![]() |
wie bekomme ich meine pop-ups weg? Kann mir jemand mal dies bitte auswerten. Ich bekomme immer pop-ups DANKE C:\Windows\System32\smss.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\spoolsv.exe C:\COMPAQ\ACLIENT\ACLIENT.exe C:\Programme\AspenTech\BPE\AfwSecCliSvc.exe C:\Programme\Symantec\pcAnywhere\awhost32.exe C:\Programme\Compaq\Compaq Management Agents\cpqalert.exe C:\Windows\Cpqdiag\Cpqdfwag.exe C:\PROGRA~1\Compaq\COMPAQ~1\CPQWEB~1\WebDmi.exe C:\Programme\NavNT\defwatch.exe C:\Programme\lotus\notes\ntmulti.exe C:\Windows\System32\NMSSvc.exe Shared\Portmapper\portserv.exe C:\Programme\NavNT\rtvscan.exe C:\Programme\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe C:\PROGRA~1\Compaq\COMPAQ~1\cpqdmi.exe C:\Programme\miniFaktura\DB-Server\bin\delserv.exe C:\Windows\system32\rundll32.exe C:\Windows\Explorer.EXE C:\Programme\Analog Devices\SoundMAX\Smtray.exe C:\Windows\system32\PROMon.exe C:\Programme\NavNT\vptray.exe C:\Windows\system32\dla\tfswctrl.exe C:\Programme\HP CD-DVD\Umbrella\hpcdtray.exe C:\PROGRA~1\HPCD-D~1\Umbrella\DVDTray.exe C:\Windows\system32\ctfmon.exe C:\Programme\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe C:\Programme\Messenger\msmsgs.exe C:\Programme\Adobe\Acrobat 6.0\Distillr\acrotray.exe C:\Programme\FRITZ!\IWatch.exe C:\Programme\RegFreeze\regfreeze.exe C:\hijackthis\HijackThis.exe C:\Programme\Internet Explorer\iexplore.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://www.google.de/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://www.google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = h**p://go.compaq.com/1Q00CDT/0407/bl8.asp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://go.compaq.com/1Q00CDT/0407/bl7.asp R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy:3128 O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe O4 - HKLM\..\Run: [Smapp] C:\Programme\Analog Devices\SoundMAX\Smtray.exe O4 - HKLM\..\Run: [PROMon.exe] PROMon.exe O4 - HKLM\..\Run: [vptray] C:\Programme\NavNT\vptray.exe O4 - HKLM\..\Run: [dla] C:\Windows\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [DVDBitSet] "C:\Programme\HP CD-DVD\Umbrella\DVDBitSet.exe" /NOUI O4 - HKLM\..\Run: [HPCDTray] "C:\Programme\HP CD-DVD\Umbrella\hpcdtray.exe" O4 - HKLM\..\Run: [DVDTray] "C:\PROGRA~1\HPCD-D~1\Umbrella\DVDTray.exe" O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe O4 - HKLM\..\RunServices: [CPQDFWAG] C:\Windows\Cpqdiag\CpqDfwAg.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\Windows\system32\ctfmon.exe O4 - HKCU\..\Run: [pdfSaver3] "C:\Programme\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - Startup: RegFreeze.lnk = C:\Programme\RegFreeze\regfreeze.exe O4 - Global Startup: Acrobat Assistant.lnk = C:\Programme\Adobe\Acrobat 6.0\Distillr\acrotray.exe O4 - Global Startup: ISDNWatch.lnk = C:\Programme\FRITZ!\IWatch.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Subscribe in Desktop Sidebar - res://C:\Programme\Desktop Sidebar\sbhelp.dll/menuhandler.html O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Programme\Desktop Sidebar\sbhelp.dll O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Programme\Desktop Sidebar\sbhelp.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - X:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - X:\Programme\ICQLite\ICQLite.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - h**p://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://h**p://by17fd.bay17.hotmail.m...s/MsnPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - h**p://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126959352671 O16 - DPF: {AFAB176A-0D25-436A-8555-286F6D7AA388} (CRegFreezeScanModule Object) - h**p://www.actualresearch.com/de/files/rfscanax.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{103E6DB9-F03A-41DA-ABE4-CAEAA3AFBBCA}: NameServer = 192.168.120.252,192.168.120.253 O17 - HKLM\System\CCS\Services\Tcpip\..\{3313043D-94D6-4195-913D-3307B47A5485}: NameServer = 192.36.66.36 O17 - HKLM\System\CCS\Services\Tcpip\..\{80B6DE33-3808-4FD7-87FF-29E448713087}: NameServer = 10.3.60.28,10.3.10.30,10.3.10.31 O17 - HKLM\System\CS1\Services\Tcpip\..\{103E6DB9-F03A-41DA-ABE4-CAEAA3AFBBCA}: NameServer = 192.168.120.252,192.168.120.253 O17 - HKLM\System\CS2\Services\Tcpip\..\{103E6DB9-F03A-41DA-ABE4-CAEAA3AFBBCA}: NameServer = 192.168.120.252,192.168.120.253 O20 - Winlogon Notify: Explorer - C:\Windows\system32\mv8ol9l31.dll O20 - Winlogon Notify: igfxcui - C:\Windows\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: NavLogon - C:\Windows\System32\NavLogon.dll O20 - Winlogon Notify: PCANotify - C:\Windows\SYSTEM32\PCANotify.dll O20 - Winlogon Notify: ShellScrap - C:\Windows\ O23 - Service: Altiris Client-Dienst (AClient) - Altiris, Inc. - C:\COMPAQ\ACLIENT\ACLIENT.exe O23 - Service: pcAnywhere Host-Modul (awhost32) - Symantec Corporation - C:\Programme\Symantec\pcAnywhere\awhost32.exe O23 - Service: Compaq Local Alerter (CPQALERT) - Compaq Computer Corporation - C:\Programme\Compaq\Compaq Management Agents\cpqalert.exe O23 - Service: Compaq Remote Diagnostics Enabling Agent (CpqDfwWebAgent) - Compaq Computer Corporation - C:\Windows\Cpqdiag\Cpqdfwag.exe O23 - Service: cpqdmi - Compaq Computer Corporation - C:\PROGRA~1\Compaq\COMPAQ~1\cpqdmi.exe O23 - Service: Compaq DMI Web Agent (cpqWebDmi) - Compaq Computer Corporation - C:\PROGRA~1\Compaq\COMPAQ~1\CPQWEB~1\WebDmi.exe O23 - Service: DefWatch - Symantec Corporation - C:\Programme\NavNT\defwatch.exe O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\Programme\lotus\notes\ntmulti.exe O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\Windows\System32\NMSSvc.exe O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Programme\NavNT\rtvscan.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm12.exe O23 - Service: Win32Sl (WIN32SL) - Intel - C:\Programme\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe |
Hallo magister, sorry, die headline fehlt. Welches Betriebssystem, welcher Browser, welche SP ??? Grüße joeyblack :) _____________________________________________________ Wer eine Frage stellt verpflichtet sich, der Antwort zuzuhören ! |
Ich hoffe, daß ich nun alles gepostet habe. gruß magister Logfile of HijackThis v1.99.1 [edit] bitte editiere zukünftig deine links, wie es dir u.a. hier angezeigt wird: http://www.trojaner-board.de/showpost.php?p=171957&postcount=1 danke GUA [/edit] |
Hallo, zweiter Versuch. Ich hoffe, daß ich es nun richtig poste. Logfile of HijackThis v1.99.1 Scan saved at 09:49:04, on 28.10.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\Windows\System32\smss.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\spoolsv.exe C:\COMPAQ\ACLIENT\ACLIENT.exe C:\Programme\AspenTech\BPE\AfwSecCliSvc.exe C:\Programme\Symantec\pcAnywhere\awhost32.exe C:\Programme\Compaq\Compaq Management Agents\cpqalert.exe C:\Windows\Cpqdiag\Cpqdfwag.exe C:\PROGRA~1\Compaq\COMPAQ~1\CPQWEB~1\WebDmi.exe C:\Programme\NavNT\defwatch.exe C:\Programme\miniFaktura\DB-Server\bin\delguard.exe C:\Programme\lotus\notes\ntmulti.exe C:\Windows\System32\NMSSvc.exe C:\Programme\NavNT\rtvscan.exe C:\Programme\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe C:\PROGRA~1\Compaq\COMPAQ~1\cpqdmi.exe C:\Programme\miniFaktura\DB-Server\bin\delserv.exe C:\Windows\system32\rundll32.exe C:\Windows\Explorer.EXE C:\Programme\Analog Devices\SoundMAX\Smtray.exe C:\Windows\system32\PROMon.exe C:\Programme\NavNT\vptray.exe C:\Windows\system32\dla\tfswctrl.exe C:\Programme\HP CD-DVD\Umbrella\hpcdtray.exe C:\PROGRA~1\HPCD-D~1\Umbrella\DVDTray.exe C:\Windows\system32\ctfmon.exe C:\Programme\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe C:\Programme\Messenger\msmsgs.exe C:\Programme\Spybot - Search & Destroy\TeaTimer.exe C:\Programme\Adobe\Acrobat 6.0\Distillr\acrotray.exe C:\Programme\FRITZ!\IWatch.exe C:\Programme\RegFreeze\regfreeze.exe X:\eMule.de\emule.exe C:\Programme\Hummingbird\Connectivity\10.00\Exceed\exceed.exe C:\Programme\Microsoft Office\OFFICE11\WINPROJ.EXE C:\Programme\Desktop Sidebar\dsidebar.exe C:\Programme\MSN Messenger\msnmsgr.exe X:\Programme\ICQLite\ICQLite.exe C:\Programme\Mindjet\MindManager 5\MindManager.exe C:\Programme\Windows Media Player\wmplayer.exe C:\Programme\lotus\notes\NLNOTES.EXE C:\Programme\lotus\notes\ntaskldr.EXE C:\Programme\lotus\notes\nxpcdmn.EXE C:\Programme\Internet Explorer\iexplore.exe C:\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://www.google.de/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://www.google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = h**p://go.compaq.com/1Q00CDT/0407/bl8.asp R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://go.compaq.com/1Q00CDT/0407/bl7.asp R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy:3128 O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe O4 - HKLM\..\Run: [Smapp] C:\Programme\Analog Devices\SoundMAX\Smtray.exe O4 - HKLM\..\Run: [PROMon.exe] PROMon.exe O4 - HKLM\..\Run: [vptray] C:\Programme\NavNT\vptray.exe O4 - HKLM\..\Run: [dla] C:\Windows\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [DVDBitSet] "C:\Programme\HP CD-DVD\Umbrella\DVDBitSet.exe" /NOUI O4 - HKLM\..\Run: [HPCDTray] "C:\Programme\HP CD-DVD\Umbrella\hpcdtray.exe" O4 - HKLM\..\Run: [DVDTray] "C:\PROGRA~1\HPCD-D~1\Umbrella\DVDTray.exe" O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe O4 - HKLM\..\RunServices: [CPQDFWAG] C:\Windows\Cpqdiag\CpqDfwAg.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\Windows\system32\ctfmon.exe O4 - HKCU\..\Run: [pdfSaver3] "C:\Programme\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe O4 - Startup: RegFreeze.lnk = C:\Programme\RegFreeze\regfreeze.exe O4 - Global Startup: Acrobat Assistant.lnk = C:\Programme\Adobe\Acrobat 6.0\Distillr\acrotray.exe O4 - Global Startup: ISDNWatch.lnk = C:\Programme\FRITZ!\IWatch.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Subscribe in Desktop Sidebar - res://C:\Programme\Desktop Sidebar\sbhelp.dll/menuhandler.html O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Programme\Desktop Sidebar\sbhelp.dll O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Programme\Desktop Sidebar\sbhelp.dll O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - X:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - X:\Programme\ICQLite\ICQLite.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - h**p://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - h**p://by17fd.bay17.hotmail.msn.com/resources/MsnPUpld.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - h**p://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126959352671 O16 - DPF: {AFAB176A-0D25-436A-8555-286F6D7AA388} (CRegFreezeScanModule Object) - h**p://www.actualresearch.com/de/files/rfscanax.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - h**p://messenger.msn.com/download/MsnMessengerSetupDownloader.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{103E6DB9-F03A-41DA-ABE4-CAEAA3AFBBCA}: NameServer = 192.168.120.252,192.168.120.253 O17 - HKLM\System\CCS\Services\Tcpip\..\{3313043D-94D6-4195-913D-3307B47A5485}: NameServer = 192.36.66.36 O17 - HKLM\System\CS1\Services\Tcpip\..\{103E6DB9-F03A-41DA-ABE4-CAEAA3AFBBCA}: NameServer = 192.168.120.252,192.168.120.253 O17 - HKLM\System\CS2\Services\Tcpip\..\{103E6DB9-F03A-41DA-ABE4-CAEAA3AFBBCA}: NameServer = 192.168.120.252,192.168.120.253 O20 - Winlogon Notify: igfxcui - C:\Windows\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: NavLogon - C:\Windows\System32\NavLogon.dll O20 - Winlogon Notify: PCANotify - C:\Windows\SYSTEM32\PCANotify.dll O20 - Winlogon Notify: ShellScrap - C:\Windows\ O20 - Winlogon Notify: Unimodem - C:\Windows\system32\n6n6lg5s16.dll O23 - Service: Altiris Client-Dienst (AClient) - Altiris, Inc. - C:\COMPAQ\ACLIENT\ACLIENT.exe O23 - Service: pcAnywhere Host-Modul (awhost32) - Symantec Corporation - C:\Programme\Symantec\pcAnywhere\awhost32.exe O23 - Service: Compaq Local Alerter (CPQALERT) - Compaq Computer Corporation - C:\Programme\Compaq\Compaq Management Agents\cpqalert.exe O23 - Service: Compaq Remote Diagnostics Enabling Agent (CpqDfwWebAgent) - Compaq Computer Corporation - C:\Windows\Cpqdiag\Cpqdfwag.exe O23 - Service: cpqdmi - Compaq Computer Corporation - C:\PROGRA~1\Compaq\COMPAQ~1\cpqdmi.exe O23 - Service: Compaq DMI Web Agent (cpqWebDmi) - Compaq Computer Corporation - C:\PROGRA~1\Compaq\COMPAQ~1\CPQWEB~1\WebDmi.exe O23 - Service: DefWatch - Symantec Corporation - C:\Programme\NavNT\defwatch.exe O23 - Service: deltra Database Guardian (deltraDBGuard) - Unknown owner - C:\Programme\miniFaktura\DB-Server\bin\delguard.exe O23 - Service: deltra Database Server (deltraDBServer) - The Firebird Project - C:\Programme\miniFaktura\DB-Server\bin\delserv.exe O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\Programme\lotus\notes\ntmulti.exe O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\Windows\System32\NMSSvc.exe O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Programme\NavNT\rtvscan.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPZipm12.exe O23 - Service: Win32Sl (WIN32SL) - Intel - C:\Programme\Compaq\Compaq Management Agents\Dmi\Win32\bin\Win32sl.exe |
Alle Zeitangaben in WEZ +1. Es ist jetzt 01:47 Uhr. |
Copyright ©2000-2025, Trojaner-Board