Home » Spyware & Browser Hijacker Support Forum » firefox öffnet sich selbst (popups) was kann ich tun » Themenansicht
firefox öffnet sich selbst (popups) was kann ich tun |
||
|---|---|---|
| #0
| ||
|
13.11.2005, 15:17
...neu hier
Beiträge: 6 |
||
 
|
|
|
|
13.11.2005, 16:18
Ehrenmitglied
 Beiträge: 29434 |
#2
Hallo jigga83
kopiere hier bitte das Log von Option 1 http://virus-protect.org/l2mfix.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
13.11.2005, 16:59
...neu hier
Themenstarter Beiträge: 6 |
#3
dies is der log von option 1
L2MFIX find log 1.04a These are the registry keys present ********************************************************************************** Winlogon/notify: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent] "DLLName"="Ati2evxx.dll" "Asynchronous"=dword:00000000 "Impersonate"=dword:00000001 "Lock"="AtiLockEvent" "Logoff"="AtiLogoffEvent" "Logon"="AtiLogonEvent" "Disconnect"="AtiDisConnectEvent" "Reconnect"="AtiReConnectEvent" "Safe"=dword:00000000 "Shutdown"="AtiShutdownEvent" "StartScreenSaver"="AtiStartScreenSaverEvent" "StartShell"="AtiStartShellEvent" "Startup"="AtiStartupEvent" "StopScreenSaver"="AtiStopScreenSaverEvent" "Unlock"="AtiUnLockEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\ 6c,00,00,00 "Logoff"="ChainWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet] "Asynchronous"=dword:00000000 "Impersonate"=dword:00000000 "DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Logoff"="CryptnetWlxLogoffEvent" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll] "DLLName"="cscdll.dll" "Logon"="WinlogonLogonEvent" "Logoff"="WinlogonLogoffEvent" "ScreenSaver"="WinlogonScreenSaverEvent" "Startup"="WinlogonStartupEvent" "Shutdown"="WinlogonShutdownEvent" "StartShell"="WinlogonStartShellEvent" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] "DLLName"="wlnotify.dll" "Logon"="SCardStartCertProp" "Logoff"="SCardStopCertProp" "Lock"="SCardSuspendCertProp" "Unlock"="SCardResumeCertProp" "Enabled"=dword:00000001 "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule] "Asynchronous"=dword:00000000 "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Impersonate"=dword:00000000 "StartShell"="SchedStartShell" "Logoff"="SchedEventLogOff" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy] "Logoff"="WLEventLogoff" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000001 "DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn] "DLLName"="WlNotify.dll" "Lock"="SensLockEvent" "Logon"="SensLogonEvent" "Logoff"="SensLogoffEvent" "Safe"=dword:00000001 "MaxWait"=dword:00000258 "StartScreenSaver"="SensStartScreenSaverEvent" "StopScreenSaver"="SensStopScreenSaverEvent" "Startup"="SensStartupEvent" "Shutdown"="SensShutdownEvent" "StartShell"="SensStartShellEvent" "PostShell"="SensPostShellEvent" "Disconnect"="SensDisconnectEvent" "Reconnect"="SensReconnectEvent" "Unlock"="SensUnlockEvent" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Setup] "Asynchronous"=dword:00000000 "DllName"="C:\\WINDOWS\\system32\\mvn0l95m1.dll" "Impersonate"=dword:00000000 "Logon"="WinLogon" "Logoff"="WinLogoff" "Shutdown"="WinShutdown" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv] "Asynchronous"=dword:00000000 "DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\ 6c,00,6c,00,00,00 "Impersonate"=dword:00000000 "Logoff"="TSEventLogoff" "Logon"="TSEventLogon" "PostShell"="TSEventPostShell" "Shutdown"="TSEventShutdown" "StartShell"="TSEventStartShell" "Startup"="TSEventStartup" "MaxWait"=dword:00000258 "Reconnect"="TSEventReconnect" "Disconnect"="TSEventDisconnect" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon] "DLLName"="wlnotify.dll" "Logon"="RegisterTicketExpiredNotificationEvent" "Logoff"="UnregisterTicketExpiredNotificationEvent" "Impersonate"=dword:00000001 "Asynchronous"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wzcnotif] "DLLName"="wzcdlg.dll" "Logon"="WZCEventLogon" "Logoff"="WZCEventLogoff" "Impersonate"=dword:00000000 "Asynchronous"=dword:00000000 RegDACL 5.1 - Permissions Manager for Registry keys for Windows NT 4 and above Copyright (c) 1999-2001 Frank Heyne Software (http://www.heysoft.de) This program is Freeware, use it on your own risk! Access Control List for Registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify: (NI) ALLOW Full access NT-AUTORITŽT\SYSTEM (IO) ALLOW Full access NT-AUTORITŽT\SYSTEM (ID-NI) ALLOW Read VORDEFINIERT\Benutzer (ID-IO) ALLOW Read VORDEFINIERT\Benutzer (ID-NI) ALLOW Read VORDEFINIERT\Hauptbenutzer (ID-IO) ALLOW Read VORDEFINIERT\Hauptbenutzer (ID-NI) ALLOW Full access VORDEFINIERT\Administratoren (ID-IO) ALLOW Full access VORDEFINIERT\Administratoren (ID-NI) ALLOW Full access NT-AUTORITŽT\SYSTEM (ID-IO) ALLOW Full access NT-AUTORITŽT\SYSTEM (ID-IO) ALLOW Full access ERSTELLER-BESITZER ********************************************************************************** useragent: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform] "{960337BB-A70E-E593-8001-53B51F07BCE9}"="" ********************************************************************************** Shell Extension key: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved] "{00022613-0000-0000-C000-000000000046}"="Eigenschaften fr Multimediadatei" "{176d6597-26d3-11d1-b350-080036a75b03}"="ICM-Scannerverwaltung" "{1F2E5C40-9550-11CE-99D2-00AA006E086C}"="NTFS-Sicherheit" "{3EA48300-8CF6-101B-84FB-666CCB9BCD32}"="OLE-Eigenschaftenseite fr Dokumente" "{40dd6e20-7c17-11ce-a804-00aa003ca9f6}"="Shellerweiterungen fr Freigaben" "{41E300E0-78B6-11ce-849B-444553540000}"="PlusPack CPL Extension" "{42071712-76d4-11d1-8b24-00a0c9068ff3}"="CPL-Erweiterung fr Grafikkarten" "{42071713-76d4-11d1-8b24-00a0c9068ff3}"="CPL-Erweiterung fr Bildschirme" "{42071714-76d4-11d1-8b24-00a0c9068ff3}"="CPL-Erweiterung fr Anzeigeverschiebung" "{4E40F770-369C-11d0-8922-00A024AB2DBB}"="DS-Sicherheit" "{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}"="Kompatibilit„tsseite" "{56117100-C0CD-101B-81E2-00AA004AE837}"="Shell-Datenauszughandler" "{59099400-57FF-11CE-BD94-0020AF85B590}"="Erweiterung fr Datentr„gerkopien" "{59be4990-f85c-11ce-aff7-00aa003ca9f6}"="Shellerweiterungen fr Microsoft Windows-Netzwerkobjekte" "{5DB2625A-54DF-11D0-B6C4-0800091AA605}"="ICM-Monitorverwaltung" "{675F097E-4C4D-11D0-B6C1-0800091AA605}"="ICM-Druckerverwaltung" "{764BF0E1-F219-11ce-972D-00AA00A14F56}"="Shellerweiterungen fr die Dateikomprimierung" "{77597368-7b15-11d0-a0c2-080036af3f03}"="Shellerweiterung fr Webdrucker" "{7988B573-EC89-11cf-9C00-00AA00A14F56}"="Disk Quota UI" "{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA}"="Kontextmen fr die Verschlsselung" "{85BBD920-42A0-1069-A2E4-08002B30309D}"="Aktenkoffer" "{88895560-9AA2-1069-930E-00AA0030EBC8}"="Erweiterung fr HyperTerminal-Icons" "{BD84B380-8CA2-1069-AB1D-08000948F534}"="Schriftarten" "{DBCE2480-C732-101B-BE72-BA78E9AD5B27}"="ICC-Profil" "{F37C5810-4D3F-11d0-B4BF-00AA00BBB723}"="Druckersicherheit" "{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"="Shellerweiterungen fr Freigaben" "{f92e8c40-3d33-11d2-b1aa-080036a75b03}"="Display TroubleShoot CPL Extension" "{7444C717-39BF-11D1-8CD9-00C04FC29D45}"="Krypto-PKO-Erweiterung" "{7444C719-39BF-11D1-8CD9-00C04FC29D45}"="Krypto-Sign-Erweiterung" "{7007ACC7-3202-11D1-AAD2-00805FC1270E}"="Netzwerkverbindungen" "{992CFFA0-F557-101A-88EC-00DD010CCC48}"="Netzwerkverbindungen" "{E211B736-43FD-11D1-9EFB-0000F8757FCD}"="Scanner und Kameras" "{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}"="Scanner und Kameras" "{905667aa-acd6-11d2-8080-00805f6596d2}"="Scanner und Kameras" "{3F953603-1008-4f6e-A73A-04AAC7A992F1}"="Scanner und Kameras" "{83bbcbf3-b28a-4919-a5aa-73027445d672}"="Scanner und Kameras" "{F0152790-D56E-4445-850E-4F3117DB740C}"="Remote Sessions CPL Extension" "{5F327514-6C5E-4d60-8F16-D07FA08A78ED}"="Eigenschaftenseitenerweiterung des automatischen Updates" "{60254CA5-953B-11CF-8C96-00AA00B8708C}"="Shellerweiterungen fr Windows Script Host" "{2206CDB2-19C1-11D1-89E0-00C04FD7A829}"="Microsoft Datenverknpfung" "{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Icon Handler" "{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}"="Tasks Folder Shell Extension" "{D6277990-4C6A-11CF-8D87-00AA0060F5BF}"="Geplante Tasks" "{0DF44EAA-FF21-4412-828E-260A8728E7F1}"="Taskleiste und Startmen" "{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}"="Suchen" "{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}"="Hilfe und Support" "{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}"="Hilfe und Support" "{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}"="Ausfhren..." "{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}"="Internet" "{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}"="E-Mail" "{D20EA4E1-3957-11d2-A40B-0C5020524152}"="Schriftarten" "{D20EA4E1-3957-11d2-A40B-0C5020524153}"="Verwaltung" "{875CB1A1-0F29-45de-A1AE-CFB4950D0B78}"="Audio Media Properties Handler" "{40C3D757-D6E4-4b49-BB41-0E5BBEA28817}"="Video Media Properties Handler" "{E4B29F9D-D390-480b-92FD-7DDB47101D71}"="Wav Properties Handler" "{87D62D94-71B3-4b9a-9489-5FE6850DC73E}"="Avi Properties Handler" "{A6FD9E45-6E44-43f9-8644-08598F5A74D9}"="Midi Properties Handler" "{c5a40261-cd64-4ccf-84cb-c394da41d590}"="Video Thumbnail Extractor" "{5E6AB780-7743-11CF-A12B-00AA004AE837}"="Microsoft Internet Toolbar" "{22BF0C20-6DA7-11D0-B373-00A0C9034938}"="Download Status" "{91EA3F8B-C99B-11d0-9815-00C04FD91972}"="Augmented Shell Folder" "{6413BA2C-B461-11d1-A18A-080036B11A03}"="Augmented Shell Folder 2" "{F61FFEC1-754F-11d0-80CA-00AA005B4383}"="BandProxy" "{7BA4C742-9E81-11CF-99D3-00AA004AE837}"="Microsoft BrowserBand" "{30D02401-6A81-11d0-8274-00C04FD5AE38}"="Search Band" "{32683183-48a0-441b-a342-7c2a440a9478}"="Media Band" "{169A0691-8DF9-11d1-A1C4-00C04FD75D13}"="In-pane search" "{07798131-AF23-11d1-9111-00A0C98BA67D}"="Web Search" "{AF4F6510-F982-11d0-8595-00AA004CD6D8}"="Registry Tree Options Utility" "{01E04581-4EEE-11d0-BFE9-00AA005B4383}"="&Adresse" "{A08C11D2-A228-11d0-825B-00AA005B4383}"="Address EditBox" "{00BB2763-6A77-11D0-A535-00C04FD7D062}"="Microsoft AutoComplete" "{7376D660-C583-11d0-A3A5-00C04FD706EC}"="TridentImageExtractor" "{6756A641-DE71-11d0-831B-00AA005B4383}"="MRU AutoComplete List" "{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}"="Custom MRU AutoCompleted List" "{7e653215-fa25-46bd-a339-34a2790f3cb7}"="Accessible" "{acf35015-526e-4230-9596-becbe19f0ac9}"="Track Popup Bar" "{E0E11A09-5CB8-4B6C-8332-E00720A168F2}"="Syntaxanalyse der Adressleiste" "{00BB2764-6A77-11D0-A535-00C04FD7D062}"="Microsoft History AutoComplete List" "{03C036F1-A186-11D0-824A-00AA005B4383}"="Microsoft Shell Folder AutoComplete List" "{00BB2765-6A77-11D0-A535-00C04FD7D062}"="Microsoft Multiple AutoComplete List Container" "{ECD4FC4E-521C-11D0-B792-00A0C90312E1}"="Shell Band Site Menu" "{3CCF8A41-5C85-11d0-9796-00AA00B90ADF}"="Shell DeskBarApp" "{ECD4FC4C-521C-11D0-B792-00A0C90312E1}"="Shell DeskBar" "{ECD4FC4D-521C-11D0-B792-00A0C90312E1}"="Shell Rebar BandSite" "{DD313E04-FEFF-11d1-8ECD-0000F87A470C}"="User Assist" "{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}"="Global Folder Settings" "{EFA24E61-B078-11d0-89E4-00C04FC9E26E}"="Favorites Band" "{0A89A860-D7B1-11CE-8350-444553540000}"="Shell Automation Inproc Service" "{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}"="Shell DocObject Viewer" "{A5E46E3A-8849-11D1-9D8C-00C04FC99D61}"="Microsoft Browser Architecture" "{FBF23B40-E3F0-101B-8488-00AA003E56F8}"="InternetShortcut" "{3C374A40-BAE4-11CF-BF7D-00AA006946EE}"="Microsoft URL-Verlauf-Dienst" "{FF393560-C2A7-11CF-BFF4-444553540000}"="Verlauf" "{7BD29E00-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{7BD29E01-76C1-11CF-9DD0-00A0C9034933}"="Temporary Internet Files" "{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"="Microsoft Url Sucheingriff" "{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}"="IE4 Suite-Begráungsbildschirm" "{67EA19A0-CCEF-11d0-8024-00C04FD75D13}"="CDF Extension Copy Hook" "{131A6951-7F78-11D0-A979-00C04FD705A2}"="ISFBand OC" "{9461b922-3c5a-11d2-bf8b-00c04fb93661}"="Search Assistant OC" "{3DC7A020-0ACD-11CF-A9BB-00AA004AE837}"="Internet" "{871C5380-42A0-1069-A2EA-08002B30309D}"="Internet Name Space" "{EFA24E64-B078-11d0-89E4-00C04FC9E26E}"="Explorer-Band" "{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}"="Sendmail service" "{88C6C381-2E85-11D0-94DE-444553540000}"="ActiveX-Cacheordner" "{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"="WebCheck" "{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}"="Subscription Mgr" "{F5175861-2688-11d0-9C5E-00AA00A45957}"="Subscription Folder" "{08165EA0-E946-11CF-9C87-00AA005127ED}"="WebCheckWebCrawler" "{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}"="WebCheckChannelAgent" "{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}"="TrayAgent" "{7D559C10-9FE9-11d0-93F7-00AA0059CE02}"="Code Download Agent" "{E6CC6978-6B6E-11D0-BECA-00C04FD940BE}"="ConnectionAgent" "{D8BD2030-6FC9-11D0-864F-00AA006809D9}"="PostAgent" "{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}"="WebCheck SyncMgr Handler" "{352EC2B7-8B9A-11D1-B8AE-006008059382}"="Shell Application Manager" "{0B124F8F-91F0-11D1-B8B5-006008059382}"="Installed Apps Enumerator" "{CFCCC7A0-A282-11D1-9082-006008059382}"="Darwin App Publisher" "{e84fda7c-1d6a-45f6-b725-cb260c236066}"="Shell Image Verbs" "{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}"="Shell Image Data Factory" "{3F30C968-480A-4C6C-862D-EFC0897BB84B}"="GDI+ Dateiminiaturansicht-Extrahierungsprogramm" "{9DBD2C50-62AD-11d0-B806-00C04FD706EC}"="Zusammenfassungs-Miniaturansichthandler (DOCFILES)" "{EAB841A0-9550-11cf-8C16-00805F1408F3}"="HTML-Extrahierungsprogramm" "{eb9b1153-3b57-4e68-959a-a3266bc3d7fe}"="Shell Image Property Handler" "{CC6EEFFB-43F6-46c5-9619-51D571967F7D}"="Webpublishing-Assistent" "{add36aa8-751a-4579-a266-d66f5202ccbb}"="Bestellung von Abzgen ber das Internet" "{6b33163c-76a5-4b6c-bf21-45de9cd503a1}"="Shellobjekt des Webpublishing-Assistenten" "{58f1f272-9240-4f51-b6d4-fd63d1618591}"="Passport-Assistent" "{7A9D77BD-5403-11d2-8785-2E0420524153}"="Benutzerkonten" "{BD472F60-27FA-11cf-B8B4-444553540000}"="Compressed (zipped) Folder Right Drag Handler" "{888DCA60-FC0A-11CF-8F0F-00C04FD7D062}"="Compressed (zipped) Folder SendTo Target" "{63da6ec0-2e98-11cf-8d82-444553540000}"="FTP Folders Webview" "{883373C3-BF89-11D1-BE35-080036B11A03}"="Microsoft DocProp Shell Ext" "{A9CF0EAE-901A-4739-A481-E35B73E47F6D}"="Microsoft DocProp Inplace Edit Box Control" "{8EE97210-FD1F-4B19-91DA-67914005F020}"="Microsoft DocProp Inplace ML Edit Box Control" "{0EEA25CC-4362-4A12-850B-86EE61B0D3EB}"="Microsoft DocProp Inplace Droplist Combo Control" "{6A205B57-2567-4A2C-B881-F787FAB579A3}"="Microsoft DocProp Inplace Calendar Control" "{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}"="Microsoft DocProp Inplace Time Control" "{8A23E65E-31C2-11d0-891C-00A024AB2DBB}"="Directory Query UI" "{9E51E0D0-6E0F-11d2-9601-00C04FA31A86}"="Shell properties for a DS object" "{163FDC20-2ABC-11d0-88F0-00A024AB2DBB}"="Directory Object Find" "{F020E586-5264-11d1-A532-0000F8757D7E}"="Directory Start/Search Find" "{0D45D530-764B-11d0-A1CA-00AA00C16E65}"="Directory Property UI" "{62AE1F9A-126A-11D0-A14B-0800361B1103}"="Directory Context Menu Verbs" "{ECF03A33-103D-11d2-854D-006008059367}"="MyDocs Copy Hook" "{ECF03A32-103D-11d2-854D-006008059367}"="MyDocs Drop Target" "{4a7ded0a-ad25-11d0-98a8-0800361b1103}"="MyDocs Properties" "{750fdf0e-2a26-11d1-a3ea-080036587f03}"="Offline Files Menu" "{10CFC467-4392-11d2-8DB4-00C04FA31A66}"="Offline Files Folder Options" "{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}"="Ordner 'Offlinedateien'" "{143A62C8-C33B-11D1-84FE-00C04FA34A14}"="Microsoft Agent Character Property Sheet Handler" "{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}"="DfsShell" "{60fd46de-f830-4894-a628-6fa81bc0190d}"="%DESC_PublishDropTarget%" "{7A80E4A8-8005-11D2-BCF8-00C04F72C717}"="MMC Icon Handler" "{0CD7A5C0-9F37-11CE-AE65-08002B2E1262}"=".CAB file viewer" "{32714800-2E5F-11d0-8B85-00AA0044F941}"="&Nach Personen..." "{8DD448E6-C188-4aed-AF92-44956194EB1F}"="Windows Media Player Play as Playlist Context Menu Handler" "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"="Windows Media Player Burn Audio CD Context Menu Handler" "{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}"="Windows Media Player Add to Playlist Context Menu Handler" "{1D2680C9-0E2A-469d-B787-065558BC7D43}"="Fusion Cache" "{640167b4-59b0-47a6-b335-a6b3c0695aea}"="Portable Media Devices" "{cc86590a-b60a-48e6-996b-41d25ed39a1e}"="Portable Media Devices Menu" "{BDEADF00-C265-11D0-BCED-00A0C90AB50F}"="Webordner" "{42042206-2D85-11D3-8CFF-005004838597}"="Microsoft Office HTML Icon Handler" "{73B24247-042E-4EF5-ADC2-42F62E6FD654}"="ICQ Lite Shell Extension" "{5E2121EE-0300-11D4-8D3B-444553540000}"="Catalyst Context Menu extension" "{5464D816-CF16-4784-B9F3-75C0DB52B499}"="Yahoo! Mail" "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"="WinRAR shell extension" "{8F7261D0-D2B9-11D2-9909-00605205B24C}"="CuteFTP Shell Extension" @="" "{6af09ec9-b429-11d4-a1fb-0090960218cb}"="My Bluetooth Places" "{00DF1F20-0849-A4D1-0239-00D0AF3E9CB0}"="TuneUp Shredder Shell Context Menu Extension" "{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}"="Set Program Access and Defaults" "{596AB062-B4D2-4215-9F74-E9109B0A8153}"="Previous Versions Property Page" "{9DB7A13C-F208-4981-8353-73CC61AE2783}"="Previous Versions" "{4149B8A1-3076-40FB-845A-8ADB11FD8CF2}"="" "{921A9AF0-A0DA-4B90-B941-D5A7B5D80028}"="" "{f39a0dc0-9cc8-11d0-a599-00c04fd64433}"="Channeldatei" "{f3aa0dc0-9cc8-11d0-a599-00c04fd64434}"="Channelverknpfung" "{f3ba0dc0-9cc8-11d0-a599-00c04fd64435}"="Channelhandlerobjekt" "{f3da0dc0-9cc8-11d0-a599-00c04fd64437}"="Channel Menu" "{f3ea0dc0-9cc8-11d0-a599-00c04fd64438}"="Channel Properties" ********************************************************************************** HKEY ROOT CLASSIDS: Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{4149B8A1-3076-40FB-845A-8ADB11FD8CF2}] @="" [HKEY_CLASSES_ROOT\CLSID\{4149B8A1-3076-40FB-845A-8ADB11FD8CF2}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{4149B8A1-3076-40FB-845A-8ADB11FD8CF2}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{4149B8A1-3076-40FB-845A-8ADB11FD8CF2}\InprocServer32] @="C:\\WINDOWS\\system32\\guard.tmp" "ThreadingModel"="Apartment" Windows Registry Editor Version 5.00 [HKEY_CLASSES_ROOT\CLSID\{921A9AF0-A0DA-4B90-B941-D5A7B5D80028}] @="" [HKEY_CLASSES_ROOT\CLSID\{921A9AF0-A0DA-4B90-B941-D5A7B5D80028}\Implemented Categories] @="" [HKEY_CLASSES_ROOT\CLSID\{921A9AF0-A0DA-4B90-B941-D5A7B5D80028}\Implemented Categories\{00021492-0000-0000-C000-000000000046}] @="" [HKEY_CLASSES_ROOT\CLSID\{921A9AF0-A0DA-4B90-B941-D5A7B5D80028}\InprocServer32] @="C:\\WINDOWS\\system32\\kidbu.dll" "ThreadingModel"="Apartment" ********************************************************************************** Files Found are not all bad files: C:\WINDOWS\SYSTEM32\ atioglx1.dll Thu 15 Sep 2005 5:14:50 A.... 6.680.576 6,37 M capicom.dll Thu 22 Sep 2005 18:23:56 A.... 466.944 456,00 K cmdlin~1.dll Tue 25 Oct 2005 22:01:30 A.... 98.304 96,00 K dnjo01~1.dll Sun 13 Nov 2005 16:15:24 A.S.R 233.529 228,05 K fp6o03~1.dll Sun 13 Nov 2005 16:56:24 ..S.R 234.951 229,44 K l28mlc~1.dll Sun 13 Nov 2005 16:17:12 A.S.R 235.835 230,30 K mvn0l9~1.dll Sun 13 Nov 2005 16:08:24 ..S.R 234.588 229,09 K pncrt.dll Sun 23 Oct 2005 21:25:36 A.... 278.528 272,00 K pndx5016.dll Sun 23 Oct 2005 21:25:36 A.... 6.656 6,50 K pndx5032.dll Sun 23 Oct 2005 21:25:36 A.... 5.632 5,50 K rmoc3260.dll Sun 23 Oct 2005 21:25:38 A.... 122.880 120,00 K rtlcpapi.dll Fri 16 Sep 2005 13:14:00 A.... 157.184 153,50 K s32evnt1.dll Sat 17 Sep 2005 1:20:06 A.... 87.768 85,71 K sirenacm.dll Wed 12 Oct 2005 23:11:06 A.... 118.784 116,00 K sporder.dll Fri 21 Oct 2005 17:49:08 A.... 8.464 8,27 K st3.dll Fri 11 Nov 2005 21:32:14 A.... 0 0,00 K symneti.dll Mon 19 Sep 2005 12:24:00 A.... 534.160 521,64 K symredir.dll Mon 19 Sep 2005 12:23:58 A.... 161.424 157,64 K w95inf16.dll Fri 21 Oct 2005 21:11:12 A.... 2.272 2,22 K w95inf32.dll Fri 21 Oct 2005 21:11:12 A.... 4.608 4,50 K __dele~1.dll Sun 13 Nov 2005 16:56:26 A.... 234.588 229,09 K 21 items found: 21 files (4 H/S), 0 directories. Total of file sizes: 9.907.675 bytes 9,45 M Locate .tmp files: No matches found. ********************************************************************************** Directory Listing of system files: Volume in Laufwerk C: hat keine Bezeichnung. Volumeseriennummer: 9C85-6FA3 Verzeichnis von C:\WINDOWS\System32 13.11.2005 17:02 <DIR> .. 13.11.2005 17:02 <DIR> . 13.11.2005 16:56 234.951 fp6o03j3e.dll 13.11.2005 16:52 <DIR> dllcache 13.11.2005 16:17 235.835 l28mlcl11fq.dll 13.11.2005 16:15 233.529 dnjo0113e.dll 13.11.2005 16:08 234.588 mvn0l95m1.dll 05.11.2005 00:11 <DIR> Microsoft 4 Datei(en) 938.903 Bytes 4 Verzeichnis(se), 16.377.729.024 Bytes frei Dieser Beitrag wurde am 13.11.2005 um 17:01 Uhr von jigga83 editiert.
|
|
|
|
|
|
|
13.11.2005, 17:03
Ehrenmitglied
Beiträge: 29434 |
#4
nun gut, wir versuchen es mal.
KILLBOX http://virus-protect.org/killbox.html Delete File on Reboot -- anhaken reinkopieren: C:\WINDOWS\system32\guard.tmp und klicke auf das rote Kreuz, wenn gefragt wird, ob "Do you want to reboot? "---- klicke auf "yes PC neustarten L2mfix Option 2, dann neustarten, und dann Option 4 ------------------------------------------------------------------ Spysweeper scanne und poste den scanreport- http://virus-protect.org/spysweeper.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
13.11.2005, 17:14
...neu hier
Themenstarter Beiträge: 6 |
#5
nach dem neustart kam c:\windows\system32\buw_ci.dll"dllGetVersion" ist eine ausnahme aufgetreten
hier nach dem schritt 4 Restoring Registry Permissions: RegDACL 5.1 - Permissions Manager for Registry keys for Windows NT 4 and above Copyright (c) 1999-2001 Frank Heyne Software (http://www.heysoft.de) This program is Freeware, use it on your own risk! Revoking access for predefined group "Administrators" Inherited ACE can not be revoked here! Inherited ACE can not be revoked here! Inherited ACE can not be revoked here! Warning (option /rga  ci)) - There is no ACE to remove!RegDACL 5.1 - Permissions Manager for Registry keys for Windows NT 4 and above Copyright (c) 1999-2001 Frank Heyne Software (http://www.heysoft.de) This program is Freeware, use it on your own risk! Access Control List for Registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify: (NI) ALLOW Full access NT-AUTORITŽT\SYSTEM (IO) ALLOW Full access NT-AUTORITŽT\SYSTEM (NI) ALLOW Full access NT-AUTORITŽT\SYSTEM (IO) ALLOW Full access NT-AUTORITŽT\SYSTEM (ID-CI) DENY --C------- VORDEFINIERT\Administratoren (ID-NI) ALLOW Read VORDEFINIERT\Benutzer (ID-IO) ALLOW Read VORDEFINIERT\Benutzer (ID-NI) ALLOW Read VORDEFINIERT\Hauptbenutzer (ID-IO) ALLOW Read VORDEFINIERT\Hauptbenutzer (ID-NI) ALLOW Full access VORDEFINIERT\Administratoren (ID-IO) ALLOW Full access VORDEFINIERT\Administratoren (ID-NI) ALLOW Full access NT-AUTORITŽT\SYSTEM (ID-IO) ALLOW Full access NT-AUTORITŽT\SYSTEM (ID-IO) ALLOW Full access ERSTELLER-BESITZER wenn ich bei killbox C:\WINDOWS\system32\guard.tmp einfüge und aufs rote kreuz drücke passiert nix ich muss ja delete on reboot ankreuzen oder? Dieser Beitrag wurde am 13.11.2005 um 17:18 Uhr von jigga83 editiert.
|
|
|
|
|
|
|
13.11.2005, 17:29
Ehrenmitglied
Beiträge: 29434 |
#6
Zitat einfüge und aufs rote kreuz drücke passiert nix ich muss ja delete on reboot ankreuzen oder?ja, das musst du anhaken, aber dann fahre du den PC runter, falls es nicht von allein geschieht. __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
13.11.2005, 17:48
...neu hier
Themenstarter Beiträge: 6 |
#7
********
17:39: | Start of Session, Sonntag, 13. November 2005 | 17:39: Spy Sweeper started 17:39: Sweep initiated using definitions version 572 17:39: Starting Memory Sweep 17:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:39: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:39: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:39: Warning: Failed to check file "C:\WINDOWS\system32\fpp0037me.dll". Cannot open file "C:\WINDOWS\system32\fpp0037me.dll". Cannot acces files that are encrypted, compressed or sparse 17:39: Warning: PerformFileOffsetMatch Failed to check file "C:\WINDOWS\system32\fpp0037me.dll". Cannot open file "C:\WINDOWS\system32\fpp0037me.dll". Cannot acces files that are encrypted, compressed or sparse 17:39: Found Adware: icannnews 17:39: Detected running Thread: C:\WINDOWS\system32\fpp0037me.dll (ID = 83) 17:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:39: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:39: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:40: Memory Sweep Complete, Elapsed Time: 00:01:27 17:40: Starting Registry Sweep 17:40: Registry Sweep Complete, Elapsed Time:00:00:04 17:40: Starting Cookie Sweep 17:40: Found Spy Cookie: 2o7.net cookie 17:40: administrator@2o7[2].txt (ID = 1957) 17:40: Found Spy Cookie: adtech cookie 17:40: administrator@adtech[2].txt (ID = 2155) 17:40: Found Spy Cookie: atwola cookie 17:40: administrator@atwola[1].txt (ID = 2255) 17:40: Found Spy Cookie: realmedia cookie 17:40: administrator@realmedia[1].txt (ID = 3235) 17:40: Cookie Sweep Complete, Elapsed Time: 00:00:00 17:40: Starting File Sweep 17:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:41: Found Adware: look2me 17:41: appwrap[1].exe (ID = 65721) 17:41: Warning: Failed to open file "c:\windows\system32\fpp0037me.dll". Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird 17:42: Warning: Failed to open file "c:\windows\system32\gplsl3371.dll". Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird 17:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:42: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:42: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:42: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:42: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:43: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:43: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:43: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:43: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:43: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:43: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:43: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:43: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:44: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:44: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:44: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:44: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:44: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:44: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:44: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:44: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:47: Found Adware: gain-supported software 17:47: contmltr.dot:kavichs (ID = 61547) 17:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:48: File Sweep Complete, Elapsed Time: 00:08:01 17:48: Full Sweep has completed. Elapsed time 00:09:35 17:48: Traces Found: 7 17:49: Removal process initiated 17:49: Quarantining All Traces: icannnews 17:49: Warning: Could not create quarantine file for: C:\WINDOWS\system32\fpp0037me.dll File locked exclusively. Restoration will not be possible. 17:49: icannnews is in use. It will be removed on reboot. 17:49: C:\WINDOWS\system32\fpp0037me.dll is in use. It will be removed on reboot. 17:49: Quarantining All Traces: look2me 17:49: Quarantining All Traces: gain-supported software 17:49: Quarantining All Traces: 2o7.net cookie 17:49: Quarantining All Traces: adtech cookie 17:49: Quarantining All Traces: atwola cookie 17:49: Quarantining All Traces: realmedia cookie 17:49: Removal process completed. Elapsed time 00:00:11 ******** 17:30: | Start of Session, Sonntag, 13. November 2005 | 17:30: Spy Sweeper started 17:30: Sweep initiated using definitions version 572 17:30: Starting Memory Sweep 17:30: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:30: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:30: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:30: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:30: Found Adware: icannnews 17:30: Detected running Thread: C:\WINDOWS\system32\guard.tmp (ID = 83) 17:31: Warning: Failed to check file "C:\WINDOWS\system32\fp6o03j3e.dll". Cannot open file "C:\WINDOWS\system32\fp6o03j3e.dll". Cannot acces files that are encrypted, compressed or sparse 17:31: Warning: PerformFileOffsetMatch Failed to check file "C:\WINDOWS\system32\fp6o03j3e.dll". Cannot open file "C:\WINDOWS\system32\fp6o03j3e.dll". Cannot acces files that are encrypted, compressed or sparse 17:31: Detected running Thread: C:\WINDOWS\system32\fp6o03j3e.dll (ID = 83) 17:31: Sweep Canceled 17:31: Memory Sweep Complete, Elapsed Time: 00:00:38 17:31: Traces Found: 2 17:31: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:31: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:31: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:31: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:37: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:37: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:37: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:37: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:37: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:37: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:37: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:37: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:38: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:38: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:38: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:38: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:39: | End of Session, Sonntag, 13. November 2005 | ******** 17:28: | Start of Session, Sonntag, 13. November 2005 | 17:28: Spy Sweeper started 17:29: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:29: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:29: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:29: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:30: Your spyware definitions have been updated. 17:30: | End of Session, Sonntag, 13. November 2005 | norton sagt mir das der look2me immernoch da ist :-( Dieser Beitrag wurde am 13.11.2005 um 18:03 Uhr von jigga83 editiert.
|
|
|
|
|
|
|
13.11.2005, 22:11
Ehrenmitglied
Beiträge: 29434 |
#8
solange du die guard.tmp nicht loeschst, ist der PC nicht sauber.
Zitat 17:30: Found Adware: icannnewsloesche mit der Killbox: http://virus-protect.org/killbox.html c:\windows\system32\l28mlcl11fq.dll c:\windows\system32\dnjo0113e.dll c:\windows\system32\mvn0l95m1.dll C:\WINDOWS\system32\guard.tmp c:\windows\system32\fpp0037me.dll c:\windows\system32\gplsl3371.dll C:\WINDOWS\system32\fp6o03j3e.dll PC neustarten dann scanne noch mal mit sweeper, und poste das Log.... __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
14.11.2005, 16:18
...neu hier
Themenstarter Beiträge: 6 |
#9
habe die guard datei löschen können aber ich habe die anderen dateien nicht gefunden
17:08: | Start of Session, Montag, 14. November 2005 | 17:08: Spy Sweeper started 17:08: Sweep initiated using definitions version 572 17:08: Starting Memory Sweep 17:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:08: Warning: Failed to check file "C:\WINDOWS\system32\en6ul1j91.dll". Cannot open file "C:\WINDOWS\system32\en6ul1j91.dll". Cannot acces files that are encrypted, compressed or sparse 17:08: Warning: PerformFileOffsetMatch Failed to check file "C:\WINDOWS\system32\en6ul1j91.dll". Cannot open file "C:\WINDOWS\system32\en6ul1j91.dll". Cannot acces files that are encrypted, compressed or sparse 17:08: Found Adware: icannnews 17:08: Detected running threat: C:\WINDOWS\system32\en6ul1j91.dll (ID = 83) 17:09: Memory Sweep Complete, Elapsed Time: 00:01:18 17:09: Starting Registry Sweep 17:09: Registry Sweep Complete, Elapsed Time:00:00:05 17:09: Starting Cookie Sweep 17:09: Found Spy Cookie: 2o7.net cookie 17:09: administrator@2o7[2].txt (ID = 1957) 17:09: Found Spy Cookie: atwola cookie 17:09: administrator@atwola[1].txt (ID = 2255) 17:09: Found Spy Cookie: realmedia cookie 17:09: administrator@realmedia[1].txt (ID = 3235) 17:09: Cookie Sweep Complete, Elapsed Time: 00:00:00 17:09: Starting File Sweep 17:10: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:10: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:10: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:10: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:10: Warning: Failed to open file "c:\windows\system32\en6ul1j91.dll". Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird 17:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:11: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:11: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:11: Warning: Failed to open file "c:\windows\system32\enp0l17m1.dll". Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird 17:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:12: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:12: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:15: Warning: Failed to open file "c:\windows\system32\rkhx32.dll". Das System kann die angegebene Datei nicht finden 17:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:17: File Sweep Complete, Elapsed Time: 00:07:48 17:17: Full Sweep has completed. Elapsed time 00:09:14 17:17: Traces Found: 4 17:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:18: Removal process initiated 17:18: Quarantining All Traces: icannnews 17:18: Warning: Could not create quarantine file for: C:\WINDOWS\system32\en6ul1j91.dll File locked exclusively. Restoration will not be possible. 17:18: icannnews is in use. It will be removed on reboot. 17:18: C:\WINDOWS\system32\en6ul1j91.dll is in use. It will be removed on reboot. 17:18: Quarantining All Traces: 2o7.net cookie 17:18: Quarantining All Traces: atwola cookie 17:18: Quarantining All Traces: realmedia cookie 17:18: Removal process completed. Elapsed time 00:00:08 ******** 18:27: | Start of Session, Sonntag, 13. November 2005 | 18:27: Spy Sweeper started 18:27: Sweep initiated using definitions version 572 18:27: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:27: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:27: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:27: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:27: Starting Memory Sweep 18:27: Warning: Failed to check file "C:\WINDOWS\system32\gplsl3371.dll". Cannot open file "C:\WINDOWS\system32\gplsl3371.dll". Cannot acces files that are encrypted, compressed or sparse 18:27: Warning: PerformFileOffsetMatch Failed to check file "C:\WINDOWS\system32\gplsl3371.dll". Cannot open file "C:\WINDOWS\system32\gplsl3371.dll". Cannot acces files that are encrypted, compressed or sparse 18:27: Found Adware: icannnews 18:27: Detected running threat: C:\WINDOWS\system32\gplsl3371.dll (ID = 83) 18:28: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:28: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:28: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:28: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:28: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:28: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:28: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:28: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:28: Memory Sweep Complete, Elapsed Time: 00:01:17 18:28: Starting Registry Sweep 18:28: Registry Sweep Complete, Elapsed Time:00:00:05 18:28: Starting Cookie Sweep 18:28: Found Spy Cookie: 2o7.net cookie 18:28: administrator@2o7[1].txt (ID = 1957) 18:28: Cookie Sweep Complete, Elapsed Time: 00:00:00 18:28: Starting File Sweep 18:29: Warning: Failed to open file "c:\windows\system32\q8rqli9518.dll". Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird 18:29: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:29: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:29: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:29: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:29: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:29: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:29: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:29: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:30: Warning: Failed to open file "c:\windows\system32\gplsl3371.dll". Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird 18:30: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:30: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:30: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:30: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:31: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:31: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:31: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:31: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:32: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:32: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:32: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:32: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:32: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:32: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:32: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:32: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:33: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:33: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:33: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:33: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:33: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:33: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:33: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:33: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:35: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:35: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:35: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:35: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:35: File Sweep Complete, Elapsed Time: 00:06:59 18:35: Full Sweep has completed. Elapsed time 00:08:23 18:35: Traces Found: 2 18:35: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:35: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:35: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:35: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:36: Removal process initiated 18:36: Quarantining All Traces: icannnews 18:36: Warning: Could not create quarantine file for: C:\WINDOWS\system32\gplsl3371.dll File locked exclusively. Restoration will not be possible. 18:36: icannnews is in use. It will be removed on reboot. 18:36: C:\WINDOWS\system32\gplsl3371.dll is in use. It will be removed on reboot. 18:36: Quarantining All Traces: 2o7.net cookie 18:36: Preparing to restart your computer. Please wait... 18:36: Removal process completed. Elapsed time 00:00:08 18:36: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:36: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:36: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:36: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:39: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:39: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:40: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:40: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:40: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:40: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:42: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:42: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:43: Warning: Failed to check file "C:\WINDOWS\system32\q8rqli9518.dll". Cannot open file "C:\WINDOWS\system32\q8rqli9518.dll". Cannot acces files that are encrypted, compressed or sparse 18:44: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:44: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:44: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:44: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:53: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:53: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:54: Warning: Failed to check file "C:\WINDOWS\system32\e802lido180c.dll". Cannot open file "C:\WINDOWS\system32\e802lido180c.dll". Cannot acces files that are encrypted, compressed or sparse 18:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:59: Warning: Failed to check file "C:\WINDOWS\system32\e802lido180c.dll". Cannot open file "C:\WINDOWS\system32\e802lido180c.dll". Cannot acces files that are encrypted, compressed or sparse 18:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:01: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:04: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 19:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 19:08: Warning: Failed to check file "C:\WINDOWS\system32\fpr4039qe.dll". Cannot open file "C:\WINDOWS\system32\fpr4039qe.dll". Cannot acces files that are encrypted, compressed or sparse 16:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:17: Warning: Failed to check file "C:\WINDOWS\system32\dnn4015qe.dll". Cannot open file "C:\WINDOWS\system32\dnn4015qe.dll". Cannot acces files that are encrypted, compressed or sparse 16:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:19: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:19: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:19: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:19: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:20: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:20: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:20: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:20: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:20: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:20: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:20: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:20: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:21: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:21: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:21: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:21: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:21: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:21: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:21: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:21: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:22: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:22: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:22: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:22: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:22: Warning: Failed to check file "C:\WINDOWS\system32\dnn4015qe.dll". Cannot open file "C:\WINDOWS\system32\dnn4015qe.dll". Cannot acces files that are encrypted, compressed or sparse 16:22: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:22: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:22: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:22: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:23: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:23: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:23: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:23: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:24: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:24: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:24: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:24: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:25: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:25: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:25: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:25: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:25: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:25: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:25: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:25: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:26: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:26: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:26: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:26: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:26: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:26: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:26: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:26: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:27: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:27: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:27: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:27: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:27: Warning: Failed to check file "C:\WINDOWS\system32\dnn4015qe.dll". Cannot open file "C:\WINDOWS\system32\dnn4015qe.dll". Cannot acces files that are encrypted, compressed or sparse 16:27: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:27: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:27: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:27: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:33: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:33: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:33: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:33: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:33: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:33: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:33: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:33: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:34: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:34: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:35: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:35: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:35: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:35: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:38: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:38: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:38: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:39: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:40: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:40: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:40: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:40: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:41: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:41: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:42: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:42: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:42: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:43: Warning: Failed to check file "C:\WINDOWS\system32\ktj6l71s1.dll". Cannot open file "C:\WINDOWS\system32\ktj6l71s1.dll". Cannot acces files that are encrypted, compressed or sparse 16:43: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:43: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:43: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:43: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:45: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:45: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:46: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:46: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:47: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:47: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:48: Warning: Failed to check file "C:\WINDOWS\system32\ktj6l71s1.dll". Cannot open file "C:\WINDOWS\system32\ktj6l71s1.dll". Cannot acces files that are encrypted, compressed or sparse 16:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:48: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:48: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:49: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:49: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:53: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:53: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:53: Warning: Failed to check file "C:\WINDOWS\system32\ktj6l71s1.dll". Cannot open file "C:\WINDOWS\system32\ktj6l71s1.dll". Cannot acces files that are encrypted, compressed or sparse 16:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:53: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:53: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:58: Warning: Failed to check file "C:\WINDOWS\system32\ktj6l71s1.dll". Cannot open file "C:\WINDOWS\system32\ktj6l71s1.dll". Cannot acces files that are encrypted, compressed or sparse 16:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:58: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:58: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 16:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 16:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:08: | End of Session, Montag, 14. November 2005 | ******** 17:50: | Start of Session, Sonntag, 13. November 2005 | 17:50: Spy Sweeper started 17:50: Sweep initiated using definitions version 572 17:50: Starting Memory Sweep 17:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:50: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:50: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:51: Warning: Failed to check file "C:\WINDOWS\system32\fpp0037me.dll". Cannot open file "C:\WINDOWS\system32\fpp0037me.dll". Cannot acces files that are encrypted, compressed or sparse 17:51: Warning: PerformFileOffsetMatch Failed to check file "C:\WINDOWS\system32\fpp0037me.dll". Cannot open file "C:\WINDOWS\system32\fpp0037me.dll". Cannot acces files that are encrypted, compressed or sparse 17:51: Found Adware: icannnews 17:51: Detected running threat: C:\WINDOWS\system32\fpp0037me.dll (ID = 83) 17:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:51: Memory Sweep Complete, Elapsed Time: 00:01:23 17:51: Starting Registry Sweep 17:51: Registry Sweep Complete, Elapsed Time:00:00:04 17:51: Starting Cookie Sweep 17:51: Cookie Sweep Complete, Elapsed Time: 00:00:00 17:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:51: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:51: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:51: Starting File Sweep 17:52: Warning: Failed to open file "c:\windows\system32\fpp0037me.dll". Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird 17:52: Warning: Failed to open file "c:\windows\system32\gplsl3371.dll". Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird 17:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:52: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:52: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:53: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:53: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:53: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:54: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:54: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:55: File Sweep Complete, Elapsed Time: 00:03:07 17:55: Full Sweep has completed. Elapsed time 00:04:39 17:55: Traces Found: 1 17:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:55: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:55: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:56: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:56: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:57: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:57: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:59: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 17:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 17:59: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:00: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:00: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:01: Removal process initiated 18:01: Quarantining All Traces: icannnews 18:01: Warning: Could not create quarantine file for: C:\WINDOWS\system32\fpp0037me.dll File locked exclusively. Restoration will not be possible. 18:01: icannnews is in use. It will be removed on reboot. 18:01: C:\WINDOWS\system32\fpp0037me.dll is in use. It will be removed on reboot. 18:01: Preparing to restart your computer. Please wait... 18:01: Removal process completed. Elapsed time 00:00:08 18:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:03: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:03: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:04: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:05: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:05: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:06: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:06: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:07: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:07: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:08: Warning: Failed to check file "C:\WINDOWS\system32\gplsl3371.dll". Cannot open file "C:\WINDOWS\system32\gplsl3371.dll". Cannot acces files that are encrypted, compressed or sparse 18:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:08: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:08: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:09: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:09: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:09: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:09: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:10: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:10: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:10: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:10: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:11: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:11: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:11: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:12: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:12: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:12: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:13: Warning: Failed to check file "C:\WINDOWS\system32\gplsl3371.dll". Cannot open file "C:\WINDOWS\system32\gplsl3371.dll". Cannot acces files that are encrypted, compressed or sparse 18:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:13: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:13: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:14: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:14: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:15: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:15: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:16: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:16: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:17: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:17: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:18: Warning: Failed to check file "C:\WINDOWS\system32\gplsl3371.dll". Cannot open file "C:\WINDOWS\system32\gplsl3371.dll". Cannot acces files that are encrypted, compressed or sparse 18:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:18: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:18: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:19: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:19: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:19: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:22: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:22: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:22: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:22: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:22: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:22: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:22: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:22: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:23: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:23: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:23: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:23: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:23: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:23: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:23: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:23: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:24: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:24: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:24: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:24: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:25: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:25: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:25: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:25: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:25: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:25: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:25: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:25: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:26: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:26: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:26: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:26: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com 18:26: Warning: Failed to check file "C:\WINDOWS\system32\gplsl3371.dll". Cannot open file "C:\WINDOWS\system32\gplsl3371.dll". Cannot acces files that are encrypted, compressed or sparse 18:27: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com 18:27: The Spy C Dieser Beitrag wurde am 14.11.2005 um 17:18 Uhr von jigga83 editiert.
|
|
|
|
|
|
|
14.11.2005, 23:54
Ehrenmitglied
Beiträge: 29434 |
#10
wenn die guard geloescht ist, wende noch mal Option2 vpm L2mfix an und poste das Log
__________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!
bitte erst » hier kostenlos registrieren!!
Folgende Themen könnten Dich auch interessieren:
Seite(n): 1
Copyright © 2024, Protecus.de - Protecus Team - Impressum / Mediadaten
hier meine aktuelle logon von hijackthis
Logfile of HijackThis v1.99.1
Scan saved at 15:07:07, on 13.11.2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
D:\Programme\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
D:\Programme\AIM95\aim.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\NMain.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\Dokumente und Einstellungen\Administrator\Desktop\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - D:\Programme\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [SSC_UserPrompt] "C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\UsrPrmpt.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [AIM] D:\Programme\AIM95\aim.exe -cnetwait.odl
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Senden an &Bluetooth - D:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesde.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesde.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - D:\Programme\AIM95\aim.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programme\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WebCheck - C:\WINDOWS\system32\jt6607jse.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - D:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - D:\Programme\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - D:\Programme\Norton Internet Security\comHost.exe
O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - D:\Programme\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - D:\Programme\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - D:\Programme\TuneUp Utilities 2006\WinStylerThemeSvc.exe
freue mich über jede hilfe von euch...
mfg jigga83