Hatte Trojaner bitte mal Hijack prüfen :)

ThuNd3r

Gut also habe es jetzt wie beschrieben gemacht allerdings auf die manuelle art mit der find.bat komm ich nicht klar... hier alle infected und tagged files + allgemeine infos vom scan:




Thu Sep 29 08:48:09 2005 => Options Selected by User:
Thu Sep 29 08:48:09 2005 => Memory Check: Enabled
Thu Sep 29 08:48:09 2005 => Registry Check: Enabled
Thu Sep 29 08:48:09 2005 => StartUp Folder Check: Disabled
Thu Sep 29 08:48:09 2005 => System Folder Check: Disabled
Thu Sep 29 08:48:09 2005 => System Area Check: Disabled
Thu Sep 29 08:48:09 2005 => Services Check: Enabled
Thu Sep 29 08:48:09 2005 => Drive Check: Disabled
Thu Sep 29 08:48:09 2005 => All Drive Check :Enabled
Thu Sep 29 08:48:09 2005 => Folder Check: Disabled


Thu Sep 29 09:30:41 2005 => ***** Scanning complete. *****

Thu Sep 29 09:30:41 2005 => Total Objects Scanned: 57586
Thu Sep 29 09:30:41 2005 => Total Virus(es) Found: 20
Thu Sep 29 09:30:41 2005 => Total Disinfected Files: 0
Thu Sep 29 09:30:41 2005 => Total Files Renamed: 0
Thu Sep 29 09:30:41 2005 => Total Deleted Objects: 0
Thu Sep 29 09:30:41 2005 => Total Errors: 61
Thu Sep 29 09:30:41 2005 => Time Elapsed: 00:42:15
Thu Sep 29 09:30:41 2005 => Virus Database Date: 2005/09/27
Thu Sep 29 09:30:41 2005 => Virus Database Count: 151405

Thu Sep 29 09:30:41 2005 => Scan Completed.




Thu Sep 29 08:48:58 2005 => System found infected with bearshare Spyware/Adware ({558ec983-bedb-9168-b2de-31dbf0ee543e})! Action taken: No Action Taken.
Thu Sep 29 08:48:58 2005 => System found infected with bearshare Spyware/Adware ({9f95f736-0f62-4214-a4b4-caa6738d4c07})! Action taken: No Action Taken.
Thu Sep 29 08:48:59 2005 => System found infected with bearshare Spyware/Adware ({5f95e1af-2620-4f15-bdf9-7fdce4607e17})! Action taken: No Action Taken.
Thu Sep 29 08:48:59 2005 => System found infected with bearshare Spyware/Adware ({905d0df2-3a0a-4d94-853c-54a12a745905})! Action taken: No Action Taken.
Thu Sep 29 08:48:59 2005 => System found infected with whenu.savenow Spyware/Adware ({c285d18d-43a2-4aef-83fb-bf280e660a97})! Action taken: No Action Taken.

2005 => Offending file found: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\bearshare.lnk
Thu Sep 29 08:49:01 2005 => System found infected with bearshare Spyware/Adware (bearshare.lnk)! Action taken: No Action Taken.

2005 => Offending file found: C:\Dokumente und Einstellungen\All Users\Startmenü\programme\bearshare.lnk
Thu Sep 29 08:49:01 2005 => System found infected with bearshare Spyware/Adware (bearshare.lnk)! Action taken: No Action Taken.

2005 => Offending file found: C:\Dokumente und Einstellungen\Thunder\Eigene Dateien\stronghold 2\config.dat
Thu Sep 29 08:49:01 2005 => System found infected with startsurfing Spyware/Adware (config.dat)! Action taken: No Action Taken.


Thu Sep 29 09:25:07 2005 => File D:\download\progs\Windows_2003_and_XP_Anti_Product_Activation_Crack_v1.6.2.zip infected by "Trojan-Downloader.Win32.IstBar.er" Virus! Action Taken: No Action Taken.<-- huch das hab ich schon ewig aufm pc is der aktiv?


Thu Sep 29 08:55:41 2005 => File C:\Programme\BearShare\incoming\(PC Game) Playboy The Mansion - Crack.zip tagged as not-a-virus:RiskTool.Win32.PsKill.1101. No Action Taken.
Thu Sep 29 09:04:35 2005 => File C:\Programme\BearShare\Installer\BSInstall5.1.0.26.exe tagged as "not-a-virus:AdWare.Win32.SaveNow.bo". Action Taken: No Action Taken.
Thu Sep 29 09:05:01 2005 => File C:\Programme\Gamers.IRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
Thu Sep 29 09:24:44 2005 => File D:\download\progs\girc436.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.