Hallo,
folgendes Probl. Beim öffnen des Inet Explorers erscheint folgendes:
Windows has detected an Internet attack attempt…
Click Free Scan to remove spyware, adware, trojans and viruses from your computer.
Full system scan is highly recommended by Windows Security Center!
Spyware is a software, which can gather information from user’s computer through Internet connection
and send them to its creator. Gathered information can be passwords, e-mail addresses and all that data,
which is important for you. Besides, spyware can be used for advertising purposes, when commercial
pop-ups are opened on your desktop occasionally. Click here to remove spyware now…
Außerdem öffnen sich ständig popups mit ähnlichem Inhalt und verweisen auf die seite antispynet. Alles Versuche mit adaware oder spybot das Probl. zu beheben waren bisher vergebens. Außerdem ist im normalen Win Modus die Registrierung und der Manager gesperrt.
Wer kann mir helfen das Problem zu beheben?
Poste auch schon mal den Logfilevon HijackThis:
Logfile of HijackThis v1.99.1
Scan saved at 19:27:44, on 06.08.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\csrss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\spoolsv.exe
H:\Programme\AntiVir PersonalEdition Classic\sched.exe
H:\Programme\AntiVir PersonalEdition Classic\avguard.exe
H:\WINDOWS\system32\nvsvc32.exe
H:\WINDOWS\system32\HPZipm12.exe
H:\Programme\Steganos AntiSpyware 2006\WRSSSDK.exe
H:\WINDOWS\Explorer.EXE
H:\Programme\Java\jre1.5.0_05\bin\jusched.exe
H:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
H:\Programme\Microsoft IntelliPoint\point32.exe
H:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
H:\Programme\HP\HP Software Update\HPWuSchd2.exe
H:\WINDOWS\system32\wdfmgr.exe
H:\WINDOWS\system32\wscntfy.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\smartdrv.exe
H:\WINDOWS\system32\officescan.exe
H:\Programme\Internet Explorer\iexplore.exe
H:\WINDOWS\Explorer.EXE
H:\HT\HijackThis.exe
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {00000000-59D4-4008-9058-080011001200} - (no file)
O2 - BHO: (no name) - {00000000-C1EC-0345-6EC2-4D0300000000} - (no file)
O2 - BHO: (no name) - {00000000-F09C-02B4-6EC2-AD0300000000} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {3ceff6cd-6f08-4e4d-bccd-ff7415288c3b} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - H:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {77701e16-9bfe-4b63-a5b4-7bd156758a37} - (no file)
O2 - BHO: (no name) - {7b55bb05-0b4d-44fd-81a6-b136188f5deb} - (no file)
O2 - BHO: (no name) - {8333c319-0669-4893-a418-f56d9249fca6} - (no file)
O2 - BHO: (no name) - {87185E78-A61B-4DB3-965A-3235BBD7A622} - H:\WINDOWS\system32\win32hp.dll
O2 - BHO: (no name) - {9c691a33-7dda-4c2f-be4c-c176083f35cf} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - h:\programme\google\googletoolbar1.dll
O2 - BHO: office_pnl.office_panel - {B53455DB-5527-4041-AC41-F86E6947AA47} - H:\WINDOWS\system32\office_pnl.dll
O2 - BHO: (no name) - {e52dedbb-d168-4bdb-b229-c48160800e81} - (no file)
O2 - BHO: (no name) - {ffd2825e-0785-40c5-9a41-518f53a8261f} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - h:\programme\google\googletoolbar1.dll
O4 - HKLM…\Run: [NeroFilterCheck] H:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM…\Run: [SunJavaUpdateSched] H:\Programme\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE H:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM…\Run: [QuickTime Task] „H:\Programme\QuickTime\qttask.exe“ -atboottime
O4 - HKLM…\Run: [avgnt] „H:\Programme\AntiVir PersonalEdition Classic\avgnt.exe“ /min
O4 - HKLM…\Run: [IntelliPoint] „H:\Programme\Microsoft IntelliPoint\point32.exe“
O4 - HKLM…\Run: [WinampAgent] H:\Programme\Winamp\winampa.exe
O4 - HKLM…\Run: [TkBellExe] „H:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe“ -osboot
O4 - HKLM…\Run: [HP Software Update] H:\Programme\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM…\Run: [Antispyware 2006] „H:\Programme\Steganos AntiSpyware 2006\saspy2006.exe“ /startintray
O4 - HKLM…\Run: [Transponder] H:\WINDOWS\system32\susp.exe
O4 - HKLM…\Run: [Adware.Srv32] H:\WINDOWS\system32\runsrv32.exe
O4 - HKCU…\Run: [updateMgr] „H:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe“ AcRdB7_0_7 -reboot 1
O4 - HKCU…\Run: [SpybotSD TeaTimer] H:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: Trillian.lnk = H:\Programme\Trillian\trillian.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = H:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = H:\Programme\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Google-Suche - res://H:\Programme\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Ins Deutsche übersetzen - res://H:\Programme\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://H:\Programme\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://H:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Verweisseiten - res://H:\Programme\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://H:\Programme\Google\GoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Programme\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra ‚Tools‘ menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Programme\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Programme\Messenger\msmsgs.exe
O9 - Extra ‚Tools‘ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:\Programme\Messenger\msmsgs.exe
O16 - DPF: {40272BF7-4FF5-4D6F-9BAD-3C1D3CB32982} (Live365PlayerVIP Class) - http://www.live365.com/players/p365vip.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Contr…
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asin…
O17 - HKLM\System\CCS\Services\Tcpip…{E53DC3D4-8D23-4E27-9E0E-9E7BFF02047B}: NameServer = 192.168.0.1
O23 - Service: AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - H:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Service (AntiVirService) - AVIRA GmbH - H:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - H:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - H:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - H:\Programme\Steganos AntiSpyware 2006\WRSSSDK.exe