| |
| |||||||
Log-Analyse und Auswertung: Bowser Probleme/ Trojaner Befall?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
19.02.2010, 17:14
| #1 |
 |  Bowser Probleme/ Trojaner Befall? Guten Tag, seid kurzem hat mein Bowser ziemliche Probleme. Es stürtzt ohne Vorwarnung ab und ist deutlich langsamer geworden. Hier mein Hijack Logfile: Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:05:51, on 19.02.2010 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18882) Boot mode: Normal Running processes: C:\Program Files\Norton Internet Security\Engine\17.5.0.127\ccSvcHst.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\system32\wuauclt.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Synaptics\SynTP\SynTPStart.exe C:\Program Files\Launch Manager\HotkeyApp.exe C:\Program Files\Launch Manager\WisKeyState.exe C:\Program Files\Launch Manager\OSD.exe C:\Program Files\Launch Manager\OSDCtrl.exe C:\Program Files\Picasa2\PicasaMediaDetector.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Spybot - Search & Destroy\teatimer.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\OnlineControl\ocontrol.exe c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Brother\ControlCenter3\brccMCtl.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\CCleaner\CCleaner.exe C:\Windows\system32\NOTEPAD.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - - (no file) O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\17.5.0.127\coIEPlg.dll O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\17.5.0.127\IPSBHO.DLL O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.5.0.127\coIEPlg.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [StartCCC] "c:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe O4 - HKLM\..\Run: [HotkeyApp] "C:\Program Files\Launch Manager\HotkeyApp.exe" O4 - HKLM\..\Run: [WisKeyState] "C:\Program Files\Launch Manager\WisKeyState.exe" O4 - HKLM\..\Run: [LMgrVolOSD] "C:\Program Files\Launch Manager\OSD.exe" O4 - HKLM\..\Run: [LMgrOSD] "C:\Program Files\Launch Manager\OSDCtrl.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [FSCRecovery] c:\Program Files\Fujitsu Siemens Computers\Fujitsu Siemens Computers Recovery\FSCRecoveryReminder.exe O4 - HKLM\..\Run: [Google EULA Launcher] c:\Program Files\Google\Google EULA\GoogleEULALauncher.exe IE PA O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [PPort11reminder] "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe O4 - HKCU\..\Run: [fsc-reg] C:\fsc-reg\fscreg.exe 20100125 O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user') O4 - Global Startup: OnlineControl.lnk = C:\Program Files\OnlineControl\ocontrol.exe O4 - Global Startup: Registrierungsprogramm ausführen.lnk = C:\Program Files\WiFiConnector\NintendoWFCReg.exe O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe O13 - Gopher Prefix: O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: FSCLBaseUpdaterService - Unknown owner - C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\17.5.0.127\ccSvcHst.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: Scramby Server (ScrambyServer) - Unknown owner - D:\Scramby\ScrambyServer.exe (file missing) O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe O23 - Service: WisLMSvc - Wistron Corp. - C:\Program Files\Launch Manager\WisLMSvc.exe -- End of file - 9757 bytes Code:
ATTFilter Activation Assistant for the 2007 Microsoft Office suites Microsoft Corporation 27.08.2009 14,0MB
Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 18.12.2009 10.0.42.34
Adobe Flash Player 10 Plugin Adobe Systems Incorporated 23.11.2009 10.0.32.18
Adobe Reader 9 - Deutsch Adobe Systems Incorporated 04.09.2008 232,1MB 9.0.0
ATI Catalyst Install Manager ATI Technologies, Inc. 04.09.2008 13,9MB 3.0.678.0
Battlefield 2142 Deluxe Edition 06.12.2009 2.910,0MB
Brother MFL-Pro Suite Brother Industries, Ltd. 30.08.2009 18,2MB 1.00
CCleaner Piriform 15.02.2010 2,88MB 2.28
Compatibility Pack für 2007 Office System Microsoft Corporation 11.12.2009 56,2MB 12.0.6425.1000
CPU-Control Koma-Code 30.01.2010 1,68MB
Curse Client Curse 13.02.2010 4.0.1.58
EVEREST Home Edition v2.20 Lavalys Inc 27.08.2009 6,58MB 2.20
FSCLounge Fujitsu Siemens Computers 27.08.2009 8,47MB 1.0.0
Fujitsu Siemens Computers Recovery Fujitsu Siemens Computers 27.08.2009 7,06MB 1.3.9
Futuremark SystemInfo Futuremark Corporation 20.10.2009 3,79MB 3.20.1.2
GIMP 2.6.7 07.09.2009 87,0MB
Google Desktop Google 17.11.2009 6,65MB 5.9.0911.03589
Google Toolbar for Internet Explorer Google Inc. 03.02.2010 8,15MB
GUILD WARS 09.09.2009 2.881,1MB
HijackThis 2.0.2 TrendMicro 18.11.2009 0,39MB 2.0.2
ICQ6.5 ICQ 30.12.2009 47,2MB 6.5
Java(TM) 6 Update 16 Sun Microsystems, Inc. 17.09.2009 95,0MB 6.0.160
JMicron JMB38X Flash Media Controller JMicron Technology Corp. 04.09.2008 2,26MB 1.00.11.02
Launch Manager V1.5.4 Wistron Corp. 04.09.2008 1,35MB 1.5.4
Microsoft .NET Framework 1.1 08.12.2009
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft Corporation 30.08.2009 37,0MB
Microsoft .NET Framework 3.5 SP1 Microsoft Corporation 27.08.2009 27,8MB
Microsoft Office Home and Student 2007 Microsoft Corporation 11.12.2009 296,9MB 12.0.6425.1000
Microsoft Office PowerPoint Viewer 2007 (German) Microsoft Corporation 11.12.2009 51,0MB 12.0.6425.1000
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Corporation 13.11.2009 0,25MB 8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 20.10.2009 0,54MB 8.0.56336
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Corporation 13.11.2009 0,19MB 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 27.08.2009 0,58MB 9.0.30729
Microsoft Works Microsoft Corporation 13.11.2009 376,7MB 9.7.0621
Mozilla Firefox (3.5.7) Mozilla 10.01.2010 26,4MB 3.5.7 (de)
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 27.08.2009 1,28MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 25.11.2009 1,34MB 4.20.9876.0
NCsoft Launcher NCsoft 30.08.2009 6,61MB 1.5.4.2
Nero 8 Essentials Nero AG 04.09.2008 1.687,1MB 8.10.368
Norton Internet Security Symantec Corporation 30.10.2009 64,9MB 17.5.0.127
OnlineControl 1.2 Deutsche Telekom AG T-Com 27.08.2009 0,88MB 1.2.23
OpenAL 20.10.2009 0,75MB
PaperPort Image Printer Nuance Communications, Inc. 30.08.2009 0,38MB 1.00.0000
Picasa 2 Google, Inc. 27.08.2009 35,3MB 2.0
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 04.09.2008
Registrierungsprogramm für den Nintendo Wi-Fi USB Connector 14.02.2010 2,04MB
RGSS-RTP Standard Enterbrain 26.10.2009 22,5MB 1.0.0
RPGXP Enterbrain 29.10.2009 4,11MB 1.0.0
ScanSoft PaperPort 11 Nuance Communications, Inc. 30.08.2009 130,3MB 11.1.0000
SpeedFan (remove only) 07.12.2009 4,79MB
Spybot - Search & Destroy Safer Networking Limited 27.08.2009 51,4MB 1.6.2
Synaptics Pointing Device Driver Synaptics 04.09.2008 13,6MB 10.0.12.0
SystemDiagnostics Fujitsu Siemens Computers 27.08.2009 13,6MB 2.01.0004
T-Online 6.0 27.08.2009 17,3MB
TeamSpeak 2 RC2 Dominating Bytes Design 11.10.2009 2.0.32.60
Windows Live Anmelde-Assistent Microsoft Corporation 12.11.2009 1,93MB 5.000.818.5
Windows Live Essentials Microsoft Corporation 12.11.2009 44,0MB 14.0.8089.0726
Windows Live-Uploadtool Microsoft Corporation 12.11.2009 0,22MB 14.0.8014.1029
WinRAR 11.10.2009 3,82MB
World of Warcraft Blizzard Entertainment 18.12.2009 18.347,0MB 2.1.1.1374
 Gruß |
|
19.02.2010, 20:46
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Bowser Probleme/ Trojaner Befall? Hallo,
__________________welcher Browser? Sprichst Du von Firefox? Wenn ja, weclhe version nutzt Du da und welche Erweiterungen (Addons)? Hijackthis Logfile ist soweit ok, evtl. musst Du Dir mal ein neues Firefoxprofil einrichten.
__________________ |
|
| Themen zu Bowser Probleme/ Trojaner Befall? |
| adobe, bho, defender, desktop, firefox, flash player, google, gservice, gupdate, hijack, hijackthis, hkus\s-1-5-18, internet, internet explorer, internet security, intrusion prevention, launch, logfile, mozilla, object, picasa, plug-in, programdata, rundll, safer networking, security, senden, server, software, symantec, system, trojaner, trojaner befall, usb, vista, windows |
Linear-Darstellung
