Ich hab ein keylogger verdacht!!!!HiJackThis Log-File bitte bewerten
 

Hi,

Als ich heute Wolf Team zocken wollte, meldete mir Kaspersky das die .bin datei ein keylogger wär ich weiss jetzt nicht was ich machen soll weil des ja eigentlich ein spiel ist.

Unten ist mein HiJackThis Log-File.


______________________________________________

Logfile of HijackThis v1.99.1
Scan saved at 17:29:05, on 28.10.2007
Platform: Windows ***** *** (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\Programme\Intel\Wireless\Bin\S24EvMon.exe
F:\WINDOWS\system32\spoolsv.exe
F:\_C-N___NTFS_NaSh_28_XviD\avp.exe
F:\Programme\Bonjour\mDNSResponder.exe
F:\Programme\Intel\Wireless\Bin\EvtEng.exe
F:\Programme\Intel\Wireless\Bin\RegSrvc.exe
F:\Programme\Intel\Wireless\Bin\WLKeeper.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\rundll32.exe
F:\Programme\Intel\Wireless\bin\ZCfgSvc.exe
F:\Programme\Intel\Wireless\Bin\ifrmewrk.exe
F:\WINDOWS\SOUNDMAN.EXE
F:\WINDOWS\AGRSMMSG.exe
F:\WINDOWS\system32\igfxtray.exe
F:\WINDOWS\system32\hkcmd.exe
F:\WINDOWS\system32\igfxpers.exe
F:\_C-N___NTFS_NaSh_28_XviD\avp.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Programme\Orbitdownloader\orbitdm.exe
F:\Programme\Orbitdownloader\orbitnet.exe
F:\Programme\Intel\Wireless\Bin\Dot1XCfg.exe
D:\Programme\RouterControl\RouterControl.exe
F:\WINDOWS\system32\svchost.exe
F:\Programme\Opera\Opera.exe
F:\Dokumente und Einstellungen\``******\Desktop\hijackthis\This.exe.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - F:\Programme\Orbitdownloader\orbitcth.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IntelZeroConfig] "F:\Programme\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "F:\Programme\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [IgfxTray] F:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] F:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] F:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AVP] "F:\_C-N___NTFS_NaSh_28_XviD\avp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ICQ] "F:\Programme\ICQ6\ICQ.exe" silent
O4 - Startup: Xfire.lnk = F:\Programme\Xfire\xfire.exe
O4 - Global Startup: Orbit.lnk = F:\Programme\Orbitdownloader\orbitdm.exe
O8 - Extra context menu item: &Download by Orbit - res://F:\Programme\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://F:\Programme\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://F:\Programme\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://F:\Programme\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Hinzufügen zu Kaspersky Anti-Banner - F:\_C-N___NTFS_NaSh_28_XviD\ie_banner_deny.htm
O9 - Extra button: Statistik für Web-Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - F:\_C-N___NTFS_NaSh_28_XviD\SCIEPlgn.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - F:\Programme\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - F:\Programme\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programme\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: f:\programme\bonjour\mdnsnsp.dll
O20 - AppInit_DLLs: F:\_C-N__~1\adialhk.dll
O20 - Winlogon Notify: igfxcui - F:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: klogon - F:\WINDOWS\system32\klogon.dll
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - F:\_C-N___NTFS_NaSh_28_XviD\avp.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - F:\Programme\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - F:\Programme\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - F:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - F:\Programme\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - F:\Programme\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - F:\Programme\Intel\Wireless\Bin\WLKeeper.exe



__________________________________________________________