![]() |
naupoint-Seuche im IE Hallo zusammen, bin neu hier - endlich hat es mich auch mal erwischt: Mein IE ist mit naupoint verseucht. Alle Löschversuche in der Registry waren erfolglos. BITTE helft mir: Logfile of HijackThis v1.98.2 Scan saved at 18:09:26, on 21.11.2004 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe C:\WINDOWS\Explorer.EXE C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLDial.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe C:\Programme\ICQLite\ICQLite.exe C:\Programme\AOL 9.0\aoltray.exe C:\Program Files\InterMute\SpySubtract\SpySub.exe C:\Programme\Gemeinsame Dateien\AOL\ACS\AOLacsd.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe C:\Programme\Overnet\overnet.exe C:\Programme\Internet Explorer\iexplore.exe C:\Programme\AOL 9.0\waol.exe C:\Programme\AOL 9.0\shellmon.exe C:\Programme\Gemeinsame Dateien\Aol\aoltpspd.exe C:\Programme\Messenger\msmsgs.exe C:\Programme\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://find.naupoint.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://find.naupoint.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://find.naupoint.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://find.naupoint.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://find.naupoint.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://find.naupoint.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://find.naupoint.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://find.naupoint.com R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://find.naupoint.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://find.naupoint.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://find.naupoint.com R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = http://www.google.de R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = http://find.naupoint.com R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = http://find.naupoint.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://find.naupoint.com O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: 1096897597 - {262277EC-5BB5-4849-8BF2-1824330C9CAC} - (no file) O2 - BHO: No description - {44FD0AF8-9D30-4E96-8ECE-306446B5E0D3} - C:\WINDOWS\DOWNLO~1\iEBINST2.dll O2 - BHO: No description - {60261C06-81B0-4DE0-9313-E5BA203A64E9} - C:\WINDOWS\DOWNLO~1\pdfmgr.dll O2 - BHO: No description - {6375B3AD-4440-4C1F-95E5-A24198ED671C} - C:\WINDOWS\DOWNLO~1\sp1.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programme\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_3_19_0.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programme\Canon\Easy-WebPrint\Toolband.dll O4 - HKLM\..\Run: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -minimize O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot O4 - Global Startup: AOL 9.0 Tray-Symbol.lnk = C:\Programme\AOL 9.0\aoltray.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: SpySubtract.lnk = C:\Program Files\InterMute\SpySubtract\SpySub.exe O8 - Extra context menu item: Easy-WebPrint Drucken - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint Schnelldruck - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Vorschau - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html O8 - Extra context menu item: Easy-WebPrint Zu Druckliste hinzufügen - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html O9 - Extra button: ICQ 4.1 - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe O16 - DPF: {3AE9ED90-4B59-47A0-873B-7B71554B3C3E} (JoystickCtl Class) - http://www.miniclip.com/football/joystick.cab O16 - DPF: {44FD0AF8-9D30-4E96-8ECE-306446B5E0D3} (No description) - O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/acti...l_v1-0-3-9.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{C1C8E2C6-D7F3-46A4-B2FB-EB830D6DC8C5}: NameServer = 205.188.146.146 O21 - SSODL: eplrr9 - {BFD34AD3-56FF-4729-B9D5-2AC451215E9F} - C:\WINDOWS\system32\eplrr9.dll Viele Grüße, Rolf |
@gb_dive hier ist der den du suchst, http://www.sophos.de/virusinfo/analy...startpadj.html lade dir escan hier und führe es genauso wie hier durch poste danach nur die gefundenen ergebnisse und ein neues HJT logfile scan dauert 1 stunde, manchmal länger chaosman |
Alle Zeitangaben in WEZ +1. Es ist jetzt 01:46 Uhr. |
Copyright ©2000-2025, Trojaner-Board