| |
| |||||||
Log-Analyse und Auswertung: drive cleaner - könnt ihr bitte mal schaunWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
| |
10.08.2007, 18:12
| #1 |
 |  drive cleaner - könnt ihr bitte mal schaun Hi Cosinus, Avenger gibt mir eine Fehlermeldung. selected file does not apear to be a valid script. Jetzt muss ich mal fragen, wie bekomme ich denn das Filelist-Logfile von vundofix? |
|
10.08.2007, 18:15
| #2 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   | drive cleaner - könnt ihr bitte mal schaunZitat:
 Mach bitte aus "File" ganz oben im script "Files". Hab ein "s" vergessen!  Edit: Nun solltes richtig sein! 
__________________ |
|
10.08.2007, 18:17
| #3 |
| > MalwareDB | drive cleaner - könnt ihr bitte mal schaun Files to delete:
__________________C:\WINDOWS\system32\aeidplod.exe C:\WINDOWS\system32\aqbudamx.exe C:\WINDOWS\system32\ixrxkiel.exe C:\WINDOWS\system32\kxbpjpoo.exe C:\WINDOWS\system32\owcsoxdk.exe C:\WINDOWS\system32\yqkocffb.exe C:\DOKUME~1\JRG~1\LOKALE~1\Temp\pgntaccm.exe C:\WINDOWS\system32\aeidplod.exe C:\WINDOWS\system32\aqbudamx.exe C:\WINDOWS\system32\ixrxkiel.exe C:\WINDOWS\system32\kxbpjpoo.exe C:\WINDOWS\system32\owcsoxdk.exe C:\WINDOWS\system32\yqkocffb.exe C:\DOKUME~1\JRG~1\LOKALE~1\Temp\pgntaccm.exe C:\DokumenteundEinstellungen\Jörg\LokaleEinstellun gen\Temp\pgntaccm.exe C:\WINDOWS\system32\aeidplod.exe C:\WINDOWS\system32\aqbudamx.exe C:\WINDOWS\system32\ixrxkiel.exe C:\WINDOWS\system32\kxbpjpoo.exe C:\WINDOWS\system32\owcsoxdk.exe C:\WINDOWS\system32\yqkocffb.exe C:\WINDOWS\system32\pmnnmmj.dll cosinus was schneller.  Bata
__________________ |
|
10.08.2007, 18:39
| #4 |
| | drive cleaner - könnt ihr bitte mal schaun So hier der Logfile für Avenger: Logfile of The Avenger version 1, by Swandog46 Running from registry key: \Registry\Machine\System\CurrentControlSet\Services\peppuwpt ******************* Script file located at: \??\C:\Program Files\emdcyfyr.txt Script file opened successfully. Script file read successfully Backups directory opened successfully at C:\Avenger ******************* Beginning to process script file: File C:\WINDOWS\system32\aeidplod.exe not found! Deletion of file C:\WINDOWS\system32\aeidplod.exe failed! Could not process line: C:\WINDOWS\system32\aeidplod.exe Status: 0xc0000034 File C:\WINDOWS\system32\aqbudamx.exe not found! Deletion of file C:\WINDOWS\system32\aqbudamx.exe failed! Could not process line: C:\WINDOWS\system32\aqbudamx.exe Status: 0xc0000034 File C:\WINDOWS\system32\ixrxkiel.exe not found! Deletion of file C:\WINDOWS\system32\ixrxkiel.exe failed! Could not process line: C:\WINDOWS\system32\ixrxkiel.exe Status: 0xc0000034 File C:\WINDOWS\system32\kxbpjpoo.exe not found! Deletion of file C:\WINDOWS\system32\kxbpjpoo.exe failed! Could not process line: C:\WINDOWS\system32\kxbpjpoo.exe Status: 0xc0000034 File C:\WINDOWS\system32\owcsoxdk.exe not found! Deletion of file C:\WINDOWS\system32\owcsoxdk.exe failed! Could not process line: C:\WINDOWS\system32\owcsoxdk.exe Status: 0xc0000034 File C:\WINDOWS\system32\yqkocffb.exe not found! Deletion of file C:\WINDOWS\system32\yqkocffb.exe failed! Could not process line: C:\WINDOWS\system32\yqkocffb.exe Status: 0xc0000034 File C:\DOKUME~1\JRG~1\LOKALE~1\Temp\pgntaccm.exe deleted successfully. File C:\WINDOWS\system32\aeidplod.exe not found! Deletion of file C:\WINDOWS\system32\aeidplod.exe failed! Could not process line: C:\WINDOWS\system32\aeidplod.exe Status: 0xc0000034 File C:\WINDOWS\system32\aqbudamx.exe not found! Deletion of file C:\WINDOWS\system32\aqbudamx.exe failed! Could not process line: C:\WINDOWS\system32\aqbudamx.exe Status: 0xc0000034 File C:\WINDOWS\system32\ixrxkiel.exe not found! Deletion of file C:\WINDOWS\system32\ixrxkiel.exe failed! Could not process line: C:\WINDOWS\system32\ixrxkiel.exe Status: 0xc0000034 File C:\WINDOWS\system32\kxbpjpoo.exe not found! Deletion of file C:\WINDOWS\system32\kxbpjpoo.exe failed! Could not process line: C:\WINDOWS\system32\kxbpjpoo.exe Status: 0xc0000034 File C:\WINDOWS\system32\owcsoxdk.exe not found! Deletion of file C:\WINDOWS\system32\owcsoxdk.exe failed! Could not process line: C:\WINDOWS\system32\owcsoxdk.exe Status: 0xc0000034 File C:\WINDOWS\system32\yqkocffb.exe not found! Deletion of file C:\WINDOWS\system32\yqkocffb.exe failed! Could not process line: C:\WINDOWS\system32\yqkocffb.exe Status: 0xc0000034 File C:\DOKUME~1\JRG~1\LOKALE~1\Temp\pgntaccm.exe not found! Deletion of file C:\DOKUME~1\JRG~1\LOKALE~1\Temp\pgntaccm.exe failed! Could not process line: C:\DOKUME~1\JRG~1\LOKALE~1\Temp\pgntaccm.exe Status: 0xc0000034 Could not open file C:\DokumenteundEinstellungen\LokaleEinstellun gen\Temp\pgntaccm.exe for deletion Deletion of file C:\DokumenteundEinstellungen\LokaleEinstellun gen\Temp\pgntaccm.exe failed! Could not process line: C:\DokumenteundEinstellungen\Jörg\LokaleEinstellun gen\Temp\pgntaccm.exe Status: 0xc000003a File C:\WINDOWS\system32\aeidplod.exe not found! Deletion of file C:\WINDOWS\system32\aeidplod.exe failed! Could not process line: C:\WINDOWS\system32\aeidplod.exe Status: 0xc0000034 File C:\WINDOWS\system32\aqbudamx.exe not found! Deletion of file C:\WINDOWS\system32\aqbudamx.exe failed! Could not process line: C:\WINDOWS\system32\aqbudamx.exe Status: 0xc0000034 File C:\WINDOWS\system32\ixrxkiel.exe not found! Deletion of file C:\WINDOWS\system32\ixrxkiel.exe failed! Could not process line: C:\WINDOWS\system32\ixrxkiel.exe Status: 0xc0000034 File C:\WINDOWS\system32\kxbpjpoo.exe not found! Deletion of file C:\WINDOWS\system32\kxbpjpoo.exe failed! Could not process line: C:\WINDOWS\system32\kxbpjpoo.exe Status: 0xc0000034 File C:\WINDOWS\system32\owcsoxdk.exe not found! Deletion of file C:\WINDOWS\system32\owcsoxdk.exe failed! Could not process line: C:\WINDOWS\system32\owcsoxdk.exe Status: 0xc0000034 File C:\WINDOWS\system32\yqkocffb.exe not found! Deletion of file C:\WINDOWS\system32\yqkocffb.exe failed! Could not process line: C:\WINDOWS\system32\yqkocffb.exe Status: 0xc0000034 File C:\WINDOWS\system32\pmnnmmj.dll not found! Deletion of file C:\WINDOWS\system32\pmnnmmj.dll failed! Could not process line: C:\WINDOWS\system32\pmnnmmj.dll Status: 0xc0000034 Completed script processing. ******************* Finished! Terminate. |
|
10.08.2007, 20:07
| #5 |
| | drive cleaner - könnt ihr bitte mal schaun Habe ihn doch noch gefunden. Hier ist der Vundo Fix Log VundoFix V6.5.7 Checking Java version... Sun Java not detected Scan started at 07:10:51 10.08.2007 Listing files found while scanning.... C:\windows\system32\aeidplod.exe C:\windows\system32\aqbudamx.exe C:\WINDOWS\system32\cbeeg.bak2 C:\WINDOWS\system32\cbeeg.ini C:\WINDOWS\system32\cbeeg.ini2 C:\WINDOWS\system32\cbeeg.tmp C:\windows\system32\cygqppji.ini C:\WINDOWS\system32\ffcmrohr.dll C:\WINDOWS\system32\geebc.dll C:\windows\system32\gjlukmdh.dll C:\windows\system32\hdmkuljg.ini C:\windows\system32\ijppqgyc.dll C:\windows\system32\ixrxkiel.exe C:\windows\system32\kxbpjpoo.exe C:\windows\system32\lhsjtgqu.exe C:\windows\system32\owcsoxdk.exe C:\WINDOWS\system32\pmnnmmj.dll C:\windows\system32\rhormcff.ini C:\WINDOWS\system32\volmgbti.dll C:\windows\system32\yqkocffb.exe Beginning removal... Attempting to delete C:\windows\system32\aeidplod.exe C:\windows\system32\aeidplod.exe Has been deleted! Attempting to delete C:\windows\system32\aqbudamx.exe C:\windows\system32\aqbudamx.exe Has been deleted! Attempting to delete C:\WINDOWS\system32\cbeeg.bak2 C:\WINDOWS\system32\cbeeg.bak2 Has been deleted! Attempting to delete C:\WINDOWS\system32\cbeeg.ini C:\WINDOWS\system32\cbeeg.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\cbeeg.ini2 C:\WINDOWS\system32\cbeeg.ini2 Has been deleted! Attempting to delete C:\WINDOWS\system32\cbeeg.tmp C:\WINDOWS\system32\cbeeg.tmp Has been deleted! Attempting to delete C:\windows\system32\cygqppji.ini C:\windows\system32\cygqppji.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\ffcmrohr.dll C:\WINDOWS\system32\ffcmrohr.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\geebc.dll C:\WINDOWS\system32\geebc.dll Has been deleted! Attempting to delete C:\windows\system32\gjlukmdh.dll C:\windows\system32\gjlukmdh.dll Has been deleted! Attempting to delete C:\windows\system32\hdmkuljg.ini C:\windows\system32\hdmkuljg.ini Has been deleted! Attempting to delete C:\windows\system32\ijppqgyc.dll C:\windows\system32\ijppqgyc.dll Could not be deleted. Attempting to delete C:\windows\system32\ixrxkiel.exe C:\windows\system32\ixrxkiel.exe Has been deleted! Attempting to delete C:\windows\system32\kxbpjpoo.exe C:\windows\system32\kxbpjpoo.exe Has been deleted! Attempting to delete C:\windows\system32\lhsjtgqu.exe C:\windows\system32\lhsjtgqu.exe Could not be deleted. Attempting to delete C:\windows\system32\owcsoxdk.exe C:\windows\system32\owcsoxdk.exe Has been deleted! Attempting to delete C:\WINDOWS\system32\pmnnmmj.dll C:\WINDOWS\system32\pmnnmmj.dll Could not be deleted. Attempting to delete C:\windows\system32\rhormcff.ini C:\windows\system32\rhormcff.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\volmgbti.dll C:\WINDOWS\system32\volmgbti.dll Has been deleted! Attempting to delete C:\windows\system32\yqkocffb.exe C:\windows\system32\yqkocffb.exe Has been deleted! Performing Repairs to the registry. Done! VundoFix V6.5.7 Checking Java version... Sun Java not detected Scan started at 07:16:26 10.08.2007 Listing files found while scanning.... C:\WINDOWS\system32\ffcmrohr.dll C:\windows\system32\ijppqgyc.dll C:\windows\system32\lhsjtgqu.exe C:\windows\system32\pmnnmmj.dll Beginning removal... Attempting to delete C:\windows\system32\ijppqgyc.dll C:\windows\system32\ijppqgyc.dll Has been deleted! Attempting to delete C:\windows\system32\lhsjtgqu.exe C:\windows\system32\lhsjtgqu.exe Has been deleted! Attempting to delete C:\windows\system32\pmnnmmj.dll C:\windows\system32\pmnnmmj.dll Has been deleted! Performing Repairs to the registry. Done! |
|
10.08.2007, 20:24
| #6 |
| > MalwareDB | drive cleaner - könnt ihr bitte mal schaun Poste bitte ein neues HJT Logfile. Was machen die angemerkten Probleme? Bata
__________________ --> drive cleaner - könnt ihr bitte mal schaun |
|
10.08.2007, 21:47
| #7 |
| | drive cleaner - könnt ihr bitte mal schaun Hier der neue Logfile von HJT: Logfile of HijackThis v1.99.1 Scan saved at 22:40:51, on 10.08.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16473) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\ehome\ehtray.exe C:\WINDOWS\CTHELPER.EXE C:\WINDOWS\system32\CTXFIHLP.EXE C:\Programme\Java\jre1.6.0_02\bin\jusched.exe C:\Programme\Dell\Media Experience\DMXLauncher.exe C:\Programme\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE C:\Programme\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe C:\Programme\Creative\Shared Files\Module Loader\DLLML.exe C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe C:\WINDOWS\System32\DLA\DLACTRLW.EXE C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe C:\WINDOWS\SYSTEM32\CTXFISPI.EXE C:\Programme\Winamp\Winampa.exe C:\Programme\NewSoft\Presto! PVR\Monitor.exe C:\Programme\DAEMON Tools\daemon.exe C:\Programme\McAfee\MSK\MskAgent.exe C:\Programme\iTunes\iTunesHelper.exe C:\Programme\Ad Muncher\AdMunch.exe C:\WINDOWS\system32\ctfmon.exe C:\Programme\Creative\MediaSource\Go\CTCMSGo.exe C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Programme\Messenger\msmsgs.exe C:\Programme\Spybot - Search & Destroy\TeaTimer.exe C:\Programme\Dell Network Assistant\ezi_hnm2.exe C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\WINDOWS\system32\gfmongtc.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Programme\Dell Network Assistant\hnm_svc.exe C:\Programme\Intel\Intel Matrix Storage Manager\iaantmon.exe C:\Programme\Gemeinsame Dateien\McAfee\HackerWatch\HWAPI.exe C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe c:\programme\gemeinsame dateien\mcafee\mna\mcnasvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe C:\PROGRA~1\McAfee\MSC\mcpromgr.exe c:\PROGRA~1\GEMEIN~1\mcafee\mcproxy\mcproxy.exe c:\PROGRA~1\GEMEIN~1\mcafee\redirsvc\redirsvc.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe C:\Programme\McAfee\MPF\MPFSrv.exe C:\PROGRA~1\McAfee\MPS\mps.exe C:\Programme\McAfee\MSK\MskSrver.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Programme\McAfee\MPS\mpsevh.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\Programme\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\eHome\ehmsas.exe C:\Programme\iPod\bin\iPodService.exe C:\Programme\ArcorOnline\AOButler.exe C:\PROGRA~1\GEMEIN~1\McAfee\EmProxy\emproxy.exe C:\Programme\Opera\Opera.exe C:\Programme\totalcmd\TOTALCMD.EXE C:\WINDOWS\system32\wuauclt.exe D:\Downloads\hijackthis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.de/ig/dell?hl=de&client=dell-row&channel=de R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Arcor AG & Co. KG R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Programme\FlashGet\jccatch.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\programme\mcafee\virusscan\scriptcl.dll O2 - BHO: (no name) - {AA27A897-35CF-44BF-B09D-9704FA21F4BE} - C:\WINDOWS\system32\geebc.dll (file missing) O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll O2 - BHO: CPub Object - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - c:\programme\mcafee\mps\mcpopup.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Programme\BAE\BAE.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar5.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [IAAnotif] C:\Programme\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [DMXLauncher] C:\Programme\Dell\Media Experience\DMXLauncher.exe O4 - HKLM\..\Run: [CTDVDDET] "C:\Programme\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE" O4 - HKLM\..\Run: [VolPanel] "C:\Programme\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" /r O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Programme\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Programme\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll" O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\isuspm.exe" -startup O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE O4 - HKLM\..\Run: [Google Desktop Search] "C:\Programme\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [ChangeFilterMerit] C:\Programme\NewSoft\Presto! PVR\ChangeFilterMerit.exe O4 - HKLM\..\Run: [WinampAgent] "C:\Programme\Winamp\Winampa.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Presto! PVR Monitor] C:\Programme\NewSoft\Presto! PVR\Monitor.exe O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programme\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [WindowsUpdateSecurity] C:\WINDOWS\system32\service.exe O4 - HKLM\..\Run: [MskAgentexe] C:\Programme\McAfee\MSK\MskAgent.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [CloneCDTray] "C:\Programme\SlySoft\CloneCD\CloneCDTray.exe" /s O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Ad Muncher] C:\Programme\Ad Muncher\AdMunch.exe /bt O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Creative MediaSource Go] "C:\Programme\Creative\MediaSource\Go\CTCMSGo.exe" /SCB O4 - HKCU\..\Run: [swg] C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: Dell Network Assistant.lnk = ? O8 - Extra context menu item: &Windows Live Search - res://C:\Programme\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O8 - Extra context menu item: Alles mit FlashGet laden - C:\Programme\FlashGet\jc_all.htm O8 - Extra context menu item: Block frame with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=244GPDCD&id=menu_ie_frame O8 - Extra context menu item: Block image with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=244GPDCD&id=menu_ie_image O8 - Extra context menu item: Block link with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=244GPDCD&id=menu_ie_link O8 - Extra context menu item: Don't filter page with Ad Muncher - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=244GPDCD&id=menu_ie_exclude O8 - Extra context menu item: Mit FlashGet laden - C:\Programme\FlashGet\jc_link.htm O8 - Extra context menu item: Report page to the Ad Muncher developers - http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserextensions.pl?exbrowser=ie&exversion=0.4&pass=244GPDCD&id=menu_ie_report O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Programme\Paltalk Messenger\Paltalk.exe (file missing) O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Programme\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Programme\FlashGet\flashget.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab O16 - DPF: {C8D533D0-31AA-4EBA-BD20-D5126963E0AC} (WollnyITService.ActiveChat) - http://www.webchat-solutions.de/chats/ActiveChat.CAB O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{CE384898-B22E-4A14-A6EB-D311EA542B9C}: NameServer = 195.50.140.250 195.50.140.114 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: DomainService - - C:\WINDOWS\system32\gfmongtc.exe O23 - Service: Intel® Quick Resume Technology Drivers (ELService) - Intel Corporation - C:\Programme\Intel\IntelDH\Intel(R) Quick Resume Technology\ELService.exe O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\GEMEIN~1\McAfee\EmProxy\emproxy.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Advanced Networking Service (hnmsvc) - SingleClick Systems - C:\Programme\Dell Network Assistant\hnm_svc.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMon) - Intel Corporation - C:\Programme\Intel\Intel Matrix Storage Manager\iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Programme\Gemeinsame Dateien\McAfee\HackerWatch\HWAPI.exe O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\programme\gemeinsame dateien\mcafee\mna\mcnasvc.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\GEMEIN~1\mcafee\mcproxy\mcproxy.exe O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\GEMEIN~1\mcafee\redirsvc\redirsvc.exe O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Programme\McAfee\MPF\MPFSrv.exe O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Programme\McAfee\MSK\MskSrver.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Programme\Spyware Doctor\svcntaux.exe O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Programme\Spyware Doctor\swdsvc.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe Auf jeden Fall sind die Pop-ups verschwunden und ich bekomme keine Warnungen mehr von Mcafee, Spybot, Admuncher etc... Kann man jetzt sagen, dass mein System so halbwegs wieder save ist? Vielen Dank für eure Unterstützung. Xoxon |
|
10.08.2007, 21:54
| #8 |
| > MalwareDB | drive cleaner - könnt ihr bitte mal schaun Fixe mit HJt noch diese Zeile O2 - BHO: (no name) - {AA27A897-35CF-44BF-B09D-9704FA21F4BE} - C:\WINDOWS\system32\geebc.dll (file missing) Diese Datei solltest Du schon mal scannen, scann sie jetzt bitte noch und poste das komplette Ergebniss hier. C:\WINDOWS\system32\service.exe Bata
__________________ If every computer is running a diverse ecosystem, crackers will have no choice but to resort to small-scale, targetted attacks, and the days of mass-market malware will be over[...]. Stuart Udall |
|
11.08.2007, 01:33
| #9 |
| | drive cleaner - könnt ihr bitte mal schaun Scannen gab keinen Befund. LG Xoxon |
|
| Themen zu drive cleaner - könnt ihr bitte mal schaun |
| appinit_dlls, dateien, desktop, drivers, e-mail, explorer, firewall, frame, google, handel, hijack, hijackthis, internet, internet explorer, log, microsoft, nvidia, object, opera, programme, rundll, shockwave, software, sound, spyware, system, trojaner, urlsearchhook, windows, windows xp, yahoo |
Hybrid-Darstellung
