Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   WORM Probleme. Bitte um Hilfe ! ! ! (https://www.trojaner-board.de/25163-worm-probleme-bitte-um-hilfe.html)

ducmax 01.01.2006 14:27

WORM Probleme. Bitte um Hilfe ! ! !
 
Logfile of HijackThis v1.99.1
Scan saved at 14:23:52, on 01.01.2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programme\Winamp3\winampa.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\WINDOWS\System32\hphmon04.exe
C:\Programme\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Programme\AVPersonal\AVWUPSRV.EXE
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Programme\NETGEAR\WG511\Utility\WG511WLU.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temp\Temporäres Verzeichnis 3 für hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://rd.companion.yahoo.com/slv/ycheck/as/*http://search.yahoo.com/search?p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {1F758D2E-E659-4E2C-8E89-D47BFD6E3544} - blank (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: {9B39AB91-5F9A-4A8D-973E-B86D56B2E55D} - {9B39AB91-5F9A-4A8D-973E-B86D56B2E55D} - blank (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [RealTray] C:\Programme\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [WinampAgent] "C:\Programme\Winamp3\winampa.exe"
O4 - HKLM\..\Run: [WG511WLU] C:\Programme\NETGEAR\WG511\Utility\WG511WLU.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\System32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Programme\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Programme\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [dflnl.exe] C:\WINDOWS\System32\dflnl.exe
O4 - HKLM\..\Run: [stnospy] C:\Programme\SinEspias\no-spy.exe /autorun
O4 - HKCU\..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Windows Registry Repair Pro] C:\Programme\3B Software\Windows Registry Repair Pro\RegistryRepairPro.exe 4
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: E-Mail.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE
O12 - Plugin for .mov: C:\Programme\Internet Explorer\PLUGINS\npqtplugin.dll
O12 - Plugin for .mp3: C:\Programme\Internet Explorer\PLUGINS\npqtplugin4.dll
O12 - Plugin for .mpeg: C:\Programme\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for ¸æÄ: C:\Programme\Internet Explorer\PLUGINS\npqtplugin3.dll
O15 - Trusted IP range: 64.127.104.144
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - h**p://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1134694317433
O16 - DPF: {CDCBE0F1-D13A-4F86-A963-3A272D3ABA7E} (VacPro.internazionale_ver15) - h**p://advnt01.com/dialer/internazionale_ver15.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{017003C8-C7EB-47E2-9090-E18CA42E68DE}: NameServer = 85.255.115.6,85.255.112.151
O17 - HKLM\System\CCS\Services\Tcpip\..\{0B6DBFD7-AFDB-40CC-A966-86A638AE78FC}: NameServer = 85.255.115.6,85.255.112.151
O17 - HKLM\System\CCS\Services\Tcpip\..\{1CA6D27A-2FF4-4009-9534-FC791B3622A2}: NameServer = 85.255.115.6,85.255.112.151
O17 - HKLM\System\CCS\Services\Tcpip\..\{2A1A6845-BA2F-4D29-9EBA-FEA3FF179CC9}: NameServer = 85.255.115.6,85.255.112.151
O17 - HKLM\System\CCS\Services\Tcpip\..\{6FD7660E-A02B-4F91-A804-A87206C3B7DC}: NameServer = 85.255.115.6,85.255.112.151
O17 - HKLM\System\CCS\Services\Tcpip\..\{7D99A7AC-D504-48E9-AD79-D5D7DAD9030A}: NameServer = 85.255.115.6,85.255.112.151
O17 - HKLM\System\CCS\Services\Tcpip\..\{CB69B95A-D9BC-4773-BC59-A806C90D889F}: NameServer = 85.255.115.6,85.255.112.151
O17 - HKLM\System\CS2\Services\Tcpip\..\{017003C8-C7EB-47E2-9090-E18CA42E68DE}: NameServer = 85.255.115.6,85.255.112.151
O18 - Protocol: bw+0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {B90EF704-8ECA-4271-917D-165072C2AF17} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: f3dsl - lsd_f3.dll (file missing)
O21 - SSODL: System - {D0D0C37A-1A61-42F6-BC77-82EC63AD2E27} - blank (file missing)
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: PACSPTISVR - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\Pacsptisvr.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\System32\HPHipm11.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Programme\Gemeinsame Dateien\Sony Shared\AVLib\Sptisrv.exe

Rene-gad 01.01.2006 15:41

@ducmax
Um zu verstehen , dass dein System ungepatcht ist:
Zitat:

Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
reicht auch ein Thread aus: http://www.trojaner-board.de/showthread.php?t=25145
Fixe mit HJT alle R- und alle O17-Einträge, dazu noch:
Zitat:

O2 - BHO: (no name) - {1F758D2E-E659-4E2C-8E89-D47BFD6E3544} - blank (file missing)
O4 - HKLM\..\Run: [dflnl.exe] C:\WINDOWS\System32\dflnl.exe
O16 - DPF: {CDCBE0F1-D13A-4F86-A963-3A272D3ABA7E} (VacPro.internazionale_ver15) - h**p://advnt01.com/dialer/internazionale_ver15.CAB
Lösche die Datei C:\WINDOWS\System32\dflnl.exe, am Besten-im Abgesicherten Modus.
Wenn die Bereinigung klappt, bitte das System sofort updaten.

ducmax 01.01.2006 16:55

Hi,

ich danke für die Hilfe.
Hab grad den AntiVir drüber laufen lassen, jetzt ist der bescheidene Alcra.B immer noch da. :-(

hoerni26 01.01.2006 16:59

hallo,

mal ganz kurz mache doch mal bitte Hier einen Onlinescan und poste mal das ergebniss.

gruß

ducmax 01.01.2006 19:44

Also kurz ist gut gesagt, ich hab jetzt für den Online-Scan knapp 2 Stunden gebraucht ! :-)

Hier die nun das Ergebnis:


-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Sunday, January 01, 2006 19:41:34
Operating System: Microsoft Windows XP Home Edition, Service Pack 1 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 1/01/2006
Kaspersky Anti-Virus database records: 158299
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\

Scan Statistics:
Total number of scanned objects: 69472
Number of viruses found: 13
Number of infected objects: 146
Number of suspicious objects: 0
Duration of the scan process: 5130 sec

Infected Object Name - Virus Name
C:\axexx.chm/on-line.exe Infected: Trojan.Win32.Dialer.by
C:\axexx.chm Infected: Trojan.Win32.Dialer.by
C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temporary Internet Files\Content.IE5\MTELM3UP\035[1].jpg Infected: Trojan-Downloader.Win32.Small.ccn
C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Temporary Internet Files\Content.IE5\WHYZOHUJ\052[1].htm Infected: Trojan-Downloader.JS.Phel.d
C:\hiruvim.chm/d_hiruvim.exe Infected: Trojan.Win32.Dialer.by
C:\hiruvim.chm Infected: Trojan.Win32.Dialer.by
C:\Programme\winupdates\a.zip/Setup.exe Infected: Email-Worm.Win32.VB.an
C:\Programme\winupdates\a.zip Infected: Email-Worm.Win32.VB.an
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0102568.exe Infected: Trojan-Downloader.Win32.Agent.abs
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0102575.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0102590.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0102606.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0102606.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0102625.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0102625.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0102644.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0102644.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103644.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103644.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103661.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103661.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103679.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103679.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103698.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103698.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103718.pif:atyann:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103718.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103718.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103756.pif:atyann:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103756.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103756.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103775.pif:atyann:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103775.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0103775.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104775.pif:atyann:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104775.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104775.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104794.pif:atyann:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104794.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104794.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104811.pif:atyann:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104811.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104811.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104834.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104842.exe Infected: Trojan.Win32.Agent.bi
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104851.OLD:btldfw:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104866.ini:iagso:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104868.OLD:btldfw:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104874.exe Infected: Trojan.Win32.Agent.bi
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104875.dll Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0104988.exe Infected: not-virus:Hoax.Win32.Renos.ae
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0105007.dll Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107063.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107064.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107065.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107066.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107067.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107068.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107069.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107070.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107071.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107072.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107073.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107074.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107075.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107076.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107077.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107078.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107079.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107080.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107081.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107082.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107083.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107084.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107085.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107086.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107087.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107088.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107089.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107090.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107091.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107092.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107093.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107094.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107095.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107096.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107097.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107098.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107100.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107101.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107102.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107103.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107104.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107105.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107106.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107107.exe Infected: Trojan.Win32.Agent.bi
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107108.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107109.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107110.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107111.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107113.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107114.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107115.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107116.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107117.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107118.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107119.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107120.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107121.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107122.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107123.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107124.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107125.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107126.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107127.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107128.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107129.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107130.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107131.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107132.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107133.dll Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107134.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107135.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107136.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107137.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107138.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107139.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107140.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107141.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107142.exe Infected: Trojan-Downloader.Win32.Small.cat
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107143.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107144.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP193\A0107145.exe Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP194\A0107238.exe Infected: Email-Worm.Win32.VB.an
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP199\A0109028.exe Infected: Email-Worm.Win32.VB.an
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP199\A0109032.pif:atyann:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP199\A0109032.pif:qaskan:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP199\A0109032.pif:wyvcr:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP199\A0109033.OLD:btldfw:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP199\A0109034.INI:igywun:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP199\A0109035.ini:iagso:$DATA Infected: Trojan-Downloader.Win32.Agent.td
C:\System Volume Information\_restore{0DB41782-6ED8-427B-A908-E14FD12BD95A}\RP199\A0109037.exe Infected: Trojan.Win32.Agent.bi
C:\WINDOWS\mstasks1.exe Infected: Trojan-Clicker.Win32.Small.ab
C:\WINDOWS\pss\win.ini.backup:rgmtn:$DATA Infected: Trojan-Downloader.Win32.WinShow.bg
C:\WINDOWS\system32\secure32.txt Infected: Trojan.JS.StartPage.r
C:\WINDOWS\Temp\schwedin_1.exe Infected: not-virus:BadJoke.Win32.Badgame

Scan process completed.

hoerni26 01.01.2006 21:37

hallo,
also machen wir es kurz...
ich würd dir raten dein system neu aufzusetzen..
folge dazu der anleitung in meiner signatur..
ist das sicherste...

gruß


Alle Zeitangaben in WEZ +1. Es ist jetzt 16:01 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131