Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

:OTL
PRC - [2011.06.25 11:30:46 | 000,884,696 | ---- | M] ({StringFileInfo_CompanyName}) -- C:\Programme\Ask.com\Updater\Updater.exe
PRC - [2009.03.05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://de.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p="
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.param.yahoo-fr: "moz2-ytff-tyc"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "moz2-ytff-tyc"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.yahoo.de"
FF - prefs.js..extensions.enabledItems: tineye@ideeinc.com:1.1
FF - prefs.js..keyword.URL: "http://de.search.yahoo.com/search?ei=UTF-8&fr=ytff-tyc&p="
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 59111
FF - prefs.js..network.proxy.type: 0
[2012.01.12 22:33:24 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011.07.03 15:09:23 | 000,002,406 | ---- | M] () -- C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\searchplugins\askcom.xml
[2010.11.23 07:16:29 | 000,001,819 | ---- | M] () -- C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\searchplugins\bing.xml
[2010.10.25 06:47:29 | 000,001,583 | ---- | M] () -- C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\searchplugins\web-search.xml
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O20 - HKCU Winlogon: Shell - (C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\1C546\E191C.exe) - File not found
:Files
C:\Programme\4679B
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\1C546
C:\Programme\LP
C:\Programme\Ask.com
:Commands
[emptytemp]
[resethosts]
         

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Hinweis: Das obige Script ist nur für diesen einen User in dieser Situtation erstellt worden. Es ist auf keinen anderen Rechner portierbar und darf nicht anderweitig verwandt werden, da es das System nachhaltig schädigen kann!

All processes killed
========== OTL ==========
No active process named Updater.exe was found!
No active process named TeaTimer.exe was found!
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Yahoo" removed from browser.search.defaultenginename
Prefs.js: "hxxp://de.search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=" removed from browser.search.defaulturl
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: "moz2-ytff-tyc" removed from browser.search.param.yahoo-fr
Prefs.js: "moz2-ytff-tyc" removed from browser.search.param.yahoo-fr-cjkt
Prefs.js: "Google" removed from browser.search.selectedEngine
Prefs.js: true removed from browser.search.useDBForOrder
Prefs.js: "www.yahoo.de" removed from browser.startup.homepage
Prefs.js: tineye@ideeinc.com:1.1 removed from extensions.enabledItems
Prefs.js: "hxxp://de.search.yahoo.com/search?ei=UTF-8&fr=ytff-tyc&p=" removed from keyword.URL
Prefs.js: "127.0.0.1" removed from network.proxy.http
Prefs.js: 59111 removed from network.proxy.http_port
Prefs.js: 0 removed from network.proxy.type
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\META-INF folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\defaults\preferences folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\defaults folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\components folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}\chrome folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\searchplugins\askcom.xml moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\searchplugins\bing.xml moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\Mozilla\Firefox\Profiles\xr0mrspl.default\searchplugins\web-search.xml moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{043C5167-00BB-4324-AF7E-62013FAEDACF} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{043C5167-00BB-4324-AF7E-62013FAEDACF} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SpybotSD TeaTimer deleted successfully.
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe moved successfully.
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell:C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\1C546\E191C.exe deleted successfully.
========== FILES ==========
C:\Programme\4679B folder moved successfully.
C:\Dokumente und Einstellungen\Toro\Anwendungsdaten\1C546 folder moved successfully.
C:\Programme\LP\1C81 folder moved successfully.
C:\Programme\LP folder moved successfully.
C:\Programme\Ask.com\Updater folder moved successfully.
C:\Programme\Ask.com\assets\oobe folder moved successfully.
C:\Programme\Ask.com\assets folder moved successfully.
C:\Programme\Ask.com folder moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Anmeldung Tennis

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 3738391 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 1242057 bytes

User: Toro
->Temp folder emptied: 121524153 bytes
->Temporary Internet Files folder emptied: 163974 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 149624056 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 8989 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2148906 bytes
%systemroot%\System32 .tmp files removed: 2951 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 24192 bytes
Windows Temp folder emptied: 1886436 bytes
RecycleBin emptied: 1198629 bytes

Total Files Cleaned = 269,00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.31.0 log created on 01172012_211129

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...