Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Tr/dldr.agent.ap.3 - Tr/dldr.agent.bq (https://www.trojaner-board.de/11050-tr-dldr-agent-ap-3-tr-dldr-agent-bq.html)

hijacked01 21.12.2004 14:50

Tr/dldr.agent.ap.3 - Tr/dldr.agent.bq
 
Hallo, ich brauche Eure Hilfe!
Mein Virenscanner erkennt beim Suchlauf keine Viren, beim Öffnen der Internetverbindung kommen dann die DOS-Meldungen, daß TR/DLDR.AGENT.AP.3 und ~BQ gefunden wurden. Löschen bringt nichts, kurz drauf sind sie wieder da. Zusätzlich ist meine Startseite weg (about: blanc) und das lästige POPUP-Fenster "Only the best" erscheint immer.


Logfile of HijackThis v1.97.7
Scan saved at 14:34:56, on 21.12.04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\LEXBCES.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\LEXPPS.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAMME\NETROPA\SMART KEYBOARD\SMARTKBD.EXE
D:\AVPERSONAL\AVGCTRL.EXE
D:\INCD\INCD.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\TWAIN_32\FLATBED\HOTKEY.EXE
C:\PROGRAMME\NETROPA\SMART KEYBOARD\MEDIACTR.EXE
D:\SPAMIHILATOR\SPAMIHILATOR.EXE
D:\MICROSOFT OFFICE\OFFICE\OSA.EXE
D:\MICROSOFT OFFICE\OFFICE\MSOFFICE.EXE
D:\MICROSOFT OFFICE\OFFICE\FINDFAST.EXE
C:\PROGRAMME\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAMME\OUTLOOK EXPRESS\MSIMN.EXE
C:\PROGRAMME\INTERNET EXPLORER\IEXPLORE.EXE
D:\HIJACK THIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\hwxwz.dll/sp.html#12345
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\hwxwz.dll/sp.html#12345
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\hwxwz.dll/sp.html#12345
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\hwxwz.dll/sp.html#12345
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\hwxwz.dll/sp.html#12345
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\hwxwz.dll/sp.html#12345
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\hwxwz.dll/sp.html#12345
F1 - win.ini: run=hpfsched
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {FC1E5A00-A475-6F23-C75B-AF391DF9A652} - C:\WINDOWS\SYSTEM\NETMP32.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\YAHOO!\MESSENGER\YCOMP.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Smart Keyboard] C:\Programme\Netropa\Smart Keyboard\Smartkbd.exe
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [AVGCtrl] D:\AVPERSONAL\AVGCTRL.EXE /min
O4 - HKLM\..\Run: [InCD] D:\InCD\InCD.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HotKey] C:\WINDOWS\Twain_32\FlatBed\HotKey.exe
O4 - HKLM\..\Run: [LexStart] lexstart.exe
O4 - HKLM\..\Run: [23B3.TMP] C:\WINDOWS\TEMP\23B3.TMP.exe 0 10001
O4 - HKLM\..\Run: [23B3.TMP.EXE] C:\WINDOWS\TEMP\23B3.TMP.EXE 0 10001
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKCU\..\Run: [Spamihilator] "D:\Spamihilator\spamihilator.exe"
O4 - Startup: Office-Start.lnk = D:\Microsoft Office\Office\OSA.EXE
O4 - Startup: Microsoft Office Shortcut-Leiste.lnk = D:\Microsoft Office\Office\MSOFFICE.EXE
O4 - Startup: Microsoft-Indexerstellung.lnk = D:\Microsoft Office\Office\FINDFAST.EXE
O9 - Extra button: Yahoo! Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0309.cab
O16 - DPF: {D2296475-B79C-44A9-9B2C-32B5DC6B8B45} (PhotosCtrlDE Class) - http://de.photos.groups.yahoo.com/oc...lorer1_9de.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/de/check/qdiagh.cab?326
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab

Was soll ich löschen bzw. weiter tun?
Danke!

HerrKautz 21.12.2004 15:16

Hallo,

lad dir bitte die aktuelle Version von HijackThis runter!

http://filepony.de/download-hijackthis/

hijacked01 21.12.2004 15:33

Hier ist das neue Logfile:

Logfile of HijackThis v1.99.0
Scan saved at 15:29:24, on 21.12.04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\LEXBCES.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\LEXPPS.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAMME\NETROPA\SMART KEYBOARD\SMARTKBD.EXE
D:\AVPERSONAL\AVGCTRL.EXE
D:\INCD\INCD.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\TWAIN_32\FLATBED\HOTKEY.EXE
D:\SPAMIHILATOR\SPAMIHILATOR.EXE
C:\PROGRAMME\NETROPA\SMART KEYBOARD\MEDIACTR.EXE
D:\MICROSOFT OFFICE\OFFICE\OSA.EXE
D:\MICROSOFT OFFICE\OFFICE\MSOFFICE.EXE
D:\MICROSOFT OFFICE\OFFICE\FINDFAST.EXE
C:\PROGRAMME\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
D:\HIJACK THIS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\mbimv.dll/sp.html#12345
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\mbimv.dll/sp.html#12345
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\mbimv.dll/sp.html#12345
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\mbimv.dll/sp.html#12345
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\mbimv.dll/sp.html#12345
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\mbimv.dll/sp.html#12345
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\mbimv.dll/sp.html#12345
R3 - Default URLSearchHook is missing
F1 - win.ini: run=hpfsched
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: Class - {FC1E5A00-A475-6F23-C75B-AF391DF9A652} - C:\WINDOWS\SYSTEM\NETMP32.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\YAHOO!\MESSENGER\YCOMP.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Smart Keyboard] C:\Programme\Netropa\Smart Keyboard\Smartkbd.exe
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [AVGCtrl] D:\AVPERSONAL\AVGCTRL.EXE /min
O4 - HKLM\..\Run: [InCD] D:\InCD\InCD.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HotKey] C:\WINDOWS\Twain_32\FlatBed\HotKey.exe
O4 - HKLM\..\Run: [LexStart] lexstart.exe
O4 - HKLM\..\Run: [23B3.TMP] C:\WINDOWS\TEMP\23B3.TMP.exe 0 10001
O4 - HKLM\..\Run: [23B3.TMP.EXE] C:\WINDOWS\TEMP\23B3.TMP.EXE 0 10001
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKCU\..\Run: [Spamihilator] "D:\Spamihilator\spamihilator.exe"
O4 - Startup: Office-Start.lnk = D:\Microsoft Office\Office\OSA.EXE
O4 - Startup: Microsoft Office Shortcut-Leiste.lnk = D:\Microsoft Office\Office\MSOFFICE.EXE
O4 - Startup: Microsoft-Indexerstellung.lnk = D:\Microsoft Office\Office\FINDFAST.EXE
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\YAHOO!\MESSENGER\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\YAHOO!\MESSENGER\YPAGER.EXE
O16 - DPF: {D2296475-B79C-44A9-9B2C-32B5DC6B8B45} (PhotosCtrlDE Class) - http://de.photos.groups.yahoo.com/oc...lorer1_9de.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/de/check/qdiagh.cab?326
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab

HerrKautz 21.12.2004 15:46

Fixe folgende Einträge mit HjackThis

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\mbimv.dll/sp.html#12345

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\mbimv.dll/sp.html#12345

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\mbimv.dll/sp.html#12345

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\mbimv.dll/sp.html#12345

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\mbimv.dll/sp.html#12345

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\mbimv.dll/sp.html#12345

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\mbimv.dll/sp.html#12345

R3 - Default URLSearchHook is missing

F1 - win.ini: run=hpfsched

O2 - BHO: Class - {FC1E5A00-A475-6F23-C75B-AF391DF9A652} - C:\WINDOWS\SYSTEM\NETMP32.DLL

O4 - HKLM\..\Run: [23B3.TMP] C:\WINDOWS\TEMP\23B3.TMP.exe 0 10001

O4 - HKLM\..\Run: [23B3.TMP.EXE] C:\WINDOWS\TEMP\23B3.TMP.EXE 0 10001

O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/de/check/qdiagh.cab?326

Wenn dir die Programme nicht bekannt ist,auch fixen:

C:\PROGRAMME\NETROPA\SMART KEYBOARD\SMARTKBD.EXE

C:\PROGRAMME\NETROPA\SMART KEYBOARD\MEDIACTR.EXE

Danach mal ein neues Log posten,hoffe habe in der Eile nix übersehen jetzt,muss leider weg!

Gruss

hijacked01 21.12.2004 17:45

Habe alles gefixt. Hier ist das neue Logfile. Zur Zeit sieht es so aus, als wäre Ruhe. Vielen Dank!

Logfile of HijackThis v1.99.0
Scan saved at 17:41:18, on 21.12.04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAMME\NETROPA\SMART KEYBOARD\SMARTKBD.EXE
D:\AVPERSONAL\AVGCTRL.EXE
D:\INCD\INCD.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\TWAIN_32\FLATBED\HOTKEY.EXE
D:\SPAMIHILATOR\SPAMIHILATOR.EXE
C:\PROGRAMME\NETROPA\SMART KEYBOARD\MEDIACTR.EXE
D:\MICROSOFT OFFICE\OFFICE\OSA.EXE
D:\MICROSOFT OFFICE\OFFICE\MSOFFICE.EXE
D:\MICROSOFT OFFICE\OFFICE\FINDFAST.EXE
C:\PROGRAMME\NETROPA\ONSCREEN DISPLAY\OSD.EXE
C:\WINDOWS\SYSTEM\LEXBCES.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\LEXPPS.EXE
C:\PROGRAMME\INTERNET EXPLORER\IEXPLORE.EXE
D:\HIJACK THIS\HIJACKTHIS.EXE

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - D:\YAHOO!\MESSENGER\YCOMP.DLL
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [Smart Keyboard] C:\Programme\Netropa\Smart Keyboard\Smartkbd.exe
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [AVGCtrl] D:\AVPERSONAL\AVGCTRL.EXE /min
O4 - HKLM\..\Run: [InCD] D:\InCD\InCD.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HotKey] C:\WINDOWS\Twain_32\FlatBed\HotKey.exe
O4 - HKLM\..\Run: [LexStart] lexstart.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKCU\..\Run: [Spamihilator] "D:\Spamihilator\spamihilator.exe"
O4 - Startup: Office-Start.lnk = D:\Microsoft Office\Office\OSA.EXE
O4 - Startup: Microsoft Office Shortcut-Leiste.lnk = D:\Microsoft Office\Office\MSOFFICE.EXE
O4 - Startup: Microsoft-Indexerstellung.lnk = D:\Microsoft Office\Office\FINDFAST.EXE
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\YAHOO!\MESSENGER\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\YAHOO!\MESSENGER\YPAGER.EXE
O16 - DPF: {D2296475-B79C-44A9-9B2C-32B5DC6B8B45} (PhotosCtrlDE Class) - http://de.photos.groups.yahoo.com/oc...lorer1_9de.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab

HerrKautz 21.12.2004 17:50

Jop,vom Log her ja :daumenhoc

Die 2 Programme kanntest du aber,die ich in Frage gestellt hatte?

72667 12.05.2005 23:14

Hey,

hab mir gestern den about blanc eingefangen. Hab mir den

SpSeHjfix112 - runtergeladen und bekomme folgendes Ergebnis:

(13.5.05 00:14:08) SPSeHjFix started v1.1.2
(13.5.05 00:14:08) OS: WinXP Service Pack 1 (5.1.2600)
(13.5.05 00:14:08) Language: deutsch
(13.5.05 00:14:08) Win-Path: C:\WINDOWS
(13.5.05 00:14:08) System-Path: C:\WINDOWS\System32
(13.5.05 00:14:08) Temp-Path: C:\DOKUME~1\Tom\LOKALE~1\Temp\
(13.5.05 00:14:10) Disinfection started
(13.5.05 00:14:10) Bad-Dll(IEP): (not found)
(13.5.05 00:14:10) Bad-Dll(IEP) in BHO: (not found)
(13.5.05 00:14:10) UBF: 8 - UBB: 5 - UBR: 19
(13.5.05 00:14:10) UBF: 8 - UBB: 5 - UBR: 19
(13.5.05 00:14:10) Bad IE-pages: (none)
(13.5.05 00:14:10) Stealth-String not found
(13.5.05 00:14:10) Not infected->END

Kann mir jemand sagen was ich machen muss damit ich diesen Sch ... rott wieder loswerde ??
Ach ja - was heißt "fixe" :o)
Danke euch schon mal im Voraus.

Gruß Tom


Alle Zeitangaben in WEZ +1. Es ist jetzt 03:26 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131