Zitat:

Habe mir Netpumper runtergeladen und nun das wohl bekannte Problem mit CIDs. Mein Virenscanner findet nichts!

Zitat:

Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:ProgrammeIntelWirelessBinEvtEng.exe
C:ProgrammeIntelWirelessBinS24EvMon.exe
C:ProgrammeGemeinsame DateienSymantec SharedccSetMgr.exe
C:ProgrammeGemeinsame DateienSymantec SharedccEvtMgr.exe
C:ProgrammeGemeinsame DateienSymantec SharedccProxy.exe
C:ProgrammeGemeinsame DateienSymantec SharedSNDSrvc.exe
C:ProgrammeGemeinsame DateienSymantec SharedSPBBCSPBBCSvc.exe
C:ProgrammeGemeinsame DateienSymantec SharedCCPD-LCsymlcsvc.exe
C:WINDOWSsystem32spoolsv.exe
C:ProgrammeAntiVir PersonalEdition Classicsched.exe
C:ProgrammeAntiVir PersonalEdition Classicavguard.exe
C:ProgrammeSymantecLiveUpdateALUSchedulerSvc.exe
C:ProgrammeTOSHIBAConfigFreeCFSvcs.exe
C:WINDOWSeHomeehRecvr.exe
C:WINDOWSeHomeehSched.exe
C:ProgrammeNorton Internet SecurityNorton AntiVirusnavapsvc.exe
C:ProgrammeIntelWirelessBinRegSrvc.exe
C:ProgrammeToshibaTOSHIBA AppletTAPPSRV.exe
C:PROGRA~1COMMON~1X10Commonx10nets.exe
C:WINDOWSsystem32dllhost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSehomeehtray.exe
C:WINDOWSsystem32igfxtray.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:WINDOWSeHomeehmsas.exe
C:ProgrammeSynapticsSynTPSynTPEnh.exe
C:WINDOWSRTHDCPL.EXE
C:ProgrammeSynapticsSynTPToshiba.exe
C:WINDOWSAGRSMMSG.exe
C:ProgrammeToshibaToshiba Appletthotkey.exe
C:WINDOWSsystem32TPSMain.exe
C:ProgrammeTOSHIBAConfigFreeNDSTray.exe
C:ProgrammeTOSHIBATOSHIBA Zoom-DienstprogrammSmoothView.exe
C:ProgrammeTOSHIBATOSHIBA ControlsTFncKy.exe
C:ProgrammeGemeinsame DateienSymantec SharedccApp.exe
C:ProgrammeTOSHIBATvsTvsTray.exe
C:WINDOWSSystem32DLADLACTRLW.EXE
C:ProgrammeInternet Exploreriexplore.exe
C:WINDOWSsystem32TPSBattM.exe
C:ProgrammeIntelWirelessbinZCfgSvc.exe
C:ProgrammeIntelWirelessBinifrmewrk.exe
C:ProgrammeAntiVir PersonalEdition Classicavgnt.exe
C:ProgrammeTOSHIBAConfigFreeCFSServ.exe
C:ProgrammeQuickTimeqttask.exe
C:WINDOWSsystem32ctfmon.exe
C:ProgrammeTOSHIBATOSCDSPDtoscdspd.exe
C:ProgrammeMessengermsmsgs.exe
C:ProgrammeGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
C:ProgrammeInternet ExplorerIEXPLORE.EXE
C:ProgrammeInternet ExplorerIEXPLORE.EXE
C:ProgrammeTOSHIBAConfigFreeCFXFER.exe
C:ProgrammeSpybot - Search & DestroyTeaTimer.exe
C:PROGRA~1IntelWirelessBinDot1XCfg.exe
C:ProgrammeMicrosoft OfficeOFFICE11ONENOTEM.EXE
C:ProgrammeGemeinsame DateienSymantec SharedSecurity ConsoleNSCSRVCE.EXE
C:ProgrammeSpybot - Search & DestroySpybotSD.exe
C:ProgrammeInternet Exploreriexplore.exe
C:ProgrammeInternet Exploreriexplore.exe
C:ProgrammeInternet ExplorerIEXPLORE.EXE
C:ProgrammeInternet ExplorerIEXPLORE.EXE
C:ProgrammeTrend MicroHijackThisHijackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.spiegel-online.de/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammeGemeinsame DateienAdobeAcrobatActiveXAcroIEHelper.dll
O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:ProgrammeWindows Desktop SearchdsWebAllow.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:WINDOWSSystem32DLADLASHX_W.DLL
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:ProgrammeGemeinsame DateienSymantec SharedAdBlockingNISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:ProgrammeNorton Internet SecurityNorton AntiVirusNavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:programmegooglegoogletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:ProgrammeGoogleGoogleToolbarNotifier2.0.301.7164swg.dll
O2 - BHO: MSN Suche Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgrammeMSN Toolbar Suitemsntb.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:ProgrammeGemeinsame DateienSymantec SharedAdBlockingNISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:ProgrammeNorton Internet SecurityNorton AntiVirusNavShExt.dll
O3 - Toolbar: MSN Suche Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:ProgrammeMSN Toolbar Suitemsntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:programmegooglegoogletoolbar2.dll
O4 - HKLM..Run: [ehTray] C:WINDOWSehomeehtray.exe
O4 - HKLM..Run] C:WINDOWSsystem32igfxtray.exe
O4 - HKLM..Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe
O4 - HKLM..Run] C:WINDOWSsystem32igfxpers.exe
O4 - HKLM..Run] C:ProgrammeSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run] AGRSMMSG.exe
O4 - HKLM..Run: [THotkey] C:ProgrammeToshibaToshiba Appletthotkey.exe
O4 - HKLM..Run: [TPSMain] TPSMain.exe
O4 - HKLM..Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM..Run: [SmoothView] C:ProgrammeTOSHIBATOSHIBA Zoom-DienstprogrammSmoothView.exe
O4 - HKLM..Run: [TFncKy] TFncKy.exe
O4 - HKLM..Run: [ccApp] "C:ProgrammeGemeinsame DateienSymantec SharedccApp.exe"
O4 - HKLM..Run: [Tvs] C:ProgrammeTOSHIBATvsTvsTray.exe
O4 - HKLM..Run: [DLA] C:WINDOWSSystem32DLADLACTRLW.EXE
O4 - HKLM..Run: [IntelZeroConfig] "C:ProgrammeIntelWirelessbinZCfgSvc.exe"
O4 - HKLM..Run: [IntelWireless] "C:ProgrammeIntelWirelessBinifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM..Run: [avgnt] "C:ProgrammeAntiVir PersonalEdition Classicavgnt.exe" /min
O4 - HKLM..Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM..Run: [QuickTime Task] "C:ProgrammeQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [YeppStudioAgent] C:ProgrammeSamsungSamsungMediaStudio4.1SamsungMediaStudioAgent.exe
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:ProgrammeAdobeReader 8.0ReaderReader_sl.exe"
O4 - HKLM..Run: [Comp about extra bin] C:Dokumente und EinstellungenAll UsersAnwendungsdatenRoam Program Comp AboutPLAN FIRST.exe
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run] C:ProgrammeTOSHIBATOSCDSPDtoscdspd.exe
O4 - HKCU..Run: [MSMSGS] "C:ProgrammeMessengermsmsgs.exe" /background
O4 - HKCU..Run: [swg] C:ProgrammeGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU..Run: [Comp site] C:DOKUME~1OlliANWEND~1MATHLI~1SCR NEW.exe
O4 - HKCU..Run: [SpybotSD TeaTimer] C:ProgrammeSpybot - Search & DestroyTeaTimer.exe
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - Startup: Microsoft Office OneNote 2003 Schnellstart.lnk = C:ProgrammeMicrosoft OfficeOFFICE11ONENOTEM.EXE
O4 - Global Startup: Windows-Desktopsuche.lnk = C:ProgrammeWindows Desktop SearchWindowsSearch.exe
O8 - Extra context menu item: &MSN Suche - res://C:ProgrammeMSN Toolbar Suitemsntb.dll/search.htm
O8 - Extra context menu item: In neuer Registerkarte im Hintergrund öffnen - res://C:ProgrammeMSN Toolbar Suitede-demsntabres.dll.mui/229?c43bc6a79cb24de388c9c99db16497e
O8 - Extra context menu item: In neuer Registerkarte im Vordergrund öffnen - res://C:ProgrammeMSN Toolbar Suitede-demsntabres.dll.mui/230?c43bc6a79cb24de388c9c99db16497e
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:ProgrammeJavajre1.5.0_04binnpjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:ProgrammeJavajre1.5.0_04binnpjpi150_04.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHelper.dll
O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:ProgrammePartyGaming.NetPartyPokerNetRunPF.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:ProgrammePartyGaming.NetPartyPokerNetRunPF.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammeMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammeMessengermsmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52...ex/qtplugin.cab
O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (Music Manager) - http://img.od2.com/Installation/Plu...nagerPlugin.CAB
O17 - HKLMSystemCCSServicesTcpip..{B6EB097D-132C-46A1-8041-A333ACD82A5D}: NameServer = 10.0.0.1
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:ProgrammeAntiVir PersonalEdition Classicsched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:ProgrammeAntiVir PersonalEdition Classicavguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSsystem32Ati2evxx.exe
O23 - Service: Automatisches LiveUpdate - Scheduler - Symantec Corporation - C:ProgrammeSymantecLiveUpdateALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:ProgrammeGemeinsame DateienSymantec SharedccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:ProgrammeNorton Internet SecurityccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:ProgrammeGemeinsame DateienSymantec SharedccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:ProgrammeGemeinsame DateienSymantec SharedccSetMgr.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:ProgrammeTOSHIBAConfigFreeCFSvcs.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:ProgrammeNorton Internet SecuritycomHost.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:ProgrammeIntelWirelessBinEvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:ProgrammeGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:PROGRA~1SymantecLIVEUP~1LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - C:ProgrammeNorton Internet SecurityNorton AntiVirusnavapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:ProgrammeGemeinsame DateienSymantec SharedSecurity ConsoleNSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:ProgrammeIntelWirelessBinRegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:ProgrammeIntelWirelessBinS24EvMon.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:ProgrammeNorton Internet SecurityNorton AntiVirusSAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:ProgrammeGemeinsame DateienSymantec SharedSNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:ProgrammeGemeinsame DateienSymantec SharedSPBBCSPBBCSvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:ProgrammeGemeinsame DateienSymantec SharedCCPD-LCsymlcsvc.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:ProgrammeToshibaTOSHIBA AppletTAPPSRV.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:PROGRA~1COMMON~1X10Commonx10nets.exe

Zitat:

O4 - HKLM..Run: [Comp about extra bin] C:Dokumente und EinstellungenAll UsersAnwendungsdatenRoam Program Comp AboutPLAN FIRST.exe
O4 - HKCU..Run: [Comp site] C:DOKUME~1OlliANWEND~1MATHLI~1SCR NEW.exe
O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:ProgrammePartyGaming.NetPartyPokerNetRunPF.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:ProgrammePartyGaming.NetPartyPokerNetRunPF.exe (file missing)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52....com/qtactivex/ qtplugin.cab

Zitat:

No LOP job-files found
--------------------------------------------------------
Files in Windows Tasks folder

AppleSoftwareUpdate.job
Check Updates for MSN Search Toolbar.job
Norton AntiVirus - Vollst„ndige Systemprfung ausfhren - Olli.job
Registrierungserinnerung 1.job
Registrierungserinnerung 2.job
Registrierungserinnerung 3.job
--------------------------------------------------------
Export App Data folders
--------------------------------------------------------
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: E079-2281

Verzeichnis von C:Dokumente und EinstellungenOlliAnwendungsdaten

30.04.2008 15:58 <DIR> .
30.04.2008 15:58 <DIR> ..
04.01.2007 21:05 <DIR> Adobe
30.11.2006 22:46 <DIR> AdobeUM
28.01.2007 09:33 <DIR> APPLEC~1 Apple Computer
01.01.2007 14:46 <DIR> ATI
20.02.2007 19:14 <DIR> Google
01.01.2007 14:46 <DIR> IDENTI~1 Identities
28.09.2006 19:58 <DIR> Intel
10.10.2006 18:59 <DIR> MACROM~1 Macromedia
23.03.2008 20:12 <DIR> MICROS~1 Microsoft
30.04.2008 09:27 <DIR> Mozilla
11.04.2007 20:21 <DIR> PCTOOL~1 PC Tools
01.01.2007 14:46 <DIR> Sonic
21.12.2006 09:09 <DIR> Sun
01.01.2007 14:46 <DIR> Symantec
23.03.2008 20:12 <DIR> Template
04.12.2006 22:24 <DIR> toshiba
22.08.2007 07:07 <DIR> U3
01.01.2007 14:46 <DIR> WINDOW~1 Windows Desktop Search
0 Datei(en) 0 Bytes
20 Verzeichnis(se), 95.514.951.680 Bytes frei
Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: E079-2281

Verzeichnis von C:Dokumente und EinstellungenAll UsersAnwendungsdaten

30.04.2008 16:08 <DIR> .
30.04.2008 16:08 <DIR> ..
07.02.2008 22:06 <DIR> Adobe
30.04.2007 13:12 <DIR> ANTIVI~1 AntiVir PersonalEdition Classic
13.11.2007 10:34 <DIR> Apple
31.12.2006 17:43 <DIR> APPLEC~1 Apple Computer
24.11.2006 19:53 <DIR> Google
28.09.2006 19:54 <DIR> Intel
20.12.2006 13:08 <DIR> MICROS~1 Microsoft
30.04.2008 11:44 <DIR> SPYBOT~1 Spybot - Search & Destroy
01.01.2007 14:46 <DIR> Symantec
30.04.2008 12:55 <DIR> TEMP
02.12.2006 19:12 <DIR> WINDOW~1 Windows Genuine Advantage
0 Datei(en) 0 Bytes
13 Verzeichnis(se), 95.514.951.680 Bytes frei
--------------------------------------------------------
All User Accounts
--------------------------------------------------------
Administrator
All Users

Zitat:

NetPumper Adware Bundler more information...
Details: Bundles with a number of adware components.
Status: Deleted

Registry entries detected
HKEY_LOCAL_MACHINESoftwareClasses.XNPD
HKEY_LOCAL_MACHINESoftwareClasses.XNPD
HKEY_LOCAL_MACHINESoftwareClassesMIMEDATABASECONTENT TYPEAPPLICATION/X-NETPUMPER-DETECTOR
HKEY_LOCAL_MACHINESoftwareClassesMIMEDATABASECONTENT TYPEAPPLICATION/X-NETPUMPER-DETECTOR


Everest Poker Potentially Unwanted Program more information...
Status: Deleted

Files detected
C:PROGRAMMEEVEREST POKERcasino.exe
C:PROGRAMMEEVEREST POKERcstart-tmp.exe
C:PROGRAMMEEVEREST POKERcstart.exe
usw

Zitat:

Infizierte Speicher Prozesse: 0
Infizierte Speicher Module: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Datei Objekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0