trojaner? wer kann helfen
So habe mir glaube ich was eingefangen undzwar wenn ich Windows Starte ist die windows Startleiste 1sek. zu sehen und dann verschwindet sie wieder und das geht dann im Intervall jede 3sek. taucht sie auf und verschwindet wieder. Dannach öffnet sich so eine dumme Seite. habe den Link jetzt nicht füge ich später ein. Dann habe ich es auch versucht über taskmanager die explorer.exe neu zu starten bringt auch nix Intervall bleibt vorhanden. Was mir aufgefallen ist, ist das ich 6 svchost.exen habe und eine davon mit einer Auslastung von 17.008k, wenn ich die dann beende und explorer neu starte funzt auch alles mit dem explorer aber das inet will dann nicht mehr so richtig habe hier mein hijackthislog : Code:
Logfile of HijackThis v1.99.1
Scan saved at 21:10:09, on 07.06.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\UPHClean\uphclean.exe
C:\WINDOWS\Mixer.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Programme\WinRAR\WinRAR.exe
C:\WINDOWS\system32\wuauclt.exe
C:\DOKUME~1\son^c\LOKALE~1\Temp\Rar$EX00.750\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.telefonsparbuch.de/tmpl/calc/telephone/std/simple/index.htm?type=Telephone&show_ads=1&show_info=1&jscript=1&FORM=simple&READ_CACHE=1&zoneS=e&day=WEEK&time=24DAY&AREA=&submit=Anfrage+senden
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O1 - Hosts: 195.122.131.3 dl1vsnl.rapidshare.com
O1 - Hosts: 195.122.131.3 dl1cg.rapidshare.com
O1 - Hosts: 195.122.131.3 dl1cg2.rapidshare.com
O1 - Hosts: 195.122.131.3 dl1l32.rapidshare.com
O1 - Hosts: 195.122.131.3 dl1gc.rapidshare.com
O1 - Hosts: 195.122.131.3 dl1tl2.rapidshare.com
O1 - Hosts: 195.122.131.3 dl1tl.rapidshare.com
O1 - Hosts: 195.122.131.5 dl2vsnl.rapidshare.com
O1 - Hosts: 195.122.131.5 dl2cg.rapidshare.com
O1 - Hosts: 195.122.131.5 dl2cg2.rapidshare.com
O1 - Hosts: 195.122.131.5 dl2l32.rapidshare.com
O1 - Hosts: 195.122.131.5 dl2gc.rapidshare.com
O1 - Hosts: 195.122.131.5 dl2tl2.rapidshare.com
O1 - Hosts: 195.122.131.5 dl2tl.rapidshare.com
O1 - Hosts: 195.122.131.7 dl3vsnl.rapidshare.com
O1 - Hosts: 195.122.131.7 dl3cg.rapidshare.com
O1 - Hosts: 195.122.131.7 dl3cg2.rapidshare.com
O1 - Hosts: 195.122.131.7 dl3l32.rapidshare.com
O1 - Hosts: 195.122.131.7 dl3gc.rapidshare.com
O1 - Hosts: 195.122.131.7 dl3tl2.rapidshare.com
O1 - Hosts: 195.122.131.7 dl3tl.rapidshare.com
O1 - Hosts: 195.122.131.9 dl4vsnl.rapidshare.com
O1 - Hosts: 195.122.131.9 dl4cg.rapidshare.com
O1 - Hosts: 195.122.131.9 dl4cg2.rapidshare.com
O1 - Hosts: 195.122.131.9 dl4l32.rapidshare.com
O1 - Hosts: 195.122.131.9 dl4gc.rapidshare.com
O1 - Hosts: 195.122.131.9 dl4tl2.rapidshare.com
O1 - Hosts: 195.122.131.9 dl4tl.rapidshare.com
O1 - Hosts: 195.122.131.11 dl5vsnl.rapidshare.com
O1 - Hosts: 195.122.131.11 dl5cg.rapidshare.com
O1 - Hosts: 195.122.131.11 dl5cg2.rapidshare.com
O1 - Hosts: 195.122.131.11 dl5l32.rapidshare.com
O1 - Hosts: 195.122.131.11 dl5gc.rapidshare.com
O1 - Hosts: 195.122.131.11 dl5tl2.rapidshare.com
O1 - Hosts: 195.122.131.11 dl5tl.rapidshare.com
O1 - Hosts: 195.122.131.13 dl6vsnl.rapidshare.com
O1 - Hosts: 195.122.131.13 dl6cg.rapidshare.com
O1 - Hosts: 195.122.131.13 dl6cg2.rapidshare.com
O1 - Hosts: 195.122.131.13 dl6l32.rapidshare.com
O1 - Hosts: 195.122.131.13 dl6gc.rapidshare.com
O1 - Hosts: 195.122.131.13 dl6tl2.rapidshare.com
O1 - Hosts: 195.122.131.13 dl6tl.rapidshare.com
O1 - Hosts: 195.122.131.15 dl7vsnl.rapidshare.com
O1 - Hosts: 195.122.131.15 dl7cg.rapidshare.com
O1 - Hosts: 195.122.131.15 dl7cg2.rapidshare.com
O1 - Hosts: 195.122.131.15 dl7l32.rapidshare.com
O1 - Hosts: 195.122.131.15 dl7gc.rapidshare.com
O1 - Hosts: 195.122.131.15 dl7tl2.rapidshare.com
O1 - Hosts: 195.122.131.15 dl7tl.rapidshare.com
O1 - Hosts: 195.122.131.17 dl8vsnl.rapidshare.com
O1 - Hosts: 195.122.131.17 dl8cg.rapidshare.com
O1 - Hosts: 195.122.131.17 dl8cg2.rapidshare.com
O1 - Hosts: 195.122.131.17 dl8l32.rapidshare.com
O1 - Hosts: 195.122.131.17 dl8gc.rapidshare.com
O1 - Hosts: 195.122.131.17 dl8tl2.rapidshare.com
O1 - Hosts: 195.122.131.17 dl8tl.rapidshare.com
O1 - Hosts: 195.122.131.19 dl9vsnl.rapidshare.com
O1 - Hosts: 195.122.131.19 dl9cg.rapidshare.com
O1 - Hosts: 195.122.131.19 dl9cg2.rapidshare.com
O1 - Hosts: 195.122.131.19 dl9l32.rapidshare.com
O1 - Hosts: 195.122.131.19 dl9gc.rapidshare.com
O1 - Hosts: 195.122.131.19 dl9tl2.rapidshare.com
O1 - Hosts: 195.122.131.19 dl9tl.rapidshare.com
O1 - Hosts: 195.122.131.21 dl10vsnl.rapidshare.com
O1 - Hosts: 195.122.131.21 dl10cg.rapidshare.com
O1 - Hosts: 195.122.131.21 dl10cg2.rapidshare.com
O1 - Hosts: 195.122.131.21 dl10l32.rapidshare.com
O1 - Hosts: 195.122.131.21 dl10gc.rapidshare.com
O1 - Hosts: 195.122.131.21 dl10tl2.rapidshare.com
O1 - Hosts: 195.122.131.21 dl10tl.rapidshare.com
O1 - Hosts: 195.122.131.23 dl11vsnl.rapidshare.com
O1 - Hosts: 195.122.131.23 dl11cg.rapidshare.com
O1 - Hosts: 195.122.131.23 dl11cg2.rapidshare.com
O1 - Hosts: 195.122.131.23 dl11l32.rapidshare.com
O1 - Hosts: 195.122.131.23 dl11gc.rapidshare.com
O1 - Hosts: 195.122.131.23 dl11tl2.rapidshare.com
O1 - Hosts: 195.122.131.23 dl11tl.rapidshare.com
O1 - Hosts: 195.122.131.25 dl12vsnl.rapidshare.com
O1 - Hosts: 195.122.131.25 dl12cg.rapidshare.com
O1 - Hosts: 195.122.131.25 dl12cg2.rapidshare.com
O1 - Hosts: 195.122.131.25 dl12l32.rapidshare.com
O1 - Hosts: 195.122.131.25 dl12gc.rapidshare.com
O1 - Hosts: 195.122.131.25 dl12tl2.rapidshare.com
O1 - Hosts: 195.122.131.25 dl12tl.rapidshare.com
O1 - Hosts: 195.122.131.27 dl13vsnl.rapidshare.com
O1 - Hosts: 195.122.131.27 dl13cg.rapidshare.com
O1 - Hosts: 195.122.131.27 dl13cg2.rapidshare.com
O1 - Hosts: 195.122.131.27 dl13l32.rapidshare.com
O1 - Hosts: 195.122.131.27 dl13gc.rapidshare.com
O1 - Hosts: 195.122.131.27 dl13tl2.rapidshare.com
O1 - Hosts: 195.122.131.27 dl13tl.rapidshare.com
O1 - Hosts: 195.122.131.29 dl14vsnl.rapidshare.com
O1 - Hosts: 195.122.131.29 dl14cg.rapidshare.com
O1 - Hosts: 195.122.131.29 dl14cg2.rapidshare.com
O1 - Hosts: 195.122.131.29 dl14l32.rapidshare.com
O1 - Hosts: 195.122.131.29 dl14gc.rapidshare.com
O1 - Hosts: 195.122.131.29 dl14tl2.rapidshare.com
O1 - Hosts: 195.122.131.29 dl14tl.rapidshare.com
O1 - Hosts: 195.122.131.31 dl15vsnl.rapidshare.com
O1 - Hosts: 195.122.131.31 dl15cg.rapidshare.com
O1 - Hosts: 195.122.131.31 dl15cg2.rapidshare.com
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar3.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Programme\RivaTuner v2.0 Final Release\RivaTuner.exe" /S
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [iut75] c:\windows\system32\drivers\uzcx.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Programme\TuneUp Utilities 2007\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [swg] C:\Programme\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [QIP2005] C:\Programme\qip\qip.exe
O4 - Startup: ruhe.bat
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Mit dem LeechGet Wizard laden - file://C:\Programme\LeechGet 2006\\Wizard.html
O8 - Extra context menu item: Mit LeechGet herunterladen - file://C:\Programme\LeechGet 2006\\AddUrl.html
O8 - Extra context menu item: Mit LeechGet parsen - file://C:\Programme\LeechGet 2006\\Parser.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/DE-DE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSN Messenger\msgrapp.8.1.0178.00.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSN Messenger\msgrapp.8.1.0178.00.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\Skype4COM.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsmfs.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NBService - Nero AG - C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Unknown owner - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe (file missing)
ich hoffe ihr könnt mir helfen danke schon mal im voraus soni-c | 