| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Trojaner TR/Dldr.WinAD.E.2Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
06.06.2005, 21:54
| #1 |
| |  Trojaner TR/Dldr.WinAD.E.2 Hallo zusammen, bin neu hier und bräuchte mal dringend Rat bei meinem spinnenden System. Hatte vor ein paar Tagen de TR/Dldr.WinAD.E.2 Trojaner drauf und der meldet sich jedesmal beim Besuch der Seite http://www.prodi*yweb.n*t.mx/irlandiko/index.htm. Hat irgendwas mit Active X Steuerelement zu tun, weil nach dem installieren meldet sich o.g. Trojaner. Habe auch bei meinem Antivir 2.380 Hinweise auf fehlerhafte oder geloggte Dateien (Kann ich noch bei Bedarf Interesse posten) ???? Raffe langsam nichts mehr, kann mir jemand helfen? (per Find.Bat habe ich leider aus der MWAV.LOG keine Escan_neu.txt. gewinnen können....) Für eure Hilfe im voraus schonmal einen riesen Dank. Mon Jun 06 22:05:22 2005 => Scanning HKLM\SOFTWARE\Microsoft\Internet Explorer\Plugins\Extension Mon Jun 06 22:05:22 2005 => Scanning HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar Mon Jun 06 22:05:22 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\SYMANT~1\ADBLOC~1\NISShExt.dll Mon Jun 06 22:05:22 2005 => Scanning File C:\Programme\Canon\Easy-WebPrint\Toolband.dll Mon Jun 06 22:05:22 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects Mon Jun 06 22:05:22 2005 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx Mon Jun 06 22:05:22 2005 => Scanning File C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\ActiveX\ACROIE~1.OCX Mon Jun 06 22:05:22 2005 => {511F9316-771B-4953-A268-1C36DA667FE9} = C:\WINDOWS\Downloaded Program Files\sponsoradulto.dll Mon Jun 06 22:05:22 2005 => Scanning File C:\WINDOWS\DOWNLO~1\SPONSO~1.DLL Mon Jun 06 22:05:38 2005 => File C:\WINDOWS\DOWNLO~1\SPONSO~1.DLL infected by "Trojan.Win32.Dialer.fu" Virus! Action Taken: No Action Taken. Mon Jun 06 22:05:38 2005 => {53707962-6F74-2D53-2644-206D7942484F} = C:\PROGRA~1\SPYBOT~1\SDHelper.dll Mon Jun 06 22:05:38 2005 => Scanning File C:\PROGRA~1\SPYBOT~1\SDHelper.dll Mon Jun 06 22:05:38 2005 => {9ECB9560-04F9-4bbc-943D-298DDF1699E1} = C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll Mon Jun 06 22:05:38 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\SYMANT~1\ADBLOC~1\NISShExt.dll Mon Jun 06 22:05:38 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler Mon Jun 06 22:05:38 2005 => Scanning File C:\WINDOWS\System32\browseui.dll Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\System32\browseui.dll Mon Jun 06 22:05:39 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\system32\mmsys.cpl Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\system32\icmui.dll Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\system32\rshx32.dll Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\system32\docprop.dll Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\system32\ntshrui.dll Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\System32\themeui.dll Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\system32\deskadp.dll Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\system32\deskmon.dll Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\system32\dssec.dll Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\system32\SlayerXP.dll Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\system32\shscrap.dll Mon Jun 06 22:05:39 2005 => Scanning File C:\WINDOWS\system32\diskcopy.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\ntlanui2.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\System32\icmui.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\icmui.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\printui.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\dskquoui.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\syncui.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\System32\hticons.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\fontext.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\icmui.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\rshx32.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\ntshrui.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\deskperf.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\cryptext.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\cryptext.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\NETSHELL.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\NETSHELL.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\wiashext.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\wiashext.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\wiashext.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\wiashext.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\system32\wiashext.dll Mon Jun 06 22:05:40 2005 => Scanning File C:\WINDOWS\System32\remotepg.dll Mon Jun 06 22:05:41 2005 => Scanning File C:\WINDOWS\system32\wuaucpl.cpl Mon Jun 06 22:05:41 2005 => Scanning File C:\WINDOWS\System32\wshext.dll Mon Jun 06 22:05:41 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\System\OLEDB~1\oledb32.dll Mon Jun 06 22:05:41 2005 => Scanning File C:\WINDOWS\System32\mstask.dll Mon Jun 06 22:05:41 2005 => Scanning File C:\WINDOWS\System32\mstask.dll Mon Jun 06 22:05:41 2005 => Scanning File C:\WINDOWS\System32\mstask.dll Mon Jun 06 22:05:41 2005 => Scanning File C:\WINDOWS\system32\shdocvw.dll Mon Jun 06 22:05:41 2005 => Scanning File C:\WINDOWS\system32\shdocvw.dll Mon Jun 06 22:05:48 2005 => Result: ERROR!!! File C:\WINDOWS\system32\w?aclt.exe: Scanning Failure!!! Mon Jun 06 22:05:48 2005 => ERROR!!! ScanFile Fails... Mon Jun 06 22:06:04 2005 => Scanning HKLM\SYSTEM\CurrentControlSet\Services\VxD Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\JAVASUP.VXD Mon Jun 06 22:06:04 2005 => ***** Scanning Important System Files ***** Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\winsock.dll Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\ws2help.dll Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\ws2_32.dll Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\wscntfy.exe Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\wscript.exe Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\wscsvc.dll Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\wscui.cpl Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\wsecedit.dll Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\wshatm.dll Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\wshbth.dll Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\wshcon.dll Mon Jun 06 22:06:04 2005 => Scanning File C:\WINDOWS\system32\wshde.dll Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wshext.dll Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wship6.dll Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wshisn.dll Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wshnetbs.dll Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wshom.ocx Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wshrm.dll Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wshtcpip.dll Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wsnmp32.dll Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wsock32.dll Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wstdecod.dll Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wstpager.ax Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\wstrenderer.ax Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\explorer.exe Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\explorer.scf Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\rundll32.exe Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\browseui.dll Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\notepad.exe Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\notepad.exe Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\ctfmon.exe Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\cmd.exe Mon Jun 06 22:06:05 2005 => Scanning File C:\WINDOWS\system32\kernel32.dll Mon Jun 06 22:06:06 2005 => Scanning File C:\WINDOWS\system32\ntoskrnl.exe Mon Jun 06 22:06:06 2005 => Scanning File C:\WINDOWS\system32\ntkrnlpa.exe Mon Jun 06 22:06:06 2005 => Scanning File C:\WINDOWS\system32\HAL.DLL Mon Jun 06 22:06:06 2005 => Scanning File C:\WINDOWS\system32\win32k.sys Mon Jun 06 22:06:06 2005 => Scanning File C:\WINDOWS\system32\ntdll.dll Mon Jun 06 22:06:06 2005 => Scanning File C:\WINDOWS\system32\advapi32.dll Mon Jun 06 22:06:06 2005 => Scanning File C:\WINDOWS\system32\user32.dll Mon Jun 06 22:06:06 2005 => Scanning File C:\WINDOWS\system32\gdi32.dll Mon Jun 06 22:06:06 2005 => Scanning File C:\WINDOWS\system32\bootvid.dll Mon Jun 06 22:06:06 2005 => Scanning File C:\WINDOWS\system32\command.com Mon Jun 06 22:06:06 2005 => ***** Scanning Registry and File system for Adware/Spyware ***** Mon Jun 06 22:06:10 2005 => Offending value found in HKLM\Software\microsoft\downloadmanager !!! Mon Jun 06 22:06:10 2005 => Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken. Mon Jun 06 22:06:14 2005 => System found infected with CWS.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken. Mon Jun 06 22:06:14 2005 => Object "CWS.therealsearch Spyware/Adware" found in File System! Action Taken: No Action Taken. Mon Jun 06 22:06:15 2005 => ***** Scanning Registry for errors created because of Adware/Spyware ***** Mon Jun 06 22:06:15 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\MediaAccX.dll". Action Taken: No Action Taken. Mon Jun 06 22:06:23 2005 => Entry "HKCR\CLSID\{1EFD6A40-3999-11CF-9150-00AA0059F70D}" refers to invalid object "F:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken. Mon Jun 06 22:06:24 2005 => Entry "HKCR\CLSID\{29FF67FF-8050-480f-9F30-CC41635F2F9D}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Mon Jun 06 22:06:25 2005 => Entry "HKCR\CLSID\{3775D2E0-7C5D-11CF-899E-00AA00688B10}" refers to invalid object "F:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken. Mon Jun 06 22:06:30 2005 => Entry "HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Mon Jun 06 22:06:32 2005 => Entry "HKCR\CLSID\{8298d101-f992-43b7-8eca-5052d885b995}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Mon Jun 06 22:06:34 2005 => Entry "HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Mon Jun 06 22:06:36 2005 => Entry "HKCR\CLSID\{C1A8AF25-1257-101B-8FB0-0020AF039CA3}" refers to invalid object "F:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken. Mon Jun 06 22:06:42 2005 => Entry "HKCR\CLSID\{f612954d-3b0b-4c56-9563-227b7be624b4}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Mon Jun 06 22:07:08 2005 => ***** Checking for specific ITW Viruses ***** Mon Jun 06 22:07:08 2005 => Checking for Welchia Virus... Mon Jun 06 22:07:08 2005 => Checking for LovGate Virus... Mon Jun 06 22:07:08 2005 => Checking for CodeRed Virus... Mon Jun 06 22:07:08 2005 => Checking for OpaServ Virus... Mon Jun 06 22:07:08 2005 => Checking for Sobig.e Virus... Mon Jun 06 22:07:08 2005 => Checking for Winupie Virus... Mon Jun 06 22:07:08 2005 => Checking for Swen Virus... Mon Jun 06 22:07:08 2005 => Checking for JS.Fortnight Virus... Mon Jun 06 22:07:09 2005 => Checking for Novarg Virus... Mon Jun 06 22:07:09 2005 => Checking for Pagabot Virus... Mon Jun 06 22:07:09 2005 => Checking for Parite.b Virus... Mon Jun 06 22:07:09 2005 => Checking for Parite.a Virus... Mon Jun 06 22:07:09 2005 => Checking for Adware.SeekSeek Virus... Mon Jun 06 22:07:09 2005 => ***** Scanning complete. ***** Mon Jun 06 22:07:09 2005 => Total Objects Scanned: 10858 Mon Jun 06 22:07:09 2005 => Total Virus(es) Found: 3 Mon Jun 06 22:07:09 2005 => Total Disinfected Files: 0 Mon Jun 06 22:07:09 2005 => Total Files Renamed: 0 Mon Jun 06 22:07:09 2005 => Total Deleted Objects: 0 Mon Jun 06 22:07:09 2005 => Total Errors: 11 Mon Jun 06 22:07:09 2005 => Time Elapsed: 00:02:13 Mon Jun 06 22:07:09 2005 => Virus Database Date: 2005/06/06 Mon Jun 06 22:07:09 2005 => Virus Database Count: 133635 Mon Jun 06 22:07:09 2005 => Scan Completed. Mon Jun 06 22:17:49 2005 => Virus Database Date: 2005/06/06 Mon Jun 06 22:17:49 2005 => Virus Database Count: 133635 Mon Jun 06 22:17:51 2005 => AV Library Unloaded (3)... |
|
06.06.2005, 22:01
| #2 |
  | Trojaner TR/Dldr.WinAD.E.2 @BlackAstra
__________________Mon Jun 06 22:07:09 2005 => Time Elapsed: 00:02:13 Mon Jun 06 22:07:09 2005 => Total Objects Scanned: 10858 hast du wirklich die häkchen bei scan all drives gesetzt? wenn nicht, dann bitte noch mal scannen. chaosman
__________________ |
|
06.06.2005, 23:08
| #3 |
| | Trojaner TR/Dldr.WinAD.E.2 Uuuuupppppsssssss.........
__________________File C:\WINDOWS\DOWNLO~1\SPONSO~1.DLL infected by "Trojan.Win32.Dialer.fu" Virus! Action Taken: No Action Taken. File C:\WINDOWS\DOWNLO~1\SPONSO~1.DLL infected by "Trojan.Win32.Dialer.fu" Virus! Action Taken: No Action Taken. Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "CWS.therealsearch Spyware/Adware" found in File System! Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\MediaAccX.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{1EFD6A40-3999-11CF-9150-00AA0059F70D}" refers to invalid object "F:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken. Entry "HKCR\CLSID\{29FF67FF-8050-480f-9F30-CC41635F2F9D}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{3775D2E0-7C5D-11CF-899E-00AA00688B10}" refers to invalid object "F:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken. Entry "HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{8298d101-f992-43b7-8eca-5052d885b995}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Entry "HKCR\CLSID\{C1A8AF25-1257-101B-8FB0-0020AF039CA3}" refers to invalid object "F:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken. Entry "HKCR\CLSID\{f612954d-3b0b-4c56-9563-227b7be624b4}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. File C:\Programme\AOL 9.0\Jiti\Jiti_mm.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Programme\Gemeinsame Dateien\aolback\comp01.000 tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.ocx tagged as "not-a-virus:AdWare.MediaTickets.f". Action Taken: No Action Taken. Mon Jun 06 23:16:27 2005 => ***** Scanning Registry and File system for Adware/Spyware ***** Mon Jun 06 23:16:30 2005 => Offending value found in HKLM\Software\microsoft\downloadmanager !!! Mon Jun 06 23:16:30 2005 => Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken. Mon Jun 06 23:16:32 2005 => System found infected with CWS.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken. Mon Jun 06 23:16:32 2005 => Object "CWS.therealsearch Spyware/Adware" found in File System! Action Taken: No Action Taken. Mon Jun 06 23:16:33 2005 => ***** Scanning Registry for errors created because of Adware/Spyware ***** Mon Jun 06 23:16:33 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINDOWS\Downloaded Program Files\MediaAccX.dll". Action Taken: No Action Taken. Mon Jun 06 23:16:40 2005 => Entry "HKCR\CLSID\{1EFD6A40-3999-11CF-9150-00AA0059F70D}" refers to invalid object "F:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken. Mon Jun 06 23:16:41 2005 => Entry "HKCR\CLSID\{29FF67FF-8050-480f-9F30-CC41635F2F9D}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Mon Jun 06 23:16:42 2005 => Entry "HKCR\CLSID\{3775D2E0-7C5D-11CF-899E-00AA00688B10}" refers to invalid object "F:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken. Mon Jun 06 23:16:47 2005 => Entry "HKCR\CLSID\{70B51430-B6CA-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Mon Jun 06 23:16:48 2005 => Entry "HKCR\CLSID\{8298d101-f992-43b7-8eca-5052d885b995}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Mon Jun 06 23:16:51 2005 => Entry "HKCR\CLSID\{A9E69612-B80D-11D0-B9B9-00A0C922E750}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Mon Jun 06 23:16:53 2005 => Entry "HKCR\CLSID\{C1A8AF25-1257-101B-8FB0-0020AF039CA3}" refers to invalid object "F:\PROGRAM\32\mci32.ocx". Action Taken: No Action Taken. Mon Jun 06 23:16:58 2005 => Entry "HKCR\CLSID\{f612954d-3b0b-4c56-9563-227b7be624b4}" refers to invalid object "ADMWPROX.DLL". Action Taken: No Action Taken. Mon Jun 06 23:16:10 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects Mon Jun 06 23:16:10 2005 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx Mon Jun 06 23:16:10 2005 => Scanning File C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\ActiveX\ACROIE~1.OCX Mon Jun 06 23:16:10 2005 => {511F9316-771B-4953-A268-1C36DA667FE9} = C:\WINDOWS\Downloaded Program Files\sponsoradulto.dll Mon Jun 06 23:16:10 2005 => Scanning File C:\WINDOWS\DOWNLO~1\SPONSO~1.DLL Mon Jun 06 23:16:10 2005 => File C:\WINDOWS\DOWNLO~1\SPONSO~1.DLL infected by "Trojan.Win32.Dialer.fu" Virus! Action Taken: No Action Taken. |
|
| Themen zu Trojaner TR/Dldr.WinAD.E.2 |
| adobe, antivir, browser, canon, dringend, error, escan, explorer, file, helfen, helper, infected, internet, internet explorer, langsam, microsoft, mp3, neu, programme, registry, rundll, software, symantec, trojaner, virus, windows |
Linear-Darstellung
