Hallo liebe Trojaner-Board Gemeinde,

seit ich Windows 7 installiert habe hatte ich noch keine -offensichtlichen- Anzeichen dafür mir etwas eingefangen zu haben, dennoch bin ich mir (teils selbstverschuldet) nicht ganz sicher, ob ich meinem System noch vertrauen kann.

Daher bitte ich euch bevor bei mir evtl. grundlose Paranoia auftritt einen kurzen Blick über mein Log zu werfen.

Vielen Dank schonmal für eure Antworten!

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 00:16:00, on 08.03.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\SysWOW64\CtHelper.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\HiJackThis\TrendMicro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = h**p://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = h**p://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [AsioThk32Reg] REGSVR32.EXE /S CTASIO.DLL
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files (x86)\Alcohol Soft\Alcohol 52\axcmd.exe" /automount
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CtxfiReg] CTXFIREG.exe /FAIL1 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CtxfiReg] CTXFIREG.exe /FAIL1 (User 'Default user')
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files (x86)\ICQ6.5\ICQ.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O13 - Gopher Prefix: 
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - h**p://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15111/CTPID.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files (x86)\a-squared Free\a2service.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2010c\RpcAgentSrv.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8417 bytes
         

Danke und Gruß
inter

Hallo und

Hinweis: Du nutzt ein 64-Bit-Windows. Viele Tools, die wir hier als Hilfsmittel zum Bereinigen einsetzen, sind mit nem 64-Bit-Windows nicht kompatibel - das macht eine Bereinigung schwerer als sie ohnehin schon ist.

Mach bitte einen Durchgang mit Malwarebytes und poste das Log.

Hallo nochmal,

der Durchlauf von Malwarebytes ergab 0 infizierte Objekte. Daraufhin habe ich mal einen Onlinescan bei pandasecurity.com durchgeführt, der ergab dann schon einiges.

ANALYSIS: 2010-03-21 16:42:11
PROTECTIONS: 1
MALWARE: 55
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description                                  Version                       Active    Updated
;===================================================================================================================================================================================
AntiVir Desktop                                                            Yes       Yes
;===================================================================================================================================================================================
MALWARE
Id        Description                        Type                Active    Severity  Disinfectable  Disinfected Location
;===================================================================================================================================================================================
00029434  spyware/virtumonde                 Spyware             No        1         Yes            No           c:\windows\syswow64\appsetup.exe
00139059  Cookie/Traffic Marketplace         TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.trafficmp.com/]
00139059  Cookie/Traffic Marketplace         TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.trafficmp.com/]
00139060  Cookie/Casalemedia                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.casalemedia.com/]
00139060  Cookie/Casalemedia                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.casalemedia.com/]
00139060  Cookie/Casalemedia                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.casalemedia.com/]
00139060  Cookie/Casalemedia                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.casalemedia.com/]
00139061  Cookie/Doubleclick                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.doubleclick.net/]
00139061  Cookie/Doubleclick                 TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\(username)@doubleclick[1].txt
00139061  Cookie/Doubleclick                 TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\low\(username)@doubleclick[2].txt
00139064  Cookie/Atlas DMT                   TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\low\(username)@atdmt[2].txt
00139064  Cookie/Atlas DMT                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.atdmt.com/]
00139064  Cookie/Atlas DMT                   TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\(username)@atdmt[1].txt
00145393  Cookie/Tradedoubler                TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\low\(username)@tradedoubler[1].txt
00145393  Cookie/Tradedoubler                TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.tradedoubler.com/]
00145393  Cookie/Tradedoubler                TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\(username)@tradedoubler[2].txt
00145457  Cookie/FastClick                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.fastclick.net/]
00145466  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.servedby.advertising.com/]
00145466  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.servedby.advertising.com/]
00145466  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.servedby.advertising.com/]
00145466  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.servedby.advertising.com/]
00145466  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.servedby.advertising.com/]
00145466  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.servedby.advertising.com/]
00145466  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.servedby.advertising.com/]
00145731  Cookie/Tribalfusion                TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.tribalfusion.com/]
00145732  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.as-eu.falkag.net/]
00145732  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.as-eu.falkag.net/]
00145732  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.as-eu.falkag.net/]
00145732  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.as-eu.falkag.net/]
00145732  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.as-eu.falkag.net/]
00145738  Cookie/Mediaplex                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.mediaplex.com/]
00145745  Cookie/OfferOptimizer              TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.offeroptimizer.com/]
00145745  Cookie/OfferOptimizer              TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.offeroptimizer.com/]
00145745  Cookie/OfferOptimizer              TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.offeroptimizer.com/]
00145745  Cookie/OfferOptimizer              TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.offeroptimizer.com/]
00145745  Cookie/OfferOptimizer              TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.offeroptimizer.com/]
00145745  Cookie/OfferOptimizer              TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.offeroptimizer.com/]
00145869  Cookie/SpyLog                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.spylog.com/]
00146967  Cookie/PayCounter                  TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.paycounter.com/]
00147036  Cookie/Adverserve                  TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.adverserve.net/]
00147816  Cookie/Beweb                       TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.beweb.com/]
00149064  Cookie/Maxserving                  TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.maxserving.com/]
00149064  Cookie/Maxserving                  TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.maxserving.com/]
00152401  Cookie/Belnk                       TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.belnk.com/]
00152401  Cookie/Belnk                       TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.belnk.com/]
00159564  Cookie/WUpd                        TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.revenue.net/]
00159564  Cookie/WUpd                        TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.revenue.net/]
00162730  Cookie/Belnk                       TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.dist.belnk.com/]
00167642  Cookie/Com.com                     TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.com.com/]
00167642  Cookie/Com.com                     TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.com.com/]
00167647  Cookie/Yadro                       TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.yadro.ru/]
00167647  Cookie/Yadro                       TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.yadro.ru/]
00167690  Cookie/Rightmedia                  TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][rightmedia.net/]
00167690  Cookie/Rightmedia                  TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][rightmedia.net/]
00167704  Cookie/Xiti                        TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.xiti.com/]
00167704  Cookie/Xiti                        TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.xiti.com/]
00167714  Cookie/64.62.232                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][64.62.232.6/]
00167714  Cookie/64.62.232                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][64.62.232.6/]
00167714  Cookie/64.62.232                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][64.62.232.6/]
00167714  Cookie/64.62.232                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][64.62.232.6/]
00167714  Cookie/64.62.232                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][64.62.232.6/]
00167733  Cookie/Adserver                    TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.z1.adserver.com/]
00167733  Cookie/Adserver                    TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.z1.adserver.com/]
00167744  Cookie/GoStats                     TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.gostats.com/]
00167744  Cookie/GoStats                     TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.gostats.com/]
00167744  Cookie/GoStats                     TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.gostats.com/]
00167744  Cookie/GoStats                     TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.gostats.com/]
00167749  Cookie/Toplist                     TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.toplist.cz/]
00167753  Cookie/Statcounter                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.statcounter.com/]
00167753  Cookie/Statcounter                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.statcounter.com/]
00167753  Cookie/Statcounter                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.statcounter.com/]
00167753  Cookie/Statcounter                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.statcounter.com/]
00167753  Cookie/Statcounter                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.statcounter.com/]
00167753  Cookie/Statcounter                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.statcounter.com/]
00167753  Cookie/Statcounter                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.statcounter.com/]
00167753  Cookie/Statcounter                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.statcounter.com/]
00167753  Cookie/Statcounter                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.statcounter.com/]
00168056  Cookie/YieldManager                TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\low\(username)@ad.yieldmanager[2].txt
00168056  Cookie/YieldManager                TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][ad.yieldmanager.com/]
00168056  Cookie/YieldManager                TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][ad.yieldmanager.com/]
00168056  Cookie/YieldManager                TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][ad.yieldmanager.com/]
00168056  Cookie/YieldManager                TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\(username)@ad.yieldmanager[2].txt
00168056  Cookie/YieldManager                TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][ad.yieldmanager.com/]
00168061  Cookie/Apmebf                      TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\(username)@apmebf[1].txt
00168061  Cookie/Apmebf                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.apmebf.com/]
00168076  Cookie/BurstNet                    TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.burstnet.com/]
00168076  Cookie/BurstNet                    TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.burstnet.com/]
00168090  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.serving-sys.com/]
00168090  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\(username)@serving-sys[2].txt
00168090  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.serving-sys.com/]
00168090  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.serving-sys.com/]
00168090  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\low\(username)@serving-sys[2].txt
00168090  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.serving-sys.com/]
00168093  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\(username)@bs.serving-sys[1].txt
00168093  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][bs.serving-sys.com/]
00168093  Cookie/Serving-sys                 TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\low\(username)@bs.serving-sys[1].txt
00168101  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.as-us.falkag.net/]
00168102  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][as1.falkag.de/]
00168102  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][as1.falkag.de/]
00168102  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][as1.falkag.de/]
00168102  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][as1.falkag.de/]
00168102  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][as1.falkag.de/]
00168102  Cookie/Falkag                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.as1.falkag.de/]
00168109  Cookie/Adtech                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.adtech.de/]
00168109  Cookie/Adtech                      TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\(username)@adtech[1].txt
00168109  Cookie/Adtech                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.adtech.de/]
00168110  Cookie/Server.iad.Liveperson       TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][server.iad.liveperson.net/]
00168110  Cookie/Server.iad.Liveperson       TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][server.iad.liveperson.net/hc/65917145]
00168113  Cookie/fe.lea.lycos                TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][fe.lea.lycos.de/]
00168114  Cookie/onestat.com                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][stat.onestat.com/]
00168114  Cookie/onestat.com                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][stat.onestat.com/]
00168114  Cookie/onestat.com                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][stat.onestat.com/]
00169190  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\(username)@advertising[2].txt
00169190  Cookie/Advertising                 TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.advertising.com/]
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.ads.pointroll.com/]
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.ads.pointroll.com/]
00170495  Cookie/PointRoll                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.ads.pointroll.com/]
00170556  Cookie/RealMedia                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.realmedia.com/]
00170556  Cookie/RealMedia                   TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.realmedia.com/]
00170557  Cookie/Com.com                     TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.terra.com.br/]
00171982  Cookie/QuestionMarket              TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.questionmarket.com/]
00172221  Cookie/Zedo                        TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.zedo.com/]
00172221  Cookie/Zedo                        TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.zedo.com/]
00172221  Cookie/Zedo                        TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.zedo.com/]
00172221  Cookie/Zedo                        TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.zedo.com/]
00172221  Cookie/Zedo                        TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.zedo.com/]
00172221  Cookie/Zedo                        TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.zedo.com/]
00172221  Cookie/Zedo                        TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.zedo.com/]
00172449  Cookie/MetriWeb                    TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.metriweb.be/]
00173987  Cookie/Itrack                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][ilead.itrack.it/]
00173987  Cookie/Itrack                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][ilead.itrack.it/]
00175950  Cookie/cs.sexcounter               TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.cs.sexcounter.com/]
00175950  Cookie/cs.sexcounter               TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.cs.sexcounter.com/]
00184846  Cookie/Adrevolver                  TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.adrevolver.com/]
00196960  Cookie/Belnk                       TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.ath.belnk.com/]
00199983  Cookie/Valueclick                  TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.valueclick.com/]
00207936  Cookie/Adviva                      TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\low\(username)@adviva[1].txt
00262020  Cookie/Atwola                      TrackingCookie      No        0         Yes            No           c:\users\(username)\appdata\roaming\microsoft\windows\cookies\(username)@atwola[1].txt
00262020  Cookie/Atwola                      TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][.atwola.com/]
00286734  Cookie/Adserver                    TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][adserver.filefront.com/]
00286734  Cookie/Adserver                    TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][adserver.filefront.com/]
00286734  Cookie/Adserver                    TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][adserver.filefront.com/]
00286734  Cookie/Adserver                    TrackingCookie      No        0         Yes            No           c:\users\(username)\notizen\browser backup\default_2005-08-27.firefox[63dos01z.default/cookies.txt][adserver.filefront.com/]
03587590  Adware/Yassist                     Adware              No        0         No             No           d:\backups\usb-stick backup\grundausstattung\divxinstaller6847.exe[²çç\y_toolbar.exe][²èç]

Die Tracking Cookies dürften ja nicht so wild sein (denk ich zumindest) - aber die virtumonde Datei sieht natürlich böse aus. Über den Onlinescan von Panda lässt sich ja nichts entfernen.. und Malwarebytes, a-squared free, Antivir und dann noch Virustotal.com sagen mir die Datei sei harmlos.

Habt ihr irgendwelche Vorschläge? Mein Problem ist, dass vor kurzem zweimal meine E-Mail Adresse gehackt wurde und ich meinem System daher nur bedingt Vertrauen schenke (ansonsten hatte ich keine Auffälligkeiten, die mir Anlass dazu hätten geben sollen).

Vielen Dank und Grüße
Inter

Mein Problem ist, dass vor kurzem zweimal meine E-Mail Adresse gehackt wurde und ich meinem System daher nur bedingt Vertrauen schenke (ansonsten hatte ich keine Auffälligkeiten, die mir Anlass dazu hätten geben sollen).

Ich weiß nicht wie Du das siehst, aber vollends vertrauen kannst Du Deinem System nach Befall nur, wenn Du formatierst und eine Neuinstallation durchführst.
Dein gehakctes E-Mailkonto kann man auch darauf zurückführen, dass Du zB ein zu schwaches Passwort oder Dich von einem anderen infizierten PC eingeloggt hast.