|
Log-Analyse und Auswertung: Seitenladefehler in firefox und IE8Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
21.10.2009, 09:03 | #16 |
/// Selecta Jahrusso | Seitenladefehler in firefox und IE8 Hm, Malware scheint es keine zu sein. schritt 1 Grundreinigung mit SUPERAntiSpyware
schritt 2 Bitte verwende den CCleaner wie in der Anleitung beschrieben. Schritt 3 Kaspersky - Onlinescanner Dieser Scanner entfernt die Funde nicht, gibt aber einen guten Überblick über die vorhandene Malware. ---> hier herunterladen => Kaspersky Online Scanner => Hinweise zu älteren Versionen beachten! => Voraussetzung: Internet Explorer 6.0 oder höher => die nötigen ActiveX-Steuerelemente installieren => Update der Signaturen => Weiter => Scan-Einstellungen => Standard wählen => OK => Link "Arbeitsplatz" anklicken => Scan beginnt automatisch => Untersuchung wurde abgeschlossen => Protokoll speichern als => Dateityp auf .txt umstellen => auf dem Desktop als Kaspersky.txt speichern => Log hier posten => Deinstallation => Systemsteuerung => Software => Kaspersky Online Scanner entfernen schritt 4 Schliesse bitte alle laufenden Programme inkl Browser. Lösche bitte die Extra.txt von Deinem Desktop. Doppelklick auf die OTL.exe und poste beide Logfiles.
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
21.10.2009, 11:18 | #17 |
| Seitenladefehler in firefox und IE8 ok, hier erst mal der SUPERAntiSpyware scan (ccleaner lief auch schon)
__________________Code:
ATTFilter SUPERAntiSpyware Scan Log http://www.superantispyware.com Generated 10/21/2009 at 11:55 AM Application Version : 4.29.1004 Core Rules Database Version : 4162 Trace Rules Database Version: 1978 Scan type : Complete Scan Total Scan Time : 00:40:19 Memory items scanned : 562 Memory threats detected : 0 Registry items scanned : 4582 Registry threats detected : 0 File items scanned : 18034 File threats detected : 3 Adware.Tracking Cookie C:\Dokumente und Einstellungen\Sonja\Cookies\sonja@doubleclick[1].txt C:\Dokumente und Einstellungen\Sonja\Cookies\sonja@atwola[1].txt C:\Dokumente und Einstellungen\Sonja\Cookies\sonja@ar.atwola[1].txt |
21.10.2009, 11:29 | #18 |
| Seitenladefehler in firefox und IE8 der kapersky online scanner ist gerade nicht verfügbar, heißt es auf der seite
__________________hier das neue otl log teil 1 Code:
ATTFilter OTL logfile created on: 21.10.2009 12:21:57 - Run 3 OTL by OldTimer - Version 3.0.21.0 Folder = C:\Dokumente und Einstellungen\Sonja\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 511,36 Mb Total Physical Memory | 220,85 Mb Available Physical Memory | 43,19% Memory free 1,22 Gb Paging File | 0,87 Gb Available in Paging File | 71,49% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 55,88 Gb Total Space | 26,79 Gb Free Space | 47,95% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: SONJAS-LAPTOP Current User Name: Sonja Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\Sonja\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe (Analog Devices, Inc.) PRC - C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe (Avira GmbH) PRC - C:\Programme\Bonjour\mDNSResponder.exe (Apple Computer, Inc.) PRC - C:\Programme\Canon\CAL\CALMAIN.exe (Canon Inc.) PRC - C:\Programme\iPod\bin\iPodService.exe (Apple Computer, Inc.) PRC - C:\Programme\iTunes\iTunesHelper.exe (Apple Computer, Inc.) PRC - C:\Programme\Java\jre1.6.0_07\bin\jucheck.exe (Sun Microsystems, Inc.) PRC - C:\Programme\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.) PRC - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation) PRC - C:\Programme\OpenOffice.org 3\program\soffice.bin (OpenOffice.org) PRC - C:\Programme\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) PRC - C:\Programme\QuickTime\QTTask.exe (Apple Inc.) PRC - C:\Programme\Skype\Phone\Skype.exe (Skype Technologies S.A.) PRC - C:\Programme\Skype\Plugin Manager\skypePM.exe (Skype Technologies) PRC - C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) PRC - C:\Programme\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.) PRC - C:\Programme\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.) PRC - C:\WINDOWS\AGRSMMSG.exe (Agere Systems) PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation) PRC - C:\WINDOWS\System32\Ati2evxx.exe () PRC - C:\WINDOWS\System32\gearsec.exe (GEAR Software) ========== Win32 Services (SafeList) ========== SRV - (AntiVirScheduler [Auto | Running]) -- C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe (Avira GmbH) SRV - (AntiVirService [Auto | Running]) -- C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe (Avira GmbH) SRV - (aspnet_state [On_Demand | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (Microsoft Corporation) SRV - (Ati HotKey Poller [Auto | Running]) -- C:\WINDOWS\System32\Ati2evxx.exe () SRV - (Bonjour Service [Auto | Running]) -- C:\Programme\Bonjour\mDNSResponder.exe (Apple Computer, Inc.) SRV - (CCALib8 [Auto | Running]) -- C:\Programme\Canon\CAL\CALMAIN.exe (Canon Inc.) SRV - (clr_optimization_v2.0.50727_32 [On_Demand | Stopped]) -- C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (FLEXnet Licensing Service [On_Demand | Stopped]) -- C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.) SRV - (FontCache3.0.0.0 [On_Demand | Stopped]) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) SRV - (GEARSecurity [Auto | Running]) -- C:\WINDOWS\System32\gearsec.exe (GEAR Software) SRV - (helpsvc [Auto | Running]) -- C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll (Microsoft Corporation) SRV - (idsvc [Unknown | Stopped]) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (Microsoft Corporation) SRV - (iPodService [On_Demand | Running]) -- C:\Programme\iPod\bin\iPodService.exe (Apple Computer, Inc.) SRV - (Irmon [Auto | Running]) -- C:\WINDOWS\System32\irmon.dll (Microsoft Corporation) SRV - (NetTcpPortSharing [Disabled | Stopped]) -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation) SRV - (SoundMAX Agent Service (default) [Auto | Running]) -- C:\Programme\Analog Devices\SoundMAX\SMAgent.exe (Analog Devices, Inc.) ========== Driver Services (SafeList) ========== DRV - (aeaudio [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\aeaudio.sys (Andrea Electronics Corporation) DRV - (AgereSoftModem [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\AGRSM.sys (Agere Systems) DRV - (ati2mtag [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ati2mtag.sys (ATI Technologies Inc.) DRV - (avgio [System | Running]) -- C:\Programme\Avira\AntiVir PersonalEdition Classic\avgio.sys (Avira GmbH) DRV - (avgntflt [On_Demand | Running]) -- C:\Programme\Avira\AntiVir PersonalEdition Classic\avgntflt.sys (Avira GmbH) DRV - (avipbb [System | Running]) -- C:\WINDOWS\System32\DRIVERS\avipbb.sys (Avira GmbH) DRV - (GEARAspiWDM [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\GEARAspiWDM.sys (GEAR Software) DRV - (gv3 [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\gv3.sys (Microsoft Corporation) DRV - (pavboot [Boot | Running]) -- C:\WINDOWS\system32\drivers\pavboot.sys (Panda Security, S.L.) DRV - (Ptilink [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\ptilink.sys (Parallel Technologies, Inc.) DRV - (PxHelp20 [Boot | Running]) -- C:\WINDOWS\System32\DRIVERS\PxHelp20.sys (Sonic Solutions) DRV - (rtl8139 [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\R8139n51.SYS (Realtek Semiconductor Corporation ) DRV - (SASDIFSV [System | Running]) -- C:\Programme\SUPERAntiSpyware\SASDIFSV.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV - (SASENUM [On_Demand | Running]) -- C:\Programme\SUPERAntiSpyware\SASENUM.SYS ( SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV - (SASKUTIL [System | Running]) -- C:\Programme\SUPERAntiSpyware\SASKUTIL.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com) DRV - (Secdrv [On_Demand | Stopped]) -- C:\WINDOWS\System32\DRIVERS\secdrv.sys (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) DRV - (SMCIRDA [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\smcirda.sys (SMC) DRV - (smwdm [On_Demand | Running]) -- C:\WINDOWS\System32\drivers\smwdm.sys (Analog Devices, Inc.) DRV - (ssmdrv [System | Running]) -- C:\WINDOWS\System32\DRIVERS\ssmdrv.sys (AVIRA GmbH) DRV - (SynTP [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\SynTP.sys (Synaptics, Inc.) DRV - (usbaudio [On_Demand | Stopped]) -- C:\WINDOWS\System32\drivers\usbaudio.sys (Microsoft Corporation) DRV - (w22n51 [On_Demand | Running]) -- C:\WINDOWS\System32\DRIVERS\w22n51.sys (Intel® Corporation) DRV - (WBSD [On_Demand | Running]) -- C:\WINDOWS\System32\Drivers\WBSD.SYS (Winbond Electronics Corp.) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\system32\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.de IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local |
21.10.2009, 11:30 | #19 |
| Seitenladefehler in firefox und IE8 ... und teil 2 Code:
ATTFilter ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "http://www.google.de/" FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07 FF - prefs.js..extensions.enabledItems: {20a82645-c095-46ed-80e3-08825760534b}:1.1 FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.071303000004 FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102 FF - prefs.js..extensions.enabledItems: {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.0.14 FF - HKLM\software\mozilla\Firefox\Extensions\\{20a82645-c095-46ed-80e3-08825760534b}: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [2009.09.02 09:27:05 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Components: C:\Programme\Mozilla Firefox\components [2009.10.15 11:27:25 | 00,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.0.14\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2009.09.11 10:28:41 | 00,000,000 | ---D | M] [2008.10.30 19:54:15 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Sonja\Anwendungsdaten\mozilla\Extensions [2008.10.30 19:54:15 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Sonja\Anwendungsdaten\mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} [2009.10.21 10:51:54 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Sonja\Anwendungsdaten\mozilla\Firefox\Profiles\db66ovdh.default\extensions [2009.09.02 10:21:01 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Sonja\Anwendungsdaten\mozilla\Firefox\Profiles\db66ovdh.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2009.05.11 21:19:12 | 00,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Sonja\Anwendungsdaten\mozilla\Firefox\Profiles\db66ovdh.default\extensions\moveplayer@movenetworks.com [2009.10.21 12:15:35 | 00,000,000 | ---D | M] -- C:\Programme\mozilla firefox\extensions [2009.09.11 10:28:41 | 00,000,000 | ---D | M] -- C:\Programme\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [2008.10.31 00:57:23 | 00,000,000 | ---D | M] -- C:\Programme\mozilla firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED} [2008.11.06 12:23:46 | 00,000,000 | ---D | M] -- C:\Programme\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [2009.09.11 10:28:31 | 00,023,032 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browserdirprovider.dll [2009.09.11 10:28:31 | 00,134,648 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\brwsrcmp.dll [2008.06.19 11:16:24 | 00,118,784 | ---- | M] (CANON INC.) -- C:\Programme\mozilla firefox\plugins\MyCamera.dll [2008.06.19 11:16:24 | 00,053,248 | ---- | M] (CANON INC.) -- C:\Programme\mozilla firefox\plugins\NPCIG.dll [2008.11.06 18:33:48 | 01,332,224 | ---- | M] (DivX,Inc.) -- C:\Programme\mozilla firefox\plugins\npdivx32.dll [2008.12.11 02:33:34 | 00,098,304 | ---- | M] (DivX, Inc) -- C:\Programme\mozilla firefox\plugins\npDivxPlayerPlugin.dll [2009.09.11 10:28:33 | 00,065,528 | ---- | M] (mozilla.org) -- C:\Programme\mozilla firefox\plugins\npnul32.dll [2008.10.31 12:07:46 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Programme\mozilla firefox\plugins\npqtplugin.dll [2008.10.31 12:07:46 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Programme\mozilla firefox\plugins\npqtplugin2.dll [2008.10.31 12:07:46 | 00,143,360 | ---- | M] (Apple Inc.) -- C:\Programme\mozilla firefox\plugins\npqtplugin3.dll [2009.07.24 15:38:16 | 00,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml [2009.07.24 15:38:16 | 00,002,344 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml [2009.07.24 15:38:16 | 00,001,706 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\google.xml [2009.07.24 15:38:17 | 00,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml [2009.07.24 15:38:17 | 00,000,986 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml [2009.07.24 15:38:17 | 00,000,801 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: (820 bytes) - C:\WINDOWS\System32\drivers\etc\Hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll (Sun Microsystems, Inc.) O4 - HKLM..\Run: [AGRSMMSG] C:\WINDOWS\AGRSMMSG.exe (Agere Systems) O4 - HKLM..\Run: [ATIModeChange] C:\WINDOWS\System32\Ati2mdxx.exe (ATI Technologies, Inc.) O4 - HKLM..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe (ATI Technologies, Inc.) O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [Cpqset] C:\Programme\HPQ\Default Settings\cpqset.exe () O4 - HKLM..\Run: [iTunesHelper] C:\Programme\iTunes\iTunesHelper.exe (Apple Computer, Inc.) O4 - HKLM..\Run: [KernelFaultCheck] File not found O4 - HKLM..\Run: [QuickTime Task] C:\Programme\QuickTime\QTTask.exe (Apple Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.6.0_07\bin\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe (Synaptics, Inc.) O4 - HKLM..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe (Synaptics, Inc.) O4 - HKLM..\Run: [UpdateManager] C:\Programme\Gemeinsame Dateien\Sonic\Update Manager\sgtray.exe (Sonic Solutions) O4 - HKCU..\Run: [MSMSGS] C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation) O4 - HKCU..\Run: [RecordNow!] File not found O4 - HKCU..\Run: [Skype] C:\Programme\Skype\Phone\Skype.exe (Skype Technologies S.A.) O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com) O4 - Startup: C:\Dokumente und Einstellungen\Sonja\Startmenü\Programme\Autostart\OpenOffice.org 3.0.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.) O9 - Extra 'Tools' menuitem : @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe (Microsoft Corporation) O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone. O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} http://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab (Java Plug-in 1.4.2_03) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\ipp - No CLSID value found O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp - No CLSID value found O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\!SASWinLogon: DllName - C:\Programme\SUPERAntiSpyware\SASWINLO.dll - C:\Programme\SUPERAntiSpyware\SASWINLO.dll (SUPERAntiSpyware.com) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Programme\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008.10.23 17:01:50 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{ecf92dd0-a5ca-11dd-bee8-000e3546d6a5}\Shell\AutoRun\command - "" = RESTORE\S-1-5-21-1482476501-1644491937-682003330-1013\SYS32.exe O33 - MountPoints2\{ecf92dd0-a5ca-11dd-bee8-000e3546d6a5}\Shell\open\command - "" = RESTORE\S-1-5-21-1482476501-1644491937-682003330-1013\SYS32.exe O34 - HKLM BootExecute: (autocheck) - File not found O34 - HKLM BootExecute: (autochk) - C:\WINDOWS\System32\autochk.exe (Microsoft Corporation) O34 - HKLM BootExecute: (*) - File not found O35 - comfile [open] -- "%1" %* File not found O35 - exefile [open] -- "%1" %* File not found ========== Files/Folders - Created Within 30 Days ========== [5 C:\WINDOWS\*.tmp files] [2009.10.21 11:10:19 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com [2009.10.21 11:09:45 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Sonja\Anwendungsdaten\SUPERAntiSpyware.com [2009.10.06 11:56:34 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Sonja\Lokale Einstellungen\Anwendungsdaten\CANON_INC [2009.10.16 10:45:37 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Sonja\Lokale Einstellungen\Anwendungsdaten\PCHealth [2009.10.21 11:09:02 | 00,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard [2009.10.20 01:30:28 | 00,000,000 | ---D | C] -- C:\Programme\CCleaner [2009.10.21 11:09:45 | 00,000,000 | ---D | C] -- C:\Programme\SUPERAntiSpyware [2009.10.20 21:35:56 | 00,000,000 | ---D | C] -- C:\Programme\VS Revo Group [2009.10.20 21:51:39 | 00,521,216 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Sonja\Desktop\OTL.exe [2009.10.20 02:13:19 | 00,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ctfmon.exe.backup [2009.10.19 12:17:36 | 00,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\xpshims.dll [2009.10.19 12:17:35 | 00,594,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll [2009.10.19 12:17:35 | 00,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll [2009.10.19 12:17:34 | 01,985,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll [2009.10.19 12:17:34 | 00,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieproxy.dll [2009.10.19 12:17:32 | 11,069,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll [2009.10.19 12:17:21 | 00,000,000 | ---D | C] -- C:\WINDOWS\ie8updates [2009.10.19 12:15:27 | 00,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iecompat.dll [2009.10.19 12:14:29 | 00,000,000 | ---D | C] -- C:\WINDOWS\WBEM [2009.10.19 12:08:53 | 00,000,000 | -H-D | C] -- C:\WINDOWS\ie8 [2009.10.06 11:59:48 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Sonja\Desktop\psd [2009.10.06 11:51:51 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbscan.sys [2009.10.06 11:51:51 | 00,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\usbscan.sys [2009.10.06 11:51:51 | 00,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusb.dll [2009.10.06 11:51:49 | 00,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ptpusd.dll [2009.10.02 14:56:12 | 00,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Sonja\Desktop\liv+seb ========== Files - Modified Within 30 Days ========== [1 C:\WINDOWS\System32\*.tmp files] [5 C:\WINDOWS\*.tmp files] [2009.10.21 12:03:33 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2009.10.21 12:03:31 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2009.10.21 12:03:28 | 53,626,8800 | -HS- | M] () -- C:\hiberfil.sys [2009.10.21 11:10:02 | 00,000,752 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk [2009.10.21 10:28:04 | 00,141,475 | ---- | M] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\Zahlungsbestätigung 2009-034 und 2009-035.pdf [2009.10.20 21:35:57 | 00,000,889 | ---- | M] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\Revo Uninstaller.lnk [2009.10.20 20:30:36 | 00,521,216 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Sonja\Desktop\OTL.exe [2009.10.20 02:16:06 | 00,015,442 | ---- | M] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\cc_20091020_021558.reg [2009.10.20 02:13:19 | 00,024,064 | ---- | M] (Gerhard Schlager) -- C:\WINDOWS\System32\ctfmon.exe [2009.10.20 02:03:19 | 00,055,176 | ---- | M] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\cc_20091020_020255.reg [2009.10.20 01:30:30 | 00,001,512 | ---- | M] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\CCleaner.lnk [2009.10.19 12:17:29 | 00,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2009.10.16 10:55:33 | 01,025,998 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2009.10.16 10:55:33 | 00,459,396 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2009.10.16 10:55:33 | 00,441,458 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2009.10.16 10:55:33 | 00,084,722 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2009.10.16 10:55:33 | 00,071,394 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2009.10.13 10:55:00 | 00,234,384 | ---- | M] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\Familie.jpg [2009.10.11 22:04:49 | 00,035,840 | ---- | M] () -- C:\Dokumente und Einstellungen\Sonja\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009.10.03 18:06:48 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2009.10.02 11:01:58 | 25,198,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\MRT.exe [2009.10.01 09:02:32 | 00,258,840 | ---- | M] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\Kontoauszug_025944000_20091001_090217.pdf [2009.09.25 07:35:26 | 01,509,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\shdocvw.dll [2009.09.25 07:35:26 | 01,509,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shdocvw.dll ========== Files - No Company Name ========== [2009.10.21 11:10:02 | 00,000,752 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk [2009.10.21 10:27:53 | 00,141,475 | ---- | C] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\Zahlungsbestätigung 2009-034 und 2009-035.pdf [2009.10.20 21:35:57 | 00,000,889 | ---- | C] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\Revo Uninstaller.lnk [2009.10.20 02:16:02 | 00,015,442 | ---- | C] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\cc_20091020_021558.reg [2009.10.20 02:03:04 | 00,055,176 | ---- | C] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\cc_20091020_020255.reg [2009.10.20 01:30:30 | 00,001,512 | ---- | C] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\CCleaner.lnk [2009.10.13 10:54:57 | 00,234,384 | ---- | C] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\Familie.jpg [2009.10.01 09:02:30 | 00,258,840 | ---- | C] () -- C:\Dokumente und Einstellungen\Sonja\Desktop\Kontoauszug_025944000_20091001_090217.pdf [2009.03.26 21:28:41 | 14,112,5992 | ---- | C] () -- C:\Programme\OOo_3.0.1_Win32Intel_install_de.exe [2009.01.17 12:42:18 | 00,035,840 | ---- | C] () -- C:\Dokumente und Einstellungen\Sonja\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2009.01.06 16:24:55 | 00,162,304 | ---- | C] () -- C:\WINDOWS\System32\ztvunrar36.dll [2009.01.06 16:24:55 | 00,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNRAR3.dll [2009.01.06 16:24:55 | 00,077,312 | ---- | C] () -- C:\WINDOWS\System32\ztvunace26.dll [2009.01.06 16:24:55 | 00,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll [2008.11.06 18:37:32 | 03,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008.11.06 18:34:00 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest [2008.11.06 18:34:00 | 00,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest [2008.11.06 18:33:02 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll [2008.10.29 17:37:41 | 00,021,168 | ---- | C] () -- C:\Dokumente und Einstellungen\Sonja\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT [2008.10.29 14:42:36 | 00,000,173 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini [2008.10.29 14:39:03 | 00,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2008.10.29 14:35:15 | 00,077,824 | ---- | C] () -- C:\WINDOWS\System32\SynTPCoI.dll [2008.10.29 14:33:07 | 00,000,044 | ---- | C] () -- C:\WINDOWS\System32\msssc.dll [2008.10.23 19:53:20 | 06,942,724 | -H-- | C] () -- C:\Dokumente und Einstellungen\Sonja\Lokale Einstellungen\Anwendungsdaten\IconCache.db [2008.10.23 17:25:07 | 00,000,062 | -HS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\desktop.ini [2008.10.23 17:23:51 | 00,000,062 | -HS- | C] () -- C:\Dokumente und Einstellungen\Sonja\Anwendungsdaten\desktop.ini [2005.04.06 17:27:14 | 00,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2005.04.06 17:24:40 | 00,815,104 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2004.01.19 08:39:06 | 00,086,016 | ---- | C] () -- C:\WINDOWS\System32\ati2evxx.dll [2004.01.08 13:22:32 | 00,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini [2003.04.02 21:00:00 | 00,000,487 | ---- | C] () -- C:\WINDOWS\win.ini [2003.04.02 21:00:00 | 00,000,231 | ---- | C] () -- C:\WINDOWS\system.ini < End of report > |
21.10.2009, 11:32 | #20 |
| Seitenladefehler in firefox und IE8 und der 2. log teil1 Code:
ATTFilter OTL Extras logfile created on: 21.10.2009 12:21:57 - Run 3 OTL by OldTimer - Version 3.0.21.0 Folder = C:\Dokumente und Einstellungen\Sonja\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 511,36 Mb Total Physical Memory | 220,85 Mb Available Physical Memory | 43,19% Memory free 1,22 Gb Paging File | 0,87 Gb Available in Paging File | 71,49% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 55,88 Gb Total Space | 26,79 Gb Free Space | 47,95% Space Free | Partition Type: NTFS D: Drive not present or media not loaded E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: SONJAS-LAPTOP Current User Name: Sonja Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .chm [@ = chm.file] -- C:\WINDOWS\hh.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Programme\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found chm.file [open] -- "C:\WINDOWS\hh.exe" %1 (Microsoft Corporation) cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Programme\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Programme\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) http [open] -- "C:\Programme\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) https [open] -- "C:\Programme\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Directory [Digital Photo Professional] -- C:\Programme\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Programme\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Programme\Internet Explorer\iexplore.exe" (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "C:\Programme\ICQ6\ICQ.exe" = C:\Programme\ICQ6\ICQ.exe:*:Enabled:ICQ6 -- File not found "C:\Programme\Bonjour\mDNSResponder.exe" = C:\Programme\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- (Apple Computer, Inc.) "D:\tool\NASNavi2\NasNavi2.exe" = D:\tool\NASNavi2\NasNavi2.exe:*:Enabled:BUFFALO NASNavigator2 -- File not found "C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.) "C:\Programme\Skype\Phone\Skype.exe" = C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.) |
21.10.2009, 11:33 | #21 |
| Seitenladefehler in firefox und IE8 2. log teil 2 Code:
ATTFilter ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3 "{04B45310-A5FE-4425-BFCA-1A6D8920DE74}" = OpenOffice.org 3.0 "{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting "{09DA4F91-2A09-4232-AB8C-6BC740096DE3}" = Sonic Update Manager "{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Control Panel "{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter "{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin "{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate "{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3 "{29F05234-DCBB-4FE0-88DC-5160C9250312}" = Adobe Photoshop CS3 "{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7 "{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker "{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3 "{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8 "{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5 "{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All "{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3 "{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03 "{73B5D990-04EA-4751-B10F-5534770B91F2}" = Adobe Color EU Recommended Settings "{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762 "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec "{7CBD8A89-45F4-4203-9923-673F72603747}" = Adobe Photoshop Lightroom 2.3 "{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3 "{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player "{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}" = Adobe Device Central CS3 "{8DC42D05-680B-41B0-8878-6C14D24602DB}" = QuickTime "{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support "{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3 "{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German) "{9541FED0-327F-4DF0-8B96-EF57EF622F19}" = RecordNow! "{9705A7E1-3DD1-4BAC-8CA9-FE7B1473BEC9}" = iTunes "{97AA0C55-AFAD-4126-B21C-F1318FB6DADA}" = Realtek RTL8139/810x Fast Ethernet NIC Driver Setup "{98E8A2EF-4EAE-43B8-A172-74842B764777}" = InterVideo WinDVD "{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3 "{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps "{A2D81E70-2A98-4A08-A628-94388B063C5E}" = Adobe Color - Photoshop Specific "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder "{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter "{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings "{AC76BA86-7AD7-1033-7B44-A00000000001}" = Adobe Reader 6.0.1 "{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter "{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0 "{B6EC7388-E277-4A5B-8C8F-71067A41BA64}" = TextPad 5 "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player "{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3 "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2 "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CD815603-AB71-4CFB-B3AC-522298037ACC}" = W83L518D "{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware Free Edition "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client "{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files "{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings "{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings "{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3 "{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack "{F01F79AD-1F47-4685-AE4E-CCFA4EA9FF7C}" = Adobe Setup "{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX "{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}" = Adobe Color NA Extra Settings "ActiveScan 2.0" = Panda ActiveScan 2.0 "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe_5f143314a5d434c8511097393d17397" = Adobe Photoshop CS3 "Agere Systems Soft Modem" = Agere Systems AC'97 Modem "All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software "AntiVir PersonalEdition Classic" = Avira AntiVir Personal - Free Antivirus "ATI Display Driver" = ATI Display Driver "Broadcom 802.11b Network Adapter" = Broadcom 802.11 Driver "CAL" = Canon Camera Access Library "CameraWindowDVC5" = Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX "CameraWindowDVC6" = Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX "CameraWindowLauncher" = Canon Utilities CameraWindow "CANON iMAGE GATEWAY Task" = CANON iMAGE GATEWAY Task for ZoomBrowser EX "Canon Internet Library for ZoomBrowser EX" = Canon Internet Library for ZoomBrowser EX "Canon MOV Decoder" = Canon MOV Decoder "CCleaner" = CCleaner (remove only) "Color Efex Pro 3.0 Complete" = Color Efex Pro 3.0 Complete "Core FTP LE 2.1" = Core FTP LE 2.1 "CSCLIB" = Canon Camera Support Core Library "DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters "DPP" = Canon Utilities Digital Photo Professional 3.5 "EOS Utility" = Canon Utilities EOS Utility "HijackThis" = HijackThis 2.0.2 "ie8" = Windows Internet Explorer 8 "InstallShield_{9705A7E1-3DD1-4BAC-8CA9-FE7B1473BEC9}" = iTunes "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox (3.0.14)" = Mozilla Firefox (3.0.14) "MyCamera" = Canon Utilities MyCamera "Original Data Security Tools" = Canon Utilities Original Data Security Tools "PhotoStitch" = Canon Utilities PhotoStitch "Picture Style Editor" = Canon Utilities Picture Style Editor "RemoteCaptureTask" = Canon Utilities RemoteCapture Task for ZoomBrowser EX "Revo Uninstaller" = Revo Uninstaller 1.83 "ShockwaveFlash" = Adobe Flash Player 9 ActiveX "Silver Efex Pro" = Silver Efex Pro "SynTPDeinstKey" = Synaptics Pointing Device Driver "WFTK" = Canon Utilities WFT-E1/E2/E3/E4 Utility "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = WinRAR "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0 "XviD" = XviD MPEG-4 Codec "Xvid_is1" = Xvid 1.2.1 final uninstall "ZoomBrowser EX" = Canon Utilities ZoomBrowser EX "ZoomBrowser EX Memory Card Utility" = Canon ZoomBrowser EX Memory Card Utility ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 22.08.2009 06:26:09 | Computer Name = SONJAS-LAPTOP | Source = .NET Runtime Optimization Service | ID = 1101 Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe . Error code = 0x80070005 Error - 22.08.2009 06:28:21 | Computer Name = SONJAS-LAPTOP | Source = .NET Runtime Optimization Service | ID = 1101 Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe . Error code = 0x80070005 Error - 22.08.2009 12:03:26 | Computer Name = SONJAS-LAPTOP | Source = .NET Runtime Optimization Service | ID = 1101 Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe . Error code = 0x80070005 Error - 22.08.2009 12:05:28 | Computer Name = SONJAS-LAPTOP | Source = .NET Runtime Optimization Service | ID = 1101 Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe . Error code = 0x80070005 Error - 22.08.2009 12:07:42 | Computer Name = SONJAS-LAPTOP | Source = .NET Runtime Optimization Service | ID = 1101 Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe . Error code = 0x80070005 Error - 22.08.2009 12:09:44 | Computer Name = SONJAS-LAPTOP | Source = .NET Runtime Optimization Service | ID = 1101 Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: C:\WINDOWS\Microsoft.NET\Framework\v3.5\MSBuild.exe . Error code = 0x80070005 Error - 02.10.2009 03:14:07 | Computer Name = SONJAS-LAPTOP | Source = Application Hang | ID = 1002 Description = Stillstehende Anwendung firefox.exe, Version 1.9.0.3526, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error - 16.10.2009 02:10:39 | Computer Name = SONJAS-LAPTOP | Source = MsiInstaller | ID = 1023 Description = Produkt: Microsoft .NET Framework 1.1 - Update "{DAA94A2A-2A8D-4D3B-9DB8-56FBECED082D}" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\WINDOWS\TEMP\NDP1.1sp1-KB953297-X86\NDP1.1sp1-KB953297-X86-msi.0.log enthalten. Error - 16.10.2009 02:10:40 | Computer Name = SONJAS-LAPTOP | Source = NativeWrapper | ID = 5000 Description = Error - 16.10.2009 17:48:14 | Computer Name = SONJAS-LAPTOP | Source = .NET Runtime Optimization Service | ID = 1101 Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to compile: c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe . Error code = 0x80070005 [ System Events ] Error - 29.09.2009 16:23:53 | Computer Name = SONJAS-LAPTOP | Source = Service Control Manager | ID = 7011 Description = Zeitüberschreitung (30000 ms) beim Warten auf eine Transaktionsrückmeldung von Dienst WZCSVC. Error - 02.10.2009 03:06:50 | Computer Name = SONJAS-LAPTOP | Source = Disk | ID = 262151 Description = Fehlerhafter Block bei Gerät \Device\Harddisk1\D. Error - 02.10.2009 08:47:19 | Computer Name = SONJAS-LAPTOP | Source = Dhcp | ID = 1002 Description = Die IP-Adresslease 192.168.1.65 für die Netzwerkkarte mit der Netzwerkadresse 000E3546D6A5 wurde durch den DHCP-Server 79.232.26.62 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet). Error - 02.10.2009 08:47:24 | Computer Name = SONJAS-LAPTOP | Source = Dhcp | ID = 1001 Description = Diesem Computer konnte keine Netzwerkadresse durch den DHCP-Server für die Netzwerkkarte mit der Netzwerkadresse 000E3546D6A5 zugeteilt werden. Der folgende Fehler ist aufgetreten: %%1223. Es wird weiterhin im Hintergrund versucht, eine Adresse vom Netzwerkadressserver (DHCP) zugeteilt zu bekommen. Error - 03.10.2009 12:15:13 | Computer Name = SONJAS-LAPTOP | Source = System Error | ID = 1003 Description = Fehlercode 1000000a, 1. Parameter 017f0304, 2. Parameter 00000002, 3. Parameter 00000000, 4. Parameter 804d9b64. Error - 06.10.2009 02:53:03 | Computer Name = SONJAS-LAPTOP | Source = System Error | ID = 1003 Description = Fehlercode 1000000a, 1. Parameter 017f0304, 2. Parameter 00000002, 3. Parameter 00000000, 4. Parameter 804d9b64. Error - 10.10.2009 03:10:49 | Computer Name = SONJAS-LAPTOP | Source = System Error | ID = 1003 Description = Fehlercode 1000000a, 1. Parameter 017f0304, 2. Parameter 00000002, 3. Parameter 00000000, 4. Parameter 804d9b64. Error - 14.10.2009 16:22:57 | Computer Name = SONJAS-LAPTOP | Source = Service Control Manager | ID = 7011 Description = Zeitüberschreitung (30000 ms) beim Warten auf eine Transaktionsrückmeldung von Dienst Dnscache. Error - 16.10.2009 02:10:50 | Computer Name = SONJAS-LAPTOP | Source = Windows Update Agent | ID = 20 Description = Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Microsoft .NET Framework*1.1 Service Pack*1, Sicherheitsupdate für Windows*2000, Windows*XP, Windows Vista, Windows Server*2008, Windows*7 und Windows Server*2008*R2 (KB953297) Error - 16.10.2009 02:13:39 | Computer Name = SONJAS-LAPTOP | Source = Windows Update Agent | ID = 20 Description = Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Windows-Tool zum Entfernen bösartiger Software - Oktober 2009 (KB890830) < End of report > |
21.10.2009, 12:27 | #22 |
/// Selecta Jahrusso | Seitenladefehler in firefox und IE8 schritt 1 Deinstalliere bitte deine aktuelle Version von Adobe Reader Start--> Systemsteuerung--> Software--> Adobe Reader und lade dir die neue Version von Hier herunter Als alternative würde ich dir den schlankeren Foxit Reader empfehlen schritt 2 Java aktualisieren Deine Javaversion ist veraltet. Da einige Schädlinge (z. B. Vundo) über Java-Exploits in das System eindringen, muss Java aktualisiert werden und alte Versionen müssen vom System entfernt werden, da die alten Versionen ein Sicherheitsrisiko darstellen. Lade JavaRa von prm753 herunter und entpacke es auf den Desktop. JavaRA ist geeignet für Windows 9x, 2k, XP und Vista (mit deaktivierter Benuterkontensteuerung).
schritt 3
schritt 4 Schliesse bitte alle laufenden Programme inkl Browser. Lösche bitte die Extra.txt von Deinem Desktop. Doppelklick auf die OTL.exe und poste beide Logfiles.
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
21.10.2009, 22:08 | #23 |
| Seitenladefehler in firefox und IE8 und weiter geht der marathon ok, adobe reader und java aktualisiert. hier der javara logfile: Code:
ATTFilter JavaRa 1.15 Removal Log. Report follows after line. ------------------------------------ The JavaRa removal process was started on Wed Oct 21 22:48:32 2009 Found and removed: C:\Programme\Java\j2re1.4.2_03 Found and removed: C:\Windows\Installer\{7148F0A8-6813-11D6-A77B-00B0D0142030} Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.4 Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142030} Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} Found and removed: SOFTWARE\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB} Found and removed: SOFTWARE\Classes\Installer\Products\8A0F841731866D117AB7000B0D410203 Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F841731866D117AB7000B0D410203 Found and removed: SOFTWARE\Classes\JavaPlugin.142_03 Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.4.2_03 Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.4.2_03 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.4.2_03 Found and removed: SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} Found and removed: Software\Classes\JavaPlugin.142_03 Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA} Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_02 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_03 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.0.1_04 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2 Found and removed: SOFTWARE\JavaSoft\Java Web Start\1.2.0_01 Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA} Found and removed: Software\Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB} Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACB9B14518A96D117A58000B0D410203 Found and removed: SOFTWARE\JavaSoft\Java Plug-in\1.6.0_07 Found and removed: SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_07 Found and removed: SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5C0-4FCB-11CF-AAA5-00401C608500} Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACBB9B2318A96D117A58000B0D610007 Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8A0F842331866D117AB7000B0D610007 Found and removed: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3248F0A8-6813-11D6-A77B-00B0D0160070} ------------------------------------ Finished reporting. soll ich trotzdem schon die neuen OTL logs machen? |
22.10.2009, 02:02 | #24 |
| Seitenladefehler in firefox und IE8Code:
ATTFilter seit kurzen häufen sich bei mir seitenladefehler in firefox un IE und ich muss immer häufiger "nochmal versuchen" um die seite angezeigt zu bekommen. selbst bei google. Wenn dann da noch ein lustiger Sempron oder Celeron werkelt, wundert mich das nicht. Was ist überhaupt für eine LAN - Verbindung da? Internet - Verbindung? Server einfach überlastet? google.de hat heute bei mir auch schon gesponnen. Da helfen Updates nicht wirklich. Aufräumen ist da hilfreicher -> wird ja gemacht. ESET - Online funktioniert mit IE 8, Frickelfox ist da wahrscheinlich sehr viel sicherer, macht es wie immer, nichts. Will hier gar nicht weiter rumtrollen, denke einfach, dass GMER und Konsorten hier nichts finden und auch nichts ausrichten können. |
22.10.2009, 10:21 | #25 |
/// Selecta Jahrusso | Seitenladefehler in firefox und IE8 Danke für den Hilfreichen Beitrag Bevor wir an irgendwelche Server usw denken, schliessen wir Malware aus und das bedeutet arbeit. @ ericosmos Versuch bitte den Scan mit dem IE durchzuführen. Ansonsten: F-Secure Onlinescanner
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
22.10.2009, 10:43 | #26 |
| Seitenladefehler in firefox und IE8 erstmal vielen dank für alle tipps. werd heut abend den anderen online scanner ausprobieren. am laptop kanns eigentlich nicht liegen, weil ich seit ewigkeiten kanns locker damit surfe. das seitenladeproblem taucht halt überall auf. auf dieser seite hier, auf den online scanner seiten (vielleicht haut es deshalb nicht hin ...?), alle links, die du mir schickst von programmen, die ich runterladen soll etc etc etc hast du ein vermutung, ob es was ersntes sein kann, oder was einstellungsmäßiges . oder oder oder ... |
22.10.2009, 15:05 | #27 |
/// Selecta Jahrusso | Seitenladefehler in firefox und IE8 Versuch vorher bitte noch folgendes. Ping überprüfen start --> ausführen --> cmd (reinschreiben) --> OK Gib nun im dos fenster ping google.de -t ein und enter. Lass das einmal laufen (mind 50 pings), Ende mit strg +c Wieviel Pakete gingen verloren, oder braucht er manchmal mehr Zeit für ein Paket?
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
23.10.2009, 10:35 | #28 |
| Seitenladefehler in firefox und IE8 hab ca 100 pings laufen lassen. keiner verloren gegangen. brauchte im schnitt um die 65 ms 3-4mal über 200 ms und einmal 424 ms. ist das alles im normalen bereich? |
23.10.2009, 10:41 | #29 |
/// Selecta Jahrusso | Seitenladefehler in firefox und IE8 eigentlich nicht Das scheint mehr mit der Verbindung zu tun haben. Wurde iwas umgestellt am Router etc? Mach mal den F-secure online scan und erstelle bitte eine neue OTL Logfile
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
23.10.2009, 12:46 | #30 |
| Seitenladefehler in firefox und IE8 ach shit. als der f-secure scanner am downlowden war, hat sich bei 92% ewig nix getan. dann hab ich abgebrochen und wollte es nochmal vo vorn pobieren, aber jetzt kommt beim start immer ne fehlermelding error id27 oder so. oh mann. hat der vielleicht was gedownloadetes schon teilinstalliert und ich muss das vorher entfernen, damit es wieder funktioniert? cih weiß halt gar nicht wo nach ich suchen muss ... die online scanner mögen mich alle nicht |
Themen zu Seitenladefehler in firefox und IE8 |
angezeigt, antivir, ask toolbar, beiträge, canon, dankbar, file, firefox, gescannt, hijack, hijackthis, hinweis, hkus\s-1-5-18, home, häufiger, internet security, kurze, ladefehler, lösung, seite, seitenladefehler, sp3, versionen, versuche, windows, windows xp, xp home |