|
Log-Analyse und Auswertung: hallo meine erste posting und fragen über fragen !!!!Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
05.02.2005, 17:33 | #1 |
| hallo meine erste posting und fragen über fragen !!!! hi bin neu hier und muss sagen super hier habe auch gleich eine frage zu meiner HJ list. hier meine liste habe nichts verstanden kaönt ihr mier ein einblick schafen in die materie danke in voraus Logfile of HijackThis v1.99.0 Scan saved at 15:49:21, on 05.02.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe C:\Programme\AVPersonal\AVWUPSRV.EXE C:\WINDOWS\system32\CTsvcCDA.EXE C:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\MsPMSPSv.exe C:\WINDOWS\system32\fxssvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\PL2515.exe C:\Programme\Creative\SBLive\AudioHQ\AHQTB.EXE C:\Programme\HP\hpcoretech\hpcmpmgr.exe C:\Programme\Musicmatch\Musicmatch Jukebox\mmtask.exe C:\Programme\Java\jre1.5.0_01\bin\jusched.exe C:\Programme\QuickTime\qttask.exe C:\Programme\AVPersonal\AVGNT.EXE C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe C:\Programme\TuneUp Utilities 2004\MemOptimizer.exe C:\Programme\Creative\SBLive\AudioHQ\ahqrun.exe C:\Programme\Spybot - Search & Destroy\TeaTimer.exe C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe C:\Programme\Internet Explorer\iexplore.exe C:\Programme\AVPersonal\AVGUARD.EXE E:\internet\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.msn.de/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.de/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll O4 - HKLM\..\Run: [USB 2.0 SECURITY DEVICE CoInstaller] PL2515.exe O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe O4 - HKLM\..\Run: [AHQInit] C:\Programme\Creative\SBLive\Program\AHQInit.exe O4 - HKLM\..\Run: [AudioHQ] C:\Programme\Creative\SBLive\AudioHQ\AHQTB.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Programme\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [mmtask] C:\Programme\Musicmatch\Musicmatch Jukebox\mmtask.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_01\bin\jusched.exe O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Programme\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Nero DriveSpeed] C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE O4 - HKLM\..\Run: [Zone Labs Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [AVGCtrl] C:\Programme\AVPersonal\AVGNT.EXE /min O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Programme\TuneUp Utilities 2004\MemOptimizer.exe" autostart O4 - HKCU\..\Run: [AutoEA] C:\Programme\Creative\SBLive\AudioHQ\ahqrun.exe "C:\Programme\Creative\SBLive\AudioHQ\AHQ\CTAutoEA.ahq" 0 O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Programme\IrfanView\Ebay\Ebay.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing) O14 - IERESET.INF: START_PAGE_URL=http://www.freenet.de O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15010/CTPID.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{DD73649C-E3C8-4E17-B4E5-5F48802D64B0}: NameServer = 217.237.150.97 217.237.149.161 O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Programme\HP\hpcoretech\comp\hpuiprot.dll O23 - Service: Adobe Active File Monitor - Unknown - C:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe O23 - Service: AntiVir Service - H+BEDV Datentechnik GmbH - C:\Programme\AVPersonal\AVGUARD.EXE O23 - Service: AntiVir Update - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: Photoshop Elements Device Connect - Unknown - C:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: TuneUp WinStyler Theme Service - TuneUp Software GmbH - C:\Programme\TuneUp Utilities 2004\WinStylerThemeSvc.exe O23 - Service: TrueVector Internet Monitor - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe |
06.02.2005, 10:01 | #2 |
| hallo meine erste posting und fragen über fragen !!!! @yozgatli tamer
__________________lasse diese datei C:\WINDOWS\system32\PL2515.exe hier online überprüfen http://virusscan.jotti.org/de und poste das ergebnis wechsle danach in den abgesicherten modus fixe mit HJT O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O4 - HKLM\..\Run: [USB 2.0 SECURITY DEVICE CoInstaller] PL2515.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing) lösche danach manuell C:\WINDOWS\system32\PL2515.exe neu booten, neues HJT logfile posten, ergebnis von jotti posten chaosman
__________________ |
06.02.2005, 11:31 | #3 |
| hallo meine erste posting und fragen über fragen !!!! :aplaus: hi ich bins nochmal habe wie du es gesagt hast gemacht
__________________aber ich habe immer noch nichts verstanden da ich sehr schlecht im englichen bin hilfe Service load: 0% 100% File: PL2515.exe Status: MIGHT BE INFECTED/MALWARE (Sandbox emulation took a long time and/or runtime packers were found, this is suspicious. Normally programs aren't packed and don't force the sandbox into lengthy emulation. Do realize no scanner issued any warning, the file can very well be harmless. Caution is advised, however.) Packers detected: None AntiVir No viruses found (0.22 seconds taken) Avast No viruses found (1.51 seconds taken) AVG Antivirus No viruses found (0.80 seconds taken) BitDefender No viruses found (0.64 seconds taken) ClamAV No viruses found (0.45 seconds taken) Dr.Web No viruses found (0.56 seconds taken) F-Prot Antivirus No viruses found (0.07 seconds taken) Fortinet No viruses found (0.42 seconds taken) Kaspersky Anti-Virus No viruses found (0.63 seconds taken) mks_vir No viruses found (0.22 seconds taken) NOD32 No viruses found (0.40 seconds taken) Norman Virus Control No viruses found (4.79 seconds taken) Statistics Last piece of malware found was Backdoor.Win32.Nuclear.b in client.exe, detected by: Scanner Malware name Time taken AntiVir BDC/Delf.QQ 0.21 seconds Avast X 1.51 seconds AVG Antivirus BackDoor.Nuclear.B 0.84 seconds BitDefender X 0.48 seconds ClamAV X 1.06 seconds Dr.Web X 0.76 seconds F-Prot Antivirus X 0.17 seconds Fortinet X 0.57 seconds Kaspersky Anti-Virus Backdoor.Win32.Nuclear.b 0.85 seconds mks_vir X 0.46 seconds NOD32 X 1.51 seconds Norman Virus Control X 26.47 seconds Service statistics: 4848 files (3658 of those unique) have been uploaded & scanned since 01/02/2005, the day of the last database purge. 955 of those 3658 files contained a virus or any other form of malware. This page has been visited 10819 times in this time period. This service managed to spot 72 pieces of malware no vendor used knew about at the time of uploading. The service also warned against 604 suspicious files without any help from scanner results. However, 0 files reported to be OK were found out to be malware later (this is checked daily). As far as can be told, all this together makes this service 100.00% accurate. However, since it is very well possible malware has been uploaded no scanner knows about at this time, this number is to be taken with a proper amount of skepticism. No I am not sitting still! A new, better version of this service is being developed. If you have suggestions and/or comments, please send me them! Most popular malware: Rank Malware name Uploaded Last known filename 1 backdoor.win32.agobot.gen 37 times wootz0red.exe 2 trojan.spy.agent.y 34 times Private_XJump_v0.4.A_SE_GZP.exe 3 behaveslike:win32.irc-backdoor 19 times Morphed.exe 4 win32:rbot-ks 19 times winis.exe 5 tr/lefeat.1 18 times d3ja.exe 6 behaveslike:win32.explorerhijack 18 times bush.ex_ 7 backdoor.rbot.276506e5 17 times dilpopedcry3.exe 8 tr/agent.bd 16 times Mikes_Aimbot.zip 9 trojan.unremote.a 16 times RuNz_1_.HpRot.zip 10 win32:trojan-gen. {other} 15 times VBKeyHook.dll 11 behaveslike:trojan.downloader 14 times NTDETECT.EXE 12 worm/zusha.a 11 times ssdrbot.exe 13 dr/bridge.a.2 10 times bridge.dl_ 14 trojan.agent.ap 9 times Mike_s_Aimbot.exe 15 backdoor.trojan 9 times iPodServer.zip |
06.02.2005, 11:45 | #4 |
| hallo meine erste posting und fragen über fragen !!!! hi nochmal ich habe di hjt datei an jotti geschigt und das kam herau ?????????? habe mal das mit kopiert Service load: 0% 100% File: hijackthis22 Status: OK Packers detected: None AntiVir No viruses found (0.21 seconds taken) Avast No viruses found (1.51 seconds taken) AVG Antivirus No viruses found (0.75 seconds taken) BitDefender No viruses found (0.37 seconds taken) ClamAV No viruses found (0.41 seconds taken) Dr.Web No viruses found (0.57 seconds taken) F-Prot Antivirus No viruses found (0.07 seconds taken) Fortinet No viruses found (0.34 seconds taken) Kaspersky Anti-Virus No viruses found (0.62 seconds taken) mks_vir No viruses found (0.21 seconds taken) NOD32 No viruses found (0.40 seconds taken) Norman Virus Control No viruses found (0.24 seconds taken) Statistics Last piece of malware found was probably unknown CRYPT.WIN32 in server.exe, detected by: Scanner Malware name Time taken AntiVir BDS/Nuclear.14 1.27 seconds Avast Win32:Trojano-337 4.83 seconds AVG Antivirus X 1.50 seconds BitDefender BehavesLike:Win32.ExplorerHijack 1.01 seconds ClamAV X 0.83 seconds Dr.Web X 1.02 seconds F-Prot Antivirus X 0.30 seconds Fortinet X 0.72 seconds Kaspersky Anti-Virus X 1.11 seconds mks_vir X 0.49 seconds NOD32 probably unknown CRYPT.WIN32 0.71 seconds Norman Virus Control X 7.46 seconds Service statistics: 4861 files (3669 of those unique) have been uploaded & scanned since 01/02/2005, the day of the last database purge. 962 of those 3669 files contained a virus or any other form of malware. This page has been visited 10847 times in this time period. This service managed to spot 72 pieces of malware no vendor used knew about at the time of uploading. The service also warned against 606 suspicious files without any help from scanner results. However, 0 files reported to be OK were found out to be malware later (this is checked daily). As far as can be told, all this together makes this service 100.00% accurate. However, since it is very well possible malware has been uploaded no scanner knows about at this time, this number is to be taken with a proper amount of skepticism. No I am not sitting still! A new, better version of this service is being developed. If you have suggestions and/or comments, please send me them! Most popular malware: Rank Malware name Uploaded Last known filename 1 backdoor.win32.agobot.gen 37 times wootz0red.exe 2 trojan.spy.agent.y 34 times Private_XJump_v0.4.A_SE_GZP.exe 3 behaveslike:win32.irc-backdoor 19 times Morphed.exe 4 win32:rbot-ks 19 times winis.exe 5 tr/lefeat.1 18 times d3ja.exe 6 behaveslike:win32.explorerhijack 18 times bush.ex_ 7 backdoor.rbot.276506e5 17 times dilpopedcry3.exe 8 tr/agent.bd 16 times Mikes_Aimbot.zip 9 trojan.unremote.a 16 times RuNz_1_.HpRot.zip 10 win32:trojan-gen. {other} 15 times VBKeyHook.dll 11 behaveslike:trojan.downloader 14 times NTDETECT.EXE 12 worm/zusha.a 11 times ssdrbot.exe 13 bds/nuclear.14 11 times server.exe 14 dr/bridge.a.2 10 times bridge.dl_ 15 trojan.agent.ap 9 times Mike_s_Aimbot.exe Logfile of HijackThis v1.99.0 Scan saved at 11:44:54, on 06.02.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe C:\Programme\AVPersonal\AVGUARD.EXE C:\Programme\AVPersonal\AVWUPSRV.EXE C:\WINDOWS\system32\CTsvcCDA.EXE C:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\MsPMSPSv.exe C:\WINDOWS\system32\fxssvc.exe C:\Programme\Creative\SBLive\AudioHQ\AHQTB.EXE C:\Programme\HP\hpcoretech\hpcmpmgr.exe C:\Programme\Musicmatch\Musicmatch Jukebox\mmtask.exe C:\Programme\Java\jre1.5.0_01\bin\jusched.exe C:\Programme\QuickTime\qttask.exe C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe C:\Programme\AVPersonal\AVGNT.EXE C:\Programme\TuneUp Utilities 2004\MemOptimizer.exe C:\Programme\Creative\SBLive\AudioHQ\ahqrun.exe C:\Programme\Spybot - Search & Destroy\TeaTimer.exe C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe C:\Programme\Internet Explorer\iexplore.exe E:\internet\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msn.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.msn.de/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.de/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe O4 - HKLM\..\Run: [AHQInit] C:\Programme\Creative\SBLive\Program\AHQInit.exe O4 - HKLM\..\Run: [AudioHQ] C:\Programme\Creative\SBLive\AudioHQ\AHQTB.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [HP Component Manager] "C:\Programme\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [mmtask] C:\Programme\Musicmatch\Musicmatch Jukebox\mmtask.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_01\bin\jusched.exe O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Programme\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Nero DriveSpeed] C:\PROGRA~1\Ahead\NEROTO~1\DRIVES~1.EXE O4 - HKLM\..\Run: [Zone Labs Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [AVGCtrl] C:\Programme\AVPersonal\AVGNT.EXE /min O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Programme\TuneUp Utilities 2004\MemOptimizer.exe" autostart O4 - HKCU\..\Run: [AutoEA] C:\Programme\Creative\SBLive\AudioHQ\ahqrun.exe "C:\Programme\Creative\SBLive\AudioHQ\AHQ\CTAutoEA.ahq" 0 O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Programme\IrfanView\Ebay\Ebay.htm O14 - IERESET.INF: START_PAGE_URL=http://www.freenet.de O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15010/CTPID.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{DD73649C-E3C8-4E17-B4E5-5F48802D64B0}: NameServer = 217.237.150.97 217.237.149.161 O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Programme\HP\hpcoretech\comp\hpuiprot.dll O23 - Service: Adobe Active File Monitor - Unknown - C:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe O23 - Service: AntiVir Service - H+BEDV Datentechnik GmbH - C:\Programme\AVPersonal\AVGUARD.EXE O23 - Service: AntiVir Update - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: Photoshop Elements Device Connect - Unknown - C:\Programme\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: TuneUp WinStyler Theme Service - TuneUp Software GmbH - C:\Programme\TuneUp Utilities 2004\WinStylerThemeSvc.exe O23 - Service: TrueVector Internet Monitor - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe |
06.02.2005, 13:53 | #5 |
| hallo meine erste posting und fragen über fragen !!!! Hast du denn irgendein Problem? Das Log enthält an sich nichts Gefährliches. |
06.02.2005, 16:45 | #6 |
| hallo meine erste posting und fragen über fragen !!!! soweit ich meine nein nur ich weiss nicht was das alles bedeutet und ob ich über haubt sicherbin weiss ich auch nicht sind meine daten den für andere ohne mein wissen sicht lich !!!! |
06.02.2005, 16:50 | #7 |
hallo meine erste posting und fragen über fragen !!!! @yozgatli es gibt keine 100% sicherheit. deine daten sind nur in einem gewissen maße geschützt. und zwar dadurch, dass du dein system richtig absicherst. die konfigurationsprogramme von www.ntsvcfg.de und www.dingens.org sind da eine recht gute hilfe. außerdem einen anderen browser wie firefox oder opera besorgen. achja und einen antivirenscanner sollte man auch haben (antivir reicht meines wissens völlig aus, wenn man das beachtet, was ich beschrieben habe) nun zur erklärung von hijackthis: das was du da als log gepostet hast, sind die angaben die HijackThis aus deiner windows-registrierung gesammelt hat. da wären: -laufende prozesse (programme die gerade laufen) -diverse registrierungseinträge (BHO(browserhilfsobjekte wie searchbars aber auch google-toolbar) und weitere verdächtige einträge in anderen bereichen^^) Geändert von Chris14 (06.02.2005 um 16:56 Uhr) |
06.02.2005, 17:41 | #8 |
| hallo meine erste posting und fragen über fragen !!!! Wenn du dich ein wenig weiterführend informieren möchtest, empfehle ich dir: http://www.mathematik.uni-marburg.de...ompromise.html http://www.comsafe.de/ |
Themen zu hallo meine erste posting und fragen über fragen !!!! |
.inf, adobe, adobe reader, antivir, antivir update, avg, bho, ci.dll, ebay, excel, explorer, file missing, frage, hijack, hijackthis, homepage, internet, internet explorer, logfile, neu, photoshop, programme, rundll, security, software, sun java, super, system, tcpip, tuneup utilities, usb, usb 2.0, windows, windows messenger, windows xp, yahoo |