| herbstie | 02.01.2007 13:37 |
so..ich habe kaspersky drüber laufen lassen und es wurden einige dateien entdeckt die infiziert wurden oder infizierer sind
jetzt noch die aktuelle hijacklist: Code:
Logfile of HijackThis v1.99.1
Scan saved at 18:12:38, on 28.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Autostart\Maus\MOUSE32A.EXE
C:\Autostart\Tastatur\KbdAp32A.exe
C:\Autostart\Daemon Tools\daemon.exe
C:\Autostart\PTB Sync\PTBSync.exe
C:\Autostart\TV Genial\TVgenial.exe
C:\WINDOWS\System32\svchost.exe
C:\Autostart\Drive Crypt Plus Pack\dcpp.exe
D:\Medien\WinDvr\WinDvr.exe
C:\AUTOST~1\ICQ\ICQ.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\HijackThis\1_99_1.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://klamm.de/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Schreibprogramme\Acrobat Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Internet\Java\bin\ssv.dll
O4 - HKLM\..\Run: [LWBMOUSE] C:\Autostart\Maus\MOUSE32A.EXE
O4 - HKLM\..\Run: [Mirabilis ICQ] C:\AUTOST~1\ICQ\ICQNet.exe
O4 - HKLM\..\Run: [LWBKEYBOARD] C:\Autostart\Tastatur\KbdAp32A.exe
O4 - HKLM\..\Run: [DCPPaid] C:\WINDOWS\system32\DCPPaid.exe /P
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Autostart\Daemon Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [PTBSync] C:\Autostart\PTB Sync\PTBSync.exe /Start
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [TVgenial] C:\Autostart\TV Genial\TVgenial.exe -d
O4 - HKCU\..\RunOnce: [ICQ Lite] D:\Internet\ICQ Lite\ICQLite.exe -trayboot
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - h**p://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {D2982A7F-489A-47F5-A319-FC1F14EBC245} (Navigator Class) - h**p://www.nutzwerk.com/control/NutzNavi.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: ssdprasa.dll e1.dll
O20 - Winlogon Notify: ipv6rasm - C:\WINDOWS\system32\ipv6rasm.dll (file missing)
und bei den folgenden 3 dateien die kaspersky gefunden hat kommt folgendes raus:
C:\WINDOWS\system32\e1.dll Code:
Antivirus Version Update Result
AntiVir 7.3.0.21 12.28.2006 WORM/Stration.Gen
Authentium 4.93.8 12.28.2006 W32/KillAV.gen1
Avast 4.7.892.0 12.21.2006 no virus found
AVG 386 12.28.2006 I-Worm/Stration.BNJ
BitDefender 7.2 12.28.2006 Worm.Stration.JI
CAT-QuickHeal 8.00 12.28.2006 no virus found
ClamAV devel-20060426 12.28.2006 Worm.Stration.XL-6
DrWeb 4.33 12.28.2006 Win32.HLLM.Limar
eSafe 7.0.14.0 12.26.2006 Win32.Warezov.ev
eTrust-InoculateIT 23.73.100 12.28.2006 no virus found
eTrust-Vet 30.3.3285 12.28.2006 no virus found
Ewido 4.0 12.27.2006 no virus found
Fortinet 2.82.0.0 12.28.2006 W32/Strati.JI@mm
F-Prot 3.16f 12.28.2006 W32/KillAV.gen1
F-Prot4 4.2.1.29 12.22.2006 W32/KillAV.gen1
Ikarus T3.1.0.27 12.28.2006 no virus found
Kaspersky 4.0.2.24 12.28.2006 Email-Worm.Win32.Warezov.ji
McAfee 4928 12.28.2006 no virus found
Microsoft 1.1904 12.27.2006 no virus found
NOD32v2 1942 12.28.2006 Win32/Stration.UN
Norman 5.80.02 12.28.2006 no virus found
Panda 9.0.0.4 12.28.2006 W32/Spamta.QG.worm
Prevx1 V2 12.28.2006 Worm.Warezov.Gen
Sophos 4.13.0 12.26.2006 W32/Strati-Gen
Sunbelt 2.2.907.0 12.18.2006 no virus found
TheHacker 6.0.3.138 12.28.2006 no virus found
UNA 1.83 12.28.2006 no virus found
VBA32 3.11.1 12.27.2006 MalwareScope.Worm.Warezov.1
VirusBuster 4.3.19:9 12.28.2006 Trojan.Opnis.Gen.29
Aditional Information
File size: 20480 bytes
MD5: 20347071bedd7e0f8127781260f1b752
SHA1: 3273bb269d9c5702d437e1552b7fa79d7e3eb136
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=fb7065625504
C:\WINDOWS\system32\tlntqedw.dll Code:
Antivirus Version Update Result
AntiVir 7.3.0.21 12.28.2006 WORM/Stration.Gen
Authentium 4.93.8 12.28.2006 W32/KillAV.gen1
Avast 4.7.892.0 12.21.2006 no virus found
AVG 386 12.28.2006 no virus found
BitDefender 7.2 12.28.2006 DeepScan:Generic.Stration.C3EB8C12
CAT-QuickHeal 8.00 12.28.2006 no virus found
ClamAV devel-20060426 12.28.2006 Worm.Stration.XL-1
DrWeb 4.33 12.28.2006 Win32.HLLM.Limar
eSafe 7.0.14.0 12.26.2006 no virus found
eTrust-InoculateIT 23.73.100 12.28.2006 no virus found
eTrust-Vet 30.3.3285 12.28.2006 no virus found
Ewido 4.0 12.27.2006 no virus found
Fortinet 2.82.0.0 12.28.2006 no virus found
F-Prot 3.16f 12.28.2006 W32/KillAV.gen1
F-Prot4 4.2.1.29 12.22.2006 W32/KillAV.gen1
Ikarus T3.1.0.27 12.28.2006 no virus found
Kaspersky 4.0.2.24 12.28.2006 Email-Worm.Win32.Warezov.ji
McAfee 4928 12.28.2006 W32/Stration.gen@MM
Microsoft 1.1904 12.27.2006 Win32/Stration.gen!dll.E
NOD32v2 1942 12.28.2006 Win32/Stration.UN
Norman 5.80.02 12.28.2006 no virus found
Panda 9.0.0.4 12.28.2006 W32/Spamta.QG.worm
Prevx1 V2 12.28.2006 no virus found
Sophos 4.13.0 12.26.2006 W32/Strati-Gen
Sunbelt 2.2.907.0 12.18.2006 no virus found
TheHacker 6.0.3.138 12.28.2006 no virus found
UNA 1.83 12.28.2006 I-Worm.Warezov
VBA32 3.11.1 12.27.2006 MalwareScope.Worm.Warezov.1
VirusBuster 4.3.19:9 12.28.2006 Trojan.Opnis.Gen.29
Aditional Information
File size: 24576 bytes
MD5: 15d9be67029dbf85ae4a65cd5fa99891
SHA1: b9343321f2c561c66703582e89975c388b3d8b2a
C:\WINDOWS\system32\vdieasyc.exe Code:
Antivirus Version Update Result
AntiVir 7.3.0.21 12.28.2006 WORM/Stration.Gen
Authentium 4.93.8 12.28.2006 no virus found
Avast 4.7.892.0 12.21.2006 no virus found
AVG 386 12.28.2006 no virus found
BitDefender 7.2 12.28.2006 no virus found
CAT-QuickHeal 8.00 12.28.2006 no virus found
ClamAV devel-20060426 12.28.2006 Worm.Stration.XL
DrWeb 4.33 12.28.2006 Win32.HLLM.Limar
eSafe 7.0.14.0 12.26.2006 Win32.Warezov.ev
eTrust-InoculateIT 23.73.100 12.28.2006 Win32/Stration.Variant!Worm
eTrust-Vet 30.3.3285 12.28.2006 no virus found
Ewido 4.0 12.27.2006 no virus found
Fortinet 2.82.0.0 12.28.2006 no virus found
F-Prot 3.16f 12.28.2006 no virus found
F-Prot4 4.2.1.29 12.22.2006 no virus found
Ikarus T3.1.0.27 12.28.2006 Email-Worm.Win32.Warezov.gen
Kaspersky 4.0.2.24 12.28.2006 Email-Worm.Win32.Warezov.ji
McAfee 4928 12.28.2006 no virus found
Microsoft 1.1904 12.27.2006 TrojanDownloader:Win32/Stration.gen!A
NOD32v2 1942 12.28.2006 Win32/Stration.UN
Norman 5.80.02 12.28.2006 no virus found
Panda 9.0.0.4 12.28.2006 W32/Spamta.QG.worm
Prevx1 V2 12.28.2006 Malicious
Sophos 4.13.0 12.26.2006 W32/Strati-Gen
Sunbelt 2.2.907.0 12.18.2006 no virus found
TheHacker 6.0.3.138 12.28.2006 no virus found
UNA 1.83 12.28.2006 I-Worm.Warezov
VBA32 3.11.1 12.27.2006 MalwareScope.Worm.Warezov.1
VirusBuster 4.3.19:9 12.28.2006 Trojan.Opnis.Gen.29
Aditional Information
File size: 16384 bytes
MD5: 4ae21f82ae495e34ae0b0230ec05e0f4
SHA1: c28881dd7776b254887381b81f71058f17377a27
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PXC=62ba65627737
wie kann ich diese loswerden? | 