- #1
A
Arik
Bekanntes Mitglied
Themenersteller
- Dabei seit
- 20.05.2004
- Beiträge
- 163
- Reaktionspunkte
- 0
- Ort
- Oldenburg
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 11:29:10, on 13.06.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
CrogrammeAntiVir PersonalEdition Classicavguard.exe
C:WINDOWSExplorer.EXE
CrogrammeVIAVIAudioiHDADeckHDeck.exe
CrogrammeSynapticsSynTPSynTPEnh.exe
C:WINDOWSsystem32VTTimer.exe
C:WINDOWSsystem32S3trayp.exe
CrogrammeAntiVir PersonalEdition Classicavgnt.exe
CrogrammeAntiVir PersonalEdition Classicsched.exe
CrogrammeBonjourmDNSResponder.exe
C:WINDOWSSystem32spoolDRIVERSW32X863E_FATIADE.EXE
CrogrammeGemeinsame DateienInterVideoRegMgriviRegMgr.exe
C:WINDOWSsystem32svchost.exe
CrogrammeNokiaNokia PC Suite 6LaunchApplication.exe
C:WINDOWSsystem32ctfmon.exe
DownloadsProgrammeAntispyxp-AntiSpy_en.exe
CrogrammePC Connectivity SolutionServiceLayer.exe
C:WINDOWSsystem32wscntfy.exe
C:WINDOWSSystem32svchost.exe
DownloadsProgrammeVirenschutzHijackThisHiJackThis_v2.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.de/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - CrogrammeGemeinsame DateienAdobeAcrobatActiveXAcroIEHelper.dll
O4 - HKLM..Run: [HDAudDeck] CrogrammeVIAVIAudioiHDADeckHDeck.exe 1
O4 - HKLM..Run: [SMSERIAL] C:WINDOWSsm56hlpr.exe
O4 - HKLM..Run: [SynTPEnh] CrogrammeSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [VTTimer] VTTimer.exe
O4 - HKLM..Run: [S3Trayp] S3trayp.exe
O4 - HKLM..Run: [avgnt] CrogrammeAntiVir PersonalEdition Classicavgnt.exe /min
O4 - HKLM..Run: [Adobe Photo Downloader] CrogrammeAdobePhotoshop Album Starter Edition3.2Appsapdproxy.exe
O4 - HKLM..Run: [Adobe Reader Speed Launcher] CrogrammeAdobeReader 8.0ReaderReader_sl.exe
O4 - HKLM..Run: [\ArikEPSON Stylus DX4800 Series] C:WINDOWSSystem32spoolDRIVERSW32X863E_FATIADE.EXE /P33 \ArikEPSON Stylus DX4800 Series /O6 USB001 /M Stylus DX4800
O4 - HKLM..Run: [PCSuiteTrayApplication] CrogrammeNokiaNokia PC Suite 6LaunchApplication.exe -startup
O4 - HKLM..Run: [NeroFilterCheck] CrogrammeGemeinsame DateienAheadLibNeroCheck.exe
O4 - HKLM..Run: [QuickTime Task] CrogrammeQuickTimeqttask.exe -atboottime
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User->LOKALER DIENST')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User->NETZWERKDIENST')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User->SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User->Default user')
O4 - Startup: XP-ANTISPY.lnk = DownloadsProgrammeAntispyxp-AntiSpy_en.exe
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://CROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - CROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - CrogrammeICQLiteICQLite.exe
O9 - Extra->Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - CrogrammeICQLiteICQLite.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O9 - Extra->Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%Network Diagnosticxpnetdiag.exe (file missing)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1181311876937
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLMSystemCCSServicesTcpip..{1F6EE885-FC2B-492C-BD61-B9D0A1A9E45C}: NameServer = 192.168.1.1,192.168.2.1
O17 - HKLMSystemCS1ServicesTcpip..{1F6EE885-FC2B-492C-BD61-B9D0A1A9E45C}: NameServer = 192.168.1.1,192.168.2.1
O17 - HKLMSystemCS2ServicesTcpip..{1F6EE885-FC2B-492C-BD61-B9D0A1A9E45C}: NameServer = 192.168.1.1,192.168.2.1
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:WINDOWSsystem32rowseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:WINDOWSsystem32rowseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - CrogrammeGemeinsame DateienAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - CrogrammeAntiVir PersonalEdition Classicsched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - CrogrammeAntiVir PersonalEdition Classicavguard.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - CrogrammeBonjourmDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - CrogrammeGemeinsame DateienMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: IviRegMgr - InterVideo - CrogrammeGemeinsame DateienInterVideoRegMgriviRegMgr.exe
O23 - Service: ServiceLayer - Nokia. - CrogrammePC Connectivity SolutionServiceLayer.exe
--
End of file - 6313 bytes
Hier mein System:
Fujitsu Siemens AMILO La 1703 mit Windows XP SP2 und allen Updates
Software:
Antivir Personal Edition
Adobe Photoshop CS3, InDesign CS2, Illustrator CS2, Acrobat Reader 8.0, ALbum Starter Edition 3.2
Macromedia Freehand MX
QuickTime Player 7.0
IE 7.0
Mozilla Firefox 2.0.0.4
ICQ Lite 5.1
XP-Antispy 3.96-5 beta
Microsoft Office 2003
Inter Video WinDVD
Nero 7.0
WinRAR
Winamp
Nokia PC Suite
Achja: Und wie kann ich unterbinden, dass der Adobe-Fotodownloader automatisch beim Systemstart mit hochfährt?
[br][blue]*PCDFlocke: Verschoben aus "Windows XP"*[/blue]