Logfile of HijackThis v1.99.1
Scan saved at 12:36:31, on 25.02.2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\System32\Ati2evxx.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\WINDOWS\system32\Ati2evxx.exe
F:\WINDOWS\SOUNDMAN.EXE
D:\Programme\ICQLite\ICQLite.exe
F:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
D:\Programme\Logitech\MouseWare\system\em_exec.exe
F:\programme\powerstrip\pstrip.exe
F:\Programme\QuickTime\qttask.exe
F:\Programme\AVPersonal\AVGUARD.EXE
F:\WINDOWS\a65d.exe
F:\Programme\AVPersonal\AVGNT.EXE
F:\Programme\AVPersonal\AVWUPSRV.EXE
F:\Programme\inKline Global\PC Booster\pcbooster.exe
F:\WINDOWS\System32\wmpa36c.exe
F:\WINDOWS\System32\svchost.exe
F:\progra~1\steam\steam.exe
F:\Programme\MD40323\ICON.EXE
F:\Programme\Silicon Image\SiISATARaid\SATARaid.exe
F:\WINDOWS\explorer.exe
F:\Programme\Internet Explorer\iexplore.exe
F:\Dokumente und Einstellungen\nibor2\Lokale Einstellungen\Temp\Temporäres Verzeichnis 10 für hijackthis.zip\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = D:\WINDOWS\System32\blank.htm
R3 - URLSearchHook: (no name) - _{855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
F2 - REG:system.ini: UserInit=F:\WINDOWS\system32\userinit.exe,D:\WINDOWS\system32\userinit.exe,
O2 - BHO: (no name) - {ED103D9F-3070-4580-AB1E-E5C179C1AE41} - (no file)
O4 - HKLM\..\Run: [PRONoMgrWired] D:\Programme\Intel\PROSetWired\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Programme\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ICQ Lite] D:\Programme\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [ATIPTA] F:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [PowerStrip] f:\programme\powerstrip\pstrip.exe
O4 - HKLM\..\Run: [QuickTime Task] "F:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Norton Personal Firewall] lah.exe
O4 - HKLM\..\Run: [antiware] F:\windows\system32\eliteuwg32.exe
O4 - HKLM\..\Run: [clfmon] F:\WINDOWS\clfmon.exe
O4 - HKLM\..\Run: [popuppers65] F:\WINDOWS\a65d.exe
O4 - HKLM\..\Run: [AVGCtrl] F:\Programme\AVPersonal\AVGNT.EXE /min
O4 - HKLM\..\Run: [PC Booster] F:\Programme\inKline Global\PC Booster\pcbooster.exe
O4 - HKLM\..\Run: [Windows Media Player 3.6c] wmpa36c.exe
O4 - HKLM\..\RunServices: [Norton Personal Firewall] lah.exe
O4 - HKLM\..\RunServices: [Rundll32] rundll2.dl_
O4 - HKLM\..\RunServices: [Windows Media Player 3.6c] wmpa36c.exe
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "D:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Steam] "f:\progra~1\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Norton Personal Firewall] lah.exe
O4 - HKCU\..\RunOnce: [ICQ Lite] D:\Programme\ICQLite\ICQLite.exe -trayboot
O4 - Global Startup: 2Mega Camera Manager Monitor.lnk = ?
O4 - Global Startup: SATARaid.lnk = ?
O8 - Extra context menu item: &ICQ Toolbar Search - res://D:\programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll (file missing)
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programme\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programme\Messenger\MSMSGS.EXE
O15 - Trusted Zone: *.media-motor.net
O15 - Trusted Zone: *.popuppers.com
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - F:\Programme\AVPersonal\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - F:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: NetMeeting-Remotedesktop-Freigabe (mnmsrvc) - Unknown owner - D:\WINDOWS\System32\mnmsrvc.exe (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Unknown owner - D:\Programme\Intel\PROSetWired\NCS\Sync\NetSvc.exe (file missing)
O23 - Service: Sitzungs-Manager für Remotedesktophilfe (RDSessMgr) - Unknown owner - D:\WINDOWS\system32\sessmgr.exe (file missing)