![]() |
was solln diese HKML dats im Log hi leute, ich hab irgendwie probleme mit dem PC... ich bekomme ab u zu solche fehlermeldungen v. a248.e.akamai.net-- der sagt mir das ich eventuell belauscht werde!? ich poste gleich mal den Logfile dazu vllt. findet jmd von euch was! da dacht ich mir mal ich lass euch profis mal ran! ------------------------------------------------------------------------ Logfile of HijackThis v1.99.1 Scan saved at 00:27:05, on 24.12.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ASWLSVC.exe C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe C:\WINDOWS\system32\cisvc.exe C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe C:\WINDOWS\Explorer.EXE C:\Programme\ASUS\Power4 Gear\BatteryLife.exe C:\Programme\Java\jre1.6.0_03\bin\jusched.exe C:\Programme\Wireless Console 2\wcourier.exe C:\WINDOWS\ATK0100\HControl.exe C:\Programme\ASUS\WLAN Card Utilities\Center.exe C:\WINDOWS\RTHDCPL.EXE C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe C:\Programme\D-Link\AirPlus G\AirGCFG.exe C:\Programme\ANI\ANIWZCS2 Service\WZCSLDR2.exe C:\Programme\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe C:\WINDOWS\ATK0100\ATKOSD.exe C:\Programme\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\cidaemon.exe C:\Programme\Opera\Opera.exe C:\Programme\Trillian\trillian.exe C:\Programme\HijackThis\1_99_1.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.XXXXX R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://XXXXX/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http:/XXXXX/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://XXXXX R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://XXXXX R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - (no file) O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [Power_Gear] C:\Programme\ASUS\Power4 Gear\BatteryLife.exe 1 O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_03\bin\jusched.exe " O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [Wireless Console 2] C:\Programme\Wireless Console 2\wcourier.exe O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe O4 - HKLM\..\Run: [Control Center] C:\Programme\ASUS\WLAN Card Utilities\Center.exe O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [AVP] "C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Programme\D-Link\AirPlus G\AirGCFG.exe O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Programme\ANI\ANIWZCS2 Service\WZCSLDR2.exe O4 - Global Startup: ZDWLan Utility.lnk = C:\Programme\ZyDAS Technology Corporation\ZyDAS_802.11g_Utility\ZDWlan.exe O8 - Extra context menu item: Hinzufügen zu Kaspersky Anti-Banner - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Statistik für Web-Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.XXXXX.com/ O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.XXXXX.com/ O17 - HKLM\System\CCS\Services\Tcpip\..\{026C36DE-BCA7-4393-95F1-7E6E7E1B6452}: NameServer = 208.67.220.220,208.67.222.222 O17 - HKLM\System\CCS\Services\Tcpip\..\{0467AD82-E1E0-4773-B814-AE1F4BA60D8E}: NameServer = 85.255.114.68,85.255.112.69 O17 - HKLM\System\CCS\Services\Tcpip\..\{09F1E711-2FE9-4539-8C0E-2DBF5E7E3BF9}: NameServer = 85.255.114.68,85.255.112.69 O17 - HKLM\System\CCS\Services\Tcpip\..\{0A831B1F-0464-4245-A1C9-8663202524ED}: NameServer = 85.255.114.68,85.255.112.69 O17 - HKLM\System\CCS\Services\Tcpip\..\{1740127B-5CCD-483A-AA3D-DBA64C87A78E}: NameServer = 85.255.114.68,85.255.112.69 O17 - HKLM\System\CCS\Services\Tcpip\..\{24B10645-8CE9-4E9A-B69E-2A7AC7F53718}: NameServer = 85.255.114.68,85.255.112.69 O17 - HKLM\System\CCS\Services\Tcpip\..\{65CEDDB3-B285-4D4C-A930-A0F6038F71CD}: NameServer = 85.255.114.68,85.255.112.69 O17 - HKLM\System\CCS\Services\Tcpip\..\{88A48E87-1AC5-40C6-B4CE-C06F0E2814D5}: NameServer = 85.255.114.68,85.255.112.69 O17 - HKLM\System\CCS\Services\Tcpip\..\{AF22ED2E-BB89-45A5-A140-E51D94C24DA0}: NameServer = 85.255.114.68,85.255.112.69 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222 O17 - HKLM\System\CS1\Services\Tcpip\..\{026C36DE-BCA7-4393-95F1-7E6E7E1B6452}: NameServer = 208.67.220.220,208.67.222.222 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222 O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\MSOXMLMF.DL L O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Programme\ANI\ANIWZCS2 Service\ANIWZCSdS.exe O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Unknown owner - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r (file missing) O23 - Service: Haufe iDesk-Service in C:\Programme\Haufe\iDesk\iDeskService\Zope (HRService) - Unknown owner - C:\Programme\Haufe\iDesk\iDeskService\iDeskService .exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Programme\SiSoftware\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Programme\SiSoftware\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe O23 - Service: ServiceLayer - Nokia. - C:\Programme\PC Connectivity Solution\ServiceLayer.exe O23 - Service: TuneUp Drive Defrag-Dienst (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe ------------------------------------------------------------------------ danke euch! was sollen diese NAmenserver? ist das der anbieter? Frohe Weihnachten u nen fleißigen Weihnachtsmann!! |
Moin. Code: O17 - HKLM\System\CCS\Services\Tcpip\..\{0467AD82-E1E0-4773-B814-AE1F4BA60D8E}: NameServer = 85.255.114.68,85.255.112.69 Zitat:
Geh erst wieder ins Internet wenn zumindest das SP2 offline eingespielt wurde. |
Zitat:
das ist jakeine gute nachricht! weißt was dieser schädling anrichtet? nützt es was wenn ich diese files fixe? Sp2 hab ich komischer weise schon drauf! hmm... gruß wünsch dir noch nen schönen Heiligabend! |
Alle Zeitangaben in WEZ +1. Es ist jetzt 15:43 Uhr. |
Copyright ©2000-2025, Trojaner-Board