]]>
download: http://www.sysinternals.com/files/tcpview.zip
bzw um zusehen welche programme grad unfug treiben ebenfalls von sysinternals: process explorer
http://www.sysinternals.com/ntw2k/freew ... cexp.shtml
download http://www.sysinternals.com/files/procexpnt.zip bzw http://www.sysinternals.com/files/procexp9x.zip
Statistik: Verfasst von georg — 23.06.2004, 17:18
]]>
]]>
]]>
]]>
]]>
]]>
]]>
]]>
]]>
]]>
Auf Anfrage an Evanzo habe ich nur den Rat bekommen, meinen eigenen Rechner nach Viren zu durchsuchen (hab ich ja schonmal geschrieben).
Statistik: Verfasst von Bödi — 23.06.2004, 14:48
]]>
ps, wer war das wieder:
Jun 22 19:41:38 hackt sendmail[12805]: i5MHfMi12805: from=<anja77@hotmail.com>, size=41701,
class=0, nrcpts=1, msgid=<200406221741.i5MHfMi12805@hackt.net>,
proto=ESMTP, daemon=MTA, relay=Ba9e7.b.pppool.de [213.7.169.231]
A virus was found in an email from: <webmaster@miniatur-wunderland.de>
The message was addressed to: -> <kschoiceforum@hackt.net>
Jun 22 19:42:09 hackt sendmail[12959]: i5MHfni12959: from=<webmaster@miniatur-wunderland.de>, size=41102,
class=0, nrcpts=1, msgid=<200406221741.i5MHfni12959@hackt.net>,
proto=ESMTP, daemon=MTA, relay=Ba9e7.b.pppool.de [213.7.169.231]
A virus was found in an email from: <anja77@hotmail.com>
The message was addressed to: -> <kschoiceforum@hackt.net>
webserver log:
213.7.169.231 - - [22/Jun/2004:19:55:45 +0200] "GET /shadowman.jpg HTTP/1.1" 304 - "http://www.kschoice.de/phpbb/viewtopic.php?t=836&start=75" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Hotbar 4.4.5.0; (R1 1.3))"
213.7.169.231 - - [22/Jun/2004:19:55:45 +0200] "GET /marlene3.jpg HTTP/1.1" 304 - "http://www.kschoice.de/phpbb/viewtopic.php?t=836&start=75" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Hotbar 4.4.5.0; (R1 1.3))"
213.7.169.231 - - [22/Jun/2004:19:55:45 +0200] "GET /admin5.jpg HTTP/1.1" 304 - "http://www.kschoice.de/phpbb/viewtopic.php?t=836&start=75" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Hotbar 4.4.5.0; (R1 1.3))"
213.7.169.231 - - [22/Jun/2004:19:55:45 +0200] "GET /k-s.gif HTTP/1.1" 304 - "http://www.kschoice.de/phpbb/viewtopic.php?t=836&start=75" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Hotbar 4.4.5.0; (R1 1.3))"
213.7.169.231 - - [22/Jun/2004:20:04:03 +0200] "GET /admin5.jpg HTTP/1.1" 304 - "http://www.kschoice.de/phpbb/viewtopic.php?t=716&start=25" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Hotbar 4.4.5.0; (R1 1.3))"
213.7.169.231 - - [22/Jun/2004:20:04:04 +0200] "GET /k-s.gif HTTP/1.1" 304 - "http://www.kschoice.de/phpbb/viewtopic.php?t=716&start=25" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Hotbar 4.4.5.0; (R1 1.3))"
213.7.169.231 - - [22/Jun/2004:20:04:04 +0200] "GET /shadowman.jpg HTTP/1.1" 304 - "http://www.kschoice.de/phpbb/viewtopic.php?t=716&start=25" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Hotbar 4.4.5.0; (R1 1.3))"
Statistik: Verfasst von georg — 23.06.2004, 14:17
]]>
]]>
]]>