Bitte um Analyse des HiJackThis-Logfiles wegen Vundo

V.I.P.

Hi nochdigger,

vielen Dank für deine schnelle Reaktion!

Die Combobox ließ sich leider nicht starten. Es öffnen sich zwar ein paar DOS-Fenster, aber der Start bricht ab, bevor ich Y(es) eingeben kann. Nach der Anzeige "Combobox is preparing to run" erscheint die Fehlermeldung "The Comspec environment variable was found to be corrupt". Das ursprünglich blaue oder schwarze DOS-Fenster wird dabei rot.

Filelist allerdings brachte die gewünschten Resultate:

Verzeichnis von C:\

2007-12-16 21:47 1,610,612,736 pagefile.sys
2007-12-16 10:34 211 boot.ini
2007-12-16 00:18 14,331 TREEINFO.NCD
2007-12-14 14:10 398 avenger.txt
2007-12-13 20:42 186 VundoFix.txt
2007-12-10 15:16 2 -319707275
2007-12-09 17:58 1,120 INSTALL.LOG



Verzeichnis von C:\WINDOWS\system32

2007-12-16 22:10 192,468 gfhkj.ini
2007-12-16 22:08 192,500 gfhkj.ini2
2007-12-16 22:08 81,984 bdod.bin
2007-12-16 21:48 13,646 wpa.dbl
2007-12-16 21:48 0 bdss.log
2007-12-16 21:47 29,204 nvapps.xml
2007-12-16 10:32 80,448 itxyssyt.dll
2007-12-16 10:32 74,304 bgmjsybs.exe
2007-12-15 19:27 66,872 PnkBstrA.exe
2007-12-15 19:27 103,736 PnkBstrB.exe
2007-12-13 21:26 156,160 swreg.exe
2007-12-12 03:06 191,384 FNTCACHE.DAT
2007-12-12 01:48 387,268 TZLog.log
2007-12-12 01:24 311,604 perfh009.dat
2007-12-12 01:24 39,992 perfc009.dat
2007-12-12 01:24 316,594 perfh007.dat
2007-12-12 01:24 48,156 perfc007.dat
2007-12-12 01:24 721,390 PerfStringBackup.INI
2007-12-10 15:20 333,920 jkhfg.dll
2007-12-10 15:16 0 4_exception.nls
2007-12-10 15:15 54,114 xpdx.sys
2007-12-10 15:14 37,376 qomnmjj.dll
2007-12-04 01:00 136,704 swsc.exe
2007-12-03 00:00 18,684,536 MRT.exe
2007-11-16 15:16 53,248 unrar.dll



Verzeichnis von C:\WINDOWS\Prefetch

2007-12-16 22:10 16,158 CMD.EXE-087B4001.pf
2007-12-16 22:10 18,246 VERCLSID.EXE-3667BD89.pf
2007-12-16 22:08 75,866 FIREFOX.EXE-1D57670A.pf
2007-12-16 22:08 10,992 NIRCMD.CFEXE-19FF4781.pf
2007-12-16 22:08 3,910 SED.CFEXE-268D7E58.pf
2007-12-16 22:08 9,054 LISTDLLS.CFEXE-163777B3.pf
2007-12-16 22:08 3,756 GREP.CFEXE-20443039.pf
2007-12-16 22:08 9,280 SWXCACLS.CFEXE-365F7973.pf
2007-12-16 22:08 9,276 NIRCMD.EXE-1F7FED22.pf
2007-12-16 22:03 41,986 CCLEANER.EXE-065E2F3F.pf
2007-12-16 22:02 34,158 COMBOFIX.EXE-07B3F06B.pf
2007-12-16 21:59 36,274 WINRAR.EXE-3588DFE8.pf
2007-12-16 21:49 54,440 WUAUCLT.EXE-399A8E72.pf
2007-12-16 21:49 62,416 WGATRAY.EXE-0ED38BED.pf
2007-12-16 21:49 35,664 SVCHOST.EXE-3530F672.pf
2007-12-16 21:49 17,086 ALG.EXE-0F138680.pf
2007-12-16 21:48 1,102,372 NTOSBOOT-B00DFAAD.pf
2007-12-16 21:45 17,766 LOGONUI.EXE-0AF22957.pf
2007-12-16 21:23 12,676 BDSS.EXE-11B98B2C.pf
2007-12-16 21:23 68,772 ICQLITE.EXE-2AEFACA7.pf
2007-12-16 21:21 24,846 VSSERV.EXE-1655A9ED.pf
2007-12-16 21:21 24,192 UPGREPL.EXE-3867E9B0.pf
2007-12-16 21:19 24,298 THEBAT.EXE-1A219EF3.pf
2007-12-16 20:47 42,962 WINWORD.EXE-3395695A.pf
2007-12-16 20:41 51,604 MSPUB.EXE-153558ED.pf
2007-12-16 20:40 16,336 IPODSERVICE.EXE-233792DA.pf
2007-12-16 20:39 88,180 ITUNES.EXE-15E88941.pf
2007-12-16 20:38 52,292 CTFMON.EXE-0E17969B.pf
2007-12-16 20:26 7,088 SWREG.CFEXE-2BF4FFCD.pf
2007-12-16 20:25 11,544 ATTRIB.EXE-39EAFB02.pf
2007-12-16 19:00 19,454 NOTEPAD.EXE-336351A9.pf
2007-12-16 19:00 29,076 HIJACKTHIS.EXE-39024128.pf
2007-12-16 18:02 29,622 RUNDLL32.EXE-2E5AF1D7.pf
2007-12-16 17:27 30,400 RUNDLL32.EXE-2A94BB85.pf
2007-12-16 17:27 20,414 IMAPI.EXE-0BF740A4.pf
2007-12-16 17:27 16,852 BOYFRIEND.EXE-12B03C30.pf
2007-12-16 17:26 14,398 AUTORUN.EXE-055703AF.pf
2007-12-16 17:25 18,008 RUNDLL32.EXE-451FC2C0.pf
2007-12-16 17:18 536,714 Layout.ini
2007-12-16 15:19 27,682 RUNDLL32.EXE-2CE4D879.pf
2007-12-16 13:47 64,968 EXPLORER.EXE-082F38A9.pf
2007-12-16 13:37 26,280 DWWIN.EXE-30875ADC.pf
2007-12-16 13:37 141,224 DUMPREP.EXE-1B46F901.pf
2007-12-16 13:37 32,998 HH.EXE-2D1A70B3.pf
2007-12-16 13:27 50,242 PROCEXP.EXE-16727433.pf
2007-12-16 13:27 16,926 AUTORUNS.EXE-1C9FFC46.pf
2007-12-16 12:11 17,552 REGEDIT.EXE-1B606482.pf
2007-12-16 11:24 20,730 DLLHOST.EXE-205D880D.pf
2007-12-16 11:24 29,694 SOFTWAREUPDATE.EXE-1E90DF1F.pf
2007-12-16 10:29 25,276 RUNDLL32.EXE-35A483DA.pf
2007-12-16 00:38 92,294 PXCONSOLE.EXE-16A48F2C.pf
2007-12-16 00:15 26,724 KILLBOX.EXE-3A45BD3F.pf
2007-12-16 00:15 52,528 NTVDM.EXE-1A10A423.pf
2007-12-16 00:12 47,996 PXAGENT.EXE-34A30CB9.pf
2007-12-16 00:12 23,110 PXL1.EXE-326D33D3.pf
2007-12-15 23:17 115,476 TASKMGR.EXE-20256C55.pf
2007-12-15 23:00 40,650 BDLITE.EXE-05C06251.pf
2007-12-15 22:54 50,200 DRWTSN32.EXE-2B4B52AC.pf
2007-12-15 22:37 15,012 WISECUSTOMCALLA7.EXE-0402A54A.pf
2007-12-15 22:37 11,830 PXDRVINSTALL.EXE-30E756DC.pf
2007-12-15 22:37 21,538 MOFCOMP.EXE-01718E95.pf
2007-12-15 22:36 96,516 WMIPRVSE.EXE-28F301A9.pf
2007-12-15 22:36 15,010 WISECUSTOMCALLA.EXE-2C2B63F0.pf
2007-12-15 22:35 56,956 MSIEXEC.EXE-2F8A8CAE.pf
2007-12-15 22:35 15,802 INSTALLPREVX1.EXE-264CB64D.pf
2007-12-15 22:35 31,240 GOOGLEUPDATER.EXE-36CE3796.pf
2007-12-15 22:34 16,004 AU_.EXE-0BDE71B4.pf
2007-12-15 22:34 13,220 UNINSTALL.EXE-35561864.pf
2007-12-15 22:20 16,232 PREVXCSI.EXE-1B307816.pf
2007-12-15 22:20 11,136 PREVXCSIFREE.EXE-2BA5D7BC.pf
2007-12-15 22:14 52,890 BDMCON.EXE-0384CB88.pf
2007-12-15 22:13 13,656 VIRUSTOTALUPLOAD.EXE-12F771E5.pf
2007-12-15 22:12 16,688 VTSETUP.EXE-1DB5B1A0.pf
2007-12-15 22:09 70,548 IEXPLORE.EXE-2CA9778D.pf
2007-12-15 20:39 220,440 HELPSVC.EXE-2878DDA2.pf
2007-12-15 20:38 50,374 DFRGNTFS.EXE-269967DF.pf
2007-12-15 20:38 17,268 DEFRAG.EXE-273F131E.pf
2007-12-15 19:27 11,278 PNKBSTRA.EXE-188A67A9.pf
2007-12-15 19:27 13,414 PNKBSTRB.EXE-21412697.pf
2007-12-15 19:27 43,450 IW3MP.EXE-002B9A86.pf
2007-12-15 19:13 80,366 IW3SP.EXE-1D9ADAA7.pf
2007-12-15 13:50 24,862 RUNDLL32.EXE-35D5243C.pf
2007-12-15 13:25 24,978 MSCONFIG.EXE-35E4DAE9.pf
2007-12-15 11:52 25,168 ICQ STATUS CHECKER(2).EXE-2B0D5D05.pf
2007-12-15 11:47 21,448 HJT.COM-19989367.pf
2007-12-15 10:25 15,228 RUNDLL32.EXE-268BFF96.pf
2007-12-14 15:34 20,150 RUNDLL32.EXE-2576181F.pf
2007-12-14 14:02 12,564 AVENGER.EXE-1F349B6B.pf
2007-12-14 09:29 21,300 UNINSTALL.EXE-39F42F03.pf
2007-12-14 09:23 19,426 SPYHUNTER3.EXE-1705D214.pf
2007-12-14 09:22 25,998 FREE-SPYHUNTER-SCANNER-INSTAL-166E8363.pf
2007-12-14 08:35 13,942 FIXVUNDO.EXE-2B832E27.pf
2007-12-14 08:34 29,026 RUNDLL32.EXE-44A0B4BC.pf
2007-12-14 07:37 28,922 TOTALCMD.EXE-0E3CA4DA.pf
2007-12-14 07:36 12,656 INSTALL.EXE-14B712E9.pf
2007-12-14 07:36 13,234 TCMD702A.EXE-1F25C4F8.pf
2007-12-13 22:25 56,650 ACRORD32.EXE-153330F0.pf
2007-12-13 22:25 19,618 RUNDLL32.EXE-45D68234.pf
2007-12-13 21:43 14,592 FIXVUNDO.EXE-2E8B0D82.pf
2007-12-13 20:54 18,086 HJTINSTALL.EXE-3AB7C504.pf
2007-12-13 20:49 39,772 IEDW.EXE-2D047874.pf
2007-12-13 20:17 30,384 VUNDOFIX.EXE-293F1E5F.pf
2007-12-13 18:56 17,030 AUTORUNS.EXE-265A11C5.pf
2007-12-13 18:51 35,836 PROCEXP.EXE-0BF7D59C.pf
2007-12-13 18:44 19,050 UNLOCKER.EXE-2F8FAED1.pf
2007-12-13 18:29 15,902 AUTORUNSC.EXE-352198FF.pf
2007-12-13 18:08 26,328 ERASER.EXE-31929814.pf
2007-12-13 18:08 33,130 ERASERSETUP32.EXE-36F9AC44.pf
2007-12-13 18:08 52,274 ERASERSETUP584X32.EXE-30F922C9.pf
2007-12-13 17:56 10,358 UNLOCKERASSISTANT.EXE-2960B8DF.pf
2007-12-13 17:52 15,438 UNLOCKER1.8.5.EXE-2C14E1A0.pf
2007-12-13 17:27 26,442 KILLBOX.EXE-2FCB1EA8.pf
2007-12-13 17:19 26,104 KILLBOX.EXE-18382486.pf
2007-12-13 16:56 51,654 FIREFOX.EXE-17EE503B.pf
2007-12-13 14:44 15,936 NOTEPAD.EXE-189578DA.pf
2007-12-12 21:10 21,510 GLJ2D.TMP-1F55E152.pf
2007-12-12 21:10 15,948 REGSVR32.EXE-25EEFE2F.pf
2007-12-12 21:10 16,476 GLB2B.TMP-2E088D61.pf
2007-12-12 21:10 6,676 YCOMP_~1.EXE-360E768E.pf
2007-12-12 21:10 15,768 GLB24.TMP-01F57C7A.pf
2007-12-12 21:10 5,874 YTB3.EXE-2A78AF67.pf
2007-12-12 21:09 22,030 CCSETUP203.EXE-2ED0E4DE.pf
2007-12-12 03:00 5,516 OSE.EXE-313A091F.pf
2007-12-12 01:51 9,532 MSOHTMED.EXE-14B8D6FE.pf
2007-12-12 01:48 5,800 TZCHANGE.EXE-37A3D1CD.pf
2007-12-12 01:39 64,684 UPDATE.EXE-16FE79E0.pf
2007-12-12 01:38 59,306 UPDATE.EXE-236D68A9.pf
2007-12-12 01:33 6,128 SPUPDSVC.EXE-21B36524.pf
2007-12-12 01:24 16,226 SYSOCMGR.EXE-31169C54.pf
2007-12-11 20:47 48,524 VLC.EXE-29851A71.pf


Verzeichnis von C:\WINDOWS

2007-12-16 21:48 0 0.log
2007-12-16 21:48 1,372,207 WindowsUpdate.log
2007-12-16 21:47 2,048 bootstat.dat
2007-12-16 21:45 32,550 SchedLgU.Txt
2007-12-16 21:21 701 win.ini
2007-12-16 20:35 834 wiadebug.log
2007-12-16 15:19 50 wiaservc.log
2007-12-16 15:18 0 Sti_Trace.log
2007-12-16 15:04 976,530 ntbtlog.txt
2007-12-16 10:34 227 system.ini
2007-12-15 22:39 2,747,184 pxinstall_log.txt
2007-12-15 22:37 1,337 px_instbackup.log
2007-12-15 22:37 15,782 pxdrvinstall.log
2007-12-15 22:37 7,354 setupapi.log
2007-12-15 09:19 116 NeroDigital.ini
2007-12-14 07:38 462 wincmd.ini
2007-12-13 19:08 27 BRPP2KA.INI
2007-12-13 19:08 425 BRWMARK.INI
2007-12-10 14:42 311 game.ini



Verzeichnis von C:\WINDOWS\tasks

2007-12-16 21:47 6 SA.DAT
2007-12-12 21:02 276 AppleSoftwareUpdate.job



Verzeichnis von C:\WINDOWS\temp

2007-12-16 22:10 0 s1t4.14
2007-12-16 22:09 0 s1t4.13
2007-12-16 22:09 0 s1t4.12
2007-12-16 22:08 0 s1t4.11
2007-12-16 22:08 0 s1t4.10
2007-12-16 22:07 0 s1t4.v
2007-12-16 22:06 0 s1t4.u
2007-12-16 22:05 0 s1t4.s
2007-12-16 22:05 0 s1t4.r
2007-12-16 22:04 0 s1t4.q
2007-12-16 22:03 0 s1t4.p
2007-12-16 22:03 0 s1t4.o
2007-12-16 22:02 0 s1t4.n
2007-12-16 22:02 0 s1t4.m
2007-12-16 22:01 0 s1t4.l
2007-12-16 22:00 0 s1t4.k
2007-12-16 22:00 0 s1t4.j
2007-12-16 21:59 0 s1t4.i
2007-12-16 21:59 0 s1t4.h
2007-12-16 21:58 0 s1t4.g
2007-12-16 21:57 0 s1t4.f
2007-12-16 21:57 0 s1t4.e
2007-12-16 21:56 0 s1t4.d
2007-12-16 21:56 0 s1t4.c
2007-12-16 21:55 0 s1t4.b
2007-12-16 21:54 0 s1t4.a
2007-12-16 21:54 0 s1t4.9
2007-12-16 21:53 0 s1t4.8
2007-12-16 21:52 0 s1t4.7
2007-12-16 21:52 0 s1t4.6
2007-12-16 21:51 0 s1t4.5
2007-12-16 21:51 0 s1t4.4

usw.

!! Text hier erheblich gekürzt, weil er sonst nicht im Beitrag erlaubt ist !!
Soll ich den kompletten Text auf mehrere Beiträge aufteilen oder reicht das hier bereits?

Ende diese Abschnittes hier:

2007-12-16 10:43 0 s5c.3
2007-12-16 10:41 0 s5c.2
2007-12-16 10:38 0 s5c.1
2007-12-16 10:35 0 s5c
2007-12-13 10:00 131,072 8AF12AB59DCE7145.tmp
2007-12-13 10:00 131,072 7CF28762C38CA0D4.tmp
2007-12-13 10:00 70,007 AE8AB41F91F72503.tmp
2007-12-13 10:00 131,072 302DCAF35670F42D.tmp


Verzeichnis von C:\DOKUME~1\VORINS~1\LOKALE~1\Temp

2007-12-16 22:10 151,365 filelist.txt
2007-12-16 13:37 16,384 ~DFE1EF.tmp
2007-12-16 13:36 16,384 ~DFDD37.tmp
2007-12-16 10:37 85,504 xmyfqkat.dll


Reicht das für eine Fehlereingrenzung, oder muß ich die Combobox unbedingt ans Laufen kriegen? Ich habe mir die Combobox auch erneut heruntergeladen - aber das Resultat, bzw. die Fehlermeldung ist die gleiche.

Gruß, Florian
www.florianschmidt.de

Vielen Dank schon mal für deine Hilfe!