|
@ Rionil und smiti Eröffnet jeweils einen eigenen Thread und schildert dort Euer Problem, denn ihr seht ja selbst, daß dies nur zur Verwirrung und Unübersichtlichkeit beiträgt. ;) http://www.cosgan.de/images/more/schilder/019.gif Fiat770 ist der letzte dem in diesem Thread noch geholfen wird und dann werde ich ihn schließen. |
Hallo Cidre, hab alles nach Anweisung getan und hier ist mein escan_neu.txt ( danke an Hani45 für die tolle Anleitung) :party: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Funde für "infected" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Wed May 11 16:17:58 2005 => System found infected with Alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken. Wed May 11 16:17:58 2005 => File System Found infected by "Alexa Spyware/Adware" Virus. Action Taken: No Action Taken. Wed May 11 16:18:02 2005 => File C:\WINDOWS\cxtpls_loader.exe infected by "Trojan-Downloader.Win32.Apropo.ab" Virus. Action Taken: No Action Taken. Wed May 11 16:18:03 2005 => File C:\WINDOWS\installer_SIAC.exe infected by "Trojan-Downloader.Win32.Adload.a" Virus. Action Taken: No Action Taken. Wed May 11 16:18:04 2005 => File C:\WINDOWS\loadclean.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: No Action Taken. Wed May 11 16:18:04 2005 => File C:\WINDOWS\optimize.exe infected by "Trojan-Downloader.Win32.Dyfuca.dk" Virus. Action Taken: No Action Taken. Wed May 11 16:18:05 2005 => File C:\WINDOWS\shop1004.exe infected by "not-a-virus:AdWare.Sahat.m" Virus. Action Taken: No Action Taken. Wed May 11 16:18:05 2005 => File C:\WINDOWS\stubinstaller5356.exe infected by "Trojan-Downloader.Win32.Small.asf" Virus. Action Taken: No Action Taken. Wed May 11 16:18:16 2005 => File C:\WINDOWS\System32\cmd32.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: No Action Taken. Wed May 11 16:18:48 2005 => File C:\WINDOWS\System32\lap.dll infected by "Trojan.Win32.StartPage.ix" Virus. Action Taken: No Action Taken. Wed May 11 16:18:49 2005 => File C:\WINDOWS\System32\lpzxcz324534xct.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: No Action Taken. Wed May 11 16:19:33 2005 => File C:\WINDOWS\System32\us3432xzcb.exe infected by "Trojan.Win32.StartPage.yf" Virus. Action Taken: No Action Taken. Wed May 11 16:19:39 2005 => File C:\WINDOWS\System32\wldr.dll infected by "Trojan-Downloader.Win32.Agent.le" Virus. Action Taken: No Action Taken. Wed May 11 16:19:51 2005 => File C:\DOKUME~1\name\LOKALE~1\TEMPOR~1\Content.IE5\2BIZEDUJ\ieacslave[1].exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: No Action Taken. Wed May 11 16:19:51 2005 => File C:\DOKUME~1\name\LOKALE~1\TEMPOR~1\Content.IE5\2BIZEDUJ\ieac[1].exe infected by "Trojan-Downloader.Win32.Delf.lf" Virus. Action Taken: No Action Taken. Wed May 11 16:20:20 2005 => File C:\DOKUME~1\name\LOKALE~1\TEMPOR~1\Content.IE5\KXW9E78P\reserv[1].exe infected by "Trojan-Downloader.Win32.Small.aqt" Virus. Action Taken: No Action Taken. Wed May 11 16:20:21 2005 => File C:\DOKUME~1\name\LOKALE~1\TEMPOR~1\Content.IE5\KXW9E78P\toolbar[1].exe infected by "not-a-virus:AdWare.ToolBar.ISearch.d" Virus. Action Taken: No Action Taken. Wed May 11 16:20:27 2005 => File C:\DOKUME~1\name\LOKALE~1\TEMPOR~1\Content.IE5\Q9GB6565\a1[1].htm infected by "Trojan-Clicker.JS.Linker.j" Virus. Action Taken: No Action Taken. Wed May 11 16:20:28 2005 => File C:\DOKUME~1\name\LOKALE~1\TEMPOR~1\Content.IE5\Q9GB6565\desktop[1].exe infected by "Trojan-Downloader.Win32.Agent.le" Virus. Action Taken: No Action Taken. Wed May 11 16:20:28 2005 => File C:\DOKUME~1\name\LOKALE~1\TEMPOR~1\Content.IE5\Q9GB6565\ieacmain[1].exe infected by "Trojan.Win32.StartPage.yf" Virus. Action Taken: No Action Taken. Wed May 11 16:20:34 2005 => File C:\DOKUME~1\name\LOKALE~1\TEMPOR~1\Content.IE5\WXKF4Z8N\a1[1].htm infected by "Trojan-Clicker.JS.Linker.j" Virus. Action Taken: No Action Taken. Wed May 11 16:20:34 2005 => File C:\DOKUME~1\name\LOKALE~1\TEMPOR~1\Content.IE5\WXKF4Z8N\a772a97b[1].js infected by "Trojan-Downloader.JS.WinAD.c" Virus. Action Taken: No Action Taken. Wed May 11 16:20:34 2005 => File C:\DOKUME~1\name\LOKALE~1\TEMPOR~1\Content.IE5\WXKF4Z8N\AproposClientInstaller[1].exe infected by "Virus.Win32.Porad.a" Virus. Action Taken: No Action Taken. Wed May 11 16:20:36 2005 => File C:\DOKUME~1\name\LOKALE~1\TEMPOR~1\Content.IE5\WXKF4Z8N\mtrslib2[1].js infected by "Trojan-Downloader.JS.Small.ag" Virus. Action Taken: No Action Taken. Wed May 11 16:22:21 2005 => File C:\Dokumente und Einstellungen\name\4324ascsc32.dat infected by "Trojan.Win32.StartPage.yf" Virus. Action Taken: No Action Taken. Wed May 11 16:22:27 2005 => File C:\Dokumente und Einstellungen\name\Anwendungsdaten\rser.exe infected by "not-a-virus:AdWare.PurityScan.w" Virus. Action Taken: No Action Taken. Wed May 11 16:22:44 2005 => File C:\Dokumente und Einstellungen\name\er34r3.dat infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: No Action Taken. Wed May 11 16:22:44 2005 => File C:\Dokumente und Einstellungen\name\Internet Optimizer\optimize.exe infected by "Trojan-Downloader.Win32.Dyfuca.dk" Virus. Action Taken: No Action Taken. Wed May 11 16:22:45 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temp\0SH2I6GL.dll infected by "not-a-virus:AdWare.Sahat.m" Virus. Action Taken: No Action Taken. Wed May 11 16:22:46 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temp\4LJKHBPB.dll infected by "not-a-virus:AdWare.Sahat.m" Virus. Action Taken: No Action Taken. Wed May 11 16:22:46 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temp\auf0.exe infected by "Virus.Win32.Porad.a" Virus. Action Taken: No Action Taken. Wed May 11 16:22:47 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temp\JUP4TN5M.dll infected by "not-a-virus:AdWare.Sahat.m" Virus. Action Taken: No Action Taken. Wed May 11 16:22:48 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temp\LMQ3QLG7.dll infected by "not-a-virus:AdWare.Sahat.m" Virus. Action Taken: No Action Taken. Wed May 11 16:22:49 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temp\shop1004.exe infected by "not-a-virus:AdWare.Sahat.m" Virus. Action Taken: No Action Taken. Wed May 11 16:22:49 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temp\sp.html infected by "Trojan.JS.StartPage.u" Virus. Action Taken: No Action Taken. Wed May 11 16:22:56 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temporary Internet Files\Content.IE5\2BIZEDUJ\ieacslave[1].exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: No Action Taken. Wed May 11 16:22:56 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temporary Internet Files\Content.IE5\2BIZEDUJ\ieac[1].exe infected by "Trojan-Downloader.Win32.Delf.lf" Virus. Action Taken: No Action Taken. Wed May 11 16:23:06 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temporary Internet Files\Content.IE5\KXW9E78P\reserv[1].exe infected by "Trojan-Downloader.Win32.Small.aqt" Virus. Action Taken: No Action Taken. Wed May 11 16:23:07 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temporary Internet Files\Content.IE5\KXW9E78P\toolbar[1].exe infected by "not-a-virus:AdWare.ToolBar.ISearch.d" Virus. Action Taken: No Action Taken. Wed May 11 16:23:09 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Q9GB6565\a1[1].htm infected by "Trojan-Clicker.JS.Linker.j" Virus. Action Taken: No Action Taken. Wed May 11 16:23:10 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Q9GB6565\desktop[1].exe infected by "Trojan-Downloader.Win32.Agent.le" Virus. Action Taken: No Action Taken. Wed May 11 16:23:10 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Q9GB6565\ieacmain[1].exe infected by "Trojan.Win32.StartPage.yf" Virus. Action Taken: No Action Taken. Wed May 11 16:23:13 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temporary Internet Files\Content.IE5\WXKF4Z8N\a1[1].htm infected by "Trojan-Clicker.JS.Linker.j" Virus. Action Taken: No Action Taken. Wed May 11 16:23:13 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temporary Internet Files\Content.IE5\WXKF4Z8N\a772a97b[1].js infected by "Trojan-Downloader.JS.WinAD.c" Virus. Action Taken: No Action Taken. Wed May 11 16:23:13 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temporary Internet Files\Content.IE5\WXKF4Z8N\AproposClientInstaller[1].exe infected by "Virus.Win32.Porad.a" Virus. Action Taken: No Action Taken. Wed May 11 16:23:14 2005 => File C:\Dokumente und Einstellungen\name\Lokale Einstellungen\Temporary Internet Files\Content.IE5\WXKF4Z8N\mtrslib2[1].js infected by "Trojan-Downloader.JS.Small.ag" Virus. Action Taken: No Action Taken. Wed May 11 16:23:16 2005 => File C:\Dokumente und Einstellungen\name\package_adp_SIAC.exe infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. Wed May 11 16:33:34 2005 => File C:\WINDOWS\cxtpls_loader.exe infected by "Trojan-Downloader.Win32.Apropo.ab" Virus. Action Taken: No Action Taken. Wed May 11 16:33:34 2005 => File C:\WINDOWS\Downloaded Program Files\MediaAccX.dll infected by "not-a-virus:AdWare.WinAD.ak" Virus. Action Taken: No Action Taken. Wed May 11 16:33:34 2005 => File C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.ocx infected by "not-a-virus:AdWare.MediaTickets.f" Virus. Action Taken: No Action Taken. Wed May 11 16:34:56 2005 => File C:\WINDOWS\installer_SIAC.exe infected by "Trojan-Downloader.Win32.Adload.a" Virus. Action Taken: No Action Taken. Wed May 11 16:34:59 2005 => File C:\WINDOWS\loadclean.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: No Action Taken. Wed May 11 16:35:01 2005 => File C:\WINDOWS\optimize.exe infected by "Trojan-Downloader.Win32.Dyfuca.dk" Virus. Action Taken: No Action Taken. Wed May 11 16:35:30 2005 => File C:\WINDOWS\shop1004.exe infected by "not-a-virus:AdWare.Sahat.m" Virus. Action Taken: No Action Taken. Wed May 11 16:39:01 2005 => File C:\WINDOWS\stubinstaller5356.exe infected by "Trojan-Downloader.Win32.Small.asf" Virus. Action Taken: No Action Taken. Wed May 11 16:39:13 2005 => File C:\WINDOWS\system32\cmd32.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: No Action Taken. Wed May 11 16:43:51 2005 => File C:\WINDOWS\system32\lap.dll infected by "Trojan.Win32.StartPage.ix" Virus. Action Taken: No Action Taken. Wed May 11 16:43:53 2005 => File C:\WINDOWS\system32\lpzxcz324534xct.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: No Action Taken. Wed May 11 16:44:56 2005 => File C:\WINDOWS\system32\us3432xzcb.exe infected by "Trojan.Win32.StartPage.yf" Virus. Action Taken: No Action Taken. Wed May 11 16:45:10 2005 => File C:\WINDOWS\system32\wldr.dll infected by "Trojan-Downloader.Win32.Agent.le" Virus. Action Taken: No Action Taken. Wed May 11 16:45:25 2005 => File C:\wp.exe infected by "Trojan.Win32.Agent.ct" Virus. Action Taken: No Action Taken. Wed May 11 16:45:25 2005 => Total Disinfected Files: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Funde für "tagged" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Statistiken: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Wed May 11 16:45:25 2005 => Total Virus(es) Found: 60 Wed May 11 16:45:25 2005 => Total Errors: 35 Wed May 11 16:45:25 2005 => Time Elapsed: 00:28:12 Wed May 11 16:45:25 2005 => Total Objects Scanned: 59428 Wed May 11 16:16:09 2005 => Virus Database Date: 2005/05/11 Wed May 11 16:45:25 2005 => Virus Database Date: 2005/05/11 Wed May 11 16:48:53 2005 => Virus Database Date: 2005/05/11 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~ © Haui ;-) ~~~~~~~ ~~~~~~~ Dank an Cidre ~~~~~~~ da hab ich ja nochmal Glück gehabt, daß ich der "Letzte" in diesem thread bin...... |
@Fiat770 Zitat:
Zitat:
|
Hi Leute, habe das alles aus der regedit gelöscht, finde jetzt aber die wp.exe nicht. (wp.bmp gefunden und gelöscht) Weiß da jemand Rat dazu? Habe unter anderem auch aus dem Explorer Ordner was gelöscht => glaube das hies NoChanceDesktop oder so, auf jeden fall hat es mir nicht gefallen :kloppen: Gruss und Danke im voraus Darian |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 13:23 Uhr. |
Copyright ©2000-2025, Trojaner-Board