Hallo
Ich hab auch ein Problem, mit Internet seiten, die sich einfach so öffnen. Ich hab schon mit mehreren Programmen (Avir, S&D) versucht das Problem zu beheben - allerdings vergeblich.
Würde mich freuen wenn ihr mir weiterhelfen könntet. Hier mein log (hoffe ich hab alles richtig gemacht) :

Logfile of HijackThis v1.99.1
Scan saved at 18:09:01, on 14.11.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE
C:\Programme\AVPersonal\AVWUPSRV.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\AVPersonal\AVGNT.EXE
C:\Programme\Java\jre1.5.0_04\bin\jusched.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\Programme\iPod\bin\iPodService.exe
C:\Programme\Gemeinsame Dateien\Windows\services32.exe
C:\Programme\Messenger\MSMSGS.EXE
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programme\FRITZ!DSL\FritzDsl.exe
C:\Programme\ICQLite\ICQLite.exe
C:\Programme\Valve\Steam\Steam.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\_Paul\Eigene Dateien\Hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w*w.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
F3 - REG:win.ini: run=
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [anvshell] anvshell.exe
O4 - HKLM\..\Run: [LiveNote] livenote.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\Run: [iexplore.exe] C:\Programme\Internet Explorer\iexplore.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [MsgCenterExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\RealOneMessageCenter.exe" -osboot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [kyxekn] C:\WINDOWS\System32\davepc.exe r
O4 - HKLM\..\Run: [AVSCHED32] C:\Programme\AVPersonal\AVSched32.EXE /min
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -minimize
O4 - HKCU\..\Run: [Intel system tool] C:\WINDOWS\System32\hookdump.exe
O4 - HKCU\..\Run: [services32] C:\Programme\Gemeinsame Dateien\Windows\mc-58-12-0000117.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\MSMSGS.EXE" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot
O4 - Startup: FRITZ!web DSL.lnk = C:\Programme\FRITZ!DSL\FritzDsl.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - h**p://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://h**p://update.microsoft.com/w...?1122922584437
O17 - HKLM\System\CCS\Services\Tcpip\..\{08BB6762-FAA7-4A61-956B-329F1390B475}: NameServer = 192.168.122.252,192.168.122.253
O17 - HKLM\System\CS1\Services\Tcpip\..\{08BB6762-FAA7-4A61-956B-329F1390B475}: NameServer = 192.168.122.252,192.168.122.253
O17 - HKLM\System\CS2\Services\Tcpip\..\{08BB6762-FAA7-4A61-956B-329F1390B475}: NameServer = 192.168.122.252,192.168.122.253
O20 - Winlogon Notify: Telephony - C:\WINDOWS\system32\j0j6la1s1d.dll
O21 - SSODL: WCKzdpPLYaJD - {14C7D4AB-BE6D-7E01-FAC7-CA4653F9ED27} - C:\WINDOWS\System32\mne.dll (file missing)
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

vielen Danke

HI,
das ist kein Wunder. Du hast einiges drauf. Um festzustellen, ob es sich rentiert, bzw. ob es sinnvoll ist, zu reparieren oder ob Neuaufsetzen des Systems die bessere Alternative ist, solltest du mal einen eScan durchführen. Poste bitte das Ergebnis der "find.bat".
cacatoa

Hab escan durchlaufen lassen. Jetzt weiß ich nur nicht wo ich das Ergebnis der "find.bat" finde

Ok hat sich erledigt Ich hoffe es ist das Richtige:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "infected"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mon Nov 14 18:35:22 2005 => System found infected with adware.softomate Spyware/Adware ({77fbf9b8-1d37-4ff2-9ced-192d8e3aba6f})! Action taken: No Action Taken.
Mon Nov 14 18:35:22 2005 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken.
Mon Nov 14 18:35:22 2005 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken.
Mon Nov 14 18:35:22 2005 => System found infected with alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken.
Mon Nov 14 18:35:24 2005 => System found infected with whenu.savenow Spyware/Adware (cmdlineext02.dll)! Action taken: No Action Taken.
Mon Nov 14 18:35:24 2005 => System found infected with whenu.savenow Spyware/Adware (war3_install.exe)! Action taken: No Action Taken.
Mon Nov 14 18:35:27 2005 => System found infected with startsurfing Spyware/Adware (config.dat)! Action taken: No Action Taken.
Mon Nov 14 18:35:28 2005 => System found infected with whenu.savenow Spyware/Adware (cmdlineext02.dll)! Action taken: No Action Taken.
Mon Nov 14 18:35:28 2005 => System found infected with whenu.savenow Spyware/Adware (war3_install.exe)! Action taken: No Action Taken.
Mon Nov 14 18:35:28 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken.
Mon Nov 14 18:35:28 2005 => System found infected with whenu.savenow Spyware/Adware (adsend[1].js)! Action taken: No Action Taken.
Mon Nov 14 18:35:28 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken.
Mon Nov 14 18:35:28 2005 => System found infected with whenu.savenow Spyware/Adware (adsend[1].js)! Action taken: No Action Taken.
Mon Nov 14 18:35:29 2005 => System found infected with altnetbde Spyware/Adware (adm.exe)! Action taken: No Action Taken.
Mon Nov 14 18:35:29 2005 => System found infected with altnetbde Spyware/Adware (altnet signing module.exe)! Action taken: No Action Taken.
Mon Nov 14 18:35:29 2005 => System found infected with altnetbde Spyware/Adware (adm.exe)! Action taken: No Action Taken.
Mon Nov 14 18:35:29 2005 => System found infected with altnetbde Spyware/Adware (altnet signing module.exe)! Action taken: No Action Taken.
Mon Nov 14 18:45:46 2005 => Scanning Folder: C:\Programme\AVPersonal\INFECTED\*.*
Mon Nov 14 19:16:23 2005 => Total Disinfected Files: 0
Mon Nov 14 19:17:06 2005 => Total Disinfected Files: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "tagged"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mon Nov 14 18:34:18 2005 => File C:\PROGRA~1\GEMEIN~1\Windows\SERVIC~1.EXE tagged as "not-a-virus:AdWare.Win32.Maxifiles.h". Action Taken: No Action Taken.
Mon Nov 14 18:34:19 2005 => File C:\WINDOWS\system32\guard.tmp tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:34:28 2005 => File C:\WINDOWS\system32\mcc42u.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:28 2005 => File C:\WINDOWS\system32\sxi_ci.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:28 2005 => File C:\WINDOWS\system32\omeaut32.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:28 2005 => File C:\WINDOWS\system32\kz1394.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:28 2005 => File C:\WINDOWS\system32\csodm.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:28 2005 => File C:\WINDOWS\system32\mer2cenu.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:28 2005 => File C:\WINDOWS\system32\izv6mon.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:28 2005 => File C:\WINDOWS\system32\mcgina.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:29 2005 => File C:\WINDOWS\system32\ump10.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:29 2005 => File C:\WINDOWS\system32\wxadss.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:29 2005 => File C:\WINDOWS\system32\IF41_QCX.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:29 2005 => File C:\WINDOWS\system32\ipuv_32.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:29 2005 => File C:\WINDOWS\system32\tdpmib.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:34:32 2005 => File C:\PROGRA~1\GEMEIN~1\Windows\MC-58-~1.EXE tagged as "not-a-virus:AdWare.Win32.Maxifiles.h". Action Taken: No Action Taken.
Mon Nov 14 18:35:44 2005 => File C:\WINDOWS\icont.exe tagged as "not-a-virus:AdWare.Win32.AdURL.c". Action Taken: No Action Taken.
Mon Nov 14 18:35:46 2005 => File C:\WINDOWS\tchwhe.exe tagged as "not-a-virus:AdWare.Win32.BetterInternet.ao". Action Taken: No Action Taken.
Mon Nov 14 18:35:48 2005 => File C:\WINDOWS\System32\akifile.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:35:50 2005 => File C:\WINDOWS\System32\auferror.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:35:51 2005 => File C:\WINDOWS\System32\badispl.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:35:52 2005 => File C:\WINDOWS\System32\BNGSRC32.DLL tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:35:53 2005 => File C:\WINDOWS\System32\buowselc.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:35:53 2005 => File C:\WINDOWS\System32\bYtmeter.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:35:54 2005 => File C:\WINDOWS\System32\cedial32.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:35:55 2005 => File C:\WINDOWS\System32\cmadmin.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:35:56 2005 => File C:\WINDOWS\System32\cmmrepl.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:35:58 2005 => File C:\WINDOWS\System32\cotdll.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:35:58 2005 => File C:\WINDOWS\System32\cql3d32.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:35:59 2005 => File C:\WINDOWS\System32\cvyptdll.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:05 2005 => File C:\WINDOWS\System32\dIdx9_24.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:36:07 2005 => File C:\WINDOWS\System32\dnlo0133e.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:36:08 2005 => File C:\WINDOWS\System32\dPtaclen.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:36:09 2005 => File C:\WINDOWS\System32\dwlayx.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:10 2005 => File C:\WINDOWS\System32\dYd8.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:13 2005 => File C:\WINDOWS\System32\g2lm0c31ef.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:13 2005 => File C:\WINDOWS\System32\guard.tmp tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:36:14 2005 => File C:\WINDOWS\System32\h2n00c5mef.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:36:24 2005 => File C:\WINDOWS\System32\krdgr1.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:25 2005 => File C:\WINDOWS\System32\llnkinfo.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:27 2005 => File C:\WINDOWS\System32\mavbvm50.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:27 2005 => File C:\WINDOWS\System32\mcc42loc.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:29 2005 => File C:\WINDOWS\System32\mivcrt20.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:31 2005 => File C:\WINDOWS\System32\mrcomput.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:40 2005 => File C:\WINDOWS\System32\mvang.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:42 2005 => File C:\WINDOWS\System32\nlmctray.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:36:51 2005 => File C:\WINDOWS\System32\nwptools.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:36:59 2005 => File C:\WINDOWS\System32\rocns4.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:36:59 2005 => File C:\WINDOWS\System32\rwpsnd.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:37:00 2005 => File C:\WINDOWS\System32\sadocvw.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:37:03 2005 => File C:\WINDOWS\System32\silwapi.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:37:05 2005 => File C:\WINDOWS\System32\ssclogon.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:37:07 2005 => File C:\WINDOWS\System32\sznike.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 18:37:21 2005 => File C:\WINDOWS\System32\wrhatm.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 18:56:48 2005 => File C:\Programme\Gemeinsame Dateien\InetGet\mc-58-12-0000117.exe tagged as "not-a-virus:AdWare.Win32.Maxifiles.h". Action Taken: No Action Taken.
Mon Nov 14 18:57:46 2005 => File C:\Programme\Gemeinsame Dateien\Windows\services32.exe tagged as "not-a-virus:AdWare.Win32.Maxifiles.h". Action Taken: No Action Taken.
Mon Nov 14 19:07:13 2005 => File C:\WINDOWS\icont.exe tagged as "not-a-virus:AdWare.Win32.AdURL.c". Action Taken: No Action Taken.
Mon Nov 14 19:11:12 2005 => File C:\WINDOWS\system32\akifile.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:11:15 2005 => File C:\WINDOWS\system32\auferror.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:11:16 2005 => File C:\WINDOWS\system32\badispl.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:11:17 2005 => File C:\WINDOWS\system32\BNGSRC32.DLL tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 19:11:18 2005 => File C:\WINDOWS\system32\buowselc.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 19:11:18 2005 => File C:\WINDOWS\system32\bYtmeter.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:11:26 2005 => File C:\WINDOWS\system32\cedial32.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:11:29 2005 => File C:\WINDOWS\system32\cmadmin.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:11:29 2005 => File C:\WINDOWS\system32\cmmrepl.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:11:34 2005 => File C:\WINDOWS\system32\cotdll.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:11:35 2005 => File C:\WINDOWS\system32\cql3d32.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:11:36 2005 => File C:\WINDOWS\system32\cvyptdll.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:11:42 2005 => File C:\WINDOWS\system32\dIdx9_24.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 19:13:53 2005 => File C:\WINDOWS\system32\dnlo0133e.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 19:13:54 2005 => File C:\WINDOWS\system32\dPtaclen.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 19:14:06 2005 => File C:\WINDOWS\system32\dwlayx.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:14:09 2005 => File C:\WINDOWS\system32\dYd8.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:14:13 2005 => File C:\WINDOWS\system32\g2lm0c31ef.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:14:14 2005 => File C:\WINDOWS\system32\guard.tmp tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 19:14:14 2005 => File C:\WINDOWS\system32\h2n00c5mef.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 19:14:26 2005 => File C:\WINDOWS\system32\krdgr1.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:14:28 2005 => File C:\WINDOWS\system32\llnkinfo.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:14:30 2005 => File C:\WINDOWS\system32\mavbvm50.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:14:30 2005 => File C:\WINDOWS\system32\mcc42loc.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:14:33 2005 => File C:\WINDOWS\system32\mivcrt20.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:14:36 2005 => File C:\WINDOWS\system32\mrcomput.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:14:49 2005 => File C:\WINDOWS\system32\mvang.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:14:52 2005 => File C:\WINDOWS\system32\nlmctray.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:15:02 2005 => File C:\WINDOWS\system32\nwptools.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 19:15:31 2005 => File C:\WINDOWS\system32\rocns4.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 19:15:33 2005 => File C:\WINDOWS\system32\rwpsnd.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 19:15:33 2005 => File C:\WINDOWS\system32\sadocvw.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:15:38 2005 => File C:\WINDOWS\system32\silwapi.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:15:44 2005 => File C:\WINDOWS\system32\ssclogon.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:15:46 2005 => File C:\WINDOWS\system32\sznike.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ab". Action Taken: No Action Taken.
Mon Nov 14 19:16:09 2005 => File C:\WINDOWS\system32\wrhatm.dll tagged as "not-a-virus:AdWare.Win32.Look2Me.ag". Action Taken: No Action Taken.
Mon Nov 14 19:16:12 2005 => File C:\WINDOWS\tchwhe.exe tagged as "not-a-virus:AdWare.Win32.BetterInternet.ao". Action Taken: No Action Taken.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "offending"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mon Nov 14 18:35:22 2005 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uninstall\limewire !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKLM\Software\magnet\handlers\limewire !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKLM\Software\kazaa !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKLM\Software\limewire !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKCU\Software\kazaa !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKCU\Software\maxthon !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKCU\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\altnet !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKCU\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\antivirusgold !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKCU\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\kazaa !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKCU\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\limewire !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\altnet !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\antivirusgold !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\kazaa !!!
Mon Nov 14 18:35:23 2005 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\limewire !!!
Mon Nov 14 18:35:24 2005 => Offending Folder found: C:\Programme\limewire
Mon Nov 14 18:35:24 2005 => Offending file found: C:\DOKUME~1\_Paul\LOKALE~1\Temp\cmdlineext02.dll
Mon Nov 14 18:35:24 2005 => Offending file found: C:\DOKUME~1\_Paul\LOKALE~1\Temp\war3_install.exe
Mon Nov 14 18:35:27 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Eigene Dateien\stronghold 2\config.dat
Mon Nov 14 18:35:27 2005 => Offending Folder found: C:\Dokumente und Einstellungen\_Paul\Startmenü\programme\limewire
Mon Nov 14 18:35:27 2005 => Offending Folder found: C:\Dokumente und Einstellungen\_Paul\Startmenü\Programme\limewire
Mon Nov 14 18:35:28 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Lokale Einstellungen\temp\cmdlineext02.dll
Mon Nov 14 18:35:28 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Lokale Einstellungen\temp\war3_install.exe
Mon Nov 14 18:35:28 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Lokale Einstellungen\temporary internet files\content.ie5\w5unk12b\adswrapper[1].js
Mon Nov 14 18:35:28 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Lokale Einstellungen\temporary internet files\content.ie5\x7hra2l4\adsend[1].js
Mon Nov 14 18:35:28 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Lokale Einstellungen\Temporary Internet Files\content.ie5\w5unk12b\adswrapper[1].js
Mon Nov 14 18:35:28 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Lokale Einstellungen\Temporary Internet Files\content.ie5\x7hra2l4\adsend[1].js
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Statistiken:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Mon Nov 14 19:16:23 2005 => Total Virus(es) Found: 128
Mon Nov 14 19:17:06 2005 => Total Virus(es) Found: 128
Mon Nov 14 19:16:23 2005 => Total Errors: 311
Mon Nov 14 19:17:06 2005 => Total Errors: 311
Mon Nov 14 19:16:23 2005 => Time Elapsed: 00:42:27
Mon Nov 14 19:17:06 2005 => Time Elapsed: 00:42:27
Mon Nov 14 19:16:23 2005 => Total Objects Scanned: 77514
Mon Nov 14 19:17:06 2005 => Total Objects Scanned: 77514
Mon Nov 14 19:16:23 2005 => Virus Database Date: 2005/11/13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~ © Haui ;-) ~~~~~~~
~~~~~~~ Dank an Cidre ~~~~~~~

Hi, bitte erst mal so verfahren.
Dann sehen wir weiter.
cacatoa

So Hab alles nach den Anweisungen erfüllt. Besten Dank die Internetseiten öffnen sich jetzt nich mehr.

Tja, aber fertig sind wir noch lange nicht. Lade dir Spybot S&D 1.4 sowie AdAware SE runter, update beide und lasse sie laufen und löschen, was sie finden.
Weiterhin runterladen: clearprog und clicke auf "alles löschen". Dann sind deine temp internet-files weg.
Dann meldest dich wieder.
cacatoa

So hab alles gemacht. Bei AdAware: hab ich nach dem bemerkt, dass standardmäßig ein smart Scan ist. Ich habe dann einen Full scan gestartet und sage und schreibe 20 Dateine sind removed worden.

Hi,
jetzt wär noch ein zweiter eScan interessant.
cacatoa

Sorry das es so lang gedauert hat aber ich Mach mich gleich an die arbeit ^^

So hier mein escan:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "infected"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Fri Nov 18 14:29:59 2005 => System found infected with bearshare Spyware/Adware ({558ec983-bedb-9168-b2de-31dbf0ee543e})! Action taken: No Action Taken.
Fri Nov 18 14:30:00 2005 => System found infected with adware.softomate Spyware/Adware ({77fbf9b8-1d37-4ff2-9ced-192d8e3aba6f})! Action taken: No Action Taken.
Fri Nov 18 14:30:00 2005 => System found infected with bearshare Spyware/Adware ({5f95e1af-2620-4f15-bdf9-7fdce4607e17})! Action taken: No Action Taken.
Fri Nov 18 14:30:00 2005 => System found infected with bearshare Spyware/Adware ({905d0df2-3a0a-4d94-853c-54a12a745905})! Action taken: No Action Taken.
Fri Nov 18 14:30:04 2005 => System found infected with bearshare Spyware/Adware (bearshare.lnk)! Action taken: No Action Taken.
Fri Nov 18 14:30:06 2005 => System found infected with startsurfing Spyware/Adware (config.dat)! Action taken: No Action Taken.
Fri Nov 18 14:30:07 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken.
Fri Nov 18 14:30:07 2005 => System found infected with whenu.savenow Spyware/Adware (adsend[1].js)! Action taken: No Action Taken.
Fri Nov 18 14:30:08 2005 => System found infected with whenu.savenow Spyware/Adware (adswrapper[1].js)! Action taken: No Action Taken.
Fri Nov 18 14:30:08 2005 => System found infected with whenu.savenow Spyware/Adware (adsend[1].js)! Action taken: No Action Taken.
Fri Nov 18 14:30:08 2005 => System found infected with bearshare Spyware/Adware (bearshare.lnk)! Action taken: No Action Taken.
Fri Nov 18 14:30:08 2005 => System found infected with bearshare Spyware/Adware (bearshare.lnk)! Action taken: No Action Taken.
Fri Nov 18 14:36:58 2005 => Scanning Folder: C:\Programme\AVPersonal\INFECTED\*.*
Fri Nov 18 15:08:05 2005 => Total Disinfected Files: 0
Fri Nov 18 15:08:12 2005 => Total Disinfected Files: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "tagged"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Funde für "offending"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Fri Nov 18 14:30:00 2005 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uninstall\bearshare !!!
Fri Nov 18 14:30:00 2005 => Offending Key found: HKCU\appevents\eventlabels\bearsharechatnotifymsg !!!
Fri Nov 18 14:30:00 2005 => Offending Key found: HKCU\appevents\schemes\apps\bearshare !!!
Fri Nov 18 14:30:00 2005 => Offending Key found: HKLM\Software\magnet\handlers\bearshare !!!
Fri Nov 18 14:30:00 2005 => Offending Key found: HKLM\Software\magnet\handlers\limewire !!!
Fri Nov 18 14:30:00 2005 => Offending Key found: HKLM\Software\bearshare !!!
Fri Nov 18 14:30:00 2005 => Offending Key found: HKLM\Software\kazaa !!!
Fri Nov 18 14:30:00 2005 => Offending Key found: HKCU\Software\kazaa !!!
Fri Nov 18 14:30:00 2005 => Offending Key found: HKCU\Software\maxthon !!!
Fri Nov 18 14:30:00 2005 => Offending Key found: HKCU\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\altnet !!!
Fri Nov 18 14:30:01 2005 => Offending Key found: HKCU\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\antivirusgold !!!
Fri Nov 18 14:30:01 2005 => Offending Key found: HKCU\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\kazaa !!!
Fri Nov 18 14:30:01 2005 => Offending Key found: HKCU\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\limewire !!!
Fri Nov 18 14:30:01 2005 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\altnet !!!
Fri Nov 18 14:30:01 2005 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\antivirusgold !!!
Fri Nov 18 14:30:01 2005 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\kazaa !!!
Fri Nov 18 14:30:01 2005 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\limewire !!!
Fri Nov 18 14:30:01 2005 => Offending value found in HKLM\Software\Licenses: {i56b3cf0d9ab991e1} !!!
Fri Nov 18 14:30:01 2005 => Offending value found in HKLM\Software\Licenses: {056b3cf0d9ab991e1} !!!
Fri Nov 18 14:30:02 2005 => Offending Folder found: C:\Programme\bearshare
Fri Nov 18 14:30:04 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Desktop\bearshare.lnk
Fri Nov 18 14:30:06 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Eigene Dateien\stronghold 2\config.dat
Fri Nov 18 14:30:07 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Lokale Einstellungen\temporary internet files\content.ie5\01ib4r2f\adswrapper[1].js
Fri Nov 18 14:30:07 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Lokale Einstellungen\temporary internet files\content.ie5\gto4no7z\adsend[1].js
Fri Nov 18 14:30:07 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Lokale Einstellungen\Temporary Internet Files\content.ie5\01ib4r2f\adswrapper[1].js
Fri Nov 18 14:30:08 2005 => Offending file found: C:\Dokumente und Einstellungen\_Paul\Lokale Einstellungen\Temporary Internet Files\content.ie5\gto4no7z\adsend[1].js
Fri Nov 18 14:30:08 2005 => Offending file found: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\bearshare.lnk
Fri Nov 18 14:30:08 2005 => Offending file found: C:\Dokumente und Einstellungen\All Users\Startmenü\programme\bearshare.lnk
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Statistiken:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Fri Nov 18 15:08:05 2005 => Total Virus(es) Found: 32
Fri Nov 18 15:08:12 2005 => Total Virus(es) Found: 32
Fri Nov 18 15:08:05 2005 => Total Errors: 327
Fri Nov 18 15:08:12 2005 => Total Errors: 327
Fri Nov 18 15:08:05 2005 => Time Elapsed: 00:39:15
Fri Nov 18 15:08:12 2005 => Time Elapsed: 00:39:15
Fri Nov 18 15:08:05 2005 => Total Objects Scanned: 71404
Fri Nov 18 15:08:12 2005 => Total Objects Scanned: 71404
Fri Nov 18 15:08:06 2005 => Virus Database Date: 2005/11/17
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~ © Haui ;-) ~~~~~~~
~~~~~~~ Dank an Cidre ~~~~~~~

HI,
lade Dir clearprog, clicke an "alles löschen", wenn fertig auf beenden.
Dann Regseeker herunterladen und die Registrierung säubern.
Dann sollte wieder alles im grünen Bereich sein.
cacatoa

Besten Dank hab alles gemacht. Vielen vielen dank für diese schnelle sachliche Hilfe. Ich find echt klasse, dass es so etwas wie das Board gibt. Eure Arbeit hier im Board istl sehr bewundernswert. Großes Lob an das Board deine Kollegen und dich !