![]() |
|
Log-Analyse und Auswertung: PC macht sich SelbstständigWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() PC macht sich Selbstständig Hallo, also, ich habe das Problem das mein PC wenn ich was installieren will, Software Lizenznummer eingeben z.B., macht er sich selbstständig und springt immer zum nächsten Schritt bis fertig stellen. Was könnte das denn sein bzw. gibt es in der Systemsteuerung etwas zum ausschalten? hier mein File: Danke schonmal Logfile of HijackThis v1.99.1 Scan saved at 18:08:13, on 16.01.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\Explorer.EXE C:\Programme\1&1 Programme\cFos1\cFosDNT.exe C:\Programme\Iomega\AutoDisk\ADUserMon.exe C:\Programme\Iomega\DriveIcons\ImgIcon.exe C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe C:\Programme\iTunes\iTunesHelper.exe C:\Programme\QuickTime\qttask.exe C:\WINDOWS\system32\LXSUPMON.EXE C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Common\FSM32.EXE C:\WINDOWS\System32\ctfmon.exe C:\Programme\Messenger\msmsgs.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\autoclk.exe C:\Programme\AT-AR215\AT-AR215 USB ADSL MODEM\dslmon.exe C:\Programme\Nikon\NkView6\NkvMon.exe C:\Programme\Trust\Easy Webscan\ScnPanel.exe C:\Programme\SpamPal\spampal.exe C:\WINDOWS\system32\devldr32.exe C:\PROGRA~1\F-SECU~1.DEE\backweb\154149\Program\SERVIC~1.EXE C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Anti-Virus\fsgk32st.exe C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Anti-Virus\FSGK32.EXE C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\backweb\154149\program\fsbwsys.exe C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\backweb\154149\Program\fspex.exe C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Common\FSMA32.EXE C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Common\FSMB32.EXE C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Anti-Virus\fssm32.exe C:\PROGRA~1\Iomega\System32\AppServices.exe C:\WINDOWS\System32\nvsvc32.exe C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Common\FCH32.EXE C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Common\FAMEH32.EXE C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Anti-Virus\fsqh.exe C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Anti-Virus\fsrw.exe C:\Programme\Iomega\AutoDisk\ADService.exe C:\Programme\iPod\bin\iPodService.exe C:\WINDOWS\System32\svchost.exe C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\FWES\Program\fsdfwd.exe C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Anti-Virus\fsav32.exe C:\PROGRA~1\F-SECU~1.DEE\ANTI-S~1\fsaw.exe C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\FSGUI\fsguidll.exe C:\Programme\mozilla.org\Mozilla\mozilla.exe C:\Programme\Windows Media Player\wmplayer.exe G:\Software\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = h**p://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = h**p://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O4 - HKLM\..\Run: [cFosDNT] C:\Programme\1&1 Programme\cFos1\cFosDNT.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [ADUserMon] C:\Programme\Iomega\AutoDisk\ADUserMon.exe O4 - HKLM\..\Run: [Iomega Drive Icons] C:\Programme\Iomega\DriveIcons\ImgIcon.exe O4 - HKLM\..\Run: [Deskup] C:\Programme\Iomega\DriveIcons\deskup.exe /IMGSTART O4 - HKLM\..\Run: [Zone Labs Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [Microsoft AOL Instant Messenger] MSAOL32.exe O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\system32\LXSUPMON.EXE RUN O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [F-Secure Manager] "C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\FSGUI\FSSW.EXE" /reboot O4 - HKLM\..\Run: [News Service] "C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\FSGUI\ispnews.exe" O4 - HKLM\..\RunServices: [Microsoft AOL Instant Messenger] MSAOL32.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit O4 - HKCU\..\Run: [Microsoft AOL Instant Messenger] MSAOL32.exe O4 - HKCU\..\Run: [autoclk] autoclk.exe O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: DSLMON.lnk = ? O4 - Global Startup: F-Secure Anti-Virus 2006 - WEB.DE Edition.lnk = C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\backweb\154149\Program\fspex.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: NkvMon.exe.lnk = C:\Programme\Nikon\NkView6\NkvMon.exe O4 - Global Startup: ScanPanel.lnk = C:\Programme\Trust\Easy Webscan\ScnPanel.exe O8 - Extra context menu item: Dieses Popup &blockieren - C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Anti-Spyware\blockpopups.htm O9 - Extra button: Mobilen Favoriten erstellen - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\inetrepl.dll O9 - Extra button: IE-Schutzschild - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: IE-Schutzschild... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Anti-Spyware\ieshield.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra button: Klicke hier um das Projekt xp-AntiSpy zu unterstützen - {0e921e80-267a-42aa-aee4-60b9a1222a44} - C:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU) O9 - Extra 'Tools' menuitem: Unterstützung für xp-AntiSpy - {0e921e80-267a-42aa-aee4-60b9a1222a44} - C:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU) O11 - Options group: [INTERNATIONAL] International* O12 - Plugin for .spop: C:\Programme\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - h**p://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - h**p://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - h**p://w**.virus-informer.de/scan/Msie/bitdefender.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{98A6576B-D1E3-4FF8-95FE-4646B754BC3F}: NameServer = 217.237.151.115 217.237.149.205 O21 - SSODL: AECBADEC - {78073BD9-251E-5F90-5027-568C531425C6} - C:\WINDOWS\System32\Fidfhl32.dll (file missing) O21 - SSODL: mtklefap - {BE76105A-9874-4558-76B4-74FC9AF074A9} - C:\WINDOWS\System32\wzoltv32.dll (file missing) O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Unknown owner - C:\Programme\AntiVir PersonalEdition Classic\sched.exe (file missing) O23 - Service: F-Secure Anti-Virus 2006 - WEB.DE Edition (BackWeb Plug-in - 154149) - F-Secure Internet Security 2006 - C:\PROGRA~1\F-SECU~1.DEE\backweb\154149\Program\SERVIC~1.EXE O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Anti-Virus\fsgk32st.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\backweb\154149\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Programme\F-Secure Anti-Virus 2006 - WEB.DE Edition\Common\FSMA32.EXE O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe O23 - Service: Iomega Active Disk (_IOMEGA_ACTIVE_DISK_SERVICE_) - Iomega Corporation - C:\Programme\Iomega\AutoDisk\ADService.exe Geändert von Beatbugs (16.01.2007 um 18:30 Uhr) |
Themen zu PC macht sich Selbstständig |
adobe, antivir, antivirus, antivirus scan, avg, avgnt, avgnt.exe, bho, computer, dll, explorer, f-secure, file, firewall, hijack, hijackthis, internet, internet explorer, internet security, monitor, nvidia, plug-in, popup, problem, programme, rundll, sched.exe, software, symantec, usb, web.de, windows, windows xp |