Brauche Hilfe und Erklärungen zur Beseitigung!

Ash8

Hier mein Logfile, Infos zu meinem Problem unter folgendem Link:
http://www.trojaner-board.com/showth...606#post156606

Habe keine Pornoseiten besucht, auch wenn ne Menge davon drin steht, wie geht das ???

+++++++

Logfile of HijackThis v1.99.1
Scan saved at 18:17:16, on 31.07.2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\Programme\Norton AntiVirus\navapsvc.exe
C:\Programme\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\Programme\Norton AntiVirus\SAVScan.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\Explorer.EXE
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Programme\Winamp\winampa.exe
C:\WINNT\system32\spool\DRIVERS\W32X86\2\fppdis1.exe
C:\Programme\QuickTime\qttask.exe
C:\Programme\Trillian\trillian.exe
C:\T-Online\T-Online_Software_5\Basis-Software\Basis2\kernel.exe
C:\T-Online\T-Online_Software_5\Basis-Software\Basis2\sc_watch.exe
C:\T-Online\T-ONLI~1\BASIS-~1\Basis2\PROFIL~1.EXE
C:\Programme\Steganos AntiSpyware 7\aspy7.exe
C:\WINNT\system32\ntvdm.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
D:\Eigene Dateien\hijackthis_199\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = ht*p://www.t-online.de/software/ie401/search.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ht*p://wer-mit-wem.webhop.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w*w.ebay.de
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://w*w.ebay.de
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer von T-Online
O1 - Hosts: 1347246825 0-0sex.com
O1 - Hosts: 1347246825 w*w.0-0sex.com
O1 - Hosts: 1347246825 1-800-pussy.com
O1 - Hosts: 1347246825 w*w.1-800-pussy.com
O1 - Hosts: 1347246825 1000galeriasporno.com.ar
O1 - Hosts: 1347246825 w*w.1000galeriasporno.com.ar
O1 - Hosts: 1347246825 1000hornysluts.com
O1 - Hosts: 1347246825 w*w.1000hornysluts.com
O1 - Hosts: 1347246825 1000pix.com
O1 - Hosts: 1347246825 w*w.1000pix.com
O1 - Hosts: 1347246825 1001movies.com
O1 - Hosts: 1347246825 w*w.1001movies.com
O1 - Hosts: 1347246825 100orgasms.com
O1 - Hosts: 1347246825 w*w.100orgasms.com
O1 - Hosts: 1347246825 100pour100sexe.com
O1 - Hosts: 1347246825 w*w.100pour100sexe.com
O1 - Hosts: 1347246825 101cumlovers.com
O1 - Hosts: 1347246825 w*w.101cumlovers.com
O1 - Hosts: 1347246825 101pornstars.com
O1 - Hosts: 1347246825 w*w.101pornstars.com
O1 - Hosts: 1347246825 101stars.com
O1 - Hosts: 1347246825 w*w.101stars.com
O1 - Hosts: 1347246825 101teen.com
O1 - Hosts: 1347246825 w*w.101teen.com
O1 - Hosts: 1347246825 11shemales.com
O1 - Hosts: 1347246825 w*w.11shemales.com
O1 - Hosts: 1347246825 121av.com
O1 - Hosts: 1347246825 w*w.121av.com
O1 - Hosts: 1347246825 18enne.com
O1 - Hosts: 1347246825 w*w.18enne.com
O1 - Hosts: 1347246825 18hentai.com
O1 - Hosts: 1347246825 w*w.18hentai.com
O1 - Hosts: 1347246825 18hut.com
O1 - Hosts: 1347246825 w*w.18hut.com
O1 - Hosts: 1347246825 18moviethumbs.com
O1 - Hosts: 1347246825 w*w.18moviethumbs.com
O1 - Hosts: 1347246825 18plusgalleries.com
O1 - Hosts: 1347246825 w*w.18plusgalleries.com
O1 - Hosts: 1347246825 18post.com
O1 - Hosts: 1347246825 w*w.18post.com
O1 - Hosts: 1347246825 18sexbox.com
O1 - Hosts: 1347246825 w*w.18sexbox.com
O1 - Hosts: 1347246825 18tease.com
O1 - Hosts: 1347246825 w*w.18tease.com
O1 - Hosts: 1347246825 18to19.com
O1 - Hosts: 1347246825 w*w.18to19.com
O1 - Hosts: 1347246825 18turnwhores.com
O1 - Hosts: 1347246825 w*w.18turnwhores.com
O1 - Hosts: 1347246825 18yearoldpussy.com
O1 - Hosts: 1347246825 w*w.18yearoldpussy.com
O1 - Hosts: 1347246825 18young.com
O1 - Hosts: 1347246825 w*w.18young.com
O1 - Hosts: 1347246825 1bigthumbup.com
O1 - Hosts: 1347246825 w*w.1bigthumbup.com
O1 - Hosts: 1347246825 1free-porn-finder.com
O1 - Hosts: 1347246825 w*w.1free-porn-finder.com
O1 - Hosts: 1347246825 1freepicsgallery.com
O1 - Hosts: 1347246825 w*w.1freepicsgallery.com
O1 - Hosts: 1347246825 1hardcoreporn.com
O1 - Hosts: 1347246825 w*w.1hardcoreporn.com
O1 - Hosts: 1347246825 1on3sex.com
O1 - Hosts: 1347246825 w*w.1on3sex.com
O1 - Hosts: 1347246825 1sexlinks.com
O1 - Hosts: 1347246825 w*w.1sexlinks.com
O1 - Hosts: 1347246825 1stchoicepornlinks.com
O1 - Hosts: 1347246825 w*w.1stchoicepornlinks.com
O1 - Hosts: 1347246825 1stmovieclub.net
O1 - Hosts: 1347246825 w*w.1stmovieclub.net
O1 - Hosts: 1347246825 2000nakedgirls.com
O1 - Hosts: 1347246825 w*w.2000nakedgirls.com
O1 - Hosts: 1347246825 24-7balckbooty.com
O1 - Hosts: 1347246825 w*w.24-7balckbooty.com
O1 - Hosts: 1347246825 247freeassmovies.com
O1 - Hosts: 1347246825 w*w.247freeassmovies.com
O1 - Hosts: 1347246825 2hotpictures.com
O1 - Hosts: 1347246825 w*w.2hotpictures.com
O1 - Hosts: 1347246825 2hotvideos.com
O1 - Hosts: 1347246825 w*w.2hotvideos.com
O1 - Hosts: 1347246825 2jizz.com
O1 - Hosts: 1347246825 w*w.2jizz.com
O1 - Hosts: 1347246825 2naughty.net
O1 - Hosts: 1347246825 w*w.2naughty.net
O1 - Hosts: 1347246825 2so2.com
O1 - Hosts: 1347246825 w*w.2so2.com
O1 - Hosts: 1347246825 2teens.net
O1 - Hosts: 1347246825 w*w.2teens.net
O1 - Hosts: 1347246825 30galleries.com
O1 - Hosts: 1347246825 w*w.30galleries.com
O1 - Hosts: 1347246825 310exotics.com
O1 - Hosts: 1347246825 w*w.310exotics.com
O1 - Hosts: 1347246825 345blastave.com
O1 - Hosts: 1347246825 w*w.345blastave.com
O1 - Hosts: 1347246825 3mpeg4u.us
O1 - Hosts: 1347246825 w*w.3mpeg4u.us
O1 - Hosts: 1347246825 3pic.com
O1 - Hosts: 1347246825 w*w.3pic.com
O1 - Hosts: 1347246825 3pixxx.com
O1 - Hosts: 1347246825 w*w.3pixxx.com
O1 - Hosts: 1347246825 3xtrem.com
O1 - Hosts: 1347246825 w*w.3xtrem.com
O1 - Hosts: 1347246825 40galleries.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {15ACE85C-0BB1-42d1-9E32-07EB0506675A} - C:\WINNT\system32\lecok.dll (file missing)
O2 - BHO: (no name) - {24436341-CBF4-B783-264F-69B39E24B1C2} - C:\WINNT\system32\gibiaeo.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programme\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: @msdxmLC.dll,-1@1031,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programme\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Programme\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [USSShReg] C:\PROGRA~1\ULEADS~1\ULEADP~1\SSaver\Ussshreg.exe /r
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] C:\Programme\Gemeinsame Dateien\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [pdfFactory Dispatcher v1] C:\WINNT\system32\spool\DRIVERS\W32X86\2\fppdis1.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [useful-soft] C:\WINNT\system32\svchst.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AntiSpyware7] "C:\Programme\Steganos AntiSpyware 7\aspy7.exe" /0
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Trillian.lnk = C:\Programme\Trillian\trillian.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Programme\AIM95\aim.exe
O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{F74E14CF-B2D0-4B2E-8FFC-67C39745B4EA}: NameServer = 217.237.150.33 217.237.150.141
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - C:\Programme\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Programme\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Programme\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe