Hackertool? geschlossen

[Ati~]

Weiß jemand was dieses Tool bewirkt, habs schon gelöscht, würde mich aber trotzdem interessieren.

Gruß
Ati~

 

[Greg]

Es könnte etwas mit dem Backdoorprogramm Shark zu tun haben. Du solltest deinen PC umgehend mit HijackThis überprüfen und evt. alle IP Verbindungen mit tcpview anschauen.

 

[Ati~]

HijackThis:

Logfile of HijackThis v1.99.1
Scan saved at 21:29:32, on 26.01.2008
Platform: Windows XP SP3, v.3244 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
E:\Programme\Panda Security\Panda Antivirus 2008\pavsrv51.exe
E:\Programme\Panda Security\Panda Antivirus 2008\AVENGINE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
E:\Programme\cFosSpeed\spd.exe
C:\WINDOWS\system32\cisvc.exe
E:\Programme\Panda Security\Panda Antivirus 2008\PsCtrls.exe
E:\Programme\Panda Security\Panda Antivirus 2008\PsImSvc.exe
C:\WINDOWS\Explorer.EXE
E:\Programme\cFosSpeed\cFosSpeed.exe
E:\Programme\Panda Security\Panda Antivirus 2008\APVXDWIN.EXE
E:\Programme\Zone Labs\ZoneAlarm\zlclient.exe
E:\Programme\DAEMON Tools Pro\DTProAgent.exe
E:\Programme\Panda Security\Panda Antivirus 2008\WebProxy.exe
C:\WINDOWS\system32\svchost.exe
E:\Programme\Steam\Steam.exe
E:\Programme\Panda Security\Panda Antivirus 2008\AvltMain.exe
C:\WINDOWS\system32\cidaemon.exe
E:\Programme\Mozilla Firefox\firefox.exe
E:\Programme\WinRAR\WinRAR.exe
E:\Programme\WinRAR\WinRAR.exe
E:\Programme\WinRAR\WinRAR.exe
C:\DOKUME~1\Thomas\LOKALE~1\Temp\Rar$EX00.500\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O1 - Hosts: 80.239.151.231 db1.rapidshare.com
O1 - Hosts: 80.239.151.232 db2.rapidshare.com
O1 - Hosts: 80.239.151.233 db3.rapidshare.com
O1 - Hosts: 80.239.151.234 db4.rapidshare.com
O1 - Hosts: 80.239.151.235 db5.rapidshare.com
O1 - Hosts: 80.239.151.253 games.rapidshare.com
O1 - Hosts: 80.239.151.251 images.rapidshare.com
O1 - Hosts: 80.239.151.240 images2.rapidshare.com
O1 - Hosts: 82.129.39.245 kvm1.rapidshare.com
O1 - Hosts: 82.129.39.246 kvm2.rapidshare.com
O1 - Hosts: 82.129.39.247 kvm3.rapidshare.com
O1 - Hosts: 82.129.39.248 kvm4.rapidshare.com
O1 - Hosts: 82.129.39.249 kvm5.rapidshare.com
O1 - Hosts: 80.239.151.250 mail.rapidshare.com
O1 - Hosts: 80.239.151.250 ns1.rapidshare.com
O1 - Hosts: 80.239.151.234 ns2.rapidshare.com
O1 - Hosts: 80.239.151.250 pay.rapidshare.com
O1 - Hosts: 80.239.151.240 rem1.rapidshare.com
O1 - Hosts: 82.129.39.2 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.3 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.4 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.5 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.6 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.7 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.8 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.9 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.10 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.11 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.12 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.13 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.14 rs0cg.rapidshare.com
O1 - Hosts: 82.129.39.15 rs0cg.rapidshare.com
O1 - Hosts: 82.129.35.2 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.3 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.4 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.5 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.6 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.7 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.8 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.9 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.10 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.11 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.12 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.13 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.14 rs0cg2.rapidshare.com
O1 - Hosts: 82.129.35.15 rs0cg2.rapidshare.com
O1 - Hosts: 80.152.62.2 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.3 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.4 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.5 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.6 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.7 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.8 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.9 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.10 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.11 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.12 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.13 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.14 rs0dt.rapidshare.com
O1 - Hosts: 80.152.62.15 rs0dt.rapidshare.com
O1 - Hosts: 64.215.245.2 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.3 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.4 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.5 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.6 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.7 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.8 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.9 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.10 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.11 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.12 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.13 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.14 rs0gc.rapidshare.com
O1 - Hosts: 64.215.245.15 rs0gc.rapidshare.com
O1 - Hosts: 207.138.168.2 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.3 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.4 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.5 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.6 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.7 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.8 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.9 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.10 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.11 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.12 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.13 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.14 rs0gc2.rapidshare.com
O1 - Hosts: 207.138.168.15 rs0gc2.rapidshare.com
O1 - Hosts: 80.239.151.2 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.3 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.4 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.5 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.6 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.7 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.8 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.9 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.10 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.11 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.12 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.13 rs0l3.rapidshare.com
O1 - Hosts: 80.239.151.14 rs0l3.rapidshare.com
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - E:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [cFosSpeed] E:\Programme\cFosSpeed\cFosSpeed.exe
O4 - HKLM\..\Run: [APVXDWIN] "E:\Programme\Panda Security\Panda Antivirus 2008\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [ZoneAlarm Client] "E:\Programme\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "E:\Programme\DAEMON Tools Pro\DTProAgent.exe"
O4 - HKCU\..\Run: [Windows Update] C:\WINDOWS\system32\RUNDLL.exe
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://E:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://E:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - E:\Programme\Bonjour\ExplorerPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - E:\Programme\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - E:\Programme\ICQ6\ICQ.exe
O10 - Unknown file in Winsock LSP: e:\programme\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5CAAB8BF-7F8B-461C-944A-45B138CC57A3}: NameServer = 195.3.96.67 195.3.96.68
O17 - HKLM\System\CCS\Services\Tcpip\..\{E409E205-A993-4121-8241-21FDC03630A1}: NameServer = 195.3.96.67,195.3.96.68
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - E:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: cFosSpeed System Service (cFosSpeedS) - Unknown owner - E:\Programme\cFosSpeed\spd.exe" -service (file missing)
O23 - Service: Panda Software Controller - Panda Software International - E:\Programme\Panda Security\Panda Antivirus 2008\PsCtrls.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - E:\Programme\Panda Security\Panda Antivirus 2008\pavsrv51.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - E:\Programme\Panda Security\Panda Antivirus 2008\PsImSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

 

[Ati~]

Tcpview:

[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1488 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1448 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1688 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1412 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1424 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1528 194.116.241.52:http TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1581 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1557 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1457 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1465 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1473 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1369 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1417 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1477 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1461 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1453 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1469 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1421 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1393 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1485 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1525 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1481 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1381 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1429 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1409 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1561 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1400 209.85.129.99:http TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1606 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1662 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1610 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1622 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1510 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1578 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1658 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1522 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1506 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1618 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1574 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1590 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1502 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1566 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1646 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1542 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1670 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1534 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1654 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1586 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1642 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1570 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1546 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1554 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1530 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1550 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1674 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1638 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1614 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1626 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1538 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1666 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1598 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1630 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1514 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1594 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1498 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1634 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1494 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1378 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:1650 localhost:31595 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1602 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1439 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1435 TIME_WAIT 
[System Process]:0 TCP fa3aea04d87c49a:31595 localhost:1679 TIME_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1683 downloads.sysinternals.com:http ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:1307 85.214.34.145:http ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:1487 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1483 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1559 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1479 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1443 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1687 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1377 freesoft-board.to:http ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:1447 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1684 localhost:31595 ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:1241 img254.imageshack.us:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1373 img254.imageshack.us:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1334 212.162.62.43:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1346 212.162.62.43:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1338 212.162.62.34:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1342 212.162.62.34:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1211 fk-in-f104.google.com:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1431 h1050715.serverkompetenz.net:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1408 static.88-198-6-250.clients.your-server.de:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1419 h1067768.serverkompetenz.net:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1423 h1067768.serverkompetenz.net:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1620 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1504 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1604 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1456 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1612 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1580 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1540 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1556 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1452 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1588 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1460 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1544 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1568 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1548 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1636 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:wins 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1496 194.116.241.6:http ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:1472 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1632 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1500 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1644 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1508 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1464 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1468 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1230 freesoft-board.to:http ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:1640 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1584 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1628 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1532 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1536 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1672 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1616 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1660 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1600 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1476 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:ingreslock 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1323 212.162.62.43:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1319 212.162.62.43:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1216 209.85.129.99:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1392 fk-in-f104.google.com:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1297 static.88-198-6-250.clients.your-server.de:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1293 static.88-198-6-250.clients.your-server.de:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:3467 localhost:3466 ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:3466 localhost:3467 ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:1657 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1625 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1593 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1649 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1577 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1517 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1609 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1669 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1653 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1665 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1529 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1493 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1565 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1597 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1521 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1553 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1573 194.116.241.52:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1356 212.162.62.43:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1312 212.162.62.43:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1316 212.162.62.43:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1360 212.162.61.184:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1221 209.85.129.147:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1225 209.85.129.147:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1249 209.85.129.99:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1397 209.85.129.99:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1269 h1050715.serverkompetenz.net:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1277 h1050715.serverkompetenz.net:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1273 h1050715.serverkompetenz.net:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1414 static.88-198-6-250.clients.your-server.de:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1266 static.88-198-6-250.clients.your-server.de:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1289 h1067768.serverkompetenz.net:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1281 h1067768.serverkompetenz.net:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1437 h1067768.serverkompetenz.net:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1285 h1067768.serverkompetenz.net:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1351 72.14.221.91:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:3786 localhost:3788 ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:3788 localhost:3786 ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:1236 freesoft-board.to:http ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:1678 194.116.241.55:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1380 freesoft-board.to:http ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:1368 freesoft-board.to:http ESTABLISHED 
firefox.exe:3616 TCP fa3aea04d87c49a:1329 212.162.62.34:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1254 fk-in-f104.google.com:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1427 static.88-198-6-250.clients.your-server.de:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1411 static.88-198-6-250.clients.your-server.de:http CLOSE_WAIT 
firefox.exe:3616 TCP fa3aea04d87c49a:1302 h1067768.serverkompetenz.net:http CLOSE_WAIT 
Steam.exe:3788 UDP fa3aea04d87c49a:4688 *:* 
Steam.exe:3788 UDP fa3aea04d87c49a:4733 *:* 
svchost.exe:1536 TCP fa3aea04d87c49a:netbios-ssn fa3aea04d87c49a:0 LISTENING 
svchost.exe:1536 UDP fa3aea04d87c49a:1044 *:* 
svchost.exe:1536 UDP fa3aea04d87c49a:1045 *:* 
svchost.exe:1536 UDP fa3aea04d87c49a:ntp *:* 
svchost.exe:1536 UDP fa3aea04d87c49a:ntp *:* 
svchost.exe:1536 UDP fa3aea04d87c49a:1100 *:* 
svchost.exe:1536 UDP fa3aea04d87c49a:netbios-ns *:* 
svchost.exe:1536 UDP fa3aea04d87c49a:netbios-dgm *:* 
svchost.exe:1536 UDP fa3aea04d87c49a:ntp *:* 
System:4 TCP fa3aea04d87c49a:1206 10.0.0.138:pptp ESTABLISHED 
System:4 TCP fa3aea04d87c49a:pptp fa3aea04d87c49a:0 LISTENING 
System:4 TCP fa3aea04d87c49a:netbios-ssn fa3aea04d87c49a:0 LISTENING 
System:4 UDP fa3aea04d87c49a:netbios-ns *:* 
System:4 UDP fa3aea04d87c49a:netbios-dgm *:* 
WebProxy.exe:2932 TCP fa3aea04d87c49a:31595 localhost:1684 ESTABLISHED 
WebProxy.exe:2932 TCP fa3aea04d87c49a:1686 downloads.sysinternals.com:http ESTABLISHED 
WebProxy.exe:2932 UDP fa3aea04d87c49a:18002 *:* 
WebProxy.exe:2932 UDP fa3aea04d87c49a:18001 *:*

 

[Firecat]

Zuerstmal alles von Rapidshare musst Du löschen.Ich schreib jetzt nur zwei rein,weil es sonnst die Seite sprengen würde.
Löschen musst Du das ganze mit Hijackthis.Du lässt es nochmal laufen und machst dann links vor die Einträge ein häkchen und gehst dann unten auf fixed check.

O1 - Hosts: 80.239.151.231 db1.rapidshare.com

Muss gefixt werden!
Besucherbewertung Analysedetails
O1 - Hosts: 80.239.151.232 db2.rapidshare.com

Muss gefixt werden!
Besucherbewertung Analysedetails
O1 - Hosts: 80.239.151.233 db3.rapidshare.com

Dann diesen Eintrag hier.

O4 - HKCU\..\Run: [Windows Update] C:\WINDOWS\system32\RUNDLL.exe

Unbedingt fixen! Added by the SPYBOT-DX WORM! Note - this is not the Windows system file of the same name as described here

Hat jemand anders auf Deinen PC zugriff?Bist Du in einem Netzwerk angemeldet?
Wenn nicht dann das hier unbedingt löschen.

Unbekannt
O17 - HKLM\System\CCS\Services\Tcpip\..\{5CAAB8BF-7F8B-461C-944A-45B138CC57A3}: NameServer = 195.3.96.67 195.3.96.68
und das hier.
HKLM\System\CCS\Services\Tcpip\..\{E409E205-A993-4121-8241-21FDC03630A1}: NameServer = 195.3.96.67,195.3.96.68

Dann würde ich Dir empfehlen besorge Dir eine richtige Firewall und ein Antispyware Programm.Wie Spybot search and Destroy.

Greetz Firecat

 

[Ati~]

Danke

Ich hoff ich hab alles gefixt.

Logfile of HijackThis v1.99.1
Scan saved at 09:32:43, on 27.01.2008
Platform: Windows XP SP3, v.3244 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
E:\Programme\Panda Security\Panda Antivirus 2008\pavsrv51.exe
E:\Programme\Panda Security\Panda Antivirus 2008\AVENGINE.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
E:\Programme\cFosSpeed\spd.exe
C:\WINDOWS\system32\cisvc.exe
E:\Programme\Panda Security\Panda Antivirus 2008\PsCtrls.exe
E:\Programme\Panda Security\Panda Antivirus 2008\PsImSvc.exe
E:\Programme\cFosSpeed\cFosSpeed.exe
E:\Programme\Panda Security\Panda Antivirus 2008\APVXDWIN.EXE
E:\Programme\Zone Labs\ZoneAlarm\zlclient.exe
C:\Programme\Skype\Phone\Skype.exe
E:\Programme\DAEMON Tools Pro\DTProAgent.exe
E:\Programme\Panda Security\Panda Antivirus 2008\WebProxy.exe
C:\Programme\Skype\Plugin Manager\skypePM.exe
E:\Programme\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\svchost.exe
C:\DOKUME~1\Thomas\LOKALE~1\Temp\Rar$EX00.844\HijackThis.exe
C:\WINDOWS\system32\cidaemon.exe
E:\Downloads\spybotsd151.exe
C:\DOKUME~1\Thomas\LOKALE~1\Temp\is-2GESA.tmp\is-CMG9I.tmp
E:\Programme\WinRAR\WinRAR.exe
C:\DOKUME~1\Thomas\LOKALE~1\Temp\Rar$EX00.907\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - E:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [cFosSpeed] E:\Programme\cFosSpeed\cFosSpeed.exe
O4 - HKLM\..\Run: [APVXDWIN] "E:\Programme\Panda Security\Panda Antivirus 2008\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [ZoneAlarm Client] "E:\Programme\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "E:\Programme\DAEMON Tools Pro\DTProAgent.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://E:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://E:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - E:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - E:\Programme\Bonjour\ExplorerPlugin.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - E:\Programme\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - E:\Programme\ICQ6\ICQ.exe
O10 - Unknown file in Winsock LSP: e:\programme\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5CAAB8BF-7F8B-461C-944A-45B138CC57A3}: NameServer = 195.3.96.67 195.3.96.68
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - E:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: cFosSpeed System Service (cFosSpeedS) - Unknown owner - E:\Programme\cFosSpeed\spd.exe" -service (file missing)
O23 - Service: Panda Software Controller - Panda Software International - E:\Programme\Panda Security\Panda Antivirus 2008\PsCtrls.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - E:\Programme\Panda Security\Panda Antivirus 2008\pavsrv51.exe
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - E:\Programme\Panda Security\Panda Antivirus 2008\PsImSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Mfg
Ati

 

[Firecat]

Was ist mit diesem Eintrag ?
Unbekannt

O17 -HKLM\System\CCS\Services\Tcpip\..\{5CAAB8BF-7F8B-461C-944A-45B138CC57A3}: NameServer = 195.3.96.67 195.3.96.68

Bist Du in einem Netzwerk Angemeldet?

Wenn nicht dann lösche diesen Eintrag.

Hast Du Dein Panda Antivir auf der E: Festplatte Installiert?

Diesen Eintrag kannst Du auch noch löschen.
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)

Greetz

 

[Ati~]

Was ist mit diesem Eintrag ?
Unbekannt

O17 -HKLM\System\CCS\Services\Tcpip\..\{5CAAB8BF-7F8B-461C-944A-45B138CC57A3}: NameServer = 195.3.96.67 195.3.96.68

Bist Du in einem Netzwerk Angemeldet?

Wenn nicht dann lösche diesen Eintrag.



Hast Du Dein Panda Antivir auf der E: Festplatte Installiert?

Diesen Eintrag kannst Du auch noch löschen.
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)

Greetz

1) Ähm das ist genau die Nummer die ich beim Installieren des Inets eingegeben habe, ist was von AON (AON=Telecom in Österreich)

2)Ja, Panda Antivirus is in e: Installiert

Dann würde ich Dir empfehlen besorge Dir eine richtige Firewall und ein Antispyware Programm.Wie Spybot search and Destroy.

Hab ich gemacht und fand gleichmal folgendes:

Hängt das mit meiner Anfangsmeldung zusammen?

Mfg
Ati

 

[Firecat]

1)

Hängt das mit meiner Anfangsmeldung zusammen?

Mfg
Ati

Ja das ist immer nch ein teil des Programms.Shark.bw

Also löschen.

Deaktiviere erstmal Deine Systemwiederherstellung.Dazu gehst Du in die Systemsteuerung--System--Starten und wiederherstellen.
Dort Deaktiviere die Systemwiederherstellung auf allen Laufwerken.

Dann mach einen Neustart und drücke gleich nach dem Bootscreen mehrmals die F8 Taste,bis Du zum Auswahlbildschirm mit dem Abgesicherten Modus kommst.
Dann wählst Du Abgesicherter Modus aus und wartest bis der Desktop da ist.Dann machst Du nochmal einen scan mit Spybot search and Destroy und danach mit Panda.
Dann alles löschen was gefunden wurde.
Wenn Du fertig bist wieder Neustart ganz Normal.Dann die Systemwiederherstellung Aktivieren.

Greetz Firecat

 

[Ati~]

Hoffe das ich jetzt alles weg hab

Gruß
Ati

 

[Ati~]

alles wieder super

 

[Imperator]

- closed -

mfg
Imperator