Hallo Michael,



hier der gesamte Inhalt:







Logfile of HijackThis v1.99.1

Scan saved at 19:54:26, on 30.03.2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)



Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\WINDOWS\Dit.exe

C:\WINDOWS\system32\RunDll32.exe

C:\WINDOWS\AGRSMMSG.exe

C:\Programme\Home Cinema\PowerCinema\PCMService.exe

C:\Programme\Home Cinema\PowerDVD\PDVDServ.exe

C:\Programme\FRITZ!DSL\Awatch.exe

C:\WINDOWS\system32\ezSP_Px.exe

C:\Programme\Logitech\iTouch\iTouch.exe

C:\Programme\T-Online\DSL-Manager\TODslMgr.exe

C:\Programme\Logitech\MouseWare\system\em_exec.exe

C:\Programme\EPSON\Creativity Suite\Event Manager\EEventManager.exe

C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe

C:\Programme\NoPopUp 2003\nopopup.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programme\TuneUp Utilities 2006\MemOptimizer.exe

C:\Programme\FRITZ!\IWatch.exe

C:\Programme\Weather\Weather Service.exe

C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe

C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe

C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe

C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe

C:\WINDOWS\System32\GEARSec.exe

C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe

C:\Programme\CyberLink\Shared Files\RichVideo.exe

C:\WINDOWS\system32\svchost.exe

C:\Programme\UPHClean\uphclean.exe

C:\Programme\PowerQuest\Drive Image 7.0\Agent\PQV2iSvc.exe

C:\WINDOWS\system32\ZoneLabs\vsmon.exe

C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe

C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

C:\Programme\T-Online\DSL-Manager\TODslSvc.exe

C:\PROGRA~1\INCRED~1\bin\IMApp.exe

C:\Programme\Internet Explorer\IEXPLORE.EXE

C:\Programme\AntiVir PersonalEdition Classic\avguard.exe

C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe

C:\Programme\AntiVir PersonalEdition Classic\sched.exe

C:\Dokumente und Einstellungen\Guenther\Desktop\HijackThis.exe



R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.t-online.de/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.aldi.com/

O1 - Hosts: 195.158.172.121 amazon.at

O1 - Hosts: 195.158.172.121 www.amazon.at

O1 - Hosts: 195.158.172.121 www.all-inkl.de

O1 - Hosts: 195.158.172.121 all-inkl.de

O1 - Hosts: 195.158.172.121 www.domainfactory.de

O1 - Hosts: 195.158.172.121 domainfactory.de

O1 - Hosts: 195.158.172.121 www.evanzo.de

O1 - Hosts: 195.158.172.121 evanzo.de

O1 - Hosts: 195.158.172.121 www.united-domains.de

O1 - Hosts: 195.158.172.121 united-domains.de

O1 - Hosts: 195.158.172.121 www.sedo.de

O1 - Hosts: 195.158.172.121 sedo.de

O1 - Hosts: 195.158.172.121 www.sedo.com

O1 - Hosts: 195.158.172.121 sedo.com

O1 - Hosts: 195.158.172.121 www.domains.de

O1 - Hosts: 195.158.172.121 domains.de

O1 - Hosts: 195.158.172.121 sedo.fr

O1 - Hosts: 195.158.172.121 sedo.it

O1 - Hosts: 195.158.172.121 sedo.se

O1 - Hosts: 195.158.172.121 sedo.dk

O1 - Hosts: 195.158.172.121 www.sedo.fr

O1 - Hosts: 195.158.172.121 www.sedo.it

O1 - Hosts: 195.158.172.121 www.sedo.se

O1 - Hosts: 195.158.172.121 www.sedo.dk

O1 - Hosts: 195.158.172.121 e-hausaufgaben.de

O1 - Hosts: 195.158.172.121 hausaufgaben.de

O1 - Hosts: 195.158.172.121 www.e-hausaufgaben.de

O1 - Hosts: 195.158.172.121 www.hausaufgaben.de

O1 - Hosts: 195.158.172.121 young.de

O1 - Hosts: 195.158.172.121 schoolunity.de

O1 - Hosts: 195.158.172.121 schoolwork.de

O1 - Hosts: 195.158.172.121 hausarbeiten24.com

O1 - Hosts: 195.158.172.121 hausarbeiten.de

O1 - Hosts: 195.158.172.121 www.young.de

O1 - Hosts: 195.158.172.121 www.schoolunity.de

O1 - Hosts: 195.158.172.121 www.schoolwork.de

O1 - Hosts: 195.158.172.121 www.hausarbeiten24.com

O1 - Hosts: 195.158.172.121 www.hausarbeiten.de

O1 - Hosts: 195.158.172.121 schulstadt.de

O1 - Hosts: 195.158.172.121 www.schulstadt.de

O1 - Hosts: 195.158.172.121 www.probenclub.de

O1 - Hosts: 195.158.172.121 www.couponmountain.de

O1 - Hosts: 195.158.172.121 www.warenproben.ag

O1 - Hosts: 195.158.172.121 www.gratisproben24.net

O1 - Hosts: 195.158.172.121 probenclub.de

O1 - Hosts: 195.158.172.121 couponmountain.de

O1 - Hosts: 195.158.172.121 warenproben.ag

O1 - Hosts: 195.158.172.121 gratisproben24.net

O1 - Hosts: 195.158.172.121 probendino.de

O1 - Hosts: 195.158.172.121 www.probendino.de

O1 - Hosts: 195.158.172.121 www.proben.de

O1 - Hosts: 195.158.172.121 www.produktproben.de

O1 - Hosts: 195.158.172.121 proben.de

O1 - Hosts: 195.158.172.121 produktproben.de

O1 - Hosts: 195.158.172.121 de.supereva.com

O1 - Hosts: 195.158.172.121 www.de.supereva.com

O1 - Hosts: 195.158.172.121 www.knuddels.de

O1 - Hosts: 195.158.172.121 www.flirt-fever.de

O1 - Hosts: 195.158.172.121 www.neu.de

O1 - Hosts: 195.158.172.121 neu.de

O1 - Hosts: 195.158.172.121 chat.lycos.de

O1 - Hosts: 195.158.172.121 www.spinchat.de

O1 - Hosts: 195.158.172.121 www.chat.de

O1 - Hosts: 195.158.172.121 www.chatcity.de

O1 - Hosts: 195.158.172.121 www.webchat.de

O1 - Hosts: 195.158.172.121 chat.yahoo.de

O1 - Hosts: 195.158.172.121 www.friendscout24.de

O1 - Hosts: 195.158.172.121 www.ilove.de

O1 - Hosts: 195.158.172.121 www.traumpartnerchat.de

O1 - Hosts: 195.158.172.121 knuddels.de

O1 - Hosts: 195.158.172.121 flirt-fever.de

O1 - Hosts: 195.158.172.121 chat.lycos.de

O1 - Hosts: 195.158.172.121 spinchat.de

O1 - Hosts: 195.158.172.121 chat.de

O1 - Hosts: 195.158.172.121 chatcity.de

O1 - Hosts: 195.158.172.121 webchat.de

O1 - Hosts: 195.158.172.121 chat.yahoo.de

O1 - Hosts: 195.158.172.121 friendscout24.de

O1 - Hosts: 195.158.172.121 ilove.de

O1 - Hosts: 195.158.172.121 traumpartnerchat.de

O1 - Hosts: 195.158.172.121 www.icq.de

O1 - Hosts: 195.158.172.121 icq.de

O1 - Hosts: 195.158.172.121 icq.com

O1 - Hosts: 195.158.172.121 www.icq.com

O1 - Hosts: 195.158.172.121 mirc.com

O1 - Hosts: 195.158.172.121 www.mirc.com

O1 - Hosts: 195.158.172.121 mirc.de

O1 - Hosts: 195.158.172.121 www.mirc.de

O1 - Hosts: 195.158.172.121 xchat.org

O1 - Hosts: 195.158.172.121 www.xchat.org

O1 - Hosts: 195.158.172.121 boldchat.com

O1 - Hosts: 195.158.172.121 www.boldchat.com

O1 - Hosts: 195.158.172.121 liveperson.com

O1 - Hosts: 195.158.172.121 www.liveperson.com

O1 - Hosts: 195.158.172.121 www.bravenet.com

O1 - Hosts: 195.158.172.121 bravenet.com

O1 - Hosts: 195.158.172.121 www.adultfriendfinder.com

O1 - Hosts: 195.158.172.121 adultfriendfinder.com

O1 - Hosts: 195.158.172.121 www.friendster.com

O1 - Hosts: 195.158.172.121 friendster.com

O1 - Hosts: 195.158.172.121 www.monster.com

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\PROGRA~1\FlashGet\jccatch.dll

O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll

O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Programme\Save Flash\SaveFlash.dll

O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [Dit] Dit.exe

O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [PCMService] "C:\Programme\Home Cinema\PowerCinema\PCMService.exe"

O4 - HKLM\..\Run: [RemoteControl] "C:\Programme\Home Cinema\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [AWatch] C:\Programme\FRITZ!DSL\Awatch.exe

O4 - HKLM\..\Run: [MOD] C:\Programme\Microangelo\muamgr.exe

O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe

O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe

O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programme\Logitech\iTouch\iTouch.exe

O4 - HKLM\..\Run: [T-Online DSL-Manager] "C:\Programme\T-Online\DSL-Manager\TODslMgr.exe"

O4 - HKLM\..\Run: [EEventManager] C:\Programme\EPSON\Creativity Suite\Event Manager\EEventManager.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [DeskMateAutoUpdate] C:\Programme\DeskMates\DeskMateAutoUpdate.exe

O4 - HKLM\..\Run: [Zone Labs Client] C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe

O4 - HKCU\..\Run: [NoPopUp] C:\Programme\NoPopUp 2003\nopopup.exe /autorun

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Programme\TuneUp Utilities 2006\MemOptimizer.exe" autostart

O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: ISDNWatch.lnk = C:\Programme\FRITZ!\IWatch.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE

O4 - Global Startup: Weather Service.lnk = C:\Programme\Weather\Weather Service.exe

O8 - Extra context menu item: Alles mit FlashGet laden - C:\PROGRA~1\FlashGet\jc_all.htm

O8 - Extra context menu item: Mit FlashGet laden - C:\PROGRA~1\FlashGet\jc_link.htm

O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll

O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll

O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL

O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe

O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\spacklsp.dll

O14 - IERESET.INF: START_PAGE_URL=http://www.aldi.com/

O16 - DPF: ppctlcab - http://ppupdates.ca.com/downloads/scanner/ppctlcab.cab

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=48835

O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://ppupdates.ca.com/downloads/scanner/axscanner.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1127393592984

O16 - DPF: {9B17FE0E-51F2-4692-8B32-8EFB805FC0E7} (HPObjectInstaller Class) - http://h30155.www3.hp.com/ediags/dd/install/guidedsolutions.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{88FD3140-6F0F-481C-8818-76786CF2A75E}: NameServer = 192.168.120.252,192.168.120.253

O17 - HKLM\System\CCS\Services\Tcpip\..\{8F90B216-5184-4D11-8555-F4F5E87DB965}: NameServer = 192.168.122.252,192.168.122.253

O17 - HKLM\System\CCS\Services\Tcpip\..\{CC32E40C-7D6A-4C7B-8C3B-8923F7D8B79E}: NameServer = 217.237.151.97 217.237.148.1

O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Programme\IVT Corporation\BlueSoleil\BTNtService.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Programme\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe

O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe

O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe

O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programme\CyberLink\Shared Files\RichVideo.exe

O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Programme\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe

O23 - Service: T-Online DSL-Manager (TODslService) - T-Systems International GmbH - C:\Programme\T-Online\DSL-Manager\TODslSvc.exe

O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Programme\TuneUp Utilities 2006\WinStylerThemeSvc.exe

O23 - Service: V2i Protector - PowerQuest Corporation - C:\Programme\PowerQuest\Drive Image 7.0\Agent\PQV2iSvc.exe

O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe





geschrieben von gunni3 , 30.03.2006, 19:57 Uhr , 62 mal gelesen