|
Plagegeister aller Art und deren Bekämpfung: IE öffnet sich ständigWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
17.06.2008, 23:04 | #1 |
| IE öffnet sich ständig Hallo, und zwar habe ich das Problem , dass sich bei mir ständig der IE öffnet, obwohl ich ausschliesslich Mozilla Firefox verwende. Dazu hier mein logfile : Log created by WinPatrol version 15.0.2008.0:15.0.2008.0 Scan saved at 0:02:29 AM, on 6/18/2008 Platform: Windows XP SP2 Home Edition Service Pack 2 (Build 2600) MSIE: Internet Explorer (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\system32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRAMME\ANTIVIR PERSONALEDITION CLASSIC\avguard.exe C:\PROGRAMME\GEMEINSAME DATEIEN\Acronis\SCHEDULE2\schedul2.exe C:\PROGRAMME\ANTIVIR PERSONALEDITION CLASSIC\sched.exe C:\PROGRAMME\FRITZ!DSL\IGDCTRL.EXE C:\PROGRAMME\Google\Common\GOOGLE UPDATER\GOOGLEUPDATERSERVICE.EXE C:\WINDOWS\system32\nvsvc32.exe C:\PROGRAMME\ALCOHOL SOFT\ALCOHOL 120\StarWind\STARWINDSERVICE.EXE C:\PROGRAMME\GEMEINSAME DATEIEN\Acronis\Fomatik\TRUEIMAGETRYSTARTSERVICE.EXE C:\WINDOWS\explorer.exe C:\PROGRAMME\VentSrv\VENTRILO_SVC.EXE C:\PROGRAMME\VentSrv\VENTRILO_SRV.EXE C:\WINDOWS\TBPanel.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\RTHDCPL.exe C:\PROGRAMME\Java\JRE1.6.0_03\bin\jusched.exe C:\PROGRAMME\ANTIVIR PERSONALEDITION CLASSIC\avgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRAMME\Steam\steam.exe C:\PROGRAMME\WINDOWS LIVE\MESSENGER\msnmsgr.exe C:\PROGRAMME\DNA\btdna.exe C:\PROGRAMME\FRITZ!DSL\StCenter.exe C:\PROGRAMME\Logitech\SetPoint\SetPoint.exe C:\PROGRAMME\OPENOFFICE.ORG 2.3\program\soffice.exe C:\PROGRAMME\OPENOFFICE.ORG 2.3\program\soffice.bin C:\PROGRAMME\GEMEINSAME DATEIEN\Logitech\KHALSHARED\KHALMNPR.exe C:\WINDOWS\system32\wuauclt.exe C:\PROGRAMME\WINDOWS LIVE\MESSENGER\usnsvc.exe C:\Programme\MOZILLA FIREFOX\firefox.exe C:\PROGRAMME\INTERNET EXPLORER\iexplore.exe C:\PROGRAMME\BILLP STUDIOS\WINPATROL\WINPATROL.EXE C:\PROGRAMME\BILLP STUDIOS\WINPATROL\WINPATROLEX.EXE C:\WINDOWS\system32\notepad.exe C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\WINDOWS LIVE\WLLOGINPROXY.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://runonce.msn.com/?v=msgrv75 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home O1 - Hosts: 127. O2 - BHO: - {02478D38-C3F9-4efb-9B51-7695ECA05670} - O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\Programme\ICQToolbar\toolbaru.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Outerinfo - {2E9D4C81-9F27-4c14-B804-7B0F6BC88A4F} - C:\Programme\Outerinfo\Outerinfo.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: - {7E853D72-626A-48EC-A868-BA8D5E23E045} - O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [Gainward]C:\WINDOWS\TBPanel.exe /A O4 - HKLM\..\Run: [NvCplDaemon]C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz]nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter]C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [RTHDCPL]RTHDCPL.EXE O4 - HKLM\..\Run: [Alcmtr]ALCMTR.EXE O4 - HKLM\..\Run: [SunJavaUpdateSched]C:\Programme\Java\jre1.6.0_03\bin\jusched.exe O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer]KHALMNPR.EXE O4 - HKLM\..\Run: [avgnt]C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe /min O4 - HKLM\..\Run: [QuickTime Task]C:\Programme\QuickTime\qttask.exe -atboottime O4 - HKLM\..\Run: [CAMP SHIM EXIT HECK]C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\That Face Camp Shim\platform coal.exe O4 - HKLM\..\Run: [WinPatrol]C:\Programme\BillP Studios\WinPatrol\winpatrol.exe -expressboot O4 - HKCU\..\Run: [CTFMON.EXE]C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Steam]c:\programme\steam\steam.exe -silent O4 - HKCU\..\Run: [MsnMsgr]C:\Programme\Windows Live\Messenger\MsnMsgr.Exe /background O4 - HKCU\..\Run: [OuterinfoUpdate]C:\Programme\Outerinfo\OuterinfoUpdate.exe O4 - HKCU\..\Run: [BitTorrent DNA]C:\Programme\DNA\btdna.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk=C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: FRITZ!DSL Startcenter.lnk=C:\Programme\FRITZ!DSL\StCenter.exe O4 - Global Startup: Logitech SetPoint.lnk=C:\Programme\Logitech\SetPoint\SetPoint.exe O4 - Global Startup: Adobe Gamma.lnk=C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: FRITZ!DSL Startcenter.lnk=C:\Programme\FRITZ!DSL\StCenter.exe O4 - Global Startup: OpenOffice.org 2.3.lnk=C:\Programme\OpenOffice.org 2.3\program\quickstart.exe O8 - Extra context menu item: &Windows Live Search - res://C:\Programme\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O8 - Extra context menu item: In neuer Registerkarte im Hintergrund öffnen - res://C:\Programme\Windows Live Toolbar\Components\de-de\msntabres.dll.mui/229?4976a117652446518f9e35ec51c48edc O8 - Extra context menu item: In neuer Registerkarte im Vordergrund öffnen - res://C:\Programme\Windows Live Toolbar\Components\de-de\msntabres.dll.mui/230?4976a117652446518f9e35ec51c48edc O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O11 - Options group: [Java (Sun)] Java (Sun) - C:\Programme\Java\jre1.6.0_03\bin O11 - Options group: [] - O14 - IERESET.INF: START_PAGE_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome O14 - IERESET.INF: SEARCH_PAGE_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch O14 - IERESET.INF:HKCU, Start Page = %START_PAGE_URL% O14 - IERESET.INF:HKLM, Default_Page_URL = %START_PAGE_URL% O14 - IERESET.INF:HKLM, Default_Search_URL = %SEARCH_PAGE_URL% O14 - IERESET.INF:HKLM, Search Page = %SEARCH_PAGE_URL% O14 - IERESET.INF:HKCU, Search Page = %SEARCH_PAGE_URL% O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.6.0_03) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} (Java Plug-in 1.6.0_02) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Plug-in 1.6.0_03) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 1.6.0_03) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab O21 - WPDShServiceObj - WPDShServiceObj Class - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Acronis Scheduler2 Service - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AntiVir PersonalEdition Classic Planer - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Anwendungsverwaltung - - C:\WINDOWS\System32\appmgmts.dll O23 - Service: AVM IGD CTRL Service - AVM Berlin - C:\Programme\FRITZ!DSL\IGDCTRL.EXE O23 - Service: AVM FRITZ!web Routing Service - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\De_serv.exe O23 - Service: Google Updater Service - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Eingabegerätezugang - - C:\WINDOWS\System32\hidserv.dll O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: StarWind iSCSI Service - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe O23 - Service: Acronis Try And Decide Service - - C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe O23 - Service: Ventrilo - - C:\Programme\VentSrv\ventrilo_svc.exe O24 - Desktop Component 0: Die derzeitige Homepage - About:Home --- Additional WinPatrol Info --- Default Browser: Firefox - Firefox version 2.0.0.14 MSIE: Internet Explorer (6.00.2900.2180) Firefox 2.0.0.14 installed in C:\Programme\Mozilla Firefox. 302 IE Cookies in Folder: C:\Dokumente und Einstellungen\Janis\Cookies\ 946 Mozilla Cookies in Folder: C:\Dokumente und Einstellungen\Janis\Anwendungsdaten\Mozilla\FireFox\Profiles\d3h47599.default WP00 - HKLM\CS1: BootExecute = autocheck autochk * WP00 - HKLM\CCS: BootExecute = autocheck autochk * WP00 - HKLM\CS2: BootExecute = autocheck autochk * WP02 - HKLM\CCS: Command = C:\WINDOWS\system32\cmd.exe WP03 - Windows Automatic Update = 4:Empfohlene Updates automatisch herunterladen und installieren. WP08 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix: Default = http:// WP08 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\URL\Prefixes: www = http:// WP31 - Scheduled Tasks: [Norton Security Scan.job]C:\Programme\Norton Security Scan\Nss.exe 05/16/2008 3:00 PM WP31 - Scheduled Tasks: [Auf Updates für Windows Live Toolbar prüfen.job]C:\Programme\Windows Live Toolbar\MSNTBUP.EXE 06/17/2008 11:33 PM WP31 - Scheduled Tasks: [AppleSoftwareUpdate.job]C:\Programme\Apple Software Update\SoftwareUpdate.exe 05/15/2008 3:15 PM WP31 - Scheduled Tasks: [AB13DB3091845110.job]c:\Dokumente und Einstellungen\Janis\Anwendungsdaten\help 64 deaf\Poke Wma Regs.exe 06/18/2008 12:00 AM WP16 - ActiveX: {2D360201-FFF5-11D1-8D03-00A0C959BC0A} [DHTML Edit Control Safe for Scripting for IE5] C:\PROGRAMME\GEMEINSAME DATEIEN\MICROSOFT SHARED\Triedit\dhtmled.ocx 6.01.9232 WP16 - ActiveX: {333C7BC4-460F-11D0-BC04-0080C7055A83} [Tabular Data Control] C:\WINDOWS\system32\tdc.ocx 1, 3, 0, 3130 WP16 - ActiveX: {55136805-B2DE-11D1-B9F2-00A0C98BC547} [Shell Name Space] C:\WINDOWS\system32\shdocvw.dll 6.00.2900.3354 WP16 - ActiveX: {6BF52A52-394A-11D3-B153-00C04F79FAA6} [Windows Media Player] C:\WINDOWS\system32\wmp.dll 11.0.5721.5230 WP16 - ActiveX: {8856F961-340A-11D0-A96B-00C04FD705A2} [Microsoft Webbrowser] C:\WINDOWS\system32\shdocvw.dll 6.00.2900.3354 WP16 - ActiveX: {B45FF030-4447-11D2-85DE-00C04FA35C89} [SearchAssistantOC] C:\WINDOWS\system32\shdocvw.dll 6.00.2900.3354 WP16 - ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} [Shockwave Flash Object] C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx 9,0,16,0 WP16 - ActiveX: {05589fa1-c356-11ce-bf01-00aa0055595a} [ActiveMovieControl Object] C:\WINDOWS\system32\wmpdxm.dll 11.0.5721.5145 WP16 - ActiveX: {1D2B4F40-1F10-11D1-9E88-00C04FDCAB92} [ThumbCtl Class] C:\WINDOWS\system32\webvw.dll 6.00.2900.2180 WP16 - ActiveX: {52a2aaae-085d-4187-97ea-8c30db990436} [HHCtrl Object] C:\WINDOWS\system32\hhctrl.ocx 5.2.3790.2847 WP16 - ActiveX: {8856F961-340A-11D0-A96B-00C04FD705A2} [Microsoft Webbrowser] C:\WINDOWS\system32\shdocvw.dll 6.00.2900.3354 WP16 - ActiveX: {AE24FDAE-03C6-11D1-8B76-0080C744F389} [Microsoft Scriptlet Component] C:\WINDOWS\system32\mshtml.dll 6.00.2900.3354 WP16 - ActiveX: {CA8A9780-280D-11CF-A24D-444553540000} [Adobe PDF Reader] C:\PROGRAMME\GEMEINSAME DATEIEN\Adobe\Acrobat\ActiveX\AcroPDF.dll WP16 - ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} [Shockwave Flash Object] C:\WINDOWS\system32\Macromed\Flash\Flash9.ocx 9,0,16,0 WP16 - ActiveX: {E5DF9D10-3B52-11D1-83E8-00A0C90DC849} [WebViewFolderIcon Class] C:\WINDOWS\system32\webvw.dll 6.00.2900.2180 WP32 - Hidden File: C:\boot.ini WP32 - Hidden File: C:\bootfont.bin WP32 - Hidden File: C:\IO.SYS WP32 - Hidden File: C:\MSDOS.SYS WP32 - Hidden File: C:\NTDETECT.COM WP32 - Hidden File: C:\ntldr WP32 - Hidden File: C:\pagefile.sys WP32 - Hidden File: C:\sqmdata00.sqm WP32 - Hidden File: C:\sqmdata01.sqm WP32 - Hidden File: C:\sqmdata02.sqm WP32 - Hidden File: C:\sqmdata03.sqm WP32 - Hidden File: C:\sqmdata04.sqm WP32 - Hidden File: C:\sqmdata05.sqm WP32 - Hidden File: C:\sqmdata06.sqm WP32 - Hidden File: C:\sqmdata07.sqm WP32 - Hidden File: C:\sqmdata08.sqm WP32 - Hidden File: C:\sqmdata09.sqm WP32 - Hidden File: C:\sqmdata10.sqm WP32 - Hidden File: C:\sqmdata11.sqm WP32 - Hidden File: C:\sqmnoopt00.sqm WP32 - Hidden File: C:\sqmnoopt01.sqm WP32 - Hidden File: C:\sqmnoopt02.sqm WP32 - Hidden File: C:\sqmnoopt03.sqm WP32 - Hidden File: C:\sqmnoopt04.sqm WP32 - Hidden File: C:\sqmnoopt05.sqm WP32 - Hidden File: C:\sqmnoopt06.sqm WP32 - Hidden File: C:\sqmnoopt07.sqm WP32 - Hidden File: C:\sqmnoopt08.sqm WP32 - Hidden File: C:\sqmnoopt09.sqm WP32 - Hidden File: C:\sqmnoopt10.sqm WP32 - Hidden File: C:\sqmnoopt11.sqm WP32 - Hidden File: C:\WINDOWS\QTFont.qfn WP32 - Hidden File: C:\WINDOWS\super.chm WP32 - Hidden File: C:\WINDOWS\WindowsShell.Manifest WP32 - Hidden File: C:\WINDOWS\winnt.bmp WP32 - Hidden File: C:\WINDOWS\winnt256.bmp WP32 - Hidden File: C:\WINDOWS\system32\AVSredirect.dll WP32 - Hidden File: C:\WINDOWS\system32\cdplayer.exe.manifest WP32 - Hidden File: C:\WINDOWS\system32\config\default.LOG WP32 - Hidden File: C:\WINDOWS\system32\config\SAM.LOG WP32 - Hidden File: C:\WINDOWS\system32\config\SECURITY.LOG WP33 - File Type .AVI: [Winamp media file]C:\Programme\Winamp\winamp.exe %1 WP33 - File Type .BAT: [Stapelverarbeitungsdatei für MS-DOS]%1 %* WP33 - File Type .CAB: [WinRAR-Archiv]C:\Programme\WinRAR\WinRAR.exe %1 WP33 - File Type .CAT: [Sicherheitskatalog]rundll32.exe cryptext.dll,CryptExtOpenCAT %1 WP33 - File Type .CHM: [Kompilierte HTML-Hilfedatei]C:\WINDOWS\hh.exe %1 WP33 - File Type .COM: [Anwendung für MS-DOS]%1 %* WP33 - File Type .CMD: [Befehlsskript von Windows NT]%1 %* WP33 - File Type .DOC: [Microsoft Word Dokument]C:\Programme\OpenOffice.org 2.3\program\soffice.exe -writer -o %1 WP33 - File Type .EML: [Outlook Express-E-Mail-Nachricht]C:\Programme\Outlook Express\msimn.exe /eml:%1 WP33 - File Type .EXE: [Anwendung]%1 %* WP33 - File Type .INF: [Setup-Informationen]C:\WINDOWS\System32\NOTEPAD.EXE %1 WP33 - File Type .JS: [JScript-Skriptdatei]C:\WINDOWS\System32\WScript.exe %1 %* WP33 - File Type .LOG: [Textdatei]C:\WINDOWS\system32\NOTEPAD.EXE %1 WP33 - File Type .MSI: [Windows Installer Package]C:\WINDOWS\System32\msiexec.exe /i %1 %* WP33 - File Type .MID: [Winamp media file]C:\Programme\Winamp\winamp.exe %1 WP33 - File Type .MP3: [Winamp media file]C:\Programme\Winamp\winamp.exe %1 WP33 - File Type .MP3: [AIMP2]C:\Programme\AIMP2\AIMP2.exe %1 WP33 - File Type .PIF: [Verknüpfung mit einer Anwendung für MS-DOS]%1 %* WP33 - File Type .REG: [Registrierungsdatei]regedit.exe %1 WP33 - File Type .RTF: [soffice.exe -writer -]C:\Programme\OpenOffice.org 2.3\program\soffice.exe -writer -o %1 WP33 - File Type .SCR: [Bildschirmschoner]%1 /S WP33 - File Type .TXT: [Textdatei]C:\WINDOWS\system32\NOTEPAD.EXE %1 WP33 - File Type .URL: [Internetverknüpfung]rundll32.exe shdocvw.dll,OpenURL %l WP33 - File Type .VBS: [VBScript-Skriptdatei]C:\WINDOWS\System32\WScript.exe %1 %* WP33 - File Type .VBE: [Codierte VBScript-Skriptdatei]C:\WINDOWS\System32\WScript.exe %1 %* WP33 - File Type .WSF: [Windows-Skriptdatei]C:\WINDOWS\System32\WScript.exe %1 %* WP33 - File Type .WSH: [Windows Script Host-Einstellungsdatei]C:\WINDOWS\System32\WScript.exe %1 %* WP33 - File Type .XLS: [Microsoft Excel Tabelle]C:\Programme\OpenOffice.org 2.3\program\soffice.exe -calc -o %1 Memory currently in use: 59% Physical Memory Free: 419,980 KB Paging File Free: 1,912,980 KB Virtual Memory Free: 2,050,556 KB -- End of file Danke schonmal im vorraus mfg Janis Storhas |
18.06.2008, 22:23 | #2 | ||
> MalwareDB | IE öffnet sich ständig Du hast Dir über Outerinfo
__________________Zitat:
Zitat:
__________________ |
Themen zu IE öffnet sich ständig |
antivir, avira, bho, browser, components, desktop, dsl, excel, firefox, gainward, google, helper, home, homepage, ie öffnet sich ständig, internet, internet explorer, logfile, mozilla, mozilla firefox, ms-dos, msiexec.exe, object, plug-in, problem, rundll, security, software, system, windows, windows xp, wma, wscript.exe |