W32 Tibick Problem |
||
---|---|---|
#0
| ||
23.05.2005, 22:04
...neu hier
Beiträge: 6 |
||
|
||
24.05.2005, 00:48
Ehrenmitglied
Beiträge: 29434 |
#2
Hallo@ Bjatrax
deinstalliere den Symantec und auch gleich noch den Antivirus (voruebergehend)--> zwei aktive Virenscanner sind zuviel. Lade: rkfiles.zip http://bilder.informationsarchiv.net/Nikitas_Tools/rkfiles.zip -->entpacken--> gehe in den abgesicherten Modus http://www.tu-berlin.de/www/software/virus/savemode.shtml -->Doppelklick(Ausfuehren)-->rkfiles.bat--> warten bis sich das DOS-Fenster schliesst--->poste C:\log.txt •eScan-Erkennungstool eSan ist hier unter dem Namen Free eScan Antivirus Toolkit Utility kostenlos erhältlich: http://www.mwti.net/antivirus/free_utilities.asp oeffne den Scanner--> noch nicht scannen--> gehe in Start<Ausfuehren< schreib rein: %temp% und suche kavupd.exe, die klickst du an--> (Update- in DOS) ausführen gehe in den abgesicherten Modus http://www.tu-berlin.de/www/software/virus/savemode.shtml und den Scanner mit der "mwav.exe"[oder:MWAVSCAN.COM] starten. Alle Häkchen setzen : Auswählen: "all files", Memory, Startup-Folders, Registry, System Folders, Services, Drive/All Local drives, Folder [C:\WINDOWS], Include SubDirectory ->und "Scan " klicken. •Gehe wieder in den Normalmodus: •mache bitte folgendes: nun öffnest du mit dem editor, die mwav.txt und gehst unter bearbeiten -> suchen, hier gibst du "infected" ein •jene zeile in der infected steht, markieren, und hier einfügen, weitersuchen usw. •und ganz unten steht die zusammenfassung, diese auch hier posten __________ MfG Sabina rund um die PC-Sicherheit |
|
|
||
25.05.2005, 12:45
...neu hier
Themenstarter Beiträge: 6 |
#3
Hallo,
danke für deine Antwort. In C:/log.txt steht: C:\Dokumente und Einstellungen\Admin\Eigene Dateien\rkfiles PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE. Files Found in system Folder............ ------------------------ C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213 C:\WINDOWS\system32\DivX.dll: PEC2 C:\WINDOWS\system32\dfrg.msc: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAwGpEc213 C:\WINDOWS\system32\DivX.dll: PEC2 Files Found in all users startup Folder............ ------------------------ Files Found in all users windows Folder............ ------------------------ C:\WINDOWS\daemon.dll: UPX! Finished bye Kann es sein, dass die Datei nicht Mwav.txt sondern Mwav.LOG heißt? [url=http://www.spiderfarm.de/MWAV.LOG]Ich hab sie mal hochgeladen[/url], da sind ziemlich viele Dateien infected. MfG |
|
|
||
25.05.2005, 14:45
Ehrenmitglied
Beiträge: 29434 |
#4
kopiere die infected alle raus, bitte:
•mache bitte folgendes: nun öffnest du mit dem editor, die mwav.txt oder mwav.log und gehst unter bearbeiten -> suchen, hier gibst du "infected" ein •jene zeile in der infected steht, markieren, und hier einfügen, weitersuchen usw. •und ganz unten steht die zusammenfassung, diese auch hier posten __________ MfG Sabina rund um die PC-Sicherheit |
|
|
||
25.05.2005, 16:49
...neu hier
Themenstarter Beiträge: 6 |
#5
Hallo,
ich glaube das ist zu lang, er hängt sich dabei immer auf bzw. schickt es gar nicht erst los. Wenn du willst, kann ich es aber in ein txt. reinkopieren und dann hochladen. MfG Billy Das ist der Anfang: Hallo, Tue May 24 15:48:41 2005 => File C:\Programme\Norton AntiVirus\Quarantine\000131C3.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:41 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00045BC0.TMP Tue May 24 15:48:41 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00045BC0.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:41 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\000B2FB8.TMP Tue May 24 15:48:42 2005 => File C:\Programme\Norton AntiVirus\Quarantine\000B2FB8.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:42 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\000E59B5.TMP Tue May 24 15:48:43 2005 => File C:\Programme\Norton AntiVirus\Quarantine\000E59B5.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:43 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00152DAE.TMP Tue May 24 15:48:44 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00152DAE.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:44 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\001B01A6.TMP Tue May 24 15:48:45 2005 => File C:\Programme\Norton AntiVirus\Quarantine\001B01A6.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:45 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\001E2BA3.TMP Tue May 24 15:48:46 2005 => File C:\Programme\Norton AntiVirus\Quarantine\001E2BA3.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:46 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0022559F.TMP Tue May 24 15:48:47 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0022559F.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:47 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00257F9C.TMP Tue May 24 15:48:47 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00257F9C.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:47 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\002C5395.TMP Tue May 24 15:48:48 2005 => File C:\Programme\Norton AntiVirus\Quarantine\002C5395.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:48 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0032278D.TMP Tue May 24 15:48:48 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0032278D.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:48 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0035518A.TMP Tue May 24 15:48:49 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0035518A.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:49 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00397B86.TMP Tue May 24 15:48:49 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00397B86.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:49 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\003F4F7F.TMP Tue May 24 15:48:50 2005 => File C:\Programme\Norton AntiVirus\Quarantine\003F4F7F.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:50 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0042797B.TMP Tue May 24 15:48:50 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0042797B.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:51 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00462378.TMP Tue May 24 15:48:51 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00462378.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:51 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\004C7771.TMP Tue May 24 15:48:52 2005 => File C:\Programme\Norton AntiVirus\Quarantine\004C7771.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:52 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00534B69.TMP Tue May 24 15:48:52 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00534B69.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:52 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00567566.TMP Tue May 24 15:48:53 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00567566.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:53 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00591F62.TMP Tue May 24 15:48:53 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00591F62.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:53 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0060735B.TMP Tue May 24 15:48:53 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0060735B.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:53 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00664754.TMP Tue May 24 15:48:54 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00664754.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:54 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\006D1B4D.TMP Tue May 24 15:48:55 2005 => File C:\Programme\Norton AntiVirus\Quarantine\006D1B4D.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:55 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00736F45.TMP Tue May 24 15:48:55 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00736F45.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:55 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\007A433E.TMP Tue May 24 15:48:56 2005 => File C:\Programme\Norton AntiVirus\Quarantine\007A433E.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:56 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00801737.TMP Tue May 24 15:48:57 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00801737.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:57 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00844133.TMP Tue May 24 15:48:57 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00844133.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:57 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00876B30.TMP Tue May 24 15:48:58 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00876B30.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:58 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\008E3F29.TMP Tue May 24 15:48:58 2005 => File C:\Programme\Norton AntiVirus\Quarantine\008E3F29.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:58 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00941322.TMP Tue May 24 15:48:59 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00941322.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:48:59 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00973D1E.TMP Tue May 24 15:49:00 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00973D1E.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:00 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\009B671A.TMP Tue May 24 15:49:00 2005 => File C:\Programme\Norton AntiVirus\Quarantine\009B671A.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:00 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00A13B13.TMP Tue May 24 15:49:00 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00A13B13.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:01 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00A46510.TMP Tue May 24 15:49:02 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00A46510.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:02 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00AB3908.TMP Tue May 24 15:49:02 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00AB3908.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:02 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00AE6305.TMP Tue May 24 15:49:03 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00AE6305.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:03 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00B365DB.TMP Tue May 24 15:49:04 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00B365DB.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:04 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00B536FE.TMP Tue May 24 15:49:04 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00B536FE.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:04 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00B860FA.TMP Tue May 24 15:49:05 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00B860FA.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:05 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00BB0AF6.TMP Tue May 24 15:49:05 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00BB0AF6.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:05 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00BE34F3.TMP Tue May 24 15:49:06 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00BE34F3.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:06 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00C508EC.TMP Tue May 24 15:49:07 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00C508EC.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:07 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00C832E8.TMP Tue May 24 15:49:07 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00C832E8.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:07 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00CF06E1.TMP Tue May 24 15:49:09 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00CF06E1.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:09 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00D230DD.TMP Tue May 24 15:49:09 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00D230DD.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:09 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00E956C4.TMP Tue May 24 15:49:11 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00E956C4.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:11 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\00FD52AF.TMP Tue May 24 15:49:12 2005 => File C:\Programme\Norton AntiVirus\Quarantine\00FD52AF.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:12 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01007CAB.TMP Tue May 24 15:49:13 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01007CAB.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:13 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\010326A7.TMP Tue May 24 15:49:13 2005 => File C:\Programme\Norton AntiVirus\Quarantine\010326A7.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:13 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\010A7AA0.TMP Tue May 24 15:49:14 2005 => File C:\Programme\Norton AntiVirus\Quarantine\010A7AA0.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:14 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\010D249D.TMP Tue May 24 15:49:15 2005 => File C:\Programme\Norton AntiVirus\Quarantine\010D249D.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:15 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01104E99.TMP Tue May 24 15:49:15 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01104E99.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:15 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01172292.TMP Tue May 24 15:49:16 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01172292.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:16 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\011D768B.TMP Tue May 24 15:49:17 2005 => File C:\Programme\Norton AntiVirus\Quarantine\011D768B.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:17 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01244A83.TMP Tue May 24 15:49:18 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01244A83.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:18 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\012A1E7C.TMP Tue May 24 15:49:19 2005 => File C:\Programme\Norton AntiVirus\Quarantine\012A1E7C.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:19 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01317275.TMP Tue May 24 15:49:20 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01317275.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:20 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\013B706A.TMP Tue May 24 15:49:21 2005 => File C:\Programme\Norton AntiVirus\Quarantine\013B706A.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:21 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\013E1A67.TMP Tue May 24 15:49:22 2005 => File C:\Programme\Norton AntiVirus\Quarantine\013E1A67.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:22 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01414463.TMP Tue May 24 15:49:22 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01414463.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:22 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\014B4258.TMP Tue May 24 15:49:23 2005 => File C:\Programme\Norton AntiVirus\Quarantine\014B4258.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:23 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01511651.TMP Tue May 24 15:49:24 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01511651.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:24 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0155404E.TMP Tue May 24 15:49:25 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0155404E.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:25 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01586A4A.TMP Tue May 24 15:49:25 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01586A4A.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:25 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0162683F.TMP Tue May 24 15:49:26 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0162683F.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:26 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\016C6634.TMP Tue May 24 15:49:27 2005 => File C:\Programme\Norton AntiVirus\Quarantine\016C6634.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:27 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0175642A.TMP Tue May 24 15:49:28 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0175642A.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:28 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\017C3822.TMP Tue May 24 15:49:29 2005 => File C:\Programme\Norton AntiVirus\Quarantine\017C3822.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:29 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\017F621F.TMP Tue May 24 15:49:29 2005 => File C:\Programme\Norton AntiVirus\Quarantine\017F621F.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:29 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01896014.TMP Tue May 24 15:49:30 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01896014.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:30 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\018F340D.TMP Tue May 24 15:49:31 2005 => File C:\Programme\Norton AntiVirus\Quarantine\018F340D.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:31 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01935E09.TMP Tue May 24 15:49:31 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01935E09.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:31 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\019D5BFE.TMP Tue May 24 15:49:32 2005 => File C:\Programme\Norton AntiVirus\Quarantine\019D5BFE.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:32 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01A32FF7.TMP Tue May 24 15:49:33 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01A32FF7.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:33 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01AD2DEC.TMP Tue May 24 15:49:34 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01AD2DEC.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:34 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01B46C81.TMP Tue May 24 15:49:35 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01B46C81.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:35 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01B72BE2.TMP Tue May 24 15:49:35 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01B72BE2.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:35 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01BD7FDB.TMP Tue May 24 15:49:36 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01BD7FDB.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:36 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01C029D7.TMP Tue May 24 15:49:37 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01C029D7.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:37 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01C77DD0.TMP Tue May 24 15:49:38 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01C77DD0.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:38 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01CA27CC.TMP Tue May 24 15:49:38 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01CA27CC.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:38 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01D425C1.TMP Tue May 24 15:49:39 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01D425C1.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:39 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01D74FBE.TMP Tue May 24 15:49:40 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01D74FBE.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:40 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01DE23B7.TMP Tue May 24 15:49:40 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01DE23B7.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:40 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01E477AF.TMP Tue May 24 15:49:41 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01E477AF.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:41 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01EB4BA8.TMP Tue May 24 15:49:42 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01EB4BA8.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:42 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01F11FA1.TMP Tue May 24 15:49:43 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01F11FA1.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:43 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01FB1D96.TMP Tue May 24 15:49:43 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01FB1D96.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:43 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\01FF4793.TMP Tue May 24 15:49:44 2005 => File C:\Programme\Norton AntiVirus\Quarantine\01FF4793.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:44 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02084588.TMP Tue May 24 15:49:45 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02084588.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:45 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\020C6F84.TMP Tue May 24 15:49:46 2005 => File C:\Programme\Norton AntiVirus\Quarantine\020C6F84.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:46 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0212437D.TMP Tue May 24 15:49:47 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0212437D.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:47 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02156D79.TMP Tue May 24 15:49:47 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02156D79.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:47 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\021C4172.TMP Tue May 24 15:49:48 2005 => File C:\Programme\Norton AntiVirus\Quarantine\021C4172.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:48 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\021F6B6F.TMP Tue May 24 15:49:49 2005 => File C:\Programme\Norton AntiVirus\Quarantine\021F6B6F.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:49 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02263F68.TMP Tue May 24 15:49:50 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02263F68.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:50 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02296964.TMP Tue May 24 15:49:51 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02296964.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:51 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02361156.TMP Tue May 24 15:49:52 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02361156.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:52 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02393B52.TMP Tue May 24 15:49:53 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02393B52.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:53 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02400F4B.TMP Tue May 24 15:49:54 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02400F4B.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:54 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02466344.TMP Tue May 24 15:49:54 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02466344.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:55 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\024A0D40.TMP Tue May 24 15:49:55 2005 => File C:\Programme\Norton AntiVirus\Quarantine\024A0D40.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:55 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02506139.TMP Tue May 24 15:49:56 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02506139.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:56 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02573532.TMP Tue May 24 15:49:57 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02573532.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:57 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\025A5F2E.TMP Tue May 24 15:49:57 2005 => File C:\Programme\Norton AntiVirus\Quarantine\025A5F2E.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:57 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02645D23.TMP Tue May 24 15:49:58 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02645D23.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:58 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02670720.TMP Tue May 24 15:49:59 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02670720.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:59 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\026E5B18.TMP Tue May 24 15:49:59 2005 => File C:\Programme\Norton AntiVirus\Quarantine\026E5B18.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:49:59 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02742F11.TMP Tue May 24 15:50:00 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02742F11.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:00 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\027E2D06.TMP Tue May 24 15:50:01 2005 => File C:\Programme\Norton AntiVirus\Quarantine\027E2D06.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:01 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\028400FF.TMP Tue May 24 15:50:01 2005 => File C:\Programme\Norton AntiVirus\Quarantine\028400FF.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:01 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\028B54F8.TMP Tue May 24 15:50:02 2005 => File C:\Programme\Norton AntiVirus\Quarantine\028B54F8.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:02 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\028E7EF5.TMP Tue May 24 15:50:02 2005 => File C:\Programme\Norton AntiVirus\Quarantine\028E7EF5.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:02 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02987CEA.TMP Tue May 24 15:50:03 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02987CEA.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:03 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\029B26E6.TMP Tue May 24 15:50:04 2005 => File C:\Programme\Norton AntiVirus\Quarantine\029B26E6.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:04 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02A524DB.TMP Tue May 24 15:50:05 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02A524DB.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:05 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02A84ED8.TMP Tue May 24 15:50:06 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02A84ED8.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:06 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02B24CCD.TMP Tue May 24 15:50:07 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02B24CCD.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:07 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02B920C6.TMP Tue May 24 15:50:08 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02B920C6.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:08 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02BC4AC2.TMP Tue May 24 15:50:09 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02BC4AC2.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:09 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02C21EBB.TMP Tue May 24 15:50:09 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02C21EBB.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:09 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02C972B4.TMP Tue May 24 15:50:10 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02C972B4.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:10 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02D046AD.TMP Tue May 24 15:50:11 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02D046AD.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:11 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02D370A9.TMP Tue May 24 15:50:12 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02D370A9.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:12 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02D61AA5.TMP Tue May 24 15:50:12 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02D61AA5.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:12 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02DD6E9E.TMP Tue May 24 15:50:13 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02DD6E9E.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:13 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02E0189B.TMP Tue May 24 15:50:14 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02E0189B.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:14 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02E66C93.TMP Tue May 24 15:50:14 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02E66C93.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:14 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02EA1690.TMP Tue May 24 15:50:15 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02EA1690.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:15 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02F31485.TMP Tue May 24 15:50:16 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02F31485.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:16 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02F73E82.TMP Tue May 24 15:50:17 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02F73E82.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:17 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\02FD127A.TMP Tue May 24 15:50:17 2005 => File C:\Programme\Norton AntiVirus\Quarantine\02FD127A.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:17 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03013C77.TMP Tue May 24 15:50:18 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03013C77.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:18 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03046673.TMP Tue May 24 15:50:19 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03046673.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:19 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\030A3A6C.TMP Tue May 24 15:50:20 2005 => File C:\Programme\Norton AntiVirus\Quarantine\030A3A6C.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:20 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03110E65.TMP Tue May 24 15:50:20 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03110E65.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:20 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03143861.TMP Tue May 24 15:50:21 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03143861.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:21 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\031B0C5A.TMP Tue May 24 15:50:22 2005 => File C:\Programme\Norton AntiVirus\Quarantine\031B0C5A.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:22 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\031E3656.TMP Tue May 24 15:50:23 2005 => File C:\Programme\Norton AntiVirus\Quarantine\031E3656.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:23 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0328344C.TMP Tue May 24 15:50:23 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0328344C.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:23 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\032E0844.TMP Tue May 24 15:50:24 2005 => File C:\Programme\Norton AntiVirus\Quarantine\032E0844.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:24 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0338063A.TMP Tue May 24 15:50:25 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0338063A.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:25 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\033F5A32.TMP Tue May 24 15:50:25 2005 => File C:\Programme\Norton AntiVirus\Quarantine\033F5A32.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:25 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03452E2B.TMP Tue May 24 15:50:26 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03452E2B.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:26 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03485828.TMP Tue May 24 15:50:27 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03485828.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:27 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\034C0224.TMP Tue May 24 15:50:27 2005 => File C:\Programme\Norton AntiVirus\Quarantine\034C0224.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:27 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0352561D.TMP Tue May 24 15:50:28 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0352561D.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:28 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03592A16.TMP Tue May 24 15:50:28 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03592A16.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:28 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\035F7E0F.TMP Tue May 24 15:50:29 2005 => File C:\Programme\Norton AntiVirus\Quarantine\035F7E0F.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:29 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0362280B.TMP Tue May 24 15:50:30 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0362280B.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:30 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03665207.TMP Tue May 24 15:50:31 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03665207.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:31 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\036C2600.TMP Tue May 24 15:50:31 2005 => File C:\Programme\Norton AntiVirus\Quarantine\036C2600.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:31 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03704FFD.TMP Tue May 24 15:50:32 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03704FFD.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:32 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\037623F5.TMP Tue May 24 15:50:32 2005 => File C:\Programme\Norton AntiVirus\Quarantine\037623F5.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:32 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\038021EB.TMP Tue May 24 15:50:33 2005 => File C:\Programme\Norton AntiVirus\Quarantine\038021EB.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:33 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03834BE7.TMP Tue May 24 15:50:34 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03834BE7.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:34 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\038A1FE0.TMP Tue May 24 15:50:35 2005 => File C:\Programme\Norton AntiVirus\Quarantine\038A1FE0.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:35 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\038D49DC.TMP Tue May 24 15:50:36 2005 => File C:\Programme\Norton AntiVirus\Quarantine\038D49DC.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:36 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03931DD5.TMP Tue May 24 15:50:36 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03931DD5.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:36 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\039747D1.TMP Tue May 24 15:50:37 2005 => File C:\Programme\Norton AntiVirus\Quarantine\039747D1.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:37 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\039A71CE.TMP Tue May 24 15:50:38 2005 => File C:\Programme\Norton AntiVirus\Quarantine\039A71CE.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:38 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03A46FC3.TMP Tue May 24 15:50:39 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03A46FC3.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:39 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03A719BF.TMP Tue May 24 15:50:39 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03A719BF.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:39 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03AE6DB8.TMP Tue May 24 15:50:40 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03AE6DB8.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:40 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03B117B5.TMP Tue May 24 15:50:41 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03B117B5.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:41 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03B76BAD.TMP Tue May 24 15:50:41 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03B76BAD.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:41 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03BB15AA.TMP Tue May 24 15:50:42 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03BB15AA.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:42 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03C169A3.TMP Tue May 24 15:50:42 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03C169A3.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:42 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03C33AC5.TMP Tue May 24 15:50:43 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03C33AC5.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:43 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03C83D9C.TMP Tue May 24 15:50:44 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03C83D9C.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:44 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03CB6798.TMP Tue May 24 15:50:45 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03CB6798.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:45 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03D13B91.TMP Tue May 24 15:50:45 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03D13B91.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:45 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03D5658D.TMP Tue May 24 15:50:46 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03D5658D.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:46 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03DB3986.TMP Tue May 24 15:50:47 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03DB3986.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:47 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03E20D7F.TMP Tue May 24 15:50:48 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03E20D7F.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:48 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03E86178.TMP Tue May 24 15:50:49 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03E86178.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:49 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03EC0B74.TMP Tue May 24 15:50:49 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03EC0B74.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:49 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03F25F6D.TMP Tue May 24 15:50:50 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03F25F6D.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:50 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03F50969.TMP Tue May 24 15:50:50 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03F50969.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:51 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\03FC5D62.TMP Tue May 24 15:50:51 2005 => File C:\Programme\Norton AntiVirus\Quarantine\03FC5D62.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:51 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0402315B.TMP Tue May 24 15:50:52 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0402315B.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:52 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04090554.TMP Tue May 24 15:50:53 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04090554.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:53 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\040C2F50.TMP Tue May 24 15:50:54 2005 => File C:\Programme\Norton AntiVirus\Quarantine\040C2F50.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:54 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04130349.TMP Tue May 24 15:50:55 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04130349.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:55 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\041D013E.TMP Tue May 24 15:50:56 2005 => File C:\Programme\Norton AntiVirus\Quarantine\041D013E.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:56 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04235537.TMP Tue May 24 15:50:56 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04235537.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:56 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04267F33.TMP Tue May 24 15:50:57 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04267F33.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:57 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\042A2930.TMP Tue May 24 15:50:57 2005 => File C:\Programme\Norton AntiVirus\Quarantine\042A2930.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:57 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04307D29.TMP Tue May 24 15:50:58 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04307D29.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:58 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04367847.TMP Tue May 24 15:50:59 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04367847.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:59 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\043A7B1E.tmp Tue May 24 15:50:59 2005 => File C:\Programme\Norton AntiVirus\Quarantine\043A7B1E.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:50:59 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\043C4C40.TMP Tue May 24 15:51:00 2005 => File C:\Programme\Norton AntiVirus\Quarantine\043C4C40.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:00 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\043D251A.tmp Tue May 24 15:51:01 2005 => File C:\Programme\Norton AntiVirus\Quarantine\043D251A.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:01 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04432039.TMP Tue May 24 15:51:01 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04432039.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:01 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04447913.tmp Tue May 24 15:51:02 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04447913.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:02 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\044A4D0C.tmp Tue May 24 15:51:03 2005 => File C:\Programme\Norton AntiVirus\Quarantine\044A4D0C.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:03 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\044E7708.tmp Tue May 24 15:51:03 2005 => File C:\Programme\Norton AntiVirus\Quarantine\044E7708.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:03 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0450482A.TMP Tue May 24 15:51:04 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0450482A.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:04 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04544B01.tmp Tue May 24 15:51:05 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04544B01.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:05 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\045B1EFA.tmp Tue May 24 15:51:06 2005 => File C:\Programme\Norton AntiVirus\Quarantine\045B1EFA.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:06 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\045E48F6.tmp Tue May 24 15:51:06 2005 => File C:\Programme\Norton AntiVirus\Quarantine\045E48F6.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:06 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04601A18.TMP Tue May 24 15:51:07 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04601A18.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:07 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04641CEF.tmp Tue May 24 15:51:07 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04641CEF.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:07 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\046846EB.tmp Tue May 24 15:51:08 2005 => File C:\Programme\Norton AntiVirus\Quarantine\046846EB.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:08 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\046E1AE4.tmp Tue May 24 15:51:09 2005 => File C:\Programme\Norton AntiVirus\Quarantine\046E1AE4.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:09 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04706C06.TMP Tue May 24 15:51:11 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04706C06.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:11 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04756EDD.tmp Tue May 24 15:51:11 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04756EDD.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:11 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\047818D9.tmp Tue May 24 15:51:12 2005 => File C:\Programme\Norton AntiVirus\Quarantine\047818D9.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:12 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\047A69FC.TMP Tue May 24 15:51:13 2005 => File C:\Programme\Norton AntiVirus\Quarantine\047A69FC.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:13 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\048216CF.tmp Tue May 24 15:51:13 2005 => File C:\Programme\Norton AntiVirus\Quarantine\048216CF.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:13 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\048540CB.tmp Tue May 24 15:51:14 2005 => File C:\Programme\Norton AntiVirus\Quarantine\048540CB.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:14 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\048711ED.TMP Tue May 24 15:51:15 2005 => File C:\Programme\Norton AntiVirus\Quarantine\048711ED.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:15 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\048C14C4.tmp Tue May 24 15:51:15 2005 => File C:\Programme\Norton AntiVirus\Quarantine\048C14C4.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:15 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\048E65E6.TMP Tue May 24 15:51:16 2005 => File C:\Programme\Norton AntiVirus\Quarantine\048E65E6.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:16 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\049268BD.tmp Tue May 24 15:51:17 2005 => File C:\Programme\Norton AntiVirus\Quarantine\049268BD.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:17 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\049439DF.TMP Tue May 24 15:51:18 2005 => File C:\Programme\Norton AntiVirus\Quarantine\049439DF.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:18 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04993CB6.tmp Tue May 24 15:51:19 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04993CB6.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:19 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\049E37D4.TMP Tue May 24 15:51:19 2005 => File C:\Programme\Norton AntiVirus\Quarantine\049E37D4.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:19 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\049F10AE.tmp Tue May 24 15:51:20 2005 => File C:\Programme\Norton AntiVirus\Quarantine\049F10AE.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:20 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04A23AAB.tmp Tue May 24 15:51:20 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04A23AAB.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:20 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04A664A7.tmp Tue May 24 15:51:21 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04A664A7.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:21 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04AB5FC6.TMP Tue May 24 15:51:22 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04AB5FC6.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:22 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04AC38A0.tmp Tue May 24 15:51:22 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04AC38A0.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:22 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04B30C99.tmp Tue May 24 15:51:23 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04B30C99.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:23 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04B63695.tmp Tue May 24 15:51:24 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04B63695.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:24 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04B96092.tmp Tue May 24 15:51:25 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04B96092.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:25 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04BB31B4.TMP Tue May 24 15:51:26 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04BB31B4.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:26 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04C0348A.tmp Tue May 24 15:51:26 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04C0348A.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:26 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04C35E87.tmp Tue May 24 15:51:27 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04C35E87.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:27 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04CA3280.tmp Tue May 24 15:51:28 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04CA3280.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:28 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04CD5C7C.tmp Tue May 24 15:51:28 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04CD5C7C.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:28 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04CF2D9E.TMP Tue May 24 15:51:29 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04CF2D9E.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:29 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04D33075.tmp Tue May 24 15:51:30 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04D33075.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:30 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04DA046E.tmp Tue May 24 15:51:31 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04DA046E.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:31 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04E15866.tmp Tue May 24 15:51:32 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04E15866.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:32 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04E72C5F.tmp Tue May 24 15:51:33 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04E72C5F.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:33 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04E97D81.TMP Tue May 24 15:51:34 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04E97D81.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:34 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04EA565C.tmp Tue May 24 15:51:34 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04EA565C.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:34 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04F12A55.tmp Tue May 24 15:51:35 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04F12A55.tmp infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:35 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04F45451.TMP Tue May 24 15:51:35 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04F45451.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:35 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04F62573.TMP Tue May 24 15:51:36 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04F62573.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:36 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04F77E4D.TMP Tue May 24 15:51:37 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04F77E4D.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:37 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\04FE5246.TMP Tue May 24 15:51:37 2005 => File C:\Programme\Norton AntiVirus\Quarantine\04FE5246.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:37 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\05017C43.TMP Tue May 24 15:51:38 2005 => File C:\Programme\Norton AntiVirus\Quarantine\05017C43.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:38 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\05034D65.TMP Tue May 24 15:51:39 2005 => File C:\Programme\Norton AntiVirus\Quarantine\05034D65.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:39 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0508503B.TMP Tue May 24 15:51:40 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0508503B.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:40 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\050A215D.TMP Tue May 24 15:51:40 2005 => File C:\Programme\Norton AntiVirus\Quarantine\050A215D.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:40 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\050B7A38.TMP Tue May 24 15:51:41 2005 => File C:\Programme\Norton AntiVirus\Quarantine\050B7A38.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:41 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\05124E31.TMP Tue May 24 15:51:42 2005 => File C:\Programme\Norton AntiVirus\Quarantine\05124E31.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:42 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\05165107.TMP Tue May 24 15:51:43 2005 => File C:\Programme\Norton AntiVirus\Quarantine\05165107.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:43 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0517494F.TMP Tue May 24 15:51:44 2005 => File C:\Programme\Norton AntiVirus\Quarantine\0517494F.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:44 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\05182229.TMP Tue May 24 15:51:45 2005 => File C:\Programme\Norton AntiVirus\Quarantine\05182229.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:45 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\05214744.TMP Tue May 24 15:51:45 2005 => File C:\Programme\Norton AntiVirus\Quarantine\05214744.TMP infected by "P2P-Worm.Win32.Tibick" Virus! Action Taken: No Action Taken. Tue May 24 15:51:45 2005 => Scanning File C:\Programme\Norton AntiVirus\Quarantine\0522201F.TMP Tue May 24 15:51:46 2005 => File C:\Prog Dieser Beitrag wurde am 25.05.2005 um 17:02 Uhr von Bjatrax editiert.
|
|
|
||
25.05.2005, 19:37
Ehrenmitglied
Beiträge: 29434 |
#6
oh je, du brauchst nicht mehr zu posten:
C:\WINDOWS\SYSTEM32\msview<---suchen/loeschen C:\WINDOWS\SYSTEM32\svcnet.exe <---suchen/loeschen deinstalliere, was du davon geladen hast: # Kazaa # iMesh # Morpheus # wareo # eMule # DC++ loesche die Quatantaene vom Norton und mache einen Onlinescan (Panda) und andere + berichte http://virus-protect.org/onlinescan.html ----------------------------------------- INFO: Changes to filesystem ] * Creates file C:\WINDOWS\SYSTEM\svcnet.exe. * Creates directory C:\WINDOWS\SYSTEM\msview. * Creates file C:\WINDOWS\SYSTEM\msview\Ad-aware.exe. [ Changes to registry ] * Creates value "I/O Controllers"="svcnet.exe" in key "HKLM\Software\Microsoft\Windows\CurrentVersion\Run". * Creates value "I/O Controllers"="svcnet.exe" in key "HKCU\Software\Microsoft\Windows\CurrentVersion\Run". [ Network services ] * Connects to "tibic.hackarmy.tk" on port 6667 (TCP). * Connects to IRC server. * IRC: Uses nickname jbctunp. * IRC: Uses username hjfduzm. * IRC: Joins channel ##TIBiC-P2P2##. [ Process/window information ] * Will automatically restart after boot (I'll be back...). * Creates a mutex svcnet.exe. * Attemps to open C:\WINDOWS\SYSTEM\svcnet.exe NULL. (328.33 seconds taken) http://virus-protect.org/onlinescan.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
||
25.05.2005, 23:12
...neu hier
Themenstarter Beiträge: 6 |
#7
Hi,
msview hab ich gelöscht (den Ordner) aber svcnet hab ich nicht gefunden. Von den Programmen hat ich nur emule geladen und deinstalliert, die anderen hab ich schon seit Jahren nicht mehr drauf bzw. kenn sie gar nicht. Der Onlinescan mit Panda ging nicht, aber dafür mit HouseCall und da wurde gesagt, dass mein PC clean ist. Für die anderen brauch ich den IE, soll ich trotzdem nochmal scannen? MfG Billy |
|
|
||
26.05.2005, 15:33
Ehrenmitglied
Beiträge: 29434 |
#8
ja, scanne mal mit dem Panda (mit dem IE)
und: •KillBox http://bilder.informationsarchiv.net/Nikitas_Tools/KillBox.zip Anleitung: (bebildert) http://virus-protect.org/killbox.html reinkopieren: C:\WINDOWS\SYSTEM\svcnet.exe •Delete File on Reboot <--anhaken und klicke auf das rote Kreuz, wenn gefragt wird, ob "Do you want to reboot? "----> klicke auf "yes" PC neustarten (falls die exe existiert) __________ MfG Sabina rund um die PC-Sicherheit |
|
|
||
28.05.2005, 12:10
...neu hier
Themenstarter Beiträge: 6 |
#9
Hi,
war jetzt am Donnerstag und Freitag nicht da, habe aber nochmal mit escan gescannt und da sind infiziert: Fri May 27 21:10:51 2005 => System found infected with BearShare Spyware/Adware ({905d0df2-3a0a-4d94-853c-54a12a745905})! Action taken: No Action Taken. Fri May 27 21:10:51 2005 => System found infected with BearShare Spyware/Adware ({9f95f736-0f62-4214-a4b4-caa6738d4c07})! Action taken: No Action Taken. Fri May 27 21:10:51 2005 => System found infected with BearShare Spyware/Adware ({558ec983-bedb-9168-b2de-31dbf0ee543e})! Action taken: No Action Taken. Fri May 27 21:10:51 2005 => System found infected with BetterInternet Adware ({C45C774D-5ECC-4D9E-94E1-AC57189C4435})! Action taken: No Action Taken. Fri May 27 22:05:44 2005 => Scanning Folder: C:\Programme\AVWin\INFECTED\*.* Fri May 27 22:05:46 2005 => Scanning Folder: C:\Programme\AVWin\MAIL\INFECTED\*.* Sat May 28 01:40:36 2005 => Total Disinfected Files: 0 |
|
|
||
28.05.2005, 14:35
Ehrenmitglied
Beiträge: 29434 |
#10
schau mal, ob du was davon findest:
C:\Programme\BearShare\BearShare.exe C:\Programme\BearShare\installer\bsproinstall.exe C:\Programme\BearShare\bearshare.dll C:\Programme\BearShare\bsidle.dll C:\Programme\BearShare\freepeers.ini C:\Programme\BearShare\webstats.bat C:\Programme\BearShare\webstats.ini C:\Programme\BearShare\installer\bsproinstall.exe C:\Programme\BearShare\bearshare\db\config.bin #TuneUp2004 (30 Tage free) http://virus-protect.org/reinigungstoolsregistry.html Cleanup repair -->TuneUp Diskcleaner Cleanup repair -->Registry Cleaner •Ad-aware SE Personal 1.05 Updated http://virus-protect.org/antispywaretools.html Laden--> Updaten-->Konfigurieren http://virus-protect.org/adaware.html #VOR jedem Scanvorgang das Programm Updaten! waehrend des Scanvorganges müssen ALLE sonstige Anwendungen beendet werden und alle Browserfenster müssen geschlossen sein! scannen-->PC neustarten--> noch mal scannen--> poste das Log vom Scann __________ MfG Sabina rund um die PC-Sicherheit |
|
|
||
05.06.2005, 00:08
...neu hier
Themenstarter Beiträge: 6 |
#11
Hi,
sorry, dachte ich hätte schon gepostet und mich dann gewundert, warum niemand antwortet. Ad-Aware SE Build 1.06r1 Logfile Created on:Saturday, June 04, 2005 11:31:38 PM Created with Ad-Aware SE Personal, free for private use. Using definitions file:SE1R49 31.05.2005 »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» References detected during the scan: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» MRU List(TAC index:0):51 total references Tracking Cookie(TAC index:3):2 total references »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Definition File: ========================= Definitions File Loaded: Reference Number : SE1R49 31.05.2005 Internal build : 57 File location : C:\Programme\Lavasoft\Ad-Aware SE Personal\defs.ref File size : 481469 Bytes Total size : 1455496 Bytes Signature data size : 1423833 Bytes Reference data size : 31151 Bytes Signatures total : 40572 CSI Fingerprints total : 902 CSI data size : 31096 Bytes Target categories : 15 Target families : 692 Memory + processor status: ========================== Number of processors : 1 Processor architecture : Intel Pentium III Memory available:20 % Total physical memory:523760 kb Available physical memory:100904 kb Total page file size:1278516 kb Available on page file:910920 kb Total virtual memory:2097024 kb Available virtual memory:2031328 kb OS:Microsoft Windows XP Professional Service Pack 2 (Build 2600) Ad-Aware SE Settings =========================== Set : Search for negligible risk entries Set : Move deleted files to Recycle Bin Set : Safe mode (always request confirmation) Set : Scan active processes Set : Scan registry Set : Deep-scan registry Set : Scan my IE Favorites for banned URLs Set : Scan within archives Set : Scan my Hosts file Extended Ad-Aware SE Settings =========================== Set : Unload recognized processes & modules during scan Set : Obtain command line of scanned processes Set : Scan registry for all users instead of current user only Set : Always try to unload modules before deletion Set : During removal, unload Explorer and IE if necessary Set : Let Windows remove files in use at next reboot Set : Delete quarantined objects after restoring Set : Write-protect system files after repair (Hosts file, etc.) Set : Include basic Ad-Aware settings in log file Set : Include additional Ad-Aware settings in log file Set : Include reference summary in log file Set : Include alternate data stream details in log file Set : Play sound at scan completion if scan locates critical objects 6-4-2005 11:31:38 PM - Scan started. (Custom mode) Listing running processes »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» #:1 [smss.exe] ModuleName : \SystemRoot\System32\smss.exe Command Line : n/a ProcessID : 524 ThreadCreationTime : 6-3-2005 10:17:02 AM BasePriority : Normal #:2 [csrss.exe] ModuleName : \??\C:\WINDOWS\system32\csrss.exe Command Line : C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestTh ProcessID : 572 ThreadCreationTime : 6-3-2005 10:17:09 AM BasePriority : Normal #:3 [winlogon.exe] ModuleName : \??\C:\WINDOWS\system32\winlogon.exe Command Line : winlogon.exe ProcessID : 608 ThreadCreationTime : 6-3-2005 10:17:15 AM BasePriority : High #:4 [services.exe] ModuleName : C:\WINDOWS\system32\services.exe Command Line : C:\WINDOWS\system32\services.exe ProcessID : 652 ThreadCreationTime : 6-3-2005 10:17:15 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Betriebssystem Microsoft® Windows® CompanyName : Microsoft Corporation FileDescription : Anwendung für Dienste und Controller InternalName : services.exe LegalCopyright : © Microsoft Corporation. Alle Rechte vorbehalten. OriginalFilename : services.exe #:5 [lsass.exe] ModuleName : C:\WINDOWS\system32\lsass.exe Command Line : C:\WINDOWS\system32\lsass.exe ProcessID : 664 ThreadCreationTime : 6-3-2005 10:17:15 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : LSA Shell (Export Version) InternalName : lsass.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : lsass.exe #:6 [ati2evxx.exe] ModuleName : C:\WINDOWS\system32\Ati2evxx.exe Command Line : C:\WINDOWS\system32\Ati2evxx.exe ProcessID : 820 ThreadCreationTime : 6-3-2005 10:17:16 AM BasePriority : Normal FileVersion : 6.14.10.4110 ProductVersion : 6.14.10.4110.03 ProductName : ATI External Event Utility for WindowsNT and Windows9X CompanyName : ATI Technologies Inc. FileDescription : ATI External Event Utility EXE Module InternalName : ATI2EVXX.EXE LegalCopyright : Copyright © 1999-2004 ATI Technologies Inc. OriginalFilename : ATI2EVXX.EXE #:7 [svchost.exe] ModuleName : C:\WINDOWS\system32\svchost.exe Command Line : C:\WINDOWS\system32\svchost -k DcomLaunch ProcessID : 832 ThreadCreationTime : 6-3-2005 10:17:16 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:8 [svchost.exe] ModuleName : C:\WINDOWS\system32\svchost.exe Command Line : C:\WINDOWS\system32\svchost -k rpcss ProcessID : 888 ThreadCreationTime : 6-3-2005 10:17:17 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:9 [svchost.exe] ModuleName : C:\WINDOWS\System32\svchost.exe Command Line : C:\WINDOWS\System32\svchost.exe -k netsvcs ProcessID : 940 ThreadCreationTime : 6-3-2005 10:17:17 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:10 [lexbces.exe] ModuleName : C:\WINDOWS\system32\LEXBCES.EXE Command Line : C:\WINDOWS\system32\LEXBCES.EXE ProcessID : 1220 ThreadCreationTime : 6-3-2005 10:17:20 AM BasePriority : Normal FileVersion : 8.29 ProductVersion : 8.29 ProductName : MarkVision for Windows (32 bit) CompanyName : Lexmark International, Inc. FileDescription : LexBce Service InternalName : LexBce Service LegalCopyright : (C) 1993 - 2003 Lexmark International, Inc. OriginalFilename : LexBceS.exe #:11 [spoolsv.exe] ModuleName : C:\WINDOWS\system32\spoolsv.exe Command Line : C:\WINDOWS\system32\spoolsv.exe ProcessID : 1276 ThreadCreationTime : 6-3-2005 10:17:20 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Spooler SubSystem App InternalName : spoolsv.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : spoolsv.exe #:12 [lexpps.exe] ModuleName : C:\WINDOWS\system32\LEXPPS.EXE Command Line : LEXPPS.EXE ProcessID : 1360 ThreadCreationTime : 6-3-2005 10:17:21 AM BasePriority : Normal FileVersion : 8.29 ProductVersion : 8.29 ProductName : MarkVision for Windows (32 bit) CompanyName : Lexmark International, Inc. FileDescription : LEXPPS.EXE InternalName : LEXPPS LegalCopyright : (C) 1993 - 2003 Lexmark International, Inc. OriginalFilename : LEXPPS.EXE Comments : MarkVision for Windows '95 New P2P Server (32-bit) #:13 [ati2evxx.exe] ModuleName : C:\WINDOWS\system32\Ati2evxx.exe Command Line : Ati2evxx.exe -Client ProcessID : 280 ThreadCreationTime : 6-3-2005 10:17:22 AM BasePriority : Normal FileVersion : 6.14.10.4110 ProductVersion : 6.14.10.4110.03 ProductName : ATI External Event Utility for WindowsNT and Windows9X CompanyName : ATI Technologies Inc. FileDescription : ATI External Event Utility EXE Module InternalName : ATI2EVXX.EXE LegalCopyright : Copyright © 1999-2004 ATI Technologies Inc. OriginalFilename : ATI2EVXX.EXE #:14 [explorer.exe] ModuleName : C:\WINDOWS\Explorer.EXE Command Line : C:\WINDOWS\Explorer.EXE ProcessID : 388 ThreadCreationTime : 6-3-2005 10:17:22 AM BasePriority : Normal FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 6.00.2900.2180 ProductName : Betriebssystem Microsoft® Windows® CompanyName : Microsoft Corporation FileDescription : Windows Explorer InternalName : explorer LegalCopyright : © Microsoft Corporation. Alle Rechte vorbehalten. OriginalFilename : EXPLORER.EXE #:15 [toadimon.exe] ModuleName : C:\Programme\T-Online\T-Online_Software_5\Basis-Software\Basis1\ToADiMon.exe Command Line : "C:\Programme\T-Online\T-Online_Software_5\Basis-Software\Basis1\ToADiMon.exe" -TOnlineAutodialStart ProcessID : 476 ThreadCreationTime : 6-3-2005 10:17:24 AM BasePriority : Normal FileVersion : 2.16.10 ProductVersion : 2.00 ProductName : Marmiko IT-Solutions GmbH DialAssistent Component CompanyName : Marmiko IT-Solutions GmbH FileDescription : T-Online Verbindungsassistent InternalName : ToADiMon LegalCopyright : Copyright © Marmiko IT-Solutions GmbH 2000-2004, Copyright © T-Online International AG 2001-2004 OriginalFilename : ToADiMon.EXE #:16 [ctfmon.exe] ModuleName : C:\WINDOWS\system32\ctfmon.exe Command Line : "C:\WINDOWS\system32\ctfmon.exe" ProcessID : 484 ThreadCreationTime : 6-3-2005 10:17:24 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : CTF Loader InternalName : CTFMON LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : CTFMON.EXE #:17 [msnmsgr.exe] ModuleName : C:\Programme\MSN Messenger\msnmsgr.exe Command Line : "C:\Programme\MSN Messenger\msnmsgr.exe" /background ProcessID : 492 ThreadCreationTime : 6-3-2005 10:17:24 AM BasePriority : Normal FileVersion : 6.2.0205 ProductVersion : Version 6.2 ProductName : MSN Messenger CompanyName : Microsoft Corporation FileDescription : MSN Messenger InternalName : msnmsgr LegalCopyright : Copyright (c) Microsoft Corporation 1997-2004 LegalTrademarks : Microsoft(R) is a registered trademark of Microsoft Corporation in the U.S. and/or other countries. OriginalFilename : msnmsgr.exe #:18 [svchost.exe] ModuleName : C:\WINDOWS\System32\svchost.exe Command Line : C:\WINDOWS\System32\svchost.exe -k LocalService ProcessID : 996 ThreadCreationTime : 6-3-2005 10:19:26 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:19 [avguard.exe] ModuleName : C:\Programme\AVWin\AVGUARD.EXE Command Line : C:\Programme\AVWin\AVGUARD.EXE ProcessID : 1212 ThreadCreationTime : 6-3-2005 10:19:35 AM BasePriority : Normal #:20 [updmgr.exe] ModuleName : C:\Programme\Internet Update Manager\UPDMGR.EXE Command Line : "C:\Programme\Internet Update Manager\UPDMGR.EXE" ProcessID : 1340 ThreadCreationTime : 6-3-2005 10:19:38 AM BasePriority : Normal #:21 [avwupsrv.exe] ModuleName : C:\Programme\AVWin\AVWUPSRV.EXE Command Line : C:\Programme\AVWin\AVWUPSRV.EXE ProcessID : 1296 ThreadCreationTime : 6-3-2005 10:19:38 AM BasePriority : Normal FileVersion : 6.23.01.00 ProductVersion : 6.23.01.00 ProductName : AntiVir Update Service for Windows NT CompanyName : H+BEDV Datentechnik GmbH, Germany FileDescription : AntiVir Software Update Service for Windows InternalName : AntiVir Update Service LegalCopyright : Copyright © 1998 - 2003 by H+BEDV Datentechnik GmbH LegalTrademarks : AntiVir® is a registered trademark of H+BEDV Datentechnik GmbH, Germany OriginalFilename : AVWUpSrv.exe #:22 [wdfmgr.exe] ModuleName : C:\WINDOWS\system32\wdfmgr.exe Command Line : C:\WINDOWS\system32\wdfmgr.exe ProcessID : 1544 ThreadCreationTime : 6-3-2005 10:19:39 AM BasePriority : Normal FileVersion : 5.2.3790.1230 built by: DNSRV(bld4act) ProductVersion : 5.2.3790.1230 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Windows User Mode Driver Manager InternalName : WdfMgr LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : WdfMgr.exe #:23 [talisman.exe] ModuleName : C:\Programme\Talisman 2\talisman.exe Command Line : "C:\Programme\Talisman 2\talisman.exe" ProcessID : 1948 ThreadCreationTime : 6-3-2005 10:19:53 AM BasePriority : Normal FileVersion : 2.8.1.0 ProductVersion : 2.81 ProductName : Talisman 2 CompanyName : Lighttek Software FileDescription : Talisman 2 - shell and desktop manager InternalName : Talisman LegalCopyright : Lighttek Software LegalTrademarks : Lighttek Software OriginalFilename : talisman.exe #:24 [alg.exe] ModuleName : C:\WINDOWS\System32\alg.exe Command Line : C:\WINDOWS\System32\alg.exe ProcessID : 412 ThreadCreationTime : 6-3-2005 10:20:22 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Application Layer Gateway Service InternalName : ALG.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : ALG.exe #:25 [ltaskbar.exe] ModuleName : C:\Programme\Talisman 2\ltaskbar.exe Command Line : "C:\Programme\Talisman 2\ltaskbar.exe" 0 ProcessID : 1356 ThreadCreationTime : 6-3-2005 10:20:25 AM BasePriority : Normal #:26 [profil~1.exe] ModuleName : C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis2\PROFIL~1.EXE Command Line : C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis2\PROFIL~1.EXE -Embedding ProcessID : 520 ThreadCreationTime : 6-3-2005 10:23:29 AM BasePriority : Normal FileVersion : 1.43.00.0002 ProductVersion : 5.00.00.0000 ProductName : T-Online Basissoftware CompanyName : T-Online FileDescription : T-Online Profilverwaltung InternalName : Profilemgr LegalCopyright : Copyright 2001 OriginalFilename : profilemgr.exe #:27 [kernel.exe] ModuleName : C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis2\kernel.exe Command Line : C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis2\kernel.exe -Embedding ProcessID : 228 ThreadCreationTime : 6-3-2005 10:23:33 AM BasePriority : Normal FileVersion : 1.43.0.2 ProductVersion : xx.xx.xx.xxxx ProductName : T-Online Basissoftware CompanyName : T-Online FileDescription : T-Online StartCenter 5.0 InternalName : T-Online Software LegalCopyright : Copyright 2001 OriginalFilename : kernel.exe #:28 [sc_watch.exe] ModuleName : C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis2\sc_watch.exe Command Line : C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis2\sc_watch.exe 66028 ProcessID : 904 ThreadCreationTime : 6-3-2005 10:23:34 AM BasePriority : Normal #:29 [svchost.exe] ModuleName : C:\WINDOWS\System32\svchost.exe Command Line : C:\WINDOWS\System32\svchost.exe -k imgsvc ProcessID : 3132 ThreadCreationTime : 6-3-2005 10:43:27 AM BasePriority : Normal FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) ProductVersion : 5.1.2600.2180 ProductName : Microsoft® Windows® Operating System CompanyName : Microsoft Corporation FileDescription : Generic Host Process for Win32 Services InternalName : svchost.exe LegalCopyright : © Microsoft Corporation. All rights reserved. OriginalFilename : svchost.exe #:30 [emule.exe] ModuleName : C:\Programme\eMule\emule.exe Command Line : "C:\Programme\eMule\emule.exe" ProcessID : 3732 ThreadCreationTime : 6-3-2005 10:43:45 AM BasePriority : Normal FileVersion : 0.46.0 Unicode ProductVersion : 0.46.0 Unicode ProductName : eMule CompanyName : http://www.emule-project.net FileDescription : eMule InternalName : emule.exe LegalCopyright : Copyright © 2002-2005 Merkur - read license.txt for more infos OriginalFilename : emule.exe #:31 [icqlite.exe] ModuleName : C:\Programme\ICQLite\ICQLite.exe Command Line : "C:\Programme\ICQLite\ICQLite.exe" ProcessID : 3860 ThreadCreationTime : 6-3-2005 2:16:04 PM BasePriority : Normal FileVersion : 20, 32, 2315, 0 ProductVersion : 20, 32, 2315, 0 ProductName : ICQLite CompanyName : ICQ Ltd. FileDescription : ICQLite InternalName : ICQ Lite LegalCopyright : Copyright (C) 2002 OriginalFilename : ICQLite.exe #:32 [ad-aware.exe] ModuleName : C:\Programme\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe Command Line : "C:\Programme\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe" ProcessID : 1568 ThreadCreationTime : 6-4-2005 9:23:55 PM BasePriority : Normal FileVersion : 6.2.0.236 ProductVersion : SE 106 ProductName : Lavasoft Ad-Aware SE CompanyName : Lavasoft Sweden FileDescription : Ad-Aware SE Core application InternalName : Ad-Aware.exe LegalCopyright : Copyright © Lavasoft AB Sweden OriginalFilename : Ad-Aware.exe Comments : All Rights Reserved Memory scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 0 Started registry scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Registry Scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 0 Started deep registry scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Deep registry scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 0 MRU List Object Recognized! Location: : C:\Dokumente und Einstellungen\Admin\Anwendungsdaten\microsoft\office\recent Description : list of recently opened documents using microsoft office MRU List Object Recognized! Location: : C:\Dokumente und Einstellungen\Admin\recent Description : list of recently opened documents MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\ahead\nero - burning rom\recent file list Description : list of recently used files in nero burning rom MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct3d MRU List Object Recognized! Location: : software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct3d MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct X MRU List Object Recognized! Location: : software\microsoft\direct3d\mostrecentapplication Description : most recent application to use microsoft direct X MRU List Object Recognized! Location: : software\microsoft\directdraw\mostrecentapplication Description : most recent application to use microsoft directdraw MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\directinput\mostrecentapplication Description : most recent application to use microsoft directinput MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\directinput\mostrecentapplication Description : most recent application to use microsoft directinput MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\frontpage Description : default save location in microsoft frontpage MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\frontpage\editor Description : default add image directory for microsoft frontpage MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\frontpage\editor\per-web image save directories Description : list of image save directories per web in microsoft frontpage MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\frontpage\editor\recent templates Description : list of recently used templates in microsoft publisher MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\frontpage\explorer\frontpage explorer\recent file list Description : list of recently used files in microsoft frontpage MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\frontpage\explorer\frontpage explorer\recent page list Description : list of recently used pages in microsoft frontpage MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\frontpage\explorer\frontpage explorer\recent web list Description : list of recently used webs in microsoft frontpage MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\frontpage\explorer\frontpage explorer\recently created servers Description : list of recently created servers in microsoft frontpage MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\frontpage\explorer\navigation\mrulist Description : list for the navigation feature of microsoft frontpage MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\internet explorer Description : last download directory used in microsoft internet explorer MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\internet explorer\typedurls Description : list of recently entered addresses in microsoft internet explorer MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\mediaplayer\medialibraryui Description : last selected node in the microsoft windows media player media library MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\mediaplayer\player\recentfilelist Description : list of recently used files in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\mediaplayer\player\settings Description : last save as directory used in jasc paint shop pro MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\mediaplayer\player\settings Description : last open directory used in jasc paint shop pro MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\mediaplayer\preferences Description : last playlist index loaded in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\mediaplayer\preferences Description : last playlist loaded in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\mediaplayer\preferences Description : last search path used in microsoft windows media player MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\microsoft management console\recent file list Description : list of recent snap-ins used in the microsoft management console MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\office\10.0\common\general Description : list of recently used symbols in microsoft office MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\office\10.0\common\open find\microsoft powerpoint\settings\insert picture\file name mru Description : list of recent pictured inserted in microsoft powerpoint MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\office\10.0\common\open find\microsoft powerpoint\settings\save as\file name mru Description : list of recent documents saved by microsoft powerpoint MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\office\10.0\common\open find\microsoft word\settings\open\file name mru Description : list of recent documents opened by microsoft word MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\office\10.0\common\open find\microsoft word\settings\save as\file name mru Description : list of recent documents saved by microsoft word MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\office\10.0\powerpoint\recent file list Description : list of recent files used by microsoft powerpoint MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\office\10.0\powerpoint\recent typeface list Description : list of recently used typefaces in microsoft powerpoint MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\office\11.0\common\general Description : list of recently used symbols in microsoft office MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\search assistant\acmru Description : list of recent search terms used with the search assistant MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\windows\currentversion\applets\paint\recent file list Description : list of files recently opened using microsoft paint MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\windows\currentversion\applets\wordpad\recent file list Description : list of recent files opened using wordpad MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru Description : list of recent programs opened MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-500\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru Description : list of recent programs opened MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru Description : list of recently saved files, stored according to file extension MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-500\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru Description : list of recently saved files, stored according to file extension MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\windows\currentversion\explorer\recentdocs Description : list of recent documents opened MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-500\software\microsoft\windows\currentversion\explorer\recentdocs Description : list of recent documents opened MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\windows\currentversion\explorer\runmru Description : mru list for items opened in start | run MRU List Object Recognized! Location: : .DEFAULT\software\microsoft\windows media\wmsdk\general Description : windows media sdk MRU List Object Recognized! Location: : S-1-5-18\software\microsoft\windows media\wmsdk\general Description : windows media sdk MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\microsoft\windows media\wmsdk\general Description : windows media sdk MRU List Object Recognized! Location: : S-1-5-21-1085031214-1563985344-1957994488-1003\software\winrar\dialogedithistory\extrpath Description : winrar "extract-to" history Started Tracking Cookie scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Tracking Cookie Object Recognized! Type : IECache Entry Data : admin@2o7[2].txt TAC Rating : 3 Category : Data Miner Comment : Value : C:\Dokumente und Einstellungen\Admin\Cookies\admin@2o7[2].txt Tracking Cookie Object Recognized! Type : IECache Entry Data : admin@live365[1].txt TAC Rating : 3 Category : Data Miner Comment : Value : C:\Dokumente und Einstellungen\Admin\Cookies\admin@live365[1].txt Tracking cookie scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 2 Objects found so far: 53 Deep scanning and examining files (C »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Disk Scan Result for C:\ »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 53 Scanning Hosts file...... Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts". »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Hosts file scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» 3 entries scanned. New critical objects:0 Objects found so far: 53 Performing conditional scans... »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Conditional scan result: »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» New critical objects: 0 Objects found so far: 53 11:59:50 PM Scan Complete Summary Of This Scan »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»» Total scanning time:00:28:11.743 Objects scanned:158027 Objects identified:2 Objects ignored:0 New critical objects:2 MfG Billy |
|
|
||
05.06.2005, 10:22
Ehrenmitglied
Beiträge: 29434 |
#12
Hallo@ Bjatrax
dann mache Onlinescans + berichte http://virus-protect.org/onlinescan.html Ansonsten, wie steht es ? Alles in Ordnung ? __________ MfG Sabina rund um die PC-Sicherheit |
|
|
||
laut Norton habe ich mir den W32 Tibick eingefangen. Nun hab ich hier schon eine Beschreibung gefunden, wie man ihn entfernt, allerdings war das alles auf einen User zugeschnitten und ich bin mir nicht sicher, ob ich das alles genauso machen darf.
Ich habe bereits mehrmals Hijackthis ausgeführt (leider immer alles gefixed), sodass viele Programme nicht mehr automatisch mitgestartet werden, der Wurm ist aber trotzdem noch da. Außerdem verringert sich manchmal der Speicherplatz, z.B. hatte ich vorhin Speicher freigemacht und hatte dann wieder 2Gigabyte frei und das ist dann innerhalb von 2 min. auf 150mb gesunken.
Das ist mein Hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 10:00:12 PM, on 5/23/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\AVWin\AVGUARD.EXE
C:\Programme\AVWin\AVWUPSRV.EXE
C:\Programme\Norton AntiVirus\navapsvc.exe
C:\Programme\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\T-Online\T-Online_Software_5\Basis-Software\Basis2\kernel.exe
C:\Programme\T-Online\T-Online_Software_5\Basis-Software\Basis2\sc_watch.exe
C:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis2\PROFIL~1.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRAMME\T-ONLINE\T-ONLINE_SOFTWARE_5\BASIS-SOFTWARE\BASIS2\UPDATE.EXE
C:\Programme\Opera\opera.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\NMain.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
C:\Programme\T-online\T-Online_Software_5\eMail\Mail.exe
C:\Programme\WinRAR\WinRAR.exe
C:\DOKUME~1\Admin\LOKALE~1\Temp\Rar$EX02.069\HijackThis.exe
C:\Programme\Norton AntiVirus\CfgWiz.exe
O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O10 - Broken Internet access because of LSP provider 'xfire_lsp.dll' missing
O17 - HKLM\System\CCS\Services\Tcpip\..\{D89CBCD6-4F95-4A90-9524-A72DEED70469}: NameServer = 217.237.148.1 217.237.148.17
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Programme\AVWin\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AntiVir Update Manager (AVUpdateManager) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\Internet Update Manager\UPDMGR.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVWin\AVWUPSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - C:\Programme\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Programme\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe
Bitte helft mir danke.
EDIT:
Hi,
ich nochmal:
Nun hab ich gesehen, dass die Speicherplatzverringerung gestoppt hat, also hab ich mehr Zeit zum schreiben.
Fang ich mal von vorne an:
Ich habe am Freitag festgestellt, dass mein PC nach einiger Zeit automatisch neustartet. Das hat nach dem einschalten i.d.R. eine halbe Stunde gedauert, wenn er dann selbstständig neugestartet hat nichtmal 2 Minuten. Ich habe gedacht, dass es evtl. an einer Überhitzung liegt und nochmal alles durchgecheckt, dabei alles rausgenommen und gesäubert. Das Problem war dann weg.
Ich habe dann Norton installiert (hatte zuvor Antivir drauf), und dann hat erst alles angefangen. Der Computer wurde eewwwiiig langsam und hat sich auch öfter mal aufgehangen. Habe dann Norton in der Nacht von gestern auf heut durchchecken lassen, jedoch heute Mittag abgebrochen, da er nichtmal ein Drittel durchgecheckt hat und das ewig gedauert hat. Nun zeigt er öfters die Meldung, dass ich Tibick drauf habe. Hatte jetzt vor nach den Computer nach [url=http://www.chip.de/c1_forum/thread.html?bwthreadid=561773]dieser[/url] Anleitung zu sichern, dabei wurde jedoch immer der Speicherplatz verringert und ich musste neustarten. Ich weiß nicht, ob daran nur der Tibick dran schuld ist, denke aber dass daran mehrere Viren schuld sind.
MfG