Hi!
hier ist mein aktuelles hijack this logfile.
könnt ihr mir sagen ob etwas nicht stimmt?
Vielen dank im vorraus frogggi
Logfile of HijackThis v1.97.7
Scan saved at 23:13:37, on 05.05.2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Synaptics\SynTP\SynTPLpr.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\Hcontrol.exe
E:\asus\powergear\BatteryLife.exe
C:\WINDOWS\system32\sistray.EXE
C:\Programme\Java\j2re1.4.2_03\bin\jusched.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
E:\AVPersonal\AVGNT.EXE
C:\WINDOWS\ATKOSD.exe
E:\Asus\chkmail\ChkMail.exe
E:\D-Link Air Wireless\AirPlus.exe
E:\p800\Sony Ericsson\Mobile\audevicemgr.exe
E:\p800\SONYER~1\Mobile\CONNEC~1\CONNMN~1.EXE
e:\Programme\Intuwave Ltd\Shared\mRouterRunTime\mRouterRuntime.exe
C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\eEBSVC.exe
E:\AVPersonal\AVWUPSRV.EXE
C:\Programme\Gemeinsame Dateien\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\svchost.exe
E:\p800\SONYER~1\Mobile\CONNEC~1\CapMan.exe
E:\p800\SONYER~1\Mobile\CONNEC~1\ElogErr.exe
E:\p800\SONYER~1\Mobile\CONNEC~1\BROADC~1.EXE
E:\p800\SONYER~1\MOBILE\MOBILE~1\EPMWOR~1.EXE
E:\p800\SONYER~1\Mobile\CONNEC~1\SCRFS.exe
E:\MICROS~1\Office10\OUTLOOK.EXE
C:\Programme\Opera7\Opera.exe
E:\AVPersonal\AVGUARD.EXE
C:\Dokumente und Einstellungen\klabautermann\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = www-proxy.t-online.de:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 192.168.0.*
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Adobe Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {9FD1785D-2E1E-4AE3-B0E5-09AD33F6ED67} - (no file)
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\sisUSBrg.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\Hcontrol.exe
O4 - HKLM\..\Run: [Power_Gear] e:\asus\powergear\BatteryLife.exe 1
O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.EXE
O4 - HKLM\..\Run: [CJQXBIP] C:\WINDOWS\CJQXBIP.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "E:\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVGCtrl] E:\AVPersonal\AVGNT.EXE /min
O4 - HKCU\..\Run: [Skype] "E:\skype\Skype.exe" /nosplash /minimized
O4 - Global Startup: Microsoft Office.lnk = E:\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: ASUS ChkMail.lnk = E:\Asus\chkmail\ChkMail.exe
O4 - Global Startup: D-Link AirPlus.lnk = ?
O4 - Global Startup: Telefonverbindungsmonitor.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Download with &DAP - E:\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - E:\DAP\dapextie2.htm
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://E:\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Konsole (HKLM)
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O12 - Plugin for .spx: E:\Opera\Program\Plugins\npspx32.dll
O16 - DPF: {0000000A-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/d/4/4/d446e8a9-3a86-4b59-bb19-f5bd11b40367/wmavax.CAB
O16 - DPF: {03F998B2-0E00-11D3-A498-00104B6EB52E} (MetaStreamCtl Class) - https://components.viewpoint.com/MTSInstallers/MetaStream3.cab?url=http://www.viewpoint.com/cgi-bin/vet_install_popup.pl?1&04.00.03.15&http://www.volvocars.de/pp/xc90/3D/explore.asp
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021126/qtinstall.info.apple.com/dribnif/de/win/QuickTimeInstaller.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{16A76B6F-41BA-419C-9EDB-2A52BB04DCF3}: NameServer = 192.168.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{16A76B6F-41BA-419C-9EDB-2A52BB04DCF3}: NameServer = 192.168.0.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{16A76B6F-41BA-419C-9EDB-2A52BB04DCF3}: NameServer = 192.168.0.1
frogggi Gast |