Hallo,
Bitdefender 10 Virenscanner hat auf meinen Rechner
folgende Sachen gefunden:
1.Packer RLPack.D
2.Generic Mydoom.137d6e9d
Kann mir jemand sagen,wie ich das wieder los werde?
Gruß Turbo38
Wo wird das genau gefunden, bitte den (genauen) Pfad angeben.
hier zwei Logs mit unterschiedlichen
Ergebnissen!
Log Nr.1
//-----------------------------------------------------------------
//
// Product BitDefender Free Edition v10
// Product 10.2
// Created on: 06/07/2008 21:56:20
Virus Statistics
Scan path : A:\
C:\
\
Folders : 1
Files : 55
Memory processes scanned : 24
Archives : 5
Runtime packers : 0
Identified viruses : 1
Infected files : 1
Memory processes infected : 0
Suspect files : 0
Warnings : 0
Disinfected files : 0
Deleted files : 16
Moved files : 0
I/O errors : 0
Scan time : 00:07:40
Scan speed (files/sec) : 0
Spyware Statistics
Registry keys scanned : 233
Registry keys infected : 15
Cookies scanned : 3
Cookies infected : 0
Spyware files infected : 0
Spyware threats detected : 1
Virus definitions : 1348767
Scan plugins : 16
Archive plugins : 42
Unpack plugins : 7
Mail plugins : 6
System plugins : 5
Virus scan options
Detection
[X] Scan boot sectors
[X] Memory Processes
[X] Scan archives
[X] Scan runtime packers
[X] Scan email
File mask
[ ] Programs
[X] All files
[ ] User defined extensions:
[ ] Exclude extensions: ;
Action
Infected objects
[ ] Ignore
[X] Disinfect
[ ] Delete
[ ] Move to quarantine
[ ] Prompt user
Second action
[X] Delete
[X] Enable warnings
[X] Enable heuristics
[ ] Show all files in log
[X] Report file: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Bitdefender\Desktop\Profiles\Logs\deep_scan\1215374179.log
Spyware scan options
[X] Scan for riskware
[ ] Skip dial and applications from scan
[X] Registry keys
[X] Cookies
Summary:
<System>=>C:\WINNT\Fonts\wmsncs.exe (disk) Infected: Packer.RLPack.D
<System>=>C:\WINNT\Fonts\wmsncs.exe (disk) Disinfection failed
<System>=>C:\WINNT\Fonts\wmsncs.exe (disk) Deleted
<System> Archive repacking successfully completed (actions successfully applied)
<System>=>HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\NET RUNTIME OPTIMIZATION SERVICE V2.1.41329_X86\ImagePath=>C:\WINNT\FONTS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\NET RUNTIME OPTIMIZATION SERVICE V2.1.41329_X86\ImagePath=>C:\WINNT\FONTS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\NET RUNTIME OPTIMIZATION SERVICE V2.1.41329_X86\ImagePath=>C:\WINNT\FONTS\WMSNCS.EXE Deleted
<System> Archive repacking has failed (marked actions not taken)
<System>=>HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET001\SERVICES\NET RUNTIME OPTIMIZATION SERVICE V2.1.41329_X86\ImagePath=>C:\WINNT\FONTS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET001\SERVICES\NET RUNTIME OPTIMIZATION SERVICE V2.1.41329_X86\ImagePath=>C:\WINNT\FONTS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET001\SERVICES\NET RUNTIME OPTIMIZATION SERVICE V2.1.41329_X86\ImagePath=>C:\WINNT\FONTS\WMSNCS.EXE Deleted
<System>=>HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET002\SERVICES\NET RUNTIME OPTIMIZATION SERVICE V2.1.41329_X86\ImagePath=>C:\WINNT\FONTS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET002\SERVICES\NET RUNTIME OPTIMIZATION SERVICE V2.1.41329_X86\ImagePath=>C:\WINNT\FONTS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET002\SERVICES\NET RUNTIME OPTIMIZATION SERVICE V2.1.41329_X86\ImagePath=>C:\WINNT\FONTS\WMSNCS.EXE Deleted
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wmsncs Service=>C:\WINNT\FONTS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wmsncs Service=>C:\WINNT\FONTS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wmsncs Service=>C:\WINNT\FONTS\WMSNCS.EXE Deleted
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NvidMediaCenter=>C:\PROGRAMME\GEMEINSAME DATEIEN\SYSTEM\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NvidMediaCenter=>C:\PROGRAMME\GEMEINSAME DATEIEN\SYSTEM\WMSNCS.EXE Disinfection failed
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NvidMediaCenter=>C:\PROGRAMME\GEMEINSAME DATEIEN\SYSTEM\WMSNCS.EXE Deleted
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Spool Driver Service=>C:\WINNT\SYSTEM32\SPOOL\DRIVERS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Spool Driver Service=>C:\WINNT\SYSTEM32\SPOOL\DRIVERS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Spool Driver Service=>C:\WINNT\SYSTEM32\SPOOL\DRIVERS\WMSNCS.EXE Deleted
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wins Service=>C:\WINNT\SYSTEM32\WINS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wins Service=>C:\WINNT\SYSTEM32\WINS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wins Service=>C:\WINNT\SYSTEM32\WINS\WMSNCS.EXE Deleted
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wmsncs Service=>C:\WINNT\FONTS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wmsncs Service=>C:\WINNT\FONTS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wmsncs Service=>C:\WINNT\FONTS\WMSNCS.EXE Deleted
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NvidMediaCenter=>C:\PROGRAMME\GEMEINSAME DATEIEN\SYSTEM\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NvidMediaCenter=>C:\PROGRAMME\GEMEINSAME DATEIEN\SYSTEM\WMSNCS.EXE Disinfection failed
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NvidMediaCenter=>C:\PROGRAMME\GEMEINSAME DATEIEN\SYSTEM\WMSNCS.EXE Deleted
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Spool Driver Service=>C:\WINNT\SYSTEM32\SPOOL\DRIVERS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Spool Driver Service=>C:\WINNT\SYSTEM32\SPOOL\DRIVERS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Spool Driver Service=>C:\WINNT\SYSTEM32\SPOOL\DRIVERS\WMSNCS.EXE Deleted
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wins Service=>C:\WINNT\SYSTEM32\WINS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wins Service=>C:\WINNT\SYSTEM32\WINS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wins Service=>C:\WINNT\SYSTEM32\WINS\WMSNCS.EXE Deleted
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Spool Driver Service=>C:\WINNT\SYSTEM32\SPOOL\DRIVERS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Spool Driver Service=>C:\WINNT\SYSTEM32\SPOOL\DRIVERS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Spool Driver Service=>C:\WINNT\SYSTEM32\SPOOL\DRIVERS\WMSNCS.EXE Deleted
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NvidMediaCenter=>C:\PROGRAMME\GEMEINSAME DATEIEN\SYSTEM\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NvidMediaCenter=>C:\PROGRAMME\GEMEINSAME DATEIEN\SYSTEM\WMSNCS.EXE Disinfection failed
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NvidMediaCenter=>C:\PROGRAMME\GEMEINSAME DATEIEN\SYSTEM\WMSNCS.EXE Deleted
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wins Service=>C:\WINNT\SYSTEM32\WINS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wins Service=>C:\WINNT\SYSTEM32\WINS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wins Service=>C:\WINNT\SYSTEM32\WINS\WMSNCS.EXE Deleted
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wmsncs Service=>C:\WINNT\FONTS\WMSNCS.EXE Detected: Packer.RLPack.D
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wmsncs Service=>C:\WINNT\FONTS\WMSNCS.EXE Disinfection failed
<System>=>HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wmsncs Service=>C:\WINNT\FONTS\WMSNCS.EXE Deleted
Log Nr.2
// Created on: 06/07/2008 19:42:29
Folders : 115
Files : 304
Memory processes scanned : 22
Archives : 17
Runtime packers : 8
Identified viruses : 2
Infected files : 2
Deleted files : 1
Scan time : 00:05:39
Registry keys scanned : 222
Registry keys infected : 4
[X] Move to quarantine
[X] Report file: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Bitdefender\Desktop\Profiles\Logs\deep_scan\1215366149.log
<System>=>C:\WINNT\Fonts\wmsncs.exe (disk) Move failed
<System>=>C:\WINNT\Fonts\wmsncs.exe (full dump) Infected: Generic.Mydoom.137D6E9D
<System>=>C:\WINNT\Fonts\wmsncs.exe (full dump) Deleted
<System>=>HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\NET RUNTIME OPTIMIZATION SERVICE V2.1.41329_X86\ImagePath=>C:\WINNT\FONTS\WMSNCS.EXE Move failed
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\NvidMediaCenter=>C:\PROGRAMME\GEMEINSAME DATEIEN\SYSTEM\WMSNCS.EXE Move failed
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Spool Driver Service=>C:\WINNT\SYSTEM32\SPOOL\DRIVERS\WMSNCS.EXE Move failed
<System>=>HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\Wins Service=>C:\WINNT\SYSTEM32\WINS\WMSNCS.EXE Move failed
Werde wohl alles vom Rechner schmeißen und
neu auflegen müssen.
Hallo ,
habe folgende Vieren auf meinen Rechner:
1.Packer RLPack.d
2.Generick Mydoom 137d6e9d