bitte mal checken

*Christian*

Lösche dies im abg. Modus:

C:\Programme\ISTsvc
C:\WINDOWS\kewgjaf.exe
C:\Program Files\Internet Optimizer
c:\programme\180solutions
C:\PROGRA~1\COMMON~1\tsa
C:\WINDOWS\nem220.dll
C:\WINDOWS\wsem302.dll
C:\Programme\SideFind


Deinstallieren:
C:\Programme\Web_Rebates


Fixe mit HijackThis dies:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = h**p://w*w.couldnotfind.com/search_...count_id=153376
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://w*w.couldnotfind.com/search_...count_id=153376
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = h**p://w*w.couldnotfind.com/search_...count_id=153376
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - C:\WINDOWS\wsem302.dll
O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Programme\SideFind\sfbho.dll
O3 - Toolbar: ISTbar - {5F1ABCDB-A875-46c1-8345-B72A4567E486} - C:\PROGRA~1\ISTbar\istbar.dll
O4 - HKLM\..\Run: [IST Service] C:\Programme\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [c5UEnHK] C:\WINDOWS\kewgjaf.exe
O4 - HKLM\..\Run: [sais] c:\programme\180solutions\sais.exe
O4 - HKLM\..\Run: [uvgv] C:\WINDOWS\uvgv.exe
O4 - HKLM\..\Run: [WebRebates0] "C:\Programme\Web_Rebates\WebRebates0.exe"
O4 - HKLM\..\RunOnce: [djtopr1150.exe] "C:\DOKUME~1\NKOLON~1\LOKALE~1\Temp\djtopr1150.exe"
O4 - HKCU\..\Run: [Tsa2] C:\PROGRA~1\COMMON~1\tsa\tsm2.exe
O8 - Extra context menu item: Web Rebates - file://C:\Programme\Web_Rebates\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Programme\SideFind\sidefind.dll
O16 - DPF: {15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6} - h**p://static.windupdates.com/cab/D...e/bridge-c9.cab
O16 - DPF: {386A771C-E96A-421F-8BA7-32F1B706892F} (Installer Class) - h**p://www.xxxtoolbar.com/ist/softw...0006_153376.cab
O23 - Service: SmartLinkService - Unknown - slserv.exe (file missing)


Downloade dir Ad-aware: www.lavasoft.de
Updatete das Programm vor einem Scan. Das Tool ist kostenlos.

Außerdem scanne danach mit eScan im abg. Modus:
http://www.trojaner-board.de/42731-escan-anleitung.html

Wird noch was gefunden?