Liebe Leute,


ich habe seit neustem folgende Programme auf meinem Rechner:

Cashback, NaviSearch, Bulls Eye Network und irgendeine ominöse Anwendung namens TV Media.

Ich kriege die Biester nicht los und hoffe, dass ihr mir hier weiterhelfen könnte, um die Probleme zu beseitigen, denn mein Rechner wird langsamer und langsamer.

Ich sollte auch noch sagen, dass, wenn mir jmd. helfen möchte, er ganz genau erklären muss, was ich tun soll, weil ich nicht der Hardcore-PC-Kenner bin, aber solides Basiswissen habe ich schon, denke ich. Wenn mir jmd. eine gute Hilfestellung gibt, dann krieg ich das hin... hoffe ich. Mit HijackThis kann ich auch umgehend, was ja auch nicht so wirklich schwierig ist. :)

---

Logfile of HijackThis v1.98.2
Scan saved at 14:59:31, on 29.10.2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\GEMEIN~1\aol\ACS\AOLacsd.exe
C:\WINDOWS\autoupdt.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\System32\hphmon03.exe
C:\WINDOWS\system32\redirect4.exe
C:\WINDOWS\helpw.exe
C:\WINDOWS\System32\SCVHOST.EXE
C:\WINDOWS\System32\qdoqcn.exe
C:\Programme\Yahoo!\Messenger\ymsgr_tray.exe
C:\Programme\AOL 9.0c\waol.exe
C:\Programme\AOL 9.0c\shellmon.exe
C:\Programme\Gemeinsame Dateien\Aol\aoltpspd.exe
C:\Programme\NaviSearch\bin\nls.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\BullsEye Network\bin\bargains.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\CashBack\bin\cashback.exe
C:\Programme\WinRAR\WinRAR.exe
C:\WINDOWS\System32\oleaccrc.exe
C:\DOKUME~1\Besitzer\LOKALE~1\Temp\Rar$EX00.442\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.begin2search.com/sidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.begin2search.com/sidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.begin2search.com/sidesearch.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aol.de/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.begin2search.com/sidesearch.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.begin2search.com/sidesearch.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer bereitgestellt von AOL
R3 - URLSearchHook: (no name) - {20EC3D2D-33C1-4C9D-BC37-C2D500688DA2} - C:\Programme\TV Media\TvmBho.dll
O1 - Hosts: 12.129.205.209 search.netscape.com12.129.205.209 sitefinder.verisign.com
O2 - BHO: F1 Organizer Class - {00000EF1-0786-4633-87C6-1AA7A44296DA} - C:\WINDOWS\System32\ATPART~1.DLL
O2 - BHO: twaintecObj Class - {000020DD-C72E-4113-AF77-DD56626C6C42} - C:\WINDOWS\twaintec.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: ohb - {4D568F0F-8AC9-40AB-88B7-415134C78777} - C:\WINDOWS\SYSTEM32\winb2s32.dll
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem302.dll
O2 - BHO: NLS UrlCatcher Class - {AEECBFDA-12FA-4881-BDCE-8C3E1CE4B344} - C:\WINDOWS\System32\nvms.dll
O2 - BHO: CB UrlCatcher Class - {CE188402-6EE7-4022-8868-AB25173A3E14} - C:\WINDOWS\System32\mscb.dll
O2 - BHO: ADP UrlCatcher Class - {F4E04583-354E-4076-BE7D-ED6A80FD66DA} - C:\WINDOWS\System32\msbe.dll
O4 - HKLM\..\Run: [HPHmon03] C:\WINDOWS\System32\hphmon03.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [jnckgme] "C:\WINDOWS\System32\jnckgme.exe"
O4 - HKLM\..\Run: [redirect] C:\WINDOWS\system32\redirect4.exe
O4 - HKLM\..\Run: [helpw] "helpw.exe"
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [asfzkpn] "C:\WINDOWS\System32\asfzkpn.exe"
O4 - HKLM\..\Run: [Serv] C:\WINDOWS\msstasks.exe
O4 - HKLM\..\Run: [Windows Stortup] C:\WINDOWS\svchost.exe
O4 - HKLM\..\Run: [MSStartOptimizer] C:\WINDOWS\System32\SCVHOST.EXE
O4 - HKLM\..\Run: [RegCompres] C:\WINDOWS\System32\REGCPM32.EXE
O4 - HKLM\..\Run: [AOLDialer] C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [mdhioabs] C:\WINDOWS\System32\qdoqcn.exe
O4 - HKLM\..\Run: [bxxs5] RunDLL32.EXE C:\WINDOWS\bxxs5.dll,DllRun
O4 - HKLM\..\Run: [TV Media] C:\Programme\TV Media\Tvm.exe
O4 - HKLM\..\Run: [CashBack] C:\Programme\CashBack\bin\cashback.exe
O4 - HKLM\..\Run: [NaviSearch] C:\Programme\NaviSearch\bin\nls.exe
O4 - HKLM\..\Run: [BullsEye Network] C:\Programme\BullsEye Network\bin\bargains.exe
O4 - HKLM\..\RunOnce: [Register C:\WINDOWS\System32\msbe.dll] "C:\WINDOWS\System32\rundll32.exe" "C:\WINDOWS\System32\msbe.dll",DllRegisterServer
O4 - HKLM\..\RunOnce: [Register C:\WINDOWS\System32\nvms.dll] "C:\WINDOWS\System32\rundll32.exe" "C:\WINDOWS\System32\nvms.dll",DllRegisterServer
O4 - HKLM\..\RunOnce: [Register C:\WINDOWS\System32\mscb.dll] "C:\WINDOWS\System32\rundll32.exe" "C:\WINDOWS\System32\mscb.dll",DllRegisterServer
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Programme\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [mstext40] C:\WINDOWS\System32\mstext40.exe
O4 - HKCU\..\Run: [oleaccrc] C:\WINDOWS\System32\oleaccrc.exe
O4 - HKCU\..\Run: [TV Media] C:\Programme\TV Media\Tvm.exe
O4 - HKCU\..\Run: [MyDailyHoroscope] C:\PROGRA~1\MYDAIL~1\MYDAIL~1.EXE
O4 - Startup: Microsoft-Indexerstellung.lnk = C:\Programme\AVPersonal\INFECTED\FINDFAST.EXE.VIR
O4 - Startup: Office-Start.lnk = C:\Programme\AVPersonal\INFECTED\OSA.EXE.VIR
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: AOL 9.0 Tray-Symbol.lnk = C:\Programme\AOL 9.0c\aoltray.exe
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Programme\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Programme\ICQ\ICQ.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O13 - DefaultPrefix: http://www.msn.com
@showresult.com/search.php?
O13 - WWW Prefix: http://www.msn.com
@showresult.com/search.php?
O14 - IERESET.INF: START_PAGE_URL=http://www.aol.de/e60/
O16 - DPF: DigiChat Applet - http://chat.onemodelplace.com/DigiCh.../Client_IE.cab
O16 - DPF: {EE5CA45C-BFAC-48E6-BE6C-3C607620FF43} (IMViewerControl Class) - http://companion.logitech.com/compan.../bin/imvid.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3696CE64-1EEA-41E9-9222-FFA6ED0A446C}: NameServer = 205.188.146.146
O17 - HKLM\System\CS1\Services\Tcpip\..\{3696CE64-1EEA-41E9-9222-FFA6ED0A446C}: NameServer = 205.188.146.146

---

Ich bete, dass mir jmd. helfen kann, denn ich habe langsam echt Angst um meinen PC und die ganzen Dateien darauf.

// Lyn

Scanne mal deinen PC mit eScan im abgesicherten Modus und poste die gefundenen Viren ins Forum.
Du hast evtl den hier im System.

136 Viren laut eScan.

Hier die Virus Log Informationen:

---

File C:\PROGRA~1\AOL9~1.0C\shellmon.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\AOL9~1.0C\waol.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\GEMEIN~1\Aol\aoltpspd.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\TVMEDI~1\TvmBho.dll tagged as not-a-virus:AdWare.TotalVelocity.s. No Action Taken.
File C:\PROGRA~1\TVMEDI~1\TvmCore.dll tagged as not-a-virus:AdWare.TotalVelocity.s. No Action Taken.
File C:\Programme\Yahoo!\Messenger\ymsgr_tray.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\autoupdt.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\helpw.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\ATPART~1.DLL infected by "TrojanDownloader.Win32.Rameh.c" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\msbe.dll tagged as not-a-virus:AdWare.BargainBuddy.l. No Action Taken.
File C:\WINDOWS\System32\mscb.dll tagged as not-a-virus:AdWare.BargainBuddy.l. No Action Taken.
File C:\WINDOWS\System32\oleaccrc.exe infected by "TrojanDownloader.Win32.Agent.am" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\qdoqcn.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\redirect4.exe infected by "TrojanClicker.Win32.DotComToolBar.d" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM32\winb2s32.dll tagged as not-a-virus:AdWare.Beginto.a. No Action Taken.
File C:\WINDOWS\TEMP\sja1.tmp infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\twaintec.dll tagged as not-a-virus:AdWare.BiSpy.o. No Action Taken.
File C:\WINDOWS\wsem302.dll infected by "TrojanDownloader.Win32.Dyfuca.dc" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\ATPART~1.DLL infected by "TrojanDownloader.Win32.Rameh.c" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\twaintec.dll tagged as not-a-virus:AdWare.BiSpy.o. No Action Taken.
File C:\WINDOWS\SYSTEM32\winb2s32.dll tagged as not-a-virus:AdWare.Beginto.a. No Action Taken.
File C:\WINDOWS\wsem302.dll infected by "TrojanDownloader.Win32.Dyfuca.dc" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\mscb.dll tagged as not-a-virus:AdWare.BargainBuddy.l. No Action Taken.
File C:\WINDOWS\System32\msbe.dll tagged as not-a-virus:AdWare.BargainBuddy.l. No Action Taken.
File C:\WINDOWS\helpw.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\REGCPM32.EXE infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\GEMEIN~1\AOL\ACS\AOLDial.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\Programme\QuickTime\qttask.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\NeroCheck.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\NeroCheck.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\qdoqcn.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\TVMEDI~1\Tvm.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\SCVHOST.EXE infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\TVMEDI~1\Tvm.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\autoupdt.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\angelex.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\HPHipm09.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\2_0_1browserhelper2.dll infected by "TrojanClicker.Win32.Delf.r" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\alchem.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\alcrmv.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\alcupd.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\autoclk.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\autoupdt.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\dosmode.com infected by "TrojanDropper.DOS.Rute" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\dracex32.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\eZinstall.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\helpw.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\hpfsched.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\infamous.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ipUnInst.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\IsUn0407.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\IsUninst.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\javadec.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Mgxclean.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mstasks.exe infected by "Trojan.Win32.Harnig.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\NDNuninstall5_20.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\NDNuninstall5_40.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\preInsTT.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\setdebug.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sxstall2.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\toffel32.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\twaintec.dll tagged as not-a-virus:AdWare.BiSpy.o. No Action Taken.
File C:\WINDOWS\Ulead iPhoto Plus 4.SCR infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\unin0407.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\uninst.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\UnstSA2.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\unvise32qt.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\wsem302.dll infected by "TrojanDownloader.Win32.Dyfuca.dc" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\WSUtil.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\06wu29rd.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\449166.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File CTraces of "Parite.b" found and cleaned !!!File C:\PROGRA~1\AOL9~1.0C\shellmon.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\AOL9~1.0C\waol.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\GEMEIN~1\Aol\aoltpspd.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\TVMEDI~1\TvmBho.dll tagged as not-a-virus:AdWare.TotalVelocity.s. No Action Taken.
File C:\PROGRA~1\TVMEDI~1\TvmCore.dll tagged as not-a-virus:AdWare.TotalVelocity.s. No Action Taken.
File C:\Programme\Yahoo!\Messenger\ymsgr_tray.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\autoupdt.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.

[Teil 2 folgt. Thread war zu lang.]

[ Teil 2 ]

File C:\WINDOWS\helpw.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\ATPART~1.DLL infected by "TrojanDownloader.Win32.Rameh.c" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\msbe.dll tagged as not-a-virus:AdWare.BargainBuddy.l. No Action Taken.
File C:\WINDOWS\System32\mscb.dll tagged as not-a-virus:AdWare.BargainBuddy.l. No Action Taken.
File C:\WINDOWS\System32\oleaccrc.exe infected by "TrojanDownloader.Win32.Agent.am" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\qdoqcn.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\redirect4.exe infected by "TrojanClicker.Win32.DotComToolBar.d" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM32\winb2s32.dll tagged as not-a-virus:AdWare.Beginto.a. No Action Taken.
File C:\WINDOWS\TEMP\sja1.tmp infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\twaintec.dll tagged as not-a-virus:AdWare.BiSpy.o. No Action Taken.
File C:\WINDOWS\wsem302.dll infected by "TrojanDownloader.Win32.Dyfuca.dc" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\ATPART~1.DLL infected by "TrojanDownloader.Win32.Rameh.c" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\twaintec.dll tagged as not-a-virus:AdWare.BiSpy.o. No Action Taken.
File C:\WINDOWS\SYSTEM32\winb2s32.dll tagged as not-a-virus:AdWare.Beginto.a. No Action Taken.
File C:\WINDOWS\wsem302.dll infected by "TrojanDownloader.Win32.Dyfuca.dc" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\mscb.dll tagged as not-a-virus:AdWare.BargainBuddy.l. No Action Taken.
File C:\WINDOWS\System32\msbe.dll tagged as not-a-virus:AdWare.BargainBuddy.l. No Action Taken.
File C:\WINDOWS\helpw.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\REGCPM32.EXE infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\GEMEIN~1\AOL\ACS\AOLDial.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\Programme\QuickTime\qttask.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\NeroCheck.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\NeroCheck.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\qdoqcn.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\TVMEDI~1\Tvm.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\SCVHOST.EXE infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\PROGRA~1\TVMEDI~1\Tvm.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\autoupdt.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\angelex.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\HPHipm09.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\2_0_1browserhelper2.dll infected by "TrojanClicker.Win32.Delf.r" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\alchem.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\alcrmv.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\alcupd.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\autoclk.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\autoupdt.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\dosmode.com infected by "TrojanDropper.DOS.Rute" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\dracex32.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\eZinstall.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\helpw.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\hpfsched.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\infamous.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ipUnInst.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\IsUn0407.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\IsUninst.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\javadec.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Mgxclean.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mstasks.exe infected by "Trojan.Win32.Harnig.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\NDNuninstall5_20.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\NDNuninstall5_40.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\preInsTT.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\setdebug.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sxstall2.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\toffel32.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\twaintec.dll tagged as not-a-virus:AdWare.BiSpy.o. No Action Taken.
File C:\WINDOWS\Ulead iPhoto Plus 4.SCR infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\unin0407.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\uninst.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\UnstSA2.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\unvise32qt.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\wsem302.dll infected by "TrojanDownloader.Win32.Dyfuca.dc" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\WSUtil.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\06wu29rd.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\449166.exe infected by "Win32.Parite.b" Virus. Action Taken: No Action Taken.
File CTraces of "Parite.b" found and cleaned !!!

---

::seufz::

Wie kriege ich den Virus los, und ist das dann die Lösung für mein Cashback und Co. Problem?

// Lyn

1.) Neu formatieren und installieren
2.) Ein eingeschränktes Benutzerkonto anlegen, mit dem gesurft wird, NICHT mit dem Administratorkonto ins Netz gehen
3). VOR der ersten Onlineverbindung die XP-Firewall für die Verbindung aktivieren
4.) Ebenfalls VOR dem Onlinegehen unnötige Dienste deaktivieren siehe www.dingens.org
5.) Danach zuerst www.windowsupdate.com besuchen und alle Updates installieren
6.) den IE nur noch für diese Updates verwenden, ansonsten auf einen alternativen Browser wie Opera oder firefox umsteigen
7.) Browser und emailprogramm (auch hier gibt es Alternativen zu Outlook wie Thunderbird, foxmail) sicher konfigurieren, keine aktiven Inhalte automatisch ausführen lassen (Active-Scripting, Active-X)
8.) Vorsichtig bleiben, nur wirklich als sicher bekannte mailanhänge öffnen, nur aus sicheren Quellen Programme herunterladen und vorher überprüfen, ob sie Spyware oder Adware enthalten können
9) ein Antivirenprogramm schadet auch nichts (Antivir ist kostenlos und halbwegs brauchbar), sollte aber nicht dazu verführen, sich grenzenlos darauf zu verlassen
10) Nicht gleich alle Programme, die früher installiert waren, sofort erneut aufs System lassen, sondern zuerst informieren, ob sie Spy/Adware enthalten