| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Hilfe! Werde bei der Googlesuche auf andere Sites umgeleitet usw.Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
10.07.2009, 14:41
| #1 |
| |  Hilfe! Werde bei der Googlesuche auf andere Sites umgeleitet usw. Guten Tag! Habe nun seit 2-3 Tagen das Problem das ich bei der Googlesuche des öfteren umgeleitet werde auf irgendwelche Seiten wenn ich den Sucheintrag versuche zu öffnen und das im Hintergrund immer ein Internet Explorer Prozess läuft der sich von selbst neustartet. Hatte eine Digifast.exe die ich bereits beseitigt hatte und Hijacker findet nichts mehr anscheinend sowie Norton und Antivir auch nicht. Allerdings findet Antirootkit mehrere versteckte Einträge. Hoffe mir kann hier jemand helfen, denn ich möchte den PC ungern formatieren. Ich poste euch mal meine Hijacker Logfile sowie die von Avira AnitRootkit. |
|
10.07.2009, 14:42
| #2 |
| | Hilfe! Werde bei der Googlesuche auf andere Sites umgeleitet usw. Avira AntiRootkit Tool (1.1.0.1)
__________________======================================================================================================== - Scan started Freitag, 10. Juli 2009 - 15:32:35 ======================================================================================================== -------------------------------------------------------------------------------------------------------- Configuration: -------------------------------------------------------------------------------------------------------- - [X] Scan files - [X] Scan registry - [X] Scan processes - [ ] Fast scan - Working disk total size : 195.31 GB - Working disk free size : 137.35 GB (70 %) -------------------------------------------------------------------------------------------------------- Results: Hidden key : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\hjgruibumxehmn\main Hidden key : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\hjgruibumxehmn\modules Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\hjgruibumxehmn -> start Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\hjgruibumxehmn -> type Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\hjgruibumxehmn -> group Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\hjgruibumxehmn -> imagepath Hidden key : HKEY_LOCAL_MACHINE\System\ControlSet004\Services\hjgruibumxehmn\main Hidden key : HKEY_LOCAL_MACHINE\System\ControlSet004\Services\hjgruibumxehmn\modules Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet004\Services\hjgruibumxehmn -> start Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet004\Services\hjgruibumxehmn -> type Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet004\Services\hjgruibumxehmn -> group Hidden value : HKEY_LOCAL_MACHINE\System\ControlSet004\Services\hjgruibumxehmn -> imagepath Embedded nulls : HKEY_USERS\S-1-5-21-583907252-1292428093-725345543-500\Software\SecuROM\!CAUTION! NEVER DELETE OR CHANGE ANY KEY Embedded nulls : HKEY_USERS\S-1-5-21-583907252-1292428093-725345543-500\Software\SecuROM\License information Hidden value : HKEY_USERS\S-1-5-21-583907252-1292428093-725345543-500\Software\SecuROM\License information -> datasecu Hidden value : HKEY_USERS\S-1-5-21-583907252-1292428093-725345543-500\Software\SecuROM\License information -> rkeysecu -------------------------------------------------------------------------------------------------------- Files: 0/5026 Registry items: 16/516569 Processes: 0/61 Scan time: 00:01:03 -------------------------------------------------------------------------------------------------------- Active processes: - hdtcrjmr.exe (PID 3340) (Avira AntiRootkit Tool) - System (PID 4) - smss.exe (PID 1312) - csrss.exe (PID 1392) - winlogon.exe (PID 1424) - services.exe (PID 1472) - lsass.exe (PID 1484) - ati2evxx.exe (PID 1692) - svchost.exe (PID 1716) - svchost.exe (PID 1812) - svchost.exe (PID 2016) - svchost.exe (PID 216) - ati2evxx.exe (PID 240) - svchost.exe (PID 384) - svchost.exe (PID 572) - ccSvcHst.exe (PID 800) - explorer.exe (PID 844) - spoolsv.exe (PID 1364) - CTAudSvc.exe (PID 640) - sched.exe (PID 700) - svchost.exe (PID 992) - DLLML.exe (PID 308) - LGDCore.exe (PID 328) - KoneHID.EXE (PID 344) - LGDevAgt.exe (PID 376) - avgnt.exe (PID 428) - MOM.exe (PID 444) - CtHelper.exe (PID 452) - CTXFIHLP.EXE (PID 476) - GrooveMonitor.exe (PID 516) - BJMYPRT.EXE (PID 660) - CTXFISPI.EXE (PID 1060) - ctfmon.exe (PID 1796) - ccSvcHst.exe (PID 1864) - CurseClient.exe (PID 1896) - daemon.exe (PID 1908) - CTCMSGoU.exe (PID 1936) - MtdAcqu.exe (PID 1988) - NCLauncher.exe (PID 2092) - CCC.exe (PID 2100) - rundll32.exe (PID 2132) - avguard.exe (PID 2588) - dtsslsrv.exe (PID 2640) - AluSchedulerSvc.exe (PID 2788) - mDNSResponder.exe (PID 3408) - CTSVCCDA.EXE (PID 3556) - CTDevSrv.exe (PID 3748) - DTSRVC.exe (PID 4084) - PnkBstrA.exe (PID 1120) - OSD.exe (PID 2460) - PnkBstrB.exe (PID 2484) - svchost.exe (PID 1096) - TnglCtrl.exe (PID 2912) - VolPanlu.exe (PID 4496) - TeamSpeak.exe (PID 4664) - Steam.exe (PID 3732) - AAWService.exe (PID 4784) - AAWTray.exe (PID 5332) - qip.exe (PID 4320) - firefox.exe (PID 2948) - avirarkd.exe (PID 1972) ======================================================================================================== - Scan finished Freitag, 10. Juli 2009 - 15:33:38 ======================================================================================================== |
|
10.07.2009, 14:44
| #3 |
| | Hilfe! Werde bei der Googlesuche auf andere Sites umgeleitet usw. Hier die HiJacker LogFile:
__________________Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:43:48, on 10.07.2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Programme\Creative\Shared Files\CTAudSvc.exe C:\Programme\Avira\AntiVir Desktop\sched.exe C:\Programme\Creative\Shared Files\Module Loader\DLLML.exe C:\Programme\Logitech\GamePanel Software\G-series Software\LGDCore.exe C:\Programme\ROCCAT\Kone Mouse\KoneHID.EXE C:\Programme\Logitech\GamePanel Software\LgDevAgt.exe C:\Programme\Avira\AntiVir Desktop\avgnt.exe C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\WINDOWS\system32\CTHELPER.EXE C:\WINDOWS\system32\CTXFIHLP.EXE C:\Programme\Microsoft Office\Office12\GrooveMonitor.exe C:\Programme\Canon\MyPrinter\BJMyPrt.exe C:\WINDOWS\SYSTEM32\CTXFISPI.EXE C:\WINDOWS\system32\ctfmon.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe C:\Programme\Curse\CurseClient.exe C:\Programme\DAEMON Tools Lite\daemon.exe C:\Programme\Creative\MediaSource5\Go\CTCMSGoU.exe C:\PROGRA~1\Creative\MEDIAS~1\MtdAcqu.exe C:\Programme\NCSoft\Launcher\NCLauncher.exe C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe C:\WINDOWS\system32\rundll32.exe C:\Programme\Avira\AntiVir Desktop\avguard.exe C:\Programme\Gemeinsame Dateien\Portrait Displays\Plugins\AM\dtsslsrv.exe C:\Programme\Symantec\LiveUpdate\AluSchedulerSvc.exe C:\Programme\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\Programme\Creative\Shared Files\CTDevSrv.exe C:\Programme\Gemeinsame Dateien\Portrait Displays\Shared\dtsrvc.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Programme\ROCCAT\Kone Mouse\osd.exe C:\WINDOWS\system32\PnkBstrB.exe C:\WINDOWS\system32\svchost.exe D:\Programme\Tunngle\TnglCtrl.exe C:\Programme\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe D:\Programme\Teamspeak2_RC2\TeamSpeak.exe D:\Programme\Valve\Steam\Steam.exe C:\Programme\jeak.de\QIP 2005\qip.exe C:\Programme\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\msiexec.exe C:\Programme\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: MessengerUpdate - {5948A52A-BA3A-49A8-BCAF-D578502BDA9D} - C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Messenger\Drivers\MsgUpdate.dll O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\GEMEIN~1\SYMANT~1\IDS\IPSBHO.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: MJCore - {D88E1558-7C2D-407A-953A-C044F5607CEA} - C:\Programme\Jcore\Jcore2.dll O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Programme\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Programme\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll" O4 - HKLM\..\Run: [VolPanel] "C:\Programme\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r O4 - HKLM\..\Run: [Launch LGDCore] "C:\Programme\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE O4 - HKLM\..\Run: [Kone] "C:\Programme\ROCCAT\Kone Mouse\KoneHID.EXE" O4 - HKLM\..\Run: [Launch LgDevAgt] "C:\Programme\Logitech\GamePanel Software\LgDevAgt.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [GrooveMonitor] "C:\Programme\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Programme\Canon\SolutionMenu\CNSLMAIN.exe /logon O4 - HKLM\..\Run: [CanonMyPrinter] C:\Programme\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [osCheck] "C:\Programme\Norton AntiVirus\osCheck.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [CurseClient] C:\Programme\Curse\CurseClient.exe -silent O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Programme\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [Creative MediaSource Go] "C:\Programme\Creative\MediaSource5\Go\CTCMSGoU.exe" /SCB O4 - HKCU\..\Run: [MtdAcqu] "C:\PROGRA~1\Creative\MEDIAS~1\MtdAcqu.exe" /s O4 - HKCU\..\Run: [NCsoft Launcher] C:\Programme\NCSoft\Launcher\NCLauncher.exe /Minimized O4 - HKCU\..\Run: [pridl] "C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\pridl\pridl.exe" 61A847B5BBF72811228849360B8D1BE1C59331416DC57C032CBD1BE3D290641833 O4 - HKCU\..\Run: [IgfxSys] rundll32.exe "C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Messenger\Drivers\IgfxSys.dll",StartProtector O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/german/partner/de/kavwebscan_unicode.cab O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v4.cab O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15108/CTPID.cab O18 - Protocol: bw+0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: offline-8876480 - {005DA386-2696-4FFA-81EA-27A238D720DE} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe O23 - Service: Asset Management Daemon - Unknown owner - C:\Programme\Gemeinsame Dateien\Portrait Displays\Plugins\AM\dtsslsrv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Programme\Symantec\LiveUpdate\AluSchedulerSvc.exe O23 - Service: Automatisches LiveUpdate - Scheduler - Symantec Corporation - C:\Programme\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Programme\Bonjour\mDNSResponder.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Programme\Gemeinsame Dateien\Creative Labs Shared\Service\CTAELicensing.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Programme\Creative\Shared Files\CTAudSvc.exe O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Programme\Creative\Shared Files\CTDevSrv.exe O23 - Service: Creative Centrale Media Server (CTUPnPSv) - Creative Technology Ltd - C:\Programme\Creative\Creative Centrale\CTUPnPSv.exe O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Programme\Gemeinsame Dateien\Portrait Displays\Shared\dtsrvc.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\Programme\Symantec\LiveUpdate\LuComServer_3_4.EXE O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSvcHst.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing) O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\GEMEIN~1\SYMANT~1\CCPD-LC\symlcsvc.exe O23 - Service: TunngleService - Tunngle.net GmbH - D:\Programme\Tunngle\TnglCtrl.exe -- End of file - 23019 bytes |
|
| Themen zu Hilfe! Werde bei der Googlesuche auf andere Sites umgeleitet usw. |
| andere, antivir, avira, beseitigt, explorer, guten, hijacker, hilfe!, hintergrund, interne, internet, internet explorer, logfile, nichts, norton, problem, prozess, seite, seiten, sites, umgeleitet, versteckte, versuche, von selbst, öffnen |
Linear-Darstellung
