Hab nen komischen Virus der nicht weggeht |
||
|---|---|---|
| #0
| ||
|
14.12.2007, 17:48
Ehrenmitglied
 Beiträge: 6028 |
||
 
|
|
|
|
15.12.2007, 13:59
Member
Beiträge: 11 |
#32
Deckard's System Scanner v20071014.68
Run by MIP on 2007-12-15 14:51:39 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- System Restore -------------------------------------------------------------- Successfully created a Deckard's System Scanner Restore Point. -- Last 5 Restore Point(s) -- 5: 2007-12-15 12:51:41 UTC - RP5 - Deckard's System Scanner Restore Point 4: 2007-12-15 12:13:29 UTC - RP4 - Software Distribution Service 3.0 3: 2007-12-14 19:40:35 UTC - RP3 - AntiVir PersonalEdition Classic - 14/12/2007 21:40 2: 2007-12-14 19:07:02 UTC - RP2 - Installed HP Pavilion Webcam Tray Icon 1: 2007-12-14 18:01:28 UTC - RP1 - System Checkpoint Backed up registry hives. Performed disk cleanup. -- HijackThis Clone ------------------------------------------------------------ Emulating logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2007-12-15 14:55:00 Platform: Windows XP Service Pack 2 (5.01.2600) MSIE: Internet Explorer (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\system32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\explorer.exe C:\WINDOWS\ehome\ehtray.exe C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\HP\QuickPlay\QPService.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Hewlett-Packard\HP Pavilion Webcam\HPWebcam.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\ehome\ehrecvr.exe C:\WINDOWS\ehome\ehSched.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\mqsvc.exe C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe C:\WINDOWS\system32\mqtgsvc.exe C:\WINDOWS\ehome\ehmsas.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Java\jre1.5.0_06\bin\jucheck.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avscan.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\MIP.AMD2\Desktop\dss.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe O4 - HKLM\..\Run: [Reminder] C:\Windows\CREATOR\Remind_XP.exe O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Bluetooth.lnk = C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe O4 - Global Startup: HP Pavilion Webcam Tray Icon.lnk = C:\Program Files\Hewlett-Packard\HP Pavilion Webcam\HPWebcam.exe O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Windows Desktop Search.lnk = ? O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 7479 bytes -- File Associations ----------------------------------------------------------- All associations okay. -- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------- S3 UIUSys (Conexant Setup API) - c:\windows\system32\drivers\uiusys.sys (file missing) -- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled -------------------- R2 AntiVirScheduler (AntiVir PersonalEdition Classic Scheduler) - "c:\program files\avira\antivir personaledition classic\sched.exe" <Not Verified; Avira GmbH; Scheduler> -- Device Manager: Disabled ---------------------------------------------------- No disabled devices found. -- Files created between 2007-11-15 and 2007-12-15 ----------------------------- 2007-12-15 14:13:38 0 d-------- C:\WINDOWS\system32\PreInstall 2007-12-15 14:13:32 0 d-------- C:\WINDOWS\LastGood 2007-12-14 21:38:38 0 d---s---- C:\Documents and Settings\MIP.AMD2\UserData 2007-12-14 21:35:12 0 d-------- C:\Documents and Settings\MIP.AMD2\Application Data\skypePM 2007-12-14 21:34:40 0 d-------- C:\Documents and Settings\MIP.AMD2\Application Data\Skype 2007-12-14 20:02:46 0 d--h----- C:\Documents and Settings\MIP.AMD2\Templates 2007-12-14 20:02:46 0 dr------- C:\Documents and Settings\MIP.AMD2\Start Menu 2007-12-14 20:02:46 0 dr-h----- C:\Documents and Settings\MIP.AMD2\SendTo 2007-12-14 20:02:46 0 dr-h----- C:\Documents and Settings\MIP.AMD2\Recent 2007-12-14 20:02:46 0 d--h----- C:\Documents and Settings\MIP.AMD2\PrintHood 2007-12-14 20:02:46 1048576 --ah----- C:\Documents and Settings\MIP.AMD2\NTUSER.DAT 2007-12-14 20:02:46 0 d--h----- C:\Documents and Settings\MIP.AMD2\NetHood 2007-12-14 20:02:46 0 dr------- C:\Documents and Settings\MIP.AMD2\My Documents 2007-12-14 20:02:46 0 d--h----- C:\Documents and Settings\MIP.AMD2\Local Settings 2007-12-14 20:02:46 0 dr------- C:\Documents and Settings\MIP.AMD2\Favorites 2007-12-14 20:02:46 0 d-------- C:\Documents and Settings\MIP.AMD2\Desktop 2007-12-14 20:02:46 0 d---s---- C:\Documents and Settings\MIP.AMD2\Cookies 2007-12-14 20:02:46 0 dr-h----- C:\Documents and Settings\MIP.AMD2\Application Data 2007-12-14 20:02:46 0 d-------- C:\Documents and Settings\MIP.AMD2\Application Data\Symantec 2007-12-14 20:02:46 0 d-------- C:\Documents and Settings\MIP.AMD2\Application Data\Macromedia 2007-12-14 20:02:46 0 d-------- C:\Documents and Settings\MIP.AMD2\Application Data\Identities 2007-12-14 20:00:48 0 d-------- C:\WINDOWS\system32\SoftwareDistribution 2007-12-14 19:34:14 0 d-------- C:\WINDOWS\pss 2007-12-14 19:29:53 0 d-------- C:\Documents and Settings\Demo\Application Data\skypePM 2007-12-13 23:06:57 0 d-------- C:\Program Files\Trend Micro 2007-12-12 18:24:15 0 d-------- C:\Program Files\Avira 2007-12-12 18:24:15 0 d-------- C:\Documents and Settings\All Users\Application Data\Avira 2007-12-09 17:40:46 0 d-------- C:\Program Files\Common Files\Viewer 2007-12-07 19:40:19 37027 --a------ C:\WINDOWS\atmoUn.exe 2007-12-07 19:40:17 0 d-------- C:\Program Files\Viewpoint 2007-12-07 19:40:17 0 d-------- C:\Documents and Settings\All Users\Application Data\Viewpoint 2007-11-30 20:28:37 0 d-------- C:\delete_later 2007-11-30 18:34:49 0 d-------- C:\MIP_OE 2007-11-26 00:22:22 0 d-------- C:\Program Files\TVAnts 2007-11-25 23:09:00 0 d-------- C:\Program Files\Common Files\TechSmith Shared 2007-11-25 22:52:43 0 d-------- C:\Documents and Settings\MIP\Application Data\skypePM 2007-11-25 22:52:43 32 --a------ C:\Documents and Settings\All Users\Application Data\ezsid.dat 2007-11-25 22:50:34 0 d-------- C:\Program Files\Common Files\Skype 2007-11-21 22:11:13 0 d-------- C:\Documents and Settings\MIP\Application Data\TVU Networks 2007-11-21 22:11:03 0 d-------- C:\Program Files\TVUPlayer -- Find3M Report --------------------------------------------------------------- 2007-12-15 05:33:05 0 d-------- C:\Program Files\Windows NT 2007-12-15 05:33:04 0 d-------- C:\Program Files\Windows Media Connect 2 2007-12-15 05:32:02 0 d-------- C:\Program Files\RGB 2007-12-15 05:32:02 0 d-------- C:\Program Files\Online Services 2007-12-15 05:31:49 0 d-------- C:\Program Files\NetWaiting 2007-12-15 05:31:45 0 d-------- C:\Program Files\Movie Maker 2007-12-15 05:31:43 0 d-------- C:\Program Files\Microsoft Works 2007-12-15 05:31:05 0 d-------- C:\Program Files\Messenger 2007-12-15 05:29:39 0 d-------- C:\Program Files\GemMaster 2007-12-15 05:29:37 0 d-------- C:\Program Files\ESPNMotion 2007-12-15 05:29:36 0 d-------- C:\Program Files\EnglishOtto 2007-12-15 05:29:33 0 d-------- C:\Program Files\DIGStream 2007-12-15 05:29:33 0 d-------- C:\Program Files\CONEXANT 2007-12-15 05:29:03 0 d-------- C:\Program Files\Common Files\SureThing Shared 2007-12-15 05:29:02 0 d-------- C:\Program Files\Common Files\Sonic Shared 2007-12-15 05:28:48 0 d-------- C:\Program Files\Common Files\LightScribe 2007-12-14 21:26:56 0 d-------- C:\Program Files\Common Files\Symantec Shared 2007-12-14 21:26:09 0 d-------- C:\Program Files\Common Files 2007-12-09 17:06:06 0 d-------- C:\Program Files\CoCreate 2007-11-25 23:08:57 0 d-------- C:\Program Files\TechSmith 2007-10-29 12:04:23 0 d-------- C:\Program Files\Winamp 2007-10-29 12:03:53 0 d-------- C:\Program Files\Winamp Toolbar 2007-10-16 11:34:37 0 d-------- C:\Program Files\XLAB ISL Boot 2007-10-06 13:19:40 1156 --a------ C:\WINDOWS\mozver.dat -- Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray"="C:\WINDOWS\ehome\ehtray.exe" [06/08/2005 06:56] "hpWirelessAssistant"="C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe" [04/05/2006 07:58] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [11/11/2005 06:03] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [18/08/2006 10:00] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [18/08/2006 10:00] "nwiz"="nwiz.exe" [18/08/2006 10:00 C:\WINDOWS\system32\nwiz.exe] "MsmqIntCert"="regsvr32 /s mqrt.dll" [] "High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe" [02/06/2006 02:02 C:\WINDOWS\system32\CHDAudPropShortcut.exe] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [01/04/2006 07:01] "QPService"="C:\Program Files\HP\QuickPlay\QPService.exe" [11/07/2006 20:55] "HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" [16/02/2005 22:11] "QlbCtrl"="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [19/06/2006 10:33] "Cpqset"="C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe" [30/05/2006 15:02] "RecGuard"="C:\Windows\SMINST\RecGuard.exe" [11/10/2005 09:23] "Reminder"="C:\Windows\CREATOR\Remind_XP.exe" [09/02/2006 08:52] "avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [13/12/2007 18:28] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [16/03/2006 06:00] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [07/12/2007 15:08] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Acrobat Assistant.lnk - C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe [24/10/2003 06:37:56] Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [23/09/2005 21:05:26] Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [12/05/2006 13:33:22] HP Pavilion Webcam Tray Icon.lnk - C:\Program Files\Hewlett-Packard\HP Pavilion Webcam\HPWebcam.exe [18/02/2007 04:11:38] HP Photosmart Premier Fast Start.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [24/09/2005 18:39:30] Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [13/02/2001 00:01:04] Windows Desktop Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe [26/03/2006 21:44:08] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme *Newly Created Service* - ANTIVIRSCHEDULER *Newly Created Service* - ANTIVIRSERVICE *Newly Created Service* - AVGIO *Newly Created Service* - AVGNTFLT *Newly Created Service* - AVIPBB -- End of Deckard's System Scanner: finished at 2007-12-15 14:55:30 ------------ . . Bitte nur die Eintraege der letzten 3 Monate pro Ordner posten . . Volume in drive C has no label. Volume Serial Number is 6424-4E4D Directory of C:\WINDOWS\system32 15/12/2007 14:14 392,280 perfh009.dat 15/12/2007 14:14 56,574 perfc009.dat 15/12/2007 14:14 453,442 PerfStringBackup.INI 14/12/2007 21:23 75 LuResult.txt 14/12/2007 21:18 51,048 nvapps.xml 14/12/2007 21:18 174,672 FNTCACHE.DAT 14/12/2007 20:02 1,158 wpa.dbl 14/12/2007 20:01 38,389 $winnt$.inf . . . Volume in drive C has no label. Volume Serial Number is 6424-4E4D Directory of C:\DOCUME~1\MIP~1.AMD\LOCALS~1\Temp 15/12/2007 15:01 101,477 datfind.txt 15/12/2007 14:56 16,384 ~DF46AF.tmp 14/12/2007 21:19 16,384 ~DFA847.tmp 3 File(s) 134,245 bytes 0 Dir(s) 54,926,340,096 bytes free . . . Volume in drive C has no label. Volume Serial Number is 6424-4E4D Directory of C:\WINDOWS 15/12/2007 14:54 8,840 ModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt 15/12/2007 14:22 988,390 WindowsUpdate.log 15/12/2007 14:22 78,945 KB899587.log 15/12/2007 14:22 78,402 KB927779.log 15/12/2007 14:22 75,495 KB927802.log 15/12/2007 14:22 74,780 KB922819.log 15/12/2007 14:22 73,554 KB885835.log 15/12/2007 14:22 73,042 KB885836.log 15/12/2007 14:22 73,965 KB923414.log 15/12/2007 14:22 38,070 KB937894.log 15/12/2007 14:22 74,641 KB928255.log 15/12/2007 14:22 63,162 KB931784.log 15/12/2007 14:22 38,723 KB942840.log 15/12/2007 14:22 73,332 KB923980.log 15/12/2007 14:22 55,980 KB936021.log 15/12/2007 14:22 69,267 KB924667.log 15/12/2007 14:22 73,220 KB901017.log 15/12/2007 14:22 71,783 KB924270.log 15/12/2007 14:22 54,852 KB921503.log 15/12/2007 14:22 73,535 KB899591.log 15/12/2007 14:22 72,144 KB911562.log 15/12/2007 14:22 54,648 KB938829.log 15/12/2007 14:22 50,717 KB929123.log 15/12/2007 14:22 69,664 KB918439.log 15/12/2007 14:22 37,892 KB890046.log 15/12/2007 14:22 73,057 KB920685.log 15/12/2007 14:22 72,656 KB911280.log 15/12/2007 14:22 50,824 KB931261.log 15/12/2007 14:22 50,784 KB925902.log 15/12/2007 14:22 69,387 KB920670.log 15/12/2007 14:22 70,221 KB896358.log 15/12/2007 14:22 71,224 KB902400.log 15/12/2007 14:21 73,558 KB893756.log 15/12/2007 14:21 55,394 KB938828.log 15/12/2007 14:21 69,295 KB873339.log 15/12/2007 14:21 69,312 KB887472.log 15/12/2007 14:21 63,699 KB926436.log 15/12/2007 14:21 38,195 KB942763.log 15/12/2007 14:21 51,049 KB930178.log 15/12/2007 14:21 63,952 KB919007.log 15/12/2007 14:21 64,241 KB914388.log 15/12/2007 14:21 63,291 KB905414.log 15/12/2007 14:21 62,555 KB917953.log 15/12/2007 14:21 55,053 KB932168.log 15/12/2007 14:21 60,060 KB923191.log 15/12/2007 14:21 50,108 KB941202.log 15/12/2007 14:21 60,666 KB918118.log 15/12/2007 14:21 60,764 KB926255.log 15/12/2007 14:21 40,422 KB941568.log 15/12/2007 14:21 59,299 KB888302.log 15/12/2007 14:21 61,262 KB900725.log 15/12/2007 14:21 54,551 KB938127.log 15/12/2007 14:21 49,789 KB935840.log 15/12/2007 14:21 49,053 KB930916.log 15/12/2007 14:21 43,549 KB942615.log 15/12/2007 14:21 59,828 KB908531.log 15/12/2007 14:21 59,396 KB905749.log 15/12/2007 14:21 58,186 KB896428.log 15/12/2007 14:21 49,680 KB935839.log 15/12/2007 14:21 58,719 KB920683.log 15/12/2007 14:21 58,433 KB914389.log 15/12/2007 14:21 37,556 KB944653.log 15/12/2007 14:20 56,085 KB890859.log 15/12/2007 14:20 55,275 KB900485.log 15/12/2007 14:20 214,854 setupapi.log 15/12/2007 14:20 59,709 KB924496.log 15/12/2007 14:18 52,153 KB928843.log 15/12/2007 14:17 48,525 KB920872.log 15/12/2007 14:16 63,262 KB920213.log 15/12/2007 14:16 42,359 KB916595.log 15/12/2007 14:13 75,736 MedCtrOC.log 15/12/2007 14:13 15,647 ehOCGen.log 15/12/2007 14:13 322,564 iis6.log 15/12/2007 14:13 91,935 comsetup.log 15/12/2007 14:13 55,084 ntdtcsetup.log 15/12/2007 14:13 13,740 ocmsn.log 15/12/2007 14:13 119,649 tsoc.log 15/12/2007 14:13 48,142 KB898461.log 15/12/2007 14:13 1,393 imsins.log 15/12/2007 14:13 12,490 tabletoc.log 15/12/2007 14:13 131,130 ocgen.log 15/12/2007 14:13 12,563 msgsocm.log 15/12/2007 14:13 57,104 netfxocm.log 15/12/2007 14:13 32,118 plusoc.log 15/12/2007 14:13 239,033 FaxSetup.log 15/12/2007 14:13 87,850 msmqinst.log 14/12/2007 21:18 0 0.log 14/12/2007 21:18 157 wiadebug.log 14/12/2007 21:18 50 wiaservc.log 14/12/2007 21:18 2,048 bootstat.dat 14/12/2007 21:10 1,790 SchedLgU.Txt 14/12/2007 21:04 1,523 OEWABLog.txt 14/12/2007 21:04 17,908 wmsetup.log 14/12/2007 21:03 1,868 DtcInstall.log 14/12/2007 20:09 1,024 cclsi.ini 14/12/2007 20:05 1,880 bitssetup.log 14/12/2007 20:01 1,099,443 setuplog.txt 14/12/2007 20:01 352,304 setupact.log 14/12/2007 20:00 3,339 sessmgr.setup.log 14/12/2007 19:59 3,752 regopt.log 14/12/2007 19:57 231 system.ini 14/12/2007 14:05 1,265 IE4 Error Log.txt 07/12/2007 19:40 37,027 atmoUn.exe 01/12/2007 07:52 351 WHOffice.INI 20/10/2007 17:27 7,680 Thumbs.db 16/10/2007 21:52 11,675 KB933729.log 16/10/2007 21:52 33,962 KB939653.log 06/10/2007 13:19 1,156 mozver.dat 03/10/2007 08:40 12,135 KB939683.log 03/10/2007 08:40 1,025,210 setupapi.log.1.old 03/10/2007 08:39 27,317 KB933360.log 03/10/2007 08:39 34,640 KB937143.log 03/10/2007 08:39 283,184 msxml4-KB936181-enu.LOG 03/10/2007 08:39 8,369 KB936782.log . . . Volume in drive C has no label. Volume Serial Number is 6424-4E4D Directory of C:\WINDOWS\temp . . . Volume in drive C has no label. Volume Serial Number is 6424-4E4D Directory of C:\WINDOWS\Downloaded Program Files 18/09/2007 14:12 21,418 gpc2k.php 8 File(s) 571,730 bytes 0 Dir(s) 54,926,323,712 bytes free . . . Dieser Beitrag wurde am 15.12.2007 um 14:05 Uhr von Met editiert.
|
|
|
|
|
|
|
15.12.2007, 14:14
Ehrenmitglied
Beiträge: 6028 |
||
|
|
|
|
|
15.12.2007, 14:39
Member
Beiträge: 11 |
#34
Zitat Arnold posteteLeider kann man den vollen Pfad nicht sehen, was ich sehe nur ist C:\Documents and Settings\All Users\...\10734493.AV$ Mit search Funktion konnte ich diese Datei leider nicht finden Der Name aendert sich staendig, manchmal ist es *.tmp manchmal ist es *.AV$ |
|
|
|
|
|
|
15.12.2007, 15:20
Ehrenmitglied
Beiträge: 6028 |
||
|
|
|
|
|
15.12.2007, 16:34
Member
Beiträge: 11 |
#36
Zitat Arnold posteteIch habe anscheinend das Problem entdeckt :-) Waehrend ich gestern Norton von meinem System löschen wollte, wurde der Vorgang irgendwie (vielleicht absichtlich von Norton !) abgebrochen und konnte nicht vollzogen werden. Dabei sind Hunderte von infizierten Norton Quarantine-dateien auch auf der Festplatte gelassen. Da ich den vollen Pfad nicht sehen konnte, habe ich auch nicht bemerkt, dass Antivir diese Norton Quarantinedateien entdeckt hat und eine Trojan Warnung gegeben hat. Jetzt hat Antivir das ganze System erfolgreich voll gescannt. Ich hoffe, dass ich endlich wieder ohne Trojan arbeiten kann. Vielen Dank für Ihre Hilfe :-)))) |
|
|
|
|
|
|
15.12.2007, 16:46
Ehrenmitglied
Beiträge: 6028 |
#37
Noch eins
 Java Dein Java software ist veraltet, Download jre-6u3-windows-i586-p.exe Scrolle runter nach ----> Java Runtime Environment (JRE) 6 Update 3 The Java SE Runtime Environment (JRE) allows end-users to run Java applications. Klicke auf Download Setze in haeckchen bei --->"Accept License Agreement". Klicke “Windows Offline Installation, Multi-language” um “jre-6u3-windows-i586-p.exe” zum Desktop zu installieren Schliesse alle Programme auch dein Webbrowser Ueber "Start -> Einstellungen -> Systemsteuerung -> Software Und entferne alle aeltere versionen von Java Runtime Environment (JRE of J2SE) Auch auf C:\Programme\Java entfernen! Nachdem alles entfernt wurde --->Rechner neu starten Installiere jetzt vom Desktop aus ---> jre-6u3-windows-i586-p.exe __________ MfG Argus |
|
|
|
|
|
|
20.12.2007, 09:14
...neu hier
Beiträge: 4 |
#38
Hallo ihr,
also ich schildere mal kurz mein Problem: Ich kenne mich kaum mit pc und co aus das gebe ich ja zu aber so einen Virus oder was auch immer das is hab ich noch nie gesehen... Beim hochfahren meines Computers ist im Hintergrund das normale Windows Startmenü zu sehen DOCH im vordergrund ist ein grauer Kasten in dem "Fixed" steht,oben rechts ein x zum schließen und unten ein OK Button. Wenn ich x oder OK anklicke geht es weg dann gebe ich mein Windows Passwort ein er startet kurz (ich sehe kurz meinen eigenen Hintergrund)und dann meldet er sich sofort wieder ab und das mit dem Kästchen geht von vorn los.. Abgesicherter Modus geht auch net...passierts auch!! Systemwiederherstellung mit der XP CD geht auch net oder funktioniert nicht... Virenprogramme die ich beim Start Boote (aktuelle c`t Zeitung) finden nichts und sie können sich nicht updaten weil keine Internetverbindung besteht... Weiß einer was ich tun kann? ich vermute ich habe mir den Virus bei msn eingefangen, habe was geschickt bekommen,entpackt und angeklickt... HIIILLLLLLLLLLLFFFFFFEEEEEEEEEEEEEEEE!!!!!!!! Danke |
|
|
|
|
|
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!
bitte erst » hier kostenlos registrieren!!
Folgende Themen könnten Dich auch interessieren:
Copyright © 2024, Protecus.de - Protecus Team - Impressum / Mediadaten
Download dss zum Desktop
Doppelklick dss.exe
Kopiere den Inhalt des Berichts C:/ main.txt in dein folgender Bericht
Edit Poste auch mal die Daten von datfindBat unter punkt 4 von http://board.protecus.de/t23188.htm
__________
MfG Argus