Trojan.Favadd und viele andere Bazillen!!!Bitte um Hilfe.weil ich ein Mädchen bin*g*
 

hallo erstmal an alle!!! Ich bin am rande der verzweiflung.Bin eine absolute Pc-laie.habe vor drei tagen von meinem(mittlerweile von der platte geputztem Norton)eine virusmeldung erhalten.Es wurde mitgeteilt das ein trojan,favadd gelöscht erkannt und gelöscht wurde.daraufhin wollte ich mit Ok bestätigen aber es tat sich diese meldung immer wieder auf.bin daraufhin sofort aus dem netz.später bemerkte ich das es sich um 3erlei meldungen handelte.1. virus gelöscht,2. zugriff verweigert und 3. konnte nicht gelöscht werden.naja um die ganze sache abzukürzen,nach 2 tagenhin und her und 1000 ratschlägen von "sogenannten" Pc-kennern,habe ich dann Norton deinstalliert,habe spybot,hijackthis und e-scan drüber laufen lassen.Gefunden wurde so einiges.nur weiss ich jetzt nicht was ich damit anfangen soll und wie ich die Seuche von meinem rechner dauerhaft(und FÜR MICH ALS MÄDCHEN verständlich)entfernen kann!!!Ich weiss mir echt keinen rat mehr!Habe die letzte nacht vor dem pc verbracht,und nun versteh ich nur noch bahnhof*nervösheul*Vielleicht gibt es ja jemandem dem es nichts ausmacht mir die schritte wie für eine 3jährige zu erklären*g*meine nerven sind am ende!! :confused:
MfG Tinaaaaaaaa

Hallo,
poste ein HijackThis Logfile:
kurze Beschreibung
ausführliche Beschreibung


Was wurde wo von eScan gefunden?
"öffne die mwav.log (oder die mwXface.log) -> Bearbeiten -> Suchen -> infected oder tagged eingeben -> Weitersuchen -> Treffer markieren/kopieren und ins Forum übertragen." (Zitat Cidre)


Poste außerdem folgendes aus der mwav.log (steht ganz am Ende):



PS: In der Zeit hättest du deinen Pc auch neu aufsetzen können ;)

uiiiiiiiii,es hat jemand geantwortet*megafreu*.....wie schon gesagt,ich bin ne absolute pc-laie,froh das cih weiss wie der rechner in betrieb genommen wird*g*, und mit den nerven fast am ende.Jeder "selbsternannte Pc-kenner" in meinem bekanntenkreis hat dann komischerweise doch keine Ahnung oder keine Zeit bei und für mein "Problem"...naja,was solls,vielleicht kann man mir hier nun weiterhelfen........

das logfile von hijackthis im abgesicherten modus und systemwiederhertellung deaktiviert??war richtig????*grübeldummfrag*

Logfile of HijackThis v1.99.1
Scan saved at 16:21:23, on 18.02.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programme\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.de/0SEDEDE/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.internetcologne.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/cust...ch/search.html
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Programme\Yahoo!\Messenger\ycomp5_1_6_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.2001.0001\de\msntb.dll
O3 - Toolbar: Yahoo! Assistent - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Messenger\ycomp5_1_6_0.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.2001.0001\de\msntb.dll
O4 - HKLM\..\Run: [Agent] C:\Programme\Medion\PowerVCR II\Agent.exe
O4 - HKLM\..\Run: [Remote_Agent] C:\Programme\Medion\PowerVCR II\RemoteAgent.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
O4 - HKLM\..\Run: [InCD] C:\Programme\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [WinDSL MTU-Adjust] WinDSL_MTU.exe
O4 - HKLM\..\Run: [ToUcamVProperty] C:\Programme\Philips ToUcam Camera\VProperty.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Programme\Netropa\Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min
O4 - HKCU\..\Run: [a-squared] "C:\Programme\a2\a2guard.exe"
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Reality Fusion GameCam SE.lnk = ?
O4 - Global Startup: STK007 PNP Monitor.lnk = ?
O4 - Global Startup: Ulead Photo Express 3.0 SE Calendar Checker.lnk = C:\Programme\Ulead Systems\Ulead Photo Express 3.0 SE\CalCheck.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: JT's Blocks - http://download.games.yahoo.com/game...s/y/blt1_x.cab
O16 - DPF: Yahoo! Backgammon - http://download.games.yahoo.com/game...ts/y/at0_x.cab
O16 - DPF: Yahoo! Canasta - http://download.games.yahoo.com/game...ts/y/yt1_x.cab
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com.../c381/chat.cab
O16 - DPF: Yahoo! Chinese Checkers - http://download.games.yahoo.com/game...s/y/cct0_x.cab
O16 - DPF: Yahoo! Dots - http://download.games.yahoo.com/game...s/y/dtt1_x.cab
O16 - DPF: Yahoo! Fleet - http://download.games.yahoo.com/game.../y/fltt3_x.cab
O16 - DPF: Yahoo! Graffiti - http://download.games.yahoo.com/game...s/y/grt5_x.cab
O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/game...ts/y/tt3_x.cab
O16 - DPF: Yahoo! MahJong - http://download.games.yahoo.com/game...ts/y/ot0_x.cab
O16 - DPF: Yahoo! MahJong Solitaire - http://download.games.yahoo.com/game.../y/mjst3_x.cab
O16 - DPF: Yahoo! Mensch - http://download.games.yahoo.com/game...s/y/mat3_x.cab
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/game...s/y/pote_x.cab
O16 - DPF: Yahoo! Reversi - http://download.games.yahoo.com/game...ts/y/rt0_x.cab
O16 - DPF: {1E50B82A-0D78-48B9-97EC-391B2F81CE8A} - http://acxd.freeload.cc/ieloader.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com...45/yacscom.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/S...in/AvSniff.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/048f6f2b...dxIE601_de.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yaho...tocomplete.cab
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/z...ylomloader.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Assistent) - http://us.dl1.yimg.com/download.comp...bio5_1_6_0.cab
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Programme\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Programme\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

das ergebnis von e-scan folg sofort............

> Scanning File C:\DOKUME~1\xyz~1\LOKALE~1\TEMPOR~1\Content.IE5\49W7QDYP\infected6xz[1].gif
> Scanning File C:\Dokumente und Einstellungen\xyz\Lokale Einstellungen\Temporary Internet Files\Content.IE5\49W7QDYP\infected6xz[1].gif
> Scanning Folder: C:\Programme\AVPersonal\INFECTED\*.*
> File C:\Programme\STK007\STK007D.exe infected by "not-a-virus:AdWare.Cres" Virus. Action Taken: No Action Taken.
> File C:\Programme\STK007\STK007K.exe infected by "not-a-virus:AdWare.Cres" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00000293. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00000293. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00000298. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00000298. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00132880. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00132880. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00132881. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00132881. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00132882. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00132882. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00132883. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00132883. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00132988. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00132988. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00132989. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00132989. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00132990. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00132990. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00132991. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00132991. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00133020. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00133020. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00133021. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00133021. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00133022. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00133022. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00133023. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00133023. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191887. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191887. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191898. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191898. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191899. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191899. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191900. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191900. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> File C:\RECYCLER\NPROTECT\00191901. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191902. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191902. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191903. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191903. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191904. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191904. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191905. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191905. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191906. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191906. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191907. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191907. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191908. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191908. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191909. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191909. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191910. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191910. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191911. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191911. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191912. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191912. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191913. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191913. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191914. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191914. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191915. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191915. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191916. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191916. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191917. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191917. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191918. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191918. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191919. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191919. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191920. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191920. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191921. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191921. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191922. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191922. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191923. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191923. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191924. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191924. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191925. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191925. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191926. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191926. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191927. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191927. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191928. possibly infected and removed by background antivirus package!




................................................................................................................................................

> File C:\RECYCLER\NPROTECT\00191928. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191929. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191929. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00191930. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00191930. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00378396. possibly infected and removed by background antivirus package!.....geht weiter bis 00191942
..........
.............weiter bis>File C:\RECYCLER\NPROTECT\00191942

> File C:\RECYCLER\NPROTECT\00378396. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00378398. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00378398. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00378405. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00378405. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00378406. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00378406. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00524151. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00524151. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> C:\RECYCLER\NPROTECT\00524152. possibly infected and removed by background antivirus package!
> File C:\RECYCLER\NPROTECT\00524152. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP172\A0045215.EXE infected by "Trojan-Dropper.Win32.Delf.fd" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048264.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048268.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048269.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048270.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048271.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Acti
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048272.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.

> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048273.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048274.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048275.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048276.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048277.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048278.EXE infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0048284.exe infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0050717.dll infected by "Trojan.Win32.Dialer.fu" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0050719.EXE infected by "Trojan-Dropper.Win32.Delf.fd" Virus. Action Taken: No Action Taken.
> File C:\System Volume Information\_restore{DE2A37C4-8777-450D-9EAA-016266EFC44C}\RP204\A0050720.exe infected by "not-a-virus:Porn-Dialer.Win32.Intexdial" Virus. Action Taken: No Action Taken.
> File C:\WINDOWS\Temp\tmp5B02.tmp infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
> File C:\WINDOWS\Temp\tmp799.tmp infected by "Trojan.Win32.Favadd.m" Virus. Action Taken: No Action Taken.
Fri Feb 18 00:38:15 2005 => ***** Scanning complete. *****

Fri Feb 18 00:38:15 2005 => Total Files Scanned: 78259
Fri Feb 18 00:38:15 2005 => Total Virus(es) Found: 91
Fri Feb 18 00:38:15 2005 => Total Disinfected Files: 0
Fri Feb 18 00:38:15 2005 => Total Files Renamed: 0
Fri Feb 18 00:38:15 2005 => Total Deleted Files: 0
Fri Feb 18 00:38:15 2005 => Total Errors: 161
Fri Feb 18 00:38:15 2005 => Time Elapsed: 02:46:49
Fri Feb 18 00:38:15 2005 => Virus Database Date: 2005/02/14
Fri Feb 18 00:38:15 2005 => Virus Database Count: 118236

Fri Feb 18 00:38:15 2005 => Scan Completed.


war doch richtig nur die infectet files zu posten,oder???
ohje,in meinem kopf ist nur noch wirrwarr.........
MfG Tinaaaaaaaaaa