Critical System Error! Wie werde ich das wieder los?

#1 Ich war so naiv auf einen link zu klicken, der angeblich zu Video-Codecs führt und jetzt hab ich den Salat . Bitte helft mir!

Hier sind meine Logs. Danke schonmal!!


Logfile of HijackThis v1.99.1
Scan saved at 05:29:28, on 01.10.2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\CTsvcCDA.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.EXE
E:\JoBe-Warez.de\Shutdown\Shutdown.exe
C:\WINNT\system32\CTHELPER.EXE
E:\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\WINNT\system32\RUNDLL32.EXE
E:\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINNT\system32\ctfmon.exe
E:\Cleverlearn\Clicktionary\bin\Clicktionary.exe
E:\MOZILL~1\FIREFOX.EXE
F:\Downloads\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = \SOFTWARE\Microsoft\Internet Explorer\Search
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [JoBeWarez_Shutdown] E:\JoBe-Warez.de\Shutdown\Shutdown.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINNT\UpdReg.EXE
O4 - HKLM\..\Run: [EM_EXEC] e:\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Zone Labs Client] "e:\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = E:\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Clicktionary.lnk = E:\Cleverlearn\Clicktionary\bin\Clicktionary.exe
O4 - Global Startup: Connection to versatel.lnk = ?
O8 - Extra context menu item: &Google-Suche - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Ins Deutsche übersetzen - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://E:\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Verweisseiten - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - E:\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - E:\ICQ\ICQ.exe
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - E:\PartyGaming.Net\PartyPokerNet\RunPF.exe
O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - E:\PartyGaming.Net\PartyPokerNet\RunPF.exe
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_44.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.de/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1122318426109
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15010/CTPID.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{BDE8ECE7-FCA3-45C5-99EF-3A1ECA110AE0}: NameServer = 62.220.18.8 62.72.64.241
O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
O21 - SSODL: hydrodictyon - {b166be07-30a4-4d38-b781-44528a630706} - C:\WINNT\system32\gqagksr.dll
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINNT\system32\ZoneLabs\isafe.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINNT\system32\CTsvcCDA.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: Remote Procedure Call (RPC) Remote (RpcRemote) - Unknown owner - C:\WINNT\system32\remote.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZoneLabs\vsmon.exe
O23 - Service: WMDM PMSP Service - Unknown owner - C:\WINNT\system32\MsPMSPSv.exe (file missing)



Datfind.bat :

Volume in drive C is Windows
Volume Serial Number is CC5B-B1A7

Directory of C:\WINNT\system32

01.10.2006 05:10 56.960 vsconfig.xml
01.10.2006 05:10 63.804 nvapps.xml
01.10.2006 05:07 1.080 settingsbkup.sfm
01.10.2006 05:07 384 DVCState-{00000003-00000000-0000000C-00001102-00000004-20021102}.dat
01.10.2006 05:07 384 DVCStateBkp-{00000003-00000000-0000000C-00001102-00000004-20021102}.dat
01.10.2006 05:07 1.080 settings.sfm
01.10.2006 05:07 32.088 BMXBkpCtrlState-{00000003-00000000-0000000C-00001102-00000004-20021102}.rfx
01.10.2006 05:07 32.592 BMXState-{00000003-00000000-0000000C-00001102-00000004-20021102}.rfx
01.10.2006 05:07 32.088 BMXCtrlState-{00000003-00000000-0000000C-00001102-00000004-20021102}.rfx
01.10.2006 05:07 32.592 BMXStateBkp-{00000003-00000000-0000000C-00001102-00000004-20021102}.rfx
01.10.2006 05:03 81.984 bdod.bin
01.10.2006 02:48 16.384 Perflib_Perfdata_720.dat
30.09.2006 22:47 147.456 gqagksr.dll
25.09.2006 02:01 4.212 zllictbl.dat
24.09.2006 14:42 16.384 Perflib_Perfdata_3bc.dat
23.09.2006 10:29 16.384 Perflib_Perfdata_3ec.dat
23.09.2006 01:17 16.384 Perflib_Perfdata_2308.dat
15.09.2006 15:13 16.384 Perflib_Perfdata_3d4.dat
04.09.2006 23:03 98.304 CmdLineExt.dll
23.08.2006 23:38 42.920 vsutil_loc0407.dll
23.08.2006 23:38 18.344 imslsp_install_loc0407.dll
23.08.2006 23:38 18.344 imsinstall_loc0407.dll
23.08.2006 23:38 392.824 vsdatant.sys
23.08.2006 23:38 83.960 zlcomm.dll
23.08.2006 23:38 71.672 zlcommdb.dll
23.08.2006 23:38 59.384 vswmi.dll
23.08.2006 23:38 100.344 vsxml.dll
23.08.2006 23:38 440.312 vsutil.dll
23.08.2006 23:38 268.280 vspubapi.dll
23.08.2006 23:38 71.672 vsregexp.dll
23.08.2006 23:38 157.688 vsinit.dll
23.08.2006 23:38 104.440 vsmonapi.dll
23.08.2006 23:37 83.960 vsdata.dll
23.08.2006 15:21 8.313 jupdate-1.5.0_08-b03.log
16.08.2006 19:07 16.384 Perflib_Perfdata_408.dat
10.08.2006 10:34 16.384 Perflib_Perfdata_42c.dat
29.07.2006 17:34 16.384 Perflib_Perfdata_424.dat
26.07.2006 03:03 127.078 javaws.exe
26.07.2006 03:03 49.265 jpicpl32.cpl
26.07.2006 01:26 53.346 javaw.exe
26.07.2006 01:25 49.248 java.exe
19.07.2006 16:28 21.840 SIntfNT.dll
19.07.2006 16:28 17.212 SIntf32.dll
19.07.2006 16:28 12.067 SIntf16.dll
17.07.2006 00:32 52.858 interceptor.sys
17.07.2006 00:31 45.056 WNASPI32.DLL
16.07.2006 01:39 16.384 Perflib_Perfdata_1d8.dat
16.07.2006 00:36 16.384 Perflib_Perfdata_1dc.dat
15.07.2006 12:24 16.384 Perflib_Perfdata_1f4.dat
07.07.2006 11:52 16.384 Perflib_Perfdata_1fc.dat
07.07.2006 11:47 105.416 FNTCACHE.DAT
06.07.2006 19:52 104 {B21BFE45-977D-4A19-BF9F-44573FA7B012}
04.07.2006 11:20 439.296 V22006115.EPE
04.07.2006 01:49 664 d3d9caps.dat
03.07.2006 11:49 16.384 Perflib_Perfdata_5cc.dat


Volume in drive C is Windows
Volume Serial Number is CC5B-B1A7

Directory of C:\DOCUME~1\Stelios\LOCALS~1\Temp

01.10.2006 05:14 173 jusched.log
01.10.2006 05:10 0 sqlite_2dcOdUWJkeesQp8
01.10.2006 05:10 0 sqlite_YWMhWa0g5cJdHei
01.10.2006 05:10 0 sqlite_fuZkiIwTMP6iPhr
01.10.2006 05:10 0 sqlite_yaaS8LuSaBegHwG
01.10.2006 05:10 16.384 ~DFCBCF.tmp
6 File(s) 16.557 bytes
0 Dir(s) 848.773.120 bytes free


Volume in drive C is Windows
Volume Serial Number is CC5B-B1A7

Directory of C:\WINNT

01.10.2006 05:09 4.932.286 {00000003-00000000-0000000C-00001102-00000004-20021102}.CDF
01.10.2006 05:07 32.606 SchedLgU.Txt
01.10.2006 05:03 565 win.ini
01.10.2006 04:58 642.548 ShellIconCache
01.10.2006 04:57 1.123.480 setupapi.log
01.10.2006 03:21 26.920 ntbtlog.txt
01.10.2006 02:51 705.264 WindowsUpdate.log
30.09.2006 22:55 312 system.ini
26.09.2006 00:42 54.156 QTFont.qfn
24.09.2006 14:40 116 NeroDigital.ini
10.09.2006 02:19 233 egrabber.ini
10.09.2006 01:21 0 nsreg.dat
08.09.2006 21:29 578 M3JPEG.INI
04.09.2006 22:59 316.640 WMSysPr9.prx
04.09.2006 22:59 266.442 DirectX.log
04.09.2006 21:39 1.409 QTFont.for
24.08.2006 23:29 158 cdplayer.ini
23.08.2006 23:38 26.536 zllsputility_loc0407.dll
23.08.2006 23:38 75.776 zllsputility.exe
17.08.2006 02:28 52.115 War3Unin.dat
17.08.2006 02:07 2.829 War3Unin.pif
17.08.2006 02:07 139.264 War3Unin.exe
13.08.2006 21:09 287 ws2setup.log
08.08.2006 11:15 4.896.054 Universe.bmp
25.07.2006 20:14 286.720 Setup1.exe
25.07.2006 20:14 73.216 ST6UNST.EXE
23.07.2006 12:20 2.986.038 1whitemagic.bmp
23.07.2006 12:20 2.986.038 1satori.bmp
23.07.2006 12:20 2.986.038 1idyll.bmp
23.07.2006 12:19 2.986.038 1gazebo2k3.bmp
23.07.2006 12:19 2.986.038 1fluorescence6.bmp
23.07.2006 12:19 2.986.038 1eventide.bmp
23.07.2006 12:19 2.986.038 1cancer.bmp
23.07.2006 12:13 2.986.038 1spark.bmp
23.07.2006 12:13 2.986.038 1newborn.bmp
23.07.2006 12:12 2.986.038 1majesty.bmp
23.07.2006 12:12 2.986.038 1grid.bmp
23.07.2006 12:11 2.986.038 1endlessblue.bmp
23.07.2006 12:11 2.986.038 1coalescence.bmp
23.07.2006 12:09 2.986.038 1arctica.bmp
19.07.2006 16:29 25.970 DIIUnin.dat
19.07.2006 15:43 2.829 DIIUnin.pif
19.07.2006 15:43 94.208 DIIUnin.exe
16.07.2006 22:30 324.991 wmsetup.log
16.07.2006 00:24 10 WININIT.INI
10.07.2006 10:21 1.640 BNet-X - BWLauncher Setup Log.txt
10.07.2006 10:20 720.896 iun6002.exe
03.07.2006 16:28 23 BlendSettings.ini
02.07.2006 00:00 4.096 d3dx.dat


Volume in drive C is Windows
Volume Serial Number is CC5B-B1A7

Directory of C:\

01.10.2006 05:28 0 sys.txt
01.10.2006 05:27 14.753 system.txt
01.10.2006 05:27 575 systemtemp.txt
01.10.2006 05:25 110.341 system32.txt
01.10.2006 05:08 1.610.612.736 pagefile.sys
09.09.2006 19:47 26 register.js
23.01.2006 15:36 429 datFind.bat
13.03.2005 15:11 214.432 ntldr
13.03.2005 15:11 34.724 NTDETECT.COM
13.03.2005 13:14 192 boot.ini
13.03.2005 12:18 0 IO.SYS
13.03.2005 12:18 0 CONFIG.SYS
13.03.2005 12:18 0 MSDOS.SYS
13.03.2005 12:18 0 AUTOEXEC.BAT
19.06.2003 21:05 163.840 arcsetup.exe
19.06.2003 21:05 150.528 arcldr.exe
16 File(s) 1.611.302.576 bytes
0 Dir(s) 848.752.640 bytes free

#2 Das sollte dein PRoblem beseitigen koennen....
http://siri.urz.free.fr/Fix/SmitfraudFix_De.php
__________
MfG Ralf
SEO-Spam Hunter

#3 Danke, das hat funktioniert