Tipps-Forum

Quellcode

Logfile of HijackThis v1.99.1
Scan saved at 17:22:25, on 13.11.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32csrss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32SCardSvr.exe
C:WINDOWSsystem32Ati2evxx.exe
C:ProgrammeATI TechnologiesATI Control Panelatiptaxx.exe
C:WINDOWSsystem32RunDll32.exe
C:WINDOWSDit.exe
C:WINDOWSmHotkey.exe
C:WINDOWSCNYHKey.exe
C:WINDOWSsystem32Prismsta.exe
C:ProgrammeHome CinemaPowerCinemaPCMService.exe
C:ProgrammeGemeinsame DateienAOLACSAOLDial.exe
C:ProgrammeG DATA AntiVirus praesentiert von AOLAVKTrayAVKTray.exe
C:ProgrammeGemeinsame DateienMicrosoft SharedWorks SharedWkUFind.exe
C:WINDOWSsystem32rundll32.exe
C:ProgrammeD-Toolsdaemon.exe
C:WINDOWSsystem32ctfmon.exe
C:ProgrammeSlySoftAnyDVDAnyDVD.exe
C:WINDOWSBricoPacksVista InspiratObjectDockObjectDock.exe
C:ProgrammeGemeinsame DateienAOLACSAOLAcsd.exe
C:ProgrammeGemeinsame DateienG DATAAVKProxyAVKProxy.exe
C:ProgrammeG DATA AntiVirus praesentiert von AOLAVKService.exe
C:ProgrammeG DATA AntiVirus praesentiert von AOLAVKWCtl.exe
C:WINDOWSsystem32svchost.exe
C:ProgrammeCASharedComponentsCA_LICLogWatNT.exe
C:ProgrammeGemeinsame DateienMicrosoft SharedVS7Debugmdm.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSwanmpsvc.exe
C:PROGRA~1COMMON~1X10Commonx10nets.exe
C:WINDOWSSystem32wbemwmiprvse.exe
C:WINDOWSSystem32alg.exe
C:WINDOWSexplorer.exe
C:ProgrammeAOL 9.0waol.exe
C:ProgrammeAOL 9.0shellmon.exe
C:ProgrammeGemeinsame DateienAolaoltpspd.exe
D:ProgrammeICQLiteICQLite.exe
D:eMuleemule.exe
d:ProgrammeWinRARWinRAR.exe
C:DOKUME~1MLLER~1LOKALE~1TempRar$EX10.812HijackThis.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = [URL="http://www.medion.com"]MEDION International[/URL]
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = [URL="http://www.aldi.com/"]Welcome to ALDI[/URL]
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = [URL="http://www.aldi.com"]Welcome to ALDI[/URL]
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = [URL="http://seek.yisou.com/srchasst.htm"]yahoo assistant[/URL]
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = [URL="http://seek.yisou.com/srchcust.htm"]yahoo assistant[/URL]
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = localhost:4001
O2 - BHO: ThunderIEHelper Class - {0005A87D-D626-4B3A-84F9-1D9571695F55} - C:WINDOWSSystem32xunleibho_v4.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammeAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 - BHO: yPhtb - {33BBE430-0E42-4f12-B075-8D21ACB10DCB} - C:PROGRA~1Yahoo!ASSIST~1Assistyphtb.dll
O2 - BHO: Anti Fish - {38928D50-8A48-44C2-945F-D2F23F771410} - C:PROGRA~1Yahoo!ASSIST~1Assistyangling.dll (file missing)
O2 - BHO: Router Layer - {5EB7CB50-E375-4718-B4C0-9AD12EFA2F84} - C:WINDOWSSystem32aclayer.dll (file missing)
O2 - BHO: YDragSearch - {62EED7C6-9F02-42f9-B634-98E2899E147B} - C:PROGRA~1Yahoo!ASSIST~1AssistYDRAGS~1.DLL
O2 - BHO: XBTP01621 - {9EBBE90B-282E-4c39-8A7E-120749169F0F} - C:PROGRA~1BEARSH~2MediaBar.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:ProgrammeFree Download Manageriefdmcks.dll
O2 - BHO: Burn4Free Toolbar Helper - {F8E5CA21-C27B-43e7-B2BE-4CA93C9F9A1F} - C:ProgrammeBurn4Free Toolbarv2.0.0.2Burn4Free_Toolbar.dll (file missing)
O3 - Toolbar: Burn4Free Toolbar - {70DE7956-479D-4eb7-8641-2B45774C350E} - C:ProgrammeBurn4Free Toolbarv2.0.0.2Burn4Free_Toolbar.dll (file missing)
O3 - Toolbar: BearShare MediaBar - {B7D3E479-CC68-42B5-A338-938ECE35F419} - C:ProgrammeBearShare MediaBarMediaBar.dll
O4 - HKLM..Run: [ATIPTA] C:ProgrammeATI TechnologiesATI Control Panelatiptaxx.exe
O4 - HKLM..Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM..Run: [Dit] Dit.exe
O4 - HKLM..Run: [CHotkey] mHotkey.exe
O4 - HKLM..Run: [ledpointer] CNYHKey.exe
O4 - HKLM..Run: [Prism_Utility] Prismsta.exe
O4 - HKLM..Run: [PCMService] "C:ProgrammeHome CinemaPowerCinemaPCMService.exe"
O4 - HKLM..Run: [AOLDialer] C:ProgrammeGemeinsame DateienAOLACSAOLDial.exe
O4 - HKLM..Run: [AVKTray] "C:ProgrammeG DATA AntiVirus praesentiert von AOLAVKTrayAVKTray.exe"
O4 - HKLM..Run: [Microsoft Works Update Detection] C:ProgrammeGemeinsame DateienMicrosoft SharedWorks SharedWkUFind.exe
O4 - HKLM..Run: [update] C:WINDOWSsystem32iexplorer.exe
O4 - HKLM..Run: [StormCodec_Helper] "C:ProgrammeRingz StudioStorm CodecStormSet.exe" /S /opti
O4 - HKLM..Run: [HP Component Manager] "C:ProgrammeHPhpcoretechhpcmpmgr.exe"
O4 - HKLM..Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [DAEMON Tools-1033] "C:ProgrammeD-Toolsdaemon.exe" -lang 1033
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [update] C:WINDOWSsystem32iexplorer.exe
O4 - HKCU..Run: [AnyDVD] C:ProgrammeSlySoftAnyDVDAnyDVD.exe
O4 - HKCU..RunOnce: [ICQ Lite] D:ProgrammeICQLiteICQLite.exe -trayboot
O4 - Startup: Stardock ObjectDock.lnk = C:WINDOWSBricoPacksVista InspiratObjectDockObjectDock.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~4Office12EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~4Office12REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - d:ProgrammeICQLiteICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - d:ProgrammeICQLiteICQLite.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:ProgrammeGemeinsame DateienSourceTecSWF CatcherInternetExplorer.htm (file missing)
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:ProgrammeGemeinsame DateienSourceTecSWF CatcherInternetExplorer.htm (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammeMessengermsmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammeMessengermsmsgs.exe (file missing)
O9 - Extra button: MedionShop - {07E3F115-C445-480D-94CB-ECA914A353CE} - [URL="http://www.medionshop.de/"]Medionshop.de[/URL] (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.aldi.com
O15 - Trusted Zone: *.windowsupdate.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - [URL]http://go.microsoft.com/fwlink/?LinkID=39204[/URL]
O16 - DPF: {2ED9BC2B-4DF1-472E-9B5E-55477D2C97F5} (Microsoft Data Collection Control) - [URL]https://support.microsoft.com/OAS/ActiveX/odc.cab[/URL]
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - [URL]http://software-dl.real.com/04a30f04300bfbf27206/netzip/RdxIE601_de.cab[/URL]
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - [URL]http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1149005815203[/URL]
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - [URL]http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1163261129250[/URL]
O17 - HKLMSystemCCSServicesTcpip..{AE60CE46-C8A7-4F46-9B82-19496EE1E875}: NameServer = 205.188.146.145
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:ProgrammeGemeinsame DateienMicrosoft SharedHelphxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:ProgrammeGemeinsame DateienMicrosoft SharedOFFICE12MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:WINDOWSSYSTEM32WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:WINDOWSsystem32WPDShServiceObj.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:ProgrammeGemeinsame DateienAOLACSAOLAcsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: AVKProxy - G DATA Software AG - C:ProgrammeGemeinsame DateienG DATAAVKProxyAVKProxy.exe
O23 - Service: AVK Service (AVKService) - Unknown owner - C:ProgrammeG DATA AntiVirus praesentiert von AOLAVKService.exe
O23 - Service: AVK W?chter (AVKWCtl) - Unknown owner - C:ProgrammeG DATA AntiVirus praesentiert von AOLAVKWCtl.exe
O23 - Service: CA-Lizenz-Client (CA_LIC_CLNT) - Unknown owner - C:ProgrammeCASharedComponentsCA_LIClic98rmt.exe (file missing)
O23 - Service: CA-Lizenzserver (CA_LIC_SRVR) - Unknown owner - C:ProgrammeCASharedComponentsCA_LIClic98rmtd.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:ProgrammeGemeinsame DateienInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Ereignisprotokoll-?berwachung (LogWatch) - Computer Associates - C:ProgrammeCASharedComponentsCA_LICLogWatNT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:WINDOWSsystem32HPZipm12.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:WINDOWSwanmpsvc.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:PROGRA~1COMMON~1X10Commonx10nets.exe