Hhabe nun seit 2 Tagen ein echtes Problemmit Pop-Up´s.Da ich nun keine Ahnung habe wie man so eine LogFile auswertet bitte ich euch mal um Hilfe
da ist die LogFile viel Spaß und danke im Voraus !!^^
Logfile of HijackThis v1.99.1
Scan saved at 15:33:24, on 22.03.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\mfcrb32.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\explorer.exe
C:\Programme\ICQLite\ICQLite.exe
C:\WINDOWS\system32\paytime.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\GEMEIN~1\krmw\krmwm.exe
C:\Programme\Xfire\Xfire.exe
C:\PROGRA~1\GEMEIN~1\krmw\krmwa.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRAMME\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\system32\crky.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\PROGRAMME\INTERNET EXPLORER\IEXPLORE.EXE
C:\DOKUME~1\Jan\LOKALE~1\Temp\Temporäres Verzeichnis 1 für hijackthis.zip\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\qvcfl.dll/sp.html#53142%resultposition.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\qvcfl.dll/sp.html#53142%resultposition.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\qvcfl.dll/sp.html#53142%resultposition.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\qvcfl.dll/sp.html#53142%resultposition.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\qvcfl.dll/sp.html#53142%resultposition.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\qvcfl.dll/sp.html#53142%resultposition.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\qvcfl.dll/sp.html#53142%resultposition.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=explorer.exe "C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\ibm00001.exe"
O2 - BHO: (no name) - {0631CBDA-7F99-C68B-C89A-E8A19DA73BEE} - (no file)
O2 - BHO: (no name) - {13FE7B61-AB76-464D-D4B1-1EE42B5C7715} - (no file)
O2 - BHO: (no name) - {2FC68BAA-E00A-CB9F-C91B-DCEDFBEFA258} - (no file)
O2 - BHO: (no name) - {32D819AE-5E1D-5524-783B-C8993083716B} - (no file)
O2 - BHO: Class - {3C7652FC-49D5-AB91-A5E9-C22E6515486A} - C:\WINDOWS\javamz.dll
O2 - BHO: (no name) - {3F4A50AD-904E-7E61-9D73-3F174291F4B2} - (no file)
O2 - BHO: (no name) - {4604FEF0-A46F-3D1C-FBB2-34257F010E20} - (no file)
O2 - BHO: (no name) - {4A73A1CA-0346-9AB9-3C2D-8D627CE729A7} - (no file)
O2 - BHO: (no name) - {4FC7118F-CEC2-4822-4FA2-BD496C690A0C} - (no file)
O2 - BHO: (no name) - {5180E740-7C37-6551-4A6A-64CDA5B4D81B} - (no file)
O2 - BHO: (no name) - {53710463-D86F-4380-3AEC-F58B9A66C964} - (no file)
O2 - BHO: (no name) - {86736BF9-6537-4FA6-04A3-1ADBD4CC6A59} - (no file)
O2 - BHO: (no name) - {87313AEB-9DCC-C21C-D9D8-0D845060CD28} - (no file)
O2 - BHO: (no name) - {9E10B616-D6A4-32D5-95E7-6F227792C942} - (no file)
O2 - BHO: (no name) - {A4844B2A-0F34-63F1-9085-DC85F24E5C19} - (no file)
O2 - BHO: (no name) - {B35E41D7-21EB-4FC8-369F-8EDCA0E710E9} - (no file)
O2 - BHO: (no name) - {B7B58E9F-C175-CC09-9ADC-6C41E9EE5ABC} - (no file)
O2 - BHO: (no name) - {C0C0E675-BCA8-D1EC-49B2-D7620FCDD5BE} - (no file)
O2 - BHO: (no name) - {C0E37CC3-72DE-0D9D-FC4E-8DF8BB4A674A} - (no file)
O2 - BHO: (no name) - {D8DC8C41-2FDF-F1A1-1319-94F8F477DB59} - (no file)
O2 - BHO: (no name) - {D990B9E1-F168-13E8-1A21-97D04D3C2F96} - (no file)
O2 - BHO: (no name) - {E7081361-B49F-D230-D56A-D49C0144CDBE} - (no file)
O2 - BHO: (no name) - {ECFDC5BB-22C0-BB52-174D-50C3A13C509D} - (no file)
O2 - BHO: (no name) - {F53EC50C-1736-5E28-E668-CFFB2AA3AE8D} - (no file)
O4 - HKLM\..\Run: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [PayTime] C:\WINDOWS\system32\paytime.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [crky.exe] C:\WINDOWS\system32\crky.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "C:\Programme\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [Shell] "C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\ibm00001.exe"
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot
O4 - Startup: Xfire.lnk = C:\Programme\Xfire\Xfire.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O20 - Winlogon Notify: Setup - C:\WINDOWS\system32\m6lslg3716.dll
O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\mfcrb32.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Network Monitor - Unknown owner - C:\Programme\Network Monitor\netmon.exe (file missing)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
