Hallo,

versuche schon seit gestern meinen PC von sämtlichen Viren und Dialern zu befreien, jedoch ohne Erfolg. Habe bereits versucht mit AntiVir, Adaware und HijackThis diese zu löschen wieder ohne Erfolg.

Wenn ich ins Internet möchte, dann bringt er mir automatisch die Startseite www.nowfind.net, und ich komme wenn ich in die Adressleiste eine www. adresse eingeben will nirgends mehr hin, jedesmal öffnet sich diese Seite wieder und wieder. So langsam dreh ich schon am Rad..
Bitte bitte helft mir doch

LG Nicole

@hitex23
lade dir HJT download
und poste ein logfile
anleitung hier
chaosman

So und nun?? das habe ich jetzt gemacht..

Du sollst das erstellte Logfile in diesen Thread kopieren.

C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Programme\AVPersonal\AVGUARD.EXE
C:\Programme\AVPersonal\AVWUPSRV.EXE
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\drivers\KodakCCS.exe
C:\Programme\Kodak\Kodak EasyShare software\bin\ptssvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\hkcmd.exe
C:\Programme\Microsoft Hardware\Mouse\point32.exe
C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINNT\System32\hphmon04.exe
C:\WINNT\Mixer.exe
C:\PROGRA~1\T-DSLS~1\SpeedMgr.exe
C:\WINNT\system32\RUNDLL32.exe
C:\Programme\MSN Apps\Updater\01.02.3000.1001\de\msnappau.exe
C:\WINNT\system32\SerExt.exe
C:\Program Files\DeskAd Service\DeskAdServ.exe
C:\Programme\AVPersonal\AVGNT.EXE
C:\Program Files\DeskAd Service\DeskAdKeep.exe
C:\Programme\MSN Messenger\MsnMsgr.Exe
C:\Programme\Plaxo\2.0.3.16\InstallStub.exe
C:\Programme\Shareaza\Shareaza.exe
C:\WINNT\system32\?hkdsk.exe
D:\Programme\Gigaset DECT\talk&surf_6_0\semon21.exe
C:\Programme\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\Programme\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
C:\Programme\WINZIP\WZQKPICK.EXE
D:\Download\INCRED~1\bin\IMApp.exe
C:\Programme\Yahoo!\Messenger\ymsgr_tray.exe
C:\Programme\T-DSL SpeedManager\tsmsvc.exe
D:\Programme\Gigaset DECT\talk&surf_6_0\xcontrolcom.exe
C:\Programme\WINZIP\HijackThis.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\WINNT\system32\tmpf03.exe
C:\Programme\Gemeinsame Dateien\GMT\GMT.exe
C:\Programme\Gemeinsame Dateien\CMEII\CMESys.exe
C:\Programme\HiJackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/004/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.nowfind.net/004/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://www.nowfind.net/004/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.nowfind.net/004/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/004/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.nowfind.net/004/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/004/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nowfind.net/004/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nowfind.net/004/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://C:\DOKUME~1\Andreas\LOKALE~1\Temp\sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nowfind.net/004/index.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.nowfind.net/004/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/004/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/004/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.ramgo.com/search.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nowfind.net/004/index.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nowfind.net/004/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?p=%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
F3 - REG:win.ini: run=

O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx (file missing)
O2 - BHO: IEHlprObj Class - {12D02C08-218F-4A11-BDE1-6611ADB7B81F} - C:\WINNT\SYS32_~1.DLL (file missing)
O2 - BHO: (no name) - {72AE3B96-9F5F-44C8-BEFF-A7E2B6D758DE} - C:\WINNT\system32\kbbj.dll (file missing)
O2 - BHO: (no name) - {78EC5E95-CF20-BEDC-2F47-EEDC384AE2B3} - C:\WINNT\system32\eewk.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Programme\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll (file missing)
O2 - BHO: ICOODownloadManager Class - {BA7270AE-5636-4618-BAF3-F86ADA39F036} - C:\Programme\ICOO Loader\addons7\icoourl.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.3000.1001\de\msntb.dll (file missing)
O2 - BHO: ICOOExternalHandler Class - {ED657BAF-1EE5-4A07-9D2E-6D0525EFC69B} - C:\Programme\ICOO Loader\addons7\icoourlext.dll (file missing)
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: @msdxmLC.dll,-1@1031,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.3000.1001\de\msntb.dll (file missing)
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINNT\System32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Programme\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [T-DSL SpeedMgr] "C:\PROGRA~1\T-DSLS~1\SpeedMgr.exe"
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Programme\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKLM\..\Run: [msnappau] "C:\Programme\MSN Apps\Updater\01.02.3000.1001\de\msnappau.exe"
O4 - HKLM\..\Run: [SerExt] SerExt.exe /unplug
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DeskAd Service] C:\Program Files\DeskAd Service\DeskAdServ.exe
O4 - HKLM\..\Run: [AVGCtrl] C:\Programme\AVPersonal\AVGNT.EXE /min
O4 - HKLM\..\Run: [CMESys] "C:\Programme\Gemeinsame Dateien\CMEII\CMESys.exe"
O4 - HKCU\..\Run: [CFDStart] C:\DOKUME~1\Andreas\LOKALE~1\Temp\\Multimediazugang.exe -m
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Programme\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [IncrediMail] D:\DOWNLOAD\INCRED~1\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PlaxoUpdate] C:\Programme\Plaxo\2.0.3.16\InstallStub.exe -a
O4 - HKCU\..\Run: [Shareaza] "C:\Programme\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [Khg] C:\WINNT\system32\?hkdsk.exe
O4 - Global Startup: talk&surf 6.0 - Monitor.lnk = D:\Programme\Gigaset DECT\talk&surf_6_0\semon21.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Kodak EasyShare Software.lnk = C:\Programme\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Kodak software updater.lnk = C:\Programme\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programme\WINZIP\WZQKPICK.EXE
O4 - Global Startup: GStartup.lnk = C:\Programme\Gemeinsame Dateien\GMT\GMT.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - D:\DOWNLOAD\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: eBay Powersuche - http://www.webtip.ch/cgi-bin/msiebutton/tracker.pl?adv
O8 - Extra context menu item: eBay Produktsuche - C:\Programme\Preispiraten\Buyertools Reminder\SearchEbay.htm
O8 - Extra context menu item: eBay Startseite - http://www.webtip.ch/cgi-bin/msiebutton/tracker.pl?heim
O8 - Extra context menu item: Mein eBay - http://www.webtip.ch/cgi-bin/msiebutton/tracker.pl?mein
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Preispiraten 2.1.3 - {86DE8B3B-1EB7-4386-84BD-EBE94348A913} - C:\Programme\Preispiraten\Preispiraten2\preispiraten2ie.exe
O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O13 - DefaultPrefix: http://nowfind.net/rand/gallery.php?url=
O13 - WWW Prefix: http://nowfind.net/rand/gallery.php?url=
O13 - Home Prefix: http://nowfind.net/rand/gallery.php?url=
O13 - Mosaic Prefix: http://nowfind.net/rand/gallery.php?url=
O16 - DPF: Yahoo! Klondike Solitaire - http://yog55.games.scd.yahoo.com/yog/y/ks12_x.cab
O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/game...ts/y/tt3_x.cab
O16 - DPF: Yahoo! MahJong Solitaire - http://download.games.yahoo.com/game.../y/mjst4_x.cab
O16 - DPF: Yahoo! Pyramids - http://download.games.yahoo.com/game...s/y/pyt1_x.cab
O16 - DPF: {0594AF7E-573B-40DF-8165-E47AB2EAEFE8} (EGEGAUTH Class) - http://akamai.downloadv3.com/binarie...TH_1026_EN.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/Cl.../bridge-c9.cab
O16 - DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} (Wwlaunch Control) - http://www.worldwinner.com/games/shared/wwlaunch.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {9E98E84C-79E1-49C3-82EB-798FCD552EFB} (VacPro.internazionale_ver4) - http://advnt01.com/dialer/internazionale_ver4.CAB
O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) - http://www.mt-download.com/MediaTick...cab?refid=4205
O16 - DPF: {AC2881FD-5760-46DB-83AE-20A5C6432A7E} (SwapIt Control) - http://www.worldwinner.com/games/v61/swapit/swapit.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab32846.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game14.zylomgames.com/activex...amesplayer.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v6.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Companion) - http://us.dl1.yimg.com/download.comp...bio5_1_6_0.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) - http://www5.incredimail.com/contents...1/imloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary...n.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A0D1AE97-BA6A-4962-91DA-FB6E4808EB2F}: NameServer = 192.168.209.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{EDDA4805-4A9D-4B29-825C-478CF9891D53}: NameServer = 192.168.122.252,192.168.122.253
O18 - Protocol: icoo - {2CC63CCE-A945-4D6A-9FA0-3669D7C3C22C} - C:\Programme\ICOO Loader\addons7\icoourl.dll (file missing)
O18 - Filter: text/html - {B2817163-59D9-456F-BB78-E334117AE11B} - C:\WINNT\system32\kbbj.dll
O18 - Filter: text/plain - {B2817163-59D9-456F-BB78-E334117AE11B} - C:\WINNT\system32\kbbj.dll
O23 - Service: AntiVir Service - H+BEDV Datentechnik GmbH - C:\Programme\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: AVM FRITZ!web Routing Service - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Kodak Camera Connection Software - Eastman Kodak Company - C:\WINNT\system32\drivers\KodakCCS.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINNT\system32\oodag.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINNT\System32\HPHipm11.exe
O23 - Service: ptssvc - KODAK - C:\Programme\Kodak\Kodak EasyShare software\bin\ptssvc.exe
O23 - Service: TSMService - T-Systems Nova, Berkom - C:\Programme\T-DSL SpeedManager\tsmsvc.exe
O23 - Service: xControlCOM - Siemens - D:\Programme\Gigaset DECT\talk&surf_6_0\xcontrolcom.exe

@hitex23
du hast wirklich einiges im system, um sicher zu gehen damit wir nichts übersehen, lade direscan
anleitung hier
mache es genauso wie beschrieben wird.
überprüfe Deinen Rechner zunächst mit dem eScan: lade den eScan runter, erstelle dafür einen Ordner (=Verzeichnis) c:\bases, update den eScan online und führe ihn offline im abgesicherten Modus aus. Beachte, dass der eScan ab Version 4.5.1 gefundene Malware nicht löscht. Das wird von Hand auf Anweisung durch uns gemacht.

Teile uns dann das Ergebnis des eScan mit: welche Viren wurden auf Deinem Rechner gefunden: "öffne die mwav.log -> Bearbeiten -> Suchen -> infected eingeben -> Weitersuchen -> Treffer markieren/kopieren und ins Forum übertragen." (Zitat Cidre)
chaosman

@chaosman

Sun Jan 16 18:50:11 2005 => File C:\PROGRA~2\DESKAD~1\DESKAD~1.EXE infected by "not-a-virus:AdWare.WinAD.k" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:11 2005 => Scanning File C:\PROGRA~2\DESKAD~1\DESKAD~2.EXE
Sun Jan 16 18:50:11 2005 => File C:\PROGRA~2\DESKAD~1\DESKAD~2.EXE infected by "not-a-virus:AdWare.WinAD.m" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:12 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\CMEIIAPI.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:12 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\CMESys.exe
Sun Jan 16 18:50:12 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\CMESys.exe infected by "not-a-virus:AdWare.Gator.6034" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:12 2005 => Scanning File c:\PROGRA~1\GEMEIN~1\cmeii\gappmgr.dll
Sun Jan 16 18:50:13 2005 => File c:\PROGRA~1\GEMEIN~1\cmeii\gappmgr.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:13 2005 => Scanning File c:\PROGRA~1\GEMEIN~1\cmeii\GCONTR~1.DLL
Sun Jan 16 18:50:13 2005 => File c:\PROGRA~1\GEMEIN~1\cmeii\GCONTR~1.DLL infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:13 2005 => Scanning File c:\PROGRA~1\GEMEIN~1\cmeii\gdwldeng.dll
Sun Jan 16 18:50:13 2005 => File c:\PROGRA~1\GEMEIN~1\cmeii\gdwldeng.dll infected by "not-a-virus:AdWare.Gator.3124" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\GIocl.dll
Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\GIocl.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\GIOCLC~1.DLL
Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\GIOCLC~1.DLL infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:13 2005 => Scanning File c:\PROGRA~1\GEMEIN~1\cmeii\gmtproxy.dll
Sun Jan 16 18:50:13 2005 => File c:\PROGRA~1\GEMEIN~1\cmeii\gmtproxy.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\GObjs.dll
Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\GObjs.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\GStore.dll
Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\GStore.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:13 2005 => Scanning File c:\PROGRA~1\GEMEIN~1\cmeii\GSTORE~1.DLL
Sun Jan 16 18:50:13 2005 => File c:\PROGRA~1\GEMEIN~1\cmeii\GSTORE~1.DLL infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\CMEII\Gtools.dll
Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\Gtools.dll infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\GMT\EGGCEN~1.DLL
Sun Jan 16 18:50:13 2005 => File C:\PROGRA~1\GEMEIN~1\GMT\EGGCEN~1.DLL infected by "not-a-virus:AdWare.Gator.6051" Virus. Action Taken: No Action Taken.

Sun Jan 16 18:50:13 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\GMT\EGIEEN~1.DLL
Sun Jan 16 18:50:14 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\GMT\EGIEPR~1.DLL
Sun Jan 16 18:50:14 2005 => File C:\PROGRA~1\GEMEIN~1\GMT\EGIEPR~1.DLL infected by "not-a-virus:AdWare.Gator.6041" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:14 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\GMT\EGNSEN~1.DLL
Sun Jan 16 18:50:14 2005 => File C:\PROGRA~1\GEMEIN~1\GMT\EGNSEN~1.DLL infected by "not-a-virus:AdWare.Gator.5017" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:14 2005 => Scanning File C:\PROGRA~1\GEMEIN~1\GMT\GatorRes.dll
Sun Jan 16 18:50:14 2005 => File C:\PROGRA~1\GEMEIN~1\GMT\GatorRes.dll infected by "not-a-virus:AdWare.Gator.6041" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:23 2005 => File C:\WINNT\DOWNLO~1\DeskAdX.dll infected by "not-a-virus:AdWare.WinAD.n" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:25 2005 => File C:\WINNT\system32\eewk.dll infected by "not-a-virus:AdWare.PurityScan.ak" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:30 2005 => File C:\WINNT\system32\mtwirl.dll infected by "Trojan.Win32.StartPage.mz" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:33 2005 => File C:\WINNT\system32\tmpf03.exe infected by "Trojan-Downloader.Win32.Small.agk" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:35 2005 => File C:\WINNT\system32\x0Cw0.dll infected by "Backdoor.Win32.Haxdoor.ay" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:37 2005 => File C:\WINNT\system32\eewk.dll infected by "not-a-virus:AdWare.PurityScan.ak" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:37 2005 => File C:\WINNT\system32\mtwirl.dll infected by "Trojan.Win32.StartPage.mz" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:43 2005 => File C:\PROGRA~2\DESKAD~1\DESKAD~2.EXE infected by "not-a-virus:AdWare.WinAD.m" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:43 2005 => File C:\PROGRA~1\GEMEIN~1\CMEII\CMESys.exe infected by "not-a-virus:AdWare.Gator.6034" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:57 2005 => File C:\WINNT\loadnew.exe infected by "TrojanDownloader.Win32.Small.yx" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:57 2005 => File C:\WINNT\hosts infected by "Trojan.Win32.Qhost.k" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:50:57 2005 => File C:\WINNT\loadclean.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:51:59 2005 => File C:\WINNT\system32\tmpf03.exe infected by "Trojan-Downloader.Win32.Small.agk" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:51:59 2005 => File C:\WINNT\system32\lsp.dll infected by "not-a-virus:AdWare.Sahat.f" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:52:00 2005 => File C:\WINNT\system32\x0Cw0.dll infected by "Backdoor.Win32.Haxdoor.ay" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:52:11 2005 => File C:\DOKUME~1\Andreas\LOKALE~1\Temp\sp.html infected by "Trojan.JS.StartPage.u" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:52:18 2005 => File C:\DOKUME~1\Andreas\LOKALE~1\TEMPOR~1\Content.IE5\2J63EBS3\a679a0[1].js infected by "Trojan-Downloader.JS.Small.af" Virus. Action Taken: No Action Taken.
Sun Jan 16 18:52:18 2005 => Total Disinfected Files: 0

File C:\WINNT\system32\x0Cw0.dll infected by "Backdoor.Win32.Haxdoor.ay" Virus.

Aufrund dessen solltest du besser dein System neu aufsetzen, siehe die Anleitung in meiner Signatur -> http://www.sophos.de/virusinfo/analy...jhaxdoork.html

Au backe.. Das ist ja super.. *ironisch gemeint* Und warum?? Weil man männer an den PC lässt..

Trotzdem vielen vielen dank für die super und vorallem schnelle hilfe..

Dann werd ich das mal gleich anpacken..