![]() |
|
Log-Analyse und Auswertung: Penetranter TojanerWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() |
|
![]() | #1 |
| ![]() Penetranter Tojaner Danke esrtmal. Also das Programm gegen se.dll hab ich durchlaufen lassen und dann den eScan gemacht. Hier das Ergebniss: File C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoestb.dll infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appiy.exe infected by "Trojan-Downloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\syswj32.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\M3OUTLCN.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\WINDOWS\syswj32.dll infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appiy.exe infected by "Trojan-Downloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File System Found infected by "IBIS Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "MyWebSearch Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "MyWebSearch Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "MyWebSearch Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "MyWebSearch Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "MyWebSearch Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "MyWebSearch Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "MyWebSearch Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "FunWebProducts Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "mywebsearch Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "sw Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "se Spyware/Adware" Virus. Action Taken: No Action Taken. File System Found infected by "hsa Spyware/Adware" Virus. Action Taken: No Action Taken. File C:\WINDOWS\getqjt.log infected by "Trojan-Downloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\okbuvj.dat infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\uiszwd.txt infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\omwsr.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken. File C:\WINDOWS\System32\f3PSSavr.scr infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\AXELFI~1\LOKALE~1\Temp\temp.fr434E infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\AXELFI~1\LOKALE~1\TEMPOR~1\Content.IE5\ED0RA1U5\SmileyCentralFWBInitialSetup1.0.0.8-2[1].cab infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\AXELFI~1\LOKALE~1\TEMPOR~1\Content.IE5\QREVIHEV\dia17301[1].htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\AXELFI~1\LOKALE~1\TEMPOR~1\Content.IE5\QREVIHEV\activ-x[1].php infected by "Exploit.HTML.CodeBaseExec" Virus. Action Taken: No Action Taken. File C:\DOKUME~1\AXELFI~1\LOKALE~1\TEMPOR~1\Content.IE5\OLI74PY3\umax-xp[1].htm infected by "Trojan-Clicker.JS.Linker.h" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\omwsr.dll infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\f3PSSavr.scr infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\WINDOWS\getqjt.log infected by "Trojan-Downloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken. File C:\WINDOWS\okbuvj.dat infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\uiszwd.txt infected by "not-a-virus:AdWare.SearchPage" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\Axel Fischer\Lokale Einstellungen\Temp\temp.fr434E infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\Axel Fischer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\ED0RA1U5\SmileyCentralFWBInitialSetup1.0.0.8-2[1].cab infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\Axel Fischer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\QREVIHEV\dia17301[1].htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\Axel Fischer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\QREVIHEV\activ-x[1].php infected by "Exploit.HTML.CodeBaseExec" Virus. Action Taken: No Action Taken. File C:\Dokumente und Einstellungen\Axel Fischer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\OLI74PY3\umax-xp[1].htm infected by "Trojan-Clicker.JS.Linker.h" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\F3CJPEG.DLL infected by "not-a-virus:AdWare.FunWeb.d" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\F3HISTSW.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\F3HTMLMU.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\F3PSSAVR.SCR infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\F3RESTUB.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\F3SCHMON.EXE infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\F3WPHOOK.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\M3OUTLCN.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\M3SKIN.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\MWSOEMON.EXE infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\bar\1.bin\MWSOESTB.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\Programme\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL infected by "not-a-virus:AdWare.ToolBar.MyWebSearch" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP19\A0004947.exe infected by "Trojan.Win32.StartPage.pu" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP19\A0005088.EXE infected by "Trojan-Downloader.Win32.Small.aod" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP23\A0010726.DLL infected by "not-a-virus:AdWare.FunWeb.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP28\snapshot\MFEX-6.DAT infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP28\snapshot\MFEX-7.DAT infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP28\snapshot\MFEX-9.DAT infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP28\snapshot\MFEX-10.DAT infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP28\snapshot\MFEX-14.DAT infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP28\snapshot\MFEX-15.DAT infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP28\snapshot\MFEX-16.DAT infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP28\snapshot\MFEX-17.DAT infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP28\snapshot\MFEX-18.DAT infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{C599962C-930A-49EE-A7FF-EC277A91C1B1}\RP28\snapshot\MFEX-19.DAT infected by "Trojan.Win32.StartPage.uz" Virus. Action Taken: No Action Taken. File C:\Recycled\Q330995.exe infected by "Trojan-Downloader.Win32.Small.amb" Virus. Action Taken: No Action Taken. |
![]() | #2 |
/// Helfer-Team ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Penetranter Tojaner Abgesehen, dass Dein System veraltet ist, hast Du z.B.:
__________________http://www.sophos.de/virusinfo/analy...ojpsymeaq.html Lösche erst mal im abgesicherten Modus alle TIF. |
![]() |
Themen zu Penetranter Tojaner |
adobe, antivirus, bho, dll, einstellungen, email, excel, explorer, file missing, firewall, heulen, hijack, hijackthis, iexplore.exe, internet, internet explorer, logfile, pdf, programme, rundll, software, stopzilla, system, temp, trojaner, trojaner?, urlsearchhook, windows, windows xp |