Trojaner-Board - Iexplore Mag nicht, pokapoka

Das ist klar :) Vielen Dank, dass du dich mir überhaupt annimmst.
Aktueller Stand:
Windows bootet ohne Fehlermeldung, IE funzt wieder, Avedesk ENDLICH auch wieder, das Leben ist schön! :aplaus:
Ich habe im abgesicherten Modus gestartet, und mit HJ das pokapoka gelöscht. und das winnt\etb\pokapoka hab ich nich gefunden. Mein Log NACH der säuberung (ohne restart, im Abges. Modus):

Zitat:

Zitat von Hijack(abges. Modus

Logfile of HijackThis v1.99.1
Scan saved at 21:37:34, on 11.10.2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\PROGRA~1\GEMEIN~1\Stardock\SDMCP.exe
C:\WINNT\Explorer.EXE
C:\Hijack\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKCU\..\Run: [GMX SMS-Manager] C:\Programme\GMX\GMX SMS-Manager\SMSMngr.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WindowBlinds] C:\Programme\Stardock\Object Desktop\WindowBlinds\wbload.exe auto
O4 - Startup: Stardock ObjectDock.lnk = C:\Programme\Stardock\ObjectDock\ObjectDock.exe
O4 - Startup: Rainlendar.lnk = C:\Programme\Rainlendar\Rainlendar.exe
O4 - Startup: AveDesk 1.2 (2).lnk = C:\Programme\DockZone MegaPack\AveDesk12\AveDesk.exe
O4 - Global Startup: Java SATARaid.lnk = C:\Programme\Silicon Image\Java SATARaid\run.bat
O4 - Global Startup: DT 11Mbps WLAN USB Station.lnk = C:\Programme\DT\DT 11Mbps Wireless USB Device\Installer\WIN2k\DTUSBMonitor.exe
O4 - Global Startup: SamurizeWeatherXML.lnk = E:\Program Files\Samurize\Client.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - h**p://www.kaspersky.com/downloads/kws/kavwebscan_unicode.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - h**p://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1128915100968
O17 - HKLM\System\CCS\Services\Tcpip\..\{CCD529E2-10DB-484F-85D9-6BCC2A1AC85B}: NameServer = 192.168.2.1
O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\GEMEIN~1\Stardock\mcpstub.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Programme\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINNT\system32\oodag.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

nach dem neustart schauts so aus:

Zitat:

Zitat von Hijack (nach neustart)

Logfile of HijackThis v1.99.1
Scan saved at 21:51:39, on 11.10.2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\svchost.exe
C:\Programme\Nero\Nero 7\InCD\InCDsrv.exe
C:\WINNT\system32\oodag.exe
C:\WINNT\system32\regsvc.exe
C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Ati2evxx.exe
C:\PROGRA~1\GEMEIN~1\Stardock\SDMCP.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\sstray.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\Programme\GMX\GMX SMS-Manager\SMSMngr.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\Programme\Stardock\Object Desktop\WindowBlinds\wbload.exe
C:\Programme\DT\DT 11Mbps Wireless USB Device\Installer\WIN2k\DTUSBMonitor.exe
C:\Programme\Samurize\Client.exe
C:\Programme\Stardock\ObjectDock\ObjectDock.exe
C:\Programme\Rainlendar\Rainlendar.exe
C:\Programme\DockZone MegaPack\AveDesk12\AveDesk.exe
C:\Programme\iPod\bin\iPodService.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Hijack\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKCU\..\Run: [GMX SMS-Manager] C:\Programme\GMX\GMX SMS-Manager\SMSMngr.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WindowBlinds] C:\Programme\Stardock\Object Desktop\WindowBlinds\wbload.exe auto
O4 - Startup: Stardock ObjectDock.lnk = C:\Programme\Stardock\ObjectDock\ObjectDock.exe
O4 - Startup: Rainlendar.lnk = C:\Programme\Rainlendar\Rainlendar.exe
O4 - Startup: AveDesk 1.2 (2).lnk = C:\Programme\DockZone MegaPack\AveDesk12\AveDesk.exe
O4 - Global Startup: Java SATARaid.lnk = C:\Programme\Silicon Image\Java SATARaid\run.bat
O4 - Global Startup: DT 11Mbps WLAN USB Station.lnk = C:\Programme\DT\DT 11Mbps Wireless USB Device\Installer\WIN2k\DTUSBMonitor.exe
O4 - Global Startup: SamurizeWeatherXML.lnk = E:\Program Files\Samurize\Client.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - h**p://www.kaspersky.com/downloads/kws/kavwebscan_unicode.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - h**p://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1128915100968
O17 - HKLM\System\CCS\Services\Tcpip\..\{CCD529E2-10DB-484F-85D9-6BCC2A1AC85B}: NameServer = 192.168.2.1
O20 - Winlogon Notify: MCPClient - C:\PROGRA~1\GEMEIN~1\Stardock\mcpstub.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Programme\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINNT\system32\oodag.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

Schaut sauber aus oder?
Die O16er irritieren mich, muss dazu sagen: Ich war grad auf Kapersky und hab ein Onlinescan gemacht, dann war stromausfall :(

Ergebnis von Escan:

Zitat:

ile C:\WINNT\system32\smmss.exe tagged as "not-a-virus:AdWare.Win32.EZula.bg". Action Taken: No Action Taken.
Object "alexa Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "ezula Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "surfaccuracy Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "ezula Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "ezula Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "surfaccuracy Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "redv Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "redv Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "istbar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "ezula toptext Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "dyfuca.internet optimizer Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "istbar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "ezula toptext Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "dyfuca.internet optimizer Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\system32\wuweb.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\system32\wuweb.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Norton PartitionMagic 8.0\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Norton PartitionMagic 8.0\Norton PartitionMagic 8.0 Extras\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Norton PartitionMagic 8.0\Norton PartitionMagic 8.0 Dokumentation\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\O&O Software\O&O Defrag\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\O&O Software\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Tools&More\FTP-Watchdog\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Tools&More\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ACD Systems\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Alcohol 120%\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Sonic RecordNow!\". Action Taken: No Action Taken.
Entry "HKCR\TypeLib\{76F2D6F7-B0CE-475a-8F59-2E4C59B54157}" refers to invalid object "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe\InDesign\Version 4.0\Scripting Support\4.0\Resources for Visual Basic.tlb". Action Taken: No Action Taken.
Entry "HKCR\.awf" refers to invalid object "Adobe.WorkFlow.Files". Action Taken: No Action Taken.
Entry "HKCR\.p10" refers to invalid object "P10File". Action Taken: No Action Taken.
Entry "HKCR\.p7m" refers to invalid object "P7MFile". Action Taken: No Action Taken.
Entry "HKCR\DXemul.DDClipperEmul" refers to invalid object "{FACF11A2-5095-11D3-A9DE-00C0268E5C48}". Action Taken: No Action Taken.
Entry "HKCR\DXemul.DDClipperEmul.1" refers to invalid object "{FACF11A2-5095-11D3-A9DE-00C0268E5C48}". Action Taken: No Action Taken.
Entry "HKCR\Medi8or.DDSurfaceEmul.1" refers to invalid object "{86FC1FD3-BCF3-11D1-B76F-58BB04C10000}". Action Taken: No Action Taken.
Entry "HKCR\Medi8or.DirectDrawEmul.1" refers to invalid object "{86FC1FD1-BCF3-11D1-B76F-58BB04C10000}". Action Taken: No Action Taken.
Entry "HKCR\SCrdEnr.SCrdEnr.1" refers to invalid object "{c2bbea20-1f2b-492f-8a06-b1c5ffeace3b}". Action Taken: No Action Taken.
File C:\WINNT\woinstall.exe tagged as "not-a-virus:AdWare.Win32.EZula.ak". Action Taken: No Action Taken.
File C:\WINNT\Germany.exe infected by "Trojan.Win32.Dialer.jr" Virus! Action Taken: No Action Taken.
File C:\WINNT\system32\username.exe infected by "Trojan-Dropper.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\WINNT\system32\l6ld74sq.ini tagged as "not-a-virus:AdWare.Win32.Sahat.ao". Action Taken: No Action Taken.
File C:\WINNT\system32\jmmcs67s.exe tagged as "not-a-virus:AdWare.Win32.Sahat.f". Action Taken: No Action Taken.
File C:\WINNT\system32\mv7m15s1.dll tagged as "not-a-virus:AdWare.Win32.Sahat.ad". Action Taken: No Action Taken.
File C:\WINNT\system32\vpvvq7lt.ini tagged as "not-a-virus:AdWare.Win32.Sahat.ao". Action Taken: No Action Taken.
File C:\WINNT\system32\ezPopStub.exe tagged as "not-a-virus:AdWare.Win32.EZula.bh". Action Taken: No Action Taken.
File C:\WINNT\system32\wudupdate.exe infected by "Trojan-Downloader.Win32.IstBar.lq" Virus! Action Taken: No Action Taken.
File C:\WINNT\system32\wuauclt10.exe infected by "Trojan.Win32.Pakes" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\Temp\k_F051.tmp infected by "Trojan-Downloader.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\Temp\k_554.tmp infected by "Trojan-Downloader.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\Temp\upd.exe tagged as not-a-virus:RiskTool.Win32.PsKill.1101. No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\Temp\k_853A.tmp infected by "Trojan-Downloader.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\Temp\k_2B78.tmp infected by "Trojan-Downloader.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\Temp\setup1050.tmp tagged as "not-a-virus:AdWare.Win32.UrlSpy.b". Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\Temp\setup1050.exe tagged as "not-a-virus:AdWare.Win32.UrlSpy.b". Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\IPHFPZUV\pokapoka75[1].exe infected by "Trojan-Downloader.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\OP2345U7\woinstall[1].exe tagged as "not-a-virus:AdWare.Win32.EZula.ak". Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\OP2345U7\istsvc[1].exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\OP2345U7\istbarcm[1].dll infected by "Trojan-Downloader.Win32.IstBar.kg" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\OP2345U7\powerscan[1].exe tagged as "not-a-virus:AdWare.Win32.PowerScan.d". Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\IFRDD1MY\eZinstall[1].exe tagged as "not-a-virus:AdWare.Win32.EZula.ak". Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\IFRDD1MY\optimize[1].exe infected by "Trojan-Downloader.Win32.Dyfuca.ei" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\IFRDD1MY\sfbho13[1].dll tagged as "not-a-virus:AdWare.Win32.SideFind". Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\AX6TWJO7\istrecover[1].exe infected by "Trojan-Downloader.Win32.IstBar.ij" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\AX6TWJO7\nem220[1].dll infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\FYZI123V\sidefind[1].exe infected by "Trojan-Downloader.Win32.IstBar.jm" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\FYZI123V\bb[1].exe infected by "Trojan-Downloader.Win32.Adload.a" Virus! Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\FYZI123V\cmctl[1].dll tagged as "not-a-virus:AdWare.Win32.AdMir.a". Action Taken: No Action Taken.
File C:\DOKUME~1\kubii1\LOKALE~1\TEMPOR~1\Content.IE5\FYZI123V\sidefind13[1].dll tagged as "not-a-virus:AdWare.Win32.SideFind". Action Taken: No Action Taken.
File C:\WINNT\system32\username.exe infected by "Trojan-Dropper.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\WINNT\system32\l6ld74sq.ini tagged as "not-a-virus:AdWare.Win32.Sahat.ao". Action Taken: No Action Taken.
File C:\WINNT\system32\jmmcs67s.exe tagged as "not-a-virus:AdWare.Win32.Sahat.f". Action Taken: No Action Taken.
File C:\WINNT\system32\mv7m15s1.dll tagged as "not-a-virus:AdWare.Win32.Sahat.ad". Action Taken: No Action Taken.
File C:\WINNT\system32\vpvvq7lt.ini tagged as "not-a-virus:AdWare.Win32.Sahat.ao". Action Taken: No Action Taken.
File C:\WINNT\system32\ezPopStub.exe tagged as "not-a-virus:AdWare.Win32.EZula.bh". Action Taken: No Action Taken.
File C:\WINNT\system32\wudupdate.exe infected by "Trojan-Downloader.Win32.IstBar.lq" Virus! Action Taken: No Action Taken.
File C:\WINNT\system32\wuauclt10.exe infected by "Trojan.Win32.Pakes" Virus! Action Taken: No Action Taken.
File C:\WINNT\woinstall.exe tagged as "not-a-virus:AdWare.Win32.EZula.ak". Action Taken: No Action Taken.
File C:\WINNT\Germany.exe infected by "Trojan.Win32.Dialer.jr" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temp\k_F051.tmp infected by "Trojan-Downloader.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temp\k_554.tmp infected by "Trojan-Downloader.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temp\upd.exe tagged as not-a-virus:RiskTool.Win32.PsKill.1101. No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temp\k_853A.tmp infected by "Trojan-Downloader.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temp\k_2B78.tmp infected by "Trojan-Downloader.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temp\setup1050.tmp tagged as "not-a-virus:AdWare.Win32.UrlSpy.b". Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temp\setup1050.exe tagged as "not-a-virus:AdWare.Win32.UrlSpy.b". Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IPHFPZUV\pokapoka75[1].exe infected by "Trojan-Downloader.Win32.Agent.tv" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\OP2345U7\woinstall[1].exe tagged as "not-a-virus:AdWare.Win32.EZula.ak". Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\OP2345U7\istsvc[1].exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\OP2345U7\istbarcm[1].dll infected by "Trojan-Downloader.Win32.IstBar.kg" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\OP2345U7\powerscan[1].exe tagged as "not-a-virus:AdWare.Win32.PowerScan.d". Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IFRDD1MY\eZinstall[1].exe tagged as "not-a-virus:AdWare.Win32.EZula.ak". Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IFRDD1MY\optimize[1].exe infected by "Trojan-Downloader.Win32.Dyfuca.ei" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IFRDD1MY\sfbho13[1].dll tagged as "not-a-virus:AdWare.Win32.SideFind". Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\AX6TWJO7\istrecover[1].exe infected by "Trojan-Downloader.Win32.IstBar.ij" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\AX6TWJO7\nem220[1].dll infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\FYZI123V\sidefind[1].exe infected by "Trojan-Downloader.Win32.IstBar.jm" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\FYZI123V\bb[1].exe infected by "Trojan-Downloader.Win32.Adload.a" Virus! Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\FYZI123V\cmctl[1].dll tagged as "not-a-virus:AdWare.Win32.AdMir.a". Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Lokale Einstellungen\Temporary Internet Files\Content.IE5\FYZI123V\sidefind13[1].dll tagged as "not-a-virus:AdWare.Win32.SideFind". Action Taken: No Action Taken.
File C:\Dokumente und Einstellungen\kubii1\Internet Optimizer\optimize.exe infected by "Trojan-Downloader.Win32.Dyfuca.ei" Virus! Action Taken: No Action Taken.
File C:\Programme\EA SPORTS\NBA LIVE 06\install.exe tagged as not-a-virus:RiskTool.Win32.PsKill.1101. No Action Taken.
File C:\Programme\SurfAccuracy\SAcc.exe tagged as "not-a-virus:AdWare.Win32.SurfAccuracy.d". Action Taken: No Action Taken.
File C:\Hijack\backups\backup-20051012-180224-352.dll infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus! Action Taken: No Action Taken.
File C:\Hijack\backups\backup-20051012-180224-104.dll tagged as "not-a-virus:AdWare.Win32.SideFind". Action Taken: No Action Taken.
File G:\Downloadet files\CD\tolls CD\tools\eDonkey59c.exe tagged as "not-a-virus:AdWare.Win32.Cydoor". Action Taken: No Action Taken.
File G:\Downloadet files\CD\tolls CD\tools\s2k.serials2k71.zip tagged as "not-a-virus:Dialer.Win32.gen". Action Taken: No Action Taken.
File G:\mIRC\mirc32.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.59. No Action Taken.
File H:\Corel KnockOut 1.1.zip infected by "Trojan.Win32.StartPage.abd" Virus! Action Taken: No Action Taken.
File H:\Corel KnockOut 2. crack.exe.zip tagged as "not-a-virus:Porn-Dialer.Win32.Star". Action Taken: No Action Taken.
File I:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\CDMADLB3\launch[2].htm infected by "Trojan.JS.NoClose.e" Virus! Action Taken: No Action Taken.