| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: TR/Agent proxy.byv eingefangen!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
31.12.2009, 11:58
| #1 |
 |  TR/Agent proxy.byv eingefangen! Hallo, ich hoffe ihr könnt mir helfen! ich habe mir TR/Proxy Agent.byv eingefangen und werde ihn nicht los!! er sitzt - laut AntiVir - in: C:/ProgramData/Adobe.spdll ich habe windows vista. hikackthis.log: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:30:20, on 19.12.2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18865) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\system32\taskeng.exe C:\Program Files\ASUS\ASUS Live Update\ALU.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\ASUS\ATK Media\DMedia.exe C:\Windows\System32\ASUSTPE.exe C:\Program Files\P4P\P4P.exe C:\Windows\ASScrPro.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Windows\System32\spool\drivers\w32x86\3\E_FATIBGE.EXE C:\Users\tini\Program Files\DNA\btdna.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Hotspot Shield\bin\openvpntray.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil10c.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.at/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE O4 - HKLM\..\Run: [ASUSTPE] C:\Windows\system32\ASUSTPE.exe O4 - HKLM\..\Run: [PowerForPhone] "C:\Program Files\P4P\P4P.exe" O4 - HKLM\..\Run: [ASUS Camera ScreenSaver] C:\Windows\ASScrProlog.exe O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [Skytel] Skytel.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [ Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [EPSON Stylus D78 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIBGE.EXE /FU "C:\Windows\TEMP\E_SE307.tmp" /EF "HKCU" O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\tini\Program Files\DNA\btdna.exe" O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [RegistryMonitor1] "C:\Windows\TEMP\uurx.tmp\svchost.exe" (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [RegistryMonitor1] "C:\Windows\TEMP\uurx.tmp\svchost.exe" (User 'Default user') O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O9 - Extra button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O13 - Gopher Prefix: O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{8DDBA139-1F98-42BA-AB71-605D208C87B6}: NameServer = 10.4.40.1 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: ADSM Service (ADSMService) - Unknown owner - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe -- End of file - 10919 bytes hab dann noch meine programme über CCleaner aufgelistet: 2007 Microsoft Office system Microsoft Corporation 15.05.2009 1.146,2MB 12.0.6425.1000 Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 19.12.2009 10.0.42.34 Adobe Reader 9.2 - Deutsch Adobe Systems Incorporated 29.12.2009 239,0MB 9.2.0 Arcade Lines 1.77 Lobstersoft 23.05.2009 10,4MB ASUS Data Security Manager ASUS 06.08.2008 4,95MB 1.00.0006 ASUS InstantFun ASUS 06.08.2008 14,6MB 1.0.0015 ASUS Live Update ASUS 06.08.2008 0,46MB 2.5.6 ASUS MultiFrame 17.10.2008 1,18MB 1.0.0016 ASUS Splendid Video Enhancement Technology ASUSTeK 06.08.2008 16,3MB 1.02.18 ASUS Touch Pad Extra 06.08.2008 0,78MB Asus_Camera_ScreenSaver ASUS 06.08.2008 2.0.0006 Atheros Driver Installation Program Atheros 06.08.2008 4,00KB 7.1 ATI Catalyst Install Manager ATI Technologies, Inc. 06.08.2008 13,9MB 3.0.664.0 ATK Generic Function Service ATK 06.08.2008 0,45MB 1.00.0008 ATK Hotkey ATK 06.08.2008 5,05MB 1.00.0012 ATK Media 06.08.2008 0,63MB ATKOSD2 ATK 17.10.2008 7,35MB 6.64.1.4 Avira AntiVir Personal - Free Antivirus Avira GmbH 15.05.2009 65,0MB BitTorrent BitTorrent, Inc 27.11.2008 0,98MB CCleaner Piriform 20.12.2009 2,80MB CyberLink LabelPrint CyberLink Corp. 06.08.2008 86,4MB 2.0.2830 DNA BitTorrent Inc. 12.11.2009 0,42MB 2.2.4 (16502) EPSON-Drucker-Software SEIKO EPSON Corporation 29.10.2008 Free Video Converter V 1.2 Koyote Soft 19.11.2008 10,1MB Google Toolbar for Internet Explorer Google Inc. 05.12.2009 4,07MB HappyFoto Bestellassistent (nur entfernen) 17.08.2009 7,21MB HijackThis 2.0.2 TrendMicro 18.12.2009 0,39MB 2.0.2 Hotspot Shield 1.34 29.11.2009 7,11MB 1.34 Java(TM) 6 Update 17 Sun Microsystems, Inc. 03.07.2009 94,9MB 6.0.170 LifeFrame2 ASUS 06.08.2008 9,87MB 2.0.15 LightScribe System Software 1.12.37.1 LightScribe 06.08.2008 20,9MB 1.12.37.1 Malwarebytes' Anti-Malware Malwarebytes Corporation 05.12.2009 4,11MB MediaInfo 0.7.7.8 18.11.2008 5,61MB 0.7.7.8 Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft Corporation 15.05.2009 37,0MB Microsoft .NET Framework 3.5 SP1 Microsoft Corporation 11.03.2009 37,0MB Microsoft Office Enterprise 2007 Microsoft Corporation 15.05.2009 1.146,2MB 12.0.6425.1000 Microsoft Office Live Add-in 1.3 Microsoft Corporation 21.03.2009 0,48MB 2.0.2313.0 Microsoft Office Outlook Connector Microsoft Corporation 14.11.2009 6,13MB 12.0.6423.1000 Microsoft Silverlight Microsoft Corporation 09.09.2009 23,8MB 3.0.40818.0 Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Corporation 21.03.2009 1,74MB 3.1.0000 Microsoft Sync Framework Runtime Native v1.0 (x86) Microsoft Corporation 21.03.2009 0,61MB 1.0.1215.0 Microsoft Sync Framework Services Native v1.0 (x86) Microsoft Corporation 21.03.2009 1,45MB 1.0.1215.0 Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 29.07.2009 0,25MB 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 06.08.2008 2,37MB 8.0.50727.42 Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Corporation 29.07.2009 0,19MB 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 15.05.2009 0,58MB 9.0.30729 Motorola SM56 Speakerphone Modem 06.08.2008 1,91MB Move Media Player Move Networks 30.09.2009 Mozilla Firefox (3.0.13) Mozilla 28.09.2009 25,0MB 3.0.13 (de) P4P P4P 06.08.2008 0,75MB 1.0.0.16 Power2Go CyberLink Corp. 06.08.2008 93,3MB 5.6.3917 Power4Gear eXtreme ATK 06.08.2008 1.00.0014 RarZilla Free Unrar Philipp Winterberg 22.11.2009 1,70MB 2.55 Realtek High Definition Audio Driver Realtek Semiconductor Corp. 06.08.2008 16,0MB 6.0.1.5543 Realtek USB 2.0 Card Reader Realtek Semiconductor Corp. 06.08.2008 2,98MB Resize Pictures Plus 3.3 Angel Software 28.08.2009 4,11MB SA304x Device Manager Philips 06.12.2008 8,89MB 1.1.4.1012 SA304x Media Converter Philips 06.12.2008 424,1MB 1.1.3.1005 Skype™ 3.8 Skype Technologies S.A. 18.10.2008 30,2MB 3.8.180 SoulSeek Client 156c 07.02.2009 3,07MB Synaptics Pointing Device Driver Synaptics 06.08.2008 13,7MB 10.1.8.0 Vista Codec Package Shark007 22.11.2009 52,7MB 5.4.9 VLC media player 0.9.4 VideoLAN Team 01.11.2008 49,0MB 0.9.4 Windows Live Anmelde-Assistent Microsoft Corporation 04.03.2009 1,93MB 5.000.818.6 Windows Live Essentials Microsoft Corporation 14.11.2009 144,2MB 14.0.8089.0726 Windows Live Favorites für Windows Live Toolbar Microsoft Corporation 18.10.2008 1,80MB 03.01.0146 Windows Live Sync Microsoft Corporation 14.11.2009 2,79MB 14.0.8089.726 Windows Live-Uploadtool Microsoft Corporation 21.03.2009 0,22MB 14.0.8014.1029 WinFlash 06.08.2008 1,32MB Wireless Console 2 ATK 06.08.2008 1,59MB 2.0.8 Yahoo! Toolbar 20.12.2009 3,33MB ich wäre sehr dankbar wenn mir wer helfen kann. danke im voraus!!! Geändert von serpentina (31.12.2009 um 12:19 Uhr) |
| Themen zu TR/Agent proxy.byv eingefangen! |
| antivir, antivir guard, avg, avira, bho, browser, c:\windows\temp, defender, desktop, device driver, essentials, excel, explorer, google, hijack, hijackthis, hkus\s-1-5-18, hotspot, hotspot shield, internet, internet explorer, koyote, malwarebytes' anti-malware, object, pdf, plug-in, rundll, saver, screensaver, security, senden, software, svchost.exe, system, temp, toolbars, usb 2.0, video converter, windows, windows\temp |
Baum-Darstellung