|
Trojan dropper HILFE!!!!!!!!!!! habe Norton 2005 AntiVir oben und der zeigt mir immer ein fenster wo draufsteht das ich den "Trojan dropper" drauf hab aber Norton den gelöscht hat. kommt aber trotzdem immer wieder was ist das???? :confused: und dann habe ich den Pc mal von norton antivir überprüfen lassen und da hat er das gefunden Dateiname: "Loader.exe" Name der Bedrohung: " Hacktool" gehört das zusammen und von was kann das kommen???? :confused: gelöscht hab ich bisher noch nichts weil ich mir nicht sicher bin und die wichtigste frage: wie bringe ich das wieder weg ohne das mein pc hin wird????? :confused: danke schon mal im voraus :bussi: |
|
Logfile of HijackThis v1.99.0 Scan saved at 23:00:22, on 14.01.2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programme\TGTSoft\StyleXP\StyleXPService.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe F:\Norton InternetSecurity und NAV\ISSVC.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe C:\Programme\Roxio\GoBack\GBPoll.exe C:\Programme\Ahead\InCD\InCDsrv.exe F:\Norton InternetSecurity und NAV\Norton AntiVirus\navapsvc.exe C:\Programme\Norton SystemWorks\Norton Utilities\NProtect.exe C:\PROGRA~1\NORTON~3\SPEEDD~1\nopdb.exe C:\WINDOWS\System32\svchost.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\Mixer.exe C:\Programme\Logitech\Video\LogiTray.exe C:\Programme\Ahead\InCD\InCD.exe C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe C:\WINDOWS\System32\qttask.exe F:\NetPumper\NetPumperIEProxy.exe C:\WINDOWS\System32\atiptaxx.exe C:\Programme\Java\jre1.5.0\bin\jusched.exe C:\WINDOWS\System32\LVComS.exe F:\Kazaa Lite\Kazaa Speedup Plus\180solutions\msbb.exe C:\Programme\BullsEye Network\bin\bargains.exe C:\WINDOWS\System32\ctfmon.exe F:\LogitechTastatur\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Programme\MSN Messenger\msnmsgr.exe C:\Programme\TGTSoft\StyleXP\StyleXP.exe F:\LogitechTastatur\SetPoint\KEM.exe F:\LogitechTastatur\SetPoint\KHALMNPR.EXE G:\PROGRA~1\INCRED~1\bin\IMApp.exe C:\Programme\Internet Explorer\IEXPLORE.EXE C:\Programme\Internet Explorer\IEXPLORE.EXE F:\NetPumper\NetPumper.exe F:\HiJackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.at/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Adobe\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: brdg Class - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - C:\WINDOWS\System32\bridge.dll O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - F:\Norton InternetSecurity und NAV\Norton AntiVirus\NavShExt.dll O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Programme\TGTSoft\StyleXP\TGT_BHO.dll O2 - BHO: ADP UrlCatcher Class - {F4E04583-354E-4076-BE7D-ED6A80FD66DA} - C:\WINDOWS\System32\msbe.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - F:\Norton InternetSecurity und NAV\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [Phonehome] regsvr32.exe /u /s c:\windows\system32\regwizc.dll O4 - HKLM\..\Run: [EnvyHFCPL] C:\Programme\Envy24\EnMixCPL.exe O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Programme\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Programme\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [InCD] C:\Programme\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\UsrPrmpt.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [REGSHAVE] C:\Programme\REGSHAVE\REGSHAVE.EXE /AUTORUN O4 - HKLM\..\Run: [QuickTime Task] C:\WINDOWS\System32\qttask.exe O4 - HKLM\..\Run: [NetPumper] "F:\NetPumper\NetPumperIEProxy.exe" O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0\bin\jusched.exe O4 - HKLM\..\Run: [msbb] F:\Kazaa Lite\Kazaa Speedup Plus\180solutions\msbb.exe O4 - HKLM\..\Run: [RunDLL] rundll32.exe "C:\WINDOWS\System32\bridge.dll",Load O4 - HKLM\..\Run: [BullsEye Network] C:\Programme\BullsEye Network\bin\bargains.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [LDM] F:\LogitechTastatur\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [IncrediMail] G:\PROGRA~1\INCRED~1\bin\IncMail.exe /c O4 - HKCU\..\Run: [STYLEXP] C:\Programme\TGTSoft\StyleXP\StyleXP.exe -Hide O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = F:\LogitechTastatur\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Logitech SetPoint.lnk = F:\LogitechTastatur\SetPoint\KEM.exe O8 - Extra context menu item: &Add animation to IncrediMail Style Box - G:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm O8 - Extra context menu item: Download with NetPumper - F:\NetPumper\AddUrl.htm O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://F:\Office\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0\bin\npjpi150.dll O16 - DPF: {CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_05) - O18 - Protocol: bw+0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll |
O18 - Protocol: bw80 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll |
O18 - Protocol: bwo0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: offline-8876480 - {9318874E-248C-4871-8AED-F317FBC6B91C} - F:\LogitechTastatur\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O23 - Service: Symantec Event Manager - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Network Proxy - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe O23 - Service: Symantec Password Validation - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe O23 - Service: EPSON Printer Status Agent2 - SEIKO EPSON CORPORATION - C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe O23 - Service: GBPoll - Roxio, Inc. - C:\Programme\Roxio\GoBack\GBPoll.exe O23 - Service: InCD File System Service - AHEAD Software - C:\Programme\Ahead\InCD\InCDsrv.exe O23 - Service: ISSvc - Symantec Corporation - F:\Norton InternetSecurity und NAV\ISSVC.exe O23 - Service: Norton AntiVirus Auto-Protect-Dienst - Symantec Corporation - F:\Norton InternetSecurity und NAV\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Unerase Protection - Symantec Corporation - C:\Programme\Norton SystemWorks\Norton Utilities\NProtect.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) - Unknown - %ProgramFiles%\WinPcap\rpcapd.exe (file missing) O23 - Service: SAVScan - Symantec Corporation - F:\Norton InternetSecurity und NAV\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~3\SPEEDD~1\nopdb.exe O23 - Service: StyleXPService - Unknown - C:\Programme\TGTSoft\StyleXP\StyleXPService.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe |
Servus Teuferl_w, weisst Du warum Du soviele O18 - Zusätzliche bzw. veränderte Protokolle auf Deinem Rechner hast? Ist das Absicht? |
Zitat:
du ich hab keine ahnung warum das so ist kenn mich zwar schon aus mit dem pc aber das ist mir fremd |
LOL Sowas hab ich auch noch nicht gehört aber vielleit auf meinem Pc gehabt. Frag nicht wie ich die weg gekriegt hab!!! :D |
Zitat:
|
Dein Rechner ist ziemlich übel verseucht, habe noch nie so eine riesige Log gesehen. Am besten solltet du diesen Thread mal lesen http://www.trojaner-board.de/showpos...28&postcount=2 |
g-data-jünger hat recht; eine neuinstallation ist eigentlich notwendig. ich habs grad auch gesehen.. da ist mehr als 1 problem vorhanden.. ich bin mir nichtmal sicher ob da nicht ein rbot ist. ich geb dir n tipp; installier windows neu. |
Zitat:
das wollte ich mir eigentlich ersparen hab den pc voriges monat erst neu aufgesetzt :headbang: :koch: :heulen: |
Dann solltest Du Dir den Thread noch genauer durchlesen, denn Du hast einiges falsch gemacht. |
Zitat:
|
Du hast einiges falsch gemacht: - dein System ist nicht am aktuellsten Stand - du verwendest den Unsicherheitsbrowser IE, der auch nicht aktuell und zudem nicht sicherer konfiguriert ist - du verwendest Filesharing Tools wie z.B. Kazaa und führst Download aus unsicheren und nicht vertrauenswürdigen Quellen aus usw. Eine Neuaufsetzen kann nicht schaden, aber wenn du nicht die oben genannten Punkte beachtest, dann ist eh fürn Ar..., weil du dir die Malware ja wieder selbst installierst. |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 12:49 Uhr. |
Copyright ©2000-2025, Trojaner-Board