|
| |||||||
| Registrieren | Website Spy | Member List | Spenden | Suche | Die heutige Beiträge | Alle Foren als gelesen markieren | Forum-Regeln |
 |
 |
| | Thread Tools |
|
#1
26. März 2008, 15:42
| |||
| |||
| Hallo - mein Computer seit den letzten Tagen wurde sehr langsam läuft, habe ich laufen spybot, fanden sie ein paar Sachen und offenbar hat es los - aber jetzt ist mein Computer immer noch langsam .. Bitte helfen ... Hier ist meine HJT-Log-Datei ... |
|
#2
26. März 2008, 15:43
| |||
| |||
| Logfile von HijackThis v1.99.1 Scan gespeichert um 6:47:29 Uhr, am 3/26/2008 Plattform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16608) Laufenden Prozesse: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ Programme \ Gemeinsame Dateien \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ Mdm.exe C: \ WINDOWS \ System32 \ nvsvc32.exe C: \ WINDOWS \ system32 \ PRISMSVC.EXE C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ system32 \ PRISMSVR.exe C: \ WINDOWS \ ALCXMNTR.EXE C: \ WINDOWS \ LTMSG.exe C: \ WINDOWS \ System32 \ spool \ drivers \ w32x86 \ 3 \ E_FATI9 FA.EXE C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe C: \ Program Files \ QuickTime \ qttask.exe C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Adobe \ Adobe Photoshop Lightroom 1/2 \ apdproxy.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ BitTorrent \ bittorrent.exe C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe C: \ WINDOWS \ system32 \ rundll32.exe C: \ Program Files \ Dell Wireless \ PRISMCFG.exe C: \ Program Files \ LimeWire \ LimeWire.exe C: \ Program Files \ Stardock \ ObjectDock \ ObjectDock.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Dokumente und Einstellungen \ Neven \ Desktop \ sniper.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.finderg.com R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://yahoo.sbc.com/dsl R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://yahoo.sbc.com/dsl R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ System32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / installquiet / keeploaded / nodetect O4 - HKLM \ .. \ Run: [LTMSG] LTMSG.exe 7 O4 - HKLM \ .. \ Run: [EPSON Stylus Photo R320 Series] C: \ WINDOWS \ System32 \ spool \ drivers \ w32x86 \ 3 \ E_FATI9 FA.EXE / P30 "EPSON Stylus Photo R320 Series" / O6 "USB002" / M "Stylus Photo R320" O4 - HKLM \ .. \ Run: [ProfileWatcher] C: \ Program Files \ ProfileWatcher \ profilewatcher.exe O4 - HKLM \ .. \ Run: [avast!] C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [Adobe Photo Downloader] "C: \ Program Files \ Adobe \ Adobe Photoshop Lightroom 1/2 \ apdproxy.exe" O4 - HKCU \ .. \ Run: [Yahoo! Pager] C: \ PROGRA ~ 1 \ Yahoo! \ MESSEN ~ 1 \ ypager.exe-quiet O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [BitTorrent] "C: \ Program Files \ BitTorrent \ bittorrent.exe" - force_start_minimized O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe O4 - Startup: LimeWire Am Startup.lnk = "C: \ Program Files \ LimeWire \ LimeWire.exe O4 - Startup: Stardock ObjectDock.lnk = C: \ Program Files \ Stardock \ ObjectDock \ ObjectDock.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = "C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe O4 - Global Startup: Wireless USB 2.0 WLAN-Karte Utility.lnk =? O8 - Extra Kontext Menüpunkt: & Search -? P = ZK O8 - Extra Kontext Menüpunkt: E & Xport auf Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office11 \ EXCEL.EXE/3000 O9 - Extra Knopf: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office11 \ REFIEBAR.DLL O9 - Extra Knopf: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra-Taste: PokerStars.net - (FA9B9510-9FCB-4ca0-818C-5D0987B47C4D) - C: \ Program Files \ PokerStars.NET \ PokerStarsUpdate.exe O9 - Extra-Taste: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O11 - Options group: [INTERNATIONAL] International * O16 - DPF: (200B3EE9-7242-4EFD-B1E4-D97EE825BA53) (VerifyGMN Class) -- http://h20270.www2.hp.com/ediags/gmn...taller_gmn.cab O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) -- O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://update.microsoft.com/windowsu...?1162589752500 O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://update.microsoft.com/microsof...?1162829153500 O16 - DPF: (AB86CE53-AC9F-449F-9399-D8ABCA09EC09) (Get_ActiveX Control) -- https: / / h17000.www1.hp.com/ewfrf-JAV...oadManager.ocx O16 - DPF: (D18F962A-3722-4b59-B08D-28BB9EB2281E) (PhotosCtrl Class) -- http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...sh/swflash.cab O20 - Winlogon Notify: PRISMAPI.DLL - C: \ WINDOWS \ SYSTEM32 \ PRISMAPI.DLL O20 - Winlogon Notify: PRISMGNA.DLL - C: \ WINDOWS \ SYSTEM32 \ PRISMGNA.DLL O20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ SYSTEM32 \ WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C: \ Programme \ Gemeinsame Dateien \ Adobe Systems Shared \ Service \ Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C: \ Programme \ Gemeinsame Dateien \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe O23 - Service: avast! Mail Scanner - Unbekannt Eigentümer - C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe "/ service (file missing) O23 - Service: avast! Web Scanner - Unbekannt Eigentümer - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe "/ service (file missing) O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd - C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe O23 - Service: hpdj - Unbekannte Eigentümer - C: \ DOCUME ~ 1 \ Owner \ LOCALS ~ 1 \ Temp \ hpdj.exe (file missing) O23 - Service: iPod Service - Apple Computer, Inc. - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ System32 \ nvsvc32.exe O23 - Service: PRISMSVC - Conexant Systems, Inc. - C: \ WINDOWS \ system32 \ PRISMSVC.EXE |
|
#3
26. März 2008, 16:35
| |||
| |||
| Sie haben einige Malware-Anzeigen in das Protokoll. Bitte gehen Sie HIER und nicht die CCleaner, SUPERAntiSpyware und MBAM Scans. Post in die Protokolle, wenn zusammen mit einer komplett neuen hijackthis log. Stellen Sie sicher, dass nicht die Ausführung von HijackThis, bis nach dem anderen Scans sind abgeschlossen und der Computer neu gestartet wurde. Hinweis Es wird vorgeschlagen, gehen Sie zu Add / Remove Programs und deinstallieren ProfileWatcher. Zitat:
__________________  |
|
#4
2. April 2008, 15:10
| |||
| |||
| Dies ist die malwarebytes log |
|
#5
2. April 2008, 15:11
| |||
| |||
| Dies ist der hijackthis log Logfile von HijackThis v1.99.1 Scan gespeichert um 6:16:51 Uhr, am 4/2/2008 Plattform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16608) Laufenden Prozesse: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ Programme \ Gemeinsame Dateien \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ Mdm.exe C: \ WINDOWS \ System32 \ nvsvc32.exe C: \ WINDOWS \ system32 \ PRISMSVC.EXE C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ system32 \ PRISMSVR.exe C: \ WINDOWS \ ALCXMNTR.EXE C: \ WINDOWS \ LTMSG.exe C: \ WINDOWS \ System32 \ spool \ drivers \ w32x86 \ 3 \ E_FATI9 FA.EXE C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe C: \ Program Files \ QuickTime \ qttask.exe C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Adobe \ Adobe Photoshop Lightroom 1/2 \ apdproxy.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ WINDOWS \ system32 \ rundll32.exe C: \ Program Files \ Dell Wireless \ PRISMCFG.exe C: \ Program Files \ LimeWire \ LimeWire.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Dokumente und Einstellungen \ Neven \ Desktop \ sniper.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.finderg.com R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://yahoo.sbc.com/dsl R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://yahoo.sbc.com/dsl R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ Program Files \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll O2 - BHO: Yahoo! Toolbar Helper - (02478D38-C3F9-4EFB-9B51-7695ECA05670) - C: \ Program Files \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ Program Files \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ System32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / installquiet / keeploaded / nodetect O4 - HKLM \ .. \ Run: [LTMSG] LTMSG.exe 7 O4 - HKLM \ .. \ Run: [EPSON Stylus Photo R320 Series] C: \ WINDOWS \ System32 \ spool \ drivers \ w32x86 \ 3 \ E_FATI9 FA.EXE / P30 "EPSON Stylus Photo R320 Series" / O6 "USB002" / M "Stylus Photo R320" O4 - HKLM \ .. \ Run: [ProfileWatcher] C: \ Program Files \ ProfileWatcher \ profilewatcher.exe O4 - HKLM \ .. \ Run: [avast!] C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [Adobe Photo Downloader] "C: \ Program Files \ Adobe \ Adobe Photoshop Lightroom 1/2 \ apdproxy.exe" O4 - HKCU \ .. \ Run: [Yahoo! Pager] C: \ PROGRA ~ 1 \ Yahoo! \ MESSEN ~ 1 \ ypager.exe-quiet O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [BitTorrent] "C: \ Program Files \ BitTorrent \ bittorrent.exe" - force_start_minimized O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe O4 - Startup: LimeWire Am Startup.lnk = "C: \ Program Files \ LimeWire \ LimeWire.exe O4 - Startup: Stardock ObjectDock.lnk = C: \ Program Files \ Stardock \ ObjectDock \ ObjectDock.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = "C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe O4 - Global Startup: Wireless USB 2.0 WLAN-Karte Utility.lnk =? O8 - Extra Kontext Menüpunkt: & Search -? P = ZK O8 - Extra Kontext Menüpunkt: E & Xport auf Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office11 \ EXCEL.EXE/3000 O9 - Extra Knopf: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office11 \ REFIEBAR.DLL O9 - Extra Knopf: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra-Taste: PokerStars.net - (FA9B9510-9FCB-4ca0-818C-5D0987B47C4D) - C: \ Program Files \ PokerStars.NET \ PokerStarsUpdate.exe O9 - Extra-Taste: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O11 - Options group: [INTERNATIONAL] International * O16 - DPF: (200B3EE9-7242-4EFD-B1E4-D97EE825BA53) (VerifyGMN Class) -- http://h20270.www2.hp.com/ediags/gmn...taller_gmn.cab O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Class) - C: \ Program Files \ Yahoo! \ Common \ yinsthelper.dll O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://update.microsoft.com/windowsu...?1162589752500 O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://update.microsoft.com/microsof...?1162829153500 O16 - DPF: (AB86CE53-AC9F-449F-9399-D8ABCA09EC09) (Get_ActiveX Control) -- https: / / h17000.www1.hp.com/ewfrf-JAV...oadManager.ocx O16 - DPF: (D18F962A-3722-4b59-B08D-28BB9EB2281E) (PhotosCtrl Class) -- http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...sh/swflash.cab O20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O20 - Winlogon Notify: PRISMAPI.DLL - C: \ WINDOWS \ SYSTEM32 \ PRISMAPI.DLL O20 - Winlogon Notify: PRISMGNA.DLL - C: \ WINDOWS \ SYSTEM32 \ PRISMGNA.DLL O20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ SYSTEM32 \ WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C: \ Programme \ Gemeinsame Dateien \ Adobe Systems Shared \ Service \ Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C: \ Programme \ Gemeinsame Dateien \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe O23 - Service: avast! Mail Scanner - Unbekannt Eigentümer - C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe "/ service (file missing) O23 - Service: avast! Web Scanner - Unbekannt Eigentümer - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe "/ service (file missing) O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd - C: \ Program Files \ Common Files \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe O23 - Service: hpdj - Unbekannte Eigentümer - C: \ DOCUME ~ 1 \ Owner \ LOCALS ~ 1 \ Temp \ hpdj.exe (file missing) O23 - Service: iPod Service - Apple Computer, Inc. - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ System32 \ nvsvc32.exe O23 - Service: PRISMSVC - Conexant Systems, Inc. - C: \ WINDOWS \ system32 \ PRISMSVC.EXE |
|
#6
2. April 2008, 15:13
| |||
| |||
| und das ist der SUPERAntiSpyware log --- Ich weiß, Sie hören eine Menge - aber Sie sind wirklich ein Lebensretter Vielen Dank ---- SUPERAntiSpyware Scan Log http://www.superantispyware.com Generated 03/28/2008 bei 08:37 PM Application Version: 4.0.1154 Core Rules Database Version: 3426 Trace Rules Database Version: 1418 Scan type: Complete Scan Total Scan Time: 00:42:44 Memory Objekte gescannt: 515 Memory Bedrohungen erkannt: 0 Registry Einträge gescannt: 5073 Registry Bedrohungen erkannt: 0 Datei gescannt Artikel: 15903 Datei-Bedrohungen erkannt: 0 Mein Computer ist immer noch langsam - keine Änderung, da die Scheibe ... |
|
#7
2. April 2008, 15:20
| |||
| |||
| Wir brauchen, um eine leistungsfähige Scan. Es wird nicht sehr lange dauern. Bitte laden Sie sich von SUBs Combofix von einem der folgenden Links. (Versuchen Sie, alle drei, wenn nötig)Wichtig! Combofix.exe IST gespeichert werden, um und lief aus dem Desktop.
__________________ |
|
#8
2. April 2008, 15:38
| |||
| |||
| Hier ist die combofix log |
|
#9
2. April 2008, 15:57
| |||
| |||
| Open hijackthis und wählen Sie eine Scan-System nur dann ein Häkchen neben diesen enteies. R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.finderg.com O8 - Extra Kontext Menüpunkt: & Search -? P = ZK Schließen Sie alle Fenster mit Ausnahme von HijackThis und klicken Sie auf "Fix überprüft. ---------- Bitte führen Sie die F-Secure Online Scanner Hinweis: Dieser Scanner arbeitet mit Internet Explorer Only!
Dieser Scan kann einige Zeit dauern, so bitten wir um etwas Geduld
__________________ |
|
#10
2. April 2008, 17:41
| |||
| |||
| Scan-Bericht Mittwoch, der 02. April 2008 19:19:08 bis 20:30:00 Computer Name: Neven-MS8XDAEE4 Scan-Typ: Scan-System für Malware, Rootkits Ziel: C: \ Ergebnis: 1 Malware gefunden Tracking-Cookie (Spyware)
Gescannte:
Scan-Engines:
|
