#1
Hallo, ich habe erst im letzten Monat meinen ganzen Rechner wegen einem Trojaner platt machen müssen. Jetzt hab ich schon wieder Probleme...der Rechner bleibt hängen oder es erscheint ein komisches Muster auf dem Bildschirm. Manchmal verändert sich auch einfach die graphische Darstellung der Oberfläche. Escan hat folgende nun Trojan-Downloader.BAT.Ftp.c entdeckt...
Sun Feb 27 10:39:10 2005 => Scanning Folder: C:\WINDOWS\system32\oobe\setup\*.* Sun Feb 27 10:39:15 2005 => Scanning Folder: C:\WINDOWS\system32\ras\*.* Sun Feb 27 10:39:17 2005 => Scanning Folder: C:\WINDOWS\system32\Restore\*.* Sun Feb 27 10:39:22 2005 => Scanning Folder: C:\WINDOWS\system32\Setup\*.* Sun Feb 27 10:39:24 2005 => Scanning Folder: C:\WINDOWS\system32\ShellExt\*.* Sun Feb 27 10:39:26 2005 => Scanning Folder: C:\WINDOWS\system32\spool\*.* Sun Feb 27 10:39:26 2005 => Scanning Folder: C:\WINDOWS\system32\spool\drivers\*.* Sun Feb 27 10:39:26 2005 => Scanning Folder: C:\WINDOWS\system32\spool\drivers\color\*.* Sun Feb 27 10:39:26 2005 => Scanning Folder: C:\WINDOWS\system32\spool\drivers\w32x86\*.* Sun Feb 27 10:39:26 2005 => Scanning Folder: C:\WINDOWS\system32\spool\drivers\w32x86\3\*.* Sun Feb 27 10:39:32 2005 => Scanning Folder: C:\WINDOWS\system32\spool\drivers\w32x86\canonip150039e6\*.* Sun Feb 27 10:39:36 2005 => Scanning Folder: C:\WINDOWS\system32\spool\PRINTERS\*.* Sun Feb 27 10:39:36 2005 => Scanning Folder: C:\WINDOWS\system32\spool\prtprocs\*.* Sun Feb 27 10:39:36 2005 => Scanning Folder: C:\WINDOWS\system32\spool\prtprocs\w32x86\*.* Sun Feb 27 10:39:44 2005 => Scanning Folder: C:\WINDOWS\system32\usmt\*.* Sun Feb 27 10:39:49 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\*.* Sun Feb 27 10:39:51 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\Logs\*.* Sun Feb 27 10:39:52 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\mof\*.* Sun Feb 27 10:39:52 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\mof\bad\*.* Sun Feb 27 10:39:52 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\mof\good\*.* Sun Feb 27 10:39:53 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\Performance\*.* Sun Feb 27 10:39:53 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\Repository\*.* Sun Feb 27 10:39:53 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\Repository\FS\*.* Sun Feb 27 10:39:54 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\snmp\*.* Sun Feb 27 10:39:58 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\xml\*.* Sun Feb 27 10:40:01 2005 => Scanning Folder: C:\WINDOWS\system32\wins\*.* Sun Feb 27 10:40:07 2005 => Scanning Folder: C:\WINDOWS\system32\xircom\*.* Sun Feb 27 10:40:07 2005 => Scanning Folder: C:\WINDOWS\system32\ZoneLabs\*.* Sun Feb 27 10:40:08 2005 => Scanning Folder: C:\WINDOWS\Tasks\*.* Sun Feb 27 10:40:08 2005 => Scanning Folder: C:\WINDOWS\Temp\*.* Sun Feb 27 10:40:10 2005 => Scanning Folder: C:\WINDOWS\twain_32\*.* Sun Feb 27 10:40:10 2005 => Scanning Folder: C:\WINDOWS\Web\*.* Sun Feb 27 10:40:11 2005 => Scanning Folder: C:\WINDOWS\Web\printers\*.* Sun Feb 27 10:40:11 2005 => Scanning Folder: C:\WINDOWS\Web\printers\images\*.* Sun Feb 27 10:40:11 2005 => Scanning Folder: C:\WINDOWS\Web\Wallpaper\*.* Sun Feb 27 10:40:12 2005 => Scanning Folder: C:\WINDOWS\WinSxS\*.* Sun Feb 27 10:40:12 2005 => Scanning Folder: C:\WINDOWS\WinSxS\InstallTemp\*.* Sun Feb 27 10:40:12 2005 => Scanning Folder: C:\WINDOWS\WinSxS\Manifests\*.* Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\Policies\*.* Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\*.* Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\*.* Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\*.* Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\*.* Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\*.* Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\*.* Sun Feb 27 10:40:14 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\*.* Sun Feb 27 10:40:14 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.10.0_x-ww_d8862ba3\*.* Sun Feb 27 10:40:14 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\*.* Sun Feb 27 10:40:14 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.10.0_x-ww_712befd8\*.*
Sun Feb 27 10:40:14 2005 => ***** Checking for specific ITW Viruses ***** Sun Feb 27 10:40:14 2005 => Checking for Welchia Virus... Sun Feb 27 10:40:14 2005 => Checking for LovGate Virus... Sun Feb 27 10:40:14 2005 => Checking for CodeRed Virus... Sun Feb 27 10:40:14 2005 => Checking for OpaServ Virus... Sun Feb 27 10:40:14 2005 => Checking for Sobig.e Virus... Sun Feb 27 10:40:14 2005 => Checking for Winupie Virus... Sun Feb 27 10:40:14 2005 => Checking for Swen Virus... Sun Feb 27 10:40:14 2005 => Checking for JS.Fortnight Virus... Sun Feb 27 10:40:14 2005 => Checking for Novarg Virus... Sun Feb 27 10:40:14 2005 => Checking for Pagabot Virus... Sun Feb 27 10:40:14 2005 => Checking for Parite.b Virus... Sun Feb 27 10:40:14 2005 => Checking for Parite.a Virus...
Sun Feb 27 10:40:14 2005 => ***** Scanning complete. ***** Sun Feb 27 10:40:14 2005 => Total Files Scanned: 30909 Sun Feb 27 10:40:14 2005 => Total Virus(es) Found: 3 Sun Feb 27 10:40:14 2005 => Total Disinfected Files: 0 Sun Feb 27 10:40:14 2005 => Total Files Renamed: 0 Sun Feb 27 10:40:14 2005 => Total Deleted Files: 0 Sun Feb 27 10:40:14 2005 => Total Errors: 2 Sun Feb 27 10:40:14 2005 => Time Elapsed: 00:33:28 Sun Feb 27 10:40:14 2005 => Virus Database Date: 2005/02/25 Sun Feb 27 10:40:14 2005 => Virus Database Count: 119374
Sun Feb 27 10:40:14 2005 => Scan Completed.
File C:\WINDOWS\System32\o infected by "Trojan-Downloader.BAT.Ftp.c" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\o infected by "Trojan-Downloader.BAT.Ftp.c" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\o infected by "Trojan-Downloader.BAT.Ftp.c" Virus. Action Taken: No Action Taken.
Gibt es eine Möglichkeit den Trojan-Downloader.BAT.Ftp.c komplett aus dem System zu löschen? Wie geht das?
Viele Grüße,
ema
Um auf dieses Thema zu ANTWORTEN bitte erst » hier kostenlos registrieren!!
ich habe erst im letzten Monat meinen ganzen Rechner wegen einem Trojaner platt machen müssen. Jetzt hab ich schon wieder Probleme...der Rechner bleibt hängen oder es erscheint ein komisches Muster auf dem Bildschirm. Manchmal verändert sich auch einfach die graphische Darstellung der Oberfläche.
Escan hat folgende nun Trojan-Downloader.BAT.Ftp.c entdeckt...
Sun Feb 27 10:39:10 2005 => Scanning Folder: C:\WINDOWS\system32\oobe\setup\*.*
Sun Feb 27 10:39:15 2005 => Scanning Folder: C:\WINDOWS\system32\ras\*.*
Sun Feb 27 10:39:17 2005 => Scanning Folder: C:\WINDOWS\system32\Restore\*.*
Sun Feb 27 10:39:22 2005 => Scanning Folder: C:\WINDOWS\system32\Setup\*.*
Sun Feb 27 10:39:24 2005 => Scanning Folder: C:\WINDOWS\system32\ShellExt\*.*
Sun Feb 27 10:39:26 2005 => Scanning Folder: C:\WINDOWS\system32\spool\*.*
Sun Feb 27 10:39:26 2005 => Scanning Folder: C:\WINDOWS\system32\spool\drivers\*.*
Sun Feb 27 10:39:26 2005 => Scanning Folder: C:\WINDOWS\system32\spool\drivers\color\*.*
Sun Feb 27 10:39:26 2005 => Scanning Folder: C:\WINDOWS\system32\spool\drivers\w32x86\*.*
Sun Feb 27 10:39:26 2005 => Scanning Folder: C:\WINDOWS\system32\spool\drivers\w32x86\3\*.*
Sun Feb 27 10:39:32 2005 => Scanning Folder: C:\WINDOWS\system32\spool\drivers\w32x86\canonip150039e6\*.*
Sun Feb 27 10:39:36 2005 => Scanning Folder: C:\WINDOWS\system32\spool\PRINTERS\*.*
Sun Feb 27 10:39:36 2005 => Scanning Folder: C:\WINDOWS\system32\spool\prtprocs\*.*
Sun Feb 27 10:39:36 2005 => Scanning Folder: C:\WINDOWS\system32\spool\prtprocs\w32x86\*.*
Sun Feb 27 10:39:44 2005 => Scanning Folder: C:\WINDOWS\system32\usmt\*.*
Sun Feb 27 10:39:49 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\*.*
Sun Feb 27 10:39:51 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\Logs\*.*
Sun Feb 27 10:39:52 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\mof\*.*
Sun Feb 27 10:39:52 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\mof\bad\*.*
Sun Feb 27 10:39:52 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\mof\good\*.*
Sun Feb 27 10:39:53 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\Performance\*.*
Sun Feb 27 10:39:53 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\Repository\*.*
Sun Feb 27 10:39:53 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\Repository\FS\*.*
Sun Feb 27 10:39:54 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\snmp\*.*
Sun Feb 27 10:39:58 2005 => Scanning Folder: C:\WINDOWS\system32\wbem\xml\*.*
Sun Feb 27 10:40:01 2005 => Scanning Folder: C:\WINDOWS\system32\wins\*.*
Sun Feb 27 10:40:07 2005 => Scanning Folder: C:\WINDOWS\system32\xircom\*.*
Sun Feb 27 10:40:07 2005 => Scanning Folder: C:\WINDOWS\system32\ZoneLabs\*.*
Sun Feb 27 10:40:08 2005 => Scanning Folder: C:\WINDOWS\Tasks\*.*
Sun Feb 27 10:40:08 2005 => Scanning Folder: C:\WINDOWS\Temp\*.*
Sun Feb 27 10:40:10 2005 => Scanning Folder: C:\WINDOWS\twain_32\*.*
Sun Feb 27 10:40:10 2005 => Scanning Folder: C:\WINDOWS\Web\*.*
Sun Feb 27 10:40:11 2005 => Scanning Folder: C:\WINDOWS\Web\printers\*.*
Sun Feb 27 10:40:11 2005 => Scanning Folder: C:\WINDOWS\Web\printers\images\*.*
Sun Feb 27 10:40:11 2005 => Scanning Folder: C:\WINDOWS\Web\Wallpaper\*.*
Sun Feb 27 10:40:12 2005 => Scanning Folder: C:\WINDOWS\WinSxS\*.*
Sun Feb 27 10:40:12 2005 => Scanning Folder: C:\WINDOWS\WinSxS\InstallTemp\*.*
Sun Feb 27 10:40:12 2005 => Scanning Folder: C:\WINDOWS\WinSxS\Manifests\*.*
Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\Policies\*.*
Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\Policies\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_x-ww_4e8510ac\*.*
Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\Policies\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_x-ww_5ddad775\*.*
Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\Policies\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_x-ww_a317e4b3\*.*
Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.0.0_x-ww_ff9986d7\*.*
Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\*.*
Sun Feb 27 10:40:13 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.10.0_x-ww_f7fb5805\*.*
Sun Feb 27 10:40:14 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\*.*
Sun Feb 27 10:40:14 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.10.0_x-ww_d8862ba3\*.*
Sun Feb 27 10:40:14 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.0_x-ww_8d353f13\*.*
Sun Feb 27 10:40:14 2005 => Scanning Folder: C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.10.0_x-ww_712befd8\*.*
Sun Feb 27 10:40:14 2005 => ***** Checking for specific ITW Viruses *****
Sun Feb 27 10:40:14 2005 => Checking for Welchia Virus...
Sun Feb 27 10:40:14 2005 => Checking for LovGate Virus...
Sun Feb 27 10:40:14 2005 => Checking for CodeRed Virus...
Sun Feb 27 10:40:14 2005 => Checking for OpaServ Virus...
Sun Feb 27 10:40:14 2005 => Checking for Sobig.e Virus...
Sun Feb 27 10:40:14 2005 => Checking for Winupie Virus...
Sun Feb 27 10:40:14 2005 => Checking for Swen Virus...
Sun Feb 27 10:40:14 2005 => Checking for JS.Fortnight Virus...
Sun Feb 27 10:40:14 2005 => Checking for Novarg Virus...
Sun Feb 27 10:40:14 2005 => Checking for Pagabot Virus...
Sun Feb 27 10:40:14 2005 => Checking for Parite.b Virus...
Sun Feb 27 10:40:14 2005 => Checking for Parite.a Virus...
Sun Feb 27 10:40:14 2005 => ***** Scanning complete. *****
Sun Feb 27 10:40:14 2005 => Total Files Scanned: 30909
Sun Feb 27 10:40:14 2005 => Total Virus(es) Found: 3
Sun Feb 27 10:40:14 2005 => Total Disinfected Files: 0
Sun Feb 27 10:40:14 2005 => Total Files Renamed: 0
Sun Feb 27 10:40:14 2005 => Total Deleted Files: 0
Sun Feb 27 10:40:14 2005 => Total Errors: 2
Sun Feb 27 10:40:14 2005 => Time Elapsed: 00:33:28
Sun Feb 27 10:40:14 2005 => Virus Database Date: 2005/02/25
Sun Feb 27 10:40:14 2005 => Virus Database Count: 119374
Sun Feb 27 10:40:14 2005 => Scan Completed.
File C:\WINDOWS\System32\o infected by "Trojan-Downloader.BAT.Ftp.c" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\o infected by "Trojan-Downloader.BAT.Ftp.c" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\o infected by "Trojan-Downloader.BAT.Ftp.c" Virus. Action Taken: No Action Taken.
Gibt es eine Möglichkeit den Trojan-Downloader.BAT.Ftp.c komplett aus dem System zu löschen? Wie geht das?
Viele Grüße,
ema