Warning You are in Danger! Your personaly data HiJackThis Log-File prüfen

totaltollertyp

Hallo Liebe Leute ich versteh es nicht:

könnt ihr das mal prüfen, was ich machen muss?

Schöne Grüße

TTT


Logfile of HijackThis v1.99.1
Scan saved at 09:06:06, on 02.04.2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\SCardSvr.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
c:\INSIGHT\TOOLS\Aiclient.EXE
C:\WINNT\System32\Ati2evxx.exe
C:\Programme\Network Associates\VirusScan\Avsynmgr.exe
C:\WINNT\System32\HPConfig.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\Programme\ON Technology\On Command Remote Host\PH32SVC.EXE
C:\Programme\Network Associates\VirusScan\VsStat.exe
C:\Programme\Network Associates\VirusScan\Vshwin32.exe
C:\PROGRA~1\GEMEIN~1\NETWOR~1\McShield\Mcshield.exe
C:\Programme\Network Associates\VirusScan\Avconsol.exe
C:\WINNT\Explorer.EXE
C:\Programme\ON Technology\On Command Remote Host\PHOST32.EXE
C:\WINNT\system32\PRPCUI.exe
C:\Programme\Synaptics\SynTP\SynTPLpr.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\WINNT\system32\AEIWLSTA.EXE
C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb01.exe
C:\Programme\Java\j2re1.4.2_06\bin\jusched.exe
C:\WINNT\System32\f1ef505a53.exe
C:\WINNT\system32\internat.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\Programme\Skype\Phone\Skype.exe
C:\Programme\Yahoo!\Messenger\ypager.exe
C:\Programme\Telekom\Eumex 704PC DSL\Capictrl.exe
C:\Programme\Telekom\Eumex 704PC DSL\HNetCtrl.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\WinZip\winzip32.exe
C:\Temp\HijackThis.exe
C:\WINNT\system32\NOTEPAD.EXE
C:\WINNT\System32\f1ef505a53.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://de.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://de.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;*.t-mobil.de;*.detemobil.de;*.f2.dsh.de;*.training-intranet.dsh.de;53.*;*.dsh.de
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\AcrobatReader\Acrobat\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ProxyHostTrayIcon] "C:\Programme\ON Technology\On Command Remote Host\PHOST32.EXE" -s
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [HP Anzeigeeinstellungen] C:\Programme\Hewlett-Packard\HP Display Utility\hpdisply.exe /s
O4 - HKLM\..\Run: [PRPCMonitor] PRPCUI.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [1AEIWLRAD.exe] AEIWLRAD.exe
O4 - HKLM\..\Run: [AEIWLSTA.EXE] AEIWLSTA.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb01.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_06\bin\jusched.exe
O4 - HKLM\..\Run: [f1ef505a53] C:\WINNT\System32\f1ef505a53.exe
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Programme\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [f1ef505a53] C:\WINNT\System32\f1ef505a53.exe
O4 - Global Startup: CAPIControl.lnk = C:\Programme\Telekom\Eumex 704PC DSL\Capictrl.exe
O4 - Global Startup: HomeNet Control.lnk = C:\Programme\Telekom\Eumex 704PC DSL\HNetCtrl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\system32\msjava.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesde.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesde.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O12 - Plugin for .mid: C:\Programme\Internet Explorer\PLUGINS\npqtplugin2.dll
O12 - Plugin for .mpeg: C:\Programme\Internet Explorer\PLUGINS\npqtplugin3.dll
O16 - DPF: {07070BFD-C501-4899-934D-0B96A9F70795} (Siebel Option Pack for IE 7.5.3) - http://ecrmslot04.f2.dsh.de/deu/login/16157/applets/SiebelOptionPack.cab
O16 - DPF: {10000000-1000-0000-0000-000000000000} - file://C:\\Recycler\\Q678341.exe
O16 - DPF: {1EEBFE70-1CE8-11D6-8C81-00D0B7E72554} (MailClient Class) - http://ecrmslot04.f2.dsh.de/deu/login/16157/applets/SiebExtMailClient.cab
O16 - DPF: {205E7068-6D03-4566-AD06-A146B592FBA5} (Loader Class v2) - http://wve00637.eft.telekom.de/tdbin/Spider80.ocx
O16 - DPF: {233DE9B6-5880-4F10-A870-47F10FD723E6} (Siebel Email Support for Microsoft Outlook and Lotus Notes) - http://ecrmpapp02.f2.dsh.de/browsercheck/18353/applets/SiebelAx_OutBound_mail.cab
O16 - DPF: {253A9D23-F982-11D4-8BE4-00D0B7E61414} (SiebelHTMLApplication Class) - http://ecrmslot04.f2.dsh.de/deu/login/16157/applets/siebelhtml.cab
O16 - DPF: {30128C5E-76D1-4EB0-8A47-1454A38E7191} (Siebel Option Pack for IE 7.5.3) - http://ecrmslot04.f2.dsh.de/deu/login/16172/applets/SiebelOptionPack.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programme\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {631F0C94-C02F-40AC-A31B-DDC39731FC81} (Siebel Option Pack for IE 7.0.4) - http://ecrmpapp05.f2.dsh.de/deu/login/14197/applets/SiebelOptionPack.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - http://www.bitdefender.de/scan/Msie/bitdefender.cab
O16 - DPF: {8C244272-1DC1-4CE7-9C6C-FABCA09EB543} (Siebel Desktop Integration) - http://ecrmpapp02.f2.dsh.de/browsercheck/18353/applets/SiebelAx_Desktop_Integration.cab
O16 - DPF: {8F4F3368-54CA-4268-8225-0F4367472CF4} (MailClient Class) - http://ecrmpapp04.f2.dsh.de/deu/login/16172/applets/SiebExtMailClient.cab
O16 - DPF: {8F5194C4-5FEB-42D7-ACCE-DB249CE255F5} (HiOpt Class) - http://ecrmpapp04.f2.dsh.de/crm-tsi/deu/opt.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {EDC89161-004D-456B-8E04-E2E3C558C14C} (Siebel High Interactivity Framework) - http://ecrmpapp02.f2.dsh.de/browsercheck/18353/applets/SiebelAx_HI_Client.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{AE9D4B15-E762-453E-B123-7F0C6281E74A}: NameServer = 164.26.237.3,164.26.237.48
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = ditscom.dsh.de,dts.telekom.de,Mgb01.telekom.de,Blf01.telekom.de,Kiel01.telekom.de,Krf01.telekom.de,Bmbg01.telekom.de,Gppng01.telekom.de
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = ditscom.dsh.de,dts.telekom.de,Mgb01.telekom.de,Blf01.telekom.de,Kiel01.telekom.de,Krf01.telekom.de,Bmbg01.telekom.de,Gppng01.telekom.de
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = ditscom.dsh.de,dts.telekom.de,Mgb01.telekom.de,Blf01.telekom.de,Kiel01.telekom.de,Krf01.telekom.de,Bmbg01.telekom.de,Gppng01.telekom.de
O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
O23 - Service: Asset Insight Client (AICLIENT) - Tangram® Enterprise Solutions, Inc - c:\INSIGHT\TOOLS\Aiclient.EXE
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe
O23 - Service: AVSync Manager (AvSynMgr) - Unknown owner - C:\Programme\Network Associates\VirusScan\Avsynmgr.exe
O23 - Service: DeTeSystem - Unknown owner - C:\WINNT\system32\patch.cmd
O23 - Service: Verwaltungsdienst für die Verwaltung logischer Datenträger (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: HP Configuration Service (HPConfig) - Hewlett-Packard - C:\WINNT\System32\HPConfig.exe
O23 - Service: McShield - Network Associates, Inc. - C:\PROGRA~1\GEMEIN~1\NETWOR~1\McShield\Mcshield.exe
O23 - Service: OracleClientCache80 - Unknown owner - C:\Programme\DBDRIVER\orant\BIN\ONRSD80.EXE
O23 - Service: ON Command Remote Host Service (ProxyHostService) - Funk Software, Inc. - C:\Programme\ON Technology\On Command Remote Host\PH32SVC.EXE