Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Habe ich wirklich trojaner, Würmer und BackDoor, laut eScan schon (https://www.trojaner-board.de/42609-habe-wirklich-trojaner-wuermer-backdoor-laut-escan-schon.html)

Anti Troja 25.08.2007 13:27

Habe ich wirklich trojaner, Würmer und BackDoor, laut eScan schon
 
Hallo,
Ich möchte nur mal nachfragen ob es sich bei den gefundenen Sachen um etwas ersteres Handelt.
Ich habe im Abgesicherten Modus eScan durchlaufen lassen und mit der Find.bat und eScanCheck 1.10 geschaut ob bei den Treffern was übernommen wird. eScanCheck zeigt nur die beiden Dateien an:

C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DEVCON.EXE
C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DelDrv.exe

Die ich auch gelöscht habe, weil sie mir nicht sind so wichtig sind. Was heist das nun?
Was ist über Diese Sachen zu sagen: killav.nbd Browser Hijacker (svhost.exe)
Die svhost.exe habe ich gar nicht auf den Rechner.
Und zu video activex access Trojan ({7e853d72-626a-48ec-a868-ba8d5e23e045})!, shangxing BackDoor (C:\WINDOWS\system32\svkp.sys)!
Fri Aug 24 21:23:57 2007 => Offending file found: C:\WINDOWS\system32\svkp.sys
Fri Aug 24 21:23:57 2007 => Offending Registry Entry found: hkey_local_machine\system\controlset001\services\svkp
Sowie Gator.

Die Automatische HijackThis Logfileauswertung ergab sicher bis Sehr sicher.

Ich nutze u.a. auch SpybotSD und SpywareBlaster und gehe mit eingeschränkten benutzerrechten ins Netz.

Danke

Der Find.bat log:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~
Funde für "infected"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~
Sun Feb 11 13:04:06 2007 => Total Disinfected Objects: 0
Sun Feb 11 13:04:20 2007 => Total Disinfected Objects: 0
Sun Feb 11 13:21:22 2007 => System found infected with killav.nbd Browser Hijacker (svhost.exe)! Action taken: Entries Removed.
Sun Feb 11 13:21:28 2007 => System found infected with wareout Adware (1.dat)! Action taken: Entries Removed.
Sun Feb 11 13:22:01 2007 => System found infected with spylax Corrupted Adware/Spyware (C:\WINDOWS\unvise32.exe)! Action taken: Entries Removed.
Sun Feb 11 13:23:44 2007 => Scanning Folder: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED\*.*
Sun Feb 11 13:23:44 2007 => Scanning File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED\45a2d781.qua
Sun Feb 11 13:27:55 2007 => Scanning Folder: C:\Dokumente und Einstellungen\All Users.WINDOWS.1\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED\*.*
Sun Feb 11 14:55:20 2007 => Scanning Folder: C:\Programme\AntiVir PersonalEdition Classic\INFECTED\*.*
Sun Feb 11 17:40:23 2007 => Total Disinfected Objects: 0
Fri Aug 24 21:22:24 2007 => System found infected with video activex access Trojan ({7e853d72-626a-48ec-a868-ba8d5e23e045})! Action taken: No Action Taken.
Fri Aug 24 21:23:57 2007 => System found infected with shangxing BackDoor (C:\WINDOWS\system32\svkp.sys)! Action taken: No Action Taken.
Fri Aug 24 21:23:57 2007 => System found infected with shangxing BackDoor (hkey_local_machine\system\controlset001\services\svkp)! Action taken: No Action Taken.
Fri Aug 24 21:33:20 2007 => [Scanning Folder: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED]
Fri Aug 24 21:33:20 2007 => Scanning File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED\45a2d781.qua
Fri Aug 24 21:33:20 2007 => Scanning File C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED\46f6456f.qua
Fri Aug 24 21:40:48 2007 => [Scanning Folder: C:\Dokumente und Einstellungen\All Users.WINDOWS.1\Anwendungsdaten\AntiVir PersonalEdition Classic\INFECTED]
Fri Aug 24 22:47:12 2007 => [Scanning Folder: C:\Programme\AntiVir PersonalEdition Classic\INFECTED]
Sat Aug 25 00:20:19 2007 => File C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DelDrv.exe infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken.
Sat Aug 25 00:20:19 2007 => File C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DEVCON.EXE infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken.
Sat Aug 25 01:10:46 2007 => Total Disinfected Objects: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~
Funde für "tagged"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~
Sun Feb 11 15:53:51 2007 => File C:\Programme\Setup Dateien\xp-iso-builder_final.exe//UPX//data/cmdow.exe tagged as "not-a-virus:RiskTool.Win32.HideWindows". Action Taken: File Deleted.
Sun Feb 11 15:59:51 2007 => File C:\Programme\XP Iso Builder\data\cmdow.exe tagged as "not-a-virus:RiskTool.Win32.HideWindows". Action Taken: File Deleted.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~
Statistiken:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~
Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gator.com !!!
Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\media-motor.net !!!
Sun Feb 11 13:21:14 2007 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!!
Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\CurrentControlSet\Services\iprip !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\CurrentControlSet\Services\nwsapagent !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet003\Services\iprip !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet003\Services\nwsapagent !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet004\Services\iprip !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet004\Services\nwsapagent !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartupReg\scanregistry !!!
Sun Feb 11 13:21:22 2007 => Offending file found: C:\WINDOWS\system32\svhost.exe
Sun Feb 11 13:21:28 2007 => Offending file found: C:\DOKUME~1\Privat\LOKALE~1\ANWEND~1\hp\DIGITA~1\cache\1.dat
Sun Feb 11 13:22:01 2007 => Offending file found: C:\WINDOWS\unvise32.exe
Fri Aug 24 21:22:28 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gator.com !!!
Fri Aug 24 21:22:29 2007 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!!
Fri Aug 24 21:22:29 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!!
Fri Aug 24 21:23:45 2007 => Offending Folder found: C:\Dokumente und Einstellungen\Privat\Eigene Dateien\roulette
Fri Aug 24 21:23:57 2007 => Offending file found: C:\WINDOWS\system32\svkp.sys
Fri Aug 24 21:23:57 2007 => Offending Registry Entry found: hkey_local_machine\system\controlset001\services\svkp
Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H !!!
Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\I !!!
Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{00cbe05c-80fb-11d8-9578-0020ed41a7b4} !!!
Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e6f6fc87-1085-11d9-9724-0008ca122d0a} !!!
Sun Feb 11 13:04:06 2007 => Total Errors: 0
Sun Feb 11 13:04:20 2007 => Total Errors: 0
Sun Feb 11 17:40:23 2007 => Total Errors: 122
Sat Aug 25 01:10:46 2007 => Total Errors: 2787
Sun Feb 11 13:04:06 2007 => Time Elapsed: 00:00:21
Sun Feb 11 13:04:20 2007 => Time Elapsed: 00:00:21
Sun Feb 11 17:40:23 2007 => Time Elapsed: 04:21:37
Sat Aug 25 01:10:46 2007 => Time Elapsed: 03:49:02
Sun Feb 11 13:04:06 2007 => Total Objects Scanned: 757
Sun Feb 11 13:04:20 2007 => Total Objects Scanned: 805
Sun Feb 11 17:40:23 2007 => Total Objects Scanned: 196577
Sat Aug 25 01:10:46 2007 => Total Objects Scanned: 131689
Sun Feb 11 13:04:18 2007 => Virus Database Date: 2/9/2007
Sun Feb 11 13:16:46 2007 => Virus Database Date: 2/9/2007
Sun Feb 11 17:40:23 2007 => Virus Database Date: 2/9/2007
Sun Feb 11 19:35:47 2007 => Virus Database Date: 2/9/2007
Sat Aug 11 19:13:59 2007 => Virus Database Date: 2/9/2007
Sun Aug 12 13:47:34 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:10:26 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:12:06 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:12:35 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:14:22 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:17:55 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:19:59 2007 => Virus Database Date: 8/9/2007
Sat Aug 25 01:10:46 2007 => Virus Database Date: 8/9/2007
Sat Aug 25 01:10:51 2007 => Virus Database Date: 8/9/2007
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~
~~~~~~~ © Haui ;-) ~~~~~~~
~~~~~~~ Dank an Cidre ~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sun Feb 11 13:17:57 2007 => Deleting Registry Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gator.com
Sun Feb 11 13:21:14 2007 => Deleting Registry Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\media-motor.net
Sun Feb 11 13:21:14 2007 => Deleting Registry Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com
Sun Feb 11 13:21:14 2007 => Deleting Registry Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com
Sun Aug 12 13:47:25 2007 => Version 9.1.4 (C:\Bases_X\mexe.com)
Fri Aug 24 21:12:33 2007 => Version 9.1.4 (C:\Bases_X\mexe.com)
Sun Feb 11 13:04:18 2007 => Virus Database Date: 2/9/2007
Sun Feb 11 13:16:46 2007 => Virus Database Date: 2/9/2007
Sun Feb 11 17:40:23 2007 => Virus Database Date: 2/9/2007
Sun Feb 11 19:35:47 2007 => Virus Database Date: 2/9/2007
Sat Aug 11 19:13:59 2007 => Virus Database Date: 2/9/2007
Sun Aug 12 13:47:34 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:10:26 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:12:06 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:12:35 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:14:22 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:17:55 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:19:59 2007 => Virus Database Date: 8/9/2007
Sat Aug 25 01:10:46 2007 => Virus Database Date: 8/9/2007
Sat Aug 25 01:10:51 2007 => Virus Database Date: 8/9/2007
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Infektionsmeldungen
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sun Feb 11 13:21:22 2007 => System found infected with killav.nbd Browser Hijacker (svhost.exe)! Action taken: Entries Removed.
Sun Feb 11 13:21:28 2007 => System found infected with wareout Adware (1.dat)! Action taken: Entries Removed.
Sun Feb 11 13:22:01 2007 => System found infected with spylax Corrupted Adware/Spyware (C:\WINDOWS\unvise32.exe)! Action taken: Entries Removed.
Fri Aug 24 21:22:24 2007 => System found infected with video activex access Trojan ({7e853d72-626a-48ec-a868-ba8d5e23e045})! Action taken: No Action Taken.
Fri Aug 24 21:23:57 2007 => System found infected with shangxing BackDoor (C:\WINDOWS\system32\svkp.sys)! Action taken: No Action Taken.
Fri Aug 24 21:23:57 2007 => System found infected with shangxing BackDoor (hkey_local_machine\system\controlset001\services\svkp)! Action taken: No Action Taken.
Sun Feb 11 13:21:14 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:14 2007 => Object "medload Adware" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:14 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:14 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:18 2007 => Object "linkmedia Trojan" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:18 2007 => Object "kraze.b Virus" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:22 2007 => Object "killav.nbd Browser Hijacker" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:21:28 2007 => Object "wareout Adware" found in File System! Action Taken: Entries Removed.
Sun Feb 11 13:22:01 2007 => Object "spylax Corrupted Adware/Spyware" found in File System! Action Taken: Entries Removed.
Fri Aug 24 21:22:28 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Fri Aug 24 21:22:29 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Fri Aug 24 21:22:29 2007 => Object "gain.gator Spyware/Adware" found in File System! Action Taken: No Action Taken.
Fri Aug 24 21:23:45 2007 => Object "ace club casino Spyware/Adware" found in File System! Action Taken: No Action Taken.
Fri Aug 24 21:24:03 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.
Fri Aug 24 21:24:03 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.
Fri Aug 24 21:24:03 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.
Fri Aug 24 21:24:03 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.
~~~~~~~~~~~
Dateien
~~~~~~~~~~~
~~~~ Infected files
~~~~~~~~~~~
Sat Aug 25 00:20:19 2007 => File C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DelDrv.exe infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken.
Sat Aug 25 00:20:19 2007 => File C:\Programme\MyMPxPlayer.org\MP3 Player Utilities 3.68\DEVCON.EXE infected by "Exe.Corrupted" Virus! Action Taken: No Action Taken.
~~~~~~~~~~~
~~~~ Offending files
~~~~~~~~~~~
Sun Feb 11 13:21:22 2007 => Offending file found: C:\WINDOWS\system32\svhost.exe
Sun Feb 11 13:21:28 2007 => Offending file found: C:\DOKUME~1\Privat\LOKALE~1\ANWEND~1\hp\DIGITA~1\cache\1.dat
Sun Feb 11 13:22:01 2007 => Offending file found: C:\WINDOWS\unvise32.exe
Fri Aug 24 21:23:57 2007 => Offending file found: C:\WINDOWS\system32\svkp.sys
~~~~~~~~~~~
~~~~ Tagged files
~~~~~~~~~~~
Sun Feb 11 15:53:51 2007 => File C:\Programme\Setup Dateien\xp-iso-builder_final.exe//UPX//data/cmdow.exe tagged as "not-a-virus:RiskTool.Win32.HideWindows". Action Taken: File Deleted.
Sun Feb 11 15:59:51 2007 => File C:\Programme\XP Iso Builder\data\cmdow.exe tagged as "not-a-virus:RiskTool.Win32.HideWindows". Action Taken: File Deleted.
~~~~~~~~~~~
Ordner
~~~~~~~~~~~
Fri Aug 24 21:23:45 2007 => Offending Folder found: C:\Dokumente und Einstellungen\Privat\Eigene Dateien\roulette
~~~~~~~~~~~
Registry
~~~~~~~~~~~
Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gator.com !!!
Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\media-motor.net !!!
Sun Feb 11 13:21:14 2007 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!!
Sun Feb 11 13:21:14 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\CurrentControlSet\Services\iprip !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\CurrentControlSet\Services\nwsapagent !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet003\Services\iprip !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet003\Services\nwsapagent !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet004\Services\iprip !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\System\ControlSet004\Services\nwsapagent !!!
Sun Feb 11 13:21:18 2007 => Offending Key found: HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\StartupReg\scanregistry !!!
Fri Aug 24 21:22:28 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gator.com !!!
Fri Aug 24 21:22:29 2007 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!!
Fri Aug 24 21:22:29 2007 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\p3p\history\gator.com !!!
Fri Aug 24 21:23:57 2007 => Offending Registry Entry found: hkey_local_machine\system\controlset001\services\svkp
Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H !!!
Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\I !!!
Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{00cbe05c-80fb-11d8-9578-0020ed41a7b4} !!!
Fri Aug 24 21:24:03 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e6f6fc87-1085-11d9-9724-0008ca122d0a} !!!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Statistiken:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sun Feb 11 13:04:06 2007 => Total Errors: 0
Sun Feb 11 13:04:20 2007 => Total Errors: 0
Sun Feb 11 17:40:23 2007 => Total Errors: 122
Sat Aug 25 01:10:46 2007 => Total Errors: 2787
Sun Feb 11 13:04:06 2007 => Time Elapsed: 00:00:21
Sun Feb 11 13:04:20 2007 => Time Elapsed: 00:00:21
Sun Feb 11 17:40:23 2007 => Time Elapsed: 04:21:37
Sat Aug 25 01:10:46 2007 => Time Elapsed: 03:49:02
Sun Feb 11 13:04:06 2007 => Total Objects Scanned: 757
Sun Feb 11 13:04:20 2007 => Total Objects Scanned: 805
Sun Feb 11 17:40:23 2007 => Total Objects Scanned: 196577
Sat Aug 25 01:10:46 2007 => Total Objects Scanned: 131689
Sun Feb 11 13:04:18 2007 => Virus Database Date: 2/9/2007
Sun Feb 11 13:16:46 2007 => Virus Database Date: 2/9/2007
Sun Feb 11 17:40:23 2007 => Virus Database Date: 2/9/2007
Sun Feb 11 19:35:47 2007 => Virus Database Date: 2/9/2007
Sat Aug 11 19:13:59 2007 => Virus Database Date: 2/9/2007
Sun Aug 12 13:47:34 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:10:26 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:12:06 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:12:35 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:14:22 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:17:55 2007 => Virus Database Date: 2/9/2007
Fri Aug 24 21:19:59 2007 => Virus Database Date: 8/9/2007
Sat Aug 25 01:10:46 2007 => Virus Database Date: 8/9/2007
Sat Aug 25 01:10:51 2007 => Virus Database Date: 8/9/2007
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan-Optionen
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sun Feb 11 13:03:43 2007 => Memory Check: Enabled
Sun Feb 11 13:17:14 2007 => Memory Check: Enabled
Fri Aug 24 21:20:29 2007 => Memory Check: Enabled
Sat Aug 25 01:12:46 2007 => Memory Check: Enabled
Sun Feb 11 13:03:43 2007 => Registry Check: Enabled
Sun Feb 11 13:17:14 2007 => Registry Check: Enabled
Fri Aug 24 21:20:29 2007 => Registry Check: Enabled
Sat Aug 25 01:12:46 2007 => Registry Check: Enabled
Sun Feb 11 13:03:43 2007 => StartUp Folder Check: Enabled
Sun Feb 11 13:17:14 2007 => StartUp Folder Check: Disabled
Fri Aug 24 21:20:29 2007 => StartUp Folder Check: Enabled
Sat Aug 25 01:12:46 2007 => StartUp Folder Check: Disabled
Sun Feb 11 13:03:43 2007 => System Area Check: Disabled
Sun Feb 11 13:17:14 2007 => System Area Check: Disabled
Fri Aug 24 21:20:29 2007 => System Area Check: Disabled
Sat Aug 25 01:12:46 2007 => System Area Check: Disabled
Sun Feb 11 13:03:43 2007 => Services Check: Disabled
Sun Feb 11 13:17:14 2007 => Services Check: Enabled
Fri Aug 24 21:20:29 2007 => Services Check: Enabled
Sat Aug 25 01:12:46 2007 => Services Check: Enabled
Sun Feb 11 13:03:43 2007 => Drive Check: Disabled
Sun Feb 11 13:03:43 2007 => All Drive Check :Enabled
Sun Feb 11 13:17:14 2007 => Drive Check: Disabled
Sun Feb 11 13:17:14 2007 => All Drive Check :Enabled
Fri Aug 24 21:20:29 2007 => Drive Check: Disabled
Fri Aug 24 21:20:29 2007 => All Drive Check :Enabled
Sat Aug 25 01:12:46 2007 => Drive Check: Disabled
Sat Aug 25 01:12:46 2007 => All Drive Check :Enabled
Sun Feb 11 13:03:43 2007 => All Drive Check :Enabled
Sun Feb 11 13:17:14 2007 => All Drive Check :Enabled
Fri Aug 24 21:20:29 2007 => All Drive Check :Enabled
Sat Aug 25 01:12:46 2007 => All Drive Check :Enabled
Fri Aug 24 21:49:31 2007 => Scanning File C:\Dokumente und Einstellungen\Privat\Eigene Dateien\Dienste Abstellen svc2kxp\dienste deaktiviert.txt

Anti Troja 26.08.2007 09:50

Trojaner, Würmer BackDoor Klingt ja nicht gerade Toll!
 
Weiß hier niemand was über diese Gefundenen Sachen?
Die Harmloseste Variante wäre natürlich Fehlalarm durch Hohe Heuristik oder eben nur Werbung zum Kauf des Programms und es ist „nur“ Adware.
Aber ich denke hier muß man in diesem Internet Zeitalter nicht all zu Ängstlich sein, oder sehe ich das jetzt falsch?
Denn wenn SpybotSD mal was findet (was in letzter Zeit aber nicht vorkam) ist das doch kein Grund das System neu aufzusetzen, oder?
Bei der Masse an evt. Schadsoftware muß man doch Abstriche machen. Ich will zwar einerseits ein Sicheres System und andererseits will man aber auch mal das Internet nutzen. Wo liegen denn die zwingenden
Bis jetzt hatte ich Wahrscheinlich über Antivir mehr Fehlalarme und das waren die letzten Jahre vielleicht 5 Meldungen.
Was sind denn die zwingenden Gründe und wann spricht man denn da von Verseucht und das System neu aufzusetzen? Und außerdem Stelle ich mir die Frage was eine Formatierung bring wenn man nachträglich sogar Teilweise Daten wiederherstellen kann. Das erstaunt mich ehrlich gesagt. Was soll man den noch machen außer Vorsichtig sein und Du vermeidlichen Schutz Software zu Installieren?:koch:


Alle Zeitangaben in WEZ +1. Es ist jetzt 08:27 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131