Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Wo find ich die Anweisungen, um diese Sch... loszuwerden?

Wo find ich die Anweisungen, um diese Sch... loszuwerden?


Log-Analyse und Auswertung: Wo find ich die Anweisungen, um diese Sch... loszuwerden?

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 18.12.2005, 14:07   #1
Rabiator
 
Wo find ich die Anweisungen, um diese Sch... loszuwerden? - Standard

Wo find ich die Anweisungen, um diese Sch... loszuwerden?


Kukuk!

Muss bei nem Freud diesen Müll hier loswerden:


Code:
ATTFilter
[msvLclnt.dll] [0x00000468] 15/12/2005 22:15:19:078 :ModuleName = C:\bases_x\mwavscan.com
[msvLclnt.dll] [0x00000468] 15/12/2005 22:15:23:000 :Options Set by External applications mwavscan.com are 9896960 (0x970400):
[msvLclnt.dll] [0x00000468] 15/12/2005 22:15:23:000 :Mode :PACKED,ARCHIVED,CA,WARNINGS,MAILPLAIN
[msvLclnt.dll] [0x00000468] 15/12/2005 22:15:23:000 :TimeOut : ffffffff
[msvLclnt.dll] [0x00000468] 15/12/2005 22:15:23:000 :Priority : NORMAL
[msvLclnt.dll] [0x00000468] 15/12/2005 22:15:30:125 :VirusCount = 164615 Latest Date = 2005/12/12
[msvLclnt.dll] [0x000004dc] 15/12/2005 22:18:31:593 :[00000001] File C:\WINDOWS\kl.exe infected by Trojan-Spy.Win32.Small.dg
[msvLclnt.dll] [0x000004dc] 15/12/2005 22:18:33:250 :[00000001] File C:\WINDOWS\NDNuninstall4_50.exe infected by not-a-virus:AdWare.Win32.NewDotNet
[msvLclnt.dll] [0x000004dc] 15/12/2005 22:18:33:343 :[00000001] File C:\WINDOWS\NDNuninstall5_48.exe infected by not-a-virus:AdWare.Win32.NewDotNet
[msvLclnt.dll] [0x000004dc] 15/12/2005 22:18:33:390 :[00000001] File C:\WINDOWS\NDNuninstall5_64.exe infected by not-a-virus:AdWare.Win32.NewDotNet
[msvLclnt.dll] [0x000004dc] 15/12/2005 22:21:02:156 :[00000001] File C:\WINDOWS\system32\scmt16.exe infected by Trojan-Downloader.Win32.PassAlert.d
[msvLclnt.dll] [0x000004dc] 15/12/2005 22:43:24:343 :[00000001] File C:\Programme\Auktionator\Temp\text_999.tmp infected by Trojan-Spy.HTML.Bayfraud.cd
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:50:109 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\13E933E4 infected by Trojan-Downloader.Java.OpenStream.t
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:50:187 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\1C105672 infected by Trojan-Downloader.Java.OpenConnection.v
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:50:281 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\309930F5.zip infected by Trojan.Java.ClassLoader.c
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:50:390 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\310E12C9 infected by Email-Worm.Win32.Bagle.ba
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:50:531 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\340B07EE.tmp infected by Email-Worm.Win32.Sober.y
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:50:656 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\3565390A infected by not-a-virus:AdWare.Win32.Comet.a
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:50:718 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\372923A1 infected by Trojan.Java.ClassLoader.z
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:50:796 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\3A1F01AF infected by Email-Worm.Win32.NetSky.c
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:50:859 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\3C082E61 infected by Email-Worm.Win32.Bagle.cg
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:52:046 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\3C5A15A5.exe infected by Email-Worm.Win32.VB.an
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:52:156 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\3DE614E8 infected by Email-Worm.Win32.Sober.p
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:52:390 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\3E1D4122 infected by not-a-virus:AdWare.Win32.Cydoor
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:52:468 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\3E216B1E infected by not-a-virus:AdWare.Win32.Cydoor
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:52:562 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\3F6A1ED1 infected by Email-Worm.Win32.Mydoom.m
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:52:656 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\3FBA40C8.tmp infected by Trojan-Downloader.Win32.Agent.zm
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:52:765 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\43CD746B infected by Email-Worm.Win32.Sober.p
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:52:875 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\444421F9 infected by Email-Worm.Win32.Bagle.ba
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:53:062 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\457651AC infected by not-a-virus:AdWare.Win32.WindowEnhancer
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:53:265 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\4BDB4A6A infected by Email-Worm.Win32.Sober.p
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:53:375 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\4BFC5B7B infected by Email-Worm.Win32.Bagle.ba
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:53:484 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\4C196826 infected by Email-Worm.Win32.Sober.p
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:53:546 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\52E4447C.exe infected by Trojan-Downloader.Win32.Small.buh
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:53:609 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\52E4447C.txt infected by Trojan-Downloader.Win32.Small.buh
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:53:703 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\5BA24A7A infected by Email-Worm.Win32.Sober.p
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:53:765 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\5E5A1E01.exe infected by Trojan-Downloader.Win32.Small.buh
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:53:812 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\5E5A1E01.txt infected by Trojan-Downloader.Win32.Small.buh
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:53:906 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\60A4626A infected by Email-Worm.Win32.Bagle.ba
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:54:125 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\62D37940 infected by Email-Worm.Win32.Mydoom.i
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:54:187 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\660E1805 infected by Email-Worm.Win32.NetSky.c
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:54:281 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\699C60C3 infected by Email-Worm.Win32.Bagle.at
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:54:531 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\6BB47F51.exe infected by Trojan-Downloader.Win32.Small.buh
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:54:593 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\6BB47F51.txt infected by Trojan-Downloader.Win32.Small.buh
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:54:656 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\706016EA infected by Email-Worm.Win32.Bagle.bo
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:54:734 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\7171454B infected by Trojan.Java.ClassLoader.ak
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:16:54:843 :[00000001] File C:\Programme\Norton SystemWorks\Norton Antivirus\Quarantine\77CC75D3 infected by Email-Worm.Win32.Bagle.ba
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:58:50:062 :[00000001] File C:\WINDOWS\kl.exe infected by Trojan-Spy.Win32.Small.dg
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:59:16:203 :[00000001] File C:\WINDOWS\NDNuninstall4_50.exe infected by not-a-virus:AdWare.Win32.NewDotNet
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:59:16:281 :[00000001] File C:\WINDOWS\NDNuninstall5_48.exe infected by not-a-virus:AdWare.Win32.NewDotNet
[msvLclnt.dll] [0x000004dc] 15/12/2005 23:59:16:328 :[00000001] File C:\WINDOWS\NDNuninstall5_64.exe infected by not-a-virus:AdWare.Win32.NewDotNet
[msvLclnt.dll] [0x000004dc] 16/12/2005 00:10:59:828 :[00000001] File C:\WINDOWS\system32\scmt16.exe infected by Trojan-Downloader.Win32.PassAlert.d
[msvLclnt.dll] [0x000004dc] 16/12/2005 00:58:39:718 :VirusCount = 164615 Latest Date = 2005/12/12
[msvLclnt.dll] [0x00000468] 16/12/2005 07:43:45:562 :VirusCount = 164615 Latest Date = 2005/12/12
Vielleicht könnt ihr mir dabei helfen? Die Viren, die in der Quarantäne gefunden wurden sind jawohl net mehr aktiv... aber der andere Mist...

Merkmal des Compis: Blauer Desktop, nix mehr einstellbar... der Tip mit "Security" löschen unter "Anzeige - Einstellungen ..." funkt net weil er mir Security net anzeigt.

Vielen Dank schon im Voraus ür eure Hilfe!!

Rabi

Alt 18.12.2005, 15:51   #2
Rabiator
 
Wo find ich die Anweisungen, um diese Sch... loszuwerden? - Standard

Wo find ich die Anweisungen, um diese Sch... loszuwerden?


So, hier noch das HJT-LOG:

________________________________________________________

Logfile of HijackThis v1.99.1
Scan saved at 15:15:03, on 18.12.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://www.aldi.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://cgi3.ebay.de/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = h**p://securityresponse.symantec.com/region/de/avcenter/
O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - (no file)
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programme\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Programme\DAP\DAPIEBar.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: MyVisto - {FA5ED605-2156-4077-8BE1-DF41DF4D681D} - C:\Programme\Expert-Center\MyVisto\Toolbar\MyBar.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programme\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programme\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [PCMService] C:\Programme\Medion\PowerCinema\PCMService.exe
O4 - HKLM\..\Run: [Omnipage] C:\Programme\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [mmtask] C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Programme\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
O4 - HKLM\..\Run: [gcasServ] "D:\Tools\Antispyware\gcasServ.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKCU\..\Run: [AOLMIcon] C:\Programme\Gemeinsame Dateien\aolshare\AOLMIcon.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Programme\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WallWiz.lnk = C:\Programme\Primitive Itch\Wall Wizard 2.0\WallWiz.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Preispiraten 2.02 - {86DE8B3B-1EB7-4386-84BD-EBE94348A913} - C:\Programme\Preispiraten 2.0b\preispiraten2.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra button: MedionShop - {01E9CF82-AE9D-42BA-A629-B23D51A4B86B} - h**p://www.medionshop.de/ (file missing) (HKCU)
O12 - Plugin for .spop: C:\Programme\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=h**p://www.medion.com/
O15 - Trusted Zone: *.registration.sonystyle-europe.com (HKLM)
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - h**p://software-dl.real.com/3015f1433eba870abb18/netzip/RdxIE601_de.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - h**p://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093166041468
O18 - Protocol: bw+0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {798EDBEB-2729-4F74-9DF0-86B6843ED7B5} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - C:\Programme\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Programme\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Programme\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
O23 - Service: SAVScan - Symantec Corporation - C:\Programme\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

________________________________________________________

Ich hoffe mir kann jemand helfen. Habe übrigens die Dateien (die escan angezweifelt hat) alle gelöscht...
Falls hier noch irgenetwad gelöscht werden muss, bitte schreiben... falls net, bitte auch kurz Meldung geben

Greetz, Rabi
__________________
Antwort

Themen zu Wo find ich die Anweisungen, um diese Sch... loszuwerden?
.dll, 1.exe, antivirus, anzeige, c.exe, c:\windows, code, desktop, einstellungen, file, gen, helfen, hilfe!, infected, loswerden, löschen, norton, not-a-virus, programme, quara, quarantäne, security, system, system32, temp, timeout, viren, windows


« firefox wechselt seiten und macht popups | Bitte um Hilfe wegen infect »


Ähnliche Themen: Wo find ich die Anweisungen, um diese Sch... loszuwerden?


  1. OTL Fix Auswertung? - Virus! Benötige weitere anweisungen.
    Log-Analyse und Auswertung - 26.11.2013 (10)
  2. Was kann ich tun, um den ihavenet Trojaner loszuwerden?
    Plagegeister aller Art und deren Bekämpfung - 03.06.2013 (9)
  3. Bezahlen um Trojaner loszuwerden (OLT.exe wird erledigt)
    Log-Analyse und Auswertung - 19.02.2012 (7)
  4. windows recovery auch nach anweisungen nicht zu entfernen
    Plagegeister aller Art und deren Bekämpfung - 30.08.2011 (18)
  5. Firefox/ IExplorer -> Google verlinkt auf andere Seiten - load.exe anweisungen befolgt
    Log-Analyse und Auswertung - 26.01.2011 (5)
  6. TR/Dropper.Gen nicht loszuwerden
    Plagegeister aller Art und deren Bekämpfung - 07.07.2009 (1)
  7. "Your system is infected with virus"-PopUp..Brauch Hilfe von euch um ihn loszuwerden!
    Plagegeister aller Art und deren Bekämpfung - 06.07.2008 (28)
  8. Bin neu im PC-Wesen und habe "Virusschlacht". Wer kann mir helfen den loszuwerden?
    Plagegeister aller Art und deren Bekämpfung - 24.02.2008 (2)
  9. Bitte helft mir, meine Viren loszuwerden (Virtumonde, alcra, und andere)
    Log-Analyse und Auswertung - 16.11.2007 (19)
  10. Schwere Probleme die Trojaner/Adwares/Viren etc loszuwerden... HILFE!!!
    Plagegeister aller Art und deren Bekämpfung - 10.11.2007 (1)
  11. Keylogger eingefangen - einfach loszuwerden?
    Plagegeister aller Art und deren Bekämpfung - 21.08.2007 (14)
  12. brauche Hilfe eine Datei loszuwerden!
    Alles rund um Windows - 10.01.2006 (6)
  13. Ider.A.Rkit wer kann mir helfen diesen wüstling loszuwerden
    Log-Analyse und Auswertung - 01.01.2006 (1)
  14. Find.bat
    Plagegeister aller Art und deren Bekämpfung - 15.05.2005 (2)
  15. Lobddi32.exe - Plagegeist und einfach nich loszuwerden ;(
    Plagegeister aller Art und deren Bekämpfung - 21.12.2004 (3)
  16. Dailer totz genauer Profi-Anweisungen nur halbwegs entfernt!
    Plagegeister aller Art und deren Bekämpfung - 12.10.2004 (10)
  17. TR/Small.Dld.FO. nicht loszuwerden
    Plagegeister aller Art und deren Bekämpfung - 19.04.2004 (3)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Wo find ich die Anweisungen, um diese Sch... loszuwerden? - Kukuk! Muss bei nem Freud diesen Müll hier loswerden: Code: Alles auswählen Aufklappen ATTFilter [msvLclnt.dll] [0x00000468] 15/12/2005 22:15:19:078 :ModuleName = C:\bases_x\mwavscan.com [msvLclnt.dll] [0x00000468] 15/12/2005 22:15:23:000 :Options Set by External applications - Wo find ich die Anweisungen, um diese Sch... loszuwerden?...
Archiv
Du betrachtest: Wo find ich die Anweisungen, um diese Sch... loszuwerden? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129