Verbindungsprobleme mit internetexplorer

[redcapmafiosi]

Hallo zusammen,
Mein internetexplorer sowie diverse andere Probleme bauen seit kurzen keine Verbindung mehr ins Internetauf.
Firefox funktioniert einwandfrei!

Hab auch ma Hijackthis drüber laufen lassen, hier die entsprechende Logfile:

Logfile of HijackThis v1.99.1
Scan saved at 13:17:12, on 09.06.2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\SONYER~1\Mobile\AUFILE~1.EXE
C:\PROGRA~1\SONYER~1\Mobile\AUDEVI~1.EXE
C:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\CONNMN~1.EXE
c:\PROGRA~1\INTUWA~1\Shared\MROUTE~1\mRouterRuntime.exe
d:\AVGFRE~1\avgamsvr.exe
d:\AVGFRE~1\avgupsvc.exe
C:\Programme\Logitech\Mobile Phone Suite\MobilePhoneSuite.exe
C:\Programme\Java\j2re1.4.2_05\bin\jusched.exe
C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
D:\AVGFRE~1\avgemc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0F2.EXE
C:\Programme\iTunes\iTunesHelper.exe
C:\Programme\QuickTime\qttask.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\AnyDVD\AnyDVD.exe
C:\Programme\Analog Devices\SoundMAX\SMAgent.exe
C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\MMDiag.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Programme\DesktopChanger1.1\DesktopChanger.exe
C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mim.exe
C:\Programme\Logitech\SetPoint\KEM.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Programme\Logitech\SetPoint\KHALMNPR.EXE
C:\Programme\iPod\bin\iPodService.exe
C:\Shareaza\Shareaza.exe
C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\MMJB.EXE
C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mm_director.exe
C:\PROGRA~1\MUSICM~1\MUSICM~1\MM_TDM~1.EXE
C:\Programme\Mozilla Firefox\firefox.exe
C:\Dokumente und Einstellungen\Christian Pross\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOKUME~1\CHRIST~1\LOKALE~1\Temp\se.dll/sp.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:4001
R3 - URLSearchHook: (no name) - {00000000-0000-0000-0000-000000000000} - (no file)
O2 - BHO: PreispiratenSearchURL - {0B660087-931C-4056-A04F-0423890E40B6} - C:\Preispiraten\Preispiraten2\PPSearchURL.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: metaspinner media GmbH - {84B94901-3645-4D80-A6B7-4D0050B19455} - C:\Preispiraten\Preispiraten2\IEButtonAmazonInterface.dll (file missing)
O2 - BHO: metaspinner media GmbH - {CD9B7762-DFBC-42B1-BB30-02A78287B456} - C:\Preispiraten\Preispiraten2\IEButtonEBayInterface.dll (file missing)
O2 - BHO: metaspinner media GmbH - {D3AA56A9-8137-4950-A6F9-D0190A82AF2A} - C:\Preispiraten\Preispiraten2\IEButtonPPInterface.dll (file missing)
O2 - BHO: (no name) - {ED103D9F-3070-4580-AB1E-E5C179C1AE41} - (no file)
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Mobile Phone Suite] C:\Programme\Logitech\Mobile Phone Suite\MobilePhoneSuite.exe -nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [AVG7_CC] d:\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] d:\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [EPSON Stylus Photo R300 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0F2.EXE /P30 "EPSON Stylus Photo R300 Series" /O6 "USB001" /M "Stylus Photo R300"
O4 - HKLM\..\Run: [iTunesHelper] C:\Programme\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [MimBoot] C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mimboot.exe
O4 - HKLM\..\Run: [MMTray] C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [ElbyCheckAnyDVD] "C:\AnyDVD\ElbyCheck.exe" /L AnyDVD
O4 - HKLM\..\Run: [AnyDVD] C:\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Yahoo!\ypager.exe" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SIAPRO6_ITD] "C:\Steganos Internet Anonym Pro 6\itd.exe" /booting
O4 - HKCU\..\Run: [SIAPRO6] "C:\Steganos Internet Anonym Pro 6\sia.exe" /booting
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: DesktopChanger Tray.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Telefonverbindungsmonitor.lnk = ?
O8 - Extra context menu item: Download with &Shareaza - res://C:\Shareaza\Plugins\RazaWebHook.dll/3000
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Senden an &Bluetooth - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Search - {00000000-0000-0000-0000-000000000000} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra button: Search - {74806B61-C4AC-4092-B043-86E74AC35A90} - C:\WINDOWS\System32\Q6570265.dll (file missing)
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Search - {975D986D-98B0-4952-8E76-06FD066BF8FD} - C:\WINDOWS\System32\Q5241609.dll (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM95\aim.exe
O9 - Extra button: Songtext.net Toolbar - {C94158E1-6151-4442-ABE6-FD53D6534CCB} - C:\Programme\Songtext.net Toolbar\songtext.dll
O9 - Extra 'Tools' menuitem: Songtext.net Toolbar - {C94158E1-6151-4442-ABE6-FD53D6534CCB} - C:\Programme\Songtext.net Toolbar\songtext.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Yahoo!\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Yahoo!\YPager.exe
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\IrfanView\Ebay\Ebay.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE
O10 - Broken Internet access because of LSP provider 'c:\steganos internet anonym pro 6\sselsp.dll' missing
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O16 - DPF: {10000000-1000-0000-1000-000000000000} - mhtml:file://C:\ARCHIVE.MHT!http://195.225.177.14//mmm/server.exe
O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} - ms-its:mhtml:file://c:\nosuch.mht!http://www.awmdabest.com/dld/126.chm::/file.exe
O16 - DPF: {1D168290-F3DF-4842-94C3-2862596771FB} (Yahoo! Fotos Easy Upload Tool Class) - http://us.dl1.yimg.com/download.yahoo.c ... r1_4de.cab
O16 - DPF: {3A08F8EE-93ED-11D6-8A35-0002442B5E80} (ASCON_DRAWFIELD.Workspace) - http://www.as-con.de/cab/ascon_df.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by24fd.bay24.hotmail.msn.com/res ... nPUpld.cab
O16 - DPF: {563ED66E-531B-51D2-5DB0-5080C83DA4EB} - ms-its:mhtml:file://C:\MAIN.MHT!http://69.50.164.12/exp/mht/sext01.chm::/MegaInstaller.exe
O16 - DPF: {6D86D140-0E5C-42C4-9CF0-2C34DB4A9845} (WRPTester.TControl) - http://www.as-con.de/cab/wrpt.cab
O16 - DPF: {D909E944-3A96-4280-9983-9D00001973A4} (Access Control) - http://www.browserplugin.com/plugin/exe ... pecial.ocx
O20 - AppInit_DLLs: C:\WINDOWS\System32\msaekm.dll
O20 - Winlogon Notify: LBTServ - C:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\lbtserv.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - d:\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - d:\AVGFRE~1\avgupsvc.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programme\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe


Wer kann mir helfen?

[Holy Marcell]

Ich!

Also du fixt folgende einträge:

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOKUME~1\CHRIST~1\LOKALE~1\Temp\se.dll/sp.html

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = localhost:4001

R3 - URLSearchHook: (no name) - {00000000-0000-0000-0000-000000000000} - (no file)

O2 - BHO: PreispiratenSearchURL - {0B660087-931C-4056-A04F-0423890E40B6} - C:\Preispiraten\Preispiraten2\PPSearchURL.dll (file missing)

O2 - BHO: metaspinner media GmbH - {84B94901-3645-4D80-A6B7-4D0050B19455} - C:\Preispiraten\Preispiraten2\IEButtonAmazonInterface.dll (file missing)

O2 - BHO: metaspinner media GmbH - {CD9B7762-DFBC-42B1-BB30-02A78287B456} - C:\Preispiraten\Preispiraten2\IEButtonEBayInterface.dll (file missing)

O2 - BHO: metaspinner media GmbH - {D3AA56A9-8137-4950-A6F9-D0190A82AF2A} - C:\Preispiraten\Preispiraten2\IEButtonPPInterface.dll (file missing)

O2 - BHO: (no name) - {ED103D9F-3070-4580-AB1E-E5C179C1AE41} - (no file)

O9 - Extra button: Search - {00000000-0000-0000-0000-000000000000} - C:\WINDOWS\System32\shdocvw.dll

O9 - Extra button: Search - {74806B61-C4AC-4092-B043-86E74AC35A90} - C:\WINDOWS\System32\Q6570265.dll (file missing)

O9 - Extra button: Search - {975D986D-98B0-4952-8E76-06FD066BF8FD} - C:\WINDOWS\System32\Q5241609.dll (file missing)

O15 - Trusted Zone: *.musicmatch.com (HKLM)

O16 - DPF: {10000000-1000-0000-1000-000000000000} - mhtml:file://C:\ARCHIVE.MHT!http://195.225.177.14//mmm/server.exe

O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} - ms-its:mhtml:file://c:\nosuch.mht!http://www.awmdabest.com/dld/126.chm::/file.ex e

O16 - DPF: {D909E944-3A96-4280-9983-9D00001973A4} (Access Control) - http://www.browserplugin.com/plugin/exe ... pecial.ocx


soooooooo außerdem solltest du die aktuelle version von IE herunterladen (microsoft.com)
Außerdem solltest du Das Servicepack 2 herunterladen und zwar hier

Chräm eine firewall solltest du haben!!

[redcapmafiosi]

sorry bin auf dem gebiet absoluter laie:oops:, kannste mir das verständlich erklären?

Wäre dir sehr dankbar!

[Holy Marcell]

Hm.. Ok kein problem ^^:

du startest das programm ganz normal mit Noone of the above...
dann klickst du auf Scan und nun sind vor yedem eintrag
checkboxen du aktivierst die Checkboxen vor den einträgen die ich oben aufgelistet habe.
dann klickst du auf Fix checked und bestätigst die folgende meldung und startest Neu.
das ist eigentlich alles
du musst dir Service Pack 2 herunterladen (s.o.)
und deinen Internet Explorer aktualisieren.

[redcapmafiosi]

Ok passt alles wieder, alles upgedatet usw.

Vielen Dank für die schnelle Hilfe!

[Nikita]

Hallo@redcapmafiosi

Hijacker about:blank - se.dll\sp.html--> scannen, dann suche das Log vom Scan und poste es mir
http://www.trojaner-info.de/anleitungen ... blank.html