWS\system32\oobe\isperror\ispcnerr.htm
Mon Jan 24 15:11:20 2005 => Scanning File C:\WINDOWS\system32\oobe\isperror\ispdtone.htm
Mon Jan 24 15:11:20 2005 => Scanning File C:\WINDOWS\system32\oobe\isperror\isphdshk.htm
Mon Jan 24 15:11:20 2005 => Scanning File C:\WINDOWS\system32\oobe\isperror\ispins.htm
Mon Jan 24 15:11:20 2005 => Scanning File C:\WINDOWS\system32\oobe\isperror\ispnoanw.htm
Mon Jan 24 15:11:20 2005 => Scanning File C:\WINDOWS\system32\oobe\isperror\isppberr.htm
Mon Jan 24 15:11:20 2005 => Scanning File C:\WINDOWS\system32\oobe\isperror\ispphbsy.htm
Mon Jan 24 15:11:20 2005 => Scanning File C:\WINDOWS\system32\oobe\isperror\ispsbusy.htm
Mon Jan 24 15:11:21 2005 => Scanning File C:\WINDOWS\system32\oobe\mui\041e\error.js
Mon Jan 24 15:11:22 2005 => Scanning Folder: C:\WINDOWS\system32\oobe\regerror\*.*
Mon Jan 24 15:11:22 2005 => Scanning File C:\WINDOWS\system32\oobe\regerror\rcnterr.htm
Mon Jan 24 15:11:22 2005 => Scanning File C:\WINDOWS\system32\oobe\regerror\rdtone.htm
Mon Jan 24 15:11:22 2005 => Scanning File C:\WINDOWS\system32\oobe\regerror\rhndshk.htm
Mon Jan 24 15:11:22 2005 => Scanning File C:\WINDOWS\system32\oobe\regerror\rnoansw.htm
Mon Jan 24 15:11:22 2005 => Scanning File C:\WINDOWS\system32\oobe\regerror\rnomdm.htm
Mon Jan 24 15:11:22 2005 => Scanning File C:\WINDOWS\system32\oobe\regerror\rpberr.htm
Mon Jan 24 15:11:22 2005 => Scanning File C:\WINDOWS\system32\oobe\regerror\rpulse.htm
Mon Jan 24 15:11:22 2005 => Scanning File C:\WINDOWS\system32\oobe\regerror\rtoobusy.htm
Mon Jan 24 15:11:23 2005 => Scanning File C:\WINDOWS\system32\oobe\setup\acterror.htm
Mon Jan 24 15:12:55 2005 => Scanning File C:\WINDOWS\system32\wmerror.dll
Mon Jan 24 15:12:57 2005 => Scanning File C:\WINDOWS\system32\wmserror.dll
Mon Jan 24 15:13:37 2005 => Scanning File D:\f7a41795ae7c83403\asferror.dll

Vielen Dank im voraus fürs Überprüfen

Ich hab auch nochmal Stinger drüberlaufen lassen, allerdings nicht im abgesicherten Modus:

McAfee AVERT Stinger Version 2.4.7 built on Jan 3 2005

Copyright (C) 2004 Networks Associates Technology, Inc. All Rights Reserved.

Virus data file v1000 created on Dec 14 2004.

Ready to scan for 47 viruses, trojans and variants.



Scan initiated on Mon Jan 24 12:30:17 2005

C:\Dokumente und Einstellungen\-----\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Details.zl7

Found the W32/Bagle.z@MM virus !!!

C:\Dokumente und Einstellungen\------\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Details.zl7 has been deleted.

C:\Dokumente und Einstellungen\------\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Details.zlb

Found the W32/Bagle.z@MM!vbs virus !!!

C:\Dokumente und Einstellungen\-----\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Details.zlb has been deleted.

C:\Dokumente und Einstellungen\------\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Details.zlv

Found the W32/Bagle@MM!vbs virus !!!

C:\Dokumente und Einstellungen\-----\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Details.zlv has been deleted.

C:\Dokumente und Einstellungen\-----\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Details.zm9

Found the W32/Bagle.gen@MM!pwdzip virus !!!

C:\Dokumente und Einstellungen\-----\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Details.zm9 has been deleted.

C:\Dokumente und Einstellungen\------\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Document.zlv

Found the W32/Bagle@MM!vbs virus !!!

C:\Dokumente und Einstellungen\-----\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Document.zlv has been deleted.

C:\Dokumente und Einstellungen\-----\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Info.zlb

Found the W32/Bagle.z@MM!vbs virus !!!

C:\Dokumente und Einstellungen\-----\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Info.zlb has been deleted.

C:\Dokumente und Einstellungen\-----\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Readme.zlv

Found the W32/Bagle@MM!vbs virus !!!

C:\Dokumente und Einstellungen\------\Lokale Einstellungen\Anwendungsdaten\IM\Identities\{FC96DF6B-CDAC-486F-B216-6CDF87017BBD}\Message Store\Attachments\Readme.zlv has been deleted.

Number of clean files: 156327

Number of infected files: 7

Number of files deleted: 7

Manuelle Entfernung von Viren File C:\WINDOWS\system32\kvdqdjmw.exe infected by "Trojan-Proxy.Win32.Agent.l" Virus.
File C:\WINDOWS\system32\ttctvsql.dll infected by "Trojan-Downloader.Win32.Agent.gn" Virus.
File C:\Download\backups\backup-20050123-211438-461.dll infected by "Trojan.Win32.Golid.e" Virus.
File C:\Programme\MySearch\bar\1.bin\NPMYSRCH.DLL infected by "not-a-virus:AdWare.ToolBar.MyWay.f" Virus.
File C:\Programme\MySearch\bar\1.bin\S4BAR.DLL infected by "not-a-virus:AdWare.ToolBar.MyWay.f" Virus.
File C:\WINDOWS\system32\kvdqdjmw.exe infected by "Trojan-Proxy.Win32.Agent.l" Virus.
File C:\WINDOWS\system32\ttctvsql.dll infected by "Trojan-Downloader.Win32.Agent.gn" Virus. Neues HJT Logfile erstellen, posten.

Da "Trojan.Win32.Golid.e" neue Malware ist, deren Wirkungsweise noch unbekannt ist - alternativ und sicher: