Wie kann ich Trojaner TR / Swizzor A beseitigen

#181 Hab auch den Trojaner drauf.

hier der Hijacks log:

Logfile of HijackThis v1.99.1
Scan saved at 20:09:58, on 04.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\rmctrl.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
C:\Programme\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Programme\ICQLite\ICQLite.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Messenger\msmsgs.exe
c:\progra~1\intern~1\iexplore.exe
C:\Programme\D\D-Info\dinfostarter.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Logitech\iTouch\kbdtray.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Aware.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\Frank\Desktop\Studio\setup.exe
C:\WINDOWS\system32\msiexec.exe
C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\8\INTEL3~1\IDriver.exe
C:\WINDOWS\system32\MsiExec.exe
C:\WINDOWS\system32\MsiExec.exe
C:\Dokumente und Einstellungen\Frank\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.findthewebsiteyouneed.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_1.dll
O3 - Toolbar: ToolBar888 - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Programme\ToolBar888\MyToolBar.dll
O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\System32\rmctrl.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programme\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Dokumente und Einstellungen\Frank\Eigene Dateien\MsgPlus.exe"
O4 - HKLM\..\Run: [liveencdogtons] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\GRIMLICENSELIVEENC\license dead.exe
O4 - HKLM\..\Run: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [MSN Explorer] C:\windows\system32\drivers\helpsys\msnexplorer.exe
O4 - HKLM\..\Run: [defender] C:\\dfndref_7.exe
O4 - HKLM\..\Run: [newname] C:\\nwnmef_7.exe
O4 - HKLM\..\Run: [keyboard] C:\\kybrdef_7.exe
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [tool trust] C:\DOKUME~1\Frank\ANWEND~1\CREATI~1\bore second memo.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MSN Explorer] C:\windows\system32\drivers\helpsys\msnexplorer.exe
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot
O4 - Global Startup: D-Info Starter.lnk = C:\Programme\D\D-Info\dinfostarter.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: &MyToolBar Search - res://C:\Programme\ToolBar888\MyToolBar.dll/MENUSEARCH.HTM
O8 - Extra context menu item: Alles mit FlashGet laden - C:\Programme\FlashGet\jc_all.htm
O8 - Extra context menu item: Mit FlashGet laden - C:\Programme\FlashGet\jc_link.htm
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.1_04\bin\npjpi141_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.1_04\bin\npjpi141_04.dll
O9 - Extra button: WebSpeech - {1CE4DE72-7FCC-4eb8-8F66-AE6A56A0A54D} - C:\Programme\Gemeinsame Dateien\WebSpeech.4.0\LgxIEBar.dll
O9 - Extra 'Tools' menuitem: Seite/Markierung vorlesen (WebSpeech) - {1CE4DE72-7FCC-4eb8-8F66-AE6A56A0A54D} - C:\Programme\Gemeinsame Dateien\WebSpeech.4.0\LgxIEBar.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O12 - Plugin for .mp3: C:\Programme\Internet Explorer\PLUGINS\npqtplugin4.dll
O16 - DPF: {1E50B82A-0D78-48B9-97EC-391B2F81CE8A} - http://acxd.freeload.cc/ieloader.cab
O16 - DPF: {67B15B0B-160C-4579-95AF-858169659092} - http://freeload.cc/secure/ieloader.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: Telephony - C:\WINDOWS\system32\hrpu0579e.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: O&O Defrag (OODefrag) - O&O Software GmbH - C:\WINDOWS\System32\oodag.exe
O23 - Service: Pml Driver - HP - C:\WINDOWS\System32\HPHipm09.exe
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe



was muss ich tun???

#182 cheefzven

1.~poste dieses log
http://virus-protect.org/artikel/tools/combofix.html

2.
stelle den CleanUp genauso ein, wie hier angegeben:
http://virus-protect.org/cleanup.html

3.
Kopiere diese 6 Textdateien ab . (rechtsklick mit der Maus -> den Text markieren -> kopieren -> einfügen) Sie sind nach Datum geordnet. (kopiere nur die letzten 3 Monate ab)
http://virus-protect.org/datfindbat.html
__________
MfG Sabina

rund um die PC-Sicherheit

#183 Performing a scan of your machine

Inactive Look2Me found !!!

C:\WINDOWS\MTE3NDI6ODoxNg.exe .... infected
C:\WINDOWS\teller2.chk .... infected
C:\WINDOWS\warebundle.exe .... infected
C:\dfndra_1.exe .... infected
C:\dfndrb_3.exe .... infected
C:\Mendoza1.exe .... infected
C:\nwnmb_3.exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\defender25[2].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\BHJLW7ZW\dfndra_1[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\7ZJB85YA\drsmartload[10].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\7ZJB85YA\drsmartload[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\7ZJB85YA\drsmartload[2].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\7ZJB85YA\drsmartload[3].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\7ZJB85YA\drsmartload[4].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\7ZJB85YA\drsmartload[5].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\7ZJB85YA\drsmartload[6].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\7ZJB85YA\drsmartload[7].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\7ZJB85YA\drsmartload[8].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\drsmartload849a[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\drsmartload[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\drsmartload[2].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\drsmartload[3].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\drsmartload[4].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\INSJ96I2\drsmartload422a[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\INSJ96I2\drsmartload[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\keyboard25[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\BHJLW7ZW\Mendoza1[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\7ZJB85YA\MTE3NDI6ODoxNg[2].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\BHJLW7ZW\MTE3NDI6ODoxNg[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\BHJLW7ZW\MTE3NDI6ODoxNg[3].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\MTE3NDI6ODoxNg[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\MTE3NDI6ODoxNg[2].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\INSJ96I2\MTE3NDI6ODoxNg[2].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\INSJ96I2\newname25[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\7ZJB85YA\nwnmb_3[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\stub_113_4_0_4_0[1].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\stub_113_4_0_4_0[2].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\stub_113_4_0_4_0[3].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\H4WH76PP\stub_113_4_0_4_0[4].exe .... infected
C:\Dokumente und Einstellungen\Frank\Lokale Einstellungen\Temporary Internet Fil
es\Content.IE5\INSJ96I2\stub_113_4_0_4_0[2].exe .... infected
C:\Programme\Gemeinsame Dateien\inetget .... infected




Verzeichnis von C:\WINDOWS\system32

06-12-26 16:06 2,206 wpa.dbl
06-12-26 15:44 751 spupdsvc.inf
06-12-23 18:14 311,604 perfh009.dat
06-12-23 18:14 39,992 perfc009.dat
06-12-23 18:14 316,594 perfh007.dat
06-12-23 18:14 48,156 perfc007.dat
06-12-23 18:14 723,744 PerfStringBackup.INI
06-12-07 15:13 10,716,584 MRT.exe
06-12-07 07:40 2,362,184 wmvcore.dll
06-11-17 18:54 1,040,384 ieframe.dll.mui
06-11-17 18:53 12,288 advpack.dll.mui
06-11-08 06:06 679,424 inetcomm.dll
06-11-07 21:03 6,049,280 ieframe.dll
06-11-07 21:03 3,577,856 SETB2.tmp
06-11-07 21:03 818,688 SETC2.tmp
06-11-07 21:03 27,136 SETAC.tmp
06-11-07 21:03 475,648 SETB4.tmp
06-11-07 21:03 50,688 msfeedsbs.dll
06-11-07 21:03 156,160 SETB6.tmp
06-11-07 21:03 231,424 SETC0.tmp
06-11-07 21:03 670,720 SETB8.tmp
06-11-07 21:03 180,736 ieui.dll
06-11-07 21:03 413,696 SETBF.tmp
06-11-07 21:03 1,162,240 SETBE.tmp
06-11-07 21:03 458,752 msfeeds.dll
06-11-07 21:03 131,584 SET94.tmp
06-11-07 21:03 191,488 SETA2.tmp
06-11-07 03:27 382,976 SET9E.tmp
06-11-07 03:27 229,376 SET9A.tmp
06-11-07 03:26 152,064 SET99.tmp
06-11-07 03:26 71,680 SET8E.tmp
06-11-07 03:26 55,296 SETA5.tmp
06-11-07 03:26 13,312 ieudinit.exe
06-11-07 03:26 54,784 SET97.tmp
06-11-07 03:26 43,008 SETA3.tmp
06-11-07 03:26 92,672 SETAA.tmp
06-11-07 03:26 123,904 SET8F.tmp
06-11-07 03:25 161,792 SET9B.tmp
06-11-07 03:24 56,483 SETA7.tmp
06-11-04 14:14 1,245,696 msxml4.dll
06-11-01 15:26 77,824 xvid.ax
06-11-01 14:54 180,224 xvidvfw.dll
06-11-01 14:52 765,952 xvidcore.dll
06-10-23 16:34 1,497,600 SET1D.tmp
06-10-23 16:34 474,624 SET1C.tmp
06-10-23 16:34 146,432 msrating.dll
06-10-23 16:34 532,480 mstime.dll
06-10-23 16:34 448,512 mshtmled.dll
06-10-23 16:34 39,424 pngfilt.dll
06-10-23 16:34 55,808 extmgr.dll
06-10-23 16:34 205,312 dxtrans.dll
06-10-23 16:34 357,888 dxtmsft.dll
06-10-23 16:34 251,904 iepeers.dll
06-10-23 16:34 96,768 inseng.dll
06-10-23 16:34 15,872 jsproxy.dll
06-10-23 16:34 1,056,256 danim.dll
06-10-23 16:34 1,022,976 SET2A.tmp
06-10-23 16:34 152,064 cdfview.dll
06-10-23 16:17 615,936 urlmon.dll
06-10-23 16:17 664,576 wininet.dll
06-10-23 16:17 474,624 shlwapi.dll
06-10-23 16:17 1,494,528 shdocvw.dll
06-10-23 16:17 3,076,096 mshtml.dll
06-10-23 16:17 1,022,976 browseui.dll
06-10-23 12:43 270,336 SET2C.tmp
06-10-23 12:42 123,392 xpsp3res.dll
06-10-20 02:38 715,776 sxs.dll
06-10-17 12:06 443,904 SET95.tmp
06-10-17 12:06 78,336 SET9F.tmp
06-10-17 12:05 206,336 WinFXDocObj.exe
06-10-17 12:05 1,817,088 SETA9.tmp
06-10-17 12:05 105,984 SETBD.tmp
06-10-17 12:05 40,960 SETAD.tmp
06-10-17 12:05 192,000 SETB7.tmp
06-10-17 12:04 101,376 SETB9.tmp
06-10-17 12:03 17,408 SET91.tmp
06-10-17 12:00 491,520 SETAB.tmp
06-10-17 11:58 12,288 msfeedssync.exe
06-10-17 11:58 61,952 icardie.dll
06-10-17 11:58 44,544 SETBA.tmp
06-10-17 11:58 346,624 SET92.tmp
06-10-17 11:57 36,352 SETA8.tmp
06-10-17 11:57 214,528 SET93.tmp
06-10-17 11:57 266,752 iertutil.dll
06-10-17 11:56 45,568 SETB1.tmp
06-10-17 11:55 66,560 SETBB.tmp
06-10-17 11:28 48,128 SETB5.tmp
06-10-17 11:27 380,928 ieapfltr.dll
06-10-17 11:19 1,383,424 SETB3.tmp
06-10-13 13:35 65,536 nwwks.dll
06-10-13 13:35 64,000 nwapi32.dll
06-10-13 13:35 146,432 nwprovau.dll
06-09-23 12:12 82,428 IE7Eula.rtf
06-09-13 06:02 1,084,416 msxml3.dll
06-09-10 09:59 2,264 qtplugin.log
06-09-06 16:42 15,584 spmsg.dll
06-09-06 16:42 22,752 spupdsvc.exe
06-09-05 23:01 2,451,824 ieapfltr.dat
06-09-01 07:44 1,988 ticrf.rat
06-09-01 07:44 8,798 icrav03.rat
06-08-25 16:46 617,472 comctl32.dll
06-08-24 13:19 246,814 strmdll.dll
06-08-24 13:17 500,278 dxmasf.dll
06-08-21 13:26 16,896 fltlib.dll
06-08-21 10:14 23,040 fltmc.exe
06-08-18 16:31 324,320 FNTCACHE.DAT
06-08-17 13:28 729,600 lsasrv.dll
06-08-17 13:28 132,096 wkssvc.dll
06-08-17 13:28 332,288 netapi32.dll
06-08-16 12:58 100,352 6to4svc.dll




Verzeichnis von C:\DOKUME~1\Frank\LOKALE~1\Temp

06-10-04 09:23 668 datFind.bat
1 Datei(en) 668 Bytes
0 Verzeichnis(se), 29,701,238,784 Bytes frei



Verzeichnis von C:\WINDOWS

06-12-26 16:08 37 iTouch.ini
06-12-26 16:06 345 wiadebug.log
06-12-26 16:05 1,387,294 WindowsUpdate.log
06-12-26 15:44 38,302 ie7_main.log
06-12-26 15:44 828,239 iis6.log
06-12-26 15:44 241,381 comsetup.log
06-12-26 15:44 146,548 ntdtcsetup.log
06-12-26 15:44 30,295 tabletoc.log
06-12-26 15:44 36,240 ocmsn.log
06-12-26 15:44 306,776 tsoc.log
06-12-26 15:44 1,393 imsins.log
06-12-26 15:44 53,540 ie7.log
06-12-26 15:44 106,437 netfxocm.log
06-12-26 15:44 331,063 ocgen.log
06-12-26 15:44 44,467 medctroc.Log
06-12-26 15:44 32,756 msgsocm.log
06-12-26 15:44 633,746 FaxSetup.log
06-12-26 15:44 220,532 msmqinst.log
06-12-26 15:44 51,576 updspapi.log
06-12-26 15:41 67,229 IDNMitigationAPIs.log
06-12-26 15:41 287,239 setupapi.log
06-12-26 15:41 67,077 NLSDownlevelMapping.log
06-12-26 15:39 14,566 KB915865.log
06-12-26 15:38 1,393 imsins.BAK
06-12-26 15:38 5,031 KB914440.log
06-12-26 15:38 28,098 KB925454.log
06-12-26 15:38 10,876 KB904942.log
06-12-26 15:30 50 wiaservc.log
06-12-26 15:17 0 0.log
06-12-26 15:16 2,048 bootstat.dat
06-12-26 12:08 32,620 SchedLgU.Txt
06-12-24 12:50 1,068,481 setupapi.log.0.old
06-12-22 22:28 536,428,544 MEMORY.DMP
06-12-22 12:46 17,845 wmsetup.log
06-12-15 17:56 40,026 KB925398.log
06-12-15 17:15 13,958 CDPLAYER.INI
06-12-14 22:16 11,424 KB923689.log
06-12-14 22:15 11,219 KB926255.log
06-12-14 22:15 11,096 KB923694.log
06-11-15 19:39 17,634 KB923980.log
06-11-15 19:39 17,312 KB924270.log
06-11-15 19:37 16,850 KB920213.log
06-11-15 19:37 19,402 KB922760.log
06-11-05 12:31 508 ODBC.INI
06-10-11 20:03 12,438 KB924191.log
06-10-11 20:03 12,179 KB922819.log
06-10-11 20:02 11,335 KB923414.log
06-10-11 20:02 11,641 KB924496.log
06-10-11 20:02 8,812 KB923191.log
06-09-30 11:46 29 standard.sta
06-09-27 14:12 10,594 KB925486.log
06-09-20 19:03 8,594 WgaNotify.log
06-09-13 19:51 11,326 KB920685.log
06-09-13 19:51 13,421 KB920872.log
06-09-13 19:51 11,760 KB919007.log
06-09-13 19:51 7,864 KB922582.log
06-08-29 17:06 802 win.ini
06-08-08 22:00 16,147 KB920214.log
06-08-08 22:00 15,915 KB921883.log
06-08-08 22:00 15,718 KB922616.log
06-08-08 22:00 16,175 KB921398.log
06-08-08 21:59 19,482 KB918899.log
06-08-08 21:59 12,104 KB920670.log
06-08-08 21:59 12,268 KB917422.log
06-08-08 21:58 12,545 KB920683.log



Verzeichnis von C:\WINDOWS\Temp

06-12-26 16:06 409 WGANotify.settings
06-12-26 16:06 255 WGAErrLog.txt
2 Datei(en) 664 Bytes
0 Verzeichnis(se), 29,701,226,496 Bytes frei




Verzeichnis von C:\WINDOWS\Downloaded Program Files

06-01-14 17:37 65 desktop.ini
05-12-02 11:55 5,101 swflash.inf
05-01-24 11:38 1,249 erma.inf
03-06-28 08:14 772 jinstall-1_4_1_04.inf
4 Datei(en) 7,187 Bytes
0 Verzeichnis(se), 29,701,226,496 Bytes frei



Verzeichnis von C:\

06-12-26 16:09 0 sys.txt
06-12-26 16:08 442 down.txt
06-12-26 16:08 330 tmp.txt
06-12-26 16:08 11,179 system.txt
06-12-26 16:08 290 systemtemp.txt
06-12-26 16:07 104,025 system32.txt
06-12-26 15:34 124 ComboFix.txt
06-12-26 15:16 536,399,872 hiberfil.sys
06-12-26 15:16 805,306,368 pagefile.sys
06-12-10 14:55 232 sqmdata04.sqm
06-12-10 14:55 244 sqmnoopt04.sqm
06-12-10 14:55 268 sqmdata03.sqm
06-12-10 14:55 244 sqmnoopt03.sqm
06-11-19 16:50 268 sqmdata02.sqm
06-11-19 16:50 244 sqmnoopt02.sqm
06-11-19 14:09 268 sqmdata01.sqm
06-11-19 14:09 244 sqmnoopt01.sqm
06-11-08 14:56 268 sqmdata00.sqm
06-11-08 14:56 244 sqmnoopt00.sqm
06-11-05 13:45 268 sqmdata19.sqm
06-11-05 13:45 244 sqmnoopt19.sqm
06-11-04 19:08 268 sqmdata18.sqm
06-11-04 19:08 244 sqmnoopt18.sqm
06-11-04 13:25 244 sqmnoopt17.sqm
06-11-04 13:25 268 sqmdata17.sqm
06-11-04 12:29 268 sqmdata16.sqm
06-11-04 12:29 244 sqmnoopt16.sqm
06-11-03 16:54 268 sqmdata15.sqm
06-11-03 16:54 244 sqmnoopt15.sqm
06-11-03 15:31 268 sqmdata14.sqm
06-11-03 15:31 244 sqmnoopt14.sqm
06-10-30 15:12 268 sqmdata13.sqm
06-10-30 15:12 244 sqmnoopt13.sqm
06-10-11 17:28 268 sqmdata12.sqm
06-10-11 17:28 244 sqmnoopt12.sqm
06-09-30 00:26 268 sqmdata11.sqm
06-09-30 00:26 244 sqmnoopt11.sqm
06-09-06 12:59 268 sqmdata10.sqm
06-09-06 12:59 244 sqmnoopt10.sqm
06-09-06 12:16 268 sqmdata09.sqm
06-09-06 12:16 244 sqmnoopt09.sqm
06-09-02 12:12 232 sqmdata08.sqm
06-09-02 12:12 244 sqmnoopt08.sqm
06-09-02 12:12 268 sqmdata07.sqm
06-09-02 12:12 244 sqmnoopt07.sqm
06-08-09 14:51 268 sqmdata06.sqm
06-08-09 14:51 244 sqmnoopt06.sqm
06-08-08 14:00 268 sqmdata05.sqm
06-08-08 14:00 244 sqmnoopt05.sqm



bitte dringend um hilfe

Danke euch schon mal im Vorraus für die Hilfe

#184 ich wurde gern das komplette log von combofix sehen
__________
MfG Sabina

rund um die PC-Sicherheit