Hilfe ? ! Was geht mit meinem PC ab, Virus ? Trojaner oder was? Einstellungen

[Mat]

Guten Tag

Vorweg mal meine Daten

Notebook LG R 500 mit Vista Home Premium weitere daten auf anfrage (weiß ja nicht was ihr braucht)


Sorry das ich während Weinachten stören muss... Aber es geht um mein neues Weinachtsgeschenk was ich erhalten habe. Habe hier einige Probleme mit den Rechner es poppt immer das untere auf

http://www.myimg.de/?img=komischb104a.jpg
http://www.myimg.de/?img=komisch2aabf1.jpg
http://www.myimg.de/?img=komisch3b4f45.jpg

sowas oder anderes (Sobald es wieder kommt füge ich die Scrennshots nach)

Nun habe ich CWS Shredderer laufen lassen der meldet und entfernt es NICHT !:
**** Run Keys ****

RUN: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
RUN: [LG Intelligent Update] "C:\Program Files\lg_swupdate\giljabistart.exe" Gilautouc
RUN: [InstantBurn] C:\PROGRA~1\CYBERL~1\INSTAN~1\Win2K\IBurn.exe
RUN: [RtHDVCpl] RtHDVCpl.exe
RUN: [Skytel] Skytel.exe
RUN: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
RUN: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
RUN: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
RUN: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
RUN: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
RUN: [KeybdUtility] C:\Program Files\LG Software\On Screen Display\HotKey.exe
RUN: [OmniPass] C:\Program Files\Softex\OmniPass\scureapp.exe
RUN: [LG Magnifier] %ProgramFiles%\LG Software\LG Magnifier\MagnifyingGlass.exe
RUN: [IaNvSrv] C:\Program Files\Intel\Intel Matrix Storage Manager\OROM\IaNvSrv\IaNvSrv.exe
RUN: [BatteryMiser 5] C:\Program Files\LG Software\BatteryMiser\BatteryMiser5.exe
RUN: [IFXSPMGT] C:\Windows\system32\IFXSPMGT.exe /NotifyLogon
RUN: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
RUN: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
RUN: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
RUN: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
RUN: [Power2GoExpress] "C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe" /Startup


**** Browser Helper Objects ****

BHO: [Skype add-on (mastermind)] C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll


**** IE Toolbars ****



**** IE Extensions ****

IEExt: [Skype]


**** Hosts File Entries ****

HOSTS: 127.0.0.1 localhost
HOSTS: ::1 localhost
HOSTS: ::1 localhost


**** IE Settings ****

Default Page: http://go.microsoft.com/fwlink/?LinkId=69157
Default Search: http://go.microsoft.com/fwlink/?LinkId=54896
Local Page: C:\Windows\system32\blank.htm
Search Page: http://go.microsoft.com/fwlink/?LinkId=54896


**** IE Context Menu (Right click) ****

IEContext: [Nach Microsoft &Excel exportieren] res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000


**** Layered Service Providers ****

LSP: MSAFD-Tcpip [TCP/IP]
LSP: MSAFD-Tcpip [UDP/IP]
LSP: MSAFD-Tcpip [TCP/IPv6]
LSP: MSAFD-Tcpip [UDP/IPv6]
LSP: RSVP-TCPv6-Dienstanbieter
LSP: RSVP-TCP-Dienstanbieter
LSP: RSVP-UDPv6-Dienstanbieter
LSP: RSVP-UDP-Dienstanbieter
LSP: MSAFD RfComm [Bluetooth]
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8EC0144E-5EC7-49C7-A4AB-66E5F5813648}] SEQPACKET 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{8EC0144E-5EC7-49C7-A4AB-66E5F5813648}] DATAGRAM 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{77A6CD09-74A3-4505-8DCB-181888FB8901}] SEQPACKET 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{77A6CD09-74A3-4505-8DCB-181888FB8901}] DATAGRAM 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{806DC44D-643B-4976-A2E5-091F44AE225F}] SEQPACKET 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{806DC44D-643B-4976-A2E5-091F44AE225F}] DATAGRAM 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{90944B44-B7E9-4097-94FF-869EDA0FE108}] SEQPACKET 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{90944B44-B7E9-4097-94FF-869EDA0FE108}] DATAGRAM 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{8EC0144E-5EC7-49C7-A4AB-66E5F5813648}] SEQPACKET 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{8EC0144E-5EC7-49C7-A4AB-66E5F5813648}] DATAGRAM 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{77A6CD09-74A3-4505-8DCB-181888FB8901}] SEQPACKET 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{77A6CD09-74A3-4505-8DCB-181888FB8901}] DATAGRAM 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{806DC44D-643B-4976-A2E5-091F44AE225F}] SEQPACKET 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{806DC44D-643B-4976-A2E5-091F44AE225F}] DATAGRAM 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{90944B44-B7E9-4097-94FF-869EDA0FE108}] SEQPACKET 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{90944B44-B7E9-4097-94FF-869EDA0FE108}] DATAGRAM 3


**** Blocked Control Panel Items ****



**** Downloaded Program Files ****

{D27CDB6E-AE6D-11CF-96B8-444553540000} [http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab] C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe


**** Custom IE Search Items ****


Hijackthis sagt:


erstmal folgende Meldungen erst:
http://www.myimg.de/?img=komisch498448.jpg
dann:

http://www.myimg.de/?img=komisch57145d.jpg

Dann bekomm ich den Hijackthis log

Logfile of HijackThis v1.99.1
Scan saved at 14:43:13, on 25.12.2007
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\lg_swupdate\GiljabiStart.exe
C:\Program Files\CyberLink\InstantBurn\Win2K\IBurn.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\LG Software\On Screen Display\HotKey.exe
C:\Program Files\Softex\OmniPass\scureapp.exe
C:\Program Files\LG Software\LG Magnifier\MagnifyingGlass.exe
C:\Program Files\LG Software\BatteryMiser\BatteryMiser5.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\LG Software\LG Magnifier\Maglev.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe
C:\Program Files\Infineon\Security Platform Software\PSDrt.exe
C:\Program Files\Infineon\Security Platform Software\SpTna.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Crazy Browser\Crazy Browser.exe
C:\Program Files\InterMute\SpySubtract\CWShredder.exe
C:\Users\MatPe\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [LG Intelligent Update] "C:\Program Files\lg_swupdate\giljabistart.exe" Gilautouc
O4 - HKLM\..\Run: [InstantBurn] C:\PROGRA~1\CYBERL~1\INSTAN~1\Win2K\IBurn.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [KeybdUtility] C:\Program Files\LG Software\On Screen Display\HotKey.exe
O4 - HKLM\..\Run: [OmniPass] C:\Program Files\Softex\OmniPass\scureapp.exe
O4 - HKLM\..\Run: [LG Magnifier] %ProgramFiles%\LG Software\LG Magnifier\MagnifyingGlass.exe
O4 - HKLM\..\Run: [IaNvSrv] C:\Program Files\Intel\Intel Matrix Storage Manager\OROM\IaNvSrv\IaNvSrv.exe
O4 - HKLM\..\Run: [BatteryMiser 5] C:\Program Files\LG Software\BatteryMiser\BatteryMiser5.exe
O4 - HKLM\..\Run: [IFXSPMGT] C:\Windows\system32\IFXSPMGT.exe /NotifyLogon
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Power2GoExpress] "C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe" /Startup
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\Windows\system32\IFXSPMGT.exe
O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\Windows\system32\IFXTCS.exe
O23 - Service: Softex OmniPass Service (OmniServ) - Softex Inc. - C:\Program Files\Softex\OmniPass\OmniServ.exe
O23 - Service: Personal Secure Drive-Dienst (PersonalSecureDriveService) - Infineon Technologies AG - C:\Windows\system32\IfxPsdSv.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)





Kann mir irgendwer sagen was mit meinem Notebook abgeht ?

Danke

Der Beitrag wurde von Mat bearbeitet: 25.12.2007, 15:23