problem mit services.exe hohe auslastung |
||
|---|---|---|
| #0
| ||
|
11.12.2007, 19:31
...neu hier
Beiträge: 4 |
||
 
|
|
|
|
11.12.2007, 19:37
Moderator
Beiträge: 7805 |
#2
Schieb biite ein Combofix Report nach: http://board.protecus.de/t23188.htm
__________ MfG Ralf SEO-Spam Hunter |
|
|
|
|
|
|
11.12.2007, 21:01
...neu hier
Themenstarter Beiträge: 4 |
#3
Zitat raman postete  hierComboFix 07-12-12.3 - Mario 2007-12-11 20:55:32.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1031.18.1394 [GMT 1:00] ausgeführt von:: C:\Dokumente und Einstellungen\Mario\Desktop\ComboFix.exe * Neuer Wiederherstellungspunkt wurde erstellt . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . c:\Dokumente und Einstellungen\Mario\Lokale Einstellungen\Anwendungsdaten\jmwcchknqb.dat c:\dokumente und einstellungen\mario\lokale einstellungen\anwendungsdaten\jmwcchknqb.exe c:\Dokumente und Einstellungen\Mario\Lokale Einstellungen\Anwendungsdaten\jmwcchknqb_nav.dat C:\Dokumente und Einstellungen\Mario\Lokale Einstellungen\Anwendungsdaten\jmwcchknqb_navps.dat C:\WINDOWS\system32\nvs2.inf . ((((((((((((((((((((((( Dateien erstellt von 2007-11-12 bis 2007-12-12 )))))))))))))))))))))))))))))) . 2007-12-08 12:29 . 2007-12-08 12:30 <DIR> d-------- C:\Programme\SPEED-LINK Medusa 5.1 USB 2007-12-08 12:28 . 2004-08-03 23:07 59,264 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys 2007-12-08 12:28 . 2004-08-03 23:07 59,264 --a--c--- C:\WINDOWS\system32\dllcache\usbaudio.sys 2007-12-08 12:28 . 2004-08-04 00:57 21,504 --a------ C:\WINDOWS\system32\hidserv.dll 2007-12-08 12:28 . 2004-08-04 00:57 21,504 --a--c--- C:\WINDOWS\system32\dllcache\hidserv.dll 2007-12-04 22:02 . 2007-12-04 22:02 <DIR> d-------- C:\Programme\NCH Software 2007-12-04 22:02 . 2007-12-04 22:16 <DIR> d-------- C:\Dokumente und Einstellungen\Mario\Anwendungsdaten\NCH Swift Sound 2007-12-04 22:01 . 2007-12-04 22:15 <DIR> d-------- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NCH Swift Sound 2007-11-30 23:57 . 2007-11-30 23:57 317,616 --a------ C:\WINDOWS\system32\drivers\srtspl.sys 2007-11-30 23:57 . 2007-11-30 23:57 279,088 --a------ C:\WINDOWS\system32\drivers\srtsp.sys 2007-11-30 23:57 . 2007-11-30 23:57 43,696 --a------ C:\WINDOWS\system32\drivers\srtspx.sys 2007-11-30 23:57 . 2007-11-30 23:57 10,549 --a------ C:\WINDOWS\system32\drivers\srtspx.cat 2007-11-30 23:57 . 2007-11-30 23:57 10,549 --a------ C:\WINDOWS\system32\drivers\srtspl.cat 2007-11-30 23:57 . 2007-11-30 23:57 10,545 --a------ C:\WINDOWS\system32\drivers\srtsp.cat 2007-11-30 23:57 . 2007-11-30 23:57 1,430 --a------ C:\WINDOWS\system32\drivers\srtspl.inf 2007-11-30 23:57 . 2007-11-30 23:57 1,421 --a------ C:\WINDOWS\system32\drivers\srtspx.inf 2007-11-30 23:57 . 2007-11-30 23:57 1,415 --a------ C:\WINDOWS\system32\drivers\srtsp.inf 2007-11-27 14:07 . 2007-11-27 14:07 20,480 --a------ C:\WINDOWS\system32\H@tKeysH@@k.DLL 2007-11-26 09:55 . 2007-12-09 14:27 103,736 --a------ C:\WINDOWS\system32\PnkBstrB.exe 2007-11-26 09:55 . 2007-11-26 20:20 66,872 --a------ C:\WINDOWS\system32\PnkBstrA.exe 2007-11-26 09:55 . 2007-12-09 14:27 22,328 --a------ C:\WINDOWS\system32\drivers\PnkBstrK.sys 2007-11-25 11:41 . 2007-12-01 16:43 <DIR> d-------- C:\Dokumente und Einstellungen\Mario\Anwendungsdaten\Xfire 2007-11-22 21:00 . 2004-08-04 00:58 43,008 --a------ C:\WINDOWS\system32\ksxbar.ax 2007-11-22 21:00 . 2004-08-04 00:58 43,008 --a--c--- C:\WINDOWS\system32\dllcache\ksxbar.ax 2007-11-22 20:53 . 2000-09-18 12:00 160,073 --a------ C:\WINDOWS\system32\drivers\omcamvid.sys 2007-11-22 20:53 . 2000-09-18 12:00 135,168 --a------ C:\WINDOWS\omcamcap.exe 2007-11-22 20:53 . 2000-09-18 12:00 73,728 --a------ C:\WINDOWS\omcamdib.dll 2007-11-22 20:53 . 2000-09-18 12:00 53,248 --a------ C:\WINDOWS\system32\omcamext.dll 2007-11-22 20:53 . 2000-02-08 11:36 40,960 --a------ C:\WINDOWS\omniuns.exe 2007-11-22 20:53 . 2000-09-18 12:00 38,925 --a------ C:\WINDOWS\system32\Omcamext.ax 2007-11-22 20:53 . 2000-09-18 12:00 25,390 --a------ C:\WINDOWS\system32\drivers\ovtcamd.sys 2007-11-22 20:53 . 2000-09-18 12:00 22,278 --a------ C:\WINDOWS\system32\OmCamUSD.dll 2007-11-22 19:05 . 2003-06-18 17:31 17,920 --a------ C:\WINDOWS\system32\mdimon.dll 2007-11-22 19:05 . 2007-11-22 19:05 400 --a------ C:\WINDOWS\ODBC.INI 2007-11-22 19:04 . 2007-11-22 19:05 <DIR> d-------- C:\WINDOWS\SHELLNEW 2007-11-22 19:04 . 2007-11-22 19:04 <DIR> d-------- C:\Programme\Microsoft.NET 2007-11-12 15:18 . 2007-05-16 16:45 1,124,720 --a------ C:\WINDOWS\system32\D3DCompiler_34.dll 2007-11-12 15:18 . 2007-05-16 16:45 443,752 --a------ C:\WINDOWS\system32\d3dx10_34.dll 2007-11-12 15:18 . 2007-06-20 20:46 266,088 --a------ C:\WINDOWS\system32\xactengine2_8.dll 2007-11-12 15:18 . 2007-06-20 20:45 18,280 --a------ C:\WINDOWS\system32\x3daudio1_2.dll 2007-11-12 06:51 . 2007-11-12 06:51 1,089,536 --a------ C:\WINDOWS\system32\nvcuda.dll . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-11 16:28 --------- d-----w C:\Programme\Gemeinsame Dateien\Symantec Shared 2007-12-11 16:09 --------- d-----w C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Symantec 2007-12-09 19:48 --------- d-----w C:\Programme\MSN Messenger 2007-12-05 15:03 805 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.INF 2007-12-05 15:03 60,800 ----a-w C:\WINDOWS\system32\S32EVNT1.DLL 2007-12-05 15:03 123,952 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.SYS 2007-12-05 15:03 10,740 ----a-w C:\WINDOWS\system32\drivers\SYMEVENT.CAT 2007-12-05 15:03 --------- d-----w C:\Programme\Symantec 2007-12-03 18:55 --------- d-----w C:\Dokumente und Einstellungen\Mario\Anwendungsdaten\Nokia 2007-11-23 09:53 --------- d--h--w C:\Programme\InstallShield Installation Information 2007-11-22 13:19 --------- d-----w C:\Programme\Norton Internet Security 2007-11-21 20:53 --------- d-----w C:\Dokumente und Einstellungen\Mario\Anwendungsdaten\Hamachi 2007-11-12 07:03 356,352 ----a-w C:\WINDOWS\system32\NVUNINST.EXE 2007-11-12 05:51 81,920 ----a-w C:\WINDOWS\system32\nvwddi.dll 2007-11-12 05:51 81,920 ----a-w C:\WINDOWS\system32\nvmctray.dll 2007-11-12 05:51 8,523,776 ----a-w C:\WINDOWS\system32\nvcpl.dll 2007-11-12 05:51 757,760 ----a-w C:\WINDOWS\system32\nvcplui.exe 2007-11-12 05:51 7,433,504 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys 2007-11-12 05:51 6,901,760 ----a-w C:\WINDOWS\system32\nvoglnt.dll 2007-11-12 05:51 6,537,216 ----a-w C:\WINDOWS\system32\nvdisps.dll 2007-11-12 05:51 5,770,880 ----a-w C:\WINDOWS\system32\nv4_disp.dll 2007-11-12 05:51 5,611,520 ----a-w C:\WINDOWS\system32\nvdispsr.dll 2007-11-12 05:51 466,944 ----a-w C:\WINDOWS\system32\nvshell.dll 2007-11-12 05:51 458,752 ----a-w C:\WINDOWS\system32\nvmccssr.dll 2007-11-12 05:51 45,056 ----a-w C:\WINDOWS\system32\nvmccsrs.dll 2007-11-12 05:51 442,368 ----a-w C:\WINDOWS\system32\nvappbar.exe 2007-11-12 05:51 425,984 ----a-w C:\WINDOWS\system32\keystone.exe 2007-11-12 05:51 385,024 ----a-w C:\WINDOWS\system32\nvapi.dll 2007-11-12 05:51 356,352 ----a-w C:\WINDOWS\system32\nvudisp.exe 2007-11-12 05:51 35,328 ----a-w C:\WINDOWS\system32\nvcodins.dll 2007-11-12 05:51 35,328 ----a-w C:\WINDOWS\system32\nvcod.dll 2007-11-12 05:51 335,872 ----a-w C:\WINDOWS\system32\nvwrses.dll 2007-11-12 05:51 335,872 ----a-w C:\WINDOWS\system32\nvwrsel.dll 2007-11-12 05:51 327,680 ----a-w C:\WINDOWS\system32\nvwrsfr.dll 2007-11-12 05:51 327,680 ----a-w C:\WINDOWS\system32\nvwrsesm.dll 2007-11-12 05:51 327,680 ----a-w C:\WINDOWS\system32\nvrshe.dll 2007-11-12 05:51 327,680 ----a-w C:\WINDOWS\system32\nvrsar.dll 2007-11-12 05:51 323,584 ----a-w C:\WINDOWS\system32\nvwrspt.dll 2007-11-12 05:51 323,584 ----a-w C:\WINDOWS\system32\nvwrsit.dll 2007-11-12 05:51 319,488 ----a-w C:\WINDOWS\system32\nvwrsptb.dll 2007-11-12 05:51 319,488 ----a-w C:\WINDOWS\system32\nvwrsnl.dll 2007-11-12 05:51 315,392 ----a-w C:\WINDOWS\system32\nvwrsru.dll 2007-11-12 05:51 315,392 ----a-w C:\WINDOWS\system32\nvwrshu.dll 2007-11-12 05:51 311,296 ----a-w C:\WINDOWS\system32\nvwrsde.dll 2007-11-12 05:51 307,200 ----a-w C:\WINDOWS\system32\nvexpbar.dll 2007-11-12 05:51 303,104 ----a-w C:\WINDOWS\system32\nvwrstr.dll 2007-11-12 05:51 303,104 ----a-w C:\WINDOWS\system32\nvwrssl.dll 2007-11-12 05:51 303,104 ----a-w C:\WINDOWS\system32\nvwrsfi.dll 2007-11-12 05:51 3,715,072 ----a-w C:\WINDOWS\system32\nvvitvsr.dll 2007-11-12 05:51 3,698,688 ----a-w C:\WINDOWS\system32\nvvitvs.dll 2007-11-12 05:51 3,407,872 ----a-w C:\WINDOWS\system32\nvgames.dll 2007-11-12 05:51 3,330,048 ----a-w C:\WINDOWS\system32\nvgamesr.dll 2007-11-12 05:51 299,008 ----a-w C:\WINDOWS\system32\nvwrssk.dll 2007-11-12 05:51 299,008 ----a-w C:\WINDOWS\system32\nvwrsno.dll 2007-11-12 05:51 294,912 ----a-w C:\WINDOWS\system32\nvwrssv.dll 2007-11-12 05:51 294,912 ----a-w C:\WINDOWS\system32\nvwrspl.dll 2007-11-12 05:51 294,912 ----a-w C:\WINDOWS\system32\nvwrsda.dll 2007-11-12 05:51 290,816 ----a-w C:\WINDOWS\system32\nvwrsth.dll 2007-11-12 05:51 286,720 ----a-w C:\WINDOWS\system32\nvwrseng.dll 2007-11-12 05:51 286,720 ----a-w C:\WINDOWS\system32\nvwrscs.dll 2007-11-12 05:51 286,720 ----a-w C:\WINDOWS\system32\nvnt4cpl.dll 2007-11-12 05:51 282,624 ----a-w C:\WINDOWS\system32\nvwrsar.dll 2007-11-12 05:51 282,624 ----a-w C:\WINDOWS\system32\nvrsfr.dll 2007-11-12 05:51 282,624 ----a-w C:\WINDOWS\system32\nvrses.dll 2007-11-12 05:51 282,624 ----a-w C:\WINDOWS\system32\nvrsel.dll 2007-11-12 05:51 278,528 ----a-w C:\WINDOWS\system32\nvwrshe.dll 2007-11-12 05:51 278,528 ----a-w C:\WINDOWS\system32\nvrsit.dll 2007-11-12 05:51 278,528 ----a-w C:\WINDOWS\system32\nvrsde.dll 2007-11-12 05:51 274,432 ----a-w C:\WINDOWS\system32\nvrspt.dll 2007-11-12 05:51 274,432 ----a-w C:\WINDOWS\system32\nvrsnl.dll 2007-11-12 05:51 274,432 ----a-w C:\WINDOWS\system32\nvrsesm.dll 2007-11-12 05:51 270,336 ----a-w C:\WINDOWS\system32\nvrsru.dll 2007-11-12 05:51 266,240 ----a-w C:\WINDOWS\system32\nvrsptb.dll 2007-11-12 05:51 266,240 ----a-w C:\WINDOWS\system32\nvrsja.dll 2007-11-12 05:51 258,048 ----a-w C:\WINDOWS\system32\nvrstr.dll 2007-11-12 05:51 258,048 ----a-w C:\WINDOWS\system32\nvrssl.dll 2007-11-12 05:51 258,048 ----a-w C:\WINDOWS\system32\nvrssk.dll 2007-11-12 05:51 258,048 ----a-w C:\WINDOWS\system32\nvrsko.dll 2007-11-12 05:51 258,048 ----a-w C:\WINDOWS\system32\nvrshu.dll 2007-11-12 05:51 253,952 ----a-w C:\WINDOWS\system32\nvrsth.dll 2007-11-12 05:51 253,952 ----a-w C:\WINDOWS\system32\nvrssv.dll 2007-11-12 05:51 253,952 ----a-w C:\WINDOWS\system32\nvrspl.dll 2007-11-12 05:51 253,952 ----a-w C:\WINDOWS\system32\nvrsno.dll 2007-11-12 05:51 253,952 ----a-w C:\WINDOWS\system32\nvrsda.dll 2007-11-12 05:51 249,856 ----a-w C:\WINDOWS\system32\nvrsfi.dll 2007-11-12 05:51 249,856 ----a-w C:\WINDOWS\system32\nvrscs.dll 2007-11-12 05:51 245,760 ----a-w C:\WINDOWS\system32\nvrseng.dll 2007-11-12 05:51 229,376 ----a-w C:\WINDOWS\system32\nvmccs.dll 2007-11-12 05:51 225,280 ----a-w C:\WINDOWS\system32\nvrszhc.dll 2007-11-12 05:51 212,992 ----a-w C:\WINDOWS\system32\nvwrsja.dll 2007-11-12 05:51 2,854,912 ----a-w C:\WINDOWS\system32\nvmoblsr.dll 2007-11-12 05:51 2,519,040 ----a-w C:\WINDOWS\system32\nvwssr.dll 2007-11-12 05:51 2,486,272 ----a-w C:\WINDOWS\system32\nvwss.dll 2007-11-12 05:51 196,608 ----a-w C:\WINDOWS\system32\nvwrsko.dll 2007-11-12 05:51 188,416 ----a-w C:\WINDOWS\system32\nvmccss.dll 2007-11-12 05:51 167,936 ----a-w C:\WINDOWS\system32\nvwrszht.dll 2007-11-12 05:51 163,840 ----a-w C:\WINDOWS\system32\nvwrszhc.dll 2007-11-12 05:51 155,716 ----a-w C:\WINDOWS\system32\nvsvc32.exe 2007-11-12 05:51 147,456 ----a-w C:\WINDOWS\system32\nvcolor.exe 2007-11-12 05:51 126,976 ----a-w C:\WINDOWS\system32\nvrszht.dll . (((((((((((((((((((((((((((( Autostart Punkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Hinweis* leere Eintrage & legitime Standardeintrage werden nicht angezeigt. [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}] C:\PROGRA~1\GEMEIN~1\SYMANT~1\IDS\IPSBHO.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00] "MsnMsgr"="C:\Programme\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:55] "ICQ"="D:\Progs&Other\Icq\ICQ.exe" [2007-08-08 16:03] "MSMSGS"="C:\Programme\Messenger\msmsgs.exe" [2004-10-13 17:24] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe" [] "DAEMON Tools"="D:\Progs&Other\DAemon Tools\daemon.exe" [2007-09-18 15:16] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [2007-08-21 00:11 C:\WINDOWS\SOUNDMAN.EXE] "SunJavaUpdateSched"="C:\Programme\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11] "NvCplDaemon"="RUNDLL32.exe" [2004-08-04 13:00 C:\WINDOWS\system32\rundll32.exe] "nwiz"="nwiz.exe" [2007-11-12 06:51 C:\WINDOWS\system32\nwiz.exe] "MFServices"="C:\Programme\Companion Suite IH\MFServices.exe" [2005-04-05 02:29] "MFPrintServer"="C:\Programme\Companion Suite IH\MFPrintServer.exe" [2005-04-05 02:37] "SSBkgdUpdate"="C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-10-14 09:22] "IndexSearch"="C:\Programme\ScanSoft\PaperPort\IndexSearch.exe" [2005-02-03 08:58] "OneTouch Monitor"="C:\PROGRA~1\COMPAN~2\ONETOU~3.EXE" [2005-04-05 03:24] "ccApp"="C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe" [2006-09-02 23:04] "osCheck"="C:\Programme\Norton Internet Security\osCheck.exe" [2006-09-05 17:22] "Symantec PIF AlertEng"="C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 09:22] "PCSuiteTrayApplication"="D:\Progs&Other\Nokia Pc Suite\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 14:10] "Adobe Reader Speed Launcher"="D:\Progs&Other\Adobe Reader\Reader\Reader_sl.exe" [2007-10-10 19:51] "NvMediaCenter"="RUNDLL32.exe" [2004-08-04 13:00 C:\WINDOWS\system32\rundll32.exe] "CmUsbSound"="RunDll32 cmcnfgu.cpl" [] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 13:00] "Nokia.PCSync"="D:\Progs&Other\Nokia Pc Suite\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 09:17] R1 mfxnt;mfxnt;\??\C:\WINDOWS\system32\drivers\mfxnt.sys R2 Automatisches LiveUpdate - Scheduler;Automatisches LiveUpdate - Scheduler;"C:\Programme\Symantec\LiveUpdate\ALUSchedulerSvc.exe" R3 HttpUsb;XML interface;C:\WINDOWS\system32\Drivers\HttpUsb.sys R3 UsbItf;MF F@X activities;C:\WINDOWS\system32\Drivers\UsbItf.sys S3 cmudau;C-Media USB Sound Interface;C:\WINDOWS\system32\drivers\cmudau.sys S3 EraserUtilDrv10730;EraserUtilDrv10730;\??\C:\Programme\Gemeinsame Dateien\Symantec Shared\EENGINE\EraserUtilDrv10730.sys S3 sgbx_device;sgbx_device;C:\WINDOWS\system32\sgbxcoms.exe -service S3 SymIM;Symantec Network Security Intermediate Filter Service;C:\WINDOWS\system32\DRIVERS\SymIM.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b71f79ad-4ec2-11dc-9234-806d6172696f}] \Shell\AutoRun\command - E:\ASUSACPI.exe *Newly Created Service* - CATCHME *Newly Created Service* - COMHOST *Newly Created Service* - PROCEXP90 . Inhalt des "geplante Tasks" Ordners "2007-11-26 04:42:00 C:\WINDOWS\Tasks\dfrg.job" - C:\WINDOWS\system32\dfrg.msc "2007-12-10 20:47:17 C:\WINDOWS\Tasks\Norton Internet Security - Run Full System Scan - Mario.job" - C:\Programme\Norton Internet Security\Norton AntiVirus\Navw32.exel/TASK: "2007-12-07 19:00:17 C:\WINDOWS\Tasks\Norton Internet Security - Vollständige Systemprüfung ausführen - Mario.job" - C:\PROGRA~1\NORTON~1\NORTON~1\Navw32.exel/TASK: . ************************************************************************** catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-12 20:58:22 Windows 5.1.2600 Service Pack 2 NTFS Scanne versteckte Prozesse... Scanne versteckte Autostart Einträge... Scanne versteckte Dateien... Scan erfolgreich abgeschlossen versteckte Dateien: 0 ************************************************************************** . Zeit der Fertigstellung: 2007-12-12 20:58:58 . 2007-11-13 18:46:52 --- E O F --- |
|
|
|
|
|
|
12.12.2007, 11:57
Moderator
Beiträge: 7805 |
||
|
|
|
|
Um auf dieses Thema zu ANTWORTEN
bitte erst » hier kostenlos registrieren!!
bitte erst » hier kostenlos registrieren!!
Folgende Themen könnten Dich auch interessieren:
Seite(n): 1
Copyright © 2024, Protecus.de - Protecus Team - Impressum / Mediadaten
Scan saved at 19:29:18, on 11.12.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Programme\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programme\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
D:\Progs&Other\Nokia Pc Suite\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\MSN Messenger\MsnMsgr.Exe
D:\Progs&Other\Icq\ICQ.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\PC Connectivity Solution\ServiceLayer.exe
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Programme\MSN Messenger\usnsvc.exe
C:\PROGRA~1\NORTON~1\NORTON~1\navw32.exe
D:\Progs&Other\Mozilla Firefox\firefox.exe
D:\PROGS&~1\MICROS~1\OFFICE11\OUTLOOK.EXE
D:\Progs&Other\Microsoft Office\OFFICE11\WINWORD.EXE
D:\Progs&Other\Hijack This\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.daemonsearch.com/de/ý
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Programme\Gemeinsame Dateien\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\GEMEIN~1\SYMANT~1\IDS\IPSBHO.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: Norton-Symbolleiste anzeigen - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Programme\Gemeinsame Dateien\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MFServices] "C:\Programme\Companion Suite IH\MFServices.exe" -n
O4 - HKLM\..\Run: [MFPrintServer] "C:\Programme\Companion Suite IH\MFPrintServer.exe"
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [IndexSearch] C:\Programme\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [OneTouch Monitor] C:\PROGRA~1\COMPAN~2\ONETOU~3.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Programme\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] D:\Progs&Other\Nokia Pc Suite\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Progs&Other\Adobe Reader\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ICQ] "D:\Progs&Other\Icq\ICQ.exe" silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools] "D:\Progs&Other\DAemon Tools\daemon.exe" -lang 1033
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://D:\PROGS&~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGS&~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\Progs&Other\Icq\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\Progs&Other\Icq\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O23 - Service: Automatisches LiveUpdate - Scheduler - Symantec Corporation - C:\Programme\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Programme\Bonjour\mDNSResponder.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\VAScanner\comHost.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Symantec IS Kennwortprüfung (ISPwdSvc) - Symantec Corporation - C:\Programme\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programme\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: sgbx_device - Sagem - C:\WINDOWS\system32\sgbxcoms.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\AppCore\AppSvc32.exe
--
End of file - 9293 bytes