Bitte Logfile auswertug! Virus oder Trojaner??!

kaltron

2. Teil info.txt

=====HijackThis Backups=====

O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103472 -"Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.9.1.2) Gecko/20090729 Firefox/3.0.8 (de) (TL-FF) (.NET CLR 3.5.30729)" -"h**p://cc.porsche.com/icc_euro/ui/pva/application/bpModules/interior_3D.jsp?pluginsInstalled=true&RT=1252360144786" [2009-09-23]

======Hosts File======

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com

======System event log======

Computer Name: CRIZ
Event Code: 4201
Message: Netzwerkadapter "Sweex WiFi LAN 140 Nitro XM - Paketplaner-Miniport" wurde mit dem Netzwerk verbunden, und das
System wurde über das Netzwerk im normalen Zustand gestartet.

Record Number: 31662
Source Name: Tcpip
Time Written: 20090922104001.000000+120
Event Type: Informationen
User:

Computer Name: CRIZ
Event Code: 4226
Message: TCP/IP hat das Sicherheitslimit erreicht, das für die Anzahl gleichzeitiger TCP-Verbindungsversuche festgelegt wurde.

Record Number: 31661
Source Name: Tcpip
Time Written: 20090922103643.000000+120
Event Type: Warnung
User:

Computer Name: CRIZ
Event Code: 26
Message: Anwendungspopup: firefox.exe - Einsprungpunkt nicht gefunden: Der Prozedureinsprungpunkt "IsThreadDesktopComposited" wurde in der DLL "USER32.dll" nicht gefunden.

Record Number: 31660
Source Name: Application Popup
Time Written: 20090922103347.000000+120
Event Type: Informationen
User:

Computer Name: CRIZ
Event Code: 4201
Message: Netzwerkadapter "Sweex WiFi LAN 140 Nitro XM - Paketplaner-Miniport" wurde mit dem Netzwerk verbunden, und das
System wurde über das Netzwerk im normalen Zustand gestartet.

Record Number: 31659
Source Name: Tcpip
Time Written: 20090922103236.000000+120
Event Type: Informationen
User:

Computer Name: CRIZ
Event Code: 7036
Message: Dienst "WMI-Leistungsadapter" befindet sich jetzt im Status "Beendet".

Record Number: 31658
Source Name: Service Control Manager
Time Written: 20090922102940.000000+120
Event Type: Informationen
User:

=====Application event log=====

Computer Name: CRIZ
Event Code: 3
Message: AssetServicesCS3: class vcfoundation::base::VCIllegalState: IVCPipeServer already closed
Trace: (null)

Record Number: 13031
Source Name: Adobe Version Cue CS3
Time Written: 20090812125747.000000+120
Event Type: Fehler
User:

Computer Name: CRIZ
Event Code: 3
Message: AssetServicesCS3: class vcfoundation::base::VCIllegalState: IVCPipeServer already closed
Trace: (null)

Record Number: 13030
Source Name: Adobe Version Cue CS3
Time Written: 20090812125747.000000+120
Event Type: Fehler
User:

Computer Name: CRIZ
Event Code: 3
Message: AssetServicesCS3: class vcfoundation::base::VCIllegalState: IVCPipeServer already closed
Trace: (null)

Record Number: 13029
Source Name: Adobe Version Cue CS3
Time Written: 20090812125747.000000+120
Event Type: Fehler
User:

Computer Name: CRIZ
Event Code: 3
Message: AssetServicesCS3: class vcfoundation::base::VCIllegalState: IVCPipeServer already closed
Trace: (null)

Record Number: 13028
Source Name: Adobe Version Cue CS3
Time Written: 20090812125747.000000+120
Event Type: Fehler
User:

Computer Name: CRIZ
Event Code: 3
Message: AssetServicesCS3: class vcfoundation::base::VCIllegalState: IVCPipeServer already closed
Trace: (null)

Record Number: 13027
Source Name: Adobe Version Cue CS3
Time Written: 20090812125747.000000+120
Event Type: Fehler
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Programme\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Programme\Gemeinsame Dateien\DivX Shared\;C:\Programme\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 6 Stepping 4, GenuineIntel
"PROCESSOR_REVISION"=0604
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Programme\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Programme\Java\jre6\lib\ext\QTJava.zip

-----------------EOF-----------------