Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

:OTL
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg, = 
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg,  = +
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg,# = 
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg,& = 
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg,? = 
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg,+ = 
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg,= = 
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs, = 
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs,  = +
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs,# = 
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs,& = 
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs,? = 
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs,+ = 
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs,= = 
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {71B6ACF7-4F0F-4FD8-BB69-6D1A4D271CB7} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No CLSID value found.
[2010.12.05 18:19:03 | 000,004,104 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ojobkspa.ako
@Alternate Data Stream - 217 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:D1B5B4F1
:Commands
[emptytemp]
[resethosts]
         

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

All processes killed
========== OTL ==========
HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg\\| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg\\| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg\\#| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg\\&| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg\\?| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg\\+| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\mg\\=| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs\\| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs\\| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs\\#| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs\\&| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs\\?| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs\\+| /E : value set successfully!
HKCU\Software\Microsoft\Internet Explorer\SearchURL\rs\\=| /E : value set successfully!
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{71B6ACF7-4F0F-4FD8-BB69-6D1A4D271CB7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{71B6ACF7-4F0F-4FD8-BB69-6D1A4D271CB7}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C55BBCD6-41AD-48AD-9953-3609C48EACC7} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C55BBCD6-41AD-48AD-9953-3609C48EACC7}\ not found.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ojobkspa.ako moved successfully.
ADS C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:D1B5B4F1 deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: All Users
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 34358 bytes
 
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 340337871 bytes
 
User: User
->Temp folder emptied: 1591922 bytes
->Temporary Internet Files folder emptied: 126317316 bytes
->Java cache emptied: 13062 bytes
->FireFox cache emptied: 452406057 bytes
->Flash cache emptied: 24004 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2405683 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 880,00 mb
 
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
OTL by OldTimer - Version 3.2.29.1 log created on 09272011_194728

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...
         

kam raus wo ich gar nicht wieß was ich jetzt gemacht habe eigentlich