firefox & thunderbird verändert
 

hallöle

mein problem schildert sich folgendermaßen.die firewall (enthalten in kaspersky
security-suite 7)meldet bei jedem start von firefox und thunderbird,dass die exe datei verändert worden sei.ohne dass ich upgedatet hätte.autoupdate ist bei beiden programmen deaktiviert.ein evtl. verfügbares update wird nur gemeldet.das macht mich schon etwas stutzig!
weder der kaspersky-virenscanner,noch spybot,noch adaware free finden irgendwas.fehlalarm der firewall??
hier ist mal ein hijackthis log,mit dem ich leider ned viel anfangen kann.
vielleicht kann mir ja jemand helfen!?
danke schonmal!


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:26:34, on 19.10.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\Programme\eigene\defender\MsMpEng.exe
D:\WINDOWS\System32\svchost.exe
D:\Programme\eigene\adaware\aawservice.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Programme\eigene\a-squared Free\a2service.exe
D:\Programme\avmclient\avmbtservice.exe
D:\Programme\avmclient\panapp.exe
D:\Programme\avmclient\AvmObexService.exe
D:\Programme\eigene\KIS\avp.exe
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\Explorer.EXE
D:\Programme\eigene\KIS\avp.exe
D:\Programme\eigene\defender\MSASCui.exe
D:\Programme\eigene\Spybot - Search & Destroy\TeaTimer.exe
D:\Programme\Mozilla Firefox\firefox.exe
D:\Programme\eigene\thunderbird\thunderbird.exe
D:\Programme\Skype\Phone\Skype.exe
D:\Programme\Skype\Plugin Manager\skypePM.exe
D:\Programme\eigene\hjt\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = h**p://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = h**p://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = h**p://windowsupdate.microsoft.com/
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\eigene\SPYBOT~1\SDHelper.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - D:\Programme\eigene\Free Download Manager\iefdm2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVP] "D:\Programme\eigene\KIS\avp.exe"
O4 - HKLM\..\Run: [Windows Defender] "D:\Programme\eigene\defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Programme\eigene\Spybot - Search & Destroy\TeaTimer.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Download all with Free Download Manager - file://D:\Programme\eigene\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://D:\Programme\eigene\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download video with Free Download Manager - file://D:\Programme\eigene\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Download with Free Download Manager - file://D:\Programme\eigene\Free Download Manager\dllink.htm
O8 - Extra context menu item: Hinzufügen zu Kaspersky Anti-Banner - D:\Programme\eigene\KIS\ie_banner_deny.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Programme\eigene\java\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Programme\eigene\java\bin\npjpi160_02.dll
O9 - Extra button: Statistik für Web-Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - D:\Programme\eigene\KIS\SCIEPlgn.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\eigene\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\PROGRA~1\eigene\SPYBOT~1\SDHelper.dll
O15 - Trusted Zone: h**p://*.windowsupdate.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - h**p://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1189656103531
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: D:\PROGRA~1\eigene\KIS\adialhk.dll
O20 - Winlogon Notify: !SASWinLogon - D:\WINDOWS\
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - D:\Programme\eigene\a-squared Free\a2service.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - D:\Programme\eigene\adaware\aawservice.exe
O23 - Service: AVM BT Connection Service - AVM Berlin - D:\Programme\avmclient\avmbtservice.exe
O23 - Service: AVM BT PAN Service - AVM Berlin - D:\Programme\avmclient\panapp.exe
O23 - Service: AVM BT OBEX Service (AvmObexService) - AVM Berlin - D:\Programme\avmclient\AvmObexService.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - D:\Programme\eigene\KIS\avp.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5117 bytes





grüssle hagbard01