T
thom24
Guest
wer kann mir höflicherweise das logfile von hijackthis abchecken???
Logfile of HijackThis v1.99.1
Scan saved at 19:30:09, on 19.01.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSSystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32LckFldService.exe
C:OfficeScanNTntrtscan.exe
C:WINDOWSSystem32svchost.exe
C:OfficeScanNTtmlisten.exe
C:OfficeScanNTofcdog.exe
C:WINDOWSExplorer.EXE
C
rogrammeATI TechnologiesATI Control Panelatiptaxx.exe
C:WINDOWSSOUNDMAN.EXE
CrogrammeSynapticsSynTPSynTPLpr.exe
CrogrammeSynapticsSynTPSynTPEnh.exe
C:WINDOWSAGRSMMSG.exe
CrogrammeCRWshwicon.exe
CROGRA~1LAUNCH~1CPLCL32.EXE
CrogrammeAspire ArcadePCMService.exe
CrogrammeBabylonBabylon.exe
CrogrammeiTunesiTunesHelper.exe
C:OfficeScanNTpccntmon.exe
CrogrammeiPodbiniPodService.exe
CrogrammeJavajre1.5.0_06binjusched.exe
CrogrammeGemeinsame DateienRealUpdate_OBrealsched.exe
CROGRA~1NokiaNOKIAP~1LAUNCH~1.EXE
C:WINDOWSsystem32ctfmon.exe
CrogrammeMSN MessengerMsnMsgr.Exe
C:OfficeScanNTPop3Trap.exe
CrogrammeSpybot - Search & DestroyTeaTimer.exe
CrogrammeNokiaNokia PC Suite 6PcSync2.exe
CrogrammeHewlett-PackardDigital Imagingbinhpotdd01.exe
CROGRA~1GEMEIN~1PCSuiteServicesSERVIC~1.EXE
CROGRA~1GEMEIN~1NokiaMPAPIMPAPI3s.exe
CrogrammeOperaOpera.exe
CrogrammeMicrosoft OfficeOFFICE11OUTLOOK.EXE
CrogrammeMicrosoft OfficeOFFICE11WINWORD.EXE
CROGRA~1GEMEIN~1PCSuiteDATALA~1DATALA~1.EXE
CROGRA~1NokiaNOKIAP~1SEUPDA~1.EXE
CrogrammeHD TuneHDTune.exe
COKUME~1MosimannLOKALE~1TempTemporäres Verzeichnis 2 für hijackthis.zipHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - CrogrammeAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - CrogrammeJavajre1.5.0_06binssv.dll
O4 - HKLM..Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM..Run: [ATIPTA] CrogrammeATI TechnologiesATI Control Panelatiptaxx.exe
O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM..Run: [SynTPLpr] CrogrammeSynapticsSynTPSynTPLpr.exe
O4 - HKLM..Run: [SynTPEnh] CrogrammeSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM..Run: [ShowIcon_Chander_CRW Series Driver v1.17r019] CrogrammeCRWshwicon.exe -t"ChanderCRW Series Driver v1.17r019"
O4 - HKLM..Run: [LManager] CROGRA~1LAUNCH~1CPLCL32.EXE
O4 - HKLM..Run: [PCMService] "CrogrammeAspire ArcadePCMService.exe"
O4 - HKLM..Run: [Babylon Client] CrogrammeBabylonBabylon.exe -AutoStart
O4 - HKLM..Run: [iTunesHelper] "CrogrammeiTunesiTunesHelper.exe"
O4 - HKLM..Run: [QuickTime Task] "CrogrammeQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [Adobe Photo Downloader] "CrogrammeAdobePhotoshop Album Starter Edition3.0Appsapdproxy.exe"
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [OfficeScanNT Monitor] "C:OfficeScanNTpccntmon.exe" -HideWindow
O4 - HKLM..Run: [SunJavaUpdateSched] CrogrammeJavajre1.5.0_06binjusched.exe
O4 - HKLM..Run: [TkBellExe] "CrogrammeGemeinsame DateienRealUpdate_OBrealsched.exe" -osboot
O4 - HKLM..Run: [BearShare] "CrogrammeBearShareBearShare.exe" /pause
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [PCSuiteTrayApplication] CROGRA~1NokiaNOKIAP~1LAUNCH~1.EXE -onlytray
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [MsnMsgr] "CrogrammeMSN MessengerMsnMsgr.Exe" /background
O4 - HKCU..Run: [SpybotSD TeaTimer] CrogrammeSpybot - Search & DestroyTeaTimer.exe
O4 - HKCU..Run: [PcSync] CrogrammeNokiaNokia PC Suite 6PcSync2.exe /NoDialog
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = CrogrammeGemeinsame DateienAdobeCalibrationAdobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = CrogrammeAdobeAcrobat 7.0Readerreader_sl.exe
O4 - Global Startup: Dienst-Manager.lnk = CrogrammeMicrosoft SQL Server80ToolsBinnsqlmangr.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://CROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - CrogrammeJavajre1.5.0_06binssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - CrogrammeJavajre1.5.0_06binssv.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - CROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - CrogrammeMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - CrogrammeMessengermsmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.fhso.ch
O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) -
O16 - DPF: {08D75BB0-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupIniCtrl Class) -
O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) -
O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class) -
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
O16 - DPF: {FF0C042C-98E9-4C36-B2EC-E21FDFDCEF75} -
O17 - HKLMSystemCCSServicesTcpipParameters: Domain = stud.so.fhnw.ch
O17 - HKLMSoftware..Telephony: DomainName = stud.so.fhnw.ch
O17 - HKLMSystemCS1ServicesTcpipParameters: Domain = stud.so.fhnw.ch
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "CROGRA~1MSNMES~1msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:WINDOWSSystem32Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - CrogrammeGemeinsame DateienInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - CrogrammeiPodbiniPodService.exe
O23 - Service: LckFldService - Unknown owner - C:WINDOWSSystem32LckFldService.exe
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:OfficeScanNTntrtscan.exe
O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe
O23 - Service: OfficeScanNT Listener (tmlisten) - Unknown owner - C:OfficeScanNTtmlisten.exe
Logfile of HijackThis v1.99.1
Scan saved at 19:30:09, on 19.01.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSSystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32LckFldService.exe
C:OfficeScanNTntrtscan.exe
C:WINDOWSSystem32svchost.exe
C:OfficeScanNTtmlisten.exe
C:OfficeScanNTofcdog.exe
C:WINDOWSExplorer.EXE
C
rogrammeATI TechnologiesATI Control Panelatiptaxx.exeC:WINDOWSSOUNDMAN.EXE
C
rogrammeSynapticsSynTPSynTPLpr.exeC
rogrammeSynapticsSynTPSynTPEnh.exeC:WINDOWSAGRSMMSG.exe
C
rogrammeCRWshwicon.exeC
ROGRA~1LAUNCH~1CPLCL32.EXEC
rogrammeAspire ArcadePCMService.exeC
rogrammeBabylonBabylon.exeC
rogrammeiTunesiTunesHelper.exeC:OfficeScanNTpccntmon.exe
C
rogrammeiPodbiniPodService.exeC
rogrammeJavajre1.5.0_06binjusched.exeC
rogrammeGemeinsame DateienRealUpdate_OBrealsched.exeC
ROGRA~1NokiaNOKIAP~1LAUNCH~1.EXEC:WINDOWSsystem32ctfmon.exe
C
rogrammeMSN MessengerMsnMsgr.ExeC:OfficeScanNTPop3Trap.exe
C
rogrammeSpybot - Search & DestroyTeaTimer.exeC
rogrammeNokiaNokia PC Suite 6PcSync2.exeC
rogrammeHewlett-PackardDigital Imagingbinhpotdd01.exeC
ROGRA~1GEMEIN~1PCSuiteServicesSERVIC~1.EXEC
ROGRA~1GEMEIN~1NokiaMPAPIMPAPI3s.exeC
rogrammeOperaOpera.exeC
rogrammeMicrosoft OfficeOFFICE11OUTLOOK.EXEC
rogrammeMicrosoft OfficeOFFICE11WINWORD.EXEC
ROGRA~1GEMEIN~1PCSuiteDATALA~1DATALA~1.EXEC
ROGRA~1NokiaNOKIAP~1SEUPDA~1.EXEC
rogrammeHD TuneHDTune.exeC
OKUME~1MosimannLOKALE~1TempTemporäres Verzeichnis 2 für hijackthis.zipHijackThis.exeR0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
Please,
Anmelden
or
Registrieren
to view URLs content!
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL =
Please,
Anmelden
or
Registrieren
to view URLs content!
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C
rogrammeAdobeAcrobat 7.0ActiveXAcroIEHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C
rogrammeJavajre1.5.0_06binssv.dllO4 - HKLM..Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM..Run: [ATIPTA] C
rogrammeATI TechnologiesATI Control Panelatiptaxx.exeO4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM..Run: [SynTPLpr] C
rogrammeSynapticsSynTPSynTPLpr.exeO4 - HKLM..Run: [SynTPEnh] C
rogrammeSynapticsSynTPSynTPEnh.exeO4 - HKLM..Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM..Run: [ShowIcon_Chander_CRW Series Driver v1.17r019] C
rogrammeCRWshwicon.exe -t"ChanderCRW Series Driver v1.17r019"O4 - HKLM..Run: [LManager] C
ROGRA~1LAUNCH~1CPLCL32.EXEO4 - HKLM..Run: [PCMService] "C
rogrammeAspire ArcadePCMService.exe"O4 - HKLM..Run: [Babylon Client] C
rogrammeBabylonBabylon.exe -AutoStartO4 - HKLM..Run: [iTunesHelper] "C
rogrammeiTunesiTunesHelper.exe"O4 - HKLM..Run: [QuickTime Task] "C
rogrammeQuickTimeqttask.exe" -atboottimeO4 - HKLM..Run: [Adobe Photo Downloader] "C
rogrammeAdobePhotoshop Album Starter Edition3.0Appsapdproxy.exe"O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [OfficeScanNT Monitor] "C:OfficeScanNTpccntmon.exe" -HideWindow
O4 - HKLM..Run: [SunJavaUpdateSched] C
rogrammeJavajre1.5.0_06binjusched.exeO4 - HKLM..Run: [TkBellExe] "C
rogrammeGemeinsame DateienRealUpdate_OBrealsched.exe" -osbootO4 - HKLM..Run: [BearShare] "C
rogrammeBearShareBearShare.exe" /pauseO4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [PCSuiteTrayApplication] C
ROGRA~1NokiaNOKIAP~1LAUNCH~1.EXE -onlytrayO4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [MsnMsgr] "C
rogrammeMSN MessengerMsnMsgr.Exe" /backgroundO4 - HKCU..Run: [SpybotSD TeaTimer] C
rogrammeSpybot - Search & DestroyTeaTimer.exeO4 - HKCU..Run: [PcSync] C
rogrammeNokiaNokia PC Suite 6PcSync2.exe /NoDialogO4 - Global Startup: Adobe Gamma Loader.exe.lnk = C
rogrammeGemeinsame DateienAdobeCalibrationAdobe Gamma Loader.exeO4 - Global Startup: Adobe Reader Speed Launch.lnk = C
rogrammeAdobeAcrobat 7.0Readerreader_sl.exeO4 - Global Startup: Dienst-Manager.lnk = C
rogrammeMicrosoft SQL Server80ToolsBinnsqlmangr.exeO4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C
ROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C
rogrammeJavajre1.5.0_06binssv.dllO9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C
rogrammeJavajre1.5.0_06binssv.dllO9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C
ROGRA~1MICROS~2OFFICE11REFIEBAR.DLLO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C
rogrammeMessengermsmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C
rogrammeMessengermsmsgs.exeO14 - IERESET.INF: START_PAGE_URL=http://www.fhso.ch
O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) -
Please,
Anmelden
or
Registrieren
to view URLs content!
O16 - DPF: {08D75BB0-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupIniCtrl Class) -
Please,
Anmelden
or
Registrieren
to view URLs content!
O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) -
Please,
Anmelden
or
Registrieren
to view URLs content!
O16 - DPF: {5EFE8CB1-D095-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment ObjRemoveCtrl Class) -
Please,
Anmelden
or
Registrieren
to view URLs content!
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
Please,
Anmelden
or
Registrieren
to view URLs content!
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
Please,
Anmelden
or
Registrieren
to view URLs content!
O16 - DPF: {FF0C042C-98E9-4C36-B2EC-E21FDFDCEF75} -
Please,
Anmelden
or
Registrieren
to view URLs content!
O17 - HKLMSystemCCSServicesTcpipParameters: Domain = stud.so.fhnw.ch
O17 - HKLMSoftware..Telephony: DomainName = stud.so.fhnw.ch
O17 - HKLMSystemCS1ServicesTcpipParameters: Domain = stud.so.fhnw.ch
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C
ROGRA~1MSNMES~1msgrapp.dll" (file missing)O23 - Service: Ati HotKey Poller - Unknown owner - C:WINDOWSSystem32Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C
rogrammeGemeinsame DateienInstallShieldDriver11Intel 32IDriverT.exeO23 - Service: iPodService - Apple Computer, Inc. - C
rogrammeiPodbiniPodService.exeO23 - Service: LckFldService - Unknown owner - C:WINDOWSSystem32LckFldService.exe
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:OfficeScanNTntrtscan.exe
O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe
O23 - Service: OfficeScanNT Listener (tmlisten) - Unknown owner - C:OfficeScanNTtmlisten.exe
