| |
| |||||||
Log-Analyse und Auswertung: PC will e-mails senden!!!!!Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
31.07.2007, 14:07
| #1 |
| |  PC will e-mails senden!!!!! Hallo Leute, ich hab ein total nerviges Problem. Seit einigen Tagen informiert mich Norton Internet Security 2004 darüber, dass ausgehende E-Mails geprüft werden, die ich aber gar nicht selber schicke. Und zwar immer mehrere gleichzeitig. Das passiert immer wenn ich nen paar Minuten im Internet bin. Es sind Infokästchen von Symantec, die über der Uhr erscheinen. Da es aber teilweise solche Massen an Infoskästchen sind, kann es vorkommen, dass mein Monitor voll damit ist! Hier mal ein son Kästen was dann erscheint: Bild Ich hab auch Anti Virus durchlaufen lassen und nen anderes Programm. beide konnte aber nichts finden.... und das problem ist immer noch da. Hier jetzt mein HijackThis file: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:02:27, on 31.07.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\System32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe H:\Programme\Norton Internet Security\Norton AntiVirus\navapsvc.exe C:\WINDOWS\system32\nvsvc32.exe H:\Programme\Norton Internet Security\Norton AntiVirus\SAVScan.exe C:\Programme\Spyware Doctor\svcntaux.exe C:\Programme\Spyware Doctor\swdsvc.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe C:\Programme\Spyware Doctor\SDTrayApp.exe C:\WINDOWS\system32\wscntfy.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe H:\Programme\QuickTime\qttask.exe C:\Programme\Java\jre1.6.0_01\bin\jusched.exe C:\WINDOWS\System32\wbem\wmiprvse.exe C:\Programme\Spybot - Search & Destroy\TeaTimer.exe C:\Programme\T-Online\DSL-Manager\TODslMgr.exe C:\Programme\T-Online\DSL-Manager\TODslSvc.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Mozilla Firefox\firefox.exe C:\HiJackThis\HijackThis.exe C:\WINDOWS\System32\wbem\wmiprvse.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://w*w.google.de/ R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - H:\Programme\ICQToolbar\toolbaru.dll O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - H:\Programme\ICQToolbar\toolbaru.dll O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - H:\Programme\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - H:\Programme\Norton Internet Security\Norton AntiVirus\NavShExt.dll O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - H:\Programme\ICQToolbar\toolbaru.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [QuickTime Task] "H:\Programme\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [EPSON Stylus C42 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C42 Series" /O6 "USB001" /M "Stylus C42" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [SDTray] "C:\Programme\Spyware Doctor\SDTrayApp.exe" O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - S-1-5-18 Startup: T-Online DSL-Manager.lnk = C:\Programme\T-Online\DSL-Manager\TODslMgr.exe (User 'SYSTEM') O4 - .DEFAULT Startup: T-Online DSL-Manager.lnk = C:\Programme\T-Online\DSL-Manager\TODslMgr.exe (User 'Default user') O4 - Startup: T-Online DSL-Manager.lnk = C:\Programme\T-Online\DSL-Manager\TODslMgr.exe O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Reader 8.0\Reader\reader_sl.exe O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Programme\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://H:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - H:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - H:\Programme\ICQLite\ICQLite.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{47C84C21-F6F8-490A-A9CF-A671880BCB80}: NameServer = 195.50.140.252 195.50.140.114 O20 - Winlogon Notify: comcat32 - C:\WINDOWS\SYSTEM32\comcat32.dll O23 - Service: Adobe LM Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - H:\Programme\Norton Internet Security\Norton AntiVirus\navapsvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: SAVScan - Symantec Corporation - H:\Programme\Norton Internet Security\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Programme\Spyware Doctor\svcntaux.exe O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Programme\Spyware Doctor\swdsvc.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe O23 - Service: T-Online DSL-Manager (TODslService) - T-Systems International GmbH - C:\Programme\T-Online\DSL-Manager\TODslSvc.exe -- End of file - 7664 bytes |
|
31.07.2007, 14:20
| #2 | |
  | PC will e-mails senden!!!!! @bigboi
__________________Zitat:
|
|
31.07.2007, 14:37
| #3 |
| | PC will e-mails senden!!!!! das kam bei raus:
__________________Antivirus Version letzte aktualisierung Ergebnis AhnLab-V3 2007.7.31.1 2007.07.31 - AntiVir 7.4.0.54 2007.07.31 - Authentium 4.93.8 2007.07.30 - Avast 4.7.997.0 2007.07.30 - AVG 7.5.0.476 2007.07.30 - BitDefender 7.2 2007.07.31 - CAT-QuickHeal 9.00 2007.07.31 - ClamAV 0.91 2007.07.31 - DrWeb 4.33 2007.07.31 - eSafe 7.0.15.0 2007.07.31 - eTrust-Vet 31.1.5019 2007.07.31 - Ewido 4.0 2007.07.31 - FileAdvisor 1 2007.07.31 - Fortinet 2.91.0.0 2007.07.31 - F-Prot 4.3.2.48 2007.07.30 - F-Secure 6.70.13030.0 2007.07.31 - Ikarus T3.1.1.8 2007.07.31 - Kaspersky 4.0.2.24 2007.07.31 - McAfee 5086 2007.07.30 - Microsoft 1.2704 2007.07.31 VirTool:Win32/Obfuscator.L NOD32v2 2429 2007.07.30 - Norman 5.80.02 2007.07.31 - Panda 9.0.0.4 2007.07.31 - Prevx1 V2 2007.07.31 - Rising 19.34.12.00 2007.07.31 - Sophos 4.19.0 2007.07.26 - Sunbelt 2.2.907.0 2007.07.31 - Symantec 10 2007.07.31 - TheHacker 6.1.7.159 2007.07.31 - VBA32 3.12.2.2 2007.07.30 - VirusBuster 4.3.26:9 2007.07.30 - Webwasher-Gateway 6.0.1 2007.07.31 - weitere Informationen File size: 9936 bytes MD5: 01a595f506b5ca0dd284723563366d61 SHA1: 5d4436115ae46b4d1894024ab0c13cbacb698569 und wie lösch ich das jetzt bzw. bekomm den virus runter???? |
|
31.07.2007, 14:49
| #4 | |
| | PC will e-mails senden!!!!!Zitat:
|
|
31.07.2007, 15:36
| #5 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | PC will e-mails senden!!!!! Also bei mir hegt sich der Verdacht, der Rechner wird als Dreckspamschleuder missbraucht...  @bigboi: Besorg dir doch mal bitte tcpview erstell damit ein Logfile und poste es.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
31.07.2007, 17:16
| #6 |
| | PC will e-mails senden!!!!! [System Process]:0 TCP home-cz8i3vi2yu:1466 194.116.241.54:http TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1579 194.116.241.52:http TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1502 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1534 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1542 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1574 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1530 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1550 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1506 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1538 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1554 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1570 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1558 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1546 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1499 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1535 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1503 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1531 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1523 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1526 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1539 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1498 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1567 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1575 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1551 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1547 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1559 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1464 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:wins TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1504 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1516 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1520 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1528 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1564 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1576 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1572 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1522 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1517 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1513 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1581 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1583 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1543 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1555 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1025 localhost:1566 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1463 localhost:1025 TIME_WAIT [System Process]:0 TCP home-cz8i3vi2yu:1562 localhost:1025 TIME_WAIT ccApp.exe:2888 TCP home-cz8i3vi2yu:1031 home-cz8i3vi2yu:0 LISTENING ccProxy.exe:1716 TCP home-cz8i3vi2yu:1025 home-cz8i3vi2yu:0 LISTENING ccProxy.exe:1716 TCP home-cz8i3vi2yu:1156 nf-in-f147.google.com:http ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1419 kr-in-f167.google.com:http ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1423 bd-in-f103.google.com:http ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1437 lm-in-f147.google.com:http ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1440 nf-in-f147.google.com:http ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1441 el-in-f93.google.com:http ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1025 localhost:1155 ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1025 localhost:1418 ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1025 localhost:1438 ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1025 localhost:1422 ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1025 localhost:1436 ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1025 localhost:1439 ESTABLISHED ccProxy.exe:1716 TCP home-cz8i3vi2yu:1025 localhost:1585 FIN_WAIT2 firefox.exe:2560 TCP home-cz8i3vi2yu:1151 localhost:1152 ESTABLISHED firefox.exe:2560 TCP home-cz8i3vi2yu:1152 localhost:1151 ESTABLISHED firefox.exe:2560 TCP home-cz8i3vi2yu:1153 localhost:1154 ESTABLISHED firefox.exe:2560 TCP home-cz8i3vi2yu:1154 localhost:1153 ESTABLISHED firefox.exe:2560 TCP home-cz8i3vi2yu:1155 localhost:1025 ESTABLISHED firefox.exe:2560 TCP home-cz8i3vi2yu:1418 localhost:1025 ESTABLISHED firefox.exe:2560 TCP home-cz8i3vi2yu:1422 localhost:1025 ESTABLISHED firefox.exe:2560 TCP home-cz8i3vi2yu:1436 localhost:1025 ESTABLISHED firefox.exe:2560 TCP home-cz8i3vi2yu:1438 localhost:1025 ESTABLISHED firefox.exe:2560 TCP home-cz8i3vi2yu:1439 localhost:1025 ESTABLISHED lsass.exe:616 UDP home-cz8i3vi2yu:isakmp *:* lsass.exe:616 UDP home-cz8i3vi2yu:4500 *:* SAgent2.exe:1780 UDP home-cz8i3vi2yu:2051 *:* svchost.exe:1092 UDP home-cz8i3vi2yu:3613 *:* svchost.exe:1092 UDP home-cz8i3vi2yu:1360 *:* svchost.exe:1092 UDP home-cz8i3vi2yu:1043 *:* svchost.exe:1256 UDP home-cz8i3vi2yu:1900 *:* svchost.exe:1256 UDP home-cz8i3vi2yu:1900 *:* svchost.exe:1256 UDP 169.254.227.162:1900 *:* svchost.exe:764 TCP home-cz8i3vi2yu:3832 home-cz8i3vi2yu:0 LISTENING svchost.exe:764 TCP home-cz8i3vi2yu:1032 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1062 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1072 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1108 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1117 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1122 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1134 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1148 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1237 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1259 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1269 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1277 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1283 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1293 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1297 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1299 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1301 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1303 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1305 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1309 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1321 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1505 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1578 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1585 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1786 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1886 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:1959 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2003 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2035 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2242 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2324 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2328 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2330 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2332 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2342 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2357 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2385 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2420 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2480 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2516 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2574 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2596 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2598 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2600 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2602 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2604 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2606 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2608 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2612 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2647 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2677 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2707 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2749 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2797 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2799 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2801 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2803 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2850 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2956 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2966 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2968 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2970 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:2994 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:3006 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:3235 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:3389 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:3391 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:3539 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:3571 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:3575 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:3577 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:3579 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:3818 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:3851 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4083 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4115 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4151 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4250 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4296 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4300 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4340 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4471 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4529 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4548 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4581 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4606 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4624 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4646 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4648 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4652 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4654 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4656 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4658 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4660 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4662 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4664 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4666 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4668 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4670 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4672 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4688 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4692 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4718 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4750 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4772 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4808 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4816 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4818 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4820 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4822 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4824 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4826 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4828 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4830 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4832 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4834 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4836 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4840 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4842 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4844 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4848 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4850 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4852 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4854 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4856 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4858 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4860 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4862 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4866 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4868 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4870 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4872 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4890 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4935 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4937 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4939 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4941 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4975 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4977 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4979 localhost:1025 CLOSE_WAIT svchost.exe:764 TCP home-cz8i3vi2yu:4983 localhost:1025 CLOSE_WAIT svchost.exe:820 TCP home-cz8i3vi2yu:epmap home-cz8i3vi2yu:0 LISTENING svchost.exe:896 UDP home-cz8i3vi2yu:ntp *:* svchost.exe:896 UDP home-cz8i3vi2yu:ntp *:* svchost.exe:896 UDP 169.254.227.162:ntp *:* System:4 TCP home-cz8i3vi2yu:microsoft-ds home-cz8i3vi2yu:0 LISTENING System:4 TCP 169.254.227.162:netbios-ssn home-cz8i3vi2yu:0 LISTENING System:4 UDP home-cz8i3vi2yu:microsoft-ds *:* System:4 UDP 169.254.227.162:netbios-dgm *:* System:4 UDP 169.254.227.162:netbios-ns *:* TODslMgr.exe:3712 TCP home-cz8i3vi2yu:4783 localhost:1025 CLOSE_WAIT TODslMgr.exe:3712 TCP home-cz8i3vi2yu:4785 localhost:1025 CLOSE_WAIT |
|
31.07.2007, 17:28
| #7 |
| /// Helfer-Team | PC will e-mails senden!!!!! Hi, und als allererstes stell bitte deine Firewall so ein, dass sie den Versand von Mails komplett blockiert. Zur Zeit werden dir nur die Mails angezeigt, die nicht angenommen wurden. Die sind aber weniger schlimm, das Problem sind die, die bei denen diese Fenster nicht kommen. Das ist der Spam, der anderen Leuten die Mailboxen zumüllt oder die Prozessorzeit für einen Spamfilter klaut. Weiteren Versand von Spam zu tolerieren, während Du online nach Lösungen suchst, ist inakzeptabel. Gruß, Karl |
|
31.07.2007, 17:33
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC will e-mails senden!!!!! Also ich seh da nichts Aufälliges. Vllt. versteckt sich der Schädling bei dir auf dem PC, führ mal bitte ein Check mit Blacklight aus und poste das Ergebnis.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
31.07.2007, 17:37
| #9 |
| Gesperrt | PC will e-mails senden!!!!! leute weils der schadling selber gecodet würde oder gut gesteahls würde, und zb mit mucki protector etc rüberlief, ist der F.U.D!!!! sprich der schadling ist von kein virenscanner zu finden, weils das der weils ist hilft nur manuele infernung regiest....... ist aber nur für profis. sonst hiflt evtl nur neu formatieren........ |
|
| Themen zu PC will e-mails senden!!!!! |
| adobe, antivirus, bho, ctfmon.exe, drivers, e-mails, excel, explorer, firefox, hijack, hijackthis, hkus\s-1-5-18, internet, internet explorer, internet security, mehrere, monitor, mozilla, mozilla firefox, nvidia, pdf, rundll, s-1-5-18, security, senden, software, spyware, symantec, system, t-online, trend micro, urlsearchhook, usb, virus, windows, windows xp |
Linear-Darstellung
