FindIt Nt-2k-XP

FindIt Nt-2k-XP

• Startseite
• Online-Virusscanner
• Antivirus Software
• Antivirus free
• Antivirus trial
• Antispyware
• Windows Programme
• Virus remove
• Firewall/Ports
• Virus Diagnostik
• Backup-Programme
• Registry-Cleaner
• Browser
• Rootkitscanner
• Hijackthis
• CCleaner
• Systemscan
• Eset-SysInspector
• Sandboxie
• Combofix
• Regsearch
• GSI Parser

FindIt_Nt-2k-XP

• FindIt_Nt-2k-XP - FindIt_Nt-2k-XP

• Doppelklick find.bat --> output.txt



• warte, bis der Scan beendet ist und sich er Texteditor öffnet.

• Beispiel:

Warning! This utility will find legitimate files in addition to malware.
------- System Files in System32 Directory -------
Directory of C:\WINDOWS\System32
20-01-2006 13:13 5 AuxDrv32ds_g.ods
11-09-2005 17:28 dllcache
1 File(s) 5 bytes
1 Dir(s) 566.185.984 bytes free

------- Hidden Files in System32 Directory -------

---

• Download: findit9xme.zip
• Link: FindIt

FindIt NT-2K-XP
FindIt 9x-ME

• Beispiel:
Starte den Texteditor und kopiere den folgenden Text hinein
Speichern als fixnotify.reg
abspeichern unter "Alle Dateien"

REGEDIT4 [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crcab] [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wdvd]

------- System Files in System32 Directory ------- Warning! This utility will find legitimate files in addition to malware. Do not remove anything unless you are sure you know what you're doing. Directory of C:\WINDOWS\System32 08-08-2005 10:01 DIR dllcache 0 File(s) 0 bytes 1 Dir(s) 112.693.248 bytes free ------- Hidden Files in System32 Directory ------- ------- System Files in System Directory ------- Volume in drive C has no label. Volume Serial Number is 38FD-EEA4 Directory of C:\WINDOWS\System Volume in drive C has no label. Volume Serial Number is 38FD-EEA4 Directory of C:\WINDOWS\System32 08-08-2005 10:01 dllcache ---------- Files Named "Guard" ------------- ------- Hidden Files in System Directory ------- Volume in drive C has no label. Volume Serial Number is 38FD-EEA4 Directory of C:\WINDOWS\System ---------------- User Agent ------------ REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] One or more CON code pages invalid for given keyboard code No matches found. ------------------ Locate.com Results ------------------ One or more CON code pages invalid for given keyboard code No matches found. ------------ Strings.exe Qoologic Results ------------ -------------- Strings.exe Aspack Results ------------- ----------------- HKLM Run Key ------------------ -------------- Strings.exe Umonitor Results ------------- -------------- Strings.exe Umonitor Results ------------- REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui" "gcasServ"="\"C:\\Program Files\\Microsoft AntiSpyware\\gcasServ.exe\"" "AVGCtrl"="C:\\Program Files\\AVPersonal\\AVGNT.EXE /min"

Suchbegriff eingeben: