| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: eScan AuswertungWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
08.07.2005, 09:52
| #1 |
| |  eScan Auswertung Sollte ich aus dem nachfolgenden eScan mit der Killbox noch etwas löschen? (antivirus-Gold / Hijackthis findet nichts böses mehr, das fiese Fenster ist weg) File C:\WINDOWS\htpatch.exe tagged as not-a-virus:Tool.Win32.HTPatch.a. No Action Taken. Object "AltNet Spyware/Adware" found in File System! Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\Downloaded Program Files\camera.ocx". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\USWebUncoated.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\AppleRGB.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\ColorMatchRGB.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\EuroscaleCoated.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\EuroscaleUncoated.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\JapanStandard.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\sRGB Color Space Profile.icm". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\USSheetfedCoated.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\USSheetfedUncoated.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\USWebCoatedSWOP.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Recommended\AdobeRGB1998.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\WideGamutRGB.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\NTSC1953.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\PAL_SECAM.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\SMPTE-C.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\CIERGB.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\Photoshop5DefaultCMYK.icc". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Programme\Adobe\Acrobat 5.0\TempICCProfiles\Profiles\Non-Recommended\Photoshop4DefaultCMYK.icc". Action Taken: No Action Taken. Entry "HKCR\Alg.AlgSetup" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken. Entry "HKCR\Alg.AlgSetup.1" refers to invalid object "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Action Taken: No Action Taken. Entry "HKCR\Automatische Zuordnung.Map.EU" refers to invalid object "{A49EEA01-9231-4C77-AA9E-2F89D72B4804}". Action Taken: No Action Taken. Entry "HKCR\Automatische Zuordnung.Map.EU.9" refers to invalid object "{A49EEA01-9231-4C77-AA9E-2F89D72B4804}". Action Taken: No Action Taken. Entry "HKCR\Automatische Zuordnung.Template.EU.9" refers to invalid object "{A49EEA01-9231-4C77-AA9E-2F89D72B4804}". Action Taken: No Action Taken. Entry "HKCR\FunAd.funAdvertis" refers to invalid object "{E726E415-FC33-451A-A309-00A95540596F}". Action Taken: No Action Taken. Entry "HKCR\FunAd.funAdvertis.1" refers to invalid object "{E726E415-FC33-451A-A309-00A95540596F}". Action Taken: No Action Taken. Entry "HKCR\FunAd.funAdvertise2" refers to invalid object "{4464114B-EBEC-11D6-9534-00E02932CC2E}". Action Taken: No Action Taken. Entry "HKCR\FunAd.funAdvertise2.1" refers to invalid object "{4464114B-EBEC-11D6-9534-00E02932CC2E}". Action Taken: No Action Taken. Entry "HKCR\FunIntegCheck.CheckMaster" refers to invalid object "{CC93F1D5-BAE8-11D4-BB7E-00E0290BFBAA}". Action Taken: No Action Taken. Entry "HKCR\FunIntegCheck.CheckMaster.1" refers to invalid object "{CC93F1D5-BAE8-11D4-BB7E-00E0290BFBAA}". Action Taken: No Action Taken. Entry "HKCR\MSWorks4Table" refers to invalid object "{28cddbc1-0ae2-11ce-a29a-00aa004a1a72}". Action Taken: No Action Taken. Entry "HKCR\Plenoptic.Plenoptic" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken. Entry "HKCR\Plenoptic.Plenoptic.1" refers to invalid object "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Action Taken: No Action Taken. Entry "HKCR\RTCCore.RTCClient" refers to invalid object "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Action Taken: No Action Taken. Entry "HKCR\RTCCore.RTCClient.1" refers to invalid object "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Action Taken: No Action Taken. Entry "HKCR\RTCIMSP.RTCIMService" refers to invalid object "{83D4679F-B6D7-11D2-BF36-00C04FB90A03}". Action Taken: No Action Taken. Entry "HKCR\RTCIMSP.RTCIMService.1" refers to invalid object "{83D4679F-B6D7-11D2-BF36-00C04FB90A03}". Action Taken: No Action Taken. Entry "HKCR\Rundum-Betrachter-innoPlus ActiveX.innova-Panorama-Viewer" refers to invalid object "{4C0942C1-C405-4805-B3B6-EA16F2DDD1BD}". Action Taken: No Action Taken. Entry "HKCR\Rundum-Betrachter-innoPlus ActiveX.innova-Panorama-Viewer.1" refers to invalid object "{4C0942C1-C405-4805-B3B6-EA16F2DDD1BD}". Action Taken: No Action Taken. Entry "HKCR\ShellViewControls.TreeNode.60" refers to invalid object "{4FAF7212-7314-42AF-9C1E-1F48BBD660B7}". Action Taken: No Action Taken. Entry "HKCR\UdaComServer.ComUdaServer" refers to invalid object "{7D40BE24-67B4-11D4-B7C0-0050044A0724}". Action Taken: No Action Taken. Entry "HKCR\UdaComServer.ComUdaServer.1" refers to invalid object "{7D40BE24-67B4-11D4-B7C0-0050044A0724}". Action Taken: No Action Taken. Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken. Entry "HKCR\WMPPublsihCntr.WMPPublsihCntr.1" refers to invalid object "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Action Taken: No Action Taken. File C:\bmp\aawsepersonal.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\bmp\Shockwave_Installer_Slim.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\emme\Eisbaer1\Desinst.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\MAGIX\Media_Manager\hrpjna01.dat tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\MAGIX\Media_Manager\uninstall.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\MAGIX\mp3_maker_titanium_2004\uninstall.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\MAGIX\video_deLuxe_2004\uninstall.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Programme\ACDSee32\UNWISE.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Programme\Lavasoft\Ad-Aware SE Personal\UNWISE.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Programme\Opera\uninst\unwise.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\WINDOWS\system32\Macromed\Shockwave 10\UNWISE.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\WINDOWS\system32\Macromed\Shockwave 8\UNWISE.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File D:\Driver\SIS_AGP_1.13\AGP\htpatch\HTinst.exe tagged as not-a-virus:Tool.Win32.HTPatch.c. No Action Taken. File D:\Driver\SIS_AGP_1.13\AGP\htpatch\htpatch.exe tagged as not-a-virus:Tool.Win32.HTPatch.a. No Action Taken. File D:\Tools\PhoneTools 5.01A\driver\Setup.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. |
| Themen zu eScan Auswertung |
| acrobat, ad-aware, adobe, altnet, auswertung, automatische, driver, escan, fiese, hijack, hijackthis, install.exe, killbox, löschen, löschen?, magix, microsoft, mp3, not-a-virus, opera, photoshop, programme, shockwave, software, system, system32, tools, uninstall.exe, video, windows |
Baum-Darstellung