Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   HJT Log File -Auswertung Help (https://www.trojaner-board.de/25881-hjt-log-file-auswertung-help.html)

Nordic 15.01.2006 19:56
HJT Log File -Auswertung Help
 
hallo zusammen,

alles angefangen hat mit einem bluescreen beim starten von win xp. dort stand das die datei "imagehlp.dll" beschädigt sei. daraufhin hab ich antivr laufen lassen. das programm fand den trojaner TR/Dldr.IstBar.JA . auf der suche nach mehr infos bin auf dieses board gestossen.

die log datei von hjt meldet:

Zitat:
Logfile of HijackThis v1.99.1
Scan saved at 19:45:01, on 15.01.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\AVPersonal\AVGNT.EXE
C:\Programme\Creative\Shared Files\Module Loader\DLLML.exe
C:\Programme\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\CTXFIHLP.EXE
C:\Programme\QuickTime\qttask.exe
C:\Programme\Winamp\winampa.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe
C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Programme\Skype\Phone\Skype.exe
C:\Programme\Logitech\Profiler\lwemon.exe
C:\Programme\Ray Adams\ATI Tray Tools\atitray.exe
C:\Programme\Creative\ShareDLL\CADI\NotiMan.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE
C:\Programme\AVPersonal\AVWUPSRV.EXE
C:\Programme\Dassault Systemes\B10\intel_a\code\bin\CATSysDemon.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Programme\RWTH Aachen\Cisco VPN Client\cvpnd.exe
C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Programme\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Programme\Teamspeak2_RC2\TeamSpeak.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\wuauclt.exe
E:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://www.google.de/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar2.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: GMX Toolbar - {2D1DDD38-CE4D-459b-A01C-F11BC92D5B69} - C:\Programme\GMX\GMX Toolbar\toolbar.dll
O4 - HKLM\..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [RCSystem] "C:\Programme\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup
O4 - HKLM\..\Run: [VolPanel] "C:\Programme\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" /r
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [LtcyCfgApply] "C:\Dokumente und Einstellungen\Philip\Desktop\LtcyCfg2-[guru3d]\LtcyCfg.exe" /a
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Programme\Acronis\TrueImage\TrueImageMonitor.exe
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Programme\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [AtiTrayTools] "C:\Programme\Ray Adams\ATI Tray Tools\atitray.exe"
O8 - Extra context menu item: &Google-Suche - res://c:\programme\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Ins Deutsche übersetzen - res://c:\programme\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Alles mit FlashGet laden - C:\PROGRA~1\FlashGet\jc_all.htm
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://c:\programme\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Mit FlashGet laden - C:\PROGRA~1\FlashGet\jc_link.htm
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Verweisseiten - res://c:\programme\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://c:\programme\google\GoogleToolbar2.dll/cmsimilar.html
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - h**p://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1128079940484
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: Backbone Service (BBDemon) - Dassault Systemes - C:\Programme\Dassault Systemes\B10\intel_a\code\bin\CATSysDemon.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Programme\RWTH Aachen\Cisco VPN Client\cvpnd.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Programme\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Programme\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Programme\TuneUp Utilities 2006\WinStylerThemeSvc.exe

Nordic 16.01.2006 11:10
kann mir denn keiner helfen?

hoerni26 16.01.2006 11:13
hallo,

arbeite mal bitte noch Diese anleitung ab.
les es dir vorher in ruhe durch.
wichtig:
sprache auf englisch lassen sonst funktioniert es nicht.
teile zum schluss das ergebniss der find.bat hier mit

Nordic 16.01.2006 16:36
okay. escan hat folgendes gefunden:

Zitat:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "infected"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mon Jan 16 14:42:15 2006 => System found infected with searchexe Spyware/Adware ({807553e5-5146-11d5-a672-00b0d022e945})! Action taken: No Action Taken.
Mon Jan 16 14:42:32 2006 => System found infected with whenu.savenow Spyware/Adware (formie[1].css)! Action taken: No Action Taken.
Mon Jan 16 14:42:34 2006 => System found infected with whenu.savenow Spyware/Adware (formie[1].css)! Action taken: No Action Taken.
Mon Jan 16 14:42:40 2006 => System found infected with whenu.savenow Spyware/Adware (formie[1].css)! Action taken: No Action Taken.
Mon Jan 16 14:42:44 2006 => System found infected with whenu.savenow Spyware/Adware (formie[1].css)! Action taken: No Action Taken.
Mon Jan 16 14:42:44 2006 => System found infected with whenu.savenow Spyware/Adware (formie[1].css)! Action taken: No Action Taken.
Mon Jan 16 14:42:45 2006 => System found infected with whenu.savenow Spyware/Adware (formie[1].css)! Action taken: No Action Taken.
Mon Jan 16 14:47:28 2006 => File C:\DOKUME~1\P****\LOKALE~1\TEMPOR~1\Content.IE5\CXWFGJ47\fil_mem[10].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:47:28 2006 => File C:\DOKUME~1\P*****\LOKALE~1\TEMPOR~1\Content.IE5\CXWFGJ47\fil_mem[3].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:47:28 2006 => File C:\DOKUME~1\P*****\LOKALE~1\TEMPOR~1\Content.IE5\CXWFGJ47\fil_mem[4].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:47:28 2006 => File C:\DOKUME~1\P***\LOKALE~1\TEMPOR~1\Content.IE5\CXWFGJ47\fil_mem[5].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:47:28 2006 => File C:\DOKUME~1\P*\LOKALE~1\TEMPOR~1\Content.IE5\CXWFGJ47\fil_mem[6].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:47:28 2006 => File C:\DOKUME~1\P*\LOKALE~1\TEMPOR~1\Content.IE5\CXWFGJ47\fil_mem[7].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:47:28 2006 => File C:\DOKUME~1\P*\LOKALE~1\TEMPOR~1\Content.IE5\CXWFGJ47\fil_mem[8].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:47:28 2006 => File C:\DOKUME~1\P*\LOKALE~1\TEMPOR~1\Content.IE5\CXWFGJ47\fil_mem[9].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:49:13 2006 => File C:\DOKUME~1\P*\LOKALE~1\TEMPOR~1\Content.IE5\I3IFYTMF\fil_mem[3].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:49:13 2006 => File C:\DOKUME~1\P*\LOKALE~1\TEMPOR~1\Content.IE5\I3IFYTMF\fil_mem[4].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:49:13 2006 => File C:\DOKUME~1\P*\LOKALE~1\TEMPOR~1\Content.IE5\I3IFYTMF\fil_mem[5].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:49:13 2006 => File C:\DOKUME~1\P*\LOKALE~1\TEMPOR~1\Content.IE5\I3IFYTMF\fil_mem[6].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 14:50:17 2006 => File C:\DOKUME~1\P*\LOKALE~1\TEMPOR~1\Content.IE5\K3D7AEVD\backdoor[1].htm infected by "Trojan-Clicker.Win32.Spywad.b" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:00:51 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\CXWFGJ47\fil_mem[10].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:00:51 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\CXWFGJ47\fil_mem[3].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:00:51 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\CXWFGJ47\fil_mem[4].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:00:51 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\CXWFGJ47\fil_mem[5].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:00:51 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\CXWFGJ47\fil_mem[6].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:00:51 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\CXWFGJ47\fil_mem[7].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:00:52 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\CXWFGJ47\fil_mem[8].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:00:52 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\CXWFGJ47\fil_mem[9].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:02:17 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\I3IFYTMF\fil_mem[3].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:02:17 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\I3IFYTMF\fil_mem[4].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:02:17 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\I3IFYTMF\fil_mem[5].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:02:17 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\I3IFYTMF\fil_mem[6].htm infected by "Exploit.JS.CVE-2005-1790.h" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:03:08 2006 => File C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\Content.IE5\K3D7AEVD\backdoor[1].htm infected by "Trojan-Clicker.Win32.Spywad.b" Virus! Action Taken: No Action Taken.
Mon Jan 16 15:10:19 2006 => Scanning Folder: C:\Programme\AVPersonal\INFECTED\*.*
Mon Jan 16 16:25:08 2006 => Total Disinfected Objects: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "tagged"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "offending"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mon Jan 16 14:42:32 2006 => Offending file found: C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\temporary internet files\content.ie5\8qevwexq\formie[1].css
Mon Jan 16 14:42:34 2006 => Offending file found: C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\temporary internet files\content.ie5\e7ybyhu7\formie[1].css
Mon Jan 16 14:42:40 2006 => Offending file found: C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\temporary internet files\content.ie5\onjzecxh\formie[1].css
Mon Jan 16 14:42:44 2006 => Offending file found: C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\content.ie5\8qevwexq\formie[1].css
Mon Jan 16 14:42:44 2006 => Offending file found: C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\content.ie5\e7ybyhu7\formie[1].css
Mon Jan 16 14:42:45 2006 => Offending file found: C:\Dokumente und Einstellungen\P*\Lokale Einstellungen\Temporary Internet Files\content.ie5\onjzecxh\formie[1].css
Mon Jan 16 14:42:45 2006 => Offending Folder found: C:\Dokumente und Einstellungen\All Users\Dokumente\monolith productions\fear\save
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Statistiken:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mon Jan 16 16:25:08 2006 => Total Objects Scanned: 153620
Mon Jan 16 16:25:08 2006 => Total Critical Objects: 34
Mon Jan 16 16:25:08 2006 => Total Disinfected Objects: 0
Mon Jan 16 16:25:08 2006 => Total Deleted Objects: 0
Mon Jan 16 16:25:08 2006 => Total Errors: 97
Mon Jan 16 16:25:08 2006 => Time Elapsed: 01:42:59
Mon Jan 16 14:25:18 2006 => Virus Database Date: 1/13/2006
Mon Jan 16 14:25:54 2006 => Virus Database Date: 1/13/2006
Mon Jan 16 14:25:59 2006 => Virus Database Date: 1/13/2006
Mon Jan 16 14:26:43 2006 => Virus Database Date: 1/13/2006
Mon Jan 16 14:27:14 2006 => Virus Database Date: 1/16/2006
Mon Jan 16 14:28:38 2006 => Virus Database Date: 1/13/2006
Mon Jan 16 14:40:33 2006 => Virus Database Date: 1/13/2006
Mon Jan 16 14:40:51 2006 => Virus Database Date: 1/16/2006
Mon Jan 16 16:25:08 2006 => Virus Database Date: 1/16/2006
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~ © Haui ;-) ~~~~~~~
~~~~~~~ Dank an Cidre ~~~~~~~

Nordic 17.01.2006 12:07
ich komme leider nicht weiter. wie sind denn jetzt die weiteren schritte?

Nordic 17.01.2006 22:13
*bump*bump* :D

Nordic 18.01.2006 23:45
wen muss man hier eigentlich schmieren um eine antwort zu bekommen? ;)

Nordic 22.01.2006 23:41
i need help, please


Alle Zeitangaben in WEZ +1. Es ist jetzt 23:38 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131