|
Danke für deine ganze Zeit und Mühe. :) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:20:24, on 01.10.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\mHotkey.exe C:\Programme\Fingerprint Sensor\ATSwpNav.exe C:\Programme\Gemeinsame Dateien\AOL\1212203783\ee\AOLSoftware.exe C:\Programme\QuickTime\qttask.exe C:\Programme\Fighters\spywarefighter\SpywarefighterUser.exe C:\APPS\SMP\SmpSys.exe C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe C:\Programme\HP\Digital Imaging\bin\hpqSTE08.exe C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLAcsd.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Apps\Softex\OmniPass\Omniserv.exe C:\WINDOWS\system32\HPZipm12.exe C:\Programme\Fighters\configservice.exe C:\Programme\Gemeinsame Dateien\Roxio Shared\SharedCOM8\RoxMediaDB.exe C:\Programme\Gemeinsame Dateien\Roxio Shared\SharedCOM8\RoxWatch.exe C:\WINDOWS\system32\svchost.exe C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe C:\Programme\Fighters\licenseservice.exe C:\Programme\Fighters\updateservice.exe C:\Programme\Fighters\ScannerService.exe c:\programme\fighters\spywarefighter\SPYWAREfighterTray.exe C:\Apps\Softex\OmniPass\OPXPApp.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wuauclt.exe C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Programme\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.alice-dsl.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O4 - HKLM\..\Run: [NECHotkey] mHotkey.exe O4 - HKLM\..\Run: [ATSwpNav] "C:\Programme\Fingerprint Sensor\ATSwpNav" -run O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\GEMEIN~1\INSTAL~1\UPDATE~1\isuspm.exe -startup O4 - HKLM\..\Run: [HostManager] C:\Programme\Gemeinsame Dateien\AOL\1212203783\ee\AOLSoftware.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [spywarefighterguard] C:\Programme\Fighters\spywarefighter\SpywarefighterUser.exe O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\ger.htm O16 - DPF: {26FCCDF9-A7E1-452A-A73D-7BF7B4D0BA6C} (AOL Pictures Uploader Class) - http://o.aolcdn.com/pictures/ap/Resources/v2.15/cab/aolpPlugins.10.6.0.8.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLAcsd.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: PTK License-FIGHTERS-18668899 - SPAMfighter - C:\Programme\Fighters\licenseservice.exe O23 - Service: PTK Live Update-FIGHTERS-18668899 - SPAMfighter - C:\Programme\Fighters\updateservice.exe O23 - Service: PTK Scanner-FIGHTERS-18668899 - SPAMfighter - C:\Programme\Fighters\ScannerService.exe O23 - Service: PTK SharedAccess-FIGHTERS-18668899 - SPAMfighter - C:\Programme\Fighters\configservice.exe O23 - Service: LiveShare P2P Server (RoxLiveShare) - Sonic Solutions - C:\Programme\Gemeinsame Dateien\Roxio Shared\SharedCOM8\RoxLiveShare.exe O23 - Service: RoxMediaDB - Sonic Solutions - C:\Programme\Gemeinsame Dateien\Roxio Shared\SharedCOM8\RoxMediaDB.exe O23 - Service: RoxUpnpRenderer (RoxUPnPRenderer) - Sonic Solutions - C:\Programme\Gemeinsame Dateien\Roxio Shared\SharedCom\RoxUpnpRenderer.exe O23 - Service: RoxUpnpServer - Sonic Solutions - C:\Programme\Roxio\WinOnCD 8\Digital Home\RoxUpnpServer.exe O23 - Service: Roxio Hard Drive Watcher (RoxWatch) - Sonic Solutions - C:\Programme\Gemeinsame Dateien\Roxio Shared\SharedCOM8\RoxWatch.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe -- End of file - 7263 bytes |
clean :daumenhoc was du noch mach kannst: Bitte besuche die Windows Update Seite und lade Dir alle Updates,die Dir über die Schaltfläche "Benutzerdefiniert" angeboten werden.Insbesondere den IE7.
|
Clean...was für ein schönes und beruhigendes Wort. :D Ich hoffe du meintest jetzt diese Auswertung: Detection Statistics: 12Applications Detected in Total 8 Insecure Versions Detected 4 Patched Versions Detected Running For: 1 Minute, 28 Seconds Errors with the scan: 0 Errors Detected, scan result should be correct Enable thorough system inspection Enable the Secunia Online Software Inspector to search for software installed in non-default locations. Status / Currently Processing: Detection completed successfully Programs / Result Version Detected Status Microsoft Windows XP Professional Service Pack 3 Adobe Reader 7.x 7.0.8.218 This installation of Adobe Reader 7.x is insecure and potentially exposes your system to security threats! The detected version installed on your system is 7.0.8.218, however, the latest patched version released by the vendor, fixing one or more vulnerabilities, is 7.1.0. Update Instructions: Download Installed on Your System in: C:\Programme\Adobe\Acrobat 7.0\Reader\AcroRd32.exe Apple QuickTime 7.x 7.50.51.0 This installation of Apple QuickTime 7.x is insecure and potentially exposes your system to security threats! The detected version installed on your system is 7.50.51.0, however, the latest patched version released by the vendor, fixing one or more vulnerabilities, is 7.55.0.0. Update Instructions: Download Installed on Your System in: C:\Programme\QuickTime\QuickTimePlayer.exe Microsoft Internet Explorer 7.x 7.0.6000.16705 Microsoft Outlook Express 6 6.00.2900.5512 Microsoft Windows Media Player 10.x 10.00.00.3802 Adobe Flash Player 9.x 9.0.45.0 This installation of Adobe Flash Player 9.x is insecure and potentially exposes your system to security threats! The detected version installed on your system is 9.0.45.0, however, the latest patched version released by the vendor, fixing one or more vulnerabilities, is 9.0.124.0. Update Instructions: Download Installed on Your System in: C:\WINDOWS\SYSTEM32\Macromed\Flash\Flash9c.ocx Macromedia Flash Player 7.x 7.0.19.0 This installation of Macromedia Flash Player 7.x is insecure and potentially exposes your system to security threats! The detected version installed on your system is 7.0.19.0, however, the latest patched version released by the vendor, fixing one or more vulnerabilities, is 9.0.124.0. Update Instructions: Download Installed on Your System in: C:\WINDOWS\SYSTEM32\Macromed\Flash\Flash.ocx Sun Java JRE 1.5.x / 5.x 5.0.40.5 This installation of Sun Java JRE 1.5.x / 5.x is insecure and potentially exposes your system to security threats! The detected version installed on your system is 5.0.40.5, however, the latest patched version released by the vendor, fixing one or more vulnerabilities, is 5.0.160.2. Update Instructions: Download Installed on Your System in: C:\Programme\Java\jre1.5.0_04\bin\java.exe Apple QuickTime 7.x 7.50.61.0 This installation of Apple QuickTime 7.x is insecure and potentially exposes your system to security threats! The detected version installed on your system is 7.50.61.0, however, the latest patched version released by the vendor, fixing one or more vulnerabilities, is 7.55.0.0. Update Instructions: Download Installed on Your System in: C:\WINDOWS\system32\QuickTime.qts Macromedia Flash Player 6.x 6.0.80.0 This installation of Macromedia Flash Player 6.x is insecure and potentially exposes your system to security threats! The detected version installed on your system is 6.0.80.0, however, the latest patched version released by the vendor, fixing one or more vulnerabilities, is 6.0.88.0. Update Instructions: Update to version 6.0.88.0 or 9.0.47.0. http://www.macromedia.com/go/getflash NOTE: When updating Flash Player, older versions are not always automatically removed from your system. If older versions were detected that you believe should not be present, then please contact the vendor regarding how to remove them from your system. Vulnerabilities Fixed: Read about the vulnerabilities fixed with this update in Secunia advisory SA22467 (opens in a new window). The Secunia advisory describes the vulnerabilities fixed by the latest security update. If your installation is outdated with more than one version, then more vulnerabilities may be covered. Installed on Your System in: C:\Programme\Gemeinsame Dateien\aol\Flasha.ocx Sun Java JRE 1.5.x / 5.x 5.0.40.5 This installation of Sun Java JRE 1.5.x / 5.x is insecure and potentially exposes your system to security threats! The detected version installed on your system is 5.0.40.5, however, the latest patched version released by the vendor, fixing one or more vulnerabilities, is 5.0.160.2. Update Instructions: Download Installed on Your System in: C:\WINDOWS\system32\java.exe |
zieh alle updates. mit clean meinte ich deinen rechner ;) :) |
Das du dich mit clean auf meinen Rechner bezogen hast, habe ich verstanden. :) Ich bräuchte bitte noch einmal deinen Rat Schrauber. In meiner Quarantäne von "AviraAntiVir" sind noch alte Funde des TR/Spy.Gen gefangen. Darf ich die jetzt ohne bedenken löschen? Oder soll ich die einfach dort ruhen lassen? |
die kannst du ruhig löschen :) |
Habe nochmal eine vollständige Systemprüfung mit AviraAntiVir gemacht. Keine weiteren Funde mehr aufgetaucht. :party: Jetzt möchte ich gerne noch eine Sache losswerden, die mir persönlich am Herzen liegt. Für mich ist zwar mein Rechner eher ein Mysterium, aber ich habe in den letzten Tagen sehr viel im Netz über TR/Spy.Gen gelesen. Dadurch habe ich den Hauch einer Ahnung, welche Meisterleistung du hier ausgearbeitet hast Schrauber. :) Die meisten Themen zum TR/Spy.Gen im Netz enden mit folgendem Satz "Da hilft nur, Rechner platt machen und neu installieren". Ich bin dir unendlich dankbar für deine Hilfe...:aplaus: |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 08:39 Uhr. |
Copyright ©2000-2024, Trojaner-Board