![]() |
Hilfe was muss ich fixen Könnten sie mir sagen was ich fixen soll, danke!!! Logfile of HijackThis v1.98.2 Scan saved at 22:04:38, on 04.10.2004 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\AVPersonal\AVGUARD.EXE C:\Programme\AVPersonal\AVWUPSRV.EXE C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\sstray.exe C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe C:\Programme\AVPersonal\AVGNT.EXE C:\Programme\Java\j2re1.4.2_05\bin\jusched.exe C:\Programme\Elaborate Bytes\CloneCD\CloneCDTray.exe C:\WINDOWS\System32\ctfmon.exe C:\Programme\Avant Browser\avant.exe C:\Dokumente und Einstellungen\Dennis the King.DENNIS-L3RN1E5E\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:search R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:search R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:search R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:search O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [ccRegVfy] C:\Programme\Gemeinsame Dateien\Symantec Shared\ccRegVfy.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [routcnf] C:\Programme\DeTeWe\TA 33 USB\routcnf.exe /capiactive O4 - HKLM\..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_05\bin\jusched.exe O4 - HKLM\..\Run: [CreateCD] C:\DOKUME~1\DENNIS~1.DEN\Desktop\POKEMO~1.EXE -r O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Programme\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL O4 - HKLM\..\Run: [CloneCDTray] "C:\Programme\Elaborate Bytes\CloneCD\CloneCDTray.exe" O4 - HKLM\..\Run: [syschk] syschk.exe /fastcheck O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [syschk] syschk.exe /fastcheck O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: Alle Bilder von gleichem Server filtern - C:\Programme\Avant Browser\AddAllToADBlackList.htm O8 - Extra context menu item: Hervorheben - C:\Programme\Avant Browser\Highlight.htm O8 - Extra context menu item: Suchen - C:\Programme\Avant Browser\Search.htm O8 - Extra context menu item: Zur Werbebanner-Filterliste hinzufügen - C:\Programme\Avant Browser\AddToADBlackList.htm O8 - Extra context menu item: Öffne alle Links auf dieser Seite... - C:\Programme\Avant Browser\OpenAllLinks.htm O12 - Plugin for .PDF: C:\Programme\Internet Explorer\PLUGINS\nppdf32.dll O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/...eInstaller.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{6D7248D6-182D-4D47-8E7C-79B36B8E64C2}: NameServer = 195.202.32.79 195.202.33.68 |
@squall-16 system und IE nicht gepatcht, den hier ist oben http://www.sophos.de/virusinfo/analyses/w32holarg.html wechsle in den abgesicherten modus und fixe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:search R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:search R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:search R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:search O4 - HKLM\..\Run: [syschk] syschk.exe /fastcheck O4 - HKCU\..\Run: [syschk] syschk.exe /fastcheck O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Pol icies\System, DisableRegedit=1 O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52...meInstaller.exe manuell löschen syschk.exe /fastcheck neu starten, danach escan einsetzten http://www.trojaner-board.de/42731-escan-anleitung.html poste danach ein neues HJT log chaosman |
Alle Zeitangaben in WEZ +1. Es ist jetzt 21:18 Uhr. |
Copyright ©2000-2025, Trojaner-Board