Hallo leute,

ich werde wahnsinnig. Seit zwölf uhr mittags versuche ich meinen Pc von einem(?) oder mehreren(?) Trojaner/n, Virus/Viren und/oder Spyware zu reinigen.

Das mein Computer verseucht ist, wurde mir zuerst von meinem Virenscanner (avast!) gemeldet. nachdem ich die verseuchte Datei (win32:Zlob-Bn) in den Container verschoben hatte, meldete "avast!" erneut, dass mein Computer von diesem Trojaner verseucht wurde. Diesen Vorgang habe ich mehrmals wiederholt. Leider ohne Erfolg. Mittlerweile lässt sich die Datei nichtmal mehr in den Container verschieben, der Zugriff wird verweigert, da die verseuchte Datei angeblich von einem anderen Programm benutzt wird.
Die Meldung, dass sich ein Trojaner auf meinem Computer befindet, wiederholte sich zunächst nur halbstündlich und jetzt mittlerweile schon fast alle fünf Minuten!!

Ich habe desweiteren versucht über den abgesicherten Modus die Datei manuell zu entfernen (mit Hilfe von eScan, killbox und clear prog). Leider hatte auch dies keinen Erfolg.

Jetzt meldet avast! auch noch, dass mein Arbeitsspeicher infiziert ist.

ach ja: ausserdem öffnet sich jedesmal, wenn ich den Internet Explorer starte, folgende Seite.=>http://www.syssecuritysite.com/ ...und dies, obwohl es nicht als Startseite von mir festgelegt wurde. Auch wenn ich unter Eigenschaften des IE als Startseite eine andere (zb www.web.de) eingebe, öffnet sich die besagte Seite. Kann mir jemand sagen, um was für eine Seite es sich handelt? schätzungweise irgendeine fake-site. oder?



Verdammt ich dreh langsam am rad. und habe keine ahnung was machen soll.
eine komplette neu installation kommt aus verschieden Gründen erstmal nicht in frage.
Bitte um schnelle Hilfe! Vielen Dank

Hier noch der escan Report:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Infektionsmeldungen
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Tue Jun 27 19:29:27 2006 => System found infected with smitfraud variant Browser Hijacker (ot.ico)! Action taken: No Action Taken.
Tue Jun 27 19:29:27 2006 => System found infected with smitfraud variant Browser Hijacker (ts.ico)! Action taken: No Action Taken.
Tue Jun 27 19:38:04 2006 => System found infected with smitfraud variant Browser Hijacker (ot.ico)! Action taken: No Action Taken.
Tue Jun 27 19:38:04 2006 => System found infected with smitfraud variant Browser Hijacker (ts.ico)! Action taken: No Action Taken.
Tue Jun 27 19:50:56 2006 => System found infected with smitfraud variant Browser Hijacker (ot.ico)! Action taken: No Action Taken.
Tue Jun 27 19:50:56 2006 => System found infected with smitfraud variant Browser Hijacker (ts.ico)! Action taken: No Action Taken.
Tue Jun 27 20:42:09 2006 => System found infected with zlob Trojan-Downloader (dcomcfg.exe)! Action taken: No Action Taken.
Tue Jun 27 20:42:09 2006 => System found infected with zlob Trojan-Downloader (simpole.tlb)! Action taken: No Action Taken.
Tue Jun 27 20:42:13 2006 => System found infected with smitfraud Browser Hijacker (antivirus test online.url)! Action taken: No Action Taken.
Tue Jun 27 21:11:18 2006 => System found infected with zlob Trojan-Downloader (dcomcfg.exe)! Action taken: No Action Taken.
Tue Jun 27 21:11:18 2006 => System found infected with zlob Trojan-Downloader (simpole.tlb)! Action taken: No Action Taken.
Tue Jun 27 21:11:21 2006 => System found infected with smitfraud Browser Hijacker (antivirus test online.url)! Action taken: No Action Taken.
Tue Jun 27 19:29:26 2006 => Object "downloadware Spyware/Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:29:26 2006 => Object "winfixer/errorsafe Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:29:27 2006 => Object "smitfraud variant Browser Hijacker" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:29:27 2006 => Object "downloadware Spyware/Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:29:27 2006 => Object "errorguard Spyware/Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:29:27 2006 => Object "winfixer/errorsafe Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:38:01 2006 => Object "downloadware Spyware/Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:38:01 2006 => Object "winfixer/errorsafe Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:38:04 2006 => Object "smitfraud variant Browser Hijacker" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:38:04 2006 => Object "downloadware Spyware/Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:38:04 2006 => Object "errorguard Spyware/Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:38:04 2006 => Object "winfixer/errorsafe Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:50:54 2006 => Object "downloadware Spyware/Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:50:55 2006 => Object "winfixer/errorsafe Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:50:56 2006 => Object "smitfraud variant Browser Hijacker" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:50:56 2006 => Object "downloadware Spyware/Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:50:56 2006 => Object "errorguard Spyware/Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 19:50:56 2006 => Object "winfixer/errorsafe Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 20:42:07 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 20:42:07 2006 => Object "downloadware Spyware/Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 20:42:07 2006 => Object "winfixer/errorsafe Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 20:42:07 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 20:42:07 2006 => Object "winfixer/errorsafe Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 20:42:07 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 20:42:07 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 20:42:09 2006 => Object "smitfraud Browser Hijacker" found in File System! Action Taken: No Action Taken.
Tue Jun 27 20:42:09 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 20:42:19 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 20:42:19 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 21:11:15 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 21:11:15 2006 => Object "downloadware Spyware/Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 21:11:15 2006 => Object "winfixer/errorsafe Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 21:11:16 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 21:11:16 2006 => Object "winfixer/errorsafe Adware" found in File System! Action Taken: No Action Taken.
Tue Jun 27 21:11:16 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 21:11:16 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 21:11:18 2006 => Object "smitfraud Browser Hijacker" found in File System! Action Taken: No Action Taken.
Tue Jun 27 21:11:18 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 21:11:30 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
Tue Jun 27 21:11:31 2006 => Object "emule P2P-worm" found in File System! Action Taken: No Action Taken.
~~~~~~~~~~~
Dateien
~~~~~~~~~~~
~~~~ Infected files
~~~~~~~~~~~
Tue Jun 27 20:41:36 2006 => File C:\WINDOWS\system32\regperf.exe infected by "Trojan-Downloader.Win32.Zlob.vr" Virus! Action Taken: File to be deleted on reboot.
~~~~~~~~~~~
~~~~ Offending files
~~~~~~~~~~~
Tue Jun 27 19:29:27 2006 => Offending file found: C:\WINDOWS\system32\ot.ico
Tue Jun 27 19:29:27 2006 => Offending file found: C:\WINDOWS\system32\ts.ico
Tue Jun 27 19:38:04 2006 => Offending file found: C:\WINDOWS\system32\ot.ico
Tue Jun 27 19:38:04 2006 => Offending file found: C:\WINDOWS\system32\ts.ico
Tue Jun 27 19:50:56 2006 => Offending file found: C:\WINDOWS\system32\ot.ico
Tue Jun 27 19:50:56 2006 => Offending file found: C:\WINDOWS\system32\ts.ico
Tue Jun 27 20:42:09 2006 => Offending file found: C:\WINDOWS\system32\dcomcfg.exe
Tue Jun 27 20:42:09 2006 => Offending file found: C:\WINDOWS\system32\simpole.tlb
Tue Jun 27 20:42:13 2006 => Offending file found: C:\Dokumente und Einstellungen\***\Favoriten\antivirus test online.url
Tue Jun 27 21:11:18 2006 => Offending file found: C:\WINDOWS\system32\dcomcfg.exe
Tue Jun 27 21:11:18 2006 => Offending file found: C:\WINDOWS\system32\simpole.tlb
Tue Jun 27 21:11:21 2006 => Offending file found: C:\Dokumente und Einstellungen\***\Favoriten\antivirus test online.url
~~~~~~~~~~~
~~~~ Tagged files
~~~~~~~~~~~
~~~~~~~~~~~
Ordner
~~~~~~~~~~~
Tue Jun 27 19:29:27 2006 => Offending Folder found: C:\WINDOWS\system32\1024
Tue Jun 27 19:29:27 2006 => Offending Folder found: C:\WINDOWS\system32\webinstall
Tue Jun 27 19:29:27 2006 => Offending Folder found: C:\Programme\errorguard
Tue Jun 27 19:29:27 2006 => Offending Folder found: C:\Programme\errorsafe
Tue Jun 27 19:38:04 2006 => Offending Folder found: C:\WINDOWS\system32\1024
Tue Jun 27 19:38:04 2006 => Offending Folder found: C:\WINDOWS\system32\webinstall
Tue Jun 27 19:38:04 2006 => Offending Folder found: C:\Programme\errorguard
Tue Jun 27 19:38:04 2006 => Offending Folder found: C:\Programme\errorsafe
Tue Jun 27 19:50:56 2006 => Offending Folder found: C:\WINDOWS\system32\1024
Tue Jun 27 19:50:56 2006 => Offending Folder found: C:\WINDOWS\system32\webinstall
Tue Jun 27 19:50:56 2006 => Offending Folder found: C:\Programme\errorguard
Tue Jun 27 19:50:56 2006 => Offending Folder found: C:\Programme\errorsafe
Tue Jun 27 20:42:09 2006 => Offending Folder found: C:\WINDOWS\system32\1024
Tue Jun 27 20:42:09 2006 => Offending Folder found: C:\Programme\emule
Tue Jun 27 20:42:19 2006 => Offending Folder found: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\emule
Tue Jun 27 20:42:19 2006 => Offending Folder found: C:\Dokumente und Einstellungen\All Users\Startmenü\programme\emule
Tue Jun 27 21:11:18 2006 => Offending Folder found: C:\WINDOWS\system32\1024
Tue Jun 27 21:11:18 2006 => Offending Folder found: C:\Programme\emule
Tue Jun 27 21:11:30 2006 => Offending Folder found: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\emule
Tue Jun 27 21:11:31 2006 => Offending Folder found: C:\Dokumente und Einstellungen\All Users\Startmenü\programme\emule
~~~~~~~~~~~
Registry
~~~~~~~~~~~
Tue Jun 27 19:29:25 2006 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uninstall\webinstall !!!
Tue Jun 27 19:29:26 2006 => Offending Key found: HKLM\Software\errorsafe !!!
Tue Jun 27 19:37:45 2006 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uninstall\webinstall !!!
Tue Jun 27 19:38:01 2006 => Offending Key found: HKLM\Software\errorsafe !!!
Tue Jun 27 19:50:54 2006 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uninstall\webinstall !!!
Tue Jun 27 19:50:55 2006 => Offending Key found: HKLM\Software\errorsafe !!!
Tue Jun 27 20:42:06 2006 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uninstall\emule !!!
Tue Jun 27 20:42:07 2006 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uninstall\webinstall !!!
Tue Jun 27 20:42:07 2006 => Offending Key found: HKLM\Software\errorsafe !!!
Tue Jun 27 20:42:07 2006 => Offending Key found: HKCU\Software\emule !!!
Tue Jun 27 20:42:07 2006 => Offending Key found: HKCU\Software\errorsafe !!!
Tue Jun 27 20:42:07 2006 => Offending Key found: HKCU\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\emule !!!
Tue Jun 27 20:42:07 2006 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\emule !!!
Tue Jun 27 21:11:15 2006 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uninstall\emule !!!
Tue Jun 27 21:11:15 2006 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uninstall\webinstall !!!
Tue Jun 27 21:11:15 2006 => Offending Key found: HKLM\Software\errorsafe !!!
Tue Jun 27 21:11:16 2006 => Offending Key found: HKCU\Software\emule !!!
Tue Jun 27 21:11:16 2006 => Offending Key found: HKCU\Software\errorsafe !!!
Tue Jun 27 21:11:16 2006 => Offending Key found: HKCU\software\microsoft\windows\currentversion\explorer\menuorder\start menu\programs\emule !!!
Tue Jun 27 21:11:16 2006 => Offending Key found: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu\Programs\emule !!!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Statistiken:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Tue Jun 27 19:32:32 2006 => Total Errors: 2
Tue Jun 27 19:49:14 2006 => Total Errors: 0
Tue Jun 27 19:55:00 2006 => Total Errors: 0
Tue Jun 27 20:45:41 2006 => Total Errors: 1
Tue Jun 27 21:15:28 2006 => Total Errors: 0
Tue Jun 27 19:32:32 2006 => Time Elapsed: 00:04:03
Tue Jun 27 19:49:14 2006 => Time Elapsed: 00:12:03
Tue Jun 27 19:55:00 2006 => Time Elapsed: 00:04:26
Tue Jun 27 20:45:41 2006 => Time Elapsed: 00:04:46
Tue Jun 27 21:15:28 2006 => Time Elapsed: 00:04:49
Tue Jun 27 19:32:32 2006 => Total Objects Scanned: 14086
Tue Jun 27 19:49:14 2006 => Total Objects Scanned: 16874
Tue Jun 27 19:55:00 2006 => Total Objects Scanned: 14293
Tue Jun 27 20:45:41 2006 => Total Objects Scanned: 15568
Tue Jun 27 21:15:28 2006 => Total Objects Scanned: 15598
Tue Jun 27 19:32:32 2006 => Virus Database Date: 2/24/2006
Tue Jun 27 19:35:38 2006 => Virus Database Date: 2/24/2006
Tue Jun 27 19:35:53 2006 => Virus Database Date: 2/24/2006
Tue Jun 27 19:49:14 2006 => Virus Database Date: 2/24/2006
Tue Jun 27 19:49:49 2006 => Virus Database Date: 2/24/2006
Tue Jun 27 19:55:00 2006 => Virus Database Date: 2/24/2006
Tue Jun 27 20:25:30 2006 => Virus Database Date: 2/24/2006
Tue Jun 27 20:35:27 2006 => Virus Database Date: 2/24/2006
Tue Jun 27 20:40:31 2006 => Virus Database Date: 6/27/2006
Tue Jun 27 20:45:41 2006 => Virus Database Date: 6/27/2006
Tue Jun 27 21:15:28 2006 => Virus Database Date: 6/27/2006
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--------------------------------------------------
C:\Programme\eScan\LOG\MWAV.LOG
--------------------------------------------------

Hallo,

du hast da aber einiges im System!!

Lade dir als erstes SmitfraudFix, un führe es aus.
Dann erstell ein HijackLog, ANleitung in meiner Signatur verlinkt! Dann sehen wir weiter...

Gruß
Daniel

Ich weiss, da ist ne menge drauf.

Werde erst mal dein Tipp versuchen.

danke.

Hallo nochmal,

das kleine programm was du mir empfohlen hast habe ich ausgeführt.

und hier ist jetzt die Hijack-log-file.

daraus werde ich zwar nicht schlau.
aber ich denke du kannst mir mehr dazu sagen, hoffe ich.

--------------------------------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 22:10:09, on 27.06.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\pctspk.exe
C:\Programme\Synaptics\SynTP\SynTPLpr.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\Programme\Elaborate Bytes\CloneCD\CloneCDTray.exe
C:\Programme\QuickTime\qttask.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programme\HP\hpcoretech\hpcmpmgr.exe
C:\Programme\SPYWAREfighter\spfprc.exe
C:\PROGRA~1\eScan\TRAYICOS.EXE
C:\PROGRA~1\eScan\AVPMWrap.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\eScan\MAILDISP.EXE
C:\PROGRA~1\ESCAN\SPOOLER.EXE
C:\Programme\Alwil Software\Avast4\aswUpdSv.exe
C:\Programme\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\eScan\TRAYSSER.EXE
C:\PROGRA~1\eScan\avpm.exe
C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE
C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWAgent.exe
C:\PROGRA~1\eScan\AvpM.exe
C:\Programme\Alwil Software\Avast4\ashMaiSv.exe
C:\Programme\Alwil Software\Avast4\ashWebSv.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\totalcmd\TOTALCMD.EXE
c:\Zerstörung von Trojaner\HiJackThis\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Programme\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [CloneCDTray] "C:\Programme\Elaborate Bytes\CloneCD\CloneCDTray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Programme\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [spywarefighterguard] C:\Programme\SPYWAREfighter\spfprc.exe
O4 - HKLM\..\Run: [MailScan Dispatcher] "C:\Programme\eScan\LAUNCH.EXE"
O4 - HKLM\..\Run: [eScan Updater] C:\PROGRA~1\eScan\TRAYICOS.EXE /App
O4 - HKLM\..\Run: [eScan Monitor] C:\PROGRA~1\eScan\AVPMWrap.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0
O4 - Startup: FRITZ!DSL Startcenter.lnk = C:\Programme\FRITZ!DSL\StCenter.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Google-Suche - res://c:\programme\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Ins Deutsche übersetzen - res://c:\programme\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://c:\programme\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Verweisseiten - res://c:\programme\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://c:\programme\google\GoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.freenet.de
O16 - DPF: {52290B25-D07A-43B5-84D8-493116D50FA0} (WebPlugin Class) - http://webinstall.tscash.com/webinstall.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1120475435907
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1145905141885
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programme\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Programme\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programme\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programme\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: eScan Server-Updater (eScan-trayicos) - MicroWorld Technologies Inc. - C:\PROGRA~1\eScan\TRAYSSER.EXE
O23 - Service: eScan Monitor Service (KAVMonitorService) - Kaspersky Labs. - C:\PROGRA~1\eScan\avpm.exe
O23 - Service: MWAgent - MicroWorld Technologies Inc. - C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE

Zitat von NUB

2. Wenn Du Dein Problem im Board schildern willst, poste es genau einmal. Fallen Dir danach wichtige Details ein, editiere und ergänze Dein Posting, anstatt ein neues zu erstellen. Mehrfach- und Crosspostings landen in der Mülltonne.

Hallo wakeup079,

Wie Du siehst braucht guter Rat Zeit - mit einem zweiten Posting wird Dir hier nicht schneller geholfen

Viel Erfolg mit Deinem Anliegen und Grüße,
schneipi

Sorry leute,

das mit den zwei postings war ein versehen.
dachte, dass es bei ersten mal nicht geposetet wurde und habe es deshalb noch ein zweites mal gepostet.

soll nicht wieder vorgekommen.