![]() |
|
Log-Analyse und Auswertung: hijackthis logWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() hijackthis log hi , da ich gestern ne meldung bekommen hab das ich nen trojaner habe , und heute dann gescannt habe , aber nichts gefunden habe , wär ich sehr froh wenn mir wer von euch meinen log auswerten könnte bzw sagen könnte was ned passt wär wirklich sehr dankbar Logfile of HijackThis v1.99.1 Scan saved at 10:59:53, on 24.04.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe D:\Programme\smc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\RUNDLL32.EXE D:\programme\powerstrip\pstrip.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\ctfmon.exe D:\Programme\MouseWare\system\em_exec.exe D:\Programme\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe C:\Programme\Alwil Software\Avast4\aswUpdSv.exe C:\Programme\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\system32\wscntfy.exe C:\Programme\Alwil Software\Avast4\ashWebSv.exe D:\PROGRA~1\AD-AWA~1\Ad-Watch.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Downloads\FxGaobot.exe D:\HijackThis.exe R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Programme\MyWay\myBar\1.bin\MYBAR.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programme\Adobe\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\Programme\FlashFXP\IEFlash.dll O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Programme\MyWay\myBar\1.bin\MYBAR.DLL O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SmcService] D:\PROGRA~1\smc.exe -startgui O4 - HKLM\..\Run: [PowerStrip] d:\programme\powerstrip\pstrip.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\\NeroCheck.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [LDM] D:\Programme\\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\RunOnce: [ICQ] C:\Programme\ICQ\ICQ.exe -trayboot O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Programme\ICQ\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Programme\ICQ\ICQ.exe O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O18 - Protocol: bw+0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Programme\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: offline-8876480 - {D52EC0F5-2E2A-4CAB-AAB9-F85453391C7C} - D:\Programme\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O21 - SSODL: SysTray - {E61B5E20-DE35-11CF-9C87-1579005127ED} - (no file) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programme\Alwil Software\Avast4\aswUpdSv.exe |
Themen zu hijackthis log |
adobe, auswerten, avast, avast!, bho, dateien, desktop, dll, excel, explorer, hijack, hijackthis, hijackthis log, icq, internet, internet explorer, log, log auswerten, messenger, microsoft, nvcpl.dll, programme, rundll, software, system, system32, systray, trojaner, windows, windows messenger, windows xp |