Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Probs mit dem IE... HELP!!! (https://www.trojaner-board.de/14218-probs-ie-help.html)

Jana... 21.02.2005 00:06

Probs mit dem IE... HELP!!!
 
Einen schönen guten Abend zusammen!

Irgendwas hat sich wieder auf meinem Rechner eingeschlichen, grrr... :heulen:

Ab und zu zeigt der IE garnichts mehr an, wenn ich ihn dann schließe und neu starte tut alles wieder und er stürzt (gelegentlich aber nur (komisch.. :confused: )) wieder ab und zeigt nichts mehr an.
Es öffnen sich auch Pop-Up Fenster...

Vielleicht kann mir jemand helfen und sich mal mein Logfile anschauen!

Danke!!! :o

Grüße, Jana...

_______________________________________________________________
Logfile of HijackThis v1.99.0
Scan saved at 23:57:41, on 20.02.2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\LEXBCES.EXE
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\LEXPPS.EXE
C:\Programme\AVPersonal\AVWUPSRV.EXE
C:\Programme\Bluetooth Software\bin\btwdins.exe
C:\WINNT\System32\svchost.exe
C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
C:\Programme\Norton AntiVirus\navapsvc.exe
C:\Programme\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINNT\system32\regsvc.exe
C:\Programme\Norton AntiVirus\SAVScan.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Programme\Java\j2re1.4.2_06\bin\jusched.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\Bluetooth Software\BTTray.exe
C:\WINNT\system32\srvdll32.exe
C:\WINNT\system32\tcp3dv2.exe
C:\Programme\Outlook Express\msimn.exe
C:\Programme\CxtPls\CxtPls.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\Programme\ad-aware se professional\Ad-Aware SE Personal\Ad-Aware.exe
C:\Programme\hijackthis\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.web.de/
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: BTGrabObj Class - {00000000-F09C-02B4-6EC2-AD0300000000} - C:\WINNT\BTGrab.dll
O2 - BHO: (no name) - {016235BE-59D4-4CEB-ADD5-E2378282A1D9} - C:\Programme\CxtPls\cxtpls.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_06\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Mirabilis ICQ] C:\PROGRA~1\ICQ200~1\ICQ\ICQNet.exe
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [AdTools Service] C:\Program Files\AdTools Service\AdTools.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [farmmext] C:\WINNT\farmmext.exe
O4 - HKLM\..\Run: [AutoUpdater] "C:\Program Files\AutoUpdate\AutoUpdate.exe"
O4 - HKLM\..\Run: [xs4P39T] tcp3dv2.exe
O4 - HKCU\..\Run: [gBvFRVf4X] srvdll32.exe
O4 - Global Startup: BTTray.lnk = C:\Programme\Bluetooth Software\BTTray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Senden an &Bluetooth - C:\Programme\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\Msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\Msjava.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ200~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ200~1\ICQ\ICQ.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Programme\aim\aim.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\winnt\system32\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\winnt\system32\aklsp.dll
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/189f4dd1...dxIE601_de.cab
O16 - DPF: {9E98E84C-79E1-49C3-82EB-798FCD552EFB} - http://advnt01.com/dialer/internazionale_ver4.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/ms...downloader.cab
O23 - Service: AntiVir Update - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: Bluetooth Service - WIDCOMM, Inc. - C:\Programme\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
O23 - Service: LexBce Server - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE
O23 - Service: Macromedia Licensing Service - Unknown - C:\Programme\Gemeinsame Dateien\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton AntiVirus Auto-Protect-Dienst - Symantec Corporation - C:\Programme\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection - Symantec Corporation - C:\Programme\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Programme\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SymWMI Service - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe

Haui45 21.02.2005 00:09

Hallo,
in deinem Log stimmt so einiges nicht. Führe deshalb dies aus:

Scanne dein System bitte mit eScan im abgesicherten Modus (Anleitung genau befolgen!) und poste was gefunden wird. Am einfachsten machst du das so:
Direkt nach dem Scan, den Inhalt des Fensters "Virus Log Information" kopieren (Strg+A alles markieren; Strg+C kopieren) und dann in einer Textdatei abspeichern (z.B. mit Wordpad o.ä.). Dazu den Inhalt mit Strg+V in das Textverarbeitungsprogramm einfügen und das Dokument dann abspeichern. Nach dem Neustart kannst du die Infos aus der Datei dann einfach ins Forum kopieren.

Poste außerdem folgendes aus der mwav.log (steht ganz am Ende):
Zitat:

Total Number of Files Scanned:
Total Number of Virus(es) Found:
Total Number of Disinfected Files:
Total Number of Files Renamed:
Total Number of Deleted Files:
Total Number of Errors:
Time Elapsed:

Jana... 21.02.2005 10:10

Soo, ich hab escan mal laufen lassen und folgendes Ergebnis erhalten:

_______________________________________________________________
File C:\WINNT\system32\aklsp.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\WINNT\BTGrab.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\WINNT\farmmext.exe infected by "Trojan-Downloader.Win32.Stubby.c" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\srvdll32.exe infected by "Trojan-Downloader.Win32.Agent.ji" Virus. Action Taken: No Action Taken.
File C:\WINNT\70tovmto.exe infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken.
File C:\WINNT\cxtpls_loader.exe infected by "not-a-virus:AdWare.Apropos.b" Virus. Action Taken: No Action Taken.
File C:\WINNT\dlmax.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\WINNT\iconu.exe infected by "not-a-virus:AdWare.Zestyfind" Virus. Action Taken: No Action Taken.
File C:\WINNT\SSK_B5.EXE infected by "Trojan-Dropper.Win32.SurfSide.a" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\2b3fsk0h.dll infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\akcore.dll infected by "not-a-virus:AdWare.Coreak" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\aklsp.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\akrules.dll infected by "Trojan-Downloader.Win32.Agent.bt" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\akupd.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\bln02nqv.exe infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\gah95on6.exe infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\akcore.dll infected by "not-a-virus:AdWare.Coreak" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\aklsp.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\akrules.dll infected by "Trojan-Downloader.Win32.Agent.bt" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\bw2.com infected by "Trojan-Dropper.Win32.Small.of" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\DrTemp\thnall1b.exe infected by "not-a-virus:AdWare.BetterInternet" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\iF2.tmp infected by "not-a-virus:AdWare.SurfSide.a" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\nsdtmp09.dll infected by "not-a-virus:AdWare.MetaDirect.a" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\SskUpdater.exe infected by "not-a-virus:AdWare.TotalVelocity.af" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\temp.frA9CF infected by "not-a-virus:AdWare.Apropos.e" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI27C1.tmp\farmmext.cab infected by "Trojan-Downloader.Win32.Stubby.c" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI27C1.tmp\farmmext.exe infected by "Trojan-Downloader.Win32.Stubby.c" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI2FE8.tmp\btgrab.cab infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI2FE8.tmp\BTGrab.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI2FE8.tmp\polall1b.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI5020.tmp\btgrab.cab infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI5020.tmp\BTGrab.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI5020.tmp\polall1b.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI6BFA.tmp\btgrab.cab infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI6BFA.tmp\BTGrab.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI6BFA.tmp\polall1b.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI6F8D.tmp\btgrab.cab infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI6F8D.tmp\BTGrab.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI6F8D.tmp\polall1b.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI75E5.tmp\dlmax.cab infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\THI75E5.tmp\dlmax.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\DOKUME~1\Tatjana1\LOKALE~1\Temp\WToolsB.dll infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Anwendungsdaten\Microsoft\Internet Explorer\V0.26.dat infected by "Trojan.Win32.Dialer.fy" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\akcore.dll infected by "not-a-virus:AdWare.Coreak" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\aklsp.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\akrules.dll infected by "Trojan-Downloader.Win32.Agent.bt" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\bw2.com infected by "Trojan-Dropper.Win32.Small.of" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\DrTemp\thnall1b.exe infected by "not-a-virus:AdWare.BetterInternet" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\iF2.tmp infected by "not-a-virus:AdWare.SurfSide.a" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\nsdtmp09.dll infected by "not-a-virus:AdWare.MetaDirect.a" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\SskUpdater.exe infected by "not-a-virus:AdWare.TotalVelocity.af" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\temp.frA9CF infected by "not-a-virus:AdWare.Apropos.e" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI27C1.tmp\farmmext.cab infected by "Trojan-Downloader.Win32.Stubby.c" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI27C1.tmp\farmmext.exe infected by "Trojan-Downloader.Win32.Stubby.c" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI2FE8.tmp\btgrab.cab infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI2FE8.tmp\BTGrab.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI2FE8.tmp\polall1b.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI5020.tmp\btgrab.cab infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI5020.tmp\BTGrab.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI5020.tmp\polall1b.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI6BFA.tmp\btgrab.cab infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI6BFA.tmp\BTGrab.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI6BFA.tmp\polall1b.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI6F8D.tmp\btgrab.cab infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI6F8D.tmp\BTGrab.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI6F8D.tmp\polall1b.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI75E5.tmp\dlmax.cab infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\THI75E5.tmp\dlmax.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\Tatjana1\Lokale Einstellungen\Temp\WToolsB.dll infected by "not-a-virus:AdWare.Wintol.t" Virus. Action Taken: No Action Taken.
File C:\Programme\hijackthis\hijackthis\backups\backup-20050209-235353-820.dll infected by "Trojan.Win32.StartPage.gv" Virus. Action Taken: No Action Taken.
File C:\Programme\hijackthis\hijackthis\backups\backup-20050210-002556-316.dll infected by "Trojan.Win32.StartPage.gv" Virus. Action Taken: No Action Taken.
File C:\Programme\hijackthis\hijackthis\backups\backup-20050210-100235-360.dll infected by "Trojan.Win32.StartPage.gv" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\1F0406C8 infected by "Trojan-Downloader.JS.IstBar.b" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\23BA0EF5.exe tagged as not-a-virus:RiskWare.PSWTool.Brutus. No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\246619BE.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\26B0519C.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\271E2F3A.exe tagged as not-a-virus:RiskWare.PSWTool.Brutus. No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\2CF64CCC.exe tagged as not-a-virus:RiskWare.PSWTool.Brutus. No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\2D7C3C21.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\2E116EA1.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\2E386676.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\2FB36CD5.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\34E27B6A.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\380D00C9.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\3DA10581.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\3FF20619.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\4718322A.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\472C2E14.js infected by "Trojan.JS.StartPage.a" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\4BBE7670.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken.
File C:\Programme\Norton AntiVirus\Quarantine\7E4305F8.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken.
File C:\Programme\SED\SED.exe infected by "not-a-virus:AdWare.Cres" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00419082.exe infected by "Trojan-Downloader.Win32.Dyfuca.du" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00419084.dll infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00419121.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00432594.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00432783.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00432785.DLL infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00434390.exe infected by "not-a-virus:AdWare.Look2Me.r" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00434400.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00434403.dl_ infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00434406.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00434413.exe infected by "Trojan-Downloader.Win32.Dyfuca.du" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00434416.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00434419.dll infected by "not-a-virus:AdWare.TotalVelocity.af" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00434421.dll infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00434424.exe infected by "not-a-virus:AdWare.Apropos.f" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00436940.exe infected by "not-a-virus:AdWare.Apropos.f" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00436946.exe infected by "not-a-virus:AdWare.WinShow.f" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00436948.EXE infected by "Trojan-Downloader.Win32.Apropo.g" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00436951.EXE infected by "not-a-virus:AdWare.WinAD.k" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00436955.EXE infected by "Trojan-Downloader.Win32.Dyfuca.du" Virus. Action Taken: No Action Taken.
File C:\WINNT\70tovmto.exe infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken.
File C:\WINNT\cxtpls_loader.exe infected by "not-a-virus:AdWare.Apropos.b" Virus. Action Taken: No Action Taken.
File C:\WINNT\dlmax.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken.
File C:\WINNT\Downloaded Program Files\AdToolsX.dll infected by "not-a-virus:AdWare.WinAD.x" Virus. Action Taken: No Action Taken.
File C:\WINNT\Downloaded Program Files\CONFLICT.1\AdToolsX.dll infected by "not-a-virus:AdWare.WinAD.x" Virus. Action Taken: No Action Taken.
File C:\WINNT\Downloaded Program Files\CONFLICT.1\HDPlugin1101.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken.
File C:\WINNT\Downloaded Program Files\mp3.ocx infected by "Trojan-Downloader.Win32.Agent.ex" Virus. Action Taken: No Action Taken.
File C:\WINNT\iconu.exe infected by "not-a-virus:AdWare.Zestyfind" Virus. Action Taken: No Action Taken.
File C:\WINNT\SSK_B5.EXE infected by "Trojan-Dropper.Win32.SurfSide.a" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\2b3fsk0h.dll infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\akcore.dll infected by "not-a-virus:AdWare.Coreak" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\aklsp.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\akrules.dll infected by "Trojan-Downloader.Win32.Agent.bt" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\akupd.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\bln02nqv.exe infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\gah95on6.exe infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken.
File C:\WINNT\system32\Tools\Restart.exe tagged as not-a-virus:RiskWare.Tool.Destart. No Action Taken.


Mon Feb 21 02:48:55 2005 => Total Files Scanned: 157223
Mon Feb 21 02:48:55 2005 => Total Virus(es) Found: 128
Mon Feb 21 02:48:55 2005 => Total Disinfected Files: 0
Mon Feb 21 02:48:55 2005 => Total Files Renamed: 0
Mon Feb 21 02:48:55 2005 => Total Deleted Files: 0
Mon Feb 21 02:48:55 2005 => Total Errors: 16
Mon Feb 21 02:48:55 2005 => Time Elapsed: 02:13:14
Mon Feb 21 02:48:55 2005 => Virus Database Date: 2005/02/14
Mon Feb 21 02:48:55 2005 => Virus Database Count: 118236

_________________________________________________________________

Ich denke das ist einigens... :heulen:
Ich hoffe dass ist so noch irgendwie hinzubekommen???

Grüße, Jana...

chaosman 21.02.2005 10:59

@Jana...
du hast eine ganze sammlung, ich würde an deiner stelle neuaufsetzen(formatC).
hier eine anleitung
http://www.trojaner-board.de/showpos...28&postcount=2


vorher die dialer auf diskette speichern, zwecks beweismittel falls du nicht mit reinen DSL unterwegs bist.
anders müßtest du LSP-Fix http://www.cexx.org/lspfix.htm
downloaden.
spybot downloaden und updaten http://www.safer-networking.org/de/a...-managers.html
clearprog downloaden.

in den abgesicherten modus wechslen,
spybot scannen lassen, löschen was es vorschlägt.
dein papierkorb mal leeren, clearprog starten, alle häkchen bei IE und windows setzen und löschen.
dann sind alle Temp und Recycler schon mal weg, den rest manuell löschen
neu booten,
wenn danach der Inetverbindung nicht geht, mit Lsp-Fix reparieren.

nochmals, ich rate dir neuaufzusetzen, wenn du dein system wieder vertrauen willst.

chaosman


Alle Zeitangaben in WEZ +1. Es ist jetzt 13:14 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131