"spyware infection" |
||
|---|---|---|
| #0
| ||
|
01.11.2006, 09:57
Member
Beiträge: 24 |
||
 
|
|
|
|
01.11.2006, 15:09
Ehrenmitglied
 Beiträge: 29434 |
#2
lies das durch, arbeite alles ab und poste hier die logs.
http://board.protecus.de/t23188.htm __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
01.11.2006, 16:04
Member
Themenstarter Beiträge: 24 |
#3
Logfile of HijackThis v1.99.1
Scan saved at 16:03:24, on 01.11.2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\Explorer.exe C:\WINDOWS\system32\msmapi32.exe C:\Programme\AntiVir PersonalEdition Classic\sched.exe C:\Programme\AntiVir PersonalEdition Classic\avguard.exe C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe C:\Programme\QuickTime\qttask.exe C:\Programme\Java\jre1.5.0_09\bin\jusched.exe C:\Programme\VeriSign\NAVI\naviagent.exe C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe C:\Programme\Messenger\msmsgs.exe C:\Programme\InterVideo\Common\Bin\WinCinemaMgr.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Kazaa Lite\kazaalite.kpp C:\Programme\Internet Explorer\iexplore.exe C:\Programme\Filzip\Filzip.exe C:\DOKUME~1\STEFAN~1\LOKALE~1\Temp\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.u2tour.de/ R3 - URLSearchHook: i-Nav IDN SearchHook - {CE000994-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll F2 - REG:system.ini: Shell=Explorer.exe O2 - BHO: (no name) - {00110011-4b0b-44d5-9718-90c88817369b} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {086ae192-23a6-48d6-96ec-715f53797e85} - (no file) O2 - BHO: (no name) - {11904ce8-632a-4856-a7cc-00b33fe71bd8} - (no file) O2 - BHO: (no name) - {150fa160-130d-451f-b863-b655061432ba} - (no file) O2 - BHO: (no name) - {15ACE85C-0BB1-42d1-9E32-07EB0506675A} - (no file) O2 - BHO: (no name) - {17da0c9e-4a27-4ac5-bb75-5d24b8cdb972} - (no file) O2 - BHO: (no name) - {1b68470c-2def-493b-8a4a-8e2d81be4ea5} - (no file) O2 - BHO: (no name) - {1c4da27d-4d52-4465-a089-98e01bb725ca} - (no file) O2 - BHO: (no name) - {1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb1} - (no file) O2 - BHO: (no name) - {1f48aa48-c53a-4e21-85e7-ac7cc6b5ffb2} - (no file) O2 - BHO: (no name) - {202a961f-23ae-42b1-9505-ffe3c818d717} - (no file) O2 - BHO: Spool Dynamic Link Library - {231B7A50-B3B2-4016-BD34-3D8495C9F3D1} - C:\WINDOWS\system32\splcore.dll O2 - BHO: (no name) - {2d38a51a-23c9-48a1-a33c-48675aa2b494} - (no file) O2 - BHO: (no name) - {2e246fae-8420-11d9-870d-000c2917de7f} - (no file) O2 - BHO: (no name) - {2e9caff6-30c7-4208-8807-e79d4ec6f806} - (no file) O2 - BHO: (no name) - {479fd0cf-5be9-4c63-8cda-b6d371c67bd5} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5753791b-f607-48ca-814e-91c14d081f9e} - (no file) O2 - BHO: (no name) - {7070a8f9-08a4-ca47-0ab0-1eb9e4ee1f3b} - (no file) O2 - BHO: (no name) - {746455fe-d059-47e7-af0e-140e03f5a447} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_09\bin\ssv.dll O2 - BHO: (no name) - {77701e16-9bfe-4b63-a5b4-7bd156758a37} - (no file) O2 - BHO: (no name) - {7a7e6d97-b492-4884-9abb-c31281dcc4f2} - (no file) O2 - BHO: (no name) - {860c2f6b-ca82-4282-9187-beccbb66f0af} - (no file) O2 - BHO: (no name) - {87185e78-a61b-4db3-965a-3235bbd7a622} - (no file) O2 - BHO: ASGP32.ASGP - {89923A78-1DEA-41DC-A323-88DA2DE7B5AE} - C:\WINDOWS\system32\asgp32.dll O2 - BHO: (no name) - {8dc8f96d-34f7-1501-a2a4-631341aa3ac1} - (no file) O2 - BHO: (no name) - {9c5875b8-93f3-429d-ff34-660b206d897a} - (no file) O2 - BHO: (no name) - {a2595f37-48d0-46a1-9b51-478591a97764} - (no file) O2 - BHO: (no name) - {a6f42cad-2559-48df-af30-89e480af5dfa} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll O2 - BHO: (no name) - {b212d577-05b7-4963-911e-4a8588160dfa} - (no file) O2 - BHO: (no name) - {CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - (no file) O2 - BHO: i-Nav IDN Resolver - {CE000992-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll O2 - BHO: (no name) - {cf021f40-3e14-23a5-cba2-717765721306} - (no file) O2 - BHO: (no name) - {d1ac752e-883f-4ed8-8828-b618c3a72152} - (no file) O2 - BHO: (no name) - {e2b2b5a1-b48c-4886-a318-723916a01024} - (no file) O2 - BHO: (no name) - {e2ddf680-9905-4dee-8c64-0a5de7fe133c} - (no file) O2 - BHO: (no name) - {e3eebbe8-9cab-4c76-b26a-747e25ebb4c6} - (no file) O2 - BHO: (no name) - {e6d5237d-a6c7-4c83-a67f-f9f15586fa62} - (no file) O2 - BHO: (no name) - {e7afff2a-1b57-49c7-bf6b-e5123394c970} - (no file) O2 - BHO: (no name) - {fcaddc14-bd46-408a-9842-cdbe1c6d37eb} - (no file) O2 - BHO: (no name) - {fd9bc004-8331-4457-b830-4759ff704c22} - (no file) O2 - BHO: (no name) - {fe2d25c1-c1db-4b5e-9390-af1cb5302f32} - (no file) O2 - BHO: (no name) - {ff1bf4c7-4e08-4a28-a43f-9d60a9f7a880} - (no file) O2 - BHO: (no name) - {FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF} - (no file) O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.5.0_09\bin\jusched.exe" O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\printray.exe O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized O4 - Startup: antispysoldier.lnk = C:\Programme\Antispyware Soldier\antispysoldier.exe O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Programme\InterVideo\Common\Bin\WinCinemaMgr.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Mountit.lnk = C:\Programme\Roxio\WinOnCD 6 PE\MountIt.exe O8 - Extra context menu item: &Google-Suche - res://C:\Programme\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Ins Deutsche übersetzen - res://C:\Programme\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Im Cache gespeicherte Seite - res://C:\Programme\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Verweisseiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Ähnliche Seiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmsimilar.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Hilfe zu i-Nav - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing) O9 - Extra 'Tools' menuitem: Hilfe zu i-Nav - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing) O9 - Extra button: (no name) - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll O9 - Extra 'Tools' menuitem: Optionen für i-Nav - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/045992b42fa8d35ff316/netzip/RdxIE601_de.cab O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundler/CAB/RealArcadeRdxIE.cab O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab O16 - DPF: {DECEAAA2-370A-49BB-9362-68C3A58DDC62} (SAIX) - http://static.zangocash.com/cab/Zango/ie/bridge-c8.cab?9b91da394bb089c426c4c8fcb2 032040a0984db8ccad09aad24d7ebc200f0941a5b810e6eae0e4827334f18e895434b50ff31e0c2b0 e8f858ddc2e736e:e3eb4becbb5c1ba39dd084361d36488e O16 - DPF: {E0B795B4-FD95-4ABD-A375-27962EFCE8CF} - http://install.power-url.de/StarInstall.ocx O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: VeriSign Updater (navi) - VeriSign, Inc. - C:\Programme\VeriSign\NAVI\naviagent.exe Combofix: Stefan ECKELBERG - 06-11-01 16:30:30,73 Service Pack 2 ComboFix 06.10.19 - Running from: "C:\Dokumente und Einstellungen\Stefan ECKELBERG\Eigene Dateien\Div. Programme" (((((((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\WINDOWS\system32\vxgamet1.exe ((((((((((((((((((((((((((((((( Files Created from 2006-10-01 to 2006-11-01 )))))))))))))))))))))))))))))))))) 2006-11-01 07:44 9,216 --a------ C:\WINDOWS\system32\aepcmkca.exe 2006-11-01 07:39 29,184 --a------ C:\WINDOWS\system32\VXH8JKDQ6.EXE 2006-11-01 07:39 23,040 --a------ C:\WINDOWS\system32\performent202.dll 2006-11-01 07:39 19,456 --a------ C:\WINDOWS\system32\VXH8JKDQ2.EXE 2006-10-29 11:19 0 --a------ C:\WINDOWS\system32\1821.exe 2006-10-23 14:30 9,728 --a------ C:\WINDOWS\system32\mpsegment.exe 2006-10-23 14:30 9,472 --a------ C:\WINDOWS\system32\POPCORN72.EXE 2006-10-23 14:30 32,512 --a------ C:\WINDOWS\system32\msmsn.exe 2006-10-23 14:30 25,344 --a------ C:\WINDOWS\system32\dload.exe 2006-10-23 14:30 24,576 --a------ C:\WINDOWS\system32\netstat2.exe 2006-10-23 14:30 23,296 --a------ C:\WINDOWS\system32\anti_troj.exe 2006-10-23 14:30 23,040 --a------ C:\WINDOWS\system32\iewd.exe 2006-10-23 14:30 22,784 --a------ C:\WINDOWS\system32\winmuse.exe 2006-10-23 14:30 18,432 --a------ C:\WINDOWS\spp3.dll 2006-10-23 14:30 17,920 --a------ C:\WINDOWS\system32\proqlaim.exe 2006-10-23 14:30 17,664 --a------ C:\WINDOWS\system32\win32hp.dll 2006-10-23 14:30 15,104 --a------ C:\WINDOWS\system32\perfont.exe 2006-10-23 14:30 14,080 --a------ C:\WINDOWS\system32\kernels64.exe 2006-10-23 14:29 9,728 --a------ C:\WINDOWS\y.exe 2006-10-23 14:29 9,728 --a------ C:\WINDOWS\winmgnt.exe 2006-10-23 14:29 9,216 --a------ C:\WINDOWS\x.exe 2006-10-23 14:29 32,000 --a------ C:\WINDOWS\window.exe 2006-10-23 14:29 32,000 --a------ C:\WINDOWS\runwin32.exe 2006-10-23 14:29 30,208 --a------ C:\WINDOWS\wininet32.exe 2006-10-23 14:29 29,696 --a------ C:\WINDOWS\win32e.exe 2006-10-23 14:29 27,904 --a------ C:\WINDOWS\systeem.exe 2006-10-23 14:29 27,136 --a------ C:\WINDOWS\accesss.exe 2006-10-23 14:29 26,624 --a------ C:\WINDOWS\dialup.exe 2006-10-23 14:29 23,296 --a------ C:\WINDOWS\users32.exe 2006-10-23 14:29 23,040 --------- C:\WINDOWS\notepad32.exe 2006-10-23 14:29 20,736 --a------ C:\WINDOWS\olehelp.exe 2006-10-23 14:29 18,432 --a------ C:\WINDOWS\win64.exe 2006-10-23 14:29 17,920 --a------ C:\WINDOWS\avpcc.dll 2006-10-23 14:29 17,152 --a------ C:\WINDOWS\systemcritical.exe 2006-10-23 14:29 16,128 --a------ C:\WINDOWS\winajbm.dll 2006-10-23 14:29 15,872 --a------ C:\WINDOWS\time.exe 2006-10-23 14:29 15,104 --a------ C:\WINDOWS\waol.exe 2006-10-23 14:29 14,080 --a------ C:\WINDOWS\clrssn.exe 2006-10-23 14:29 13,056 --a------ C:\WINDOWS\cpan.dll 2006-10-23 14:29 12,800 --a------ C:\WINDOWS\mtwirl32.dll 2006-10-23 14:29 12,032 --a------ C:\WINDOWS\xplugin.dll 2006-10-23 14:28 15,360 --a------ C:\WINDOWS\system32\ace16win.dll 2006-10-23 14:28 13,312 --a------ C:\WINDOWS\inetdctr.dll 2006-10-23 14:27 9,216 --a------ C:\WINDOWS\system32\bojpxnqf.exe 2006-10-23 14:27 8,192 --a------ C:\WINDOWS\system32\sklmnf.exe 2006-10-23 14:27 45,056 --a------ C:\WINDOWS\system32\msmapi32.exe 2006-10-23 14:27 18,432 --a------ C:\WINDOWS\system32\asgp32.dll 2006-10-23 14:27 13,824 --a------ C:\WINDOWS\system32\intr32.dll 2006-10-23 14:27 10,752 --a------ C:\WINDOWS\system32\instreg_tmp.exe 2006-10-09 18:01 6,276 --a------ C:\WINDOWS\system32\fywwztnk.exe (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-11-01 16:06 -------- d-------- C:\Programme\CleanUp! 2006-11-01 09:17 -------- d-------- C:\Programme\Google 2006-11-01 08:45 -------- d-------- C:\Dokumente und Einstellungen\Stefan ECKELBERG\Anwendungsdaten\Google 2006-11-01 08:44 -------- d-------- C:\Programme\Java 2006-09-17 15:20 21840 --a----t- C:\WINDOWS\system32\SIntfNT.dll 2006-09-17 15:20 17212 --a----t- C:\WINDOWS\system32\SIntf32.dll 2006-09-17 15:20 12067 --a----t- C:\WINDOWS\system32\SIntf16.dll 2006-09-13 06:02 1084416 --a------ C:\WINDOWS\system32\msxml3.dll 2006-08-25 16:46 617472 --a------ C:\WINDOWS\system32\comctl32.dll 2006-08-21 13:26 16896 --a------ C:\WINDOWS\system32\fltlib.dll 2006-08-21 10:14 23040 --a------ C:\WINDOWS\system32\fltmc.exe 2006-08-16 12:58 100352 --a------ C:\WINDOWS\system32\6to4svc.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "MSMSGS"="\"C:\\Programme\\Messenger\\msmsgs.exe\" /background" @="" "Skype"="\"C:\\Programme\\Skype\\Phone\\Skype.exe\" /nosplash /minimized" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "TkBellExe"="\"C:\\Programme\\Gemeinsame Dateien\\Real\\Update_OB\\realsched.exe\" -osboot" "QuickTime Task"="\"C:\\Programme\\QuickTime\\qttask.exe\" -atboottime" "SunJavaUpdateSched"="\"C:\\Programme\\Java\\jre1.5.0_09\\bin\\jusched.exe\"" "PrinTray"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\2\\printray.exe" "avgnt"="\"C:\\Programme\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonceex] "Flag"=dword:00000084 [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000005 [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="Die derzeitige Homepage" "Flags"=dword:00000002 "Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,00,03,00,00,00,\ 00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00 "CurrentState"=hex:04,00,00,40 "OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\ ff,ff,04,00,00,00 "RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\ 00,00,01,00,00,00 [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=hex:91,00,00,00 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=hex:91,00,00,00 "CDRAutoRun"=dword:00000000 [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=hex:91,00,00,00 "CDRAutoRun"=dword:00000000 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}" "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}" "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" Completion time: 06-11-01 16:33:28.51 C:\ComboFix.txt ... 06-11-01 16:33 Verzeichnis von C:\WINDOWS\system32 01.11.2006 16:43 4 stfv.bin 01.11.2006 16:33 30.208 vxgamet1.exe 01.11.2006 16:24 13.646 wpa.dbl 01.11.2006 08:44 8.833 jupdate-1.5.0_09-b03.log 01.11.2006 07:44 9.216 aepcmkca.exe 01.11.2006 07:39 23.040 performent202.dll 01.11.2006 07:39 19.456 VXH8JKDQ2.EXE 01.11.2006 07:39 29.184 VXH8JKDQ6.EXE 01.11.2006 07:39 14.592 ncompat.tlb 01.11.2006 07:39 26.880 msvol.tlb 01.11.2006 07:37 311 lfd.dat 01.11.2006 07:37 12 oiso.bin 01.11.2006 07:37 317 pcf.pdf 29.10.2006 11:24 380.350 perfh009.dat 29.10.2006 11:24 52.764 perfc009.dat 29.10.2006 11:24 391.000 perfh007.dat 29.10.2006 11:24 63.580 perfc007.dat 29.10.2006 11:24 897.954 PerfStringBackup.INI 29.10.2006 11:19 0 1821.exe 28.10.2006 07:30 1.409 tmp7472B.FOT 23.10.2006 14:30 32.512 msmsn.exe 23.10.2006 14:30 22.784 winmuse.exe 23.10.2006 14:30 15.104 perfont.exe 23.10.2006 14:30 24.576 netstat2.exe 23.10.2006 14:30 14.080 kernels64.exe 23.10.2006 14:30 23.296 anti_troj.exe 23.10.2006 14:30 9.472 POPCORN72.EXE 23.10.2006 14:30 17.920 proqlaim.exe 23.10.2006 14:30 9.728 mpsegment.exe 23.10.2006 14:30 23.040 iewd.exe 23.10.2006 14:30 25.344 dload.exe 23.10.2006 14:30 17.664 win32hp.dll 23.10.2006 14:30 28.672 ts.ico 23.10.2006 14:30 15.872 ot.ico 23.10.2006 14:28 15.360 ace16win.dll 23.10.2006 14:27 18.432 asgp32.dll 23.10.2006 14:27 10.752 instreg_tmp.exe 23.10.2006 14:27 8.192 sklmnf.exe 23.10.2006 14:27 607 msmapi32.exe.MANIFEST 23.10.2006 14:27 45.056 msmapi32.exe 23.10.2006 14:27 13.824 intr32.dll 23.10.2006 14:27 9.216 bojpxnqf.exe 12.10.2006 03:10 127.078 javaws.exe 12.10.2006 03:10 49.265 jpicpl32.cpl 12.10.2006 01:35 53.346 javaw.exe 12.10.2006 01:35 49.248 java.exe 09.10.2006 18:01 6.276 fywwztnk.exe 04.10.2006 21:03 9.639.336 MRT.exe 17.09.2006 15:20 21.840 SIntfNT.dll 17.09.2006 15:20 17.212 SIntf32.dll 17.09.2006 15:20 12.067 SIntf16.dll 17.09.2006 15:19 1.511 Addy_Buschu.lnk 13.09.2006 06:02 1.084.416 msxml3.dll 04.09.2006 07:12 1.494.016 shdocvw.dll 25.08.2006 16:46 617.472 comctl32.dll 21.08.2006 13:26 16.896 fltlib.dll 21.08.2006 10:14 23.040 fltmc.exe 16.08.2006 12:58 100.352 6to4svc.dll 28.07.2006 12:28 3.075.072 mshtml.dll 27.07.2006 14:25 679.424 inetcomm.dll 25.07.2006 21:33 615.936 urlmon.dll 21.07.2006 09:29 72.704 hlink.dll 14.07.2006 16:38 332.288 netapi32.dll 14.07.2006 16:25 546.304 hhctrl.ocx 13.07.2006 14:34 8.494.592 shell32.dll 05.07.2006 11:55 1.057.792 kernel32.dll 03.07.2006 08:24 136.464 FNTCACHE.DAT 26.06.2006 18:40 148.480 dnsapi.dll 26.06.2006 18:40 8.192 rasadhlp.dll 23.06.2006 12:10 664.576 wininet.dll 23.06.2006 12:10 146.432 msrating.dll 23.06.2006 12:10 532.480 mstime.dll 23.06.2006 12:10 448.512 mshtmled.dll 23.06.2006 12:10 474.624 shlwapi.dll 23.06.2006 12:10 39.424 pngfilt.dll 23.06.2006 12:10 55.808 extmgr.dll 23.06.2006 12:10 96.768 inseng.dll 23.06.2006 12:10 205.312 dxtrans.dll 23.06.2006 12:10 251.392 iepeers.dll 23.06.2006 12:10 152.064 cdfview.dll 23.06.2006 12:10 1.022.976 browseui.dll 23.06.2006 12:10 16.384 jsproxy.dll 23.06.2006 12:10 1.056.256 danim.dll 23.06.2006 12:10 357.888 dxtmsft.dll 23.06.2006 09:53 27.136 xpsp3res.dll 22.06.2006 16:44 57.384 avsda.dll 22.06.2006 06:06 1.441.792 query.dll 22.06.2006 06:06 69.120 ciodm.dll 19.06.2006 15:20 702.768 WgaLogon.dll 19.06.2006 15:19 571.184 LegitCheckControl.dll 19.06.2006 15:19 304.944 WgaTray.exe 14.06.2006 10:36 8 winlogon.ini 11.06.2006 17:52 12.544 runsrv32.exe 11.06.2006 11:53 4 thlwin32.dll 11.06.2006 11:48 31.744 udpmod.dll 11.06.2006 11:48 17.152 questmod.dll 11.06.2006 11:48 25.088 jao.dll 11.06.2006 11:48 11.776 bridge.dll 11.06.2006 11:48 20.736 a.exe 11.06.2006 11:48 8.448 txfdb32.dll 11.06.2006 11:48 13.824 runsrv32.dll 11.06.2006 11:48 8.960 wstart.dll 11.06.2006 11:48 25.088 tcpservice2.exe 11.06.2006 11:47 9.728 dailytoolbar.dll 11.06.2006 11:47 28.160 alxres.dll 01.06.2006 19:47 27.648 jgpl400.dll 01.06.2006 19:47 163.840 jgdw400.dll Verzeichnis von C:\DOKUME~1\STEFAN~1\LOKALE~1\Temp 01.11.2006 16:26 32.768 ~DFA1CC.tmp 04.10.2006 09:23 668 datFind.bat 2 Datei(en) 33.436 Bytes 0 Verzeichnis(se), 3.367.735.296 Bytes frei Verzeichnis von C:\WINDOWS 01.11.2006 16:48 41 Filzip.ini 01.11.2006 15:25 159 wiadebug.log 01.11.2006 15:25 1.163.211 WindowsUpdate.log 01.11.2006 15:25 50 wiaservc.log 01.11.2006 15:25 0 0.log 01.11.2006 15:25 2.048 bootstat.dat 29.10.2006 12:23 32.540 SchedLgU.Txt 26.10.2006 13:51 579.465 nscstiu_error.txt 25.10.2006 16:30 719.362 setupapi.log 23.10.2006 14:30 18.432 spp3.dll 23.10.2006 14:29 30.208 wininet32.exe 23.10.2006 14:29 32.000 runwin32.exe 23.10.2006 14:29 26.624 dialup.exe 23.10.2006 14:29 9.728 y.exe 23.10.2006 14:29 22.784 xxxvideo.hta 23.10.2006 14:29 12.032 xplugin.dll 23.10.2006 14:29 9.216 x.exe 23.10.2006 14:29 9.728 winmgnt.exe 23.10.2006 14:29 32.000 window.exe 23.10.2006 14:29 16.128 winajbm.dll 23.10.2006 14:29 18.432 win64.exe 23.10.2006 14:29 29.696 win32e.exe 23.10.2006 14:29 15.104 waol.exe 23.10.2006 14:29 23.296 users32.exe 23.10.2006 14:29 15.872 time.exe 23.10.2006 14:29 17.152 systemcritical.exe 23.10.2006 14:29 27.904 systeem.exe 23.10.2006 14:29 20.736 olehelp.exe 23.10.2006 14:29 23.040 notepad32.exe 23.10.2006 14:29 12.800 mtwirl32.dll 23.10.2006 14:29 13.056 cpan.dll 23.10.2006 14:29 14.080 clrssn.exe 23.10.2006 14:29 17.920 avpcc.dll 23.10.2006 14:29 15.872 astctl32.ocx 23.10.2006 14:29 27.136 accesss.exe 23.10.2006 14:28 13.312 inetdctr.dll 12.10.2006 18:29 135.842 iis6.log 12.10.2006 18:29 189.889 ntdtcsetup.log 12.10.2006 18:29 306.472 comsetup.log 12.10.2006 18:29 359.183 tsoc.log 12.10.2006 18:29 1.393 imsins.log 12.10.2006 18:29 46.471 ocmsn.log 12.10.2006 18:29 13.130 KB924191.log 12.10.2006 18:29 494.873 ocgen.log 12.10.2006 18:29 46.736 msgsocm.log 12.10.2006 18:29 885.773 FaxSetup.log 12.10.2006 18:29 36.182 updspapi.log 12.10.2006 18:28 1.393 imsins.BAK 12.10.2006 18:28 13.018 KB922819.log 12.10.2006 18:28 12.208 KB923414.log 12.10.2006 18:27 12.205 KB924496.log 12.10.2006 18:27 9.569 KB923191.log 04.10.2006 13:43 11.133 KB925486.log 17.09.2006 15:38 42.974 cddabase.ini 17.09.2006 15:38 114 audiovie.ini 12.09.2006 20:00 11.445 KB920685.log 12.09.2006 20:00 13.086 KB920872.log 12.09.2006 20:00 11.559 KB919007.log 12.09.2006 19:59 7.656 KB922582.log 11.09.2006 10:47 4.590 cdplayer.ini 11.08.2006 08:51 19.380 KB920214.log 11.08.2006 08:50 19.682 KB922616.log 11.08.2006 08:50 19.258 KB921398.log 11.08.2006 08:48 18.756 KB920683.log 11.08.2006 08:48 17.588 KB920670.log 11.08.2006 08:47 16.918 KB917422.log 11.08.2006 08:46 20.520 KB918899.log 09.08.2006 13:08 11.105 KB921883.log 26.07.2006 06:57 8.144 WgaNotify.log 12.07.2006 18:29 13.379 KB917159.log 12.07.2006 18:28 13.919 KB914388.log 12.07.2006 18:28 11.965 KB916595.log 22.06.2006 16:39 32.013 spupdsvc.log 15.06.2006 17:46 10.975 KB917734.log 15.06.2006 17:46 205.695 wmsetup.log 15.06.2006 17:44 14.266 KB918439.log 15.06.2006 17:44 14.620 KB917344.log 15.06.2006 17:44 14.407 KB917953.log 15.06.2006 17:44 14.393 KB911280.log 15.06.2006 17:43 17.698 KB916281.log 15.06.2006 17:42 11.591 KB914389.log 11.06.2006 11:48 2.374 ts_header.gif 11.06.2006 11:48 15.616 dlmax.dll 11.06.2006 11:48 21.760 Pynix.dll 11.06.2006 11:48 11.520 BTGrab.dll 11.06.2006 11:48 25.856 ZServ.dll 11.06.2006 11:48 14.848 susp.exe 11.06.2006 11:47 9.472 alxtb1.dll 11.06.2006 11:47 14.592 alxie328.dll 11.06.2006 11:47 18.944 alexaie.dll Verzeichnis von C:\WINDOWS\Downloaded Program Files 24.01.2005 10:38 1.249 erma.inf 03.06.2004 09:04 524.445 RdxIE.dll 06.02.2004 15:18 735 default.inf 05.02.2004 09:45 520.355 RealArcadeRdxIE.dll 06.01.2004 17:15 65 desktop.ini 08.12.2003 13:58 3.759 swflash.inf 20.11.2003 00:22 740 jinstall-1_4_2_03.inf 09.10.2003 10:32 144 QTPlugin.inf 06.06.2003 18:06 335.872 Play365.dll 06.06.2003 17:23 477 play365.inf 13.03.2003 11:03 962 IPIXX.inf 31.05.2002 08:19 117.328 PURde-at.dll 02.06.2000 11:29 102.912 ipixx.ocx 13 Datei(en) 1.609.043 Bytes 0 Verzeichnis(se), 3.367.677.952 Bytes frei Verzeichnis von C:\ 01.11.2006 16:58 0 sys.txt 01.11.2006 16:57 895 down.txt 01.11.2006 16:56 117 tmp.txt 01.11.2006 16:54 14.272 system.txt 01.11.2006 16:53 344 systemtemp.txt 01.11.2006 16:50 104.836 system32.txt 01.11.2006 16:33 8.165 ComboFix.txt 01.11.2006 15:25 0 Log.txt 01.11.2006 15:25 536.399.872 hiberfil.sys 01.11.2006 15:25 805.306.368 pagefile.sys 30.09.2004 16:19 7.636 text_scroller.class 26.09.2004 09:57 3 TCPCheckResult.txt 25.09.2004 17:01 211 boot.ini 25.09.2004 16:41 47.564 NTDETECT.COM 25.09.2004 16:41 251.184 ntldr 06.01.2004 17:18 0 IO.SYS 06.01.2004 17:18 0 MSDOS.SYS 06.01.2004 17:18 0 AUTOEXEC.BAT 06.01.2004 17:18 0 CONFIG.SYS 18.08.2001 13:00 4.952 bootfont.bin 20 Datei(en) 1.342.146.419 Bytes 0 Verzeichnis(se), 3.367.673.856 Bytes frei Ich hoffe, ich habe alles richtig gemacht!!!! Vielen lieben dank für eure hilfe Dieser Beitrag wurde am 01.11.2006 um 18:17 Uhr von Sabina editiert.
|
|
|
|
|
|
|
01.11.2006, 17:10
Ehrenmitglied
Beiträge: 29434 |
#4
ich muss kurz weg ...ich sage dir bescheid, wenn alles fertig ist
poste noch mal das log von Windows und System32 bis Mai2006 __________ MfG Sabina rund um die PC-Sicherheit Dieser Beitrag wurde am 01.11.2006 um 17:19 Uhr von Sabina editiert.
|
|
|
|
|
|
|
01.11.2006, 17:26
Member
Themenstarter Beiträge: 24 |
#5
Verzeichnis von C:\WINDOWS\system32
01.11.2006 17:22 4 stfv.bin 01.11.2006 16:33 30.208 vxgamet1.exe 01.11.2006 16:24 13.646 wpa.dbl 01.11.2006 08:44 8.833 jupdate-1.5.0_09-b03.log 01.11.2006 07:44 9.216 aepcmkca.exe 01.11.2006 07:39 23.040 performent202.dll 01.11.2006 07:39 19.456 VXH8JKDQ2.EXE 01.11.2006 07:39 29.184 VXH8JKDQ6.EXE 01.11.2006 07:39 14.592 ncompat.tlb 01.11.2006 07:39 26.880 msvol.tlb 01.11.2006 07:37 311 lfd.dat 01.11.2006 07:37 12 oiso.bin 01.11.2006 07:37 317 pcf.pdf 29.10.2006 11:24 380.350 perfh009.dat 29.10.2006 11:24 52.764 perfc009.dat 29.10.2006 11:24 391.000 perfh007.dat 29.10.2006 11:24 63.580 perfc007.dat 29.10.2006 11:24 897.954 PerfStringBackup.INI 29.10.2006 11:19 0 1821.exe 28.10.2006 07:30 1.409 tmp7472B.FOT 23.10.2006 14:30 32.512 msmsn.exe 23.10.2006 14:30 22.784 winmuse.exe 23.10.2006 14:30 15.104 perfont.exe 23.10.2006 14:30 24.576 netstat2.exe 23.10.2006 14:30 14.080 kernels64.exe 23.10.2006 14:30 23.296 anti_troj.exe 23.10.2006 14:30 9.472 POPCORN72.EXE 23.10.2006 14:30 17.920 proqlaim.exe 23.10.2006 14:30 9.728 mpsegment.exe 23.10.2006 14:30 23.040 iewd.exe 23.10.2006 14:30 25.344 dload.exe 23.10.2006 14:30 17.664 win32hp.dll 23.10.2006 14:30 28.672 ts.ico 23.10.2006 14:30 15.872 ot.ico 23.10.2006 14:28 15.360 ace16win.dll 23.10.2006 14:27 18.432 asgp32.dll 23.10.2006 14:27 10.752 instreg_tmp.exe 23.10.2006 14:27 8.192 sklmnf.exe 23.10.2006 14:27 607 msmapi32.exe.MANIFEST 23.10.2006 14:27 45.056 msmapi32.exe 23.10.2006 14:27 13.824 intr32.dll 23.10.2006 14:27 9.216 bojpxnqf.exe 12.10.2006 03:10 127.078 javaws.exe 12.10.2006 03:10 49.265 jpicpl32.cpl 12.10.2006 01:35 53.346 javaw.exe 12.10.2006 01:35 49.248 java.exe 09.10.2006 18:01 6.276 fywwztnk.exe 04.10.2006 21:03 9.639.336 MRT.exe 17.09.2006 15:20 21.840 SIntfNT.dll 17.09.2006 15:20 17.212 SIntf32.dll 17.09.2006 15:20 12.067 SIntf16.dll 17.09.2006 15:19 1.511 Addy_Buschu.lnk 13.09.2006 06:02 1.084.416 msxml3.dll 04.09.2006 07:12 1.494.016 shdocvw.dll 25.08.2006 16:46 617.472 comctl32.dll 21.08.2006 13:26 16.896 fltlib.dll 21.08.2006 10:14 23.040 fltmc.exe 16.08.2006 12:58 100.352 6to4svc.dll 28.07.2006 12:28 3.075.072 mshtml.dll 27.07.2006 14:25 679.424 inetcomm.dll 25.07.2006 21:33 615.936 urlmon.dll 21.07.2006 09:29 72.704 hlink.dll 14.07.2006 16:38 332.288 netapi32.dll 14.07.2006 16:25 546.304 hhctrl.ocx 13.07.2006 14:34 8.494.592 shell32.dll 05.07.2006 11:55 1.057.792 kernel32.dll 03.07.2006 08:24 136.464 FNTCACHE.DAT 26.06.2006 18:40 148.480 dnsapi.dll 26.06.2006 18:40 8.192 rasadhlp.dll 23.06.2006 12:10 664.576 wininet.dll 23.06.2006 12:10 146.432 msrating.dll 23.06.2006 12:10 532.480 mstime.dll 23.06.2006 12:10 448.512 mshtmled.dll 23.06.2006 12:10 474.624 shlwapi.dll 23.06.2006 12:10 39.424 pngfilt.dll 23.06.2006 12:10 55.808 extmgr.dll 23.06.2006 12:10 96.768 inseng.dll 23.06.2006 12:10 205.312 dxtrans.dll 23.06.2006 12:10 251.392 iepeers.dll 23.06.2006 12:10 152.064 cdfview.dll 23.06.2006 12:10 1.022.976 browseui.dll 23.06.2006 12:10 16.384 jsproxy.dll 23.06.2006 12:10 1.056.256 danim.dll 23.06.2006 12:10 357.888 dxtmsft.dll 23.06.2006 09:53 27.136 xpsp3res.dll 22.06.2006 16:44 57.384 avsda.dll 22.06.2006 06:06 1.441.792 query.dll 22.06.2006 06:06 69.120 ciodm.dll 19.06.2006 15:20 702.768 WgaLogon.dll 19.06.2006 15:19 571.184 LegitCheckControl.dll 19.06.2006 15:19 304.944 WgaTray.exe 14.06.2006 10:36 8 winlogon.ini 11.06.2006 17:52 12.544 runsrv32.exe 11.06.2006 11:53 4 thlwin32.dll 11.06.2006 11:48 31.744 udpmod.dll 11.06.2006 11:48 17.152 questmod.dll 11.06.2006 11:48 25.088 jao.dll 11.06.2006 11:48 11.776 bridge.dll 11.06.2006 11:48 20.736 a.exe 11.06.2006 11:48 8.448 txfdb32.dll 11.06.2006 11:48 13.824 runsrv32.dll 11.06.2006 11:48 8.960 wstart.dll 11.06.2006 11:48 25.088 tcpservice2.exe 11.06.2006 11:47 9.728 dailytoolbar.dll 11.06.2006 11:47 28.160 alxres.dll 01.06.2006 19:47 27.648 jgpl400.dll 01.06.2006 19:47 163.840 jgdw400.dll 19.05.2006 14:09 95.744 iphlpapi.dll 19.05.2006 14:09 112.128 dhcpcsvc.dll 18.05.2006 06:36 450.560 jscript.dll 14.05.2006 09:48 181.248 rasmans.dll 01.05.2006 11:15 483.328 actskn45.ocx 29.04.2006 05:07 5.533.696 wmp.dll 26.03.2006 15:44 2.507 Lexmark Z52 Series ColorFine.AD2 17.03.2006 01:38 28.672 verclsid.exe 01.03.2006 20:43 91.136 mtxoci.dll 01.03.2006 20:43 66.560 mtxclu.dll 01.03.2006 20:43 426.496 msdtcprx.dll 01.03.2006 20:43 956.416 msdtctm.dll 01.03.2006 20:43 11.776 xolehlp.dll 01.03.2006 20:43 161.280 msdtcuiu.dll 21.01.2006 15:48 186 LEXSUP.HTM 04.01.2006 04:35 68.096 webclnt.dll 03.01.2006 11:55 6.948 jupdate-1.5.0_06-b05.log Verzeichnis von C:\WINDOWS 01.11.2006 16:48 41 Filzip.ini 01.11.2006 15:25 159 wiadebug.log 01.11.2006 15:25 1.163.211 WindowsUpdate.log 01.11.2006 15:25 50 wiaservc.log 01.11.2006 15:25 0 0.log 01.11.2006 15:25 2.048 bootstat.dat 29.10.2006 12:23 32.540 SchedLgU.Txt 26.10.2006 13:51 579.465 nscstiu_error.txt 25.10.2006 16:30 719.362 setupapi.log 23.10.2006 14:30 18.432 spp3.dll 23.10.2006 14:29 30.208 wininet32.exe 23.10.2006 14:29 32.000 runwin32.exe 23.10.2006 14:29 26.624 dialup.exe 23.10.2006 14:29 9.728 y.exe 23.10.2006 14:29 22.784 xxxvideo.hta 23.10.2006 14:29 12.032 xplugin.dll 23.10.2006 14:29 9.216 x.exe 23.10.2006 14:29 9.728 winmgnt.exe 23.10.2006 14:29 32.000 window.exe 23.10.2006 14:29 16.128 winajbm.dll 23.10.2006 14:29 18.432 win64.exe 23.10.2006 14:29 29.696 win32e.exe 23.10.2006 14:29 15.104 waol.exe 23.10.2006 14:29 23.296 users32.exe 23.10.2006 14:29 15.872 time.exe 23.10.2006 14:29 17.152 systemcritical.exe 23.10.2006 14:29 27.904 systeem.exe 23.10.2006 14:29 20.736 olehelp.exe 23.10.2006 14:29 23.040 notepad32.exe 23.10.2006 14:29 12.800 mtwirl32.dll 23.10.2006 14:29 13.056 cpan.dll 23.10.2006 14:29 14.080 clrssn.exe 23.10.2006 14:29 17.920 avpcc.dll 23.10.2006 14:29 15.872 astctl32.ocx 23.10.2006 14:29 27.136 accesss.exe 23.10.2006 14:28 13.312 inetdctr.dll 12.10.2006 18:29 135.842 iis6.log 12.10.2006 18:29 189.889 ntdtcsetup.log 12.10.2006 18:29 306.472 comsetup.log 12.10.2006 18:29 359.183 tsoc.log 12.10.2006 18:29 1.393 imsins.log 12.10.2006 18:29 46.471 ocmsn.log 12.10.2006 18:29 13.130 KB924191.log 12.10.2006 18:29 494.873 ocgen.log 12.10.2006 18:29 46.736 msgsocm.log 12.10.2006 18:29 885.773 FaxSetup.log 12.10.2006 18:29 36.182 updspapi.log 12.10.2006 18:28 1.393 imsins.BAK 12.10.2006 18:28 13.018 KB922819.log 12.10.2006 18:28 12.208 KB923414.log 12.10.2006 18:27 12.205 KB924496.log 12.10.2006 18:27 9.569 KB923191.log 04.10.2006 13:43 11.133 KB925486.log 17.09.2006 15:38 42.974 cddabase.ini 17.09.2006 15:38 114 audiovie.ini 12.09.2006 20:00 11.445 KB920685.log 12.09.2006 20:00 13.086 KB920872.log 12.09.2006 20:00 11.559 KB919007.log 12.09.2006 19:59 7.656 KB922582.log 11.09.2006 10:47 4.590 cdplayer.ini 11.08.2006 08:51 19.380 KB920214.log 11.08.2006 08:50 19.682 KB922616.log 11.08.2006 08:50 19.258 KB921398.log 11.08.2006 08:48 18.756 KB920683.log 11.08.2006 08:48 17.588 KB920670.log 11.08.2006 08:47 16.918 KB917422.log 11.08.2006 08:46 20.520 KB918899.log 09.08.2006 13:08 11.105 KB921883.log 26.07.2006 06:57 8.144 WgaNotify.log 12.07.2006 18:29 13.379 KB917159.log 12.07.2006 18:28 13.919 KB914388.log 12.07.2006 18:28 11.965 KB916595.log 22.06.2006 16:39 32.013 spupdsvc.log 15.06.2006 17:46 10.975 KB917734.log 15.06.2006 17:46 205.695 wmsetup.log 15.06.2006 17:44 14.266 KB918439.log 15.06.2006 17:44 14.620 KB917344.log 15.06.2006 17:44 14.407 KB917953.log 15.06.2006 17:44 14.393 KB911280.log 15.06.2006 17:43 17.698 KB916281.log 15.06.2006 17:42 11.591 KB914389.log 11.06.2006 11:48 2.374 ts_header.gif 11.06.2006 11:48 15.616 dlmax.dll 11.06.2006 11:48 21.760 Pynix.dll 11.06.2006 11:48 11.520 BTGrab.dll 11.06.2006 11:48 25.856 ZServ.dll 11.06.2006 11:48 14.848 susp.exe 11.06.2006 11:47 9.472 alxtb1.dll 11.06.2006 11:47 14.592 alxie328.dll 11.06.2006 11:47 18.944 alexaie.dll 13.05.2006 09:25 15.436 KB913580.log 26.04.2006 18:30 13.546 KB900485.log 19.04.2006 18:04 16.499 KB908531.log 19.04.2006 18:03 15.715 KB911562.log 19.04.2006 18:02 17.815 KB912812.log 19.04.2006 18:01 15.736 KB911565.log 19.04.2006 18:00 12.334 KB911567.log 16.04.2006 09:29 1.080 AUTOLNCH.REG 08.04.2006 17:58 9.247 WGA.log 08.04.2006 07:36 170.709 setupact.log 29.03.2006 11:00 193 hppsapp.INI 18.02.2006 17:41 193 WOC_CDDA.ini 17.02.2006 19:30 11.849 KB911927.log 17.02.2006 19:30 7.688 KB911564.log 17.02.2006 19:28 11.118 KB901190.log 17.02.2006 19:27 7.969 KB913446.log 14.01.2006 08:50 10.176 KB908519.log 07.01.2006 17:25 11.080 KB912919.log 04.01.2006 19:39 37 ipixActivex.ini Ich hoffe das reicht!!!! Dieser Beitrag wurde am 01.11.2006 um 17:57 Uhr von hanussen111 editiert.
|
|
|
|
|
|
|
01.11.2006, 18:13
Ehrenmitglied
Beiträge: 29434 |
#6
1.
Avenger http://virus-protect.org/artikel/tools/avenger.html kopiere rein Zitat Files to delete:Klicke die grüne Ampel das Script wird nun ausgeführt, dann wird der PC automatisch neustarten ** poste das log vom avnger, was nach neustart erscheint ** scanne mit option 1 und 2 - poste beide scanreporte http://virus-protect.org/artikel/tools/smitfrautfix.html ** poste noch mal die 6 logs von datfindbat ________________ öffne das HijackThis -- Button "scan" -- vor diese Einträge Häkchen setzen -- Button "Fix checked" -- PC neustarten Zitat O2 - BHO: (no name) - {086ae192-23a6-48d6-96ec-715f53797e85} - (no file)PC neustarten __________ MfG Sabina rund um die PC-Sicherheit Dieser Beitrag wurde am 01.11.2006 um 18:18 Uhr von Sabina editiert.
|
|
|
|
|
|
|
01.11.2006, 18:42
Member
Themenstarter Beiträge: 24 |
#7
Logfile of The Avenger version 1, by Swandog46
Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\rsbebqtj ******************* Script file located at: \??\C:\WINDOWS\system32\cnhmalea.txt Script file opened successfully. Script file read successfully Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: File C:\WINDOWS\system32\stfv.bin deleted successfully. File C:\WINDOWS\system32\vxgamet1.exe deleted successfully. File C:\WINDOWS\system32\aepcmkca.exe deleted successfully. File C:\WINDOWS\system32\performent202.dll deleted successfully. File C:\WINDOWS\system32\VXH8JKDQ2.EXE deleted successfully. File C:\WINDOWS\system32\VXH8JKDQ6.EXE deleted successfully. File C:\WINDOWS\system32\ncompat.tlb deleted successfully. File C:\WINDOWS\system32\msvol.tlb deleted successfully. File C:\WINDOWS\system32\lfd.dat deleted successfully. File C:\WINDOWS\system32\oiso.bin deleted successfully. File C:\WINDOWS\system32\pcf.pdf deleted successfully. File C:\WINDOWS\system32\1821.exe deleted successfully. File C:\WINDOWS\system32\tmp7472B.FOT deleted successfully. File C:\WINDOWS\system32\msmsn.exe deleted successfully. File C:\WINDOWS\system32\winmuse.exe deleted successfully. File C:\WINDOWS\system32\perfont.exe deleted successfully. File C:\WINDOWS\system32\netstat2.exe deleted successfully. File C:\WINDOWS\system32\kernels64.exe deleted successfully. File C:\WINDOWS\system32\anti_troj.exe deleted successfully. File C:\WINDOWS\system32\POPCORN72.EXE deleted successfully. File C:\WINDOWS\system32\proqlaim.exe deleted successfully. File C:\WINDOWS\system32\mpsegment.exe deleted successfully. File C:\WINDOWS\system32\iewd.exe deleted successfully. File C:\WINDOWS\system32\dload.exe deleted successfully. File C:\WINDOWS\system32\win32hp.dll deleted successfully. File C:\WINDOWS\system32\ts.ico deleted successfully. File C:\WINDOWS\system32\ot.ico deleted successfully. File C:\WINDOWS\system32\ace16win.dll deleted successfully. File C:\WINDOWS\system32\asgp32.dll deleted successfully. File C:\WINDOWS\system32\instreg_tmp.exe deleted successfully. File C:\WINDOWS\system32\sklmnf.exe deleted successfully. File C:\WINDOWS\system32\msmapi32.exe.MANIFEST deleted successfully. File C:\WINDOWS\system32\msmapi32.exe deleted successfully. File C:\WINDOWS\system32\intr32.dll deleted successfully. File C:\WINDOWS\system32\bojpxnqf.exe deleted successfully. File C:\WINDOWS\system32\fywwztnk.exe deleted successfully. File C:\WINDOWS\system32\runsrv32.exe deleted successfully. File C:\WINDOWS\system32\thlwin32.dll deleted successfully. File C:\WINDOWS\system32\udpmod.dll deleted successfully. File C:\WINDOWS\system32\questmod.dll deleted successfully. File C:\WINDOWS\system32\jao.dll deleted successfully. File C:\WINDOWS\system32\bridge.dll deleted successfully. File C:\WINDOWS\system32\a.exe deleted successfully. File C:\WINDOWS\system32\txfdb32.dll deleted successfully. File C:\WINDOWS\system32\runsrv32.dll deleted successfully. File C:\WINDOWS\system32\wstart.dll deleted successfully. File C:\WINDOWS\system32\tcpservice2.exe deleted successfully. File C:\WINDOWS\system32\dailytoolbar.dll deleted successfully. File C:\WINDOWS\system32\alxres.dll deleted successfully. File C:\WINDOWS\spp3.dll deleted successfully. File C:\WINDOWS\wininet32.exe deleted successfully. File C:\WINDOWS\runwin32.exe deleted successfully. File C:\WINDOWS\dialup.exe deleted successfully. File C:\WINDOWS\y.exe deleted successfully. File C:\WINDOWS\xxxvideo.hta deleted successfully. File C:\WINDOWS\xplugin.dll deleted successfully. File C:\WINDOWS\x.exe deleted successfully. File C:\WINDOWS\winmgnt.exe deleted successfully. File C:\WINDOWS\window.exe deleted successfully. File C:\WINDOWS\winajbm.dll deleted successfully. File C:\WINDOWS\win64.exe deleted successfully. File C:\WINDOWS\win32e.exe deleted successfully. File C:\WINDOWS\waol.exe deleted successfully. File C:\WINDOWS\users32.exe deleted successfully. File C:\WINDOWS\time.exe deleted successfully. File C:\WINDOWS\systemcritical.exe deleted successfully. File C:\WINDOWS\systeem.exe deleted successfully. File C:\WINDOWS\olehelp.exe deleted successfully. File C:\WINDOWS\notepad32.exe deleted successfully. File C:\WINDOWS\mtwirl32.dll deleted successfully. File C:\WINDOWS\cpan.dll deleted successfully. File C:\WINDOWS\clrssn.exe deleted successfully. File C:\WINDOWS\avpcc.dll deleted successfully. File C:\WINDOWS\astctl32.ocx deleted successfully. File C:\WINDOWS\accesss.exe deleted successfully. File C:\WINDOWS\inetdctr.dll deleted successfully. File C:\WINDOWS\ts_header.gif deleted successfully. File C:\WINDOWS\dlmax.dll deleted successfully. File C:\WINDOWS\Pynix.dll deleted successfully. File C:\WINDOWS\BTGrab.dll deleted successfully. File C:\WINDOWS\ZServ.dll deleted successfully. File C:\WINDOWS\susp.exe deleted successfully. File C:\WINDOWS\alxtb1.dll deleted successfully. File C:\WINDOWS\alxie328.dll deleted successfully. File C:\WINDOWS\alexaie.dll deleted successfully. Folder C:\Programme\Antispyware Soldier not found! Deletion of folder C:\Programme\Antispyware Soldier failed! Could not process line: C:\Programme\Antispyware Soldier Status: 0xc0000034 Completed script processing. ******************* Finished! Terminate. bei smitfraud kommt folgende meldung: process.exe file is missing Dieser Beitrag wurde am 01.11.2006 um 18:53 Uhr von hanussen111 editiert.
|
|
|
|
|
|
|
01.11.2006, 18:46
Ehrenmitglied
Beiträge: 29434 |
#8
nun arbeite das andere ab und poste das neue log vom HijackThis + noch mal die 6 logs von datfindbat
__________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
01.11.2006, 18:54
Member
Themenstarter Beiträge: 24 |
#9
bei smitfraud kommt folgende meldung:
process.exe file is missing Verzeichnis von C:\WINDOWS\system32 01.11.2006 18:40 13.646 wpa.dbl 01.11.2006 08:44 8.833 jupdate-1.5.0_09-b03.log 29.10.2006 11:24 380.350 perfh009.dat 29.10.2006 11:24 52.764 perfc009.dat 29.10.2006 11:24 391.000 perfh007.dat 29.10.2006 11:24 63.580 perfc007.dat 29.10.2006 11:24 897.954 PerfStringBackup.INI 12.10.2006 03:10 127.078 javaws.exe 12.10.2006 03:10 49.265 jpicpl32.cpl 12.10.2006 01:35 53.346 javaw.exe 12.10.2006 01:35 49.248 java.exe 04.10.2006 21:03 9.639.336 MRT.exe 17.09.2006 15:20 21.840 SIntfNT.dll 17.09.2006 15:20 17.212 SIntf32.dll 17.09.2006 15:20 12.067 SIntf16.dll 17.09.2006 15:19 1.511 Addy_Buschu.lnk 13.09.2006 06:02 1.084.416 msxml3.dll 04.09.2006 07:12 1.494.016 shdocvw.dll 25.08.2006 16:46 617.472 comctl32.dll 21.08.2006 13:26 16.896 fltlib.dll 21.08.2006 10:14 23.040 fltmc.exe 16.08.2006 12:58 100.352 6to4svc.dll 28.07.2006 12:28 3.075.072 mshtml.dll 27.07.2006 14:25 679.424 inetcomm.dll 25.07.2006 21:33 615.936 urlmon.dll 21.07.2006 09:29 72.704 hlink.dll 14.07.2006 16:38 332.288 netapi32.dll 14.07.2006 16:25 546.304 hhctrl.ocx 13.07.2006 14:34 8.494.592 shell32.dll 05.07.2006 11:55 1.057.792 kernel32.dll 03.07.2006 08:24 136.464 FNTCACHE.DAT 26.06.2006 18:40 8.192 rasadhlp.dll 26.06.2006 18:40 148.480 dnsapi.dll 23.06.2006 12:10 664.576 wininet.dll 23.06.2006 12:10 474.624 shlwapi.dll 23.06.2006 12:10 532.480 mstime.dll 23.06.2006 12:10 39.424 pngfilt.dll 23.06.2006 12:10 448.512 mshtmled.dll 23.06.2006 12:10 146.432 msrating.dll 23.06.2006 12:10 205.312 dxtrans.dll 23.06.2006 12:10 357.888 dxtmsft.dll 23.06.2006 12:10 152.064 cdfview.dll 23.06.2006 12:10 1.056.256 danim.dll 23.06.2006 12:10 55.808 extmgr.dll 23.06.2006 12:10 251.392 iepeers.dll 23.06.2006 12:10 1.022.976 browseui.dll 23.06.2006 12:10 96.768 inseng.dll 23.06.2006 12:10 16.384 jsproxy.dll 23.06.2006 09:53 27.136 xpsp3res.dll 22.06.2006 16:44 57.384 avsda.dll 22.06.2006 06:06 1.441.792 query.dll 22.06.2006 06:06 69.120 ciodm.dll 19.06.2006 15:20 702.768 WgaLogon.dll 19.06.2006 15:19 571.184 LegitCheckControl.dll 19.06.2006 15:19 304.944 WgaTray.exe 14.06.2006 10:36 8 winlogon.ini 01.06.2006 19:47 27.648 jgpl400.dll 01.06.2006 19:47 163.840 jgdw400.dll 19.05.2006 14:09 112.128 dhcpcsvc.dll 19.05.2006 14:09 95.744 iphlpapi.dll 18.05.2006 06:36 450.560 jscript.dll 14.05.2006 09:48 181.248 rasmans.dll 01.05.2006 11:15 483.328 actskn45.ocx 29.04.2006 05:07 5.533.696 wmp.dll 26.03.2006 15:44 2.507 Lexmark Z52 Series ColorFine.AD2 17.03.2006 01:38 28.672 verclsid.exe 01.03.2006 20:43 66.560 mtxclu.dll 01.03.2006 20:43 11.776 xolehlp.dll 01.03.2006 20:43 426.496 msdtcprx.dll 01.03.2006 20:43 956.416 msdtctm.dll 01.03.2006 20:43 161.280 msdtcuiu.dll 01.03.2006 20:43 91.136 mtxoci.dll 21.01.2006 15:48 186 LEXSUP.HTM 04.01.2006 04:35 68.096 webclnt.dll 03.01.2006 11:55 6.948 jupdate-1.5.0_06-b05.log Verzeichnis von C:\DOKUME~1\STEFAN~1\LOKALE~1\Temp 01.11.2006 18:45 173 jusched.log 01.11.2006 16:26 32.768 ~DFA1CC.tmp 04.10.2006 09:23 668 datFind.bat 25.02.2006 23:28 130.048 avenger.exe 09.09.2003 12:20 20.480 start.exe 5 Datei(en) 184.137 Bytes 0 Verzeichnis(se), 3.359.150.080 Bytes frei Verzeichnis von C:\WINDOWS 01.11.2006 18:47 41 Filzip.ini 01.11.2006 18:39 159 wiadebug.log 01.11.2006 18:39 1.167.620 WindowsUpdate.log 01.11.2006 18:39 50 wiaservc.log 01.11.2006 18:39 0 0.log 01.11.2006 18:39 2.048 bootstat.dat 01.11.2006 18:37 32.540 SchedLgU.Txt 26.10.2006 13:51 579.465 nscstiu_error.txt 25.10.2006 16:30 719.362 setupapi.log 12.10.2006 18:29 135.842 iis6.log 12.10.2006 18:29 189.889 ntdtcsetup.log 12.10.2006 18:29 306.472 comsetup.log 12.10.2006 18:29 46.471 ocmsn.log 12.10.2006 18:29 359.183 tsoc.log 12.10.2006 18:29 1.393 imsins.log 12.10.2006 18:29 13.130 KB924191.log 12.10.2006 18:29 494.873 ocgen.log 12.10.2006 18:29 46.736 msgsocm.log 12.10.2006 18:29 885.773 FaxSetup.log 12.10.2006 18:29 36.182 updspapi.log 12.10.2006 18:28 1.393 imsins.BAK 12.10.2006 18:28 13.018 KB922819.log 12.10.2006 18:28 12.208 KB923414.log 12.10.2006 18:27 12.205 KB924496.log 12.10.2006 18:27 9.569 KB923191.log 04.10.2006 13:43 11.133 KB925486.log 17.09.2006 15:38 42.974 cddabase.ini 17.09.2006 15:38 114 audiovie.ini 12.09.2006 20:00 11.445 KB920685.log 12.09.2006 20:00 13.086 KB920872.log 12.09.2006 20:00 11.559 KB919007.log 12.09.2006 19:59 7.656 KB922582.log 11.09.2006 10:47 4.590 cdplayer.ini 11.08.2006 08:51 19.380 KB920214.log 11.08.2006 08:50 19.682 KB922616.log 11.08.2006 08:50 19.258 KB921398.log 11.08.2006 08:48 18.756 KB920683.log 11.08.2006 08:48 17.588 KB920670.log 11.08.2006 08:47 16.918 KB917422.log 11.08.2006 08:46 20.520 KB918899.log 09.08.2006 13:08 11.105 KB921883.log 26.07.2006 06:57 8.144 WgaNotify.log 12.07.2006 18:29 13.379 KB917159.log 12.07.2006 18:28 13.919 KB914388.log 12.07.2006 18:28 11.965 KB916595.log 22.06.2006 16:39 32.013 spupdsvc.log 15.06.2006 17:46 10.975 KB917734.log 15.06.2006 17:46 205.695 wmsetup.log 15.06.2006 17:44 14.266 KB918439.log 15.06.2006 17:44 14.620 KB917344.log 15.06.2006 17:44 14.407 KB917953.log 15.06.2006 17:44 14.393 KB911280.log 15.06.2006 17:43 17.698 KB916281.log 15.06.2006 17:42 11.591 KB914389.log 13.05.2006 09:25 15.436 KB913580.log 26.04.2006 18:30 13.546 KB900485.log 19.04.2006 18:04 16.499 KB908531.log 19.04.2006 18:03 15.715 KB911562.log 19.04.2006 18:02 17.815 KB912812.log 19.04.2006 18:01 15.736 KB911565.log 19.04.2006 18:00 12.334 KB911567.log 16.04.2006 09:29 1.080 AUTOLNCH.REG 08.04.2006 17:58 9.247 WGA.log 08.04.2006 07:36 170.709 setupact.log 29.03.2006 11:00 193 hppsapp.INI 18.02.2006 17:41 193 WOC_CDDA.ini 17.02.2006 19:30 11.849 KB911927.log 17.02.2006 19:30 7.688 KB911564.log 17.02.2006 19:28 11.118 KB901190.log 17.02.2006 19:27 7.969 KB913446.log 14.01.2006 08:50 10.176 KB908519.log 07.01.2006 17:25 11.080 KB912919.log 04.01.2006 19:39 37 ipixActivex.ini Verzeichnis von C:\WINDOWS\Temp 01.11.2006 18:40 409 WGANotify.settings 01.11.2006 18:39 255 WGAErrLog.txt 2 Datei(en) 664 Bytes 0 Verzeichnis(se), 3.359.150.080 Bytes frei Verzeichnis von C:\WINDOWS\Downloaded Program Files 24.01.2005 10:38 1.249 erma.inf 03.06.2004 09:04 524.445 RdxIE.dll 06.02.2004 15:18 735 default.inf 05.02.2004 09:45 520.355 RealArcadeRdxIE.dll 06.01.2004 17:15 65 desktop.ini 08.12.2003 13:58 3.759 swflash.inf 20.11.2003 00:22 740 jinstall-1_4_2_03.inf 09.10.2003 10:32 144 QTPlugin.inf 06.06.2003 18:06 335.872 Play365.dll 06.06.2003 17:23 477 play365.inf 13.03.2003 11:03 962 IPIXX.inf 31.05.2002 08:19 117.328 PURde-at.dll 02.06.2000 11:29 102.912 ipixx.ocx 13 Datei(en) 1.609.043 Bytes 0 Verzeichnis(se), 3.359.150.080 Bytes frei Verzeichnis von C:\ 01.11.2006 18:57 0 sys.txt 01.11.2006 18:57 895 down.txt 01.11.2006 18:57 334 tmp.txt 01.11.2006 18:56 12.532 system.txt 01.11.2006 18:56 489 systemtemp.txt 01.11.2006 18:55 102.434 system32.txt 01.11.2006 18:39 0 Log.txt 01.11.2006 18:38 536.399.872 hiberfil.sys 01.11.2006 18:38 805.306.368 pagefile.sys 01.11.2006 18:38 10.880 avenger.txt 01.11.2006 16:33 8.165 ComboFix.txt 30.09.2004 16:19 7.636 text_scroller.class 26.09.2004 09:57 3 TCPCheckResult.txt 25.09.2004 17:01 211 boot.ini 25.09.2004 16:41 47.564 NTDETECT.COM 25.09.2004 16:41 251.184 ntldr 06.01.2004 17:18 0 IO.SYS 06.01.2004 17:18 0 MSDOS.SYS 06.01.2004 17:18 0 AUTOEXEC.BAT 06.01.2004 17:18 0 CONFIG.SYS 18.08.2001 13:00 4.952 bootfont.bin 21 Datei(en) 1.342.153.519 Bytes 0 Verzeichnis(se), 3.359.150.080 Bytes frei Dieser Beitrag wurde am 01.11.2006 um 18:58 Uhr von hanussen111 editiert.
|
|
|
|
|
|
|
01.11.2006, 19:07
Ehrenmitglied
Beiträge: 29434 |
#10
Avenger
Zitat Files to delete:** loesche alle backups vom Avenger unter c:\Avenger\backup.zip ** scanne, lasse alles loeschen, was gefunden wird und poste den report http://virus-protect.org/ewido.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
01.11.2006, 19:15
Member
Themenstarter Beiträge: 24 |
#11
Logfile of HijackThis v1.99.1
Scan saved at 19:15:21, on 01.11.2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\Explorer.exe C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe C:\Programme\QuickTime\qttask.exe C:\Programme\Java\jre1.5.0_09\bin\jusched.exe C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe C:\Programme\Messenger\msmsgs.exe C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Programme\InterVideo\Common\Bin\WinCinemaMgr.exe C:\Programme\AntiVir PersonalEdition Classic\sched.exe C:\Programme\AntiVir PersonalEdition Classic\avguard.exe C:\Programme\VeriSign\NAVI\naviagent.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Internet Explorer\iexplore.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wuauclt.exe C:\Programme\Filzip\Filzip.exe C:\DOKUME~1\STEFAN~1\LOKALE~1\Temp\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.u2tour.de/ R3 - URLSearchHook: i-Nav IDN SearchHook - {CE000994-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll F2 - REG:system.ini: Shell=Explorer.exe O2 - BHO: (no name) - {00110011-4b0b-44d5-9718-90c88817369b} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_09\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll O2 - BHO: i-Nav IDN Resolver - {CE000992-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll O2 - BHO: (no name) - {d1ac752e-883f-4ed8-8828-b618c3a72152} - (no file) O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.5.0_09\bin\jusched.exe" O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\printray.exe O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Programme\InterVideo\Common\Bin\WinCinemaMgr.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Mountit.lnk = C:\Programme\Roxio\WinOnCD 6 PE\MountIt.exe O8 - Extra context menu item: &Google-Suche - res://C:\Programme\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Ins Deutsche übersetzen - res://C:\Programme\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Im Cache gespeicherte Seite - res://C:\Programme\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Verweisseiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Ähnliche Seiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmsimilar.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: Hilfe zu i-Nav - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing) O9 - Extra 'Tools' menuitem: Hilfe zu i-Nav - {CE000992-A58C-4441-8938-744CD72AB27F} - http://idn.verisign-grs.com/plug-in/support/index.jsp (file missing) O9 - Extra button: (no name) - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll O9 - Extra 'Tools' menuitem: Optionen für i-Nav - {CE000996-A58C-4441-8938-744CD72AB27F} - C:\Programme\VeriSign\i-Nav\i-nav_4_2_1.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.real.com/045992b42fa8d35ff316/netzip/RdxIE601_de.cab O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole/Bundler/CAB/RealArcadeRdxIE.cab O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: VeriSign Updater (navi) - VeriSign, Inc. - C:\Programme\VeriSign\NAVI\naviagent.exe Muß leider schluss machen welde mich hoffentlich später, ansonsten morgen vielen dank für die mühe Dieser Beitrag wurde am 01.11.2006 um 19:21 Uhr von hanussen111 editiert.
|
|
|
|
|
|
|
01.11.2006, 19:21
Ehrenmitglied
Beiträge: 29434 |
#12
fixe nur noch mit dem HijackThis
O2 - BHO: (no name) - {00110011-4b0b-44d5-9718-90c88817369b} - (no file) ----------------- ** loesche alle backups vom Avenger unter c:\Avenger\backup.zip ** scanne, lasse alles loeschen, was gefunden wird und poste den report http://virus-protect.org/ewido.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
01.11.2006, 20:09
Member
Themenstarter Beiträge: 24 |
#13
bin wieder da!!!
ich hoffe, sie auch.... scanne gerade mit avg anti-spyware Dieser Beitrag wurde am 01.11.2006 um 20:18 Uhr von hanussen111 editiert.
|
|
|
|
|
|
|
01.11.2006, 20:14
Ehrenmitglied
Beiträge: 29434 |
#14
ja, bin da
 wo ist das log vom AVG Anti-Spyware-scan ? __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
01.11.2006, 20:19
Member
Themenstarter Beiträge: 24 |
#15
scanne gerade mit avg anti-spyware...
mußte gerade meine tochter ins bett bringen... jetzt schläft sie... wo sind sie eigentlich zu hause? ich sitze in wien/ A |
|
|
|
|
|
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!
bitte erst » hier kostenlos registrieren!!
Folgende Themen könnten Dich auch interessieren:
Copyright © 2024, Protecus.de - Protecus Team - Impressum / Mediadaten
wenn man es anklickt kommt ein fenster mit "possible spyware infection".
danach eine internetseite mit einem "antispyware soldier" ich habe gelesen, dass es ein gefaktes programm ist! werde die popups auch mit "spyboot" nicht los!
was soll ich machen??????
bin kein profi was pc betrifft....