Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Rechner ist Toal komisch! (https://www.trojaner-board.de/80770-rechner-toal-komisch.html)

V_V 25.12.2009 23:21

Rechner ist Toal komisch!
 
Huhu zusammen und in dem falle guten Abend. Ich wollte mal mein log posten zum auswerten da mein Computer zurzeit kommisch sachen macht, zb mein Internet ist total langsam oder mein Rechner 30 min braucht um was zu öffnen ich danke schonmal im vorraus :D :party: ich hoffe nich das ich mein system neu aufsetzten muss :schmoll:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:17:20, on 25.12.2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18865)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\explorer.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Microsoft Office\Office14\GROOVEMN.EXE
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
D:\Program Files\Steam\Steam.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: Shell=explorer.exe C:\Windows\explorer.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [GrooveMonitor] C:\PROGRA~1\MICROS~3\Office14\GROOVEMN.EXE
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Steam] "d:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ESL Wire] "C:\Program Files\EslWire\wire.exe" --tray
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Users\DiGGa\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: S&end to OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Linked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Linked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: SecretCity 3DChat - {D401C3A2-12EF-4D1D-A086-F3AB10B565BF} - E:\SECRET~1\\SECRET~1.EXE
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{BA4A82FD-674C-49F8-A385-D20F1D68EEA0}: NameServer = 192.168.0.11
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FSCLBaseUpdaterService - Unknown owner - C:\Program Files\Fujitsu Siemens Computers\FSCLounge\FSCWBaseUpdaterService\2\FSCWBaseUpdaterService.exe
O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: mental ray Standalone 3.6.1 for Autodesk Maya 2008 (32 bit) (MAYAMR361) - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: SPM License Service (SPMLM) - mental images GmbH - C:\Windows\system32\spm\spmd.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Unknown owner - D:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe

--
End of file - 9305 bytes

cosinus 26.12.2009 18:08

Hallo und :hallo:

Lade dir Lop S&D herunter.

Windows2000/XP: Führe Lop S&D.exe per Doppelklick aus.

Windows Vista und 7: Rechtsklick auf Lop S&D.exe => Ausführen als Admin!!

Wähle die Sprache deiner Wahl und anschließend die Option 1.
Warte bis der Scanbericht erstellt wird und poste ihn hier (Du findest ihn unter C:\lopR.txt, sollte der Bericht nicht erscheinen).

V_V 26.12.2009 21:50

Hehe danke für die freundliche begrüßung und hier der log


--------------------\\ Lop S&D 4.2.5-0 XP/Vista

Microsoft® Windows Vista™ Home Premium ( v6.0.6002 ) Service Pack 2
X86-based PC ( Multiprocessor Free : Intel(R) Core(TM)2 Quad CPU Q9300 @ 2.50GHz )
BIOS : Default System BIOS
USER : DiGGa ( Administrator )
BOOT : Normal boot
Antivirus : Norman Security Suite ver. 7.00 7.00 (Not Activated)
C:\ (Local Disk) - NTFS - Total:459 Go (Free:252 Go)
D:\ (Local Disk) - NTFS - Total:698 Go (Free:463 Go)
E:\ (Local Disk) - NTFS - Total:230 Go (Free:119 Go)
F:\ (CD or DVD) - CDFS - Total:3 Go (Free:0 Go)
G:\ (USB)
H:\ (USB)
I:\ (USB)
J:\ (USB)
K:\ (USB)
L:\ (CD or DVD)
M:\ (CD or DVD)
N:\ (CD or DVD)

"C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
Option : [1] ( 26.12.2009|21:43 )

[ UAC => 1 ]

--------------------\\ Ordner Verzeichnis unter Local

[01.09.2009|12:43] C:\Users\DiGGa\AppData\Local\Adobe
[22.08.2009|10:16] C:\Users\DiGGa\AppData\Local\Anwendungsdaten
[23.08.2009|22:08] C:\Users\DiGGa\AppData\Local\Apple
[23.08.2009|22:11] C:\Users\DiGGa\AppData\Local\Apple Computer
[26.10.2009|19:58] C:\Users\DiGGa\AppData\Local\ApplicationHistory
[08.09.2009|06:04] C:\Users\DiGGa\AppData\Local\assembly
[24.11.2009|22:50] C:\Users\DiGGa\AppData\Local\d3d9caps.dat
[13.12.2009|04:49] C:\Users\DiGGa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[26.12.2009|16:06] C:\Users\DiGGa\AppData\Local\ESL Wire Game Client
[07.09.2009|22:50] C:\Users\DiGGa\AppData\Local\fusioncache.dat
[05.11.2009|04:29] C:\Users\DiGGa\AppData\Local\GDIPFONTCACHEV1.DAT
[22.08.2009|11:08] C:\Users\DiGGa\AppData\Local\Google
[26.12.2009|04:25] C:\Users\DiGGa\AppData\Local\IconCache.db
[19.09.2009|16:48] C:\Users\DiGGa\AppData\Local\id Software
[22.12.2009|23:43] C:\Users\DiGGa\AppData\Local\Microsoft
[17.11.2009|15:04] C:\Users\DiGGa\AppData\Local\Microsoft Games
[05.10.2009|04:37] C:\Users\DiGGa\AppData\Local\Microsoft Help
[22.08.2009|11:12] C:\Users\DiGGa\AppData\Local\Mozilla
[20.09.2009|16:25] C:\Users\DiGGa\AppData\Local\PunkBuster
[25.12.2009|17:00] C:\Users\DiGGa\AppData\Local\PUTTY.RND
[23.08.2009|20:36] C:\Users\DiGGa\AppData\Local\Sony
[23.08.2009|19:22] C:\Users\DiGGa\AppData\Local\TechSmith
[26.12.2009|21:42] C:\Users\DiGGa\AppData\Local\Temp
[22.08.2009|10:16] C:\Users\DiGGa\AppData\Local\Temporary Internet Files
[22.08.2009|10:16] C:\Users\DiGGa\AppData\Local\Verlauf
[27.08.2009|21:43] C:\Users\DiGGa\AppData\Local\VirtualStore
[6|Datei(en),] C:\Users\DiGGa\AppData\Local\Bytes
[22|Verzeichnis(se),] C:\Users\DiGGa\AppData\Local\Bytes frei

--------------------\\ Geplante Aufgaben unter C:\Windows\Tasks

[26.12.2009 21:00][--a------] C:\Windows\tasks\1-Klick-Wartung.job
[26.12.2009 21:42][--ah-----] C:\Windows\tasks\User_Feed_Synchronization-{B2F99C90-7E55-4396-ABD1-6883B44F22AB}.job
[26.12.2009 11:27][--ah-----] C:\Windows\tasks\SA.DAT
[26.12.2009 04:25][--a------] C:\Windows\tasks\SCHEDLGU.TXT

--------------------\\ Ordner Verzeichnis unter C:\ProgramData

[01.09.2009|01:15] C:\ProgramData\{55A29068-F2CE-456C-9148-C869879E2357}
[20.11.2009|17:13] C:\ProgramData\Adobe
[16.11.2009|17:54] C:\ProgramData\afl.log
[27.08.2009|14:34] C:\ProgramData\ALM
[22.08.2009|10:07] C:\ProgramData\Anwendungsdaten
[23.08.2009|22:08] C:\ProgramData\Apple
[20.11.2009|22:43] C:\ProgramData\Apple Computer
[02.11.2006|14:02] C:\ProgramData\Application Data
[22.08.2009|12:50] C:\ProgramData\Avira
[13.09.2009|06:48] C:\ProgramData\DAEMON Tools Pro
[02.11.2006|14:02] C:\ProgramData\Desktop
[02.11.2006|14:02] C:\ProgramData\Documents
[22.08.2009|10:07] C:\ProgramData\Dokumente
[30.10.2009|16:19] C:\ProgramData\Engelmann Media
[25.08.2009|10:18] C:\ProgramData\EPSON
[16.11.2009|23:32] C:\ProgramData\ESL Wire
[22.08.2009|10:07] C:\ProgramData\Favoriten
[02.11.2006|14:02] C:\ProgramData\Favorites
[26.08.2009|18:13] C:\ProgramData\FLEXnet
[22.08.2009|11:09] C:\ProgramData\Google
[30.10.2009|16:25] C:\ProgramData\Licenses
[23.10.2009|14:53] C:\ProgramData\MAGIX
[05.10.2009|04:44] C:\ProgramData\Microsoft
[27.10.2009|10:24] C:\ProgramData\Microsoft Help
[26.10.2009|21:16] C:\ProgramData\Minnetonka Audio Software
[29.08.2009|21:28] C:\ProgramData\Nero
[25.08.2009|06:47] C:\ProgramData\ntuser.pol
[16.07.2008|19:44] C:\ProgramData\NVIDIA
[27.10.2009|01:51] C:\ProgramData\SecTaskMan
[17.10.2009|02:50] C:\ProgramData\Skype
[23.08.2009|20:23] C:\ProgramData\Sony
[02.11.2006|14:02] C:\ProgramData\Start Menu
[22.08.2009|10:07] C:\ProgramData\Startmenü
[11.10.2009|23:21] C:\ProgramData\Steinberg
[08.10.2009|14:36] C:\ProgramData\TamoSoft
[23.08.2009|18:36] C:\ProgramData\TechSmith
[15.12.2009|19:53] C:\ProgramData\TEMP
[02.11.2006|14:02] C:\ProgramData\Templates
[22.12.2009|23:20] C:\ProgramData\THQ
[01.09.2009|01:16] C:\ProgramData\TuneUp Software
[20.11.2009|03:10] C:\ProgramData\Tunngle
[22.08.2009|10:07] C:\ProgramData\Vorlagen
[18.12.2009|19:13] C:\ProgramData\Xfire
[2|Datei(en),] C:\ProgramData\Bytes
[43|Verzeichnis(se),] C:\ProgramData\Bytes frei

--------------------\\ Ordner Verzeichnis unter C:\Program Files

[13.11.2009|11:27] C:\Program Files\Activision
[27.08.2009|17:01] C:\Program Files\Adobe
[28.08.2009|15:00] C:\Program Files\Adobe Media Player
[13.12.2009|09:56] C:\Program Files\AGEIA Technologies
[22.08.2009|10:11] C:\Program Files\Alice
[23.08.2009|22:08] C:\Program Files\Apple Software Update
[16.11.2009|22:52] C:\Program Files\Ashampoo
[06.10.2009|01:30] C:\Program Files\ASIO4ALL v2
[25.11.2009|21:12] C:\Program Files\Autodesk
[22.08.2009|12:50] C:\Program Files\Avira
[16.07.2008|19:33] C:\Program Files\BFG
[13.12.2009|09:55] C:\Program Files\Common Files
[22.08.2009|11:19] C:\Program Files\coolspot AG
[02.11.2009|21:39] C:\Program Files\DivX
[19.09.2009|17:54] C:\Program Files\EA GAMES
[16.09.2009|17:02] C:\Program Files\Elaborate Bytes
[05.09.2009|20:56] C:\Program Files\Electronic Arts
[25.08.2009|10:20] C:\Program Files\EPSON
[12.12.2009|13:57] C:\Program Files\EslWire
[22.08.2009|10:17] C:\Program Files\Fujitsu Siemens Computers
[07.09.2009|22:51] C:\Program Files\GCFScape
[22.08.2009|10:07] C:\Program Files\Gemeinsame Dateien [C:\Program Files\Common Files]
[22.08.2009|13:13] C:\Program Files\Google
[26.10.2009|22:19] C:\Program Files\HLSW
[22.08.2009|14:16] C:\Program Files\ICQ6.5
[06.10.2009|01:31] C:\Program Files\Image-Line
[30.10.2009|16:47] C:\Program Files\ImTOO
[01.10.2009|01:47] C:\Program Files\inKline Global
[22.12.2009|22:48] C:\Program Files\InstallShield Installation Information
[12.12.2009|18:36] C:\Program Files\Internet Explorer
[24.08.2009|06:55] C:\Program Files\Java
[22.08.2009|14:10] C:\Program Files\Microsoft
[05.10.2009|04:38] C:\Program Files\Microsoft Analysis Services
[02.11.2006|13:37] C:\Program Files\Microsoft Games
[22.12.2009|22:50] C:\Program Files\Microsoft Games for Windows - LIVE
[05.10.2009|04:40] C:\Program Files\Microsoft Office
[05.10.2009|04:40] C:\Program Files\Microsoft SQL Server Compact Edition
[05.10.2009|04:40] C:\Program Files\Microsoft Sync Framework
[05.10.2009|04:41] C:\Program Files\Microsoft Synchronization Services
[05.10.2009|04:39] C:\Program Files\Microsoft Visual Studio 8
[05.10.2009|04:40] C:\Program Files\Microsoft.NET
[17.09.2009|16:16] C:\Program Files\Movie Maker
[26.12.2009|02:52] C:\Program Files\Mozilla Firefox
[05.10.2009|04:42] C:\Program Files\MSBuild
[22.08.2009|11:04] C:\Program Files\MSXML 4.0
[25.09.2009|18:48] C:\Program Files\Mumble
[08.09.2009|05:55] C:\Program Files\NCsoft
[29.08.2009|21:34] C:\Program Files\Nero
[22.08.2009|12:30] C:\Program Files\Norman
[06.10.2009|01:30] C:\Program Files\Outsim
[20.12.2009|04:41] C:\Program Files\PokerTH
[02.11.2006|13:37] C:\Program Files\Reference Assemblies
[24.10.2009|02:27] C:\Program Files\Security Task Manager
[17.10.2009|02:50] C:\Program Files\Skype
[19.09.2009|10:44] C:\Program Files\Spark Unlimited
[22.12.2009|20:04] C:\Program Files\TeamSpeak 3 Client
[22.12.2009|21:01] C:\Program Files\TeamViewer
[23.08.2009|18:36] C:\Program Files\TechSmith
[25.12.2009|23:17] C:\Program Files\Trend Micro
[06.12.2009|18:35] C:\Program Files\TuneUp Utilities 2009
[17.09.2009|01:08] C:\Program Files\Tunngle
[02.11.2006|14:01] C:\Program Files\Uninstall Information
[07.09.2009|19:59] C:\Program Files\VideoLAN
[14.09.2009|20:15] C:\Program Files\VirtualDJ
[22.12.2009|22:36] C:\Program Files\Volition Inc
[06.10.2009|01:31] C:\Program Files\VstPlugins
[20.11.2009|03:07] C:\Program Files\Warcraft III
[15.09.2009|18:20] C:\Program Files\Winamp
[17.09.2009|16:16] C:\Program Files\Windows Calendar
[17.09.2009|16:16] C:\Program Files\Windows Collaboration
[17.09.2009|16:15] C:\Program Files\Windows Defender
[17.09.2009|16:16] C:\Program Files\Windows Journal
[22.08.2009|14:10] C:\Program Files\Windows Live
[22.08.2009|14:10] C:\Program Files\Windows Live SkyDrive
[12.12.2009|18:36] C:\Program Files\Windows Mail
[28.10.2009|03:16] C:\Program Files\Windows Media Player
[22.08.2009|10:07] C:\Program Files\Windows NT
[17.09.2009|16:16] C:\Program Files\Windows Photo Gallery
[17.11.2009|12:09] C:\Program Files\Windows Portable Devices
[17.09.2009|16:16] C:\Program Files\Windows Sidebar
[22.08.2009|12:46] C:\Program Files\WinRAR
[23.10.2009|02:46] C:\Program Files\WinSCP
[04.12.2009|18:28] C:\Program Files\Xfire
[08.10.2009|13:05] C:\Program Files\Zero G Registry
[13.11.2009|18:16] C:\Program Files\ZModeler
[0|Datei(en),] C:\Program Files\Bytes
[87|Verzeichnis(se),] C:\Program Files\Bytes frei

--------------------\\ Ordner Verzeichnis unter C:\Program Files\Common Files

[19.11.2009|14:29] C:\Program Files\Common Files\Adobe
[28.08.2009|15:00] C:\Program Files\Common Files\Adobe AIR
[25.09.2009|14:48] C:\Program Files\Common Files\Apple
[05.10.2009|04:42] C:\Program Files\Common Files\DESIGNER
[03.11.2009|17:10] C:\Program Files\Common Files\DivX Shared
[22.08.2009|10:16] C:\Program Files\Common Files\Fujitsu Siemens Computers
[08.09.2009|06:16] C:\Program Files\Common Files\INCA Shared
[25.11.2009|21:11] C:\Program Files\Common Files\InstallShield
[25.09.2009|20:39] C:\Program Files\Common Files\LogoManager
[27.08.2009|14:07] C:\Program Files\Common Files\Macrovision Shared
[23.10.2009|14:53] C:\Program Files\Common Files\MAGIX Services
[23.10.2009|14:53] C:\Program Files\Common Files\microsoft shared
[29.08.2009|21:35] C:\Program Files\Common Files\Nero
[03.09.2009|22:29] C:\Program Files\Common Files\PX Storage Engine
[02.11.2006|12:18] C:\Program Files\Common Files\Services
[17.10.2009|02:50] C:\Program Files\Common Files\Skype
[02.11.2006|12:18] C:\Program Files\Common Files\SpeechEngines
[12.12.2009|19:23] C:\Program Files\Common Files\Steam
[05.10.2009|04:39] C:\Program Files\Common Files\System
[23.08.2009|18:36] C:\Program Files\Common Files\TechSmith Shared
[22.08.2009|14:07] C:\Program Files\Common Files\Windows Live
[13.12.2009|09:55] C:\Program Files\Common Files\Wise Installation Wizard
[0|Datei(en),] C:\Program Files\Common Files\Bytes
[24|Verzeichnis(se),] C:\Program Files\Common Files\Bytes frei

--------------------\\ Process

( 60 Processes )

... OK !

--------------------\\ Ueberpruefung mit S_Lop

Kein Lop Ordner gefunden !

--------------------\\ Suche nach Lop Dateien - Ordnern

C:\Users\DiGGa\AppData\Local\Temp\nsg43E4.tmp
C:\Users\DiGGa\AppData\Roaming\MICROS~1\Windows\Cookies\digga@advertising[2].txt

--------------------\\ Suche innerhalb der Registry

..... OK !

--------------------\\ Ueberpruefung der Hosts Datei

Hosts Datei SAUBER


--------------------\\ Suche nach verborgenen Dateien mit Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-12-26 21:43:43
Windows 6.0.6002 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------\\ Suche nach anderen Infektionen

--------------------\\ Cracks & Keygens ..

C:\Users\DiGGa\AppData\Roaming\Microsoft\Windows\Recent\Red.Faction.Guerrilla.CRACK.ONLY-RELOADED.lnk
C:\Users\DiGGa\AppData\Roaming\Microsoft\Windows\Recent\Wolfenstein-Razor1911.Crack.Only.lnk
C:\Users\DiGGa\Desktop\cubase\Cubase 5 – Advanced Music Production System_Portable\Setup Portable\VST3 Presets\Steinberg Media Technologies\StudioChorus\Chipmunks On Crack.vstpreset
C:\Users\DiGGa\Desktop\FRL\FLSRC3XXL\FL.Studio.8.RC3.Crack
C:\Users\DiGGa\Desktop\FRL\FLSRC3XXL\FL.Studio.8.RC3.Crack\FLRegkey.Reg
C:\Users\DiGGa\Desktop\Music Maker 16 Premium_inkl. Style Packs_Deutsch\Crack
C:\Users\DiGGa\Desktop\Music Maker 16 Premium_inkl. Style Packs_Deutsch\Crack\Anleitung.txt
C:\Users\DiGGa\Desktop\Music Maker 16 Premium_inkl. Style Packs_Deutsch\Crack\MusicMaker.exe
C:\Users\DiGGa\Documents\ImTOO Software Studio\3GP Video Converter\crack.js


[F:101][D:409]-> C:\Users\DiGGa\AppData\Local\Temp
[F:142][D:1]-> C:\Users\DiGGa\AppData\Roaming\MICROS~1\Windows\Cookies
[F:6169][D:13]-> C:\Users\DiGGa\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:9][D:3]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - 26.12.2009|21:45 - Option : [1]

--------------------\\ Scan beendet um 21:45:27
[ UAC => 1 ]

cosinus 26.12.2009 22:01

Zitat:

--------------------\\ Cracks & Keygens ..
C:\Users\DiGGa\Desktop\FRL\FLSRC3XXL\FL.Studio.8.RC3.Crack
C:\Users\DiGGa\Desktop\FRL\FLSRC3XXL\FL.Studio.8.RC3.Crack\FLRegkey.Reg
C:\Users\DiGGa\Desktop\Music Maker 16 Premium_inkl. Style Packs_Deutsch\Crack
C:\Users\DiGGa\Desktop\Music Maker 16 Premium_inkl. Style Packs_Deutsch\Crack\Anleitung.txt
C:\Users\DiGGa\Desktop\Music Maker 16 Premium_inkl. Style Packs_Deutsch\Crack\MusicMaker.exe
C:\Users\DiGGa\Documents\ImTOO Software Studio\3GP Video Converter\crack.js

Wer mit dem Feuer spielt, verbrennt sich die Finger!

Die (Be)nutzung von Cracks, Serials und Keygens ist illegal, somit gibt es im Trojaner-Board keinen weiteren Support mehr.

Für Dich geht es hier weiter => Neuaufsetzen des Systems
Bitte auch alle Passwörter abändern (für E-Mail-Konten, StudiVZ, Ebay...einfach alles!) da nicht selten in dieser dubiosen Software auch Keylogger und Backdoorfunktionen stecken.

Danach nie wieder sowas anrühren!

V_V 27.12.2009 06:01

ok trozdem danke :) bin ich wohl selber schuld super support hier :party:

cosinus 27.12.2009 15:43

Ja, wer sowas lädt und ausführt hat selber schuld. Dubiose Software fässt man nicht mal mit der Kneifzange an, wenn man Computerproblemen aus dem Weg gehen will! :rolleyes:

V_V 28.12.2009 18:22

da haste wohl recht :D trozedm danke :Boogie:


Alle Zeitangaben in WEZ +1. Es ist jetzt 08:25 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131