Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Msn worm/trojaner/virus...

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 02.07.2007, 01:30   #1
Hiruma
 
Msn worm/trojaner/virus... - Standard

Msn worm/trojaner/virus...



hi leute,
hab heute morgen diese wie allen schon bekannt ist diese fotoalbum2007 über msn bekommen und seit dem versucht mein msn diese datei an anderen leuten weiterzuschicken... ich hab schon so einiges versucht, aber alles erfolglos, wie z.b. das mit der systemwiederherstellung habich versucht, hielt aber nur für paar stunden dann ginges wieder los, diese virus taucht immer wieder erneut auf und immer mit anderen namen, aber die 3 haupt viren bzw. trojaner sind diese hier:
HEUR/Malware
BDS/Bifrose.NU
TR/Crypt.ULPM.Gen


hier is meine logfile:
Logfile of HijackThis v1.99.1
Scan saved at 01:02:34, on 02.07.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
C:\Programme\Java\jre1.6.0_01\bin\jusched.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\Programme\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\VoiceMix\vent3.exe
C:\WINDOWS\explorer.exe
C:\Programme\MSN Messenger\usnsvc.exe
C:\Programme\ACE Mega CoDecS Pack\Media Player Classic\mplayerc.exe
C:\Programme\Winamp\winamp.exe
C:\Programme\MSN Messenger\msnmsgr.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\ZH\Desktop\HijackThis.exe

O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {6F4B0688-E36A-42BC-8ECD-A09799050644} - C:\WINDOWS\system32\p2pnetsi.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\PROGRA~1\MEINPO~1\MEINPO~1.DLL
O3 - Toolbar: Mein PONSline - {A6F74643-242A-A7A4-8DD5-AB40B9E25345} - C:\Programme\Mein PONSline\MeinPONSline.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O10 - Unknown file in Winsock LSP: c:\programme\hide my ip 2007\proxyfilter.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by117fd.bay117.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v5.cab
O16 - DPF: {CD995117-98E5-4169-9920-6C12D4C0B548} (HGPlugin9USA Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin9USA.cab
O16 - DPF: {DD583921-A9E9-4FBF-9266-8DC2AB5EA0AF} (HGPlugin10USA Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin10USA.cab
O18 - Protocol: bw+0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {15A04DCB-F078-4ABC-9BE8-1E759670807B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: system32 - {F1852327-4FB9-4BC0-8B90-3D9319F5031D} - sysprinters.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Programme\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe


danke.

Alt 02.07.2007, 13:18   #2
Löru
 
Msn worm/trojaner/virus... - Standard

Msn worm/trojaner/virus...



hey

Scanne doch einfach deinen PC im Abgesicherten modus...

und dann fixe noch folgender Prozess:

O21 - SSODL: system32 - {F1852327-4FB9-4BC0-8B90-3D9319F5031D} - sysprinters.dll (file missing)

Wenn du die Viren, Trojaner....was auch immer gekillt has...nimm bitte nicht fotoalben an, die kleiner als 20kb`S

Dein Pc würde es dir danken, wenn du ihn versuchst sauber zu halten..

gruss Löru
__________________


Alt 02.07.2007, 16:35   #3
Hiruma
 
Msn worm/trojaner/virus... - Standard

Msn worm/trojaner/virus...



ja war mein fehler... war zu neugierig -.-
aber ich hab deinen prozess nicht ganz verstanden, könntes du mir das ma bitte genauer erklären? vielen dank.
__________________

Antwort

Themen zu Msn worm/trojaner/virus...
ad-aware, adobe, antivir, avira, bho, browser, desktop, einstellungen, ellung, explorer, firefox, hijack, hijackthis, immer wieder, internet, internet explorer, logfile, mozilla, mozilla firefox, pdf, programme, rundll, senden, trojaner, unknown file in winsock lsp, viren, virus, windows, windows xp



Ähnliche Themen: Msn worm/trojaner/virus...


  1. AVG AV 2013 meldet Worm/VB.DYC, Worm/VB.DYA, Trojaner: Dropper.Generic.TEL im Verzeichniss \\WUALA_BY_LACIE\...\RECYCLED\...
    Plagegeister aller Art und deren Bekämpfung - 11.04.2013 (9)
  2. Neue version des Skype Virus (PUP.* + WORM.P2P usw)
    Log-Analyse und Auswertung - 15.10.2012 (11)
  3. Trojaner Exploit.Java.CVE-2011-3544.jh & Virus P2P-Worm.Win23.Palevo.nzl
    Plagegeister aller Art und deren Bekämpfung - 04.04.2012 (5)
  4. worm:win32/Phorpiex b virus!
    Log-Analyse und Auswertung - 27.12.2011 (28)
  5. WORM/Phorpiex.B.56 der Facebook-Virus? Und wie bekomme ich ihn weg?
    Log-Analyse und Auswertung - 04.11.2011 (15)
  6. MSN Virus IM-Worm.win32.agent.ve
    Plagegeister aller Art und deren Bekämpfung - 29.05.2010 (5)
  7. Worm Win32NetSky Virus? Vielen DANK
    Log-Analyse und Auswertung - 28.11.2009 (5)
  8. virus E-Mail Worm.win32.Luder.e
    Plagegeister aller Art und deren Bekämpfung - 20.11.2008 (0)
  9. Virus: worm.win32.netbooster
    Log-Analyse und Auswertung - 29.09.2008 (8)
  10. Virus/Worm bedroht Windows System
    Plagegeister aller Art und deren Bekämpfung - 02.08.2008 (0)
  11. Firewall - Windows Update - Worm - Virus?
    Log-Analyse und Auswertung - 29.10.2007 (27)
  12. Habe ein Virus: WORM/P2P.Kapucen.Gen
    Mülltonne - 06.10.2007 (2)
  13. Habe ein Virus: WORM/P2P.Kapucen.Gen
    Mülltonne - 05.10.2007 (1)
  14. Virus P2P-Worm.Win32.Polip.a
    Plagegeister aller Art und deren Bekämpfung - 03.05.2006 (2)
  15. w32/sdbot.worm virus
    Plagegeister aller Art und deren Bekämpfung - 26.10.2004 (1)
  16. Virus? Worm/SpyBot.P2P.Gen
    Plagegeister aller Art und deren Bekämpfung - 01.12.2003 (6)
  17. Virus Worm.Automat.AHB
    Plagegeister aller Art und deren Bekämpfung - 23.09.2003 (10)

Zum Thema Msn worm/trojaner/virus... - hi leute, hab heute morgen diese wie allen schon bekannt ist diese fotoalbum2007 über msn bekommen und seit dem versucht mein msn diese datei an anderen leuten weiterzuschicken... ich hab - Msn worm/trojaner/virus......
Archiv
Du betrachtest: Msn worm/trojaner/virus... auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.