HiJackThis Log File - Hilfe

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:05:47, on 17.08.2009
Platform: Windows 2003 SP2 (WinNT 5.02.3790)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllcache\System.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Adaptec\SMBE\afaagent.exe
C:\PROGRA~1\APC\POWERC~1\agent\pbeagent.exe
C:\PROGRA~1\APC\POWERC~1\server\PBESER~1.EXE
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Servers\avp.exe
C:\WINDOWS\System32\dns.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Programme\Adaptec\SMBE\iomgr.exe
C:\Programme\McAfee\VirusScan Enterprise\EngineServer.exe
C:\Programme\McAfee\Common Framework\FrameworkService.exe
C:\Programme\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\WINDOWS\system32\mfevtps.exe
C:\Programme\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
C:\mysql\bin\mysqld-nt.exe
C:\WINDOWS\System32\snmp.exe
c:\spam\srvany.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Server Extensions\60\BIN\OWSTIMER.EXE
c:\spam\spamd.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\UPHClean\uphclean.exe
C:\Programme\Bitvise WinSSHD\WinSSHD.exe
C:\Admin\WMonitor\wmonsvc.exe
C:\Xmail\XMail.exe
C:\Programme\XQM Agent\xqmagentwin.exe
C:\Programme\Adaptec\SMBE\arcpd.exe
C:\Programme\Adaptec\SMBE\notify.exe
C:\Programme\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Programme\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\aacevt.exe
C:\WINDOWS\system32\winlogon.exe
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Servers\avp.exe
C:\WINDOWS\system32\rdpclip.exe
C:\WINDOWS\Explorer.EXE
c:\windows\system32\inetsrv\w3wp.exe
C:\Programme\McAfee\VirusScan Enterprise\SHSTAT.EXE
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Servers\avp.exe
C:\Programme\Bitvise WinSSHD\sshdctrl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Programme\MySQL\MySQL Administrator 1.0\MySQLSystemTrayMonitor.exe
C:\Dokumente und Einstellungen\Administrator\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = res://iesetup.dll/hardAdmin.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://iesetup.dll/hardAdmin.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Programme\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [ShStatEXE] "C:\Programme\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [WinSSHD Activation State Checker] "C:\Programme\Bitvise WinSSHD\WinsshdActStateCheck.exe"
O4 - HKLM\..\Run: [AVP] "C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Servers\avp.exe"
O4 - HKCU\..\Run: [Persistent WinSSHD Control Panel] "C:\Programme\Bitvise WinSSHD\sshdctrl.exe" -startMinimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Startup: Bginfo.lnk = C:\Admin\Bginfo.exe
O4 - Startup: MySQL System Tray Monitor.lnk = C:\Programme\MySQL\MySQL Administrator 1.0\MySQLSystemTrayMonitor.exe
O4 - Global Startup: Dienst-Manager.lnk = C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O15 - ESC Trusted Zone: http://dl.bitvise.com
O15 - ESC Trusted Zone: http://www.bitvise.com
O15 - ESC Trusted Zone: http://dl.cdn.chip.de
O15 - ESC Trusted Zone: http://*.easylearn.ch
O15 - ESC Trusted Zone: http://www.google-analytics.com
O15 - ESC Trusted Zone: http://*.google.ch
O15 - ESC Trusted Zone: http://*.ieaddons.com
O15 - ESC Trusted Zone: http://www.liutilities.com
O15 - ESC Trusted Zone: http://ads1.msn.com
O15 - ESC Trusted Zone: http://runonce.msn.com
O15 - ESC Trusted Zone: http://*.sdnag.com
O15 - ESC Trusted Zone: http://surfnet.dl.sourceforge.net
O15 - ESC Trusted Zone: http://download.sysinternals.com
O15 - ESC Trusted Zone: http://*.trendmicro.com
O15 - ESC Trusted Zone: http://www.trendsecure.com
O15 - ESC Trusted Zone: http://www.trojaner-board.de
O15 - ESC Trusted Zone: http://statse.webtrendslive.com
O15 - ESC Trusted Zone: http://*.windowsupdate.com
O15 - ESC Trusted Zone: http://runonce.msn.com (HKLM)
O15 - ESC Trusted Zone: http://*.windowsupdate.com (HKLM)
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1182403677109
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = sdnag.com
O17 - HKLM\Software\..\Telephony: DomainName = sdnag.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{016A8795-742D-4858-AEA6-DA544039919B}: NameServer = 192.168.xx.xx,192.168.xx.xx
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = sdnag.com
O17 - HKLM\System\CS1\Services\Tcpip\..\{016A8795-742D-4858-AEA6-DA544039919B}: NameServer = 192.168.xx.xx,192.168.xx.xx
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = sdnag.com
O17 - HKLM\System\CS2\Services\Tcpip\..\{016A8795-742D-4858-AEA6-DA544039919B}: NameServer = 192.168.xx.xx,192.168.xx.x
O23 - Service: Adaptec RAID Event Logging Service (aacevt) - Adaptec, Inc. - C:\WINDOWS\system32\aacevt.exe
O23 - Service: Adaptec RAID Remote Services Agent (AAC_AGENT) - Adaptec, Inc. - C:\Programme\Adaptec\SMBE\afaagent.exe
O23 - Service: APC PBE Agent (APCPBEAgent) - APC - C:\PROGRA~1\APC\POWERC~1\agent\pbeagent.exe
O23 - Service: APC PBE Server (APCPBEServer) - APC - C:\PROGRA~1\APC\POWERC~1\server\PBESER~1.EXE
O23 - Service: Adaptec Web-Server (ARCPD) - Unknown owner - C:\Programme\Adaptec\SMBE\arcpd.exe
O23 - Service: Adaptec Storage Manager Notifier (ASMBENotify) - Unknown owner - C:\Programme\Adaptec\SMBE\notify.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Servers\avp.exe
O23 - Service: SPSS Data Entry Web Server (DEWS_AppServer) - Unknown owner - C:\Programme\DEWS\serviceutil.exe
O23 - Service: Adaptec I/O Manager Server  (IOManager) - Unknown owner - C:\Programme\Adaptec\SMBE\iomgr.exe
O23 - Service: McAfee Engine Service (McAfeeEngineService) - McAfee, Inc. - C:\Programme\McAfee\VirusScan Enterprise\EngineServer.exe
O23 - Service: McAfee Framework-Dienst (McAfeeFramework) - McAfee, Inc. - C:\Programme\McAfee\Common Framework\FrameworkService.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Programme\McAfee\VirusScan Enterprise\Mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Programme\McAfee\VirusScan Enterprise\VsTskMgr.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\WINDOWS\system32\mfevtps.exe
O23 - Service: MySql - Unknown owner - C:/mysql/bin/mysqld-nt.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - c:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: SpamAssassinDaemon - Unknown owner - c:\spam\srvany.exe
O23 - Service: SPSS Data Entry Network Server - SPSS Inc. - C:\Programme\DENS/entsrvc.exe
O23 - Service: WinSSHD - Bitvise - C:\Programme\Bitvise WinSSHD\WinSSHD.exe
O23 - Service: Windows Monitor Service (wmonitorservice) - Martin Wey - C:\Admin\WMonitor\wmonsvc.exe
O23 - Service: XMail Service (XMail) - Unknown owner - C:\Xmail\XMail.exe
O23 - Service: XQM Agent (XQM_AGENT) - Unknown owner - C:\Programme\XQM Agent\xqmagentwin.exe

--
End of file - 9268 bytes