Profil des Benutzers: shady

Logfile of HijackThis v1.99.1
Scan saved at 17:34:28, on 22.09.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
c:ProgrammeGemeinsame DateienSymantec SharedccSetMgr.exe
c:ProgrammeGemeinsame DateienSymantec SharedccEvtMgr.exe
c:ProgrammeGemeinsame DateienSymantec SharedccProxy.exe
c:ProgrammeGemeinsame DateienSymantec SharedSNDSrvc.exe
c:ProgrammeGemeinsame DateienSymantec SharedSPBBCSPBBCSvc.exe
C:ProgrammeGemeinsame DateienSymantec SharedCCPD-LCsymlcsvc.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32IFXSPMGT.exe
C:WINDOWSsystem32IFXTCS.exe
C:ProgrammeGemeinsame DateienLightScribeLSSrvc.exe
c:ProgrammeNorton Internet SecurityNorton AntiVirusnavapsvc.exe
C:ProgrammeGemeinsame DateienSymantec SharedSecurity ConsoleNSCSRVCE.EXE
C:ProgrammeProtectToolsEmbedded Security SoftwarePSDsrvc.EXE
C:PROGRA~1TOBITC~1ServerClipInc-Server.exe
C:ProgrammeHewlett-PackardSharedhpqwmiex.exe
C:WINDOWSsystem32Ati2evxx.exe
C:ProgrammeHPQIAMbinasghost.exe
C:WINDOWSExplorer.EXE
C:ProgrammeProtectToolsEmbedded Security SoftwarePSDrt.exe
C:ProgrammeAnalog DevicesCoresmax4pnp.exe
C:ProgrammeJavajre1.5.0_08binjusched.exe
C:ProgrammeHPQHP ProtectTools Security ManagerPTHOSTTR.EXE
C:ProgrammeHewlett-PackardHP Software UpdateHPWuSchd2.exe
C:WINDOWSSystem32DLADLACTRLW.EXE
C:ProgrammeSynapticsSynTPSynTPEnh.exe
C:ProgrammehpqHP Wireless AssistantHP Wireless Assistant.exe
C:ProgrammeGemeinsame DateienSymantec SharedccApp.exe
C:ProgrammeHewlett-PackardHP Quick Launch ButtonsQlbCtrl.exe
C:WINDOWSSMINSTScheduler.exe
C:WINDOWSsystem32ctfmon.exe
C:PROGRA~1HPQSharedHPQTOA~1.EXE
C:WINDOWSSystem32svchost.exe
C:ProgrammeHewlett-PackardDigital Imagingbinhpqtra08.exe
C:ProgrammeHewlett-PackardDigital Imagingbinhpqimzone.exe
C:ProgrammeHewlett-PackardDigital ImagingbinhpqSTE08.exe
C:ProgrammeHewlett-PackardDigital ImagingProduct Assistantbinhprblog.exe
C:ProgrammeATI TechnologiesATI.ACECLI.EXE
C:ProgrammeATI TechnologiesATI.ACEcli.exe
C:ProgrammeMessengermsmsgs.exe
C:PROGRA~1MOZILL~1FIREFOX.EXE
C:DOKUME~1Daniel1LOKALE~1TempRar$EX00.703HijackThis.exe

R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.hp.com
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://www.hp.com
R1 – HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://www.hp.com/
O2 – BHO: Adobe PDF Reader Link Helper – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:ProgrammeAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
O2 – BHO: DriveLetterAccess – {5CA3D70E-1895-11CF-8E15-001234567890} – C:WINDOWSSystem32DLADLASHX_W.DLL
O2 – BHO: SSVHelper Class – {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} – C:ProgrammeJavajre1.5.0_08binssv.dll
O2 – BHO: NAV Helper – {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} – c:ProgrammeNorton Internet SecurityNorton AntiVirusNavShExt.dll
O2 – BHO: Google Toolbar Helper – {AA58ED58-01DD-4d91-8333-CF10577473F7} – c:programmegooglegoogletoolbar1.dll
O2 – BHO: HP Credential Manager for ProtectTools – {DF21F1DB-80C6-11D3-9483-B03D0EC10000} – C:ProgrammeHPQIAMBinItIeAddIN.dll
O3 – Toolbar: Norton AntiVirus – {C4069E3A-68F1-403E-B40E-20066696354B} – c:ProgrammeNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 – Toolbar: &Google – {2318C2B1-4965-11d4-9B18-009027A5CD4F} – c:programmegooglegoogletoolbar1.dll
O4 – HKLM..Run: [SoundMAXPnP] C:ProgrammeAnalog DevicesCoresmax4pnp.exe
O4 – HKLM..Run: [SoundMAX] C:ProgrammeAnalog DevicesSoundMAXSmax4.exe /tray
O4 – HKLM..Run: [SunJavaUpdateSched] „C:ProgrammeJavajre1.5.0_08binjusched.exe“
O4 – HKLM..Run: [ATICCC] „C:ProgrammeATI TechnologiesATI.ACECLIStart.exe“
O4 – HKLM..Run: [PTHOSTTR] C:ProgrammeHPQHP ProtectTools Security ManagerPTHOSTTR.EXE /Start
O4 – HKLM..Run: [HP Software Update] C:ProgrammeHewlett-PackardHP Software UpdateHPWuSchd2.exe
O4 – HKLM..Run: [DLA] C:WINDOWSSystem32DLADLACTRLW.EXE
O4 – HKLM..Run: [SynTPEnh] C:ProgrammeSynapticsSynTPSynTPEnh.exe
O4 – HKLM..Run: [hpWirelessAssistant] C:ProgrammehpqHP Wireless AssistantHP Wireless Assistant.exe
O4 – HKLM..Run: [ccApp] „c:ProgrammeGemeinsame DateienSymantec SharedccApp.exe“
O4 – HKLM..Run: [CognizanceTS] rundll32.exe C:PROGRA~1HPQIAMBinAsTsVcc.dll,RegisterModule
O4 – HKLM..Run: [QlbCtrl] %ProgramFiles%Hewlett-PackardHP Quick Launch ButtonsQlbCtrl.exe /Start
O4 – HKLM..Run: [Cpqset] C:ProgrammeHewlett-PackardDefault Settingscpqset.exe
O4 – HKLM..Run: [Recguard] C:WINDOWSSminstRecguard.exe
O4 – HKLM..Run: [Reminder] C:WINDOWSCreatorRemind_XP.exe
O4 – HKLM..Run: [Scheduler] C:WINDOWSSMINSTScheduler.exe
O4 – HKLM..Run: [WatchDog] C:ProgrammeInterVideoDVD CheckDVDCheck.exe
O4 – HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 – HKLM..Run: [HPHUPD08] C:ProgrammeHewlett-PackardDigital Imaging{33D6CC28-9F75-4d1b-A11D-98895B3A3729}hphupd08.exe
O4 – HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 – HKCU..Run: [tunebite.exe] C:Programmetunebitetunebite.exe -hidden
O4 – HKCU..Run: [NBJ] „C:ProgrammeAheadNero BackItUpNBJ.exe“
O4 – HKCU..RunOnce: [ICQ Lite] C:ProgrammeICQLiteICQLite.exe -trayboot
O4 – Global Startup: Adobe Reader – Schnellstart.lnk = C:ProgrammeAdobeAcrobat 7.0Readerreader_sl.exe
O4 – Global Startup: DVD Check.lnk = C:ProgrammeInterVideoDVD CheckDVDCheck.exe
O4 – Global Startup: HP Digital Imaging Monitor.lnk = C:ProgrammeHewlett-PackardDigital Imagingbinhpqtra08.exe
O4 – Global Startup: HP Image Zone Schnellstart.lnk = C:ProgrammeHewlett-PackardDigital Imagingbinhpqthb08.exe
O4 – Global Startup: Microsoft Office.lnk = C:ProgrammeMicrosoft OfficeOfficeOSA9.EXE
O8 – Extra context menu item: &Google-Suche – res://C:ProgrammeGoogleGoogleToolbar1.dll/cmsearch.html
O8 – Extra context menu item: &Ins Deutsche übersetzen – res://C:ProgrammeGoogleGoogleToolbar1.dll/cmwordtrans.html
O8 – Extra context menu item: Im Cache gespeicherte Seite – res://C:ProgrammeGoogleGoogleToolbar1.dll/cmcache.html
O8 – Extra context menu item: Verweisseiten – res://C:ProgrammeGoogleGoogleToolbar1.dll/cmbacklinks.html
O8 – Extra context menu item: Ähnliche Seiten – res://C:ProgrammeGoogleGoogleToolbar1.dll/cmsimilar.html
O9 – Extra button: (no name) – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:ProgrammeJavajre1.5.0_08binssv.dll
O9 – Extra ‚Tools‘ menuitem: Sun Java Konsole – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – C:ProgrammeJavajre1.5.0_08binssv.dll
O9 – Extra button: ICQ Lite – {B863453A-26C3-4e1f-A54D-A2CD196348E9} – C:ProgrammeICQLiteICQLite.exe
O9 – Extra ‚Tools‘ menuitem: ICQ Lite – {B863453A-26C3-4e1f-A54D-A2CD196348E9} – C:ProgrammeICQLiteICQLite.exe
O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:ProgrammeMessengermsmsgs.exe
O9 – Extra ‚Tools‘ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:ProgrammeMessengermsmsgs.exe
O14 – IERESET.INF: START_PAGE_URL=http://www.hp.com
O18 – Protocol: msnim – {828030A1-22C1-4009-854F-8E305202313F} – „C:PROGRA~1MSNMES~1msgrapp.dll“ (file missing)
O20 – Winlogon Notify: IfxWlxEN – C:WINDOWSSYSTEM32IfxWlxEN.dll
O20 – Winlogon Notify: OneCard – C:ProgrammeHPQIAMBinAsWlnPkg.dll
O23 – Service: Ati HotKey Poller – ATI Technologies Inc. – C:WINDOWSsystem32Ati2evxx.exe
O23 – Service: Symantec Event Manager (ccEvtMgr) – Symantec Corporation – c:ProgrammeGemeinsame DateienSymantec SharedccEvtMgr.exe
O23 – Service: Symantec Internet Security Password Validation (ccISPwdSvc) – Symantec Corporation – c:ProgrammeNorton Internet SecurityccPwdSvc.exe
O23 – Service: Symantec Network Proxy (ccProxy) – Symantec Corporation – c:ProgrammeGemeinsame DateienSymantec SharedccProxy.exe
O23 – Service: Symantec Settings Manager (ccSetMgr) – Symantec Corporation – c:ProgrammeGemeinsame DateienSymantec SharedccSetMgr.exe
O23 – Service: ClipInc 001 (ClipInc001) – Unknown owner – C:PROGRA~1TOBITC~1ServerClipInc-Server.exe
O23 – Service: COM Host (comHost) – Symantec Corporation – c:ProgrammeNorton Internet SecuritycomHost.exe
O23 – Service: hpqwmiex – Hewlett-Packard Development Company, L.P. – C:ProgrammeHewlett-PackardSharedhpqwmiex.exe
O23 – Service: InstallDriver Table Manager (IDriverT) – Macrovision Corporation – C:ProgrammeGemeinsame DateienInstallShieldDriver11Intel 32IDriverT.exe
O23 – Service: Security Platform Management Service (IFXSpMgtSrv) – Infineon Technologies AG – C:WINDOWSsystem32IFXSPMGT.exe
O23 – Service: Trusted Platform Core Service (IFXTCS) – Infineon Technologies AG – C:WINDOWSsystem32IFXTCS.exe
O23 – Service: LightScribeService Direct Disc Labeling Service (LightScribeService) – Hewlett-Packard Company – C:ProgrammeGemeinsame DateienLightScribeLSSrvc.exe
O23 – Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) – Symantec Corporation – c:ProgrammeNorton Internet SecurityNorton AntiVirusnavapsvc.exe
O23 – Service: Norton Protection Center-Dienst (NSCService) – Symantec Corporation – C:ProgrammeGemeinsame DateienSymantec SharedSecurity ConsoleNSCSRVCE.EXE
O23 – Service: PC Angel (PCA) – SoftThinks – C:WINDOWSSMINSTPCAngel.exe
O23 – Service: Personal Secure Drive Service (PersonalSecureDriveService) – Infineon Technologies AG – C:ProgrammeProtectToolsEmbedded Security SoftwarePSDsrvc.EXE
O23 – Service: Pml Driver HPZ12 – HP – C:WINDOWSsystem32HPZipm12.exe
O23 – Service: Symantec AVScan (SAVScan) – Symantec Corporation – c:ProgrammeNorton Internet SecurityNorton AntiVirusSAVScan.exe
O23 – Service: Symantec Network Drivers Service (SNDSrvc) – Symantec Corporation – c:ProgrammeGemeinsame DateienSymantec SharedSNDSrvc.exe
O23 – Service: Symantec SPBBCSvc (SPBBCSvc) – Symantec Corporation – c:ProgrammeGemeinsame DateienSymantec SharedSPBBCSPBBCSvc.exe
O23 – Service: Symantec Core LC – Symantec Corporation – C:ProgrammeGemeinsame DateienSymantec SharedCCPD-LCsymlcsvc.exe