| |
| |||||||
Log-Analyse und Auswertung: rapidshare probelmWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
01.03.2008, 18:02
| #1 |
| |  rapidshare probelm hallo ich habe das prob das sich mein mozilla alleine öffnet und werbung anzeigt habe mal einen scan gemacht nix gefunden erstmal den log ich weis nicht was das von rapitshare ist danke für die hilfe Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:59:11, on 01.03.2008 Platform: Windows XP SP3, v.3244 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.3244) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe C:\Programme\uTorrnt\utorrent.exe C:\WINDOWS\system32\ctfmon.exe C:\Programme\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Programme\Nero\Nero8\InCD\InCDsrv.exe C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe C:\Programme\Nero\Nero8\Nero BackItUp\NBService.exe C:\Programme\Nero\Nero8\InCD\NBHRegInCDSrv.exe C:\Programme\NetLimiter 2 Pro\nlsvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\oodag.exe C:\Programme\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\WINDOWS\system32\msiexec.exe C:\Programme\CounterSpy\CounterSpy.exe C:\Programme\CounterSpy\SBCSSvc.exe C:\Programme\CounterSpy\SBCSTray.exe C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe C:\Programme\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8088 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O1 - Hosts: 195.122.131.3 dl1vsnl.rapidshare.com O1 - Hosts: 195.122.131.3 dl1cg.rapidshare.com O1 - Hosts: 195.122.131.3 dl1cg2.rapidshare.com O1 - Hosts: 195.122.131.3 dl1l32.rapidshare.com O1 - Hosts: 195.122.131.3 dl1gc.rapidshare.com O1 - Hosts: 195.122.131.3 dl1tl2.rapidshare.com O1 - Hosts: 195.122.131.3 dl1tl.rapidshare.com O1 - Hosts: 195.122.131.5 dl2vsnl.rapidshare.com O1 - Hosts: 195.122.131.5 dl2cg.rapidshare.com O1 - Hosts: 195.122.131.5 dl2cg2.rapidshare.com O1 - Hosts: 195.122.131.5 dl2l32.rapidshare.com O1 - Hosts: 195.122.131.5 dl2gc.rapidshare.com O1 - Hosts: 195.122.131.5 dl2tl2.rapidshare.com O1 - Hosts: 195.122.131.5 dl2tl.rapidshare.com O1 - Hosts: 195.122.131.7 dl3vsnl.rapidshare.com O1 - Hosts: 195.122.131.7 dl3cg.rapidshare.com O1 - Hosts: 195.122.131.7 dl3cg2.rapidshare.com O1 - Hosts: 195.122.131.7 dl3l32.rapidshare.com O1 - Hosts: 195.122.131.7 dl3gc.rapidshare.com O1 - Hosts: 195.122.131.7 dl3tl2.rapidshare.com O1 - Hosts: 195.122.131.7 dl3tl.rapidshare.com O1 - Hosts: 195.122.131.9 dl4vsnl.rapidshare.com O1 - Hosts: 195.122.131.9 dl4cg.rapidshare.com O1 - Hosts: 195.122.131.9 dl4cg2.rapidshare.com O1 - Hosts: 195.122.131.9 dl4l32.rapidshare.com O1 - Hosts: 195.122.131.9 dl4gc.rapidshare.com O1 - Hosts: 195.122.131.9 dl4tl2.rapidshare.com O1 - Hosts: 195.122.131.9 dl4tl.rapidshare.com O1 - Hosts: 195.122.131.11 dl5vsnl.rapidshare.com O1 - Hosts: 195.122.131.11 dl5cg.rapidshare.com O1 - Hosts: 195.122.131.11 dl5cg2.rapidshare.com O1 - Hosts: 195.122.131.11 dl5l32.rapidshare.com O1 - Hosts: 195.122.131.11 dl5gc.rapidshare.com O1 - Hosts: 195.122.131.11 dl5tl2.rapidshare.com O1 - Hosts: 195.122.131.11 dl5tl.rapidshare.com O1 - Hosts: 195.122.131.13 dl6vsnl.rapidshare.com O1 - Hosts: 195.122.131.13 dl6cg.rapidshare.com O1 - Hosts: 195.122.131.13 dl6cg2.rapidshare.com O1 - Hosts: 195.122.131.13 dl6l32.rapidshare.com O1 - Hosts: 195.122.131.13 dl6gc.rapidshare.com O1 - Hosts: 195.122.131.13 dl6tl2.rapidshare.com O1 - Hosts: 195.122.131.13 dl6tl.rapidshare.com O1 - Hosts: 195.122.131.15 dl7vsnl.rapidshare.com O1 - Hosts: 195.122.131.15 dl7cg.rapidshare.com O1 - Hosts: 195.122.131.15 dl7cg2.rapidshare.com O1 - Hosts: 195.122.131.15 dl7l32.rapidshare.com O1 - Hosts: 195.122.131.15 dl7gc.rapidshare.com O1 - Hosts: 195.122.131.15 dl7tl2.rapidshare.com O1 - Hosts: 195.122.131.15 dl7tl.rapidshare.com O1 - Hosts: 195.122.131.17 dl8vsnl.rapidshare.com O1 - Hosts: 195.122.131.17 dl8cg.rapidshare.com O1 - Hosts: 195.122.131.17 dl8cg2.rapidshare.com O1 - Hosts: 195.122.131.17 dl8l32.rapidshare.com O1 - Hosts: 195.122.131.17 dl8gc.rapidshare.com O1 - Hosts: 195.122.131.17 dl8tl2.rapidshare.com O1 - Hosts: 195.122.131.17 dl8tl.rapidshare.com O1 - Hosts: 195.122.131.19 dl9vsnl.rapidshare.com O1 - Hosts: 195.122.131.19 dl9cg.rapidshare.com O1 - Hosts: 195.122.131.19 dl9cg2.rapidshare.com O1 - Hosts: 195.122.131.19 dl9l32.rapidshare.com O1 - Hosts: 195.122.131.19 dl9gc.rapidshare.com O1 - Hosts: 195.122.131.19 dl9tl2.rapidshare.com O1 - Hosts: 195.122.131.19 dl9tl.rapidshare.com O1 - Hosts: 195.122.131.21 dl10vsnl.rapidshare.com O1 - Hosts: 195.122.131.21 dl10cg.rapidshare.com O1 - Hosts: 195.122.131.21 dl10cg2.rapidshare.com O1 - Hosts: 195.122.131.21 dl10l32.rapidshare.com O1 - Hosts: 195.122.131.21 dl10gc.rapidshare.com O1 - Hosts: 195.122.131.21 dl10tl2.rapidshare.com O1 - Hosts: 195.122.131.21 dl10tl.rapidshare.com O1 - Hosts: 195.122.131.23 dl11vsnl.rapidshare.com O1 - Hosts: 195.122.131.23 dl11cg.rapidshare.com O1 - Hosts: 195.122.131.23 dl11cg2.rapidshare.com O1 - Hosts: 195.122.131.23 dl11l32.rapidshare.com O1 - Hosts: 195.122.131.23 dl11gc.rapidshare.com O1 - Hosts: 195.122.131.23 dl11tl2.rapidshare.com O1 - Hosts: 195.122.131.23 dl11tl.rapidshare.com O1 - Hosts: 195.122.131.25 dl12vsnl.rapidshare.com O1 - Hosts: 195.122.131.25 dl12cg.rapidshare.com O1 - Hosts: 195.122.131.25 dl12cg2.rapidshare.com O1 - Hosts: 195.122.131.25 dl12l32.rapidshare.com O1 - Hosts: 195.122.131.25 dl12gc.rapidshare.com O1 - Hosts: 195.122.131.25 dl12tl2.rapidshare.com O1 - Hosts: 195.122.131.25 dl12tl.rapidshare.com O1 - Hosts: 195.122.131.27 dl13vsnl.rapidshare.com O1 - Hosts: 195.122.131.27 dl13cg.rapidshare.com O1 - Hosts: 195.122.131.27 dl13cg2.rapidshare.com O1 - Hosts: 195.122.131.27 dl13l32.rapidshare.com O1 - Hosts: 195.122.131.27 dl13gc.rapidshare.com O1 - Hosts: 195.122.131.27 dl13tl2.rapidshare.com O1 - Hosts: 195.122.131.27 dl13tl.rapidshare.com O1 - Hosts: 195.122.131.29 dl14vsnl.rapidshare.com O1 - Hosts: 195.122.131.29 dl14cg.rapidshare.com O1 - Hosts: 195.122.131.29 dl14cg2.rapidshare.com O1 - Hosts: 195.122.131.29 dl14l32.rapidshare.com O1 - Hosts: 195.122.131.29 dl14gc.rapidshare.com O1 - Hosts: 195.122.131.29 dl14tl2.rapidshare.com O1 - Hosts: 195.122.131.29 dl14tl.rapidshare.com O1 - Hosts: 195.122.131.31 dl15vsnl.rapidshare.com O1 - Hosts: 195.122.131.31 dl15cg.rapidshare.com O1 - Hosts: 195.122.131.31 dl15cg2.rapidshare.com O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\Run: [SBCSTray] C:\Programme\CounterSpy\SBCSTray.exe O4 - HKLM\..\RunOnce: [Spybot - Search & Destroy] "C:\Programme\Spybot - Search & Destroy\SpybotSD.exe" /autocheck O4 - HKLM\..\RunOnce: [SpybotDeletingA9842] command /c del "C:\WINDOWS\Temp\msksetup.log" O4 - HKLM\..\RunOnce: [SpybotDeletingC9880] cmd /c del "C:\WINDOWS\Temp\msksetup.log" O4 - HKCU\..\Run: [µTorrent] "C:\Programme\uTorrnt\utorrent.exe" O4 - HKCU\..\RunOnce: [SpybotDeletingB1685] command /c del "C:\WINDOWS\Temp\msksetup.log" O4 - HKCU\..\RunOnce: [SpybotDeletingD3520] cmd /c del "C:\WINDOWS\Temp\msksetup.log" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/german/...an_unicode.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programme\Yahoo!\Common\yinsthelper.dll O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/Driver...aSmartScan.cab O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://www.raiffeisen.net/ols3/fscax.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Programme\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - Unknown owner - C:\MAGIX\Common\Database\bin\fbserver.exe (file missing) O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Programme\Nero\Nero8\InCD\InCDsrv.exe O23 - Service: iPod Service - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Programme\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Nero AG - C:\Programme\Nero\Nero8\InCD\NBHRegInCDSrv.exe O23 - Service: NetLimiter (nlsvc) - Locktime Software - C:\Programme\NetLimiter 2 Pro\nlsvc.exe O23 - Service: NMIndexingService - Nero AG - C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Sunbelt CounterSpy Antispyware (SBCSSvc) - Sunbelt Software - C:\Programme\CounterSpy\SBCSSvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Programme\PC Connectivity Solution\ServiceLayer.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programme\Alcohol 120\StarWind\StarWindService.exe -- End of file - 12430 bytes Geändert von anan (01.03.2008 um 18:54 Uhr) |
|
| Themen zu rapidshare probelm |
| 0 bytes, ad-aware, adobe, antispyware, antivir, avira, bho, c:\windows\temp, computer, excel, explorer, f-secure, gservice, hijack, hijackthis, hkus\s-1-5-18, internet, internet explorer, magix, mozilla, nvidia, object, registry, s-1-5-18, scan, software, solution, system, temp, urlsearchhook, werbung, windows, windows xp, windows xp sp3, windows\temp, xp sp3, öffnet |
Linear-Darstellung
