![]() |
|
Plagegeister aller Art und deren Bekämpfung: PC lahmt bei Hochfahren und beim Starten von ProgrammenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
| ![]() PC lahmt bei Hochfahren und beim Starten von Programmen Hallo nochmal Ihr wollt doch nicht drei Logs auf einmal sehen, oder? In den meisten Threads sehe ich immer nur einen pro Post?.... Habe das gerade mal versucht, es passt auch nur einer rein? |
![]() | #2 | |
![]() ![]() | ![]() PC lahmt bei Hochfahren und beim Starten von ProgrammenZitat:
Also: Hicjackthis, Malewarbytes, Superanti..
__________________ |
![]() | #3 |
| ![]() PC lahmt bei Hochfahren und beim Starten von Programmen Okk dann poste ich hier als erstes mal den Log vom Super Anti xD
__________________Code:
ATTFilter SUPERAntiSpyware Scan Log http://www.superantispyware.com Generated 03/07/2009 at 11:40 AM Application Version : 4.25.1014 Core Rules Database Version : 3788 Trace Rules Database Version: 1745 Scan type : Complete Scan Total Scan Time : 01:23:32 Memory items scanned : 774 Memory threats detected : 0 Registry items scanned : 9634 Registry threats detected : 287 File items scanned : 208938 File threats detected : 28 Adware.HotBar/ShopperReports (Low Risk) HKLM\Software\Classes\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465} HKCR\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465} HKCR\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465} HKCR\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465}\InprocServer32 HKCR\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465}\InprocServer32#ThreadingModel HKCR\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465}\ProgID HKCR\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465}\TypeLib HKCR\CLSID\{100EB1FD-D03E-47FD-81F3-EE91287F9465}\VersionIndependentProgID HKCR\ShoppingReport.RprtCtrl.1 HKCR\ShoppingReport.RprtCtrl.1\CLSID HKCR\ShoppingReport.RprtCtrl HKCR\ShoppingReport.RprtCtrl\CLSID HKCR\ShoppingReport.RprtCtrl\CurVer HKCR\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80} HKCR\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80}\1.0 HKCR\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80}\1.0\0 HKCR\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80}\1.0\0\win32 HKCR\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80}\1.0\FLAGS HKCR\TypeLib\{E343EDFC-1E6C-4CB5-AA29-E9C922641C80}\1.0\HELPDIR Adware.Zango/ShoppingReport HKLM\Software\Classes\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} HKCR\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE} HKCR\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}\Implemented Categories HKCR\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}\Implemented Categories\{00021493-0000-0000-C000-000000000046} HKCR\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}\ProgID HKCR\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}\TypeLib HKCR\CLSID\{A7CDDCDC-BEEB-4685-A062-978F5E07CEEE}\VersionIndependentProgID HKCR\CntntCntr.CntntDic HKCR\CntntCntr.CntntDic\CLSID HKCR\CntntCntr.CntntDic\CurVer HKCR\CntntCntr.CntntDic.1 HKCR\CntntCntr.CntntDic.1\CLSID HKCR\CntntCntr.CntntDisp HKCR\CntntCntr.CntntDisp\CLSID HKCR\CntntCntr.CntntDisp\CurVer HKCR\CntntCntr.CntntDisp.1 HKCR\CntntCntr.CntntDisp.1\CLSID HKCR\ShoppingReport.HbAx HKCR\ShoppingReport.HbAx\CLSID HKCR\ShoppingReport.HbAx\CurVer HKCR\ShoppingReport.HbAx.1 HKCR\ShoppingReport.HbAx.1\CLSID HKCR\ShoppingReport.HbInfoBand HKCR\ShoppingReport.HbInfoBand\CLSID HKCR\ShoppingReport.HbInfoBand\CurVer HKCR\ShoppingReport.HbInfoBand.1 HKCR\ShoppingReport.HbInfoBand.1\CLSID HKCR\ShoppingReport.IEButton HKCR\ShoppingReport.IEButton\CLSID HKCR\ShoppingReport.IEButton\CurVer HKCR\ShoppingReport.IEButton.1 HKCR\ShoppingReport.IEButton.1\CLSID HKCR\ShoppingReport.IEButtonA HKCR\ShoppingReport.IEButtonA\CLSID HKCR\ShoppingReport.IEButtonA\CurVer HKCR\ShoppingReport.IEButtonA.1 HKCR\ShoppingReport.IEButtonA.1\CLSID HKCR\CLSID\{14113B47-D59C-4F0F-9D10-FF1730265584} HKCR\CLSID\{14113B47-D59C-4F0F-9D10-FF1730265584}#AppID HKCR\CLSID\{14113B47-D59C-4F0F-9D10-FF1730265584}\ProgID HKCR\CLSID\{14113B47-D59C-4F0F-9D10-FF1730265584}\Programmable HKCR\CLSID\{14113B47-D59C-4F0F-9D10-FF1730265584}\TypeLib HKCR\CLSID\{14113B47-D59C-4F0F-9D10-FF1730265584}\VersionIndependentProgID HKCR\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC} HKCR\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}\Control HKCR\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}\Implemented Categories HKCR\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4} HKCR\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}\ProgID HKCR\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}\Programmable HKCR\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}\TypeLib HKCR\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}\Version HKCR\CLSID\{20EA9658-6BC3-4599-A87D-6371FE9295FC}\VersionIndependentProgID HKCR\CLSID\{2D00AA2A-69EF-487a-8A40-B3E27F07C91E} HKCR\CLSID\{2D00AA2A-69EF-487a-8A40-B3E27F07C91E}\ProgID HKCR\CLSID\{2D00AA2A-69EF-487a-8A40-B3E27F07C91E}\Programmable HKCR\CLSID\{2D00AA2A-69EF-487a-8A40-B3E27F07C91E}\TypeLib HKCR\CLSID\{2D00AA2A-69EF-487a-8A40-B3E27F07C91E}\VersionIndependentProgID HKCR\CLSID\{69725738-CD68-4F36-8D02-8C43722EE5DA} HKCR\CLSID\{69725738-CD68-4F36-8D02-8C43722EE5DA}\ProgID HKCR\CLSID\{69725738-CD68-4F36-8D02-8C43722EE5DA}\Programmable HKCR\CLSID\{69725738-CD68-4F36-8D02-8C43722EE5DA}\TypeLib HKCR\CLSID\{69725738-CD68-4F36-8D02-8C43722EE5DA}\VersionIndependentProgID HKCR\CLSID\{86C5840B-80C4-4C30-A655-37344A542009} HKCR\CLSID\{86C5840B-80C4-4C30-A655-37344A542009}\ProgID HKCR\CLSID\{86C5840B-80C4-4C30-A655-37344A542009}\TypeLib HKCR\CLSID\{86C5840B-80C4-4C30-A655-37344A542009}\VersionIndependentProgID HKCR\CLSID\{A16AD1E9-F69A-45AF-9462-B1C286708842} HKCR\CLSID\{A16AD1E9-F69A-45AF-9462-B1C286708842}\ProgID HKCR\CLSID\{A16AD1E9-F69A-45AF-9462-B1C286708842}\Programmable HKCR\CLSID\{A16AD1E9-F69A-45AF-9462-B1C286708842}\TypeLib HKCR\CLSID\{A16AD1E9-F69A-45AF-9462-B1C286708842}\VersionIndependentProgID HKCR\CLSID\{A5B6FA30-D317-41CA-9CB1-C898D3C7F34E} HKCR\CLSID\{A5B6FA30-D317-41CA-9CB1-C898D3C7F34E}\Control HKCR\CLSID\{A5B6FA30-D317-41CA-9CB1-C898D3C7F34E}\ProgID HKCR\CLSID\{A5B6FA30-D317-41CA-9CB1-C898D3C7F34E}\Programmable HKCR\CLSID\{A5B6FA30-D317-41CA-9CB1-C898D3C7F34E}\TypeLib HKCR\CLSID\{A5B6FA30-D317-41CA-9CB1-C898D3C7F34E}\VersionIndependentProgID HKCR\CLSID\{A9C42A57-421C-4572-8B12-249C59183D1C} HKCR\CLSID\{A9C42A57-421C-4572-8B12-249C59183D1C}#AppID HKCR\CLSID\{A9C42A57-421C-4572-8B12-249C59183D1C}\ProgID HKCR\CLSID\{A9C42A57-421C-4572-8B12-249C59183D1C}\Programmable HKCR\CLSID\{A9C42A57-421C-4572-8B12-249C59183D1C}\TypeLib HKCR\CLSID\{A9C42A57-421C-4572-8B12-249C59183D1C}\VersionIndependentProgID HKCR\CLSID\{C9CCBB35-D123-4A31-AFFC-9B2933132116} HKCR\CLSID\{C9CCBB35-D123-4A31-AFFC-9B2933132116}\ProgID HKCR\CLSID\{C9CCBB35-D123-4A31-AFFC-9B2933132116}\Programmable HKCR\CLSID\{C9CCBB35-D123-4A31-AFFC-9B2933132116}\TypeLib HKCR\CLSID\{C9CCBB35-D123-4A31-AFFC-9B2933132116}\VersionIndependentProgID HKCR\CLSID\{CC19A5F2-B4AD-41D5-A5C9-0680904C1483} HKCR\CLSID\{CC19A5F2-B4AD-41D5-A5C9-0680904C1483}\ProgID HKCR\CLSID\{CC19A5F2-B4AD-41D5-A5C9-0680904C1483}\Programmable HKCR\CLSID\{CC19A5F2-B4AD-41D5-A5C9-0680904C1483}\TypeLib HKCR\CLSID\{CC19A5F2-B4AD-41D5-A5C9-0680904C1483}\VersionIndependentProgID HKCR\TypeLib\{0729F461-8054-47DC-8D39-A31B61CC0119} HKCR\TypeLib\{0729F461-8054-47DC-8D39-A31B61CC0119}\1.0 HKCR\TypeLib\{0729F461-8054-47DC-8D39-A31B61CC0119}\1.0\0 HKCR\TypeLib\{0729F461-8054-47DC-8D39-A31B61CC0119}\1.0\0\win32 HKCR\TypeLib\{0729F461-8054-47DC-8D39-A31B61CC0119}\1.0\FLAGS HKCR\TypeLib\{0729F461-8054-47DC-8D39-A31B61CC0119}\1.0\HELPDIR HKCR\TypeLib\{148E1447-C728-48FD-BEEC-A7D06C5FFF58} HKCR\TypeLib\{148E1447-C728-48FD-BEEC-A7D06C5FFF58}\1.0 HKCR\TypeLib\{148E1447-C728-48FD-BEEC-A7D06C5FFF58}\1.0\0 HKCR\TypeLib\{148E1447-C728-48FD-BEEC-A7D06C5FFF58}\1.0\0\win32 HKCR\TypeLib\{148E1447-C728-48FD-BEEC-A7D06C5FFF58}\1.0\FLAGS HKCR\TypeLib\{148E1447-C728-48FD-BEEC-A7D06C5FFF58}\1.0\HELPDIR HKCR\TypeLib\{8292078F-F6E9-412B-8EB1-360C05C5ECE5} HKCR\TypeLib\{8292078F-F6E9-412B-8EB1-360C05C5ECE5}\1.0 HKCR\TypeLib\{8292078F-F6E9-412B-8EB1-360C05C5ECE5}\1.0\0 HKCR\TypeLib\{8292078F-F6E9-412B-8EB1-360C05C5ECE5}\1.0\0\win32 HKCR\TypeLib\{8292078F-F6E9-412B-8EB1-360C05C5ECE5}\1.0\FLAGS HKCR\TypeLib\{8292078F-F6E9-412B-8EB1-360C05C5ECE5}\1.0\HELPDIR HKCR\TypeLib\{ABEC1835-3181-4ABD-8DDE-875AEC4DF6D2} HKCR\TypeLib\{ABEC1835-3181-4ABD-8DDE-875AEC4DF6D2}\1.0 HKCR\TypeLib\{ABEC1835-3181-4ABD-8DDE-875AEC4DF6D2}\1.0\0 HKCR\TypeLib\{ABEC1835-3181-4ABD-8DDE-875AEC4DF6D2}\1.0\0\win32 HKCR\TypeLib\{ABEC1835-3181-4ABD-8DDE-875AEC4DF6D2}\1.0\FLAGS HKCR\TypeLib\{ABEC1835-3181-4ABD-8DDE-875AEC4DF6D2}\1.0\HELPDIR HKCR\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2} HKCR\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2}\1.0 HKCR\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2}\1.0\0 HKCR\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2}\1.0\0\win32 HKCR\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2}\1.0\FLAGS HKCR\TypeLib\{CDCA70D8-C6A6-49EE-9BED-7429D6C477A2}\1.0\HELPDIR HKCR\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF} HKCR\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF}\1.0 HKCR\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF}\1.0\0 HKCR\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF}\1.0\0\win32 HKCR\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF}\1.0\FLAGS HKCR\TypeLib\{D136987F-E1C4-4CCC-A220-893DF03EC5DF}\1.0\HELPDIR HKCR\Interface\{0AF9A087-0CBF-46B2-9DC9-52D0D16B5AB6} HKCR\Interface\{0AF9A087-0CBF-46B2-9DC9-52D0D16B5AB6}\ProxyStubClsid HKCR\Interface\{0AF9A087-0CBF-46B2-9DC9-52D0D16B5AB6}\ProxyStubClsid32 HKCR\Interface\{0AF9A087-0CBF-46B2-9DC9-52D0D16B5AB6}\TypeLib HKCR\Interface\{0AF9A087-0CBF-46B2-9DC9-52D0D16B5AB6}\TypeLib#Version HKCR\Interface\{2447E305-5E90-42A8-BD1E-0BC333B807E1} HKCR\Interface\{2447E305-5E90-42A8-BD1E-0BC333B807E1}\ProxyStubClsid HKCR\Interface\{2447E305-5E90-42A8-BD1E-0BC333B807E1}\ProxyStubClsid32 HKCR\Interface\{2447E305-5E90-42A8-BD1E-0BC333B807E1}\TypeLib HKCR\Interface\{2447E305-5E90-42A8-BD1E-0BC333B807E1}\TypeLib#Version HKCR\Interface\{40CA90F3-4098-4877-AE87-23EB612B18C7} HKCR\Interface\{40CA90F3-4098-4877-AE87-23EB612B18C7}\ProxyStubClsid HKCR\Interface\{40CA90F3-4098-4877-AE87-23EB612B18C7}\ProxyStubClsid32 HKCR\Interface\{40CA90F3-4098-4877-AE87-23EB612B18C7}\TypeLib HKCR\Interface\{40CA90F3-4098-4877-AE87-23EB612B18C7}\TypeLib#Version HKCR\Interface\{4C3B62AF-CA25-4FBA-8405-32E44F83BB6F} HKCR\Interface\{4C3B62AF-CA25-4FBA-8405-32E44F83BB6F}\ProxyStubClsid HKCR\Interface\{4C3B62AF-CA25-4FBA-8405-32E44F83BB6F}\ProxyStubClsid32 HKCR\Interface\{4C3B62AF-CA25-4FBA-8405-32E44F83BB6F}\TypeLib HKCR\Interface\{4C3B62AF-CA25-4FBA-8405-32E44F83BB6F}\TypeLib#Version HKCR\Interface\{50D2FDCC-2707-49CB-8223-7FE0424909AA} HKCR\Interface\{50D2FDCC-2707-49CB-8223-7FE0424909AA}\ProxyStubClsid HKCR\Interface\{50D2FDCC-2707-49CB-8223-7FE0424909AA}\ProxyStubClsid32 HKCR\Interface\{50D2FDCC-2707-49CB-8223-7FE0424909AA}\TypeLib HKCR\Interface\{50D2FDCC-2707-49CB-8223-7FE0424909AA}\TypeLib#Version HKCR\Interface\{5A635A91-C303-45C9-8DB9-F759D98A3B9D} HKCR\Interface\{5A635A91-C303-45C9-8DB9-F759D98A3B9D}\ProxyStubClsid HKCR\Interface\{5A635A91-C303-45C9-8DB9-F759D98A3B9D}\ProxyStubClsid32 HKCR\Interface\{5A635A91-C303-45C9-8DB9-F759D98A3B9D}\TypeLib HKCR\Interface\{5A635A91-C303-45C9-8DB9-F759D98A3B9D}\TypeLib#Version HKCR\Interface\{7E335D04-2E6E-4D0E-A921-C3D9192E7121} HKCR\Interface\{7E335D04-2E6E-4D0E-A921-C3D9192E7121}\ProxyStubClsid HKCR\Interface\{7E335D04-2E6E-4D0E-A921-C3D9192E7121}\ProxyStubClsid32 HKCR\Interface\{7E335D04-2E6E-4D0E-A921-C3D9192E7121}\TypeLib HKCR\Interface\{7E335D04-2E6E-4D0E-A921-C3D9192E7121}\TypeLib#Version HKCR\Interface\{878CE013-7BA9-4650-A78C-B2234C0C1648} HKCR\Interface\{878CE013-7BA9-4650-A78C-B2234C0C1648}\ProxyStubClsid HKCR\Interface\{878CE013-7BA9-4650-A78C-B2234C0C1648}\ProxyStubClsid32 HKCR\Interface\{878CE013-7BA9-4650-A78C-B2234C0C1648}\TypeLib HKCR\Interface\{878CE013-7BA9-4650-A78C-B2234C0C1648}\TypeLib#Version HKCR\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB} HKCR\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}\ProxyStubClsid HKCR\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}\ProxyStubClsid32 HKCR\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}\TypeLib HKCR\Interface\{8AD9AD05-36BE-4E40-BA62-5422EB0D02FB}\TypeLib#Version HKCR\Interface\{8EE46F55-1CE1-4DB9-811A-68938EC7F3DD} HKCR\Interface\{8EE46F55-1CE1-4DB9-811A-68938EC7F3DD}\ProxyStubClsid HKCR\Interface\{8EE46F55-1CE1-4DB9-811A-68938EC7F3DD}\ProxyStubClsid32 HKCR\Interface\{8EE46F55-1CE1-4DB9-811A-68938EC7F3DD}\TypeLib HKCR\Interface\{8EE46F55-1CE1-4DB9-811A-68938EC7F3DD}\TypeLib#Version HKCR\Interface\{99CCFB8C-6380-4A14-8FDD-EF3E7E95335D} HKCR\Interface\{99CCFB8C-6380-4A14-8FDD-EF3E7E95335D}\ProxyStubClsid HKCR\Interface\{99CCFB8C-6380-4A14-8FDD-EF3E7E95335D}\ProxyStubClsid32 HKCR\Interface\{99CCFB8C-6380-4A14-8FDD-EF3E7E95335D}\TypeLib HKCR\Interface\{99CCFB8C-6380-4A14-8FDD-EF3E7E95335D}\TypeLib#Version HKCR\Interface\{A87DFD99-CF81-4241-85CE-881E0026B686} HKCR\Interface\{A87DFD99-CF81-4241-85CE-881E0026B686}\ProxyStubClsid HKCR\Interface\{A87DFD99-CF81-4241-85CE-881E0026B686}\ProxyStubClsid32 HKCR\Interface\{A87DFD99-CF81-4241-85CE-881E0026B686}\TypeLib HKCR\Interface\{A87DFD99-CF81-4241-85CE-881E0026B686}\TypeLib#Version HKCR\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0} HKCR\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}\ProxyStubClsid HKCR\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}\ProxyStubClsid32 HKCR\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}\TypeLib HKCR\Interface\{AEBF09E2-0C15-43C8-99BF-928C645D98A0}\TypeLib#Version HKCR\Interface\{B20D7ADD-989C-4BC0-A797-F6FE7998EFD7} HKCR\Interface\{B20D7ADD-989C-4BC0-A797-F6FE7998EFD7}\ProxyStubClsid HKCR\Interface\{B20D7ADD-989C-4BC0-A797-F6FE7998EFD7}\ProxyStubClsid32 HKCR\Interface\{B20D7ADD-989C-4BC0-A797-F6FE7998EFD7}\TypeLib HKCR\Interface\{B20D7ADD-989C-4BC0-A797-F6FE7998EFD7}\TypeLib#Version HKCR\Interface\{BFC20A15-B0AC-44CC-A25A-A7039014BA9F} HKCR\Interface\{BFC20A15-B0AC-44CC-A25A-A7039014BA9F}\ProxyStubClsid HKCR\Interface\{BFC20A15-B0AC-44CC-A25A-A7039014BA9F}\ProxyStubClsid32 HKCR\Interface\{BFC20A15-B0AC-44CC-A25A-A7039014BA9F}\TypeLib HKCR\Interface\{BFC20A15-B0AC-44CC-A25A-A7039014BA9F}\TypeLib#Version HKCR\Interface\{C96B9FAE-A032-4100-BB47-32EF05E28BE4} HKCR\Interface\{C96B9FAE-A032-4100-BB47-32EF05E28BE4}\ProxyStubClsid HKCR\Interface\{C96B9FAE-A032-4100-BB47-32EF05E28BE4}\ProxyStubClsid32 HKCR\Interface\{C96B9FAE-A032-4100-BB47-32EF05E28BE4}\TypeLib HKCR\Interface\{C96B9FAE-A032-4100-BB47-32EF05E28BE4}\TypeLib#Version HKCR\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082} HKCR\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}\ProxyStubClsid HKCR\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}\ProxyStubClsid32 HKCR\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}\TypeLib HKCR\Interface\{D8560AC2-21B5-4C1A-BDD4-BD12BC83B082}\TypeLib#Version HKCR\Interface\{F019AEC4-4C95-46DE-A107-E302473E3B9A} HKCR\Interface\{F019AEC4-4C95-46DE-A107-E302473E3B9A}\ProxyStubClsid HKCR\Interface\{F019AEC4-4C95-46DE-A107-E302473E3B9A}\ProxyStubClsid32 HKCR\Interface\{F019AEC4-4C95-46DE-A107-E302473E3B9A}\TypeLib HKCR\Interface\{F019AEC4-4C95-46DE-A107-E302473E3B9A}\TypeLib#Version HKLM\Software\ShoppingReport HKLM\Software\ShoppingReport#affid HKLM\Software\ShoppingReport#Version HKLM\Software\ShoppingReport#ProductName HKLM\Software\ShoppingReport#requestor HKLM\Software\ShoppingReport#SG_Not_Set C:\Program Files\ShoppingReport\Bin\2.5.0 C:\Program Files\ShoppingReport\Bin C:\Program Files\ShoppingReport Adware.Zango Toolbar/Hb HKCR\HbCoreSrv.DynamicProp HKCR\HbCoreSrv.DynamicProp\CLSID HKCR\HbCoreSrv.DynamicProp\CurVer HKCR\HbCoreSrv.DynamicProp.1 HKCR\HbCoreSrv.DynamicProp.1\CLSID HKCR\Wallpaper.WallpaperManager HKCR\Wallpaper.WallpaperManager\CLSID HKCR\Wallpaper.WallpaperManager\CurVer HKCR\Wallpaper.WallpaperManager.1 HKCR\Wallpaper.WallpaperManager.1\CLSID HKCR\CoreSrv.CoreServices HKCR\CoreSrv.CoreServices\CLSID HKCR\CoreSrv.CoreServices\CurVer HKCR\CoreSrv.CoreServices.1 HKCR\CoreSrv.CoreServices.1\CLSID HKCR\CoreSrv.LfgAx HKCR\CoreSrv.LfgAx\CLSID HKCR\CoreSrv.LfgAx\CurVer HKCR\CoreSrv.LfgAx.1 HKCR\CoreSrv.LfgAx.1\CLSID HKCR\HostOL.MailAnim HKCR\HostOL.MailAnim\CLSID HKCR\HostOL.MailAnim\CurVer HKCR\HostOL.MailAnim.1 HKCR\HostOL.MailAnim.1\CLSID HKCR\HostOL.WebmailSend HKCR\HostOL.WebmailSend\CLSID HKCR\HostOL.WebmailSend\CurVer HKCR\HostOL.WebmailSend.1 HKCR\HostOL.WebmailSend.1\CLSID HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554} HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}#AppID HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Control HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Implemented Categories HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4} HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\MiscStatus HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\MiscStatus\1 HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\ProgID HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Programmable HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\TypeLib HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\Version HKCR\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554}\VersionIndependentProgID Adware.Vundo Variant/Rel HKU\S-1-5-21-2890157967-3311518900-1511298261-1004\Software\Microsoft\rdfa Adware.Tracking Cookie C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\familie@2o7[1].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\familie@ad.71i[1].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\familie@adserver.71i[2].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\familie@atwola[2].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\familie@bs.serving-sys[1].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\familie@doubleclick[1].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\familie@hotbar[1].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\familie@media.licenseacquisition[2].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\familie@serving-sys[1].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\familie@sevenoneintermedia.112.2o7[1].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\familie@weborama[2].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\Low\familie@atdmt[2].txt C:\Users\Familie\AppData\Roaming\Microsoft\Windows\Cookies\Low\familie@doubleclick[1].txt Adware.180solutions/Seekmo/Zango C:\USERS\FAMILIE\DOWNLOADS\SETUP.EXE Trojan.VXGame-Variant/D C:\USERS\JENS\AROBAS.MUSIC.GUITAR.PRO.V5.2.MULTILINGUAL.RETAIL.INCL.KEYMAKER-ZWT\KEYGEN.EXE Trace.Known Threat Sources C:\Users\Familie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K19W9A8T\s1[1].jpg C:\Users\Familie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J8Z41ZF8\index[7].htm C:\Users\Familie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K19W9A8T\btn[1].gif C:\Users\Familie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J8Z41ZF8\s4[1].jpg C:\Users\Familie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J8Z41ZF8\ncp[1].css C:\Users\Familie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K19W9A8T\shopper_large[1].gif C:\Users\Familie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4EMH15RQ\btn[1].jpg C:\Users\Familie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4EMH15RQ\bg[1].jpg C:\Users\Familie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4EMH15RQ\zango_logo[1].gif C:\Users\Familie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K19W9A8T\s2[1].jpg Was ist jetzt mit dem anderen zwei Logs, soll ich die jetzt nach und nach noch posten? Weil ich soll ja nur ein Thema aufmachen. |
![]() | #4 |
![]() ![]() | ![]() PC lahmt bei Hochfahren und beim Starten von Programmen Stell hier in dieses Thema rein...
__________________ _____________________________________________ „Optimismus ist nur ein Mangel an Information.“ Heiner Müller Sicherheit?->Allgemeine Informationen Der Plural von Virus heisst "Vira"! virus(viri, n.) Substantiv O-Deklination Nom.pl/Akk.pl. |
![]() | #5 |
| ![]() PC lahmt bei Hochfahren und beim Starten von Programmen Hier nun Log Nummer 2 von Malewarebytes` Anti-Malware Code:
ATTFilter Malwarebytes' Anti-Malware 1.34 Datenbank Version: 1825 Windows 6.0.6001 Service Pack 1 07.03.2009 14:12 mbam-log-2009-03-07 (14-12-08).txt Scan-Methode: Vollständiger Scan (C:\|D:\|) Durchsuchte Objekte: 294209 Laufzeit: 1 hour(s), 32 minute(s), 12 second(s) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 8 Infizierte Registrierungswerte: 1 Infizierte Dateiobjekte der Registrierung: 1 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: HKEY_CLASSES_ROOT\shoppingreport.rprtctrl (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\shoppingreport.rprtctrl.1 (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{100eb1fd-d03e-47fd-81f3-ee91287f9465} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Typelib\{e343edfc-1e6c-4cb5-aa29-e9c922641c80} (Adware.Shopping.Report) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\MS Juan (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Bind (Malware.Trace) -> Quarantined and deleted successfully. Infizierte Registrierungswerte: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{81ea3f36-357a-435a-8741-52c27ccc9f21} (Trojan.Vundo) -> Quarantined and deleted successfully. Infizierte Dateiobjekte der Registrierung: "HKEY_CLASSES_ROOT\regfile\shell\open\command\ (Broken.OpenCommand) -> Bad: (""regedit.exe"" ""%1"") Good: (regedit.exe ""%1"") -> Quarantined and deleted successfully." Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
![]() | #6 |
| ![]() PC lahmt bei Hochfahren und beim Starten von Programmen Zu guter Letzt das HijackThisLOG Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:18:04, on 07.03.2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\HomeCinema\TV Enhance\TVEService.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Windows\System32\rundll32.exe C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Mindjet\MindManager 8\MmReminderService.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe C:\Users\Jens\AppData\Local\Google\Update\GoogleUpdate.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Windows\ehome\ehmsas.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\System32\rundll32.exe C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe C:\Program Files\Intel\IntelDH\CCU\CCU_Engine.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Users\Jens\Desktop\Neuer Ordner\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=66028 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.crawler.com/?tbid=66028 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.aldi.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll O2 - BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files\Mindjet\MindManager 8\Mm8InternetExplorer.dll O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll O4 - HKLM\..\Run: [TVEService] "C:\Program Files\HomeCinema\TV Enhance\TVEService.exe" O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [NMSSupport] "C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe" /startup O4 - HKLM\..\Run: [CCUTRAYICON] C:\Program Files\Intel\IntelDH\CCU\CCU_TrayIcon.exe O4 - HKLM\..\Run: [tsnp2std] C:\Windows\tsnp2std.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [MAGIXautostart] E:\setup.exe O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" O4 - HKLM\..\Run: [Skytel] Skytel.exe O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe O4 - HKLM\..\Run: [MMReminderService] C:\Program Files\Mindjet\MindManager 8\MMReminderService.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Jens\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Regs Safe] "C:\ProgramData\Roam Date Date.fna5ba" O4 - HKCU\..\Run: [ANTI LITE TITLE DEBUG] "C:\ProgramData\dent chin draw.382925j" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: Crawler Search - tbr:iemenu O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) O9 - Extra 'Tools' menuitem: eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) O9 - Extra button: Statistik für den Schutz des Web-Datenverkehrs - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: An Mindjet MindManager senden - {2F72393D-2472-4F82-B600-ED77F354B7FF} - C:\Program Files\Mindjet\MindManager 8\Mm8InternetExplorer.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: HP Intelligente Auswahl - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O9 - Extra button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) (HKCU) O9 - Extra 'Tools' menuitem: eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) (HKCU) O13 - Gopher Prefix: O17 - HKLM\System\CCS\Services\Tcpip\..\{7FA6207C-FA60-4C3B-A1C0-165D0EA7E675}: NameServer = 192.168.2.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS3\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS4\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS5\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS6\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS7\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS8\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS9\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS10\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS11\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS12\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS13\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS14\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS15\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS16\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS17\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS18\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS19\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS20\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS21\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS22\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS23\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS24\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS25\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS26\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS27\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS28\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS29\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O17 - HKLM\System\CS30\Services\Tcpip\..\{365D6CE8-3EB7-4D59-9B24-20AA50C5C322}: NameServer = 192.168.1.254 O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: Intel(R) Alert Service (AlertService) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\CCU\AlertService.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Intel(R) DHTrace Controller (DHTRACE) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\IntelDH\bin\DHTraceController.exe O23 - Service: DQLWinService - Unknown owner - C:\Program Files\Common Files\Intel\IntelDH\NMS\AdpPlugins\DQLWinService.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: Intel(R) Software Services Manager (ISSM) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\ISSM.exe O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe O23 - Service: Intel(R) Viiv(TM) Media Server (M1 Server) - Unknown owner - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\mediaserver.exe O23 - Service: Intel(R) Application Tracker (MCLServiceATL) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\MCLServiceATL.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe O23 - Service: Intel(R) NMSCore (NMSCore) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\IntelDH\NMS\NMSCore\NMSCore.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe O23 - Service: Intel(R) Quality Manager (QualityManager) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Media Server\bin\qualitymanager.exe O23 - Service: Intel(R) Remoting Service (Remote UI Service) - Intel(R) Corporation - C:\Program Files\Intel\IntelDH\Intel Media Server\Shells\Remote UI Service.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Sceneo PVR Service (srvcPVR) - Buhl Data Service GmbH - C:\Program Files\Sceneo\AbsolutTV\Services\PVR\PVRService.exe O23 - Service: TeamViewer 3 (TeamViewer) - TeamViewer GmbH - C:\Program Files\TeamViewer3\TeamViewer_Host.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software GmbH - C:\Windows\System32\TuneUpDefragService.exe O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVECapSvc.exe O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - C:\Program Files\HomeCinema\TV Enhance\Kernel\TV\TVESched.exe O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe O23 - Service: XAMPP Service (XAMPP) - Unknown owner - c:\xampp\service.exe (file missing) -- End of file - 14986 bytes |
![]() | #7 |
![]() ![]() | ![]() PC lahmt bei Hochfahren und beim Starten von ProgrammenCode:
ATTFilter O9 - Extra button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) (HKCU) O9 - Extra 'Tools' menuitem: eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) (HKCU) O9 - Extra 'Tools' menuitem: eBay - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) O9 - Extra button: eBay - Der weltweite Online-Marktplatz - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/707-37276-17534-15/4 (file missing) Das heißt: HiJackThis scannt bestimmte Registry-Bereiche. Du kannst "bösartige"-Einträge dann in der Übersicht mit einem Haken versehen und "Fix checked" drücken, die Einträge sollten aus der registry gelöscht sein.
__________________ _____________________________________________ „Optimismus ist nur ein Mangel an Information.“ Heiner Müller Sicherheit?->Allgemeine Informationen Der Plural von Virus heisst "Vira"! virus(viri, n.) Substantiv O-Deklination Nom.pl/Akk.pl. |
![]() |
Themen zu PC lahmt bei Hochfahren und beim Starten von Programmen |
anti-malware, beim starten, cc cleaner, checken, computer, forum, frage, hijack, hijackthis, lahm, lahmt, log, malwarebytes, media player, nicht mehr, pc lahm, pc lahmt, plagegeister, programme, spiele, starten, superantispyware, system, trojaner, trojaner board, viren |