|
www.nowfind.net Hallo, versuche schon seit gestern meinen PC von sämtlichen Viren und Dialern zu befreien, jedoch ohne Erfolg. Habe bereits versucht mit AntiVir, Adaware und HiJackThis diese zu löschen wieder ohne Erfolg. Wenn ich ins Internet möchte, dann bringt er mir automatisch die Startseite www.nowfind.net, und ich komme wenn ich in die Adressleiste eine www. adresse eingeben will nirgends mehr hin, jedesmal öffnet sich diese Seite wieder und wieder. So langsam dreh ich schon am Rad.. :heulen: Bitte bitte helft mir doch LG Nicole |
|
So und nun?? das habe ich jetzt gemacht.. :confused: |
Du sollst das erstellte Logfile in diesen Thread kopieren. |
C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Programme\AVPersonal\AVGUARD.EXE C:\Programme\AVPersonal\AVWUPSRV.EXE C:\WINNT\System32\svchost.exe C:\WINNT\system32\drivers\KodakCCS.exe C:\Programme\Kodak\Kodak EasyShare software\bin\ptssvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\System32\mspmspsv.exe C:\WINNT\System32\svchost.exe C:\WINNT\Explorer.EXE C:\WINNT\System32\hkcmd.exe C:\Programme\Microsoft Hardware\Mouse\point32.exe C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb05.exe C:\WINNT\System32\hphmon04.exe C:\WINNT\Mixer.exe C:\PROGRA~1\T-DSLS~1\SpeedMgr.exe C:\WINNT\system32\RUNDLL32.exe C:\Programme\MSN Apps\Updater\01.02.3000.1001\de\msnappau.exe C:\WINNT\system32\SerExt.exe C:\Program Files\DeskAd Service\DeskAdServ.exe C:\Programme\AVPersonal\AVGNT.EXE C:\Program Files\DeskAd Service\DeskAdKeep.exe C:\Programme\MSN Messenger\MsnMsgr.Exe C:\Programme\Plaxo\2.0.3.16\InstallStub.exe C:\Programme\Shareaza\Shareaza.exe C:\WINNT\system32\?hkdsk.exe D:\Programme\Gigaset DECT\talk&surf_6_0\semon21.exe C:\Programme\Kodak\Kodak EasyShare software\bin\EasyShare.exe C:\Programme\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe C:\Programme\WINZIP\WZQKPICK.EXE D:\Download\INCRED~1\bin\IMApp.exe C:\Programme\Yahoo!\Messenger\ymsgr_tray.exe C:\Programme\T-DSL SpeedManager\tsmsvc.exe D:\Programme\Gigaset DECT\talk&surf_6_0\xcontrolcom.exe C:\Programme\WINZIP\HijackThis.exe C:\Programme\Internet Explorer\IEXPLORE.EXE C:\WINNT\system32\tmpf03.exe C:\Programme\Gemeinsame Dateien\GMT\GMT.exe C:\Programme\Gemeinsame Dateien\CMEII\CMESys.exe C:\Programme\HiJackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/004/index.html R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.nowfind.net/004/index.html R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/004/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nowfind.net/004/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/004/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nowfind.net/004/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/004/index.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nowfind.net/004/index.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/004/index.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOKUME~1\Andreas\LOKALE~1\Temp\sp.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/004/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nowfind.net/004/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/004/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/004/index.html R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.ramgo.com/search.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/004/index.html R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/004/index.html R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?p=%s R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost F3 - REG:win.ini: run= |
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx (file missing) O2 - BHO: IEHlprObj Class - {12D02C08-218F-4A11-BDE1-6611ADB7B81F} - C:\WINNT\SYS32_~1.DLL (file missing) O2 - BHO: (no name) - {72AE3B96-9F5F-44C8-BEFF-A7E2B6D758DE} - C:\WINNT\system32\kbbj.dll (file missing) O2 - BHO: (no name) - {78EC5E95-CF20-BEDC-2F47-EEDC384AE2B3} - C:\WINNT\system32\eewk.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Programme\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll (file missing) O2 - BHO: ICOODownloadManager Class - {BA7270AE-5636-4618-BAF3-F86ADA39F036} - C:\Programme\ICOO Loader\addons7\icoourl.dll (file missing) O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.3000.1001\de\msntb.dll (file missing) O2 - BHO: ICOOExternalHandler Class - {ED657BAF-1EE5-4A07-9D2E-6D0525EFC69B} - C:\Programme\ICOO Loader\addons7\icoourlext.dll (file missing) O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: @msdxmLC.dll,-1@1031,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.3000.1001\de\msntb.dll (file missing) O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe O4 - HKLM\..\Run: [POINTER] point32.exe O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb05.exe O4 - HKLM\..\Run: [HPHmon04] C:\WINNT\System32\hphmon04.exe O4 - HKLM\..\Run: [HPHUPD04] "C:\Programme\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe" O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup O4 - HKLM\..\Run: [T-DSL SpeedMgr] "C:\PROGRA~1\T-DSLS~1\SpeedMgr.exe" O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Programme\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain O4 - HKLM\..\Run: [msnappau] "C:\Programme\MSN Apps\Updater\01.02.3000.1001\de\msnappau.exe" O4 - HKLM\..\Run: [SerExt] SerExt.exe /unplug O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [DeskAd Service] C:\Program Files\DeskAd Service\DeskAdServ.exe O4 - HKLM\..\Run: [AVGCtrl] C:\Programme\AVPersonal\AVGNT.EXE /min O4 - HKLM\..\Run: [CMESys] "C:\Programme\Gemeinsame Dateien\CMEII\CMESys.exe" O4 - HKCU\..\Run: [CFDStart] C:\DOKUME~1\Andreas\LOKALE~1\Temp\\Multimediazugang.exe -m O4 - HKCU\..\Run: [Yahoo! Pager] C:\Programme\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [IncrediMail] D:\DOWNLOAD\INCRED~1\bin\IncMail.exe /c O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [PlaxoUpdate] C:\Programme\Plaxo\2.0.3.16\InstallStub.exe -a O4 - HKCU\..\Run: [Shareaza] "C:\Programme\Shareaza\Shareaza.exe" -tray O4 - HKCU\..\Run: [Khg] C:\WINNT\system32\?hkdsk.exe O4 - Global Startup: talk&surf 6.0 - Monitor.lnk = D:\Programme\Gigaset DECT\talk&surf_6_0\semon21.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Kodak EasyShare Software.lnk = C:\Programme\Kodak\Kodak EasyShare software\bin\EasyShare.exe O4 - Global Startup: Kodak software updater.lnk = C:\Programme\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programme\WINZIP\WZQKPICK.EXE O4 - Global Startup: GStartup.lnk = C:\Programme\Gemeinsame Dateien\GMT\GMT.exe O8 - Extra context menu item: &Add animation to IncrediMail Style Box - D:\DOWNLOAD\INCRED~1\bin\resources\WebMenuImg.htm O8 - Extra context menu item: eBay Powersuche - http://www.webtip.ch/cgi-bin/msiebutton/tracker.pl?adv O8 - Extra context menu item: eBay Produktsuche - C:\Programme\Preispiraten\Buyertools Reminder\SearchEbay.htm O8 - Extra context menu item: eBay Startseite - http://www.webtip.ch/cgi-bin/msiebutton/tracker.pl?heim O8 - Extra context menu item: Mein eBay - http://www.webtip.ch/cgi-bin/msiebutton/tracker.pl?mein O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O9 - Extra button: Preispiraten 2.1.3 - {86DE8B3B-1EB7-4386-84BD-EBE94348A913} - C:\Programme\Preispiraten\Preispiraten2\preispiraten2ie.exe O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing) O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing) O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE O13 - DefaultPrefix: http://nowfind.net/rand/gallery.php?url= O13 - WWW Prefix: http://nowfind.net/rand/gallery.php?url= O13 - Home Prefix: http://nowfind.net/rand/gallery.php?url= O13 - Mosaic Prefix: http://nowfind.net/rand/gallery.php?url= O16 - DPF: Yahoo! Klondike Solitaire - http://yog55.games.scd.yahoo.com/yog/y/ks12_x.cab O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/game...ts/y/tt3_x.cab O16 - DPF: Yahoo! MahJong Solitaire - http://download.games.yahoo.com/game.../y/mjst4_x.cab O16 - DPF: Yahoo! Pyramids - http://download.games.yahoo.com/game...s/y/pyt1_x.cab O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} (EGEGAUTH Class) - http://akamai.downloadv3.com/binarie...TH_1026_EN.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/Cl.../bridge-c9.cab O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {9E98E84C-79E1-49C3-82EB-798FCD552EFB} (VacPro.internazionale_ver4) - http://advnt01.com/dialer/internazionale_ver4.CAB O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) - http://www.mt-download.com/MediaTick...cab?refid=4205 O16 - DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} (SwapIt Control) - http://www.worldwinner.com/games/v61/swapit/swapit.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab32846.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game14.zylomgames.com/activex...amesplayer.cab O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v6.cab O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Companion) - http://us.dl1.yimg.com/download.comp...bio5_1_6_0.cab O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www5.incredimail.com/contents...1/imloader.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary...n.cab31267.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{A0D1AE97-BA6A-4962-91DA-FB6E4808EB2F}: NameServer = 192.168.209.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{EDDA4805-4A9D-4B29-825C-478CF9891D53}: NameServer = 192.168.122.252,192.168.122.253 O18 - Protocol: icoo - {2CC63CCE-A945-4D6A-9FA0-3669D7C3C22C} - C:\Programme\ICOO Loader\addons7\icoourl.dll (file missing) O18 - Filter: text/html - {B2817163-59D9-456F-BB78-E334117AE11B} - C:\WINNT\system32\kbbj.dll O18 - Filter: text/plain - {B2817163-59D9-456F-BB78-E334117AE11B} - C:\WINNT\system32\kbbj.dll O23 - Service: AntiVir Service - H+BEDV Datentechnik GmbH - C:\Programme\AVPersonal\AVGUARD.EXE O23 - Service: AntiVir Update - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE O23 - Service: AVM FRITZ!web Routing Service - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: Kodak Camera Connection Software - Eastman Kodak Company - C:\WINNT\system32\drivers\KodakCCS.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINNT\system32\oodag.exe O23 - Service: Pml Driver HPH11 - HP - C:\WINNT\System32\HPHipm11.exe O23 - Service: ptssvc - KODAK - C:\Programme\Kodak\Kodak EasyShare software\bin\ptssvc.exe O23 - Service: TSMService - T-Systems Nova, Berkom - C:\Programme\T-DSL SpeedManager\tsmsvc.exe O23 - Service: xControlCOM - Siemens - D:\Programme\Gigaset DECT\talk&surf_6_0\xcontrolcom.exe |
@hitex23 du hast wirklich einiges im system, um sicher zu gehen damit wir nichts übersehen, lade direscan anleitung hier mache es genauso wie beschrieben wird. überprüfe Deinen Rechner zunächst mit dem eScan: lade den eScan runter, erstelle dafür einen Ordner (=Verzeichnis) c:\bases, update den eScan online und führe ihn offline im abgesicherten Modus aus. Beachte, dass der eScan ab Version 4.5.1 gefundene Malware nicht löscht. Das wird von Hand auf Anweisung durch uns gemacht. Teile uns dann das Ergebnis des eScan mit: welche Viren wurden auf Deinem Rechner gefunden: "öffne die mwav.log -> Bearbeiten -> Suchen -> infected eingeben -> Weitersuchen -> Treffer markieren/kopieren und ins Forum übertragen." (Zitat Cidre) chaosman |
@chaosman Sun Jan 16 18:50:11 2005 => File C:\PROGRA~2\DESKAD~1\DESKAD~1.EXE infected by "not-a-virus:AdWare.WinAD.k" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:11 2005 => Scanning File C:\PROGRA~2\DESKAD~1\DESKAD~2.EXE Sun Jan 16 18:50:11 2005 => File C:\PROGRA~2\DESKAD~1\DESKAD~2.EXE infected by "not-a-virus:AdWare.WinAD.m" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:12 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\CMEIIAPI.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:12 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\CMESys.exe Sun Jan 16 18:50:12 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\CMESys.exe infected by "not-a-virus:AdWare.Gator.6034" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:12 2005 => Scanning File c:\PROGRA~1\GEMEIN~1\cmeii\gappmgr.dll Sun Jan 16 18:50:13 2005 => File c:\PROGRA~1\GEMEIN~1\cmeii\gappmgr.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:13 2005 => Scanning File c:\PROGRA~1\GEMEIN~1\cmeii\GCONTR~1.DLL Sun Jan 16 18:50:13 2005 => File c:\PROGRA~1\GEMEIN~1\cmeii\GCONTR~1.DLL infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:13 2005 => Scanning File c:\PROGRA~1\GEMEIN~1\cmeii\gdwldeng.dll Sun Jan 16 18:50:13 2005 => File c:\PROGRA~1\GEMEIN~1\cmeii\gdwldeng.dll infected by "not-a-virus:AdWare.Gator.3124" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\GIocl.dll Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\GIocl.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\GIOCLC~1.DLL Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\GIOCLC~1.DLL infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:13 2005 => Scanning File c:\PROGRA~1\GEMEIN~1\cmeii\gmtproxy.dll Sun Jan 16 18:50:13 2005 => File c:\PROGRA~1\GEMEIN~1\cmeii\gmtproxy.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\GObjs.dll Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\GObjs.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\GStore.dll Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\GStore.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:13 2005 => Scanning File c:\PROGRA~1\GEMEIN~1\cmeii\GSTORE~1.DLL Sun Jan 16 18:50:13 2005 => File c:\PROGRA~1\GEMEIN~1\cmeii\GSTORE~1.DLL infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\Gtools.dll Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\Gtools.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\GMT\EGGCEN~1.DLL Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\GMT\EGGCEN~1.DLL infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\GMT\EGIEEN~1.DLL Sun Jan 16 18:50:14 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\GMT\EGIEPR~1.DLL Sun Jan 16 18:50:14 2005 => File C:\PROGRA~1\GEMEIN~1\GMT\EGIEPR~1.DLL infected by "not-a-virus:AdWare.Gator.6041" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:14 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\GMT\EGNSEN~1.DLL Sun Jan 16 18:50:14 2005 => File C:\PROGRA~1\GEMEIN~1\GMT\EGNSEN~1.DLL infected by "not-a-virus:AdWare.Gator.5017" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:14 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\GMT\GatorRes.dll Sun Jan 16 18:50:14 2005 => File C:\PROGRA~1\GEMEIN~1\GMT\GatorRes.dll infected by "not-a-virus:AdWare.Gator.6041" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:23 2005 => File C:\WINNT\DOWNLO~1\DeskAdX.dll infected by "not-a-virus:AdWare.WinAD.n" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:25 2005 => File C:\WINNT\system32\eewk.dll infected by "not-a-virus:AdWare.PurityScan.ak" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:30 2005 => File C:\WINNT\system32\mtwirl.dll infected by "Trojan.Win32.StartPage.mz" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:33 2005 => File C:\WINNT\system32\tmpf03.exe infected by "Trojan-Downloader.Win32.Small.agk" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:35 2005 => File C:\WINNT\system32\x0Cw0.dll infected by "Backdoor.Win32.Haxdoor.ay" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:37 2005 => File C:\WINNT\system32\eewk.dll infected by "not-a-virus:AdWare.PurityScan.ak" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:37 2005 => File C:\WINNT\system32\mtwirl.dll infected by "Trojan.Win32.StartPage.mz" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:43 2005 => File C:\PROGRA~2\DESKAD~1\DESKAD~2.EXE infected by "not-a-virus:AdWare.WinAD.m" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:43 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\CMESys.exe infected by "not-a-virus:AdWare.Gator.6034" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:57 2005 => File C:\WINNT\loadnew.exe infected by "TrojanDownloader.Win32.Small.yx" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:57 2005 => File C:\WINNT\hosts infected by "Trojan.Win32.Qhost.k" Virus. Action Taken: No Action Taken. Sun Jan 16 18:50:57 2005 => File C:\WINNT\loadclean.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: No Action Taken. Sun Jan 16 18:51:59 2005 => File C:\WINNT\system32\tmpf03.exe infected by "Trojan-Downloader.Win32.Small.agk" Virus. Action Taken: No Action Taken. Sun Jan 16 18:51:59 2005 => File C:\WINNT\system32\lsp.dll infected by "not-a-virus:AdWare.Sahat.f" Virus. Action Taken: No Action Taken. Sun Jan 16 18:52:00 2005 => File C:\WINNT\system32\x0Cw0.dll infected by "Backdoor.Win32.Haxdoor.ay" Virus. Action Taken: No Action Taken. Sun Jan 16 18:52:11 2005 => File C:\DOKUME~1\Andreas\LOKALE~1\Temp\sp.html infected by "Trojan.JS.StartPage.u" Virus. Action Taken: No Action Taken. Sun Jan 16 18:52:18 2005 => File C:\DOKUME~1\Andreas\LOKALE~1\TEMPOR~1\Content.IE5\2J63EBS3\a679a0[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken. Sun Jan 16 18:52:18 2005 => Total Disinfected Files: 0 |
Zitat:
|
Au backe.. Das ist ja super.. *ironisch gemeint* Und warum?? Weil man männer an den PC lässt.. :lach: :p Trotzdem vielen vielen dank für die super und vorallem schnelle hilfe.. Dann werd ich das mal gleich anpacken.. |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 14:40 Uhr. |
Copyright ©2000-2024, Trojaner-Board