PC verseucht? Mozilla öffnet Werbefenster+ auch sonst öfter Probleme

ardeche21

Hallo, ich hoffe, ihr könnt mir helfen, mit meinen Eigenrecherchen komme ich mangels Fachwissen nicht mehr so gut weiter.
Habe mit diversen Anivir+malware -scannern gescannt, aber ich glaube, da ist immer noch etwas.

Ich weiß nicht, ob ich jetzt das hijackthis-logfile richtig kopiert habe und man da etwas sehen kann.Habe vorher versucht, mich etwas einzulesen, finde aber alles ganz schön verwirrend.
Ich würde ja immer noch gern meinen Lapi retten, ohne neu aufzusetzen, da ich da dann auch nicht weiß, was mit Treibern, Internet-Einrichtung und so wird.
Also bitte um Nachsicht und Danke im Voraus,
Ardeche21











Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:18:02, on 23.01.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3

(6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Intel\Wireless\Bin\EvtEng.exe
C:\Programme\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\ZONELABS\avsys\Scan

ningProcess.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir PersonalEdition

Classic\sched.exe
C:\Programme\Adobe\Photoshop Elements

6.0\PhotoshopElementsFileAgent.exe
C:\Programme\Adobe\Photoshop Elements

7.0\PhotoshopElementsFileAgent.exe
C:\Programme\Avira\AntiVir PersonalEdition

Classic\avguard.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Programme\Gemeinsame

Dateien\LightScribe\LSSrvc.exe
C:\Programme\NovaStor\NovaBACKUP\NMSAcces

s.exe
C:\Programme\NovaStor\NovaBACKUP\NSENGIN

E.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programme\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\ZONELABS\avsys\Scan

ningProcess.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\alg.exe
C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe
C:\Programme\Intel\Wireless\bin\ZCfgSvc.exe
C:\Programme\Avira\AntiVir PersonalEdition

Classic\avgnt.exe
C:\WINDOWS\sm56hlpr.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programme\Microsoft

Office\Office12\GrooveMonitor.exe
C:\Programme\Intel\Wireless\Bin\EOUWiz.exe
C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe
C:\Programme\SUPERAntiSpyware\SUPERAntiSpy

ware.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1

\mantispm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Windows

Live\Messenger\usnsvc.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\Programme\Trend

Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet

Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Page_URL =

http://www.asus.com
R0 - HKCU\Software\Microsoft\Internet

Explorer\Main,Local Page =
R1 -

HKCU\Software\Microsoft\Windows\CurrentVersio

n\Internet Settings,AutoConfigURL =

file://C:/Dokumente und

Einstellungen/ardeche/Lokale

Einstellungen/Anwendungsdaten/RapidSolution/Vide

oraptor/WebRip/profile/rrproxy_ie_4967c311.pac
O2 - BHO: Videoraptor_WebRipPlugin Class -

{3C0372C2-04C3-4100-BAB1-1D42C552BC48} -

C:\Programme\RapidSolution\Videoraptor\plugins\I

E\VR_WebRipIePlugin.dll
O2 - BHO: Spybot-S&D IE Protection -

{53707962-6F74-2D53-2644-206D7942484F} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper -

{72853161-30C5-4D22-B7F9-0BBC1D38A37E} -

C:\Programme\Microsoft

Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class -

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -

C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) -

{7E853D72-626A-48EC-A868-BA8D5E23E045} -

(no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm

- {9030D464-4C02-4ABF-8ECC-5164760863C6}

- C:\Programme\Gemeinsame Dateien\Microsoft

Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) -

{DB8305A6-732E-4653-BE3C-28A761C3245A} -

(no file)
O4 - HKLM\..\Run: [GrooveMonitor]

"C:\Programme\Microsoft

Office\Office12\GrooveMonitor.exe"
O8 - Extra context menu item: Add to Google

Photos Screensa&ver -

res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Nach Microsoft

E&xel exportieren -

res://C:\PROGRA~1\MICROS~2\Office12\EXCEL

.EXE/3000
O9 - Extra button: (no name) -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: In Blog veröffentlichen -

{219C3416-8CB2-491a-A3C7-D9FCDDC9D600} -

C:\Programme\Windows

Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: In Windows Live

Writer in &Blog veröffentlichen -

{219C3416-8CB2-491a-A3C7-D9FCDDC9D600} -

C:\Programme\Windows

Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: An OneNote senden -

{2670000A-7350-4f3c-8081-5663EE0C6C49} -

C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote

s&enden -

{2670000A-7350-4f3c-8081-5663EE0C6C49} -

C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research -

{92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.D

LL
O9 - Extra button: (no name) -

{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search &

Destroy Configuration -

{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) -

{e2e2dd38-d088-4134-82b7-f2ba38496583} -

C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem:

@xpsp3res.dll,-20001 -

{e2e2dd38-d088-4134-82b7-f2ba38496583} -

C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger

- {FB5F1910-F110-11d2-BB9E-00C04F795683}

- C:\Programme\Messenger\msmsgs.exe
O14 - IERESET.INF:

START_PAGE_URL=http://www.asus.com
O16 - DPF:

{C3F79A2B-B9B4-4A66-B012-3EE46475B072}

(MessengerStatsClient Class) -

http://messenger.zone.msn.com/binary/Messenger

StatsPAClient.cab56907.cab
O16 - DPF:

{D27CDB6E-AE6D-11CF-96B8-444553540000}

(Shockwave Flash Object) -

https://fpdownload.macromedia.com/pub/shockwav

e/cabs/flash/swflash.cab
O16 - DPF:

{F5A7706B-B9C0-4C89-A715-7A0C6B05DD48}

(Minesweeper Flags Class) -

http://messenger.zone.msn.com/binary/MineSweep

er.cab56986.cab
O18 - Protocol: grooveLocalGWS -

{88FED34C-F0CA-4636-A375-3CB6248B04CD} -

C:\Programme\Microsoft

Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: !SASWinLogon -

C:\Programme\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Adobe Active File Monitor V6

(AdobeActiveFileMonitor6.0) - Unknown owner -

C:\Programme\Adobe\Photoshop Elements

6.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Active File Monitor V7

(AdobeActiveFileMonitor7.0) - Adobe Systems

Incorporated - C:\Programme\Adobe\Photoshop

Elements 7.0\PhotoshopElementsFileAgent.exe
O23 - Service: Avira AntiVir Personal - Free

Antivirus Planer (AntiVirScheduler) - Avira GmbH

- C:\Programme\Avira\AntiVir PersonalEdition

Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free

Antivirus Guard (AntiVirService) - Avira GmbH -

C:\Programme\Avira\AntiVir PersonalEdition

Classic\avguard.exe
O23 - Service: Creative Service for CDROM

Access - Creative Technology Ltd -

C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Intel(R) PROSet/Wireless Event

Log (EvtEng) - Intel Corporation -

C:\Programme\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service -

Macrovision Europe Ltd. -

C:\Programme\Gemeinsame Dateien\Macrovision

Shared\FLEXnet

Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service

(gupdate1c9083eaf0b81b2)

(gupdate1c9083eaf0b81b2) - Google Inc. -

C:\Programme\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) -

Google - C:\Programme\Google\Common\Google

Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager

(IDriverT) - Macrovision Corporation -

C:\Programme\Gemeinsame

Dateien\InstallShield\Driver\1050\Intel

32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc

Labeling Service (LightScribeService) -

Hewlett-Packard Company -

C:\Programme\Gemeinsame

Dateien\LightScribe\LSSrvc.exe
O23 - Service: NMSAccess - Unknown owner -

C:\Programme\NovaStor\NovaBACKUP\NMSAcces

s.exe
O23 - Service: NsEngine - NovaStor Corporation

-

C:\Programme\NovaStor\NovaBACKUP\NSENGIN

E.exe
O23 - Service: NVIDIA Display Driver Service

(NVSvc) - NVIDIA Corporation -

C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP -

C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless

Registry Service (RegSrvc) - Intel Corporation -

C:\Programme\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service

(S24EventMonitor) - Intel Corporation -

C:\Programme\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: TrueVector Internet Monitor

(vsmon) - Zone Labs, LLC -

C:\WINDOWS\system32\ZONELABS\vsmon.exe

--
End of file - 8685 bytes