Jump to content

Build Theme!
  •  
  • Unreplied Topics
  • Downloads
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93112 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

help with viruses

Started by Vada , Jan 10 2008 03:01 PM

  • This topic is locked This topic is locked
1 reply to this topic

#1 Vada

Vada

    New Member

  • New Member
  • Pip
  • 2 posts

Posted 10 January 2008 - 03:01 PM

Hello,

I ran AVG Anti-Spyware and it found viruses on my computer, I pasted the AVG log after the HijackThis log. I also had a file called copy.exe and host.exe on my c-drive, which are not in the report.
I then did everything as described in the self help.
When I restart the computer I still get an error message that C:\WINDOWS\svchost.exe could not be found.
Could you please tell me if my computer is now clean.
Is there any need to either reinstall windows or to change any passwords or pins that I might have used since having the viruses?

Thanks you.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:35:04, on 10.01.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Programme\Java\jre1.6.0_01\bin\jusched.exe
C:\SCANJET\PrecisionScanPro\HPLamp.exe
C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe
C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
C:\Programme\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Programme\phonostar\ps_agent.exe
C:\Programme\phonostar\ps_timer.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\Programme\Microsoft Office\Office\OUTLOOK.EXE
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\Tini\Desktop\HiJackThis202.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft....k/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
F3 - REG:win.ini: load=C:\WINDOWS\svchost.exe
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Rational IE Enabler - {1E9FB1C4-F40B-4E10-898E-D6209B122F6B} - C:\Programme\IBM\Rational\FTTrial\6.1\FunctionalTester\eclipse\plugins\com.rational.test.ft.wswplugin_6.1.0\RTXIEEnabler.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar3.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Programme\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [HP Lamp] C:\SCANJET\PrecisionScanPro\HPLamp.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programme\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Programme\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [PhonostarAgent] C:\Programme\phonostar\ps_agent.exe
O4 - HKCU\..\Run: [PhonostarTimer] C:\Programme\phonostar\ps_timer.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Programme\AIM95\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Programme\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1....loadManager.ocx
O17 - HKLM\System\CCS\Services\Tcpip\..\{61ADEAC7-C212-43F7-957C-37DBA13B9EF8}: NameServer = 195.50.140.252,195.50.140.114
O18 - Protocol: bw+0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: haufereader - (no CLSID) - (no file)
O18 - Protocol: offline-8876480 - {48E3B92D-7788-4435-BC61-44A55AD5A9E5} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Haufe iDesk-Service in C:\Programme\Haufe\iDesk\iDeskService\Zope (HRService) - Unknown owner - C:\Programme\Haufe\iDesk\iDeskService\iDeskService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programme\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

--
End of file - 19603 bytes


---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 22:22:05 06.01.2008

+ Scan result:



C:\WINDOWS\system32\temp2.exe -> Backdoor.Small.lo : Cleaned with backup (quarantined).
C:\WINDOWS\svchost.exe -> Dropper.Small.apl : Cleaned with backup (quarantined).
:mozilla.119:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.121:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.123:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.124:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.125:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.126:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.127:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.128:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.129:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.130:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.131:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.132:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.463:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.589:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.603:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.658:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.667:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@allesklarcomag.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@sevenoneintermedia.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.322:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.71i : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@adserver.71i[1].txt -> TrackingCookie.71i : Cleaned.
:mozilla.611:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.612:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.294:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Addcontrol : Cleaned.
:mozilla.505:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Adnet : Cleaned.
:mozilla.506:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Adnet : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@ad.adnet[1].txt -> TrackingCookie.Adnet : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@adnet[1].txt -> TrackingCookie.Adnet : Cleaned.
:mozilla.273:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.274:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.184:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.185:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.186:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.187:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.188:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@advertising[1].txt -> TrackingCookie.Advertising : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@adviva[1].txt -> TrackingCookie.Adviva : Cleaned.
:mozilla.256:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.325:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.327:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@bfast[1].txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.633:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.634:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.635:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@ads.bridgetrack[2].txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.484:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.485:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.478:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.486:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.487:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.488:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.489:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.490:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.491:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.653:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@data.coremetrics[1].txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.26:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.316:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.326:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Etracker : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@www.etracker[1].txt -> TrackingCookie.Etracker : Cleaned.
:mozilla.213:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.437:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@as1.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.423:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.425:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.190:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.194:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.475:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.533:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.534:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.676:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.684:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@i12[1].txt -> TrackingCookie.I12 : Cleaned.
:mozilla.42:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.43:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.116:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Information : Cleaned.
:mozilla.44:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned.
:mozilla.89:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Komtrack : Cleaned.
:mozilla.90:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Komtrack : Cleaned.
:mozilla.91:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Komtrack : Cleaned.
:mozilla.93:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Komtrack : Cleaned.
:mozilla.94:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Komtrack : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@komtrack[2].txt -> TrackingCookie.Komtrack : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.239:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@mediaplex[2].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@auto.search.msn[2].txt -> TrackingCookie.Msn : Cleaned.
:mozilla.602:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.697:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Oewabox : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@stat.onestat[2].txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.551:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.552:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@overture[1].txt -> TrackingCookie.Overture : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@ppms.popularix[1].txt -> TrackingCookie.Popularix : Cleaned.
:mozilla.476:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.477:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.424:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Quarterserver : Cleaned.
:mozilla.448:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.449:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.685:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.686:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.687:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.535:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.536:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.537:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.538:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.539:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@revsci[2].txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.388:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.389:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.390:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.391:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.392:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.393:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.394:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.401:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.431:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.532:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.679:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.15:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Skype : Cleaned.
:mozilla.652:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Skype : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@site.skype[1].txt -> TrackingCookie.Skype : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@skype[1].txt -> TrackingCookie.Skype : Cleaned.
:mozilla.95:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.98:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.395:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Tfag : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@php.sales.tfag[1].txt -> TrackingCookie.Tfag : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@sales.tfag[1].txt -> TrackingCookie.Tfag : Cleaned.
:mozilla.558:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.559:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.560:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.561:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.27:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.73:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
C:\Dokumente und Einstellungen\Tini\Cookies\tini@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.242:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.243:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.244:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.245:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.270:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.271:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.272:C:\Dokumente und Einstellungen\Tini\Anwendungsdaten\Mozilla\Firefox\Profiles\rvcjp1zn.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\WINDOWS\system32\temp1.exe -> Trojan.Copier : Cleaned with backup (quarantined).
C:\WINDOWS\xcopy.exe -> Trojan.Copyself : Cleaned with backup (quarantined).


::Report end


---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 07:08:03 07.01.2008

+ Scan result:



C:\System Volume Information\_restore{69B48B8B-B564-445C-B5F8-1FA297FA77B3}\RP655\A0057861.exe -> Dropper.Small.apl : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{69B48B8B-B564-445C-B5F8-1FA297FA77B3}\RP655\A0057862.exe -> Dropper.Small.apl : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{69B48B8B-B564-445C-B5F8-1FA297FA77B3}\RP655\A0057864.exe -> Trojan.Copyself : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{69B48B8B-B564-445C-B5F8-1FA297FA77B3}\RP655\A0057863.ocm -> Worm.AimVen : Cleaned with backup (quarantined).


::Report end

---------------------------------------------------------
AVG Anti-Spyware - Scan-Bericht
---------------------------------------------------------

+ Erstellt um: 06:13:16 09.01.2008

+ Scan-Ergebnis:



HKU\S-1-5-21-1913934128-2333477019-1300339810-500\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Mit Backup gesäubert (unter Quarantäne gestellt).


::Berichtende

    Advertisements

Register to Remove

#2 LDTate

LDTate

    Grand Poobah

  • Root Admin
  • 57,211 posts

Posted 17 January 2008 - 04:24 PM

Your post has been Moved, Closed or Edited for one of the following reasons:

1.) You posted multiple topics and only one is required

2.) You are spamming links to other places without approval

3.) You have posted your hijackthis log to the wrong forum:
( http://forums.whatth...emoval_f27.html ) <--- correct forum for HijackThis Logs

4.) Abusive language or other problems in your text

5.) Your log is too old (20 days or more) and no replies from you after a volunteer tried to help you

If you came here for help, and you have not posted a Hijackthis log to the proper forum, then you may do so now, if you came here to spam or abuse, you will be dealt with harsher on your next offense

This is a family oriented forum to help those that need help.

==============================

The forum is run by volunteers who donate their time and expertise.

Want to help others? Join the ClassRoom and learn how.

Logs will be closed if you haven't replied within 3 days

 

If you would like to paypal.gif for the help you received.
 

Proud graduate of TC/WTT Classroom

 

Related Topics

Back to Virus, Spyware & Malware Removal · Next Unread Topic →

1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

  1. What the Tech
  2. → Spyware / Malware / Virus Removal
  3. → Virus, Spyware & Malware Removal
  4. Privacy Policy
  5. Terms of Use ·