Hijack Log-File
 

Hallo zusammen,



meinen Hijacker und die Spyware habe ich weder mit den gängigen Programmen, noch mit eScan-Suchlauf und anschließender Killbox-Therapie vertrieben. Scheint also komplexer zu sein. Ich bitte um eine kompetente Analyse:



Wed May 24 18:48:16 2006 => ***** Scanning Registry and File system for Adware/Spyware *****
Wed May 24 18:48:16 2006 => Loading Spyware Signatures from new External Database (Size: 157208).
Wed May 24 18:48:16 2006 => Indexed Spyware Databases Successfully Created...

Wed May 24 18:48:16 2006 => System found infected with netster Spyware/Adware ({56336bcb-3d8a-11d6-a00b-0050da18de71})! Action taken: No Action Taken.
Wed May 24 18:48:16 2006 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken.
Wed May 24 18:48:16 2006 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken.
Wed May 24 18:48:16 2006 => System found infected with netster Spyware/Adware ({56336bcb-3d8a-11d6-a00b-0050da18de71})! Action taken: No Action Taken.
Wed May 24 18:48:17 2006 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken.
Wed May 24 18:48:19 2006 => Offending Folder found: C:\WINDOWS\System32\1024
Wed May 24 18:48:19 2006 => Object "smitfraud Browser Hijacker" found in File System! Action Taken: No Action Taken.

Wed May 24 18:48:20 2006 => Offending file found: C:\Dokumente und Einstellungen\croi\Desktop\internet.lnk
Wed May 24 18:48:20 2006 => System found infected with ezula Spyware/Adware (internet.lnk)! Action taken: No Action Taken.

Wed May 24 18:48:20 2006 => Offending Folder found: C:\Dokumente und Einstellungen\croi\Eigene Dateien\adobestockphotos\autos
Wed May 24 18:48:20 2006 => Object "gohip Spyware/Adware" found in File System! Action Taken: No Action Taken.

Wed May 24 18:48:20 2006 => Offending Folder found: C:\Dokumente und Einstellungen\croi\Eigene Dateien\eigene bilder\feature\autos
Wed May 24 18:48:20 2006 => Object "gohip Spyware/Adware" found in File System! Action Taken: No Action Taken.

Wed May 24 18:48:23 2006 => Offending Folder found: C:\Dokumente und Einstellungen\croi\Eigene Dateien\Eigene Bilder\feature\autos
Wed May 24 18:48:23 2006 => Object "gohip Spyware/Adware" found in File System! Action Taken: No Action Taken.



Herzlichen Dank,

cohn

Ich bitte um eine genaue Problembeschreibung und einen HJT-Log!

Hallo cronos,


den Internet Explorer scheint es erwischt zu haben. Sobald ich online gehe, erscheinen Pop-Ups, gelbe Warnschilder in der Taskleiste und falsche Warmeldungen der Sorte "Your computer has been infected", die auf Online-Antispyware führen, die man sich natürlich kaufen soll. Den Hijacker scheint der Total Commander jetzt entsorgt zu haben, nur diese unauffindbare Spyware ist hartnäckig:



Thu May 25 01:21:15 2006 => ***** Scanning Registry and File system for Adware/Spyware *****
Thu May 25 01:21:15 2006 => Loading Spyware Signatures from new External Database (Size: 157208).
Thu May 25 01:21:15 2006 => Indexed Spyware Databases Successfully Created...

Thu May 25 01:21:20 2006 => System found infected with netster Spyware/Adware ({56336bcb-3d8a-11d6-a00b-0050da18de71})! Action taken: No Action Taken.
Thu May 25 01:21:21 2006 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken.
Thu May 25 01:21:21 2006 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken.
Thu May 25 01:21:21 2006 => System found infected with netster Spyware/Adware ({56336bcb-3d8a-11d6-a00b-0050da18de71})! Action taken: No Action Taken.
Thu May 25 01:21:21 2006 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken.




Wo findet man denn die Daten in den Klammeraffen?


Vielen Dank für den Einsatz,

cohn