![]() |
|
Log-Analyse und Auswertung: Trojaner auf dem Rechner+keine Ahnung=Riesenproblem!Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() Trojaner auf dem Rechner+keine Ahnung=Riesenproblem! Hallo zusammen! Brauche dringend Hilfe wg Trojanern! Wer kann mir helfen und sagen, was hierdran faul ist??????? Und wie das mit dem "fixen" geht? Danke! Logfile of HijackThis v1.99.1 Scan saved at 17:26:24, on 08.02.2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\S24EvMon.exe C:\WINDOWS\system32\ZCfgSvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\crkg32.exe C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE C:\Programme\AVPersonal\AVWUPSRV.EXE C:\Programme\Cisco Systems\VPN Client\cvpnd.exe C:\WINDOWS\system32\RegSrvc.exe C:\WINDOWS\system32\slserv.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\Programme\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe C:\Programme\AVPersonal\AVGNT.EXE C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\1XConfig.exe C:\WINDOWS\system32\wscntfy.exe C:\Programme\Adobe\Acrobat 6.0\Distillr\acrotray.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Internet Explorer\iexplore.exe C:\Programme\Trojancheck 6\tcguard.exe C:\DOKUME~1\ADMINI~1\LOKALE~1\Temp\Temporäres Verzeichnis 1 für hijackthis.zip\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\tqnko.dll/sp.html#93256%resultposition.net R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\tqnko.dll/sp.html#93256%resultposition.net R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gmx.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\tqnko.dll/sp.html#93256%resultposition.net R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\tqnko.dll/sp.html#93256%resultposition.net R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\tqnko.dll/sp.html#93256%resultposition.net R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\tqnko.dll/sp.html#93256%resultposition.net R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\tqnko.dll/sp.html#93256%resultposition.net R3 - Default URLSearchHook is missing O2 - BHO: Class - {00C0618C-1BC9-8D1E-D318-81B8263C4778} - C:\WINDOWS\syszh32.dll (file missing) O2 - BHO: Class - {0372BF75-CDA2-BD24-2D6F-BCCFC6A8E85C} - C:\WINDOWS\ntqp32.dll (file missing) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Class - {1319DCCF-DC18-81C5-9AD1-732BF9FC42A9} - C:\WINDOWS\apimn32.dll (file missing) O2 - BHO: Class - {156984A9-F699-740E-83F2-2DA8BCC50A03} - C:\WINDOWS\system32\atlxh32.dll (file missing) O2 - BHO: Class - {263B61EA-74E2-751A-5588-7D697B89E425} - C:\WINDOWS\msmi32.dll (file missing) O2 - BHO: Class - {2825AEB2-BECC-119B-D482-F8F24CE5B9FA} - C:\WINDOWS\system32\atliy32.dll (file missing) O2 - BHO: Class - {2CDD36D9-22D8-F173-FFB1-D2AB73FC42B2} - C:\WINDOWS\javait.dll (file missing) O2 - BHO: Class - {2F74F74F-627E-D770-0FA1-60E29DB33B85} - C:\WINDOWS\system32\d3fh.dll (file missing) O2 - BHO: Class - {33A49432-E399-EC6E-1569-941A0DB59717} - C:\WINDOWS\system32\addzh32.dll (file missing) O2 - BHO: Class - {3643DD64-94B4-5743-9B71-A41AC1605F6F} - C:\WINDOWS\ipxa.dll (file missing) O2 - BHO: Class - {3A5153EA-63AF-772D-4B56-4C560E2D983E} - C:\WINDOWS\system32\sdkez32.dll (file missing) O2 - BHO: Class - {3D2ACA16-3F1C-BF97-6524-0F7072E1E895} - C:\WINDOWS\netlh32.dll (file missing) O2 - BHO: Class - {4757FF17-5931-EC45-9853-F6BB1F4B4ECD} - C:\WINDOWS\system32\nteq.dll (file missing) O2 - BHO: Class - {4D253403-A759-B41F-BFC5-5B569B8A80CA} - C:\WINDOWS\system32\ipoj.dll (file missing) O2 - BHO: (no name) - {5F881610-B911-4719-9673-E6409379FC7F} - (no file) O2 - BHO: Class - {5FF7BB31-38C8-9368-5FEE-A72B4BCC8B6A} - C:\WINDOWS\windt.dll (file missing) O2 - BHO: Class - {697B7ADA-161F-4197-43FF-977D98542289} - C:\WINDOWS\nettb32.dll (file missing) O2 - BHO: Class - {69A8FA37-D46A-44DA-B6ED-604061C70664} - C:\WINDOWS\mfcrj32.dll (file missing) O2 - BHO: Class - {6B10CE97-0404-CE37-A21D-4A74318C961A} - C:\WINDOWS\d3nc32.dll (file missing) O2 - BHO: Class - {73374308-91E6-5E66-411F-8EDBA399652C} - C:\WINDOWS\system32\atlaa.dll (file missing) O2 - BHO: Class - {7377424B-DD87-6CB9-655D-373986F809BE} - C:\WINDOWS\system32\atllh.dll (file missing) O2 - BHO: Class - {75AB9EE4-0E8F-7F96-4A65-7E768261D1CA} - C:\WINDOWS\system32\iedr.dll (file missing) O2 - BHO: Class - {78CC3372-C739-B055-F317-E72BFB372849} - C:\WINDOWS\system32\apitk.dll (file missing) O2 - BHO: Class - {7F0F2565-877E-9354-50D9-CAEBA6908734} - C:\WINDOWS\system32\iedu32.dll (file missing) O2 - BHO: Class - {81BC3EBA-35E5-E622-0BAD-7095B849C484} - C:\WINDOWS\system32\netuq32.dll (file missing) O2 - BHO: Class - {8650B9FD-D511-3B3C-53C7-3F446E18261C} - C:\WINDOWS\d3wt32.dll (file missing) O2 - BHO: (no name) - {87B10323-F7DA-43DD-933B-FA914F8326EA} - (no file) O2 - BHO: Class - {87ED5239-D49E-73C7-66CA-B490DBD765A4} - C:\WINDOWS\javaoo32.dll (file missing) O2 - BHO: Class - {881D5590-AEC0-5E2C-CC72-B9035DBE2FED} - C:\WINDOWS\javagu32.dll (file missing) O2 - BHO: Class - {9066D86A-7629-BAB9-CF3A-6ECFD19325BB} - C:\WINDOWS\crfw32.dll (file missing) O2 - BHO: Class - {9875A24E-C960-788B-3993-510C18C560E6} - C:\WINDOWS\apirg32.dll (file missing) O2 - BHO: Class - {9D824F52-D30D-CDCC-B4A2-0861DBD812D6} - C:\WINDOWS\system32\atlpb.dll (file missing) O2 - BHO: Class - {A30CC155-A9DC-21EB-9E73-1C71E85DE3CA} - C:\WINDOWS\javaav32.dll (file missing) O2 - BHO: Class - {AC81EC14-3EEC-6538-2603-BABEF1F75A24} - C:\WINDOWS\addxz.dll (file missing) O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Class - {AF7BC0FE-9CDB-3A79-0AA0-2FDD1EB86E2F} - C:\WINDOWS\system32\apiic32.dll (file missing) O2 - BHO: Class - {C0B79EE4-B30A-1EDB-7313-14ABA461BFDF} - C:\WINDOWS\appgu32.dll (file missing) O2 - BHO: Class - {CDEDCC16-9B3F-3743-52D7-3478681977B5} - C:\WINDOWS\netqh32.dll (file missing) O2 - BHO: Class - {D6D77F0F-5431-DB5B-4101-2093B152C09D} - C:\WINDOWS\system32\netjr32.dll (file missing) O2 - BHO: Class - {E13BCA18-7F26-83F0-5DCA-D59602605F17} - C:\WINDOWS\apiok.dll (file missing) O2 - BHO: Class - {E140149D-F165-0600-629E-8738A52DA75C} - C:\WINDOWS\system32\ntix32.dll (file missing) O2 - BHO: Class - {E2EE3398-3679-6B34-51F3-26F80A4F6FA2} - C:\WINDOWS\sysyt32.dll (file missing) O2 - BHO: Class - {E6315CDC-16D4-97E2-E32A-4E3EEA270907} - C:\WINDOWS\sdknq32.dll (file missing) O2 - BHO: Class - {E63C37D8-2A73-0AF7-8237-F61F449E05BE} - C:\WINDOWS\iexi.dll (file missing) O2 - BHO: Class - {F21F2035-7713-13F6-878C-9E4C7091045A} - C:\WINDOWS\system32\javaen.dll (file missing) O2 - BHO: Class - {FC7FFD6E-0897-B7D0-A319-768F3DA452CD} - C:\WINDOWS\system32\iptr32.dll (file missing) O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programme\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Programme\Intel\PROSetWireless\NCS\PROSet\PRONoMgr.exe O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Programme\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /runonce O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [AVGCtrl] C:\Programme\AVPersonal\AVGNT.EXE /min O4 - HKLM\..\Run: [ntxm32.exe] C:\WINDOWS\system32\ntxm32.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: Acrobat Assistant.lnk = C:\Programme\Adobe\Acrobat 6.0\Distillr\acrotray.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: VPN Client.lnk = ? O8 - Extra context menu item: Easy-WebPrint - Drucken - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint - Schnelldruck - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint - Vorschau - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html O8 - Extra context menu item: Easy-WebPrint - Zu Druckliste hinzufügen - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{53B611C3-1FFA-4D25-8317-FC5DB0682DD7}: NameServer = 194.25.2.129 O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\crkg32.exe O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Programme\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe |
Themen zu Trojaner auf dem Rechner+keine Ahnung=Riesenproblem! |
?????, adobe, antivir, bho, canon, dringend, drivers, excel, explorer, helfen, hijack, hijackthis, internet, internet explorer, keine ahnung, messenger, microsoft, monitor, pdf, problem, programme, software, system, system32, temp, trojaner, urlsearchhook, windows, windows xp, wireless |