Wifi Sniff -> ein vermeintlicher Bot???

HTTP/1.1 200 OK

Date: Thu, 17 Jul 2008 15:30:54 GMT

Server: Apache

Last-Modified: Thu, 05 Jun 2008 13:43:52 GMT

ETag: "1cc006-3c2f-44eeb89249600"

Accept-Ranges: bytes

Content-Length: 15407

Connection: close

Content-Type: text/plain




;------------------------------------------------------------------------------------------------

; . ........ ....... .......... ...............

;--------------------------------------------------------------------------------------------------



;

; ... .. ......... ... issue . .... ...... .......... . ................ ..... 

; ...... issue ........... .... . .... ....... ...... ..... ......:

; [........]

; Detect=<...... ...........>:<......>

; ....... ...........:

; registry              - ........... .. ....... ...... . .......

; service               - ........... .. ....... ......

; driver                - ........... .. ....... ........

; process               - ........... .. ....... ........

;

; ........:

; disable_on_access     - ......... on-access .......

; disable_on_any_access - ........... ..... ...... on-access, ......... ...... ... ..........

; compatible_on_access  - ........... ..... ...... on-access, .. ......... .. ........ .....

; disable_sandbox       - .. ...........
.. sandbox ....... .....

; disable_wlhook        - .. ............. wl_hook .....

; sandbox_exclusion     - ......... .... . .......... sandbox (... .........)

; wl_hook_exclusion     - ......... .... . .......... wl_hook (.. ........)

; cancel_install.- ...... .......... .. ......... .......

; disable_attributes    - ......... ........... ........ (Smart Scan .....)

; disable_content    .- ......... .......... .......
.

;



[issues]

; checked antiviruses

nod32_integrity_issue=NOD32 Integrity Issue

nod32_on_access_issue=NOD32 On-Access Issue

klif_issue=Kaspersky On-Access Scanner Issue

kavavp_issue=Legacy Kaspersky Service Issue

drweb_issue=DrWeb Issue

avg_av_issue=AVG Anti-Virus Issue

avg_av_issue_v7=AVG Anti-Virus Issue

symantec_issue=Norton (Symantec) AntiVirus Issue

symantec_v10_issue=Norton (Symantec) AntiVirus Issue

symantec_autoprotect_issue=Symantec AntiVirus AutoProtect Issue

symantec_filtration_issue=Symantec AntiVirus content filtration Issue

avast_issue=avast! Issue

mcafee_issue=McAfee VirusScan Issue

avira_issue=Avira AntiVir Issue

avira_issue_v7_2000.32_issue=Avira AntiVir Issue

bitdefender_av_issue=BitDefender AntiVirus Issue

bitdefender_av_2008_issue=BitDefender Antivirus 2008 Issue

spysweeper_issue=Spy Sweeper Issue

ca_issue=CA Anti-Virus Issue

ca_av_v8_xp.32_issue=CA Anti-Virus Issue

gdata_avk_issue=GDATA AntiVirusKit Issue



; checked firewalls

lavasoft_firewall_issue=Lavasoft Fi
rewall Issue

quickheal_firewall_issue=Quick Heal Firewall Issue

buhl_firewall_issue=PC Firewall Issue

sophos_firewall_issue=Sophos Client Firewall Issue

agava_firewall_issue=AGAVA Firewall Issue

f-secure_firewall_issue=F-Secure Firewall Issue

jetico_firewall_issue=Jetico Firewall Issue

zonealarm_firewall_issue=ZoneAlarm Firewall Issue

checkpoint_firewall_issue=CheckPoint Firewall Issue

onlinearmor_firewall_issue=Onl
ine Armor Personal Firewall Issue

virusbuster_issue=VirusBuster Issue



; not checked

mcafee_framework_issue=McAffee Framework Self Protection Issue

mcafee_enterprise_issue=McAffee Enterprise Self Protection Issue

mcafee_scan_online=McAffee Online Scan Self Protection Issue

sophos_issue=Sophos Antivirus Issue

comodo.= Comodo Installation

za_inst.= Zone Alarm Installation





;----------------------------------------------------------------------------------------

; Antivirus

;----------------------------------------------------------------------------------------



[nod32_integrity_issue]

Product=nod32_product

Detect=service:nod32krn

Detect=service:ekrn

Action=wl_hook_exclusion ekrn.exe

Action=sandbox_exclusion ekrn.exe

Action=wl_hook_exclusion egui.exe

Action=wl_hook_exclusion nod32.exe

Action=wl_hook_exclusion nod32kui.exe

Action=wl_hook_exclusion nod32krn.exe

Action=disable_content vista



[nod32_on_access_issue]

Product=nod32_product

Detect=driver:amon

Detect=driver:eamon

Action
=disable_on_access



[klif_issue]

Detect=driver:klif

Action=disable_on_access

Product=kis_product



[kavavp_issue]

Detect=service:avp

Product=kis_product

Action=wl_hook_exclusion avp.exe

Action=sandbox_exclusion avp.exe

Action=kaspersky_av_exclusion_action

Action=kaspersky_suspend_protection_action

Action=disable_attributes

Action=disable_content vista



[drweb_issue]

Product=drweb_product

Detect=service:spid
ernt

Detect=driver:spider

Action=disable_on_access



[avg_av_issue]

Product=avg_product

Detect=service:Avg7Alrt

Action=wl_hook_exclusion avgemc.exe

Action=wl_hook_exclusion avgrssvc.exe



[avg_av_issue_v7]

Product=avg_product

Detect=driver:avg7rsxp

Detect=driver:avgmfx86

Detect=driver:avgmfx64

Action=disable_on_access



[symantec_issue]

Product=symantec_product

Detect=service:CLTNetCnService

Action=wl_hook_exclusion ccSvcHst.exe

Action=sandbox_exclusion ccSvcHst.exe

Action=wl_hook_exclusion CCPD-LC\symlcsvc.exe

Action=sandbox_exclusion CCPD-LC\symlcsvc.exe

Action=symantec_disable_auto_protect

Action=disable_attributes



[symantec_v10_issue]

Product=symantec_product

Detect=service:ccEvtMgr

Action=wl_hook_exclusion ccEvtMgr.exe

Action=sandbox_exclusion ccEvtMgr.exe

Action=disable_attributes



[symantec_autoprotect_issue]

Product=symantec_product

Detect=driver:eectrl

Detect=service:ccEvtMgr

Action=disable_on_access



[symantec_filtration_issue]

Product=symantec_product

Detect=
driver:SYMTDI

Action=disable_content



[avast_issue]

Product=avast_product

Detect=registry: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\avast!:InstallLocation

Action=wl_hook_exclusion ashserv.exe

Action=sandbox_exclusion ashserv.exe

Action=wl_hook_exclusion ashwebsv.exe

Action=sandbox_exclusion ashwebsv.exe 

Action=wl_hook_exclusion ashmaisv.exe

Action=sandbox_exclusion ashmaisv.exe

Action=disable_on_
access

Action=disable_content vista



[avira_issue]

Product=avira_product

Detect=driver:avgio

Action=disable_on_access

Action=disable_content vista



[avira_issue_v7_2000.32_issue]

Product=avira_product

Detect=driver:avgntdd

Action=disable_on_access



[bitdefender_av_issue]

Product=bitdefender_product

Detect=driver:bdrsdrv

Action=disable_on_access

Action=disable_content vista

Action=bitdefender_product_turnoff



[bitdefender_av_2008_issue]

Product=bitdefender_product

Detect=service:vsserv

Action=wl_hook_exclusion vsserv.exe

Action=disable_on_access



[ca_issue]

Product=ca_product

Detect=service:InoRT

Detect=service:InoRPC

Detect=service:InoTask

Detect=service:InoNmSrv

Action=wl_hook_exclusion InoNmSrv.exe

Action=wl_hook_exclusion InoTask.exe

Action=wl_hook_exclusion InoRT.exe

Action=wl_hook_exclusion InoRpc.exe

Action=disable_on_access



[ca_av_v8_xp.32_issue]

Product=ca_product

Detect=service:vetmsgnt

Action=disable_on_access



[gdata_avk_issue]

Product=gdata_product

De
tect=service:AVKWCtl

Detect=service:AVKService

Action=disable_on_access

Action=wl_hook_exclusion avkwctl.exe

Action=sandbox_exclusion avkwctl.exe

Action=wl_hook_exclusion avkwctlx64.exe

Action=sandbox_exclusion avkwctlx64.exe

Action=wl_hook_exclusion avkservice.exe

Action=sandbox_exclusion avkservice.exe



[spysweeper_issue]

Product=spysweeper_product

Detect=service:WebrootSpySweeperService

Action=wl_hook_exclusi
on ssu.exe

Action=sandbox_exclusion ssu.exe

Action=wl_hook_exclusion spysweeper.exe

Action=sandbox_exclusion spysweeper.exe

Action=wl_hook_exclusion spysweeperui.exe

Action=wl_hook_exclusion safesweeper.exe

Action=disable_on_access



[mcafee_issue]

Product=mcafee_product



Detect=service:McShield

Action=wl_hook_exclusion mcshield.exe

Action=sandbox_exclusion mcshield.exe

Action=disable_on_any_access



;----------------------------------------------------------------------------------------

; Firewall

;----------------------------------------------------------------------------------------



[lavasoft_firewall_issue]

Product=lavasoft_product

Detect=service:LavasoftFirewall

Detect=registry: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lavasoft Firewall Pro_is1:InstallLocation

Action=cancel_install



[quickheal_firewall_issue]

Product=quickheal_product

Detect=service:QuickHealFirewall

Action=cancel_install



[buhl_firewall_issue]

Product=buhl_firewall_product

Detect=service:S
Firewall

Action=cancel_install



[sophos_firewall_issue]

Product=sophos_fw_product

Detect=service:SophosFirewall

Action=cancel_install



[agava_firewall_issue]

Product=agava_fw_product

Detect=service:fwservice

Action=cancel_install



[f-secure_firewall_issue]

Product=f-secure_fw_product

Detect=driver:fsfw

Action=cancel_install



[jetico_firewall_issue]

Product=jetico_fw_product

Detect=service:Jetico Personal 
Firewall server

Action=cancel_install



[zonealarm_firewall_issue]

Product=za

Detect=service:vsmon

Action=cancel_install



[checkpoint_firewall_issue]

Product=checkpoint_fw_product

Detect=service:FW1SVC

Action=cancel_install



[onlinearmor_firewall_issue]

Product=onlinearmor_fw_product

Detect=service:SvcOnlineArmor

Action=cancel_install



[virusbuster_issue]

Product=virusbuster_product

Detect=service:VBCompManService

Action=cancel_install



;----------------------------------------------------------------------------------------

;unchecked below

;----------------------------------------------------------------------------------------



[mcafee_framework_issue]

Product=mcafee_product

Detect=registry: HKLM\SOFTWARE\Network Associates\TVD\Shared Components\Framework:Installed Path

Action=wl_hook_exclusion frameworkservice.exe

Action=disable_on_access

Action=disable_content vista

Action=disable_mcafee_access_protection



[mcafee_enterprise_issue]

Product=mcafee_product

Detect=registr
y: HKLM\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion:szInstallDir

Action=wl_hook_exclusion vstskmgr.exe

Action=wl_hook_exclusion avf.exe

Action=disable_on_access



[mcafee_scan_online]

Product=mcafee_product

Detect=registry: HKLM\SOFTWARE\McAfee.com\Virusscan Online:Install Dir

Action=wl_hook_exclusion mcshield.exe

Action=wl_hook_exclusion mcvsrte.exe

Action=wl_hook_exclusion mcvsescn.exe

Act
ion=disable_on_access



[sophos_issue]

Product=sophos_product

Detect=service:savprogress.exe

Action=wl_hook_exclusion savprogress.exe



[comodo]

Detect=registry:HKLM\Software\Microsoft\Windows\Uninstall\Comodo Firewall

Action=cancel_install

Product=comodo_app



[za_inst]

Detect=registry:HKLM\Software\Microsoft\Windows\Uninstall\Zone Alarm

Action=cancel_install

Product=za



;--------------------------------------------------------------------------------------------------

; . ........ ....... ........ ....... ........... . ........ ........... ...............

;--------------------------------------------------------------------------------------------------



[msdev]

ProductName=Microsoft Developer Studio .NET

ProductVendor=Microsoft Corp



[suite20]

ProductName=Agnitum Security Suite 2008 or later

ProductVendor=Agnitum Ltd



[sysdrv]

ProductName=OS Hardware Drivers

ProductVendor=Hardware Vendors



[drv]

ProductName=Hardware kernel-mode Drivers

ProductVendor=Hardware Manufacturer




[za]

ProductName=Zone Alarm Firewall/Security Suite

ProductVendor=Zone Labs, LLC



[comodo_app]

ProductName=COMODO Firewall or Firewall Pro

ProductVendor=COMODO



;--- checked firewalls



[lavasoft_product]

ProductName=Lavasoft Personal Firewall

ProductVendor=Lavasoft AB



[quickheal_product]

ProductName=Quick Heal Firewall Pro

ProductVendor=Cat Computer Services Ltd.



[buhl_firewall_product]

ProductName=PC Fi
rewall

ProductVendor=Buhl Data Service GmbH



[sophos_fw_product]

ProductName=Sophos Client Firewall

ProductVendor=Sophos Plc.



[agava_fw_product]

ProductName=AGAVA Firewall

ProductVendor=AGAVA Software



[f-secure_fw_product]

ProductName=F-Secure Internet Security

ProductVendor=F-Secure Corporation.



[jetico_fw_product]

ProductName=Jetico Personal Firewall

ProductVendor=Jetico, Inc



[checkpoint_fw_product]

ProductName=Check Point Firewall

ProductVendor=Check Point Software Technologies Ltd.



[onlinearmor_fw_product]

ProductName=Online Armor Personal Firewall

ProductVendor=Tall Emu Pty Ltd



[virusbuster_product]

ProductName=VirusBuster

ProductVendor=VirusBuster Ltd.



;--- checked anti-viruses



[drweb_product]

ProductName=Dr.Web Antivirus

ProductVendor=Doctor Web, Ltd.



[avg_product]

ProductName=AVG Anti-Virus / AVG Internet Security

ProductVendor=GRISOFT Inc.



[symantec_product]

ProductName=Norton (Symantec) AntiVirus

ProductVendor=Symantec Corporation



[avast_produc
t]

ProductName=avast!

ProductVendor=ALWIL Software



[mcafee_product]

ProductName=McAfee VirusScan

ProductVendor=McAfee, Inc



[avira_product]

ProductName=Avira AntiVir / Avira Security Suite

ProductVendor=Avira GmbH



[nod32_product]

ProductName=NOD32 Antivirus

ProductVendor=ESET



[kis_product]

ProductName=Kaspersky Antivirus/Internet Security Suite

ProductVendor=Kaspersky Lab



[gdata_product]

ProductName=
GDATA Antivirus

ProductVendor=G DATA Software AG.



[bitdefender_product]

ProductName=BitDefender

ProductVendor=Softwin GmbH



[spysweeper_product]

ProductName=Spy Sweeper

ProductVendor=Webroot Software, Inc.



[ca_product]

ProductName=CA eTrust Antivirus

ProductVendor=CA



;--- ported from presets



[sophos_product]

ProductName=SOPHOS Antivirus

ProductVendor=SOPHOS





;--------------------------------------------------------------------------------------------------

; . ........ ....... ........ ....... ............ ...... ......... .............. . ...... GUI ......

; .........

;

; ........! ..... .... ActionCaption .. ...... ......... 70 ........!!!

;--------------------------------------------------------------------------------------------------



[cancel_install]

ActionCaption=Installation is impossible (incompatible product found)

ActionText=Please unsinstall the incompatible product to continue the installation.

Fatal=true



[kaspersky_av_exclusion_action]

ActionCaption=Add 
product installation folder to Kaspersky Antivirus Trusted Zone

ActionText=After product installation, please add its installation folder to Kaspersky Antivirus Trusted Zone.

ActionURL=http://www.agnitum.com/support/kb/article.php?id=1000030&lang=<LANG>#9



[kaspersky_suspend_protection_action]

ActionCaption=Suspend Kaspersky Antivirus protection during installation

ActionText=To avoid warning messages during installati
on, please suspend Kaspersky Antivirus protection using the system tray menu command.



[bitdefender_product_turnoff]

ActionCaption=Unload BitDefender before installation

ActionText=To avoid BitDefender BSODs during installation, please turn it off.



[symantec_disable_auto_protect]

ActionCaption=Disable Norton Antivirus Auto-Protect

ActionText=To avoid conflicts during product operation, please disable Norton Antivirus Auto-Protect feature: open Norton Antivirus main window, select the Norton Antivirus tab, select Settings and click Auto-Protect > Turn Off under Basic Security.



[disable_mcafee_access_protection]

ActionCaption=Disable McAfee VirusScan Access Protection 

ActionText=To avoid conflicts during product operation, please disable McAfee VirusScan Access Protection feature: open McAfee VirusScan console, right-click Access Protection and select Disable.