- #1
E
EiperD
Mitglied
Themenersteller
- Dabei seit
- 04.07.2006
- Beiträge
- 5
- Reaktionspunkte
- 0
Hi,
hab voll das Problem, hatte vor 2 Tagen Spy Sheriff auf meinem StandPC. hab ihn durch unzählige Programme wegbekommen (hoff ich jedenfalls ??? ) Anscheinend hat dieses s***** Proggi irgendwas mit meinem Internet gemacht, ich kann keine einzige Seite laden + Updates der Programme funktionieren auch nicht.
Die Verbindung steht aber ich kann nichts machen, liegt am PC nicht an Leitung, da ich grad über diese Leitung mit den Laptop dieses SOS-Signal aussende...
hoffe um baldige Antwort + Lösungen
Danke im voraus
Daniel[br][br]Erstellt am: 05.07.06 um 14:37:41
[br]vielleicht hilft die Log file was...
Logfile of HijackThis v1.99.1
Scan saved at 15:10:24, on 05.07.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C
rogrammeWindows DefenderMsMpEng.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
CrogrammeGemeinsame DateienSymantec SharedccProxy.exe
CrogrammeGemeinsame DateienSymantec SharedccSetMgr.exe
CrogrammeNorton Internet SecurityISSVC.exe
CrogrammeGemeinsame DateienSymantec SharedSNDSrvc.exe
CrogrammeGemeinsame DateienSymantec SharedccEvtMgr.exe
C:WINDOWSsystem32spoolsv.exe
CrogrammeAntiVir PersonalEdition Classicsched.exe
C:WINDOWSExplorer.EXE
CrogrammeAntiVir PersonalEdition Classicavguard.exe
CrogrammeGemeinsame DateienMicrosoft SharedVS7Debugmdm.exe
CrogrammeNorton Internet SecurityNorton AntiVirus
avapsvc.exe
C:WINDOWSsystem32
vsvc32.exe
CrogrammeSunbelt SoftwarePersonal Firewall 4kpf4gui.exe
C:WINDOWSsystem32svchost.exe
CrogrammeGemeinsame DateienSymantec SharedCCPD-LCsymlcsvc.exe
CrogrammeICCard Reader Driver v1.9e2Disk_Monitor.exe
C:WINDOWSsystem32RunDll32.exe
CrogrammeMicrosoft IntelliType Pro ype32.exe
CrogrammeMicrosoft IntelliPointpoint32.exe
C:WINDOWSsystem32
undll32.exe
CrogrammeGemeinsame DateienRealUpdate_OB
ealsched.exe
CrogrammeAdobeAcrobat 7.0DistillrAcrotray.exe
CrogrammeDAPDAP.EXE
CrogrammeQuickTimeqttask.exe
C:WINDOWSsystem32RUNDLL32.EXE
CrogrammeiTunesiTunesHelper.exe
CrogrammeJavajre1.5.0_06injusched.exe
CrogrammeGemeinsame DateienSymantec SharedccApp.exe
CrogrammeWindows DefenderMSASCui.exe
CrogrammeiPodiniPodService.exe
CrogrammeAntiVir PersonalEdition Classicavgnt.exe
CrogrammeAshampooAshampoo AntiSpyWareAntiSpyWareGuard.exe
C:WINDOWSsystem32ctfmon.exe
CrogrammeMessengermsmsgs.exe
CrogrammeGemeinsame DateienAheadlibNMBgMonitor.exe
CrogrammeAshampooAshampoo AntiSpyWareAntiSpyWareControl.exe
CrogrammeSpybot - Search & DestroyTeaTimer.exe
C:WINDOWSsystem32wuauclt.exe
CrogrammeGemeinsame DateienSonic Sharedcinetray.exe
C:WINDOWSsystem32msiexec.exe
CROGRA~1WINZIPwinzip32.exe
Cokumente und EinstellungenEiper DanielLokale EinstellungenTempwzaad7HijackThis.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = about:blank
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = about:blank
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://www.locators.com/search.php?que=%s
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = about:blank
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = about:blank
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - CrogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - CrogrammeGemeinsame DateienSymantec SharedAdBlockingNISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - CrogrammeNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:WINDOWSEliteToolBarEliteToolBar version 59.dll (file missing)
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [Disk Monitor] CrogrammeICCard Reader Driver v1.9e2Disk_Monitor.exe
O4 - HKLM..Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM..Run: [type32] CrogrammeMicrosoft IntelliType Pro ype32.exe
O4 - HKLM..Run: [IntelliPoint] CrogrammeMicrosoft IntelliPointpoint32.exe
O4 - HKLM..Run: [CorelDRAW Graphics Suite 11b] CrogrammeCorelCorel Graphics 12LanguagesDEProgramsRegistration.exe /title=CorelDRAW Graphics Suite 12 /date=071406 serial=DR12CUS-2178927-hvq lang=DE
O4 - HKLM..Run: [TkBellExe] CrogrammeGemeinsame DateienRealUpdate_OB
ealsched.exe -osboot
O4 - HKLM..Run: [Acrobat Assistant 7.0] CrogrammeAdobeAcrobat 7.0DistillrAcrotray.exe
O4 - HKLM..Run: [DownloadAccelerator] CrogrammeDAPDAP.EXE /STARTUP
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [QuickTime Task] CrogrammeQuickTimeqttask.exe -atboottime
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [iTunesHelper] CrogrammeiTunesiTunesHelper.exe
O4 - HKLM..Run: [SunJavaUpdateSched] CrogrammeJavajre1.5.0_06injusched.exe
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [ccApp] CrogrammeGemeinsame DateienSymantec SharedccApp.exe
O4 - HKLM..Run: [Windows Defender] CrogrammeWindows DefenderMSASCui.exe -hide
O4 - HKLM..Run: [avgnt] CrogrammeAntiVir PersonalEdition Classicavgnt.exe /min
O4 - HKLM..Run: [Microsoft Security Hot Fix Update] %SystemRoot%mshotfix.exe
O4 - HKLM..Run: [RegistryMonitor] c:
egistry.pif
O4 - HKLM..Run: [Ashampoo AntiSpyWare Guard] CrogrammeAshampooAshampoo AntiSpyWareAntiSpyWareGuard.exe
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [MSMSGS] CrogrammeMessengermsmsgs.exe /background
O4 - HKCU..Run: [Steam] crogrammevalvesteamsteam.exe -silent
O4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] CrogrammeGemeinsame DateienAheadlibNMBgMonitor.exe
O4 - HKCU..Run: [updateMgr] CrogrammeAdobeAcrobat 7.0AcrobatAdobeUpdateManager.exe AcPro7_0_7 -reboot 1
O4 - HKCU..Run: [SpybotSD TeaTimer] CrogrammeSpybot - Search & DestroyTeaTimer.exe
O4 - HKCU..Run: [ccec0f8b.exe] Cokumente und EinstellungenEiper DanielLokale EinstellungenAnwendungsdatenccec0f8b.exe
O4 - Startup: neoDVDplus5.lnk = I:Mediostream
eoDVDplus5
eoTasks.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: Sonic CinePlayer Quick Launch.lnk = ?
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = CrogrammeMicrosoft OfficeOffice10OSA.EXE
O4 - Global Startup: Quicken 2005 Zahlungserinnerung.lnk = CrogrammeQuicken2005illmind.exe
O8 - Extra context menu item: &Download with &DAP - CrogrammeDAPdapextie.htm
O8 - Extra context menu item: Convert link target to Adobe PDF - res://CrogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://CrogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://CrogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://CrogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://CrogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://CrogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://CrogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://CrogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Download &all with DAP - CrogrammeDAPdapextie2.htm
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://CROGRA~1MICROS~4Office10EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - CrogrammeJavajre1.5.0_06in
pjpi150_06.dll
O9 - Extra->Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - CrogrammeJavajre1.5.0_06in
pjpi150_06.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - CROGRA~1ICQICQ.exe
O9 - Extra->Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - CROGRA~1ICQICQ.exe
O9 - Extra button: Locators.com Search Bar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - (no file)
O9 - Extra->Tools' menuitem: Locators.com Search Bar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - CrogrammeMessengermsmsgs.exe
O9 - Extra->Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - CrogrammeMessengermsmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O17 - HKLMSystemCCSServicesTcpip..{64160B0A-BF82-4590-AA5A-FE87B9E3F44F}: NameServer = 195.3.96.67,195.3.96.68
O20 - AppInit_DLLs: ,
O23 - Service: Adobe LM Service - Adobe Systems - CrogrammeGemeinsame DateienAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - CrogrammeAntiVir PersonalEdition Classicsched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - CrogrammeAntiVir PersonalEdition Classicavguard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - CrogrammeGemeinsame DateienSymantec SharedccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - CrogrammeGemeinsame DateienSymantec SharedccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - CrogrammeGemeinsame DateienSymantec SharedccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - CrogrammeGemeinsame DateienSymantec SharedccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - CrogrammeGemeinsame DateienInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - CrogrammeiPodiniPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - CrogrammeNorton Internet SecurityISSVC.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - CrogrammeSunbelt SoftwarePersonal Firewall 4kpf4ss.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - CrogrammeNorton Internet SecurityNorton AntiVirus
avapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - CrogrammeNorton Internet SecurityNorton AntiVirusSAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - CROGRA~1GEMEIN~1SYMANT~1SCRIPT~1SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - CrogrammeGemeinsame DateienSymantec SharedSNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - CrogrammeGemeinsame DateienSymantec SharedCCPD-LCsymlcsvc.exe
O23 - Service: Windows User Mode Driver Framework (UMWdf) - Unknown owner - C:WINDOWSsystem32wdfmgr.exe (file missing)
Auffällig ist das am anfang:
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = about:blank
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = about:blank
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://www.locators.com/search.php?que=%s
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = about:blank
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = about:blank
BITTE HELF MIR...
[blue]verschoben aus den Software Problemen[/blue]
hab voll das Problem, hatte vor 2 Tagen Spy Sheriff auf meinem StandPC. hab ihn durch unzählige Programme wegbekommen (hoff ich jedenfalls ??? ) Anscheinend hat dieses s***** Proggi irgendwas mit meinem Internet gemacht, ich kann keine einzige Seite laden + Updates der Programme funktionieren auch nicht.
Die Verbindung steht aber ich kann nichts machen, liegt am PC nicht an Leitung, da ich grad über diese Leitung mit den Laptop dieses SOS-Signal aussende...
hoffe um baldige Antwort + Lösungen
Danke im voraus
Daniel[br][br]Erstellt am: 05.07.06 um 14:37:41
[br]vielleicht hilft die Log file was...
Logfile of HijackThis v1.99.1
Scan saved at 15:10:24, on 05.07.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C
rogrammeWindows DefenderMsMpEng.exeC:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C
rogrammeGemeinsame DateienSymantec SharedccProxy.exeC
rogrammeGemeinsame DateienSymantec SharedccSetMgr.exeC
rogrammeNorton Internet SecurityISSVC.exeC
rogrammeGemeinsame DateienSymantec SharedSNDSrvc.exeC
rogrammeGemeinsame DateienSymantec SharedccEvtMgr.exeC:WINDOWSsystem32spoolsv.exe
C
rogrammeAntiVir PersonalEdition Classicsched.exeC:WINDOWSExplorer.EXE
C
rogrammeAntiVir PersonalEdition Classicavguard.exeC
rogrammeGemeinsame DateienMicrosoft SharedVS7Debugmdm.exeC
rogrammeNorton Internet SecurityNorton AntiVirusavapsvc.exe
C:WINDOWSsystem32
vsvc32.exe
C
rogrammeSunbelt SoftwarePersonal Firewall 4kpf4gui.exeC:WINDOWSsystem32svchost.exe
C
rogrammeGemeinsame DateienSymantec SharedCCPD-LCsymlcsvc.exeC
rogrammeICCard Reader Driver v1.9e2Disk_Monitor.exeC:WINDOWSsystem32RunDll32.exe
C
rogrammeMicrosoft IntelliType Pro ype32.exeC
rogrammeMicrosoft IntelliPointpoint32.exeC:WINDOWSsystem32
undll32.exe
C
rogrammeGemeinsame DateienRealUpdate_OBealsched.exe
C
rogrammeAdobeAcrobat 7.0DistillrAcrotray.exeC
rogrammeDAPDAP.EXEC
rogrammeQuickTimeqttask.exeC:WINDOWSsystem32RUNDLL32.EXE
C
rogrammeiTunesiTunesHelper.exeC
rogrammeJavajre1.5.0_06injusched.exeC
rogrammeGemeinsame DateienSymantec SharedccApp.exeC
rogrammeWindows DefenderMSASCui.exeC
rogrammeiPodiniPodService.exeC
rogrammeAntiVir PersonalEdition Classicavgnt.exeC
rogrammeAshampooAshampoo AntiSpyWareAntiSpyWareGuard.exeC:WINDOWSsystem32ctfmon.exe
C
rogrammeMessengermsmsgs.exeC
rogrammeGemeinsame DateienAheadlibNMBgMonitor.exeC
rogrammeAshampooAshampoo AntiSpyWareAntiSpyWareControl.exeC
rogrammeSpybot - Search & DestroyTeaTimer.exeC:WINDOWSsystem32wuauclt.exe
C
rogrammeGemeinsame DateienSonic Sharedcinetray.exeC:WINDOWSsystem32msiexec.exe
C
ROGRA~1WINZIPwinzip32.exeC
okumente und EinstellungenEiper DanielLokale EinstellungenTempwzaad7HijackThis.exeR1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = about:blank
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = about:blank
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://www.locators.com/search.php?que=%s
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = about:blank
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = about:blank
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C
rogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dllO3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C
rogrammeGemeinsame DateienSymantec SharedAdBlockingNISShExt.dllO3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C
rogrammeNorton Internet SecurityNorton AntiVirusNavShExt.dllO3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:WINDOWSEliteToolBarEliteToolBar version 59.dll (file missing)
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [Disk Monitor] C
rogrammeICCard Reader Driver v1.9e2Disk_Monitor.exeO4 - HKLM..Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM..Run: [type32] C
rogrammeMicrosoft IntelliType Pro ype32.exeO4 - HKLM..Run: [IntelliPoint] C
rogrammeMicrosoft IntelliPointpoint32.exeO4 - HKLM..Run: [CorelDRAW Graphics Suite 11b] C
rogrammeCorelCorel Graphics 12LanguagesDEProgramsRegistration.exe /title=CorelDRAW Graphics Suite 12 /date=071406 serial=DR12CUS-2178927-hvq lang=DEO4 - HKLM..Run: [TkBellExe] C
rogrammeGemeinsame DateienRealUpdate_OBealsched.exe -osboot
O4 - HKLM..Run: [Acrobat Assistant 7.0] C
rogrammeAdobeAcrobat 7.0DistillrAcrotray.exeO4 - HKLM..Run: [DownloadAccelerator] C
rogrammeDAPDAP.EXE /STARTUPO4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [QuickTime Task] C
rogrammeQuickTimeqttask.exe -atboottimeO4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [iTunesHelper] C
rogrammeiTunesiTunesHelper.exeO4 - HKLM..Run: [SunJavaUpdateSched] C
rogrammeJavajre1.5.0_06injusched.exeO4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [ccApp] C
rogrammeGemeinsame DateienSymantec SharedccApp.exeO4 - HKLM..Run: [Windows Defender] C
rogrammeWindows DefenderMSASCui.exe -hideO4 - HKLM..Run: [avgnt] C
rogrammeAntiVir PersonalEdition Classicavgnt.exe /minO4 - HKLM..Run: [Microsoft Security Hot Fix Update] %SystemRoot%mshotfix.exe
O4 - HKLM..Run: [RegistryMonitor] c:
egistry.pif
O4 - HKLM..Run: [Ashampoo AntiSpyWare Guard] C
rogrammeAshampooAshampoo AntiSpyWareAntiSpyWareGuard.exeO4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [MSMSGS] C
rogrammeMessengermsmsgs.exe /backgroundO4 - HKCU..Run: [Steam] c
rogrammevalvesteamsteam.exe -silentO4 - HKCU..Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C
rogrammeGemeinsame DateienAheadlibNMBgMonitor.exeO4 - HKCU..Run: [updateMgr] C
rogrammeAdobeAcrobat 7.0AcrobatAdobeUpdateManager.exe AcPro7_0_7 -reboot 1O4 - HKCU..Run: [SpybotSD TeaTimer] C
rogrammeSpybot - Search & DestroyTeaTimer.exeO4 - HKCU..Run: [ccec0f8b.exe] C
okumente und EinstellungenEiper DanielLokale EinstellungenAnwendungsdatenccec0f8b.exeO4 - Startup: neoDVDplus5.lnk = I:Mediostream
eoDVDplus5
eoTasks.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: Sonic CinePlayer Quick Launch.lnk = ?
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C
rogrammeMicrosoft OfficeOffice10OSA.EXEO4 - Global Startup: Quicken 2005 Zahlungserinnerung.lnk = C
rogrammeQuicken2005illmind.exeO8 - Extra context menu item: &Download with &DAP - C
rogrammeDAPdapextie.htmO8 - Extra context menu item: Convert link target to Adobe PDF - res://C
rogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert link target to existing PDF - res://C
rogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert selected links to Adobe PDF - res://C
rogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIECaptureSelLinks.htmlO8 - Extra context menu item: Convert selected links to existing PDF - res://C
rogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIEAppendSelLinks.htmlO8 - Extra context menu item: Convert selection to Adobe PDF - res://C
rogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert selection to existing PDF - res://C
rogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Convert to Adobe PDF - res://C
rogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIECapture.htmlO8 - Extra context menu item: Convert to existing PDF - res://C
rogrammeAdobeAcrobat 7.0AcrobatAcroIEFavClient.dll/AcroIEAppend.htmlO8 - Extra context menu item: Download &all with DAP - C
rogrammeDAPdapextie2.htmO8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C
ROGRA~1MICROS~4Office10EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C
rogrammeJavajre1.5.0_06inpjpi150_06.dll
O9 - Extra->Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C
rogrammeJavajre1.5.0_06inpjpi150_06.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C
ROGRA~1ICQICQ.exeO9 - Extra->Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C
ROGRA~1ICQICQ.exeO9 - Extra button: Locators.com Search Bar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - (no file)
O9 - Extra->Tools' menuitem: Locators.com Search Bar - {A26ABCF0-1C8F-46e7-A67C-0489DC21B9CC} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C
rogrammeMessengermsmsgs.exeO9 - Extra->Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C
rogrammeMessengermsmsgs.exeO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O17 - HKLMSystemCCSServicesTcpip..{64160B0A-BF82-4590-AA5A-FE87B9E3F44F}: NameServer = 195.3.96.67,195.3.96.68
O20 - AppInit_DLLs: ,
O23 - Service: Adobe LM Service - Adobe Systems - C
rogrammeGemeinsame DateienAdobe Systems SharedServiceAdobelmsvc.exeO23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C
rogrammeAntiVir PersonalEdition Classicsched.exeO23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C
rogrammeAntiVir PersonalEdition Classicavguard.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C
rogrammeGemeinsame DateienSymantec SharedccEvtMgr.exeO23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C
rogrammeGemeinsame DateienSymantec SharedccProxy.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C
rogrammeGemeinsame DateienSymantec SharedccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C
rogrammeGemeinsame DateienSymantec SharedccSetMgr.exeO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C
rogrammeGemeinsame DateienInstallShieldDriver11Intel 32IDriverT.exeO23 - Service: iPodService - Apple Computer, Inc. - C
rogrammeiPodiniPodService.exeO23 - Service: ISSvc (ISSVC) - Symantec Corporation - C
rogrammeNorton Internet SecurityISSVC.exeO23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C
rogrammeSunbelt SoftwarePersonal Firewall 4kpf4ss.exeO23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C
rogrammeNorton Internet SecurityNorton AntiVirusavapsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32
vsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - C
rogrammeNorton Internet SecurityNorton AntiVirusSAVScan.exeO23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C
ROGRA~1GEMEIN~1SYMANT~1SCRIPT~1SBServ.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C
rogrammeGemeinsame DateienSymantec SharedSNDSrvc.exeO23 - Service: Symantec Core LC - Symantec Corporation - C
rogrammeGemeinsame DateienSymantec SharedCCPD-LCsymlcsvc.exeO23 - Service: Windows User Mode Driver Framework (UMWdf) - Unknown owner - C:WINDOWSsystem32wdfmgr.exe (file missing)
Auffällig ist das am anfang:
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = about:blank
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = about:blank
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = about:blank
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = about:blank
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://www.locators.com/search.php?que=%s
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = about:blank
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = about:blank
BITTE HELF MIR...
[blue]verschoben aus den Software Problemen[/blue]
