Viren werden nicht gelöscht

Darksimi

Da auf meinem PC eine Virusmeldung gekommen ist, habe ich mir Spybot gedownloadet.

Beim ersten Virusckeck wurden ziemlich viele Trojaner entdeckt, die ich gelöscht habe.
Kurze Zeit später kam wieder eine Trojanermeldung beidem ich wieder wie oben verfahren bin.
Jetzt kam aber schon die dritte Warnung und eine Critical Error Warnung.
Ausserdem wird manchmal der Internet Explower mit Pornoseiten gestartet.

Errormeldungen: http://img78.imageshack.us/img78/2225/wtfjp4.png
ImageShack - Hosting :: wtf2xq3.png

Updates von Spybot:


28.11.2006 16:53:15 Update heruntergeladen (http://www.safer-networking.org/updates/spybotsd.ini)
28.11.2006 16:53:46 downloaded update Advanced detection library
28.11.2006 16:53:46 - URL: http://www.see-cure.net/updates/files/advcheck.zip
28.11.2006 16:53:46 - Local file: C:\Programme\Spybot - Search & Destroy\Updates\advcheck.zip
28.11.2006 16:53:48 downloaded update Detection rules: Dialers
28.11.2006 16:53:48 - URL: http://www.see-cure.net/updates/file...des.dialer.zip
28.11.2006 16:53:48 - Local file: C:\Programme\Spybot - Search & Destroy\Updates\includes.dialer.zip
28.11.2006 16:53:51 downloaded update Detection rules: Hijackers
28.11.2006 16:53:51 - URL: http://www.see-cure.net/updates/file....hijackers.zip
28.11.2006 16:53:51 - Local file: C:\Programme\Spybot - Search & Destroy\Updates\includes.hijackers.zip
28.11.2006 16:53:51 downloaded update Detection rules: Keyloggers
28.11.2006 16:53:51 - URL: http://www.see-cure.net/updates/file...keyloggers.zip
28.11.2006 16:53:51 - Local file: C:\Programme\Spybot - Search & Destroy\Updates\includes.keyloggers.zip
28.11.2006 16:53:54 downloaded update Detection rules: Malware
28.11.2006 16:53:54 - URL: http://www.see-cure.net/updates/file...es.malware.zip
28.11.2006 16:53:54 - Local file: C:\Programme\Spybot - Search & Destroy\Updates\includes.malware.zip
28.11.2006 16:53:55 downloaded update Detection rules: PUPS
28.11.2006 16:53:55 - URL: http://www.see-cure.net/updates/files/includes.pups.zip
28.11.2006 16:53:55 - Local file: C:\Programme\Spybot - Search & Destroy\Updates\includes.pups.zip
28.11.2006 16:53:55 downloaded update Detection rules: Security
28.11.2006 16:53:55 - URL: http://www.see-cure.net/updates/file...s.security.zip
28.11.2006 16:53:55 - Local file: C:\Programme\Spybot - Search & Destroy\Updates\includes.security.zip
28.11.2006 16:53:57 downloaded update Detection rules: Spybots
28.11.2006 16:53:57 - URL: http://www.see-cure.net/updates/file...es.spybots.zip
28.11.2006 16:53:57 - Local file: C:\Programme\Spybot - Search & Destroy\Updates\includes.spybots.zip
28.11.2006 16:53:58 downloaded update Detection rules: Trojans
28.11.2006 16:53:58 - URL: http://www.see-cure.net/updates/file...es.trojans.zip
28.11.2006 16:53:58 - Local file: C:\Programme\Spybot - Search & Destroy\Updates\includes.trojans.zip
28.11.2006 16:54:04 downloaded update Detection rules: Update
28.11.2006 16:54:04 - URL: http://www.see-cure.net/updates/files/includes.zip
28.11.2006 16:54:04 - Local file: C:\Programme\Spybot - Search & Destroy\Updates\includes.zip

Bin mir nicht sicher ob du das gemeint hast, sonst musst du mir erklären wo ich das holen kann.

Hier ist der Logfile:

C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
C:\Programme\MessengerPlus! 3\MsgPlus.exe
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Programme\Macrogaming\SweetIM\SweetIM.exe
C:\Programme\Perfect Codec\pmmon.exe
C:\Programme\Logitech\SetPoint\SetPoint.exe
C:\Programme\Gemeinsame Dateien\Logitech\KHAL\KHALMNPR.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Programme\MSN Messenger\MsnMsgr.Exe
C:\Programme\Xfire\Xfire.exe
C:\Programme\Clonk Endeavour\Clonk.exe
C:\Programme\Spybot - Search & Destroy\SpybotSD.exe
C:\Programme\Perfect Codec\pmsngr.exe
C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
C:\Programme\Microsoft Office\OFFICE11\WINWORD.EXE
C:\DOKUME~1\WAD\LOKALE~1\Temp\Rar$EX00.770\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = startpage
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Starware -
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.168.1.39:3128
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Programme\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {ae18da4e-be15-4925-81bb-890c04af0200} - C:\Programme\Perfect Codec\isaddon.dll
O2 - BHO: System Process - {C2EEB4FA-B6D6-41b9-9CFA-ABA87F862BCB} - C:\WINDOWS\system32\navshext1.dll (file missing)
O2 - BHO: (no name) - {CA356D79-679B-4b4c-8E49-5AF97014F4C1} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Programme\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: Protection Bar - {96ebbe6a-2864-4345-b32b-26ee9be524b5} - C:\Programme\Perfect Codec\iesplugin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\12.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\12.bin\mwsoemon.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programme\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Programme\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [kav] "C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\system32\mstask.exe
O4 - HKCU\..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\12.bin\mwsoemon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Programme\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoStart IR.lnk = C:\Programme\WinTV\Ir.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...tml?p=ZRfox000
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Web-Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra button: PICgrabber - {4964E240-D53C-11D5-BDA9-444553540000} - C:\Programme\PICgrabber 6.0\PICGRABBER6.EXE (HKCU)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsof...?1127489061582
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: emptins - {588599f4-de26-4c28-ba14-f4eb17e33481} - C:\WINDOWS\system32\xxfgmy.dll
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)