Ich habe keine ahnung wie ich TR/Swizzor.A los bekomme

#16 Scanning Report
Saturday, April 19, 2008 18:24:49 - 21:01:32
Computer name: DEPP
Scanning type: Scan system for malware, rootkits
Target: C:\ D:\ E:\ F:\


--------------------------------------------------------------------------------

Result: 20 malware found
Monitor.Win32.Ardamax (spyware)
System
NetTool.Win32.Calc-DNet (spyware)
System
Stealth_file (hidden item)
C:\SYZ_DAT\ALI.EXE (Submitted)
C:\SYZ_DAT\CDLOCK.DLL (Submitted)
C:\SYZ_DAT\CPY.EXE (Submitted)
C:\SYZ_DAT\DIRLIST (Submitted)
C:\SYZ_DAT\DIRLIST_BAK (Submitted)
C:\SYZ_DAT\EMF_DECRYPT.EXE (Submitted)
C:\SYZ_DAT\FLDRVW61.OCX (Submitted)
C:\SYZ_DAT\INSTALL.EXE (Submitted)
C:\SYZ_DAT\MAGIC.EXE (Submitted)
C:\SYZ_DAT\MF.CHM (Submitted)
C:\SYZ_DAT\MFX (Submitted)
C:\SYZ_DAT\SYSTRAY.EXE (Submitted)
C:\SYZ_DAT\TB.EXE (Submitted)
C:\WINDOWS\SYSTEM32\DRIVERS\MFX.SYS (Submitted)
Tracking Cookie (spyware)
System
Trojan-Downloader.Win32.Zlob.hja (virus)
C:\DOKUMENTE UND EINSTELLUNGEN\BIER\EIGENE DATEIEN\JONAS\CRACK.EXE (Renamed & Submitted)
Trojan.VBS.CDJack.a (virus)
C:\DOKUMENTE UND EINSTELLUNGEN\BIER\EIGENE DATEIEN\JONAS\RESTLICHE DATEN\LUSTIG.VBS (Renamed & Submitted)
W32/Malware (virus)
C:\PROGRAMME\T-ONLINE\T-ONLINE_SOFTWARE_6\MESSENGER\CLEAN.EXE (Submitted)

--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 101000
System: 5652
Not scanned: 15
Actions:
Disinfected: 0
Renamed: 2
Deleted: 0
None: 18
Submitted: 17
Files not scanned:
C:\HIBERFIL.SYS
C:\PAGEFILE.SYS
C:\WINDOWS\SYSTEM32\DRIVERS\SPTD.SYS
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
C:\WINDOWS\SYSTEM32\CONFIG\SAM
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
C:\WINDOWS\SOFTWAREDISTRIBUTION\EVENTCACHE\{B20147F0-AB48-45C3-93C4-EA834EB2FAED}.BIN
C:\PROGRAMME\T-DSL SPEEDMANAGER\PCANDIS5.SYS
C:\DOKUMENTE UND EINSTELLUNGEN\BIER\ANWENDUNGSDATEN\ICQ\APPLICATION.MDB
C:\DOKUMENTE UND EINSTELLUNGEN\BIER\ANWENDUNGSDATEN\ICQ\194485332\MESSAGES.MDB
C:\DOKUMENTE UND EINSTELLUNGEN\BIER\ANWENDUNGSDATEN\ICQ\194485332\OWNER.MDB
C:\DOKUMENTE UND EINSTELLUNGEN\ALL USERS\DOKUMENTE\TV-AUFZEICHNUNGEN\TEMPREC\TEMPSBE\MSDVRMM_2485507462_4063232_32186
C:\DOKUMENTE UND EINSTELLUNGEN\ALL USERS\DOKUMENTE\TV-AUFZEICHNUNGEN\TEMPREC\TEMPSBE\MSDVRMM_2485507462_917504_32103

--------------------------------------------------------------------------------

Options
Scanning engines:
F-Secure USS: 2.30.0
F-Secure Blacklight: 1.0.64
F-Secure Hydra: 2.8.8110, 2008-04-18
F-Secure Pegasus: 1.20.0, 2008-02-28
F-Secure AVP: 7.0.171, 2008-04-18
Scanning options:
Scan defined files: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ZIP XXX ANI AVB BAT CMD JPG LSP MAP MHT MIF PHP POT SWF WMF NWS TAR
Use Advanced heuristics

--------------------------------------------------------------------------------

Copyright © 1998-2007 Product support |Send virus sample to F-Secure
F-Secure assumes no responsibility for material created or published by third parties that F-Secure World Wide Web pages have a link to. Unless you have clearly stated otherwise, by submitting material to any of our servers, for example by E-mail or via our F-Secure's CGI E-mail, you agree that the material you make available may be published in the F-Secure World Wide Pages or hard-copy publications. You will reach F-Secure public web site by clicking on underlined links. While doing this, your access will be logged to our private access statistics with your domain name.This information will not be given to any third party. You agree not to take action against us in relation to material that you submit. Unless you have clearly stated otherwise, by submitting material you warrant that F-Secure may incorporate any concepts described in it in the F-Secure products/publications without liability.

#17 Hallo,

eine CRACK.EXE ! Nun, da brauchst du dich nicht zu wundern, dass dein System verseucht ist + verrückt spielt !!! denn das war der Trojan-Downloader.

nun, zum Abschluss noch ein scan mit ESET Online Scanner
http://virus-protect.org/onlinescan.html

dann bist du "entlassen"
__________
MfG Sabina

rund um die PC-Sicherheit