| |
| |||||||
Log-Analyse und Auswertung: kann mir bitte jemand helfen (analyseergebnisse)? danke im voraus...Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
17.05.2005, 23:29
| #1 |
 |  kann mir bitte jemand helfen (analyseergebnisse)? danke im voraus... ach und vielleicht noch als nachtrag: dies ist das ergebnis von escan, wenn ich im abgesicherten modus sämtliche laufwerke scannen lasse...das hatte ich vorher nicht getan: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Funde für "infected" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Tue May 17 23:26:58 2005 => File C:\WINDOWS\svchost.dll infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Tue May 17 23:27:44 2005 => System found infected with AltnetBDE Spyware/Adware (adm4.adm4)! Action taken: No Action Taken. Tue May 17 23:27:44 2005 => System found infected with AltnetBDE Spyware/Adware (adm25.adm25)! Action taken: No Action Taken. Tue May 17 23:27:50 2005 => System found infected with altnet Spyware/Adware (smdat32a.sys)! Action taken: No Action Taken. Tue May 17 23:28:14 2005 => System found infected with AltnetBDE Spyware/Adware (altnet signing module.exe)! Action taken: No Action Taken. Tue May 17 23:28:14 2005 => System found infected with AltnetBDE Spyware/Adware (adm.exe)! Action taken: No Action Taken. Tue May 17 23:28:14 2005 => System found infected with AltnetBDE Spyware/Adware (adm25.dll)! Action taken: No Action Taken. Tue May 17 23:28:16 2005 => System found infected with cws.smartsearch Spyware/Adware (C:\WINDOWS\svchost.exe)! Action taken: No Action Taken. Tue May 17 23:28:56 2005 => File C:\WINDOWS\cmssx.dll infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Tue May 17 23:29:00 2005 => File C:\WINDOWS\lsasss.dll infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Tue May 17 23:29:03 2005 => File C:\WINDOWS\sddda.dll infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Tue May 17 23:29:05 2005 => File C:\WINDOWS\smssrs.dll infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Tue May 17 23:29:06 2005 => File C:\WINDOWS\svchost.exe infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Tue May 17 23:29:08 2005 => File C:\WINDOWS\uytlkk.dll infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Wed May 18 00:04:31 2005 => File C:\WINDOWS\cmssx.dll infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Wed May 18 00:06:27 2005 => File C:\WINDOWS\lsasss.dll infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Wed May 18 00:07:13 2005 => File C:\WINDOWS\sddda.dll infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Wed May 18 00:10:05 2005 => File C:\WINDOWS\smssrs.dll infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Wed May 18 00:10:20 2005 => File C:\WINDOWS\svchost.exe infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Wed May 18 00:16:04 2005 => File C:\WINDOWS\uytlkk.dll infected by "Trojan.Win32.Agent.cl" Virus! Action Taken: No Action Taken. Wed May 18 00:17:31 2005 => Total Disinfected Files: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Funde für "tagged" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Tue May 17 23:26:57 2005 => File C:\Programme\INSTAFINK\instafink.dll tagged as "not-a-virus:AdWare.ToolBar.404Search.h". Action Taken: No Action Taken. Tue May 17 23:31:51 2005 => File C:\DOKUME~1\14cheb\LOKALE~1\Temp\__unin__.exe tagged as "not-a-virus:AdWare.Altnet.g". Action Taken: No Action Taken. Tue May 17 23:37:43 2005 => File C:\Dokumente und Einstellungen\14cheb\Eigene Dateien\Programme\overnet0.42.exe tagged as "not-a-virus:AdWare.ToolBar.Ucmore.a". Action Taken: No Action Taken. Tue May 17 23:38:14 2005 => File C:\Dokumente und Einstellungen\14cheb\Eigene Dateien\virus\process viewer\pv.exe tagged as not-a-virus:RiskWare.PrcView.3724. No Action Taken. Tue May 17 23:38:28 2005 => File C:\Dokumente und Einstellungen\14cheb\Lokale Einstellungen\Temp\__unin__.exe tagged as "not-a-virus:AdWare.Altnet.g". Action Taken: No Action Taken. Tue May 17 23:45:01 2005 => File C:\Program Files\Altnet\Download Manager\asmps.dll tagged as "not-a-virus:AdWare.Altnet.b". Action Taken: No Action Taken. Tue May 17 23:47:22 2005 => File C:\Programme\DivX\DivX Player 2.1\uninstall.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. Tue May 17 23:48:44 2005 => File C:\Programme\INSTAFINK\InstaFinderK_inst.exe tagged as "not-a-virus:AdWare.ToolBar.404Search.h". Action Taken: No Action Taken. Tue May 17 23:49:55 2005 => File C:\Programme\Kazaa\TopSearch.dll tagged as "not-a-virus:AdWare.Altnet.d". Action Taken: No Action Taken. Tue May 17 23:51:52 2005 => File C:\Programme\MyWay\myBar\1.bin\MYBAR.DLL tagged as "not-a-virus:AdWare.ToolBar.MyWay.m". Action Taken: No Action Taken. Tue May 17 23:52:21 2005 => File C:\Programme\PerfectNav\BHO\PerfectNav150c.dll tagged as "not-a-virus:AdWare.Perfnav.a". Action Taken: No Action Taken. Tue May 17 23:55:40 2005 => File C:\RECYCLER\S-1-5-21-4219374948-2363382051-3856832267-1005\Dc1.zip tagged as not-a-virus:RiskWare.PrcView.3724. No Action Taken. Wed May 18 00:15:59 2005 => File C:\WINDOWS\Temp\Altnet\adm.exe tagged as "not-a-virus:AdWare.Altnet.a". Action Taken: No Action Taken. Wed May 18 00:15:59 2005 => File C:\WINDOWS\Temp\Altnet\adm25.dll tagged as "not-a-virus:AdWare.Altnet.a". Action Taken: No Action Taken. Wed May 18 00:15:59 2005 => File C:\WINDOWS\Temp\Altnet\adm4.dll tagged as "not-a-virus:AdWare.Altnet.a". Action Taken: No Action Taken. Wed May 18 00:15:59 2005 => File C:\WINDOWS\Temp\Altnet\admdloader.dll tagged as "not-a-virus:AdWare.BrilliantDigital.3039". Action Taken: No Action Taken. Wed May 18 00:15:59 2005 => File C:\WINDOWS\Temp\Altnet\admfdi.dll tagged as "not-a-virus:AdWare.Altnet.j". Action Taken: No Action Taken. Wed May 18 00:15:59 2005 => File C:\WINDOWS\Temp\Altnet\admprog.dll tagged as "not-a-virus:AdWare.Altnet.a". Action Taken: No Action Taken. Wed May 18 00:15:59 2005 => File C:\WINDOWS\Temp\Altnet\Setup.exe tagged as "not-a-virus:AdWare.Altnet.b". Action Taken: No Action Taken. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Statistiken: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Wed May 18 00:17:31 2005 => Total Virus(es) Found: 44 Wed May 18 00:17:31 2005 => Total Errors: 257 Wed May 18 00:17:31 2005 => Time Elapsed: 00:50:40 Wed May 18 00:17:31 2005 => Total Objects Scanned: 67194 Tue May 17 23:26:13 2005 => Virus Database Date: 2005/05/16 Wed May 18 00:17:31 2005 => Virus Database Date: 2005/05/16 Wed May 18 00:18:22 2005 => Virus Database Date: 2005/05/16 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~ © Haui ;-) ~~~~~~~ ~~~~~~~ Dank an Cidre ~~~~~~~ |
|
| Themen zu kann mir bitte jemand helfen (analyseergebnisse)? danke im voraus... |
| adobe, antivirus, application, backdoor, bho, danke, defender, einstellungen, excel, explorer, file missing, helfen, iexplore.exe, infected, infiziert, internet explorer, logfile, microsoft, neustart, object, programme, registry, software, svchost, system, temp, trojaner, trojaner eingefangen, urlsearchhook, windows messenger, windows xp |
Hybrid-Darstellung
