|
Zitat:
Zeit habe ich aber ich verstehe nicht was du mit e-scan meinst und wie ich das machen soll? |
Gehe dieser Anleitung nach, und poste das Ergebnis hier im Forum: http://www.trojaner-board.de/38066-escan-anleitung-und-find-bat-autor-mightymarc.html Dies ist ein On-Demand Scanner von allen Progrämmchen die es zur Zeit gibt. Ich editier dies jetzt mal absichtlich nicht, auch auf die Gefahr hin das ich hier Ärger bekomme! Anklicken und Anleitung lesen! Gruß Patrick |
Zitat:
Hi Patrick folgende escan habe ich erstellt: find.bat Version 2007.06.16.01 Microsoft Windows XP [Version 5.1.2600] Bootmodus: NORMAL eScan Version: 9.2.7 Sprache: English Virus Database Date: 6/15/2007 System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan ({b8c5186e-ec37-4889-9c2e-f73649ffb7bb})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan (gbjkog.dll)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (online security guide.url)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (security troubleshooting.url)! Action taken: No Action Taken. System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan ({b8c5186e-ec37-4889-9c2e-f73649ffb7bb})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan (gbjkog.dll)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (online security guide.url)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (security troubleshooting.url)! Action taken: No Action Taken. System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan ({b8c5186e-ec37-4889-9c2e-f73649ffb7bb})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan (gbjkog.dll)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (online security guide.url)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (security troubleshooting.url)! Action taken: No Action Taken. Object "video activex object Trojan" found in File System! Action Taken: No Action Taken. Object "video activex object Trojan" found in File System! Action Taken: No Action Taken. Object "video activex object Trojan" found in File System! Action Taken: No Action Taken. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Infektionsmeldungen ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan ({b8c5186e-ec37-4889-9c2e-f73649ffb7bb})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan (gbjkog.dll)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (online security guide.url)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (security troubleshooting.url)! Action taken: No Action Taken. System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan ({b8c5186e-ec37-4889-9c2e-f73649ffb7bb})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan (gbjkog.dll)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (online security guide.url)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (security troubleshooting.url)! Action taken: No Action Taken. System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan ({b8c5186e-ec37-4889-9c2e-f73649ffb7bb})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({df4e7a0c-e233-4906-b4c1-a404356541ff})! Action taken: No Action Taken. System found infected with video activex access Trojan ({41eaa909-24be-4d24-877f-076a0576a6fd})! Action taken: No Action Taken. System found infected with video activex access Trojan (gbjkog.dll)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (online security guide.url)! Action taken: No Action Taken. System found infected with smitfraud Browser Hijacker (security troubleshooting.url)! Action taken: No Action Taken. Object "video activex object Trojan" found in File System! Action Taken: No Action Taken. Object "video activex object Trojan" found in File System! Action Taken: No Action Taken. Object "video activex object Trojan" found in File System! Action Taken: No Action Taken. ~~~~~~~~~~~ Dateien ~~~~~~~~~~~ ~~~~ Infected files ~~~~~~~~~~~ File C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\Temp\laf19.tmp infected by "Trojan-Downloader.Win32.Agent.bkd" Virus! Action Taken: No Action Taken. File C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\9GYGX4EV\setup[1].exe//data0007 infected by "Trojan-Downloader.Win32.Zlob.btd" Virus! Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temp\laf19.tmp infected by "Trojan-Downloader.Win32.Agent.bkd" Virus! Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\9GYGX4EV\setup[1].exe//data0007 infected by "Trojan-Downloader.Win32.Zlob.btd" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP35\A0008329.dll//PE_Patch infected by "Trojan-Downloader.Win32.Zlob.btq" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP35\A0008331.exe//PE_Patch.UPX//UPX infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008341.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008342.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008343.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008427.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008428.exe//PE_Patch.UPX//UPX infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP37\A0008457.exe//PE_Patch.UPX//UPX infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP38\A0008567.dll//PE_Patch infected by "Trojan-Downloader.Win32.Zlob.btq" Virus! Action Taken: No Action Taken. File C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\Temp\laf19.tmp infected by "Trojan-Downloader.Win32.Agent.bkd" Virus! Action Taken: No Action Taken. File C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\9GYGX4EV\setup[1].exe//data0007 infected by "Trojan-Downloader.Win32.Zlob.btd" Virus! Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temp\laf19.tmp infected by "Trojan-Downloader.Win32.Agent.bkd" Virus! Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\9GYGX4EV\setup[1].exe//data0007 infected by "Trojan-Downloader.Win32.Zlob.btd" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP35\A0008329.dll//PE_Patch infected by "Trojan-Downloader.Win32.Zlob.btq" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP35\A0008331.exe//PE_Patch.UPX//UPX infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008341.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008342.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008343.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008427.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008428.exe//PE_Patch.UPX//UPX infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP37\A0008457.exe//PE_Patch.UPX//UPX infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP38\A0008567.dll//PE_Patch infected by "Trojan-Downloader.Win32.Zlob.btq" Virus! Action Taken: No Action Taken. File C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\Temp\laf19.tmp infected by "Trojan-Downloader.Win32.Agent.bkd" Virus! Action Taken: No Action Taken. File C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\9GYGX4EV\setup[1].exe//data0007 infected by "Trojan-Downloader.Win32.Zlob.btd" Virus! Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temp\laf19.tmp infected by "Trojan-Downloader.Win32.Agent.bkd" Virus! Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\9GYGX4EV\setup[1].exe//data0007 infected by "Trojan-Downloader.Win32.Zlob.btd" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP35\A0008329.dll//PE_Patch infected by "Trojan-Downloader.Win32.Zlob.btq" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP35\A0008331.exe//PE_Patch.UPX//UPX infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008341.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008342.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008343.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008427.exe infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP36\A0008428.exe//PE_Patch.UPX//UPX infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP37\A0008457.exe//PE_Patch.UPX//UPX infected by "Trojan-Downloader.Win32.Zlob.bvj" Virus! Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP38\A0008567.dll//PE_Patch infected by "Trojan-Downloader.Win32.Zlob.btq" Virus! Action Taken: No Action Taken. _____________________ weiter unten ist der zweite Teil... Gruss Lahs |
Zitat:
Hi Patrick, hier ist der zweite Teil: ~~~~~~~~~~~ ~~~~ Tagged files ~~~~~~~~~~~ File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP38\A0008578.dll//PE_Patch tagged as "not-a-virus:AdWare.Win32.Agent.cu". Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP38\A0008578.dll//PE_Patch tagged as "not-a-virus:AdWare.Win32.Agent.cu". Action Taken: No Action Taken. File C:\System Volume Information\_restore{A0B60134-FE4C-4855-802C-B31DA4104E80}\RP38\A0008578.dll//PE_Patch tagged as "not-a-virus:AdWare.Win32.Agent.cu". Action Taken: No Action Taken. ~~~~~~~~~~~ ~~~~ Offending files ~~~~~~~~~~~ Offending file found: C:\WINDOWS\system32\gbjkog.dll Offending file found: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\online security guide.url Offending file found: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\security troubleshooting.url Offending file found: C:\WINDOWS\system32\gbjkog.dll Offending file found: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\online security guide.url Offending file found: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\security troubleshooting.url Offending file found: C:\WINDOWS\system32\gbjkog.dll Offending file found: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\online security guide.url Offending file found: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\security troubleshooting.url ~~~~~~~~~~~ Ordner ~~~~~~~~~~~ ~~~~~~~~~~~ Registry ~~~~~~~~~~~ Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\video activex object !!! Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\video activex object !!! Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\video activex object !!! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Diverses ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~ Prozesse und Module ~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~ Scanfehler ~~~~~~~~~~~~~~~~~~~~~~ C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\1NZ3LHWE\spybotsd14[1].exe not Scanned. Possibly password protected... C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\9GYGX4EV\swflash[1].cab not Scanned. Possibly password protected... C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\KJ536A39\hijackthis[1].zip not Scanned. Possibly password protected... C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\1NZ3LHWE\spybotsd14[1].exe not Scanned. Possibly password protected... C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\9GYGX4EV\swflash[1].cab not Scanned. Possibly password protected... C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\KJ536A39\hijackthis[1].zip not Scanned. Possibly password protected... D:\11d53d2842f04864f584\i386\aec.sy_ not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_CHS_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_CHT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_DE_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_ENU_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_ES_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_FR_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_IT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_JA_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_KO_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\WCE500\ARMV4i\NETCFv1.WM.ARMV4I.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_CHS_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_CHT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_DE_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_ENU_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_ES_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_FR_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_IT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_JA_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_KO_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_pt-BR_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce400\armv4\NETCFv2.ppc.armv4.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\armv4i\NETCFv2.wce5.armv4i.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\armv4i\NETCFv2.wm.armv4i.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\mipsii\NETCFv2.wce5.mipsii.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\mipsiv\NETCFv2.wce5.mipsiv.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\sh4\NETCFv2.wce5.sh4.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\x86\NETCFv2.wce5.x86.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.dev.ENU.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.dev.ENU.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.dev.ENU.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.dev.ENU.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.repl.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.repl.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\1NZ3LHWE\spybotsd14[1].exe not Scanned. Possibly password protected... C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\9GYGX4EV\swflash[1].cab not Scanned. Possibly password protected... C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\KJ536A39\hijackthis[1].zip not Scanned. Possibly password protected... C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\1NZ3LHWE\spybotsd14[1].exe not Scanned. Possibly password protected... C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\9GYGX4EV\swflash[1].cab not Scanned. Possibly password protected... C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\KJ536A39\hijackthis[1].zip not Scanned. Possibly password protected... D:\11d53d2842f04864f584\i386\aec.sy_ not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_CHS_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_CHT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_DE_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_ENU_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_ES_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_FR_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_IT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_JA_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_KO_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\WCE500\ARMV4i\NETCFv1.WM.ARMV4I.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_CHS_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_CHT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_DE_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_ENU_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_ES_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_FR_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_IT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_JA_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_KO_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_pt-BR_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce400\armv4\NETCFv2.ppc.armv4.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\armv4i\NETCFv2.wce5.armv4i.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\armv4i\NETCFv2.wm.armv4i.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\mipsii\NETCFv2.wce5.mipsii.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\mipsiv\NETCFv2.wce5.mipsiv.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\sh4\NETCFv2.wce5.sh4.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\x86\NETCFv2.wce5.x86.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.dev.ENU.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.dev.ENU.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.dev.ENU.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.dev.ENU.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.repl.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.repl.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\1NZ3LHWE\spybotsd14[1].exe not Scanned. Possibly password protected... C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\9GYGX4EV\swflash[1].cab not Scanned. Possibly password protected... C:\DOKUME~1\HALIMA~1.KHA\LOKALE~1\TEMPOR~1\Content.IE5\KJ536A39\hijackthis[1].zip not Scanned. Possibly password protected... C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\1NZ3LHWE\spybotsd14[1].exe not Scanned. Possibly password protected... C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\9GYGX4EV\swflash[1].cab not Scanned. Possibly password protected... C:\Dokumente und Einstellungen\Halima.KHALID\Lokale Einstellungen\Temporary Internet Files\Content.IE5\KJ536A39\hijackthis[1].zip not Scanned. Possibly password protected... D:\11d53d2842f04864f584\i386\aec.sy_ not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_CHS_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_CHT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_DE_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_ENU_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_ES_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_FR_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_IT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_JA_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\Diagnostics\System_SR_KO_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v1.0\WindowsCE\WCE500\ARMV4i\NETCFv1.WM.ARMV4I.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_CHS_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_CHT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_DE_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_ENU_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_ES_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_FR_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_IT_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_JA_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_KO_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\Diagnostics\System_SR_pt-BR_wm.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce400\armv4\NETCFv2.ppc.armv4.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\armv4i\NETCFv2.wce5.armv4i.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\armv4i\NETCFv2.wm.armv4i.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\mipsii\NETCFv2.wce5.mipsii.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\mipsiv\NETCFv2.wce5.mipsiv.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\sh4\NETCFv2.wce5.sh4.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\CompactFramework\2.0\v2.0\WindowsCE\wce500\x86\NETCFv2.wce5.x86.cab not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.dev.ENU.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.dev.ENU.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Client\v2.0\wce500\armv4i\sql.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.dev.ENU.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.dev.ENU.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.repl.phone.wce5.armv4i.CAB not Scanned. Possibly password protected... D:\visual Studio\SmartDevices\SDK\SQL Server\Mobile\v3.0\wce500\armv4i\sqlce30.repl.ppc.wce5.armv4i.CAB not Scanned. Possibly password protected... Gruss Lahs |
Moin, wollte eigentl zu Bettchen gehen. Aber wir hatten ja schon die Tage alle so "nett miteinander kommuniziert" :) Hier im Board gibt es dazu diesen Weg Zlob/Smitfraud : http://www.trojaner-board.de/30411-anleitung-zur-entfernung-von-zlob.html (Editier ich jetzt mal auch nicht) Aber zu Deiner eigenen Sicherheit würde ich Dir das Neuaufsetzen empfehlen... |
Hallöle Lahs. Bevor du der Anleitung aus dem FAQ Bereich zur Entfernung eines Zlob folgst; deaktiviere bitte die Systemwiederherstellung auf allen Laufwerken und starte deinen Rechner neu. Ansonsten wirst du nicht viel Erfolg haben.. Gruß Undoreal |
Zitat:
wie kann ich die Systemwiederherstellung deaktivieren? Gruss Lahs |
Erst Googeln, dann Boardsuche nutzen, dann fragen! |
Zitat:
es hat sich erledigt mit dem Deaktivieren von Syswiederherstellung. Das Problem jetzt ist das folgende: Ich habe mir Smitfraudfix runtergeladen und entpackt. Bei Starten von Smitfraudfix bekomme ich die Meldung "Reboot.exe file missing " " Unzip all the archive in a folder" Ich habe smitfraudfix 3 mal runtergeladen und entpackt ohne Erfolg. Dies immer noch im normalen Modus. Gruss Lahs |
Systemwiederherstellung ist deaktiviert ja? Schalte mal deinen AntiViren Wächter aus solange du mit SmitfraudFix arbeitest. Dann muss das entpacken funktionieren. Eine Anleitung ist ja im Link enhalten.. mfg Undoreal |
Zitat:
Hallo Ihr Beiden, ich danke euch für eure Hilfe. es scheint zu funktionieren. Ich bekomme nicht mehr die Meldung von Spycrush. Gruss Lahs |
Lass das SmitfraudFix laufen bis nichts mehr gefunden wird, danach lasse cCleaner laufen. Starte den Rechner neu und poste dann ein frisches HJT log. Gruß Undoreal |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 12:15 Uhr. |
Copyright ©2000-2025, Trojaner-Board