Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Helft mir bei dem Bericht! Internet Lahmt! (https://www.trojaner-board.de/18388-helft-mir-bericht-internet-lahmt.html)

eftekhari 29.05.2005 22:04

Helft mir bei dem Bericht! Internet Lahmt!
 
Hallo, ich habe das Problem das mein internet auf modem nievau gesunken ist, hab aber dsl breitband...

nun hab ich mit escan diesen Bericht, könnt ihr mir da weiterhelfen?


Sun May 29 22:42:12 2005 => ***** Scanning complete. *****
Sun May 29 22:42:12 2005 => Total Objects Scanned: 85741
Sun May 29 22:42:12 2005 => Total Virus(es) Found: 10
Sun May 29 22:42:12 2005 => Total Disinfected Files: 0
Sun May 29 22:42:12 2005 => Total Files Renamed: 0
Sun May 29 22:42:12 2005 => Total Deleted Objects: 0
Sun May 29 22:42:12 2005 => Total Errors: 26
Sun May 29 22:42:12 2005 => Time Elapsed: 01:30:50
Sun May 29 22:42:12 2005 => Virus Database Date: 2005/05/29
Sun May 29 22:42:12 2005 => Virus Database Count: 132232

Sun May 29 22:42:12 2005 => Scan Completed.

Object "Alexa Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKCR\CLSID\{878137C3-9DAC-4A48-9625-78A054E86C1E}" refers to invalid object "d:\Programme\F-Secure Internet Security\FSPC\fspcmsie.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{92FA2C24-253C-11d2-90FB-006008A1F441}" refers to invalid object "a3dapi.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A7FC740A-AC46-46D2-9262-E368D619AD17}" refers to invalid object "d:\Programme\F-Secure Internet Security\FSPC\fspcmsie.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C459289E-2150-486B-8556-12C706799CAC}" refers to invalid object "d:\Programme\F-Secure Internet Security\FSPC\fspcmsie.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CF06A44B-19DA-4EAC-B7CF-4AB0198DD959}" refers to invalid object "d:\Programme\F-Secure Internet Security\FSPC\fspcmsie.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D68926FD-18FD-4B0E-A1C7-917D13FAB760}" refers to invalid object "d:\Programme\F-Secure Internet Security\FSPC\fspcmsie.dll". Action Taken: No Action Taken.
Entry "HKCR\MailFileAtt" refers to invalid object "{00020D05-0000-0000-C000-000000000046}". Action Taken: No Action Taken.
Entry "HKCR\mapifvbx.object" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.
Entry "HKCR\mapifvbx.object.1" refers to invalid object "{41116C00-8B90-101B-96CD-00AA003B14FC}". Action Taken: No Action Taken.
Entry "HKCR\SpyDoctor.EBankProblem" refers to invalid object "{AE612304-E8F9-45D9-A444-32409D33E954}". Action Taken: No Action Taken.
Entry "HKCR\SpyDoctor.QuarantinedItemProxy" refers to invalid object "{C2CE6266-0404-4C54-96B4-8829852E3537}". Action Taken: No Action Taken.
Entry "HKCR\SpyDoctor.ScripterProxy" refers to invalid object "{9FEF02F5-B3B8-4D7B-8939-72A1C989D1B9}". Action Taken: No Action Taken.
File C:\WINDOWS\htpatch.exe tagged as not-a-virus:Tool.Win32.HTPatch.a. No Action Taken.
File C:\Programme\BitTorrent\uninstall.exe tagged as not-a-virus:Tool.Win32.Processor.1001. No Action Taken.
File C:\RECYCLER\S-1-5-21-606747145-1383384898-854245398-1003\Dc1.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken.
File C:\RECYCLER\S-1-5-21-606747145-1383384898-854245398-1003\Dc5.exe tagged as not-a-virus:Tool.Win32.Processor.1001. No Action Taken.
File C:\WINDOWS\htpatch.exe tagged as not-a-virus:Tool.Win32.HTPatch.a. No Action Taken.
File C:\WINDOWS\system32\Tools\Restart.exe tagged as not-a-virus:Tool.Win32.Destart. No Action Taken.
File D:\Recycled\Dd47\Setup.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File D:\Recycled\Dd48.zip tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File D:\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken.

eftekhari 30.05.2005 09:42

hallo, hat keiner eine Antwort? das ist sehr dringend.

MFG

eftekhari 30.05.2005 10:00

Logfile of HijackThis v1.99.1
Scan saved at 11:00:03, on 30.05.2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Java\jre1.5.0_02\bin\jusched.exe
C:\WINDOWS\System32\ctfmon.exe
d:\Programme\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\hijackthis\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [KAVPersonal50] "d:\Programme\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O8 - Extra context menu item: &Google Search - res://C:\Programme\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://C:\Programme\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Verweisseiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/2863d085...dxIE601_de.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1115496421602
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/ms...downloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8DC36E41-BE90-450F-9195-921B6CD1EA54}: NameServer = 213.191.92.82 213.191.74.11
O23 - Service: ewido security suite control - ewido networks - d:\Programme\ewido\security suite\ewidoctrl.exe
O23 - Service: kavsvc - Kaspersky Lab - d:\Programme\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

high.society 30.05.2005 14:50

Windows Update machen. (bzw. Internet Explorer updaten)

Das fixxen:

O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)

Sonst wüßte ich auch net

eftekhari 30.05.2005 15:08

hallo,
mein internet ist so langsam das ich 8 stunden bräuchte um mir sp2 runterzuladen...das muss doch ein schwerwiegendes problem sein...

MFG

high.society 30.05.2005 17:49

Hmm dann hol dir ne ordentliche Firewall

chaosman 30.05.2005 18:10

@eftekhari
sp2 auf cd
http://www.microsoft.com/windowsxp/d...e/default.mspx

chaosman


Alle Zeitangaben in WEZ +1. Es ist jetzt 14:48 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131