HILFEEE! Ich habe laut escan 34 viren :kloppen:

lestat

Hi zusammen also ich hab da ein (hoffe doch) klitzekleines Prob ich kam Freitag nach Hause und finde mein Baby völlig überlastet vor. Es fing damit an das Norton ungefähr 3236 Fenster öffnete um mir von der selben Anzahl entstandener TMP Dateien (Sowohl im XP Temp Ordner als auch im Quarantäne Ordner von Norton)zu berichten . Jedes Fenster muss ich mit ok bestätigen Virusname sei Hacktool genaueres kam leider nicht . Also hab ich erst mal in 4 stündiger Arbeit die beiden Ordner incl. Papiereimer gelöscht . Komisch dachte ich war ja ( relativ) einfach bis heute morgen hatte ich Ruhe schwubs gleiches Prob. Ich regge mich hier zieh mir escan und der Horror wird noch schlimmer. Also uch oste hier mal ich hoffe das sind die richtigen Sachen

Bitte helft mir

THX im voraus Lestat

Infected
Thu Jul 14 09:18:46 2005 => File C:\WINDOWS\system32\wuauclt10.exe infected by "Trojan-Downloader.Win32.IstBar.is" Virus! Action Taken: No Action Taken.
Thu Jul 14 09:18:42 2005 => File C:\WINDOWS\system32\wudupdate.exe infected by "Trojan.Win32.Pakes" Virus! Action Taken: No Action Taken.
Thu Jul 14 09:17:18 2005 => File C:\WINDOWS\system32\shell32.exe infected by "Trojan-Dropper.Win32.Agent.ny" Virus! Action Taken: No Action Taken.
Thu Jul 14 09:15:37 2005 => File C:\WINDOWS\system32\wuauclt10.exe infected by "Trojan-Downloader.Win32.IstBar.is" Virus! Action Taken: No Action Taken.
Thu Jul 14 09:15:29 2005 => File C:\WINDOWS\system32\wudupdate.exe infected by "Trojan.Win32.Pakes" Virus! Action Taken: No Action Taken.
Thu Jul 14 09:13:22 2005 => File C:\WINDOWS\system32\shell32.exe infected by "Trojan-Dropper.Win32.Agent.ny" Virus! Action Taken: No Action Taken.
Thu Jul 14 09:12:02 2005 => System found infected with CWS.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken.
Thu Jul 14 09:02:25 2005 => File C:\WINDOWS\system32\wuauclt10.exe infected by "Trojan-Downloader.Win32.IstBar.is" Virus! Action Taken: No Action Taken.
Thu Jul 14 09:02:14 2005 => File C:\WINDOWS\system32\wudupdate.exe infected by "Trojan.Win32.Pakes" Virus! Action Taken: No Action Taken.
Thu Jul 14 08:59:32 2005 => File C:\WINDOWS\system32\shell32.exe infected by "Trojan-Dropper.Win32.Agent.ny" Virus! Action Taken: No Action Taken.
Thu Jul 14 08:58:04 2005 => System found infected with CWS.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken.
Thu Jul 14 08:57:53 2005 => System found infected with SideFind Spyware/Adware ({10e42047-deb9-4535-a118-b3f6ec39b807})! Action taken: No Action Taken.
Tagged
Thu Jul 14 08:59:16 2005 => File C:\WINDOWS\DitExp.exe tagged as not-a-virus:Garbage.Win32.CustomIcons. No Action Taken.
Thu Jul 14 09:02:31 2005 => File C:\WINDOWS\system32\HCW848UN.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 09:13:10 2005 => File C:\WINDOWS\DitExp.exe tagged as not-a-virus:Garbage.Win32.CustomIcons. No Action Taken.
Thu Jul 14 09:15:43 2005 => File C:\WINDOWS\system32\HCW848UN.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 09:18:49 2005 => File C:\WINDOWS\system32\HCW848UN.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 09:23:52 2005 => File C:\WINDOWS\DitExp.exe tagged as not-a-virus:Garbage.Win32.CustomIcons. No Action Taken.
Thu Jul 14 09:25:15 2005 => File C:\WINDOWS\Installer\1b69d9.msi tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 09:35:45 2005 => File C:\Dokumente und Einstellungen\Honnes\Lokale Einstellungen\Temp\upd.exe tagged as not-a-virus:Tool.Win32.PsKill.110. No Action Taken.
Thu Jul 14 09:35:45 2005 => File C:\Dokumente und Einstellungen\Honnes\Lokale Einstellungen\Temp\shutdown.exe tagged as not-a-virus:Tool.Win32.Shutdown. No Action Taken.
Thu Jul 14 09:43:34 2005 => File C:\Programme\Gemeinsame Dateien\aolback\comp01.000 tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 09:54:30 2005 => File C:\Programme\AOL 9.0\Jiti\Jiti_mm.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 10:01:07 2005 => File D:\Proggies\Ad-Aware SE Personal\UNWISE.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 10:01:16 2005 => File D:\Proggies\AOL Privacy Protection\UNWISE.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 10:01:26 2005 => File D:\Proggies\FlashGet\UNWISE.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 10:14:24 2005 => File E:\Dennis\Emule\Neuer Ordner\PocketDVD.v1.1.WinALL.Retail-www.ServerTT.CoM.rar tagged as not-a-virus:Tool.Win32.Shutdown. No Action Taken.
Thu Jul 14 10:32:07 2005 => File E:\System Volume Information\_restore{1ABEDE1F-E951-447D-9A8B-3B9C16F03540}\RP113\A0027675.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 10:32:07 2005 => File E:\System Volume Information\_restore{1ABEDE1F-E951-447D-9A8B-3B9C16F03540}\RP113\A0027676.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 10:32:39 2005 => File G:\eDonkey2000\Incoming\Deutsch Matrix Online cracked by Team Myth.zip tagged as not-a-virus:Tool.Win32.PsKill.110. No Action Taken.
Thu Jul 14 10:32:39 2005 => File G:\eDonkey2000\Incoming\installer.exe tagged as not-a-virus:Tool.Win32.PsKill.110. No Action Taken.
Thu Jul 14 10:32:40 2005 => File G:\eDonkey2000\Incoming\PC Game Matrix online cracked.exe tagged as not-a-virus:Tool.Win32.PsKill.110. No Action Taken.
Thu Jul 14 10:32:42 2005 => File G:\eDonkey2000\Incoming\PC Game Matrix online cracked.zip tagged as not-a-virus:Tool.Win32.PsKill.110. No Action Taken.
Thu Jul 14 10:32:46 2005 => File G:\eDonkey2000\Incoming\rebuilt.Deutsch Matrix Online cracked by Team Myth.zip tagged as not-a-virus:Tool.Win32.PsKill.110. No Action Taken.
Thu Jul 14 10:39:58 2005 => File I:\Azureus Incoming\Avatar Lab\Avatar Lab.rar tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
Thu Jul 14 10:40:00 2005 => File I:\Azureus Incoming\Dr.DivX+Clone Cd+Alcohol 120%+AnyDVD.rar tagged as not-a-virus:Tool.Win32.TPE.a. No Action Taken.
Thu Jul 14 10:58:50 2005 => File I:\D\Trax Ex\TraXEx21_crack.EXE tagged as not-a-virus:CrackTool.Win32.AssasinPatch. No Action Taken.
Thu Jul 14 11:06:21 2005 => File I:\Programme\PocketDVD\Tools\shutdown.exe tagged as not-a-virus:Tool.Win32.Shutdown. No Action Taken.
Thu Jul 14 11:06:43 2005 => File I:\Programme\PocketDVD.v1.1.WinALL.Retail-www.ServerTT.CoM\Setup\pd11-ppc.exe tagged as not-a-virus:Tool.Win32.Shutdown. No Action Taken.

hier noch von Hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 12:51:08, on 14.07.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
D:\Proggies\Norton\ISSVC.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Programme\Analog Devices\SoundMAX\Smax4.exe
C:\Programme\Java\jre1.5.0_01\bin\jusched.exe
D:\Proggies\AOLPRI~1\AOLSP Scheduler.exe
C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLDial.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
C:\WINDOWS\gtwatch.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe
C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLAcsd.exe
C:\Programme\Virenschutz\AVKService.exe
C:\Programme\Virenschutz\AVKWCtl.exe
C:\WINDOWS\twain_32\S12U12K\WATCH.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
D:\Proggies\Norton\Norton AntiVirus\navapsvc.exe
C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programme\AOL 9.0\waol.exe
C:\Programme\AOL 9.0\shellmon.exe
C:\Programme\Gemeinsame Dateien\Aol\aoltpspd.exe
C:\Programme\Messenger\msmsgs.exe
D:\Proggies\HIjackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.###/e60/suche/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://'##/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.###/e60/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer bereitgestellt von AOL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Proggies\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\Proggies\FlashGet\jccatch.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - D:\Proggies\Norton\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - D:\Proggies\Norton\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\Proggies\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Programme\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [AOL Spyware Protection] "D:\Proggies\AOLPRI~1\AOLSP Scheduler.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Programme\Home Cinema\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AOLDialer] C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Gtwatch] C:\WINDOWS\gtwatch.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [hZgfg] C:\WINDOWS\fogevfav.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCMService] "C:\Programme\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MMTray] C:\Programme\Musicmatch\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Programme\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [IST Service] C:\Programme\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [dit] dit.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Proggies\Deamon\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Ad-aware] "C:\PROGRA~1\LAVASOFT\AD-AWA~1\Ad-aware.exe" +c
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - Global Startup: AOL 9.0 Tray-Symbol.lnk = C:\Programme\AOL 9.0\aoltray.exe
O4 - Global Startup: Watch.lnk = C:\WINDOWS\twain_32\S12U12K\WATCH.exe
O4 - Global Startup: Microsoft Office.lnk = D:\Programme\Office\Office10\OSA.EXE
O8 - Extra context menu item: Alles mit FlashGet laden - D:\Proggies\FlashGet\jc_all.htm
O8 - Extra context menu item: Mit FlashGet laden - D:\Proggies\FlashGet\jc_link.htm
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://D:\PROGRA~1\Office\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: SchnapperPro - {D6243B39-211B-440E-B4C5-26D2A579CAC8} - I:\Programme\Ebay Schnapper Pro v1.5.50\SchnapperPro.exe (file missing)
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Proggies\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\Proggies\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.aol.de/e60/
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.de/computercheckup/qdiagcc.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/acti..._v1-0-3-24.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/S.../bin/cabsa.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C34E4A1C-2536-4660-BF84-C45A3335BC6D}: NameServer = 205.188.146.145
O17 - HKLM\System\CCS\Services\Tcpip\..\{CC7E4590-739D-450B-BE37-2F9F79B219BB}: NameServer = 205.188.146.145
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL Privacy Protection Service (AOLService) - Unknown owner - D:\Proggies\AOL Privacy Protection\\aolserv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVK Service (AVKService) - Unknown owner - C:\Programme\Virenschutz\AVKService.exe
O23 - Service: G DATA Virenschutz Wächter (AVKWCtl) - Unknown owner - C:\Programme\Virenschutz\AVKWCtl.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - D:\Proggies\Norton\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - D:\Proggies\Norton\Norton AntiVirus\navapsvc.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - Unknown owner - I:\Programme\SiSoftware Sandra Lite 2005.SR1\RpcDataSrv.exe (file missing)
O23 - Service: Sandra Service (SandraTheSrv) - Unknown owner - I:\Programme\SiSoftware Sandra Lite 2005.SR1\RpcSandraSrv.exe (file missing)
O23 - Service: SAVScan - Symantec Corporation - D:\Proggies\Norton\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe