Trojaner/Virus ? Schlimm ?
 

hallo,

avast hat bei mir folgende sachen gefunden, sind die schlimm?, kann ich sie einfach in der quarantäne lassen? oder wie bekomm ich sie los?

08.03.2006 19:37:02 SYSTEM 1724 Sign of "Win32:Istbar-AV [Trj]" has been found in "http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab\ysbactivex.dll" file.
08.03.2006 19:38:15 SYSTEM 1724 Sign of "Win32:Istbar-AV [Trj]" has been found in "http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab\ysbactivex.dll" file.
08.03.2006 19:39:17 SYSTEM 1724 Sign of "Win32:Istbar-AV [Trj]" has been found in "http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab\ysbactivex.dll" file.
08.03.2006 19:45:47 SYSTEM 1724 Sign of "Win32:Istbar-AV [Trj]" has been found in "http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab\ysbactivex.dll" file.
08.03.2006 19:46:18 SYSTEM 1724 Sign of "Win32:Istbar-AV [Trj]" has been found in "http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab\ysbactivex.dll" file.
08.03.2006 19:49:00 SYSTEM 1724 Sign of "Win32:Istbar-AV [Trj]" has been found in "http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab\ysbactivex.dll" file.
08.03.2006 19:49:13 SYSTEM 1724 Sign of "Win32:Istbar-AV [Trj]" has been found in "http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab\ysbactivex.dll" file.
08.03.2006 19:50:46 SYSTEM 1724 Sign of "Win32:Istbar-AV [Trj]" has been found in "http://www.ysbweb.com/ist/softwares/v4.0/ysb_regular.cab\ysbactivex.dll" file.
09.03.2006 10:17:39 SYSTEM 1932 Sign of "MS06-001 WMF Exploit" has been found in "http://www.heise.de/security/dienste/browsercheck/demos/ie/wmfexp3.php" file.
03.04.2006 16:24:50 SYSTEM 1668 Sign of "Win32:Rbot-BKP [Trj]" has been found in "C:\WINDOWS\system32\msdnsd32.exe" file.
05.04.2006 14:17:11 SYSTEM 292 Sign of "Win32:Rbot-BKP [Trj]" has been found in "C:\System Volume Information\_restore{0ACEBCF8-A6FC-4399-94FD-2DEE45552192}\RP79\A0014035.exe" file.
06.04.2006 14:14:55 Tim 3764 Sign of "Win32:Trojan-gen. {Other}" has been found in "C:\System Volume Information\_restore{0ACEBCF8-A6FC-4399-94FD-2DEE45552192}\RP76\A0012641.EXE" file.


beim bootscan bekomm ich diverse fehlermeldungen "Fehler 42100"

danke für die hilfe
gruß
tim

Hallo snoopy76,

es sieht böse aus:
http://www.sophos.de/virusinfo/analyses/w32rbotcmz.html

Bei einem Trojaner mit Backdoor-Funktionaltität ist dringend eine Neuinstallation anzuraten.

http://www.mathematik.uni-marburg.de...c-removal.html
http://www.mathematik.uni-marburg.de...ompromise.html
http://en.wikipedia.org/wiki/Backdoor
http://de.wikipedia.org/wiki/Botnet

Empfohlene Anleitung zur Neuinstallation:
http://www.trojaner-board.de/showthread.php?t=12154

Thema Datensicherung
http://www.trojaner-board.de/showpos...8&postcount=11

dartus