![]() |
|
Log-Analyse und Auswertung: Windows 10 Fund HijackthisWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Windows 10 Fund Hijackthis Hallo nun habe ich Windows 10 und habe hier komische Einträge gefunden. Diese Einträge sind mit dem Logfile HijackThis gemacht. Es wäre gut mir ein paar Infos dazu zu geben. Ich kann damit nichts anfangen. Vor allen Dingen kennt die Hijack Auswertung kaum einen Prozess. Es wird Zeitweise mein Wlan gestört das heißt Windows zeigt Ausrufezeichen. Mein Volumen meiner Partition wurde verändert. Ich kann keine Sicherung meiner Partition machen auf dem USB Stick. Logfile of Trend Micro HijackThis v2.0.5 Scan saved at 01:05:44, on 04.05.2016 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v11.0 (11.00.10586.0020) FIREFOX: 46.0 (x86 de) Boot mode: Normal Running processes: C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe C:\Users\v. Wussow\AppData\Local\Microsoft\OneDrive\OneDrive.exe C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe C:\Program Files (x86)\Trend Micro\RUBotted\RUBottedGUI.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser_crashreporter.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe C:\Program Files\AVAST Software\Avast\AvastNM.exe C:\Program Files\AVAST Software\Avast\AvastNM.exe C:\Windows\SysWOW64\ctfmon.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe C:\Program Files\AVAST Software\SZBrowser\1.48.2066.101\SZBrowser.exe C:\Program Files\AVAST Software\Avast\AvastNM.exe C:\Program Files\AVAST Software\Avast\AvastNM.exe C:\Users\v. Wussow\Downloads\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=255141 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit= O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKLM\..\Run: [IObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart O4 - HKLM\..\Run: [Trend Micro RUBotted V2.0 Beta] C:\Program Files (x86)\Trend Micro\RUBotted\RUBottedGUI.exe O4 - HKCU\..\Run: [OneDrive] "C:\Users\v. Wussow\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background O4 - HKCU\..\Run: [Advanced SystemCare 9] "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'Lokaler Dienst') O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'Netzwerkdienst') O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Advanced SystemCare Service 9 (AdvancedSystemCareService9) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: @oem21.inf,%BcmBtRSupport.SVCNAME%;Bluetooth Driver Management Service (BcmBtRSupport) - Unknown owner - C:\Windows\system32\BtwRSupportService.exe (file missing) O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Riverbed Technology, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: Trend Micro RUBotted Service (RUBotSrv) - Trend Micro Inc. - C:\Program Files (x86)\Trend Micro\RUBotted\RUBotSrv.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\Windows\System32\SensorDataService.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\Windows\system32\TieringEngineService.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 9541 bytes |
Themen zu Windows 10 Fund Hijackthis |
adobe, antivirus, auswertung, avast, defender, explorer, hijack, hijackthis, internet, internet explorer, logfile, lsass.exe, malware, micro, microsoft, mozilla, software, spoolsv.exe, system32, update, usb, windows, windows 10 probleme, windows media player, windowsapps, wlan, wmp |