|
Virus?! Bei sind gestern Ordner aufgetreten:Internet Optimizer und Adtools Service... Was ist das? Ich habe die Befürchtung nichts Gutes... Hier die Hijacklogfile: Logfile of HijackThis v1.97.7 Scan saved at 14:34:32, on 22.02.2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Programme\F-Secure Anti-Virus\backweb\4476822\program\fsbwsys.exe C:\WINDOWS\System32\inetsrv\inetinfo.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\PROGRA~1\PESTPA~1\PPMemCheck.exe C:\PROGRA~1\PESTPA~1\CookiePatrol.exe C:\Programme\QuickTime\qttask.exe C:\WINDOWS\System32\RUNDLL32.EXE C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\logon.exe C:\windows\system32\pbruupv.exe C:\WINDOWS\System32\hwee.exe C:\Program Files\AdTools Service\AdTools.exe C:\temp\salm.exe C:\Program Files\Internet Optimizer\optimize.exe C:\WINDOWS\System32\ctfmon.exe C:\Programme\MSN Messenger\msnmsgr.exe C:\Programme\Messenger\msmsgs.exe C:\Program Files\AdTools Service\AdToolsKeep.exe C:\Programme\D-Link AirPlus\AirPlus.exe C:\windows\system32\packager.exe C:\mysql\bin\winmysqladmin.exe C:\WINDOWS\System32\wuauclt.exe C:\Programme\Internet Explorer\iexplore.exe C:\Programme\Winamp\winamp.exe C:\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir..._PVER}&ar=home R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir...r=6&ar=msnhome R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir...ie&ar=iesearch R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.microsoft.com/isapi/redir...r=6&ar=msnhome O1 - Hosts: 69.64.35.177 auto.search.msn.com O2 - BHO: (no name) - {00000000-F09C-02B4-6EC2-AD0300000000} - C:\WINDOWS\BTGrab.dll O2 - BHO: (no name) - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar3.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar3.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [WinLogon] C:\WINDOWS\logon.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [pbruupv] c:\windows\system32\pbruupv.exe O4 - HKLM\..\Run: [JVM0.12] C:\WINDOWS\System32\hwee.exe O4 - HKLM\..\Run: [salm] c:\temp\salm.exe O4 - HKLM\..\Run: [cdqn] C:\WINDOWS\cdqn.exe O4 - HKLM\..\Run: [AdTools Service] C:\Program Files\AdTools Service\AdTools.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Steam] C:\Programme\Steam\Steam.exe -silent O4 - Startup: Galaxy Network miniTP.lnk = C:\Programme\miniTP\miniTP.exe O4 - Startup: WinMySQLadmin.lnk = C:\mysql\bin\winmysqladmin.exe O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: D-Link AirPlus.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Google Search - res://c:\programme\google\GoogleToolbar3.dll/cmsearch.html O8 - Extra context menu item: Alles mit FlashGet laden - C:\Programme\FlashGet\jc_all.htm O8 - Extra context menu item: Im Cache gespeicherte Seite - res://c:\programme\google\GoogleToolbar3.dll/cmcache.html O8 - Extra context menu item: Mit FlashGet laden - C:\Programme\FlashGet\jc_link.htm O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Verweisseiten - res://c:\programme\google\GoogleToolbar3.dll/cmbacklinks.html O8 - Extra context menu item: Ähnliche Seiten - res://c:\programme\google\GoogleToolbar3.dll/cmsimilar.html O9 - Extra 'Tools' menuitem: Sun Java Konsole (HKLM) O9 - Extra button: ICQ Pro (HKLM) O9 - Extra 'Tools' menuitem: ICQ (HKLM) O9 - Extra button: Related (HKLM) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) O9 - Extra button: FlashGet (HKLM) O9 - Extra 'Tools' menuitem: &FlashGet (HKLM) O9 - Extra button: Messenger (HKLM) O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM) O16 - DPF: {00000000-7777-0704-0B53-2C8830E9FAEC} - http://gn.one2bill.de/soft/axload.cab O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {14F65762-96FB-44B9-8DAC-93845F377A0E} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.co...haringctrl.cab O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - ms-its:mhtml:file://c:\nosuxxx.mht!http://nobodyhere.ath.cx/ax/loud.chm::/bridge-c46.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by104fd.bay104.hotmail.msn.co...s/MsnPUpld.cab O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.kochmesser.de/scan/Msie/bitdefender.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab32846.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab |
|
Logfile of HijackThis v1.99.1 Scan saved at 14:51:14, on 22.02.2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Programme\F-Secure Anti-Virus\backweb\4476822\program\fsbwsys.exe C:\WINDOWS\System32\inetsrv\inetinfo.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\PROGRA~1\PESTPA~1\PPMemCheck.exe C:\PROGRA~1\PESTPA~1\CookiePatrol.exe C:\Programme\QuickTime\qttask.exe C:\WINDOWS\System32\RUNDLL32.EXE C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\logon.exe C:\windows\system32\pbruupv.exe C:\WINDOWS\System32\hwee.exe C:\Program Files\AdTools Service\AdTools.exe C:\temp\salm.exe C:\Program Files\Internet Optimizer\optimize.exe C:\WINDOWS\System32\ctfmon.exe C:\Programme\MSN Messenger\msnmsgr.exe C:\Programme\Messenger\msmsgs.exe C:\Program Files\AdTools Service\AdToolsKeep.exe C:\Programme\D-Link AirPlus\AirPlus.exe C:\windows\system32\packager.exe C:\mysql\bin\winmysqladmin.exe C:\WINDOWS\System32\wuauclt.exe C:\Programme\Winamp\winamp.exe C:\PROGRA~1\MOZILL~1\firefox.exe C:\Programme\Internet Explorer\iexplore.exe C:\HijackThis.exe O1 - Hosts: 69.64.35.177 auto.search.msn.com O2 - BHO: BTGrabObj Class - {00000000-F09C-02B4-6EC2-AD0300000000} - C:\WINDOWS\BTGrab.dll O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem303.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar3.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar3.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [WinLogon] C:\WINDOWS\logon.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [pbruupv] c:\windows\system32\pbruupv.exe O4 - HKLM\..\Run: [JVM0.12] C:\WINDOWS\System32\hwee.exe O4 - HKLM\..\Run: [salm] c:\temp\salm.exe O4 - HKLM\..\Run: [cdqn] C:\WINDOWS\cdqn.exe O4 - HKLM\..\Run: [AdTools Service] C:\Program Files\AdTools Service\AdTools.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Steam] C:\Programme\Steam\Steam.exe -silent O4 - Startup: Galaxy Network miniTP.lnk = C:\Programme\miniTP\miniTP.exe O4 - Startup: WinMySQLadmin.lnk = C:\mysql\bin\winmysqladmin.exe O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: D-Link AirPlus.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Google Search - res://c:\programme\google\GoogleToolbar3.dll/cmsearch.html O8 - Extra context menu item: Alles mit FlashGet laden - C:\Programme\FlashGet\jc_all.htm O8 - Extra context menu item: Im Cache gespeicherte Seite - res://c:\programme\google\GoogleToolbar3.dll/cmcache.html O8 - Extra context menu item: Mit FlashGet laden - C:\Programme\FlashGet\jc_link.htm O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Verweisseiten - res://c:\programme\google\GoogleToolbar3.dll/cmbacklinks.html O8 - Extra context menu item: Ähnliche Seiten - res://c:\programme\google\GoogleToolbar3.dll/cmsimilar.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Programme\ICQ\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Programme\ICQ\ICQ.exe O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE O16 - DPF: {00000000-7777-0704-0B53-2C8830E9FAEC} - http://gn.one2bill.de/soft/axload.cab O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {14F65762-96FB-44B9-8DAC-93845F377A0E} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.co...haringctrl.cab O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - ms-its:mhtml:file://c:\nosuxxx.mht!http://nobodyhere.ath.cx/ax/loud.chm::/bridge-c46.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by104fd.bay104.hotmail.msn.co...s/MsnPUpld.cab O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.kochmesser.de/scan/Msie/bitdefender.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab32846.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O23 - Service: Adobe LM Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AntiVir Service (AntiVirService) - Unknown owner - C:\Programme\AVPersonal\AVGUARD.EXE (file missing) O23 - Service: Apache - Unknown owner - C:\Programme\Apache Group\Apache\Apache.exe" --ntservice (file missing) O23 - Service: AntiVir Update (AVWUpSrv) - Unknown owner - C:\Programme\AVPersonal\AVWUPSRV.EXE (file missing) O23 - Service: fsbwsys - F-Secure Corp. - C:\Programme\F-Secure Anti-Virus\backweb\4476822\program\fsbwsys.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Programme\TuneUp Utilities 2004\WinStylerThemeSvc.exe O23 - Service: rundll (winnt32) - Unknown owner - C:\WINDOWS\System32\rundll.exe" -service (file missing) |
@Pomes du hast einiges im system, als erstes bitte system und IE updaten dann escan downloaden anleitung lesen überprüfe Deinen Rechner zunächst mit dem eScan: lade den eScan runter, erstelle dafür einen Ordner (=Verzeichnis) c:\bases, update den eScan online und führe ihn offline im abgesicherten Modus aus. Beachte, dass der eScan ab Version 4.5.1 gefundene Malware nicht löscht. Das wird von Hand auf Anweisung durch uns gemacht. Teile uns dann das Ergebnis des eScan mit: welche Viren wurden auf Deinem Rechner gefunden: "öffne die mwav.log -> Bearbeiten -> Suchen -> infected eingeben -> Weitersuchen -> Treffer markieren/kopieren und ins Forum übertragen." (Zitat Cidre) chaosman |
Tue Feb 22 16:21:05 2005 => File C:\WINDOWS\BTGrab.dll infected by "not-a-virus:AdWare.BiSpy.t" Virus. Action Taken: No Action Taken. Tue Feb 22 16:21:16 2005 => File C:\WINDOWS\logon.exe infected by "Trojan-Downloader.Win32.VB.fi" Virus. Action Taken: No Action Taken. Tue Feb 22 16:21:16 2005 => File c:\windows\system32\pbruupv.exe infected by "Trojan.Win32.Agent.ay" Virus. Action Taken: No Action Taken. Tue Feb 22 16:21:17 2005 => File C:\WINDOWS\System32\hwee.exe infected by "Trojan-Downloader.Win32.Agent.jc" Virus. Action Taken: No Action Taken. Tue Feb 22 16:21:17 2005 => File C:\WINDOWS\cdqn.exe infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. Tue Feb 22 16:21:33 2005 => File C:\WINDOWS\ABox.exe infected by "not-a-virus:AdWare.AdBox.a" Virus. Action Taken: No Action Taken. Tue Feb 22 16:21:44 2005 => File C:\WINDOWS\wsem303.dll infected by "Trojan-Downloader.Win32.Dyfuca.dt" Virus. Action Taken: No Action Taken. Tue Feb 22 16:22:15 2005 => File C:\WINDOWS\System32\doolsav.dat infected by "not-a-virus:AdWare.ToolBar.EliteBar.y" Virus. Action Taken: No Action Taken. Tue Feb 22 16:29:21 2005 => File C:\backups\backup-20050222-150045-764.dll infected by "Trojan-Downloader.Win32.Dyfuca.dt" Virus. Action Taken: No Action Taken. Tue Feb 22 16:29:21 2005 => File C:\backups\backup-20050222-150045-974.dll infected by "Trojan.Win32.Dialer.ep" Virus. Action Taken: No Action Taken. Tue Feb 22 16:29:21 2005 => File C:\backups\backup-20050222-150046-555 infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. Tue Feb 22 16:29:21 2005 => File C:\backups\backup-20050222-150046-555.dll infected by "not-a-virus:AdWare.WinAD.x" Virus. Action Taken: No Action Taken. Tue Feb 22 16:30:04 2005 => File C:\counter.cab infected by "Trojan-Dropper.Win32.Agent.az" Virus. Action Taken: No Action Taken. Tue Feb 22 16:55:15 2005 => File C:\hijackthis.log infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. Tue Feb 22 17:09:10 2005 => File C:\Program Files\AdTools Service\AdToolsKeep.exe infected by "not-a-virus:AdWare.WinAD.k" Virus. Action Taken: No Action Taken. Tue Feb 22 17:44:11 2005 => File C:\Programme\Windows Media Player\wmplayer.exe.tmp infected by "Trojan-Downloader.Win32.Small.aaq" Virus. Action Taken: No Action Taken. Tue Feb 22 17:48:04 2005 => File C:\System Volume Information\_restore{027B7341-853E-4CCF-B015-1FDCEBD016CA}\RP64\A0003979.exe infected by "Trojan-Downloader.Win32.Dyfuca.dp" Virus. Action Taken: No Action Taken. Tue Feb 22 17:48:04 2005 => File C:\System Volume Information\_restore{027B7341-853E-4CCF-B015-1FDCEBD016CA}\RP64\A0003980.exe infected by "Trojan-Downloader.Win32.Dyfuca.dp" Virus. Action Taken: No Action Taken. Tue Feb 22 17:48:04 2005 => File C:\System Volume Information\_restore{027B7341-853E-4CCF-B015-1FDCEBD016CA}\RP64\A0003981.exe infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken. Tue Feb 22 17:48:05 2005 => File C:\System Volume Information\_restore{027B7341-853E-4CCF-B015-1FDCEBD016CA}\RP64\A0003987.exe infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken. Tue Feb 22 17:48:05 2005 => File C:\System Volume Information\_restore{027B7341-853E-4CCF-B015-1FDCEBD016CA}\RP64\A0003988.dll infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken. Tue Feb 22 17:48:05 2005 => File C:\System Volume Information\_restore{027B7341-853E-4CCF-B015-1FDCEBD016CA}\RP64\A0003989.exe infected by "not-a-virus:AdWare.Sahat.l" Virus. Action Taken: No Action Taken. Tue Feb 22 17:48:05 2005 => File C:\System Volume Information\_restore{027B7341-853E-4CCF-B015-1FDCEBD016CA}\RP64\A0003993.dll infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus. Action Taken: No Action Taken. Tue Feb 22 17:48:19 2005 => File C:\System Volume Information\_restore{027B7341-853E-4CCF-B015-1FDCEBD016CA}\RP64\A0004997.exe infected by "Trojan-Downloader.Win32.Dyfuca.du" Virus. Action Taken: No Action Taken. Tue Feb 22 17:50:45 2005 => File C:\WINDOWS\ABox.exe infected by "not-a-virus:AdWare.AdBox.a" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:39 2005 => File C:\WINDOWS\Downloaded Program Files\ABoxInst_int4.exe infected by "Trojan-Downloader.Win32.VB.ft" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:39 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.1\ABoxInst_int4.exe infected by "Trojan-Downloader.Win32.VB.ft" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:40 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.1\HDPlugin1019.dll infected by "not-a-virus:AdWare.Gator.1019" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:40 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.1\HDPlugin1100.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:40 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.1\HDPlugin1101.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:40 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.2\HDPlugin1100.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:40 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.2\HDPlugin1101.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:40 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.3\HDPlugin1100.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:41 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.3\HDPlugin1101.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:41 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.4\HDPlugin1101.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:41 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.5\HDPlugin1101.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:41 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.6\HDPlugin1101.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:41 2005 => File C:\WINDOWS\Downloaded Program Files\CONFLICT.7\HDPlugin1101.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:42 2005 => File C:\WINDOWS\Downloaded Program Files\HDPlugin1019.dll infected by "not-a-virus:AdWare.Gator.1019" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:42 2005 => File C:\WINDOWS\Downloaded Program Files\HDPlugin1100.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:42 2005 => File C:\WINDOWS\Downloaded Program Files\HDPlugin1101.dll infected by "not-a-virus:AdWare.Gator.1101" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:42 2005 => File C:\WINDOWS\Downloaded Program Files\ISTactivex.dll infected by "Trojan-Downloader.Win32.IstBar.gh" Virus. Action Taken: No Action Taken. Tue Feb 22 17:51:43 2005 => File C:\WINDOWS\Downloaded Program Files\YSBactivex.dll infected by "Trojan-Downloader.Win32.IstBar.gk" Virus. Action Taken: No Action Taken. Tue Feb 22 18:09:06 2005 => File C:\WINDOWS\system32\doolsav.dat infected by "not-a-virus:AdWare.ToolBar.EliteBar.y" Virus. Action Taken: No Action Taken. Tue Feb 22 18:13:08 2005 => File C:\WINDOWS\wsem303.dll infected by "Trojan-Downloader.Win32.Dyfuca.dt" Virus. Action Taken: No Action Taken. |
Kann ich alle infizierten Dateien bedenkenlos löschen? |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 11:40 Uhr. |
Copyright ©2000-2025, Trojaner-Board