PC-Heaven.DE - Computer Forum - PC Forum

Quellcode

 Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:19:42, on 28.06.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:ProgrammeGemeinsame DateienSymantec SharedccSvcHst.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32dwwin.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSRTHDCPL.EXE
C:ProgrammeJavajre1.6.0_06binjusched.exe
C:WINDOWSsystem32rundll32.exe
C:ProgrammeGemeinsame DateienSymantec SharedccSvcHst.exe
C:ProgrammeGemeinsame DateienAppleMobile Device SupportbinAppleMobileDeviceService.exe
C:ProgrammeSymantecLiveUpdateAluSchedulerSvc.exe
C:ProgrammeNeroNero8Nero BackItUpNBService.exe
C:WINDOWSsystem32nvsvc32.exe
C:ProgrammeMozilla Firefoxfirefox.exe
C:ProgrammeTrend MicroHijackThisHijackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://google.daemonsearch.com/intl/
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
O2 - BHO: (no name) - {487C9905-26A8-42C8-8033-C58AD3D2AEC3} - C:WINDOWSsystem32qoMdEXRL.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:ProgrammeGemeinsame DateienSymantec SharedcoSharedBrowser2.0coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:PROGRA~1GEMEIN~1SYMANT~1IDSIPSBHO.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:ProgrammeJavajre1.6.0_06binssv.dll
O2 - BHO: (no name) - {9F5FD5B7-AD6D-4388-A262-E0F06260F5F6} - C:WINDOWSsystem32byXOhIaA.dll
O2 - BHO: (no name) - {A28F7227-3837-48AD-9A26-FDFE5E6BF9A9} - C:WINDOWSsystem32byXRkIAp.dll (file missing)
O2 - BHO: {f395c996-bdf0-b9b9-d5f4-4821a1dbb05a} - {a50bbd1a-1284-4f5d-9b9b-0fdb699c593f} - C:WINDOWSsystem32ojifzw.dll
O3 - Toolbar: Norton-Symbolleiste anzeigen - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:ProgrammeGemeinsame DateienSymantec SharedcoSharedBrowser2.0CoIEPlg.dll
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [ccApp] "C:ProgrammeGemeinsame DateienSymantec SharedccApp.exe"
O4 - HKLM..Run: [osCheck] "C:ProgrammeNorton Internet SecurityosCheck.exe"
O4 - HKLM..Run: [SunJavaUpdateSched] "C:ProgrammeJavajre1.6.0_06binjusched.exe"
O4 - HKLM..Run: [90dc5f3c] rundll32.exe "C:WINDOWSsystem32nqkyjdyl.dll",b
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSSystem32CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:PROGRA~1MICROS~3OFFICE11EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:ProgrammeJavajre1.6.0_06binssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:ProgrammeJavajre1.6.0_06binssv.dll
O9 - Extra button: Mobilen Favoriten erstellen - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:ProgrammeMicrosoft ActiveSyncinetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:ProgrammeMicrosoft ActiveSyncinetrepl.dll
O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:ProgrammeMicrosoft ActiveSyncinetrepl.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~3OFFICE11REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammeMessengermsmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammeMessengermsmsgs.exe (file missing)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1195305503960
O17 - HKLMSystemCCSServicesTcpip..{2FE259B2-EF50-45F3-94E9-6331D1613356}: NameServer = 192.168.10.1
O17 - HKLMSystemCCSServicesTcpip..{B403116B-068B-4A7B-AEB1-37BB7BC570DC}: NameServer = 192.168.10.1
O17 - HKLMSystemCS1ServicesTcpip..{2FE259B2-EF50-45F3-94E9-6331D1613356}: NameServer = 192.168.10.1
O20 - AppInit_DLLs: hjwbhxjk.dll
O20 - Winlogon Notify: qoMdEXRL - C:WINDOWSSYSTEM32qoMdEXRL.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:ProgrammeGemeinsame DateienAppleMobile Device SupportbinAppleMobileDeviceService.exe
O23 - Service: Automatisches LiveUpdate - Scheduler (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:ProgrammeSymantecLiveUpdateAluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:ProgrammeGemeinsame DateienSymantec SharedccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:ProgrammeGemeinsame DateienSymantec SharedccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:ProgrammeGemeinsame DateienSymantec SharedccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:ProgrammeGemeinsame DateienSymantec SharedVAScannercomHost.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:ProgrammeGemeinsame DateienInstallShieldDriver1150Intel 32IDriverT.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:ProgrammeiPodbiniPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:ProgrammeSymantecLiveUpdateLuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:ProgrammeGemeinsame DateienSymantec SharedccSvcHst.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:ProgrammeNeroNero8Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:ProgrammeGemeinsame DateienNeroLibNMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: Symantec Core LC - Unknown owner - C:PROGRA~1GEMEIN~1SYMANT~1CCPD-LCsymlcsvc.exe
O23 - Service: TuneUp Drive Defrag-Dienst (TuneUp.Defrag) - TuneUp Software GmbH - C:WINDOWSSystem32TuneUpDefragService.exe

--
End of file - 6825 bytes