Home » Spyware & Browser Hijacker Support Forum » IExplorer öffnet von selber Seiten » Themenansicht
IExplorer öffnet von selber SeitenThema ist geschlossen! |
||
|---|---|---|
Thema ist geschlossen! |
||
| #0
| ||
|
12.11.2006, 17:38
...neu hier
Beiträge: 9 |
||
 
|
|
|
|
12.11.2006, 18:08
Ehrenmitglied
 Beiträge: 29434 |
#2
kay_1979
 arbeite den Avenger und smitfraudfix ab http://virus-protect.org/artikel/spyware/qualitycodec_remove.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
12.11.2006, 19:16
...neu hier
Themenstarter Beiträge: 9 |
#3
Das ist nun das Resultat.Hoffe alles was ich gemacht hab war so richtig.Hatte beim ersten Neustart nen
////////////////////////////////////////// Avenger Pre-Processor log ////////////////////////////////////////// Fatal error: could not create new script file. Error code: 0 Error logged to errorlog.txt. Aborting now! Haut das so hin? Logfile of The Avenger version 1, by Swandog46 Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\qfkxsgue ******************* Script file located at: \??\C:\WINDOWS\hetiangt.txt Script file opened successfully. Script file read successfully Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: File C:\WINDOWS\system32\rrtcany.dll not found! Deletion of file C:\WINDOWS\system32\rrtcany.dll failed! Could not process line: C:\WINDOWS\system32\rrtcany.dll Status: 0xc0000034 File C:\WINDOWS\system32\veklo.dll not found! Deletion of file C:\WINDOWS\system32\veklo.dll failed! Could not process line: C:\WINDOWS\system32\veklo.dll Status: 0xc0000034 File C:\WINDOWS\system32\okkmtv.dll not found! Deletion of file C:\WINDOWS\system32\okkmtv.dll failed! Could not process line: C:\WINDOWS\system32\okkmtv.dll Status: 0xc0000034 File C:\WINDOWS\system32\sacskza.dll not found! Deletion of file C:\WINDOWS\system32\sacskza.dll failed! Could not process line: C:\WINDOWS\system32\sacskza.dll Status: 0xc0000034 File C:\WINDOWS\system32\impgsje.dll not found! Deletion of file C:\WINDOWS\system32\impgsje.dll failed! Could not process line: C:\WINDOWS\system32\impgsje.dll Status: 0xc0000034 Folder C:\Programme\QualityCodec not found! Deletion of folder C:\Programme\QualityCodec failed! Could not process line: C:\Programme\QualityCodec Status: 0xc0000034 Folder C:\Programme\VirusBursters not found! Deletion of folder C:\Programme\VirusBursters failed! Could not process line: C:\Programme\VirusBursters Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler|{0d9eb558-0666-479e-868a-21b1d1a53bd1} Deletion of registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler|{0d9eb558-0666-479e-868a-21b1d1a53bd1} failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler|{27321538-5739-4aa1-b84c-7d18e4383f1f} Deletion of registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler|{27321538-5739-4aa1-b84c-7d18e4383f1f} failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler|{11853d5f-f894-4cc7-bbc3-fc7a9dcfd896} Deletion of registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler|{11853d5f-f894-4cc7-bbc3-fc7a9dcfd896} failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler|{01d8d081-0f76-4ab5-b5e4-9b23a709670e} Deletion of registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler|{01d8d081-0f76-4ab5-b5e4-9b23a709670e} failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler|{d7bdd42a-7e69-4bb8-aac3-d76ff65a3aa3} Deletion of registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler|{d7bdd42a-7e69-4bb8-aac3-d76ff65a3aa3} failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload|ferrateen Deletion of registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload|ferrateen failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload|clamoring Deletion of registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload|clamoring failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload|bonspells Deletion of registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload|bonspells failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload|detachments Deletion of registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload|detachments failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload|archenteric Deletion of registry value HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload|archenteric failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run|isamonitor.exe Deletion of registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run|isamonitor.exe failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run|pmsngr.exe Deletion of registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run|pmsngr.exe failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run|wininet.dll Deletion of registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run|wininet.dll failed! Status: 0xc0000034 Could not delete registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run|dcomcfg.exe Deletion of registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run|dcomcfg.exe failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Security Plugin 2006 not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Explorer Security Plugin 2006 failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Security Add-On not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Security Add-On failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Public Messenger ver 2.03 not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Public Messenger ver 2.03 failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QualityCodec not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QualityCodec failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11853d5f-f894-4cc7-bbc3-fc7a9dcfd896} not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{11853d5f-f894-4cc7-bbc3-fc7a9dcfd896} failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0d9eb558-0666-479e-868a-21b1d1a53bd1} not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0d9eb558-0666-479e-868a-21b1d1a53bd1} failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27321538-5739-4aa1-b84c-7d18e4383f1f} not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{27321538-5739-4aa1-b84c-7d18e4383f1f} failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{01d8d081-0f76-4ab5-b5e4-9b23a709670e} not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{01d8d081-0f76-4ab5-b5e4-9b23a709670e} failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d7bdd42a-7e69-4bb8-aac3-d76ff65a3aa3} not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d7bdd42a-7e69-4bb8-aac3-d76ff65a3aa3} failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{bf1ced2c-4b3f-4079-a330-864eda5a4cff} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2810fba5-55ec-4bee-8263-0e2fa5883768} not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2810fba5-55ec-4bee-8263-0e2fa5883768} failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1a29a79a-b9c8-44a9-bedf-7fadde3cf33f} not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1a29a79a-b9c8-44a9-bedf-7fadde3cf33f} failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{274c0420-ebe0-4f1d-b473-edd1aa9b85dd} not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{274c0420-ebe0-4f1d-b473-edd1aa9b85dd} failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{192c5b4a-3efd-40c7-9f99-c472deb8efc0} deleted successfully. Registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2810fba5-55ec-4bee-8263-0e2fa5883768} not found! Deletion of registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2810fba5-55ec-4bee-8263-0e2fa5883768} failed! Status: 0xc0000034 Registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{274c0420-ebe0-4f1d-b473-edd1aa9b85dd} not found! Deletion of registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{274c0420-ebe0-4f1d-b473-edd1aa9b85dd} failed! Status: 0xc0000034 Registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{192c5b4a-3efd-40c7-9f99-c472deb8efc0} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ACF3DAB0-D308-4B7A-BFE3-E6C0FAFEB1E7} not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ACF3DAB0-D308-4B7A-BFE3-E6C0FAFEB1E7} failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\VirusBursters not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\VirusBursters failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\virusbursters.exe not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\virusbursters.exe failed! Status: 0xc0000034 Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusBursters not found! Deletion of registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VirusBursters failed! Status: 0xc0000034 Completed script processing. ******************* Finished! Terminate. |
|
|
|
|
|
|
12.11.2006, 19:20
Ehrenmitglied
Beiträge: 29434 |
#4
öffne das HijackThis -- Button "scan" -- vor diese Einträge Häkchen setzen -- Button "Fix checked" -- PC neustarten Zitat R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)PC neustarten «« scanne mit smitfraudfix - Option 1 und 2 ( lasse auch die Registry mitreinigen) http://virus-protect.org/artikel/tools/smitfrautfix.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
12.11.2006, 20:13
...neu hier
Themenstarter Beiträge: 9 |
#5
hab ich getan.Wie geh ich sicher das der Müll weg ist?Und viel wichtiger,wie schütz ich mich?
Hab bei mir Nod32 und Antivire laufen,ausserdem adaware,spybot und dn regcleaner verwende ich auf Geheiß eines Freundes.Reicht das aus? Dankeschön |
|
|
|
|
|
|
12.11.2006, 21:09
Ehrenmitglied
Beiträge: 29434 |
#6
es reicht, dass du keine verseuchten Codecs laedst
 poste dieses log http://virus-protect.org/artikel/tools/combofix.html __________ MfG Sabina rund um die PC-Sicherheit |
|
|
|
|
|
|
12.11.2006, 23:41
...neu hier
Themenstarter Beiträge: 9 |
#7
Ich hoffe es ist nun alles wieder i.O.???
Der iExplorer hat bisher nichts mehr gesagt. Vielen Dank für Euere/Deine Hilfe. Kay - 06-11-12 23:38:59.71 Service Pack 2 ComboFix 06.11.9 - Running from: "E:\Prince of Percia" ((((((((((((((((((((((((((((((( Files Created from 2006-10-12 to 2006-11-12 )))))))))))))))))))))))))))))))))) 2006-11-12 18:30 1,772 --a------ C:\WINDOWS\system32\tmp.reg 2006-11-12 16:32 24,576 --a------ C:\WINDOWS\system32\STKIT432.DLL 2006-11-11 20:21 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys 2006-11-11 19:47 611,064 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2006-11-10 23:51 98,304 --a------ C:\WINDOWS\system32\nvudisp.exe 2006-11-10 21:05 43,520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll 2006-11-10 01:15 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE 2006-10-25 19:10 86,016 --a------ C:\WINDOWS\unvise32.exe (((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))) 2006-11-12 23:36 -------- d-------- C:\Programme\Mozilla Firefox 2006-11-12 16:42 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\The Bat! 2006-11-12 16:36 -------- d-------- C:\Programme\Registry Mechanic 2006-11-12 10:42 -------- d-------- C:\Programme\MSN Messenger 2006-11-11 20:02 -------- d--h----- C:\Programme\InstallShield Installation Information 2006-11-11 19:50 -------- d-------- C:\Programme\DAEMON Tools 2006-11-10 01:01 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\teamspeak2 2006-11-07 18:27 -------- d-------- C:\Programme\Mathetiger_1 2006-11-04 01:05 -------- d---s---- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Microsoft 2006-10-29 15:15 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys 2006-10-28 22:26 -------- d-------- C:\Programme\ICQToolbar 2006-10-28 21:24 -------- d-------- C:\Programme\Activision 2006-10-28 21:02 34308 --a------ C:\WINDOWS\system32\BASSMOD.dll 2006-10-28 20:50 -------- d-------- C:\Programme\Xfire 2006-10-28 20:50 -------- d-------- C:\Programme\Sierra On-Line 2006-10-28 20:50 -------- d-------- C:\Programme\Call of Duty 2006-10-28 20:50 -------- d-------- C:\Programme\Alcohol Soft 2006-10-26 23:55 -------- d-------- C:\Programme\PowerQuest 2006-10-22 14:34 -------- d-------- C:\Programme\Adobe 2006-10-22 14:33 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Leadertech 2006-10-18 15:59 -------- d-------- C:\Programme\ICQLite 2006-10-14 18:16 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Sun 2006-10-14 17:59 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\vlc 2006-10-11 10:33 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Real 2006-10-11 10:30 -------- d-------- C:\Programme\Real 2006-10-11 10:30 -------- d-------- C:\Programme\Gemeinsame Dateien\xing shared 2006-10-11 10:30 -------- d-------- C:\Programme\Gemeinsame Dateien\Real 2006-10-11 10:30 -------- d-------- C:\Programme\Gemeinsame Dateien 2006-10-10 11:28 -------- d-------- C:\Programme\Windows Media Player 2006-10-10 07:58 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Ahead 2006-10-08 18:04 -------- d-------- C:\Programme\Google 2006-10-08 14:46 -------- d-------- C:\Programme\Teamspeak2_RC2 2006-10-08 14:11 -------- d-------- C:\Programme\Eset 2006-10-08 14:06 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\ICQLite 2006-10-08 13:57 -------- d-------- C:\Programme\Java 2006-10-08 13:53 -------- d-------- C:\Programme\Gemeinsame Dateien\Java 2006-10-08 03:57 502208 --a------ C:\WINDOWS\system32\drivers\amon.sys 2006-10-08 03:57 270336 --a------ C:\WINDOWS\system32\imon.dll 2006-10-08 03:38 2321408 --a------ C:\WINDOWS\system32\TUKernel.exe 2006-10-08 03:28 -------- d-------- C:\Programme\ClearProg 2006-10-07 22:04 -------- d-------- C:\Programme\RivaTuner v2.0 RC 16 2006-10-07 22:02 -------- d-------- C:\Programme\Gemeinsame Dateien\Microsoft Shared 2006-10-07 21:49 -------- d-------- C:\Programme\Gemeinsame Dateien\AVSMedia 2006-10-07 21:49 -------- d-------- C:\Programme\AVSMedia 2006-10-07 21:48 -------- d-------- C:\Programme\NCH Swift Sound 2006-10-07 21:48 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\RecordPad 2006-10-07 21:48 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\NCH Swift Sound 2006-10-07 20:50 -------- d-------- C:\Programme\Jowood 2006-10-07 20:47 -------- d-------- C:\Programme\directx 2006-10-07 20:14 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Macromedia 2006-10-07 20:13 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\AdobeUM 2006-10-07 19:31 -------- d-------- C:\Programme\Internet Explorer 2006-10-07 19:30 -------- d-------- C:\Programme\Outlook Express 2006-10-07 19:30 -------- d-------- C:\Programme\Gemeinsame Dateien\System 2006-10-07 19:03 2368 --a------ C:\WINDOWS\system32\SVKP.sys 2006-10-07 18:34 -------- d-------- C:\Programme\messenger 2006-10-07 18:03 -------- d-------- C:\Programme\The Bat! 2006-10-07 17:18 -------- d-------- C:\Programme\Movie Maker 2006-10-07 17:15 -------- d-------- C:\Programme\Windows NT 2006-10-07 17:15 -------- d-------- C:\Programme\NetMeeting 2006-10-07 16:46 -------- d-------- C:\Programme\Microsoft.NET 2006-10-07 16:45 -------- d-------- C:\Programme\Microsoft Office 2006-10-07 16:45 -------- d-------- C:\Programme\Gemeinsame Dateien\DESIGNER 2006-10-07 15:47 -------- d-------- C:\Programme\Gemeinsame Dateien\LightScribe 2006-10-07 15:46 -------- d-------- C:\Programme\LightScribe 2006-10-07 15:43 -------- d-------- C:\Programme\Gemeinsame Dateien\Ahead 2006-10-07 15:17 -------- d-------- C:\Programme\Easy CD-DA Extractor 9 2006-10-07 15:09 -------- d-------- C:\Programme\Nero 2006-10-07 13:35 -------- d-------- C:\Programme\AntiVir PersonalEdition Classic 2006-10-07 13:30 -------- d-------- C:\Programme\RegCleaner 2006-10-07 13:27 -------- d-------- C:\Programme\Lavasoft 2006-10-07 13:27 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Lavasoft 2006-10-07 13:27 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Adobe 2006-10-07 13:13 -------- d-------- C:\Programme\xp-AntiSpy 2006-10-07 13:13 -------- d-------- C:\Programme\Gemeinsame Dateien\InstallShield 2006-10-07 13:12 -------- d-------- C:\Programme\VideoLAN 2006-10-07 13:08 -------- d-------- C:\Programme\TuneUp Utilities 2006 2006-10-07 13:07 -------- d-------- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard 2006-10-07 13:07 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\TuneUp Software 2006-10-07 13:02 -------- d-------- C:\Programme\ElcomSoft 2006-10-07 12:58 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Talkback 2006-10-07 12:58 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Mozilla 2006-10-07 12:55 -------- d-------- C:\Programme\Gemeinsame Dateien\Adobe 2006-10-07 12:54 1557 --a------ C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\AdobeDLM.log 2006-10-07 12:53 -------- d-------- C:\Programme\Yahoo! 2006-10-07 12:48 62 --ahs---- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\desktop.ini 2006-10-07 12:48 -------- d-------- C:\Programme\Gemeinsame Dateien\SpeechEngines 2006-10-07 12:48 -------- d-------- C:\Programme\Gemeinsame Dateien\ODBC 2006-10-07 12:41 -------- d-------- C:\Programme\QuickTime 2006-10-07 12:41 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Apple Computer 2006-10-07 12:40 -------- d-------- C:\Programme\iTunes 2006-10-07 12:40 -------- d-------- C:\Programme\iPod 2006-10-07 12:38 -------- d-------- C:\Programme\WinRAR 2006-10-07 12:37 -------- d-------- C:\Programme\XviD 2006-10-07 12:37 -------- d-------- C:\Programme\The Playa 2006-10-07 12:37 -------- d-------- C:\Programme\NimoCodec Pack 2006-10-07 12:37 -------- d-------- C:\Programme\DivXCodec 2006-10-07 12:37 -------- d-------- C:\Programme\DivX 2006-10-07 12:20 -------- d--h----- C:\Programme\WindowsUpdate 2006-10-07 12:04 -------- d--h----- C:\Programme\Uninstall Information 2006-10-07 12:04 -------- d-------- C:\Dokumente und Einstellungen\Kay\Anwendungsdaten\Identities 2006-10-07 11:59 0 -rahs---- C:\MSDOS.SYS 2006-10-07 11:59 0 -rahs---- C:\IO.SYS 2006-10-07 11:59 0 --a------ C:\CONFIG.SYS 2006-10-07 11:59 0 --a------ C:\AUTOEXEC.BAT 2006-10-07 11:59 -------- d-------- C:\Programme\xerox 2006-10-07 11:59 -------- d-------- C:\Programme\microsoft frontpage 2006-10-07 11:57 -------- d-------- C:\Programme\Online-Dienste 2006-10-07 11:56 -------- d-------- C:\Programme\Gemeinsame Dateien\MSSoap 2006-10-07 11:56 -------- d-------- C:\Programme\Gemeinsame Dateien\Dienste 2006-10-07 11:55 -------- d-------- C:\Programme\Online Services 2006-10-07 11:55 -------- d-------- C:\Programme\MSN 2006-10-07 11:55 -------- d-------- C:\Programme\ComPlus Applications 2006-10-07 11:54 -------- d-------- C:\Programme\MSN Gaming Zone 2006-09-13 06:02 1084416 --a------ C:\WINDOWS\system32\msxml3.dll 2006-09-07 11:54 57384 --a------ C:\WINDOWS\system32\avsda.dll 2006-08-25 16:46 617472 --a------ C:\WINDOWS\system32\comctl32.dll 2006-08-21 13:26 16896 --a------ C:\WINDOWS\system32\fltlib.dll 2006-08-21 10:14 23040 --a------ C:\WINDOWS\system32\fltmc.exe 2006-08-16 12:58 100352 --a------ C:\WINDOWS\system32\6to4svc.dll (((((((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries are not shown [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "TuneUp MemOptimizer"="\"C:\\Programme\\TuneUp Utilities 2006\\MemOptimizer.exe\" autostart" "NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NVMCTRAY.DLL,NvTaskbarInit" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "avgnt"="\"C:\\Programme\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min" "nod32kui"="\"C:\\Programme\\Eset\\nod32kui.exe\" /WAITSERVICE" "nwiz"="nwiz.exe /install" "DAEMON Tools"="\"C:\\Programme\\DAEMON Tools\\daemon.exe\" -lang 1033" "RegistryMechanic"="" "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components] "DeskHtmlVersion"=dword:00000110 "DeskHtmlMinorVersion"=dword:00000005 "Settings"=dword:00000001 "GeneralFlags"=dword:00000001 [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"="" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 "ClearRecentDocsOnExit"=dword:00000001 [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 [HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer] "NoDriveTypeAutoRun"=dword:00000091 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload] "PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}" "CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}" "WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}" "SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "NeroFilterCheck"="C:\\Programme\\Gemeinsame Dateien\\Ahead\\Lib\\NeroCheck.exe" "ICQ Lite"="\"C:\\Programme\\ICQLite\\ICQLite.exe\" -minimize" "iTunesHelper"="\"C:\\Programme\\iTunes\\iTunesHelper.exe\"" "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" "TkBellExe"="\"C:\\Programme\\Gemeinsame Dateien\\Real\\Update_OB\\realsched.exe\" -osboot" "Cmaudio"="RunDll32 cmicnfg.cpl,CMICtrlWnd" "SunJavaUpdateSched"="C:\\Programme\\Java\\jre1.5.0_06\\bin\\jusched.exe" [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" Contents of the 'Scheduled Tasks' folder C:\WINDOWS\tasks\1-Klick-Wartung.job Completion time: 06-11-12 23:39:41.10 C:\ComboFix.txt ... 06-11-12 23:39 |
|
|
|
|
|
|
12.11.2006, 23:51
Ehrenmitglied
Beiträge: 29434 |
||
|
|
|
|
|
13.11.2006, 05:02
...neu hier
Themenstarter Beiträge: 9 |
#9
Vielen lieben Dank nochmal.Echte Klasse!
|
|
|
|
|
|
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!
bitte erst » hier kostenlos registrieren!!
Folgende Themen könnten Dich auch interessieren:
Seite(n): 1
Copyright © 2024, Protecus.de - Protecus Team - Impressum / Mediadaten
Mein Problem:
Seit Gestern hab ich hier das Problem das mein IE dauernd Seiten öffnet und ein gelbes Ausrufezeichen in der rechten Taskleiste erscheint,das mich bei nem Klick ebenfalls versucht zu Seiten zu verbinden.Ich habe mir mal dieses Prog.hijack geladen und das ist das Resultat.
Logfile of HijackThis v1.99.1
Scan saved at 11:01:25, on 12.11.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\TuneUp Utilities 2006\WinStylerThemeSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\QualityCodec\isamonitor.exe
C:\Programme\QualityCodec\pmsngr.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\Eset\nod32kui.exe
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\QualityCodec\pmmon.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\QualityCodec\isamini.exe
C:\Programme\TuneUp Utilities 2006\MemOptimizer.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programme\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Programme\DAEMON Tools\daemon.exe
C:\WINDOWS\System32\alg.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\msiexec.exe
C:\Programme\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\WinRAR\WinRAR.exe
C:\DOKUME~1\Kay\LOKALE~1\Temp\Rar$EX00.938\HijackThis.exe
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {192c5b4a-3efd-40c7-9f99-c472deb8efc0} - C:\Programme\QualityCodec\isaddon.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Yahoo! Toolbar mit Pop-Up-Blocker - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Protection Bar - {bf1ced2c-4b3f-4079-a330-864eda5a4cff} - C:\Programme\QualityCodec\iesplugin.dll
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [nod32kui] "C:\Programme\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programme\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Programme\TuneUp Utilities 2006\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Klicke hier um das Projekt xp-AntiSpy zu unterstützen - {0e921e80-267a-42aa-aee4-60b9a1222a44} - C:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU)
O9 - Extra 'Tools' menuitem: Unterstützung für xp-AntiSpy - {0e921e80-267a-42aa-aee4-60b9a1222a44} - C:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1160232567484
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1160240705546
O17 - HKLM\System\CCS\Services\Tcpip\..\{9FA8AAC8-F76A-43FD-89DD-E55BAEDB8E93}: NameServer = 192.168.178.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: bonspells - {11853d5f-f894-4cc7-bbc3-fc7a9dcfd896} - (no file)
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programme\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Programme\TuneUp Utilities 2006\WinStylerThemeSvc.exe
Ich hoffe ich hab soweit alles richtig gemacht.Würde mich über Ratschläge und Hilfe von euch freuen.Besten Dank