![]() |
Brauche Hilfe mit "TR/Dldr.Zlob.adr" HIer mein LOGFIILE von HiJackThis 1.99.1: Logfile of HijackThis v1.99.1 Scan saved at 17:40:32, on 03.10.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\AntiVir PersonalEdition Classic\avguard.exe C:\Programme\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Programme\Java\jre1.6.0_02\bin\jusched.exe C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe C:\Programme\Internet Explorer\iexplore.exe C:\Programme\Internet Explorer\iexplore.exe C:\Programme\Logitech-Maus\SetPoint\SetPoint.exe C:\Programme\Gemeinsame Dateien\Logitech\KHAL\KHALMNPR.EXE C:\WINDOWS\explorer.exe C:\Programme\Mozilla Firefox\firefox.exe C:\Anwendungen\ICQ 6\ICQ.exe C:\WINDOWS\system32\msiexec.exe C:\Anwendungen\SpyWareEntferner\spftray.exe C:\Anwendungen\SpyWareEntferner\spfprc.exe C:\Anwendungen\SpyWareEntferner\SPYWAREfighter.exe C:\Programme\AntiVir PersonalEdition Classic\avcenter.exe C:\Programme\WinRAR\WinRAR.exe C:\DOKUME~1\dominik\LOKALE~1\Temp\Rar$EX00.797\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: MSVPS System - {0D5227BF-0C5B-4EA8-833C-FE09F1496F39} - C:\WINDOWS\div32.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: Alcohol Toolbar Helper - {8126A4A5-BFD3-46FE-BBDF-BFB5CF78E489} - C:\Programme\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll O2 - BHO: CmjBrowserHelperObject Object - {AC41D38F-B56D-40AD-94E0-B493D130C959} - C:\Programme\Mindjet\MindManager 6\Mm6InternetExplorer.dll O2 - BHO: (no name) - {E1DCD716-B521-4D2C-A6C4-C31EFE0EF409} - C:\WINDOWS\system32\wintrusu.dll (file missing) O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll O3 - Toolbar: Alcohol Toolbar - {ED4BD629-C1B6-4399-8A34-02CCAA921DC9} - C:\Programme\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll O3 - Toolbar: The advpn - {E99D4D0C-EB54-46AF-B62A-3AA1F31D53E5} - C:\WINDOWS\advpn.dll (file missing) O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [GBB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [ROAD ITCH AMOK PING] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Long slow road itch\Third Chic.exe O4 - HKLM\..\Run: [spywarefighterguard] C:\Anwendungen\SpyWareEntferner\spftray.exe O4 - HKCU\..\Run: [cast trans] C:\DOKUME~1\dominik\ANWEND~1\SCRSET~1\PHONE LIES.exe O4 - Startup: hamachi.lnk = C:\Anwendungen\Hamachi\hamachi.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Logitech SetPoint.lnk = ? O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Send to Mindjet MindManager - {531B9DC0-D8EE-4c76-A6EE-6C1E50569655} - C:\Programme\Mindjet\MindManager 6\Mm6InternetExplorer.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing) O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing) O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Anwendungen\ICQ 6\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Anwendungen\ICQ 6\ICQ.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{5B58C6B1-1154-40AA-A087-FED60E9C68A6}: NameServer = 217.237.150.51,217.237.148.22 O18 - Protocol: bw+0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: offline-8876480 - {113D062C-1045-44FF-96FD-1BA5E8A2685C} - C:\Programme\Logitech-Maus\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing) O21 - SSODL: mssql - {75875DDB-26A0-4C73-A258-36950D0FBA11} - C:\WINDOWS\mssql.dll (file missing) O21 - SSODL: msmhost - {000F2404-92EA-4F6B-A543-C5036C8F0205} - C:\WINDOWS\msmhost.dll (file missing) O21 - SSODL: msmdev - {1F2552D9-4BBD-4C72-9046-311C3BC81323} - C:\WINDOWS\msmdev.dll (file missing) O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: DiRT Drivers Auto Removal (pr2ah4nb) (pr2ah4nb) - CODEMASTERS - C:\WINDOWS\system32\pr2ah4nb.exe O23 - Service: Pripas (pripas) - Unknown owner - C:\WINDOWS\pripas\bin\pripasserver.exe (file missing) O23 - Service: SPYWAREfighterRP - SpamFighter APS - C:\Anwendungen\SpyWareEntferner\spfprc.exe O23 - Service: T-DSL SpeedManager (TSMService) - T-Systems Business Services - C:\Anwendungen\T-Com Speed Manager\TSMSvc.exe Gefunden wurde der Trojaner in: - "C:\WINDOWS\advpn.dll" - "C:\System Volume Information\_restore{AAF2AAF0-FECB-47D6-9EDC-B585AEF0291E}\RP168\A0047738.exe" Was soll ich eurer meinung nach tun????? Hab auch das Problem, dass in letzter Zeit, wenn ich surfe, viele Popup-Fenster sich öffnen mit nervender Werbung?? Hiern och der scan von "SmitfraudFix": SmitFraudFix v2.236 Scan done at 18:12:12,09, 03.10.2007 Run from C:\downloads\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in normal mode »»»»»»»»»»»»»»»»»»»»»»»» Process »»»»»»»»»»»»»»»»»»»»»»»» hosts »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS C:\WINDOWS\div32.dll FOUND ! C:\WINDOWS\syscore.dll FOUND ! »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\Dokumente und Einstellungen\dominik »»»»»»»»»»»»»»»»»»»»»»»» C:\Dokumente und Einstellungen\dominik\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Start Menu »»»»»»»»»»»»»»»»»»»»»»»» »»»»»»»»»»»»»»»»»»»»»»»» Desktop »»»»»»»»»»»»»»»»»»»»»»»» C:\Programme C:\Programme\VideoAccessCodec\ FOUND ! »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="http://www.kleevisch.de/bilder/mix-media/pimmel-man-2-sml.jpg" "SubscribedURL"="http://www.kleevisch.de/bilder/mix-media/pimmel-man-2-sml.jpg" "FriendlyName"="" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\1] "Source"="About:Home" "SubscribedURL"="About:Home" "FriendlyName"="Die derzeitige Homepage" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="" »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "System"="" »»»»»»»»»»»»»»»»»»»»»»»» Rustock »»»»»»»»»»»»»»»»»»»»»»»» DNS »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection »»»»»»»»»»»»»»»»»»»»»»»» End |
Hallo zuerst mach bitte alle versteckten Dateien und Ordner sichtbar. Deaktiviere die Systemwiederherstellung, die kann nach der Bereinigung wieder aktiviert werden. Dann arbeite diese Anleitung ab --> Swizzor entfernen Relevanter Eintrag für dich ist : Zitat:
-Poste den rapport.txt -Erstelle ein neues Hijackthis Log, erstelle hierfür aber einen eigenen Ordner z.B. C:\HJT und entpacke das Programm dort hinein, dann benenne die Hijackthis.exe um in z.B. ABC.exe. MFG |
Alle Zeitangaben in WEZ +1. Es ist jetzt 10:45 Uhr. |
Copyright ©2000-2025, Trojaner-Board