der 2. Scanner war Trend Micro Sysclean, hier der Log vom Scan- wenn ich jetzt scanne findet er nichts mehr....
Damage Cleanup Engine (DCE) 3.5(Build 1119)
Windows XP(Build 2600: Service Pack 1)
Start time : Mon Dec 29 07:20:14 2003
Load Damage Cleanup Template (DCT) "C:\Dokumente und Einstellungen\Admini\Eigene Dateien\sysclean\tsc.ptn" (version 228) [success]
WORM_AGOBOT.AO[virus found]
-->delete service("cfgldr","","") success
Complete time : Mon Dec 29 07:20:17 2003
Execute pattern count(593), Virus found count(1), Virus clean count(1), Clean failed count(0)
2003-12-29, 07:20:20, An error occurred while scanning file "C:\Dokumente und Einstellungen\Admini\ntuser.dat": Zugriff verweigert
2003-12-29, 07:20:20, An error occurred while scanning file "C:\Dokumente und Einstellungen\Admini\ntuser.dat.LOG": Zugriff verweigert
2003-12-29, 07:20:23, An error occurred while scanning file "C:\Dokumente und Einstellungen\Admini\Anwendungsdaten\Mozilla\Profiles\default\eo3dnf0s.slt\parent.lock": Zugriff verweigert
2003-12-29, 07:22:26, An error occurred while scanning file "C:\Dokumente und Einstellungen\Admini\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows\UsrClass.dat": Zugriff verweigert
2003-12-29, 07:22:26, An error occurred while scanning file "C:\Dokumente und Einstellungen\Admini\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows\UsrClass.dat.LOG": Zugriff verweigert
2003-12-29, 07:23:13, An error occurred while scanning file "C:\Dokumente und Einstellungen\LocalService\ntuser.dat": Zugriff verweigert
2003-12-29, 07:23:13, An error occurred while scanning file "C:\Dokumente und Einstellungen\LocalService\ntuser.dat.LOG": Zugriff verweigert
2003-12-29, 07:23:13, An error occurred while scanning file "C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows\UsrClass.dat": Zugriff verweigert
2003-12-29, 07:23:13, An error occurred while scanning file "C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows\UsrClass.dat.LOG": Zugriff verweigert
2003-12-29, 07:23:13, An error occurred while scanning file "C:\Dokumente und Einstellungen\NetworkService\ntuser.dat": Zugriff verweigert
2003-12-29, 07:23:13, An error occurred while scanning file "C:\Dokumente und Einstellungen\NetworkService\ntuser.dat.LOG": Zugriff verweigert
2003-12-29, 07:23:13, An error occurred while scanning file "C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows\UsrClass.dat": Zugriff verweigert
2003-12-29, 07:23:13, An error occurred while scanning file "C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Microsoft\Windows\UsrClass.dat.LOG": Zugriff verweigert
2003-12-29, 07:30:29, An error was detected on "C:\System Volume Information\*.*": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\AGENTSVR.EXE-002E45AB.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\CDLSHAND.EXE-0D30425F.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\CSRSS.EXE-12B63473.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\CTFMON.EXE-0E17969B.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\DELDV.EXE-0170E90A.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\DUMPREP.EXE-1B46F901.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\DWWIN.EXE-30875ADC.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\EURO_INSTALL.EXE-0E17FF22.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\EXLIST.EXE-0E66DDAC.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\IDRIVER.EXE-085BB391.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\IE4UINIT.EXE-169A5A39.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\IKERNEL.EXE-092EF074.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\IMAPI.EXE-0BF740A4.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\INSTMSIW.EXE-1FCBB37E.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\ITOUCHCF.EXE-23FB9EAA.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\LSASS.EXE-20DB6D1B.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\MENU.EXE-38512AD6.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\MOUSEX32.EXE-010A85AA.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\MSIINST.EXE-3877834D.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\MSOOBE.EXE-30411B02.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\MSTINIT.EXE-39813B24.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\NTVDM.EXE-1A10A423.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\REGSVR32.EXE-25EEFE2F.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-18E3301D.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-19076CE2.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-206CEC88.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-271001B4.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-2F982821.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-304A2AEA.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-33D7466C.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-451FC2C0.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-464CE849.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-4B7843EF.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNONCE.EXE-2803F297.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SETDRVSIGN.EXE-1AB690A6.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-07C9E695.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-0E9C9F38.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-0F40F254.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-182603EA.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-24D39718.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-2AA3DF9D.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-2D75D4C1.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP.EXE-30678CEA.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUP50.EXE-0CDEF78F.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SETUPDRV.EXE-2BC26C52.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SHMGRATE.EXE-1BA69E68.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SISSETUP.EXE-046A156F.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SISUSBRG.EXE-00472B8D.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SPOOLSV.EXE-282F76A7.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\SVCHOST.EXE-3530F672.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\UNREGMP2.EXE-07CACB61.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\WAITWND.EXE-21A61DCE.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\WEBCOLCT.EXE-1A8A73ED.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\WMIADAP.EXE-2DF425B2.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\WMIPRVSE.EXE-28F301A9.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\XP-ANTISPY.EXE-0BBD423F.pf": Zugriff verweigert
2003-12-29, 07:31:36, Could not set file for reading on "C:\WINDOWS\Prefetch\_INS5176._MP-23834F0A.pf": Zugriff verweigert
2003-12-29, 07:32:33, An error occurred while scanning file "C:\WINDOWS\system32\config\default": Zugriff verweigert
2003-12-29, 07:32:33, An error occurred while scanning file "C:\WINDOWS\system32\config\default.LOG": Zugriff verweigert
2003-12-29, 07:32:33, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM": Zugriff verweigert
2003-12-29, 07:32:33, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM.LOG": Zugriff verweigert
2003-12-29, 07:32:33, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY": Zugriff verweigert
2003-12-29, 07:32:33, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY.LOG": Zugriff verweigert
2003-12-29, 07:32:33, An error occurred while scanning file "C:\WINDOWS\system32\config\software": Zugriff verweigert
2003-12-29, 07:32:33, An error occurred while scanning file "C:\WINDOWS\system32\config\software.LOG": Zugriff verweigert
2003-12-29, 07:32:33, An error occurred while scanning file "C:\WINDOWS\system32\config\system": Zugriff verweigert
2003-12-29, 07:32:33, An error occurred while scanning file "C:\WINDOWS\system32\config\system.LOG": Zugriff verweigert
2003-12-29, 07:34:08, Running scanner "C:\Dokumente und Einstellungen\Admini\Eigene Dateien\sysclean\VSCANTM.BIN"...
2003-12-29, 07:44:57, Files Detected:
Copyright (c) 1990 - 2002 Trend Micro Inc.
Report Date : 12/29/2003 07:34:09
VSAPI Engine Version : 6.810-1005
VSCANTM Version : 1.0-11111728
Virus Pattern Version : 708 (57271 Patterns) (2003/12/23) (170800)
Command Line: C:\Dokumente und Einstellungen\Admini\Eigene Dateien\sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Dokumente und Einstellungen\Admini\Eigene Dateien\sysclean
29414 files have been read.
29414 files have been checked.
21714 files have been scanned.
40502 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 12/29/2003 07:44:57
---------------------------------------------------------------
und AVG fand das beim allerersten scan:
c:\\WINDOWS\SYSTEM32\\WINHLHLP~1.EXE Worm/Agobot Healed OK
---------------------------------------------------------------
grüsse