Hallo @All,

hab da mal ne dringende Frage an die Spezialisten hier.

Meine Jungs haben mir durch Downloads ect den oben genannten Trojaner eingefangen.

"Sitzen" tut er im "System32" in hauptsächlich 2 Dateien.

Antivir erkennt ihn,loggt ihn,schafft es aber nicht,ihn rauszuschmeissen...is ja auch (eigentlich) klar.
Beim Spyware Doctor von Google und noch so einem Programm stürzt der komplette Rechner ab,sobald darauf zugegriffen wird.
"Vundofix" findet zwar einige Dateinen,hängt sich aber dann irgendwann mal auf und gibt keine Rückmeldungen mehr.

So langsam schwant mir Böses.

Da hilft nur noch die Total-OP...oder gibt es noch Rettung?*heul*

Moin Biene,

auf die Schnelle: Probier es mal im abgesicherten Modus.

Edit:

http://forum.avira.com/thread.php?threadid=13843

Viel Erfolg.

[ Editiert von Inessi am 28.01.08 11:51 ]

Das da hat ein Programm "ausgespuckt"...nur leider kann ich damit nu gar nix anfangen:





[01/28/2008, 5:57:16] - VirtumundoBeGone v1.5 ( "C:Dokumente und EinstellungentestDesktopVirtumundoBeGone.exe" )
[01/28/2008, 5:57:25] - Detected System Information:
[01/28/2008, 5:57:25] - Windows Version: 5.1.2600,
[01/28/2008, 5:57:25] - Current Username: test (Admin)
[01/28/2008, 5:57:25] - Windows is in NORMAL mode.
[01/28/2008, 5:57:25] - Searching for Browser Helper Objects:
[01/28/2008, 5:57:25] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[01/28/2008, 5:57:25] - BHO 2: {3396E986-FD1C-4BE2-B0D7-C85827DC0362} ()
[01/28/2008, 5:57:25] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:25] - Checking for HKLM...WinlogonNotifyddcyx
[01/28/2008, 5:57:25] - Key not found: HKLM...WinlogonNotifyddcyx, continuing.
[01/28/2008, 5:57:25] - BHO 3: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[01/28/2008, 5:57:25] - BHO 4: {7b49bf43-8e62-4bc5-967e-1d60f04e62e4} ()
[01/28/2008, 5:57:25] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:25] - Checking for HKLM...WinlogonNotifytoypypjx
[01/28/2008, 5:57:25] - Key not found: HKLM...WinlogonNotifytoypypjx, continuing.
[01/28/2008, 5:57:25] - BHO 5: {85911752-BC96-4fff-9121-6EB9D8F438E1} (Flash Module)
[01/28/2008, 5:57:25] - BHO 6: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[01/28/2008, 5:57:25] - BHO 7: {A95B2816-1D7E-4561-A202-68C0DE02353A} ()
[01/28/2008, 5:57:26] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:26] - Checking for HKLM...WinlogonNotifyhnkkwbem
[01/28/2008, 5:57:26] - Found: HKLM...WinlogonNotifyhnkkwbem - This is probably Virtumundo.
[01/28/2008, 5:57:26] - Assigning {A95B2816-1D7E-4561-A202-68C0DE02353A} MSEvents Object
[01/28/2008, 5:57:26] - BHO list has been changed! Starting over...
[01/28/2008, 5:57:26] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[01/28/2008, 5:57:26] - BHO 2: {3396E986-FD1C-4BE2-B0D7-C85827DC0362} ()
[01/28/2008, 5:57:26] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:26] - Checking for HKLM...WinlogonNotifyddcyx
[01/28/2008, 5:57:26] - Key not found: HKLM...WinlogonNotifyddcyx, continuing.
[01/28/2008, 5:57:26] - BHO 3: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[01/28/2008, 5:57:26] - BHO 4: {7b49bf43-8e62-4bc5-967e-1d60f04e62e4} ()
[01/28/2008, 5:57:26] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:26] - Checking for HKLM...WinlogonNotifytoypypjx
[01/28/2008, 5:57:26] - Key not found: HKLM...WinlogonNotifytoypypjx, continuing.
[01/28/2008, 5:57:26] - BHO 5: {85911752-BC96-4fff-9121-6EB9D8F438E1} (Flash Module)
[01/28/2008, 5:57:26] - BHO 6: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[01/28/2008, 5:57:26] - BHO 7: {A95B2816-1D7E-4561-A202-68C0DE02353A} (MSEvents Object)
[01/28/2008, 5:57:26] - ALERT: Found MSEvents Object!
[01/28/2008, 5:57:26] - BHO 8: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[01/28/2008, 5:57:26] - BHO 9: {B5A83A59-8BE9-471F-80B1-EA6EE5F22189} ()
[01/28/2008, 5:57:26] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:26] - Checking for HKLM...WinlogonNotifyhggghhg
[01/28/2008, 5:57:26] - Found: HKLM...WinlogonNotifyhggghhg - This is probably Virtumundo.
[01/28/2008, 5:57:26] - Assigning {B5A83A59-8BE9-471F-80B1-EA6EE5F22189} MSEvents Object
[01/28/2008, 5:57:26] - BHO list has been changed! Starting over...
[01/28/2008, 5:57:26] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[01/28/2008, 5:57:26] - BHO 2: {3396E986-FD1C-4BE2-B0D7-C85827DC0362} ()
[01/28/2008, 5:57:26] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:26] - Checking for HKLM...WinlogonNotifyddcyx
[01/28/2008, 5:57:26] - Key not found: HKLM...WinlogonNotifyddcyx, continuing.
[01/28/2008, 5:57:26] - BHO 3: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[01/28/2008, 5:57:26] - BHO 4: {7b49bf43-8e62-4bc5-967e-1d60f04e62e4} ()
[01/28/2008, 5:57:26] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:26] - Checking for HKLM...WinlogonNotifytoypypjx
[01/28/2008, 5:57:26] - Key not found: HKLM...WinlogonNotifytoypypjx, continuing.
[01/28/2008, 5:57:26] - BHO 5: {85911752-BC96-4fff-9121-6EB9D8F438E1} (Flash Module)
[01/28/2008, 5:57:26] - BHO 6: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[01/28/2008, 5:57:27] - BHO 7: {A95B2816-1D7E-4561-A202-68C0DE02353A} (MSEvents Object)
[01/28/2008, 5:57:27] - ALERT: Found MSEvents Object!
[01/28/2008, 5:57:27] - BHO 8: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[01/28/2008, 5:57:27] - BHO 9: {B5A83A59-8BE9-471F-80B1-EA6EE5F22189} (MSEvents Object)
[01/28/2008, 5:57:27] - ALERT: Found MSEvents Object!
[01/28/2008, 5:57:27] - BHO 10: {d869742a-e5d2-4624-96c7-aae26170665e} ()
[01/28/2008, 5:57:27] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:27] - No filename found. Continuing.
[01/28/2008, 5:57:27] - BHO 11: {E8B31A72-AACE-412D-AA2C-D03FA6FCCDEF} ()
[01/28/2008, 5:57:27] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:27] - No filename found. Continuing.
[01/28/2008, 5:57:27] - BHO 12: {F64BC69A-00C4-4ADE-BE3D-23E289EF7FA7} ()
[01/28/2008, 5:57:27] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:27] - No filename found. Continuing.
[01/28/2008, 5:57:27] - Finished Searching Browser Helper Objects
[01/28/2008, 5:57:27] - *** Detected MSEvents Object
[01/28/2008, 5:57:27] - Trying to remove MSEvents Object...
[01/28/2008, 5:57:28] - Terminating Process: IEXPLORE.EXE
[01/28/2008, 5:57:29] - Terminating Process: RUNDLL32.EXE
[01/28/2008, 5:57:29] - Disabling Automatic Shell Restart
[01/28/2008, 5:57:29] - Terminating Process: EXPLORER.EXE
[01/28/2008, 5:57:29] - Suspending the NT Session Manager System Service
[01/28/2008, 5:57:30] - Terminating Windows NT Logon/Logoff Manager
[01/28/2008, 5:57:30] - Re-enabling Automatic Shell Restart
[01/28/2008, 5:57:30] - File to disable: C:WINDOWSSystem32hnkkwbem.dll
[01/28/2008, 5:57:30] - Removing HKLM...Browser Helper Objects{A95B2816-1D7E-4561-A202-68C0DE02353A}
[01/28/2008, 5:57:30] - Removing HKCRCLSID{A95B2816-1D7E-4561-A202-68C0DE02353A}
[01/28/2008, 5:57:30] - Adding Kill Bit for ActiveX for GUID: {A95B2816-1D7E-4561-A202-68C0DE02353A}
[01/28/2008, 5:57:31] - Deleting ATLEvents/MSEvents Registry entries
[01/28/2008, 5:57:31] - Removing HKLM...WinlogonNotifyhnkkwbem
[01/28/2008, 5:57:31] - Searching for Browser Helper Objects:
[01/28/2008, 5:57:31] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[01/28/2008, 5:57:31] - BHO 2: {3396E986-FD1C-4BE2-B0D7-C85827DC0362} ()
[01/28/2008, 5:57:31] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:31] - Checking for HKLM...WinlogonNotifyddcyx
[01/28/2008, 5:57:31] - Key not found: HKLM...WinlogonNotifyddcyx, continuing.
[01/28/2008, 5:57:31] - BHO 3: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[01/28/2008, 5:57:31] - BHO 4: {7b49bf43-8e62-4bc5-967e-1d60f04e62e4} ()
[01/28/2008, 5:57:31] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:31] - Checking for HKLM...WinlogonNotifytoypypjx
[01/28/2008, 5:57:31] - Key not found: HKLM...WinlogonNotifytoypypjx, continuing.
[01/28/2008, 5:57:31] - BHO 5: {85911752-BC96-4fff-9121-6EB9D8F438E1} (Flash Module)
[01/28/2008, 5:57:31] - BHO 6: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[01/28/2008, 5:57:31] - BHO 7: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[01/28/2008, 5:57:31] - BHO 8: {B5A83A59-8BE9-471F-80B1-EA6EE5F22189} (MSEvents Object)
[01/28/2008, 5:57:31] - ALERT: Found MSEvents Object!
[01/28/2008, 5:57:31] - BHO 9: {d869742a-e5d2-4624-96c7-aae26170665e} ()
[01/28/2008, 5:57:31] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:31] - No filename found. Continuing.
[01/28/2008, 5:57:31] - BHO 10: {E8B31A72-AACE-412D-AA2C-D03FA6FCCDEF} ()
[01/28/2008, 5:57:31] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:31] - No filename found. Continuing.
[01/28/2008, 5:57:31] - BHO 11: {F64BC69A-00C4-4ADE-BE3D-23E289EF7FA7} ()
[01/28/2008, 5:57:31] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:31] - No filename found. Continuing.
[01/28/2008, 5:57:31] - Finished Searching Browser Helper Objects
[01/28/2008, 5:57:31] - *** Detected MSEvents Object
[01/28/2008, 5:57:31] - Trying to remove MSEvents Object...
[01/28/2008, 5:57:32] - Terminating Process: IEXPLORE.EXE
[01/28/2008, 5:57:33] - Terminating Process: RUNDLL32.EXE
[01/28/2008, 5:57:33] - Disabling Automatic Shell Restart
[01/28/2008, 5:57:33] - Terminating Process: EXPLORER.EXE
[01/28/2008, 5:57:33] - Suspending the NT Session Manager System Service
[01/28/2008, 5:57:33] - Terminating Windows NT Logon/Logoff Manager
[01/28/2008, 5:57:33] - Re-enabling Automatic Shell Restart
[01/28/2008, 5:57:33] - File to disable: C:WINDOWSSystem32hggghhg.dll
[01/28/2008, 5:57:33] - Renaming C:WINDOWSSystem32hggghhg.dll -> C:WINDOWSSystem32hggghhg.dll.vir
[01/28/2008, 5:57:33] - File successfully renamed!
[01/28/2008, 5:57:34] - Removing HKLM...Browser Helper Objects{B5A83A59-8BE9-471F-80B1-EA6EE5F22189}
[01/28/2008, 5:57:34] - Removing HKCRCLSID{B5A83A59-8BE9-471F-80B1-EA6EE5F22189}
[01/28/2008, 5:57:34] - Adding Kill Bit for ActiveX for GUID: {B5A83A59-8BE9-471F-80B1-EA6EE5F22189}
[01/28/2008, 5:57:34] - Deleting ATLEvents/MSEvents Registry entries
[01/28/2008, 5:57:34] - Removing HKLM...WinlogonNotifyhggghhg
[01/28/2008, 5:57:34] - Searching for Browser Helper Objects:
[01/28/2008, 5:57:34] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[01/28/2008, 5:57:34] - BHO 2: {3396E986-FD1C-4BE2-B0D7-C85827DC0362} ()
[01/28/2008, 5:57:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:34] - Checking for HKLM...WinlogonNotifyddcyx
[01/28/2008, 5:57:34] - Key not found: HKLM...WinlogonNotifyddcyx, continuing.
[01/28/2008, 5:57:34] - BHO 3: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[01/28/2008, 5:57:34] - BHO 4: {7b49bf43-8e62-4bc5-967e-1d60f04e62e4} ()
[01/28/2008, 5:57:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:34] - Checking for HKLM...WinlogonNotifytoypypjx
[01/28/2008, 5:57:34] - Key not found: HKLM...WinlogonNotifytoypypjx, continuing.
[01/28/2008, 5:57:34] - BHO 5: {85911752-BC96-4fff-9121-6EB9D8F438E1} (Flash Module)
[01/28/2008, 5:57:34] - BHO 6: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[01/28/2008, 5:57:34] - BHO 7: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[01/28/2008, 5:57:34] - BHO 8: {d869742a-e5d2-4624-96c7-aae26170665e} ()
[01/28/2008, 5:57:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:34] - No filename found. Continuing.
[01/28/2008, 5:57:34] - BHO 9: {E8B31A72-AACE-412D-AA2C-D03FA6FCCDEF} ()
[01/28/2008, 5:57:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:34] - No filename found. Continuing.
[01/28/2008, 5:57:34] - BHO 10: {F64BC69A-00C4-4ADE-BE3D-23E289EF7FA7} ()
[01/28/2008, 5:57:34] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 5:57:34] - No filename found. Continuing.
[01/28/2008, 5:57:34] - Finished Searching Browser Helper Objects
[01/28/2008, 5:57:34] - Finishing up...
[01/28/2008, 5:57:34] - A restart is needed.
[01/28/2008, 5:57:57] - Attempting to Restart via STOP error (Blue Screen!)

[01/28/2008, 6:01:24] - VirtumundoBeGone v1.5 ( "C:Dokumente und EinstellungentestDesktopVirtumundoBeGone.exe" )
[01/28/2008, 6:01:33] - Detected System Information:
[01/28/2008, 6:01:33] - Windows Version: 5.1.2600,
[01/28/2008, 6:01:33] - Current Username: test (Admin)
[01/28/2008, 6:01:33] - Windows is in NORMAL mode.
[01/28/2008, 6:01:33] - Searching for Browser Helper Objects:
[01/28/2008, 6:01:33] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[01/28/2008, 6:01:33] - BHO 2: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[01/28/2008, 6:01:33] - BHO 3: {7b49bf43-8e62-4bc5-967e-1d60f04e62e4} ()
[01/28/2008, 6:01:33] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 6:01:33] - Checking for HKLM...WinlogonNotifytoypypjx
[01/28/2008, 6:01:33] - Key not found: HKLM...WinlogonNotifytoypypjx, continuing.
[01/28/2008, 6:01:33] - BHO 4: {85911752-BC96-4fff-9121-6EB9D8F438E1} (Flash Module)
[01/28/2008, 6:01:33] - BHO 5: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[01/28/2008, 6:01:33] - BHO 6: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[01/28/2008, 6:01:33] - BHO 7: {D7F759DC-E0B5-41AB-9792-98F6575637BB} ()
[01/28/2008, 6:01:33] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 6:01:33] - Checking for HKLM...WinlogonNotifyddcyx
[01/28/2008, 6:01:33] - Key not found: HKLM...WinlogonNotifyddcyx, continuing.
[01/28/2008, 6:01:33] - BHO 8: {d869742a-e5d2-4624-96c7-aae26170665e} ()
[01/28/2008, 6:01:33] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 6:01:33] - No filename found. Continuing.
[01/28/2008, 6:01:33] - BHO 9: {E8B31A72-AACE-412D-AA2C-D03FA6FCCDEF} ()
[01/28/2008, 6:01:33] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 6:01:33] - No filename found. Continuing.
[01/28/2008, 6:01:33] - BHO 10: {F64BC69A-00C4-4ADE-BE3D-23E289EF7FA7} ()
[01/28/2008, 6:01:33] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 6:01:33] - No filename found. Continuing.
[01/28/2008, 6:01:33] - Finished Searching Browser Helper Objects
[01/28/2008, 6:01:33] - Finishing up...
[01/28/2008, 6:01:33] - Nothing found! Exiting...

[01/28/2008, 6:28:05] - VirtumundoBeGone v1.5 ( "C:Dokumente und EinstellungentestDesktopVirtumundoBeGone.exe" )
[01/28/2008, 6:28:11] - Detected System Information:
[01/28/2008, 6:28:11] - Windows Version: 5.1.2600,
[01/28/2008, 6:28:11] - Current Username: test (Admin)
[01/28/2008, 6:28:11] - Windows is in NORMAL mode.
[01/28/2008, 6:28:12] - Searching for Browser Helper Objects:
[01/28/2008, 6:28:12] - BHO 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class)
[01/28/2008, 6:28:12] - BHO 2: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class)
[01/28/2008, 6:28:12] - BHO 3: {7b49bf43-8e62-4bc5-967e-1d60f04e62e4} ()
[01/28/2008, 6:28:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 6:28:12] - Checking for HKLM...WinlogonNotifytoypypjx
[01/28/2008, 6:28:12] - Key not found: HKLM...WinlogonNotifytoypypjx, continuing.
[01/28/2008, 6:28:12] - BHO 4: {85911752-BC96-4fff-9121-6EB9D8F438E1} (Flash Module)
[01/28/2008, 6:28:12] - BHO 5: {9030D464-4C02-4ABF-8ECC-5164760863C6} (Windows Live Sign-in Helper)
[01/28/2008, 6:28:12] - BHO 6: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} (Google Toolbar Notifier BHO)
[01/28/2008, 6:28:12] - BHO 7: {D7F759DC-E0B5-41AB-9792-98F6575637BB} ()
[01/28/2008, 6:28:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 6:28:12] - Checking for HKLM...WinlogonNotifyddcyx
[01/28/2008, 6:28:12] - Key not found: HKLM...WinlogonNotifyddcyx, continuing.
[01/28/2008, 6:28:12] - BHO 8: {d869742a-e5d2-4624-96c7-aae26170665e} ()
[01/28/2008, 6:28:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 6:28:12] - No filename found. Continuing.
[01/28/2008, 6:28:12] - BHO 9: {E8B31A72-AACE-412D-AA2C-D03FA6FCCDEF} ()
[01/28/2008, 6:28:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 6:28:12] - No filename found. Continuing.
[01/28/2008, 6:28:12] - BHO 10: {F64BC69A-00C4-4ADE-BE3D-23E289EF7FA7} ()
[01/28/2008, 6:28:12] - WARNING: BHO has no default name. Checking for Winlogon reference.
[01/28/2008, 6:28:12] - No filename found. Continuing.
[01/28/2008, 6:28:12] - Finished Searching Browser Helper Objects
[01/28/2008, 6:28:12] - Finishing up...
[01/28/2008, 6:28:12] - Nothing found! Exiting...

Hallo Inessi,

Danke für die schnelle Antwort.
Das hab ich Samstag schon probiert...hat leider auch nicht geklappt.

biene,

dieser virus scheint ein hartnäckiger zu sein, viele haben problem damit.

es gibt viele online-scanner, vll kann da einer helfen.

viel erfolg.

Hallo Biene

Vundo ist Einer von der Hartnäckigen Sorte. Zäh wie alter Kleister und nicht so schnell von der Platte zu schmeißen.

Bei Symantec kannst Du dir ein Tool holen das mit dem fiesen Ding kurzen Prozeß macht. Guckst Du Hier

Viel Erfolg

Tina

Danke,Tina & Inessi

Soooooooo........der Symantec läuft grad,obwohl ich um Norton und Co. normalerweise einen grossen Bogen mache...deren Programmdateien sind ja noch hartnäckiger als so'n Trojaner.

Jo...schaun mer mal.
Was mich nur wundert,ist,daß dieser Trojaner angeblich Pop-Ups ect. runterlädt (hab ich gelesen) und das hat er bei mir bis dato noch gar nicht gemacht.
Liegt es vielleicht daran,daß ich den IE gar nicht benutze?

An und für sich ist das Ding doch ungefährlich?!?

Dann könnte ich doch auch in friedlicher Co-Existenz mit ihm leben,falls das Tool es nicht schafft,ihn runterzuschmeissen?!?

Also,Symantec war der Meinung,da sei nix.

Hat also nicht geklappt.

Dann hab ich noch dies hier gefunden:

Avenger

Im Moment läuft Antivir...und ich bete und hoffe,daß es das war,denn bis dato ist Ruhe im Stall.

Hi Biene,

probier mal den Link: http://forum.hijackthis.de/showthread.php?t=18415

Sonst bist du vielleicht in einem spezialisierten Forum besser beraten (will dich aber nicht abwimmeln! ); für Avira-Nutzer das hier vielleicht: http://forum.avira.com/index.php

HTH


PS: Seh grad, daß dich Inessi schon auf das Avira-Forum hingewiesen hat; also vergiss es.
Den Link find ich noch testenswert: http://www.virustotal.com/de/
Da kann man eine verdächtige Datei hochladen und die testen mit _allen_ Virenscannern. Interessant...

[ Editiert von fallada am 28.01.08 20:10 ]

Hallo Fallada,

Danke.ich werd mich da mal durchlesen...fürs näxte Mal...obwohl ich meine Jungs jetzt nur noch unter Aufsicht an den Rechner lasse.
Und Torrent und Co. sind gelöscht.

Im Moment ist Ruhe.
Scheinbar hat die manuelle Löschung der befallenen Dateien gereicht.

@Biene

"Torrent und Co. sind gelöscht."

Na, na: Verteufle das nicht!
Is ne super Technologie, und ich nutze die auch (Beispiel: http://de.openoffice.org/downloads/quick.html). Warum sollen z.B. die Entwickler Freier Software alleine auch noch für den Download-Traffic zahlen?

Genauso wie einer, der ein Mobiltelefon kauft, das seltenst dazu benutzt, was in die Luft zu sprengen, ist einer, der BitTorrent benutzt, nicht sofort ein "Raubkopierer"... :-)

Es ist allerdings nicht unbekannt das alle kostenlosen bzw. schlechten Virenscanner p2p Klienten nicht überwachen.Daher gilt geladenes vor der Installation zu scannen.
Noch besser Hände weg !!! Den für nützliche Open Source Software gibt es genug Spiegel Server.Jede deutsche Uni verteilt so z.B Open Office.

Vorsicht auch mit Open-Source Virenscannern. Manche - gerade gegen Trojaner - sind selbst Trojaner. Bekannte Beispiele:

"PAL Spyware Remover"
"SecurePCcleaner"
"SpyAxe,SpySherriff"
"TitanShield"
"WinAntiSpyware"
"Ultimate Cleaner 2007"
"Winfixer"

Gute Tools ohne Spione:

"Spybot Search&Destroy" (Mein Favorit)
"AVG Anti-Spyware) (Arbeitet zudem gut mit AVG Virenscanner zusammen.
"Ad-Aware Free"

Quelle: PCgo 01/08

Hi ,

also meine Jungs laden so ziemlich alles runter,was in freier Wildbahn verfügbar ist....Mucke,Spiele...
Und wenn Mama mal nich ganz genau hinguckt....nun ja,wir verstehen uns...