Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Ungewollte Werbe PopUps im Internet Explorer (https://www.trojaner-board.de/23149-ungewollte-werbe-popups-internet-explorer.html)

Pearthy 08.11.2005 15:43

Okay das ist der findlop, sagt mir überhaupt nichts:

[TRACE] Enumerating jobs and queues
[TRACE] Activating job 'A64D5D6591F6D6E1.job'
[TRACE] Printing all job properties

ApplicationName: 'c:\dokume~1\tl***e\anwend~1\drvpla~1\fastarmytitle.exe'
Parameters: ''
WorkingDirectory: ''
Comment: ''
Creator: 'tl***e'
Priority: NORMAL
MaxRunTime: 259200000 (3d 0:00:00)
IdleWait: 10
IdleDeadline: 60
MostRecentRun: 10/30/2005 13:00:00
NextRun: 11/08/2005 16:00:00
StartError: 0x80070002
ExitCode: 0
Status: SCHED_S_TASK_READY
ScheduledWorkItem Flags:
DeleteWhenDone = 0
Suspend = 0
StartOnlyIfIdle = 0
KillOnIdleEnd = 0
RestartOnIdleResume = 0
DontStartIfOnBatteries = 0
KillIfGoingOnBatteries = 0
RunOnlyIfLoggedOn = 1
SystemRequired = 0
Hidden = 1
TaskFlags: 0

1 Trigger

Trigger 0:
Type: Daily
DaysInterval: 1
StartDate: 06/03/1995
EndDate: 00/00/0000
StartTime: 00:00
MinutesDuration: 1440
MinutesInterval: 60
Flags:
HasEndDate = 0
KillAtDuration = 0
Disabled = 0

Nur mit diesem escan komme ich überhaupt nicht klar. Irgendwie habe ich mich auf der Website zu diesem MWAV total verlaufen und dann kam ich mit diesem abgesicherten Modus nicht klar. Ich hatte dann schon mal einen Scan laufen lassen, hat aber ganz schön lange gedauert. Da er aber schon so einiges gefunden hat werde ich das ganze morgen wenn ich etwas mehr Zeit habe noch mal durchführen. Nur soll ich das ganze Log von MWAV posten? Das ist doch ziemlich lang...

Pearthy 09.11.2005 21:46

So habe einfach nur den glaube ich wichtigsten Teil aus dem Log kopiert:

Wed Nov 09 12:52:01 2005 => Virus Database Date: 2005/11/07
Wed Nov 09 12:52:01 2005 => Virus Database Count: 158608
Wed Nov 09 13:21:34 2005 => AV Library Unloaded (3)...
Wed Nov 09 13:57:40 2005 => **********************************************************
Wed Nov 09 13:57:40 2005 => MicroWorld Anti Virus & Spyware Toolkit Utility.
Wed Nov 09 13:57:40 2005 => Copyright © 2003-2005, MicroWorld Technologies Inc.
Wed Nov 09 13:57:40 2005 => **********************************************************
Wed Nov 09 13:57:40 2005 => Version 7.2.9 (C:\Dokumente und Einstellungen\tlange\Lokale Einstellungen\Temp\mwavscan.com)
Wed Nov 09 13:57:40 2005 => Log File: C:\DOKUME~1\tlange\LOKALE~1\Temp\MWAV.LOG
Wed Nov 09 13:57:40 2005 => Last Scan Date and Time: 09.11.2005 10:24:08
Wed Nov 09 13:57:40 2005 => MWAV Registered: FALSE.
Wed Nov 09 13:57:40 2005 => MWAV Mode: Only Scan files.
Wed Nov 09 13:57:43 2005 => AV Library Loaded...
Wed Nov 09 13:57:43 2005 => MWAV doing self scanning...
Wed Nov 09 13:57:43 2005 => Scanning File C:\DOKUME~1\tlange\LOKALE~1\Temp\kavss.exe
Wed Nov 09 13:57:43 2005 => Scanning File C:\DOKUME~1\tlange\LOKALE~1\Temp\Getvlist.exe
Wed Nov 09 13:57:44 2005 => Scanning File C:\DOKUME~1\tlange\LOKALE~1\Temp\kavss.dll
Wed Nov 09 13:57:44 2005 => Scanning File C:\DOKUME~1\tlange\LOKALE~1\Temp\kavssdi.dll
Wed Nov 09 13:57:44 2005 => Scanning File C:\DOKUME~1\tlange\LOKALE~1\Temp\kavssi.dll
Wed Nov 09 13:57:44 2005 => Scanning File C:\DOKUME~1\tlange\LOKALE~1\Temp\kavvlg.dll
Wed Nov 09 13:57:44 2005 => Scanning File C:\DOKUME~1\tlange\LOKALE~1\Temp\msvlclnt.dll
Wed Nov 09 13:57:44 2005 => Scanning File C:\DOKUME~1\tlange\LOKALE~1\Temp\ipc.dll
Wed Nov 09 13:57:44 2005 => Scanning File C:\DOKUME~1\tlange\LOKALE~1\Temp\main.avi
Wed Nov 09 13:57:44 2005 => Scanning File C:\DOKUME~1\tlange\LOKALE~1\Temp\virus.avi
Wed Nov 09 13:57:44 2005 => MWAV files are clean.
Wed Nov 09 13:57:44 2005 => Virus Database Date: 2005/11/07
Wed Nov 09 13:57:44 2005 => Virus Database Count: 158257

Wed Nov 09 13:57:51 2005 => **********************************************************
Wed Nov 09 13:57:51 2005 => MicroWorld Anti Virus & Spyware Toolkit Utility.
Wed Nov 09 13:57:51 2005 => Copyright © 2003-2005, MicroWorld Technologies Inc.
Wed Nov 09 13:57:51 2005 =>
Wed Nov 09 13:57:51 2005 => Support: support@mwti.net
Wed Nov 09 13:57:51 2005 => Web: http://www.mwti.net
Wed Nov 09 13:57:51 2005 => **********************************************************
Wed Nov 09 13:57:51 2005 => Version 7.2.9 (C:\Dokumente und Einstellungen\tlange\Lokale Einstellungen\Temp\mwavscan.com)
Wed Nov 09 13:57:51 2005 => Log File: C:\DOKUME~1\tlange\LOKALE~1\Temp\MWAV.LOG
Wed Nov 09 13:57:51 2005 => User Account: tlange
Wed Nov 09 13:57:51 2005 => Windows Root Folder: C:\WINDOWS
Wed Nov 09 13:57:51 2005 => Windows Sys32 Folder: C:\WINDOWS\system32
Wed Nov 09 13:57:51 2005 => OS: Windows NT

Wed Nov 09 13:57:51 2005 => Options Selected by User:
Wed Nov 09 13:57:51 2005 => Memory Check: Enabled
Wed Nov 09 13:57:51 2005 => Registry Check: Enabled
Wed Nov 09 13:57:51 2005 => StartUp Folder Check: Disabled
Wed Nov 09 13:57:51 2005 => System Folder Check: Disabled
Wed Nov 09 13:57:51 2005 => System Area Check: Disabled
Wed Nov 09 13:57:51 2005 => Services Check: Enabled
Wed Nov 09 13:57:51 2005 => Drive Check: Disabled
Wed Nov 09 13:57:51 2005 => All Drive Check :Enabled
Wed Nov 09 13:57:51 2005 => Folder Check: Disabled

Wed Nov 09 13:58:08 2005 => ***** Scanning Registry and File system for Adware/Spyware *****
Wed Nov 09 13:58:08 2005 => Loading Spyware Signatures from new External Database (Size: 145242).
Wed Nov 09 13:58:08 2005 => Indexed Spyware Databases Successfully Created...

Wed Nov 09 14:07:22 2005 => System found infected with searchexe Spyware/Adware ({807553e5-5146-11d5-a672-00b0d022e945})! Action taken: No Action Taken.
Wed Nov 09 14:07:27 2005 => Offending file found: C:\WINDOWS\TEMP\temporary internet files\content.ie5\bjw2aecl\stylesheet[1].css
Wed Nov 09 14:07:27 2005 => System found infected with whenu.savenow Spyware/Adware (stylesheet[1].css)! Action taken: No Action Taken.

Wed Nov 09 14:07:28 2005 => Offending file found: C:\WINDOWS\TEMP\temporary internet files\content.ie5\ojuittei\ticker[1].js
Wed Nov 09 14:07:28 2005 => System found infected with whenu.savenow Spyware/Adware (ticker[1].js)! Action taken: No Action Taken.

Wed Nov 09 14:07:28 2005 => Offending file found: C:\WINDOWS\TEMP\temporary internet files\content.ie5\tu3iif6s\global[1].js
Wed Nov 09 14:07:28 2005 => System found infected with redv Spyware/Adware (global[1].js)! Action taken: No Action Taken.

Wed Nov 09 14:07:28 2005 => Offending file found: C:\WINDOWS\system32\loader.dll
Wed Nov 09 14:07:28 2005 => System found infected with platform-a adult content dialer Spyware/Adware (loader.dll)! Action taken: No Action Taken.

Wed Nov 09 14:07:30 2005 => Offending file found: C:\Dokumente und Einstellungen\tlange\Lokale Einstellungen\temp\temporary internet files\content.ie5\kdazwl2n\show_ads[2].js
Wed Nov 09 14:07:30 2005 => System found infected with whenu.savenow Spyware/Adware (show_ads[2].js)! Action taken: No Action Taken.

Wed Nov 09 14:07:30 2005 => Offending file found: C:\Dokumente und Einstellungen\tlange\Lokale Einstellungen\temporary internet files\content.ie5\ixk1unq7\common[1].js
Wed Nov 09 14:07:30 2005 => System found infected with whenu.savenow Spyware/Adware (common[1].js)! Action taken: No Action Taken.

Wed Nov 09 14:07:31 2005 => Offending file found: C:\Dokumente und Einstellungen\tlange\Lokale Einstellungen\temporary internet files\content.ie5\k50f85w3\common[1].js
Wed Nov 09 14:07:31 2005 => System found infected with whenu.savenow Spyware/Adware (common[1].js)! Action taken: No Action Taken.

Wed Nov 09 14:07:31 2005 => Offending file found: C:\Dokumente und Einstellungen\tlange\Lokale Einstellungen\temporary internet files\content.ie5\st6ng9ir\common[1].js
Wed Nov 09 14:07:31 2005 => System found infected with whenu.savenow Spyware/Adware (common[1].js)! Action taken: No Action Taken.

Wed Nov 09 14:07:32 2005 => Offending file found: C:\Dokumente und Einstellungen\tlange\Lokale Einstellungen\temporary internet files\content.ie5\u52zad6l\common[1].js
Wed Nov 09 14:07:32 2005 => System found infected with whenu.savenow Spyware/Adware (common[1].js)! Action taken: No Action Taken.

Wed Nov 09 14:07:32 2005 => Offending file found: C:\Dokumente und Einstellungen\tlange\Lokale Einstellungen\Temporary Internet Files\content.ie5\ixk1unq7\common[1].js
Wed Nov 09 14:07:32 2005 => System found infected with whenu.savenow Spyware/Adware (common[1].js)! Action taken: No Action Taken.

Wed Nov 09 14:07:32 2005 => Offending file found: C:\Dokumente und Einstellungen\tlange\Lokale Einstellungen\Temporary Internet Files\content.ie5\k50f85w3\common[1].js
Wed Nov 09 14:07:32 2005 => System found infected with whenu.savenow Spyware/Adware (common[1].js)! Action taken: No Action Taken.

Wed Nov 09 14:07:32 2005 => Offending file found: C:\Dokumente und Einstellungen\tlange\Lokale Einstellungen\Temporary Internet Files\content.ie5\st6ng9ir\common[1].js
Wed Nov 09 14:07:32 2005 => System found infected with whenu.savenow Spyware/Adware (common[1].js)! Action taken: No Action Taken.

Wed Nov 09 14:07:32 2005 => Offending file found: C:\Dokumente und Einstellungen\tlange\Lokale Einstellungen\Temporary Internet Files\content.ie5\u52zad6l\common[1].js
Wed Nov 09 14:07:32 2005 => System found infected with whenu.savenow Spyware/Adware (common[1].js)! Action taken: No Action Taken.

Wed Nov 09 14:07:34 2005 => Offending file found: C:\WINDOWS\iun6002.exe
Wed Nov 09 14:07:34 2005 => System found infected with zipitpro Spyware/Adware (C:\WINDOWS\iun6002.exe)! Action taken: No Action Taken.

Wed Nov 09 14:39:03 2005 => ***** Checking for specific ITW Viruses *****
Wed Nov 09 14:39:03 2005 => Checking for Welchia Virus...
Wed Nov 09 14:39:03 2005 => Checking for LovGate Virus...
Wed Nov 09 14:39:03 2005 => Checking for CodeRed Virus...
Wed Nov 09 14:39:03 2005 => Checking for OpaServ Virus...
Wed Nov 09 14:39:03 2005 => Checking for Sobig.e Virus...
Wed Nov 09 14:39:03 2005 => Checking for Winupie Virus...
Wed Nov 09 14:39:03 2005 => Checking for Swen Virus...
Wed Nov 09 14:39:03 2005 => Checking for JS.Fortnight Virus...
Wed Nov 09 14:39:03 2005 => Checking for Novarg Virus...
Wed Nov 09 14:39:03 2005 => Checking for Pagabot Virus...
Wed Nov 09 14:39:03 2005 => Checking for Parite.b Virus...
Wed Nov 09 14:39:03 2005 => Checking for Parite.a Virus...
Wed Nov 09 14:39:03 2005 => Checking for Adware.SeekSeek Virus...

Wed Nov 09 14:39:03 2005 => ***** Scanning complete. *****

Wed Nov 09 14:39:03 2005 => Total Objects Scanned: 68670
Wed Nov 09 14:39:03 2005 => Total Virus(es) Found: 15
Wed Nov 09 14:39:03 2005 => Total Disinfected Files: 0
Wed Nov 09 14:39:03 2005 => Total Files Renamed: 0
Wed Nov 09 14:39:03 2005 => Total Deleted Objects: 0
Wed Nov 09 14:39:03 2005 => Total Errors: 97
Wed Nov 09 14:39:03 2005 => Time Elapsed: 00:41:08
Wed Nov 09 14:39:03 2005 => Virus Database Date: 2005/11/07
Wed Nov 09 14:39:03 2005 => Virus Database Count: 158257

Wed Nov 09 14:39:03 2005 => Scan Completed.

Pearthy 14.11.2005 15:10

Guckt hier noch jemand rein und kann mir nun noch weiterhelfen? Irgendwie muß ich doch diese Plagegeister endgültig loswerden können, bevor die sich wieder vermehren... :teufel1:

Würde doch gerne wissen was ich jetzt noch machen muß oder ob ich noch mehr posten soll?

Wildone 14.11.2005 15:37

Hallo,
du hast leider das Escan Log in sehr unübersuichtlicher Weise gepostet, besser wäre gewesen du hättest im Log nach den Wörtern "infected" "tagged" und offending gesucht und die jeweiligen Einträge gepostet.
Aber was ich so sehe ist alles harmlos, lösche mal deine temorären Internetdateien "im IE unter extra>>internetoptionen.


Grüße Wildone


Alle Zeitangaben in WEZ +1. Es ist jetzt 22:56 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131