Ich bräuchte auch dringend jemand, der mir beim Bekämpfen eines Trojaners hilft. Hier mein logfile:


Report of OSAM: Autorun Manager v5.0.11926.0
hxxp://www.online-solutions.ru/en/
Saved at 16:46:33 on 08.04.2010

OS: Windows XP Professional Service Pack 3 (Build 2600)
Default Browser: Mozilla Corporation Firefox 3.6

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"AppleSoftwareUpdate.job" - ? - C:\Programme\Apple Software Update\SoftwareUpdate.exe (File not found)
"Ad-Aware Update (Weekly).job" - ? - C:\Programme\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe (File not found)
"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"Google Software Updater.job" - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS\system32\infocardcpl.cpl
"javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS\system32\javacpl.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"Avira AntiVir Personal - Free Antivirus " - "Avira GmbH" - C:\PROGRA~1\Avira\ANTIVI~1\avconfig.cpl
"Avira AntiVir PersonalEdition Classic" - ? - C:\PROGRA~1\ANTIVI~1\avconfig.cpl (File not found)
"ECSEPM" - "Sony Ericsson Mobile Communications AB" - C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\ecsepm.cpl
"Nero BurnRights" - "Nero AG" - C:\Programme\Nero\Nero 7\Nero Toolkit\NeroBurnRights.cpl
"QuickTime" - "Apple Inc." - C:\Programme\QuickTime\QTSystem\QuickTime.cpl
"SMARTBoardCPL" - "SMART Technologies ULC" - C:\Programme\SMART Technologies\SMART Board Drivers\SMARTBoardCPL.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"avgio" (avgio) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avgio.sys
"avgntflt" (avgntflt) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avipbb.sys
"BrPar" (BrPar) - "Brother Industries Ltd." - C:\WINDOWS\System32\drivers\BrPar.sys
"Changer" (Changer) - ? - C:\WINDOWS\system32\drivers\Changer.sys (File not found)
"Gigaset USB Adapter 54 Driver" (SE4501D) - "Siemens AG" - C:\WINDOWS\System32\DRIVERS\SE4501D.sys
"GMSIPCI" (GMSIPCI) - ? - E:\INSTALL\GMSIPCI.SYS (File not found)
"i2omgmt" (i2omgmt) - ? - C:\WINDOWS\system32\drivers\i2omgmt.sys (File not found)
"lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS\system32\drivers\lbrtfdc.sys (File not found)
"ntnwxmj" (ntnwxmj) - "Microsoft Corporation" - C:\WINDOWS\system32\drivers\ntnwxmj.sys (Hidden file, rootkit activity)
"PCIDump" (PCIDump) - ? - C:\WINDOWS\system32\drivers\PCIDump.sys (File not found)
"PDCOMP" (PDCOMP) - ? - C:\WINDOWS\system32\drivers\PDCOMP.sys (File not found)
"PDFRAME" (PDFRAME) - ? - C:\WINDOWS\system32\drivers\PDFRAME.sys (File not found)
"PDRELI" (PDRELI) - ? - C:\WINDOWS\system32\drivers\PDRELI.sys (File not found)
"PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS\system32\drivers\PDRFRAME.sys (File not found)
"PxHelp20" (PxHelp20) - "Sonic Solutions" - C:\WINDOWS\System32\Drivers\PxHelp20.sys
"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\ssmdrv.sys
"WDICA" (WDICA) - ? - C:\WINDOWS\system32\drivers\WDICA.sys (File not found)

[Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Desktop\Components )-----
"(0) Source" - ? - /C:/DOKUME~1/E-Maus/LOKALE~1/Temp/msohtml1/01/clip_image002.jpg (File not found)
-----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )-----
{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{807553E5-5146-11D5-A672-00B0D022E945} "text/xml" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{32505114-5902-49B2-880A-1F7738E5A384} "Data Page Plugable Protocal mso-offdap11 Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
{3D9F03FA-7A94-11D3-BE81-0050048385D1} "Data Page Pluggable Protocol mso-offdap Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{653DCCC2-13DB-45B2-A389-427885776CFE} "Activities Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliPoint\ipcplact.dll
{4EB37360-49E8-11D3-95B5-004033382980} "ALZip 7.0 Context Menu Shell Extension" - "ESTsoft" - C:\Programme\ESTsoft\ALZip\AZCTM.dll
{124597D8-850A-41AE-849C-017A4FA99CA2} "Buttons Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliPoint\ipcplbtn.dll
{42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung" - ? - deskpan.dll (File not found)
{3BEABCC1-BF31-42df-88D9-A2955D6B8528} "IntelliPoint Sensitivity Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliPoint\ipcplsens.dll
{ED6E87C6-8A83-43aa-8208-8DBC8247F4D2} "IntelliType Pro Key Settings Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplkey.dll
{111D8120-25EB-4E1C-A4DF-C9EE5FCA35CB} "IntelliType Pro Scrolling Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplwhl.dll
{1825D0FA-5B0C-4e20-A929-3EFD15B6DF71} "IntelliType Pro Touchpad Control Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcpltp.dll
{A2569D1F-4E06-43EC-9825-0088B471BE47} "IntelliType Pro Wireless Control Panel Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplwir.dll
{97FA8AA2-EE77-4FF2-9449-424D8924EF21} "IntelliType Pro Zooming Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplzm.dll
{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} "iTunes" - "Apple Inc." - C:\Programme\iTunes\iTunesMiniPlayer.dll
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung" - ? - (File not found | COM-object registry key not found)
{32683183-48a0-441b-a342-7c2a440a9478} "Media Band" - ? - (File not found | COM-object registry key not found)
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Programme\Microsoft Office\OFFICE11\msohev.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\OFFICE11\MLSHEXT.DLL
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{0006F045-0000-0000-C000-000000000046} "Outlook-Dateisymbolerweiterung" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\OFFICE11\OLKFSTUB.DLL
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - C:\Programme\Real\RealPlayer\rpshell.dll
{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\shlext.dll
{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung" - ? - (File not found | COM-object registry key not found)
{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{5E2121EE-0300-11D4-8D3B-444553540000} "SimpleShlExt Class" - ? - C:\Programme\ATI Technologies\ATI.ACE\atiacmxx.dll
{A5110426-177D-4e08-AB3F-785F10B4439C} "Sony Ericsson Datei-Manager" - "Sony Ericsson Mobile Communications AB" - C:\Programme\Sony Ericsson\Mobile2\File Manager\fmgrgui.dll
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Webordner" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL
{AF90F543-6A3A-4C1B-8B16-ECEC073E69BE} "Wheel Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliPoint\ipcplwhl.dll
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Programme\WinRAR\rarext.dll (File found, but it contains no detailed information)
{20082881-FC36-4E47-9A7A-644C95FF749F} "Wireless Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliPoint\ipcplwir.dll

[Internet Explorer]
-----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars )-----
{32683183-48a0-441b-a342-7c2a440a9478} "{32683183-48a0-441b-a342-7c2a440a9478}" - ? - (File not found | COM-object registry key not found)
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "ITBar7Layout" - ? - (File not found | COM-object registry key not found)
<binary data> "ITBarLayout" - ? - (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_19" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_19.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} "Java Plug-in 1.6.0_19" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_19.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_19" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_19.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} "Office Genuine Advantage Validation Tool" - ? - C:\WINDOWS\system32\OGACheckControl.DLL / hxxp://download.microsoft.com/download/e/7/3/e7345c16-80aa-4488-ae10-9ac6be844f99/OGAControl.cab
{C7DB51B4-BCF7-4923-8874-7F1A0DC92277} "Office Update Installation Engine" - "Microsoft Corporation" - C:\WINDOWS\opuc.dll / hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
{D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object" - "Adobe Systems, Inc." - C:\WINDOWS\system32\Macromed\Flash\Flash10e.ocx / hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} "{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}" - ? - (File not found | COM-object registry key not found) / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} "{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}" - ? - (File not found | COM-object registry key not found) / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} "{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}" - ? - (File not found | COM-object registry key not found) / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} "{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}" - ? - (File not found | COM-object registry key not found) / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} "{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}" - ? - (File not found | COM-object registry key not found) / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Recherchieren" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{67BCF957-85FC-4036-8DC4-D4D80E00A77B} "CIEDownload Object" - "SMART Technologies ULC." - C:\Programme\SMART Technologies\Notebook Software\NotebookPlugin.dll
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} "Google Toolbar Notifier BHO" - "Google Inc." - C:\Programme\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
{3049C3E9-B461-4BC5-8870-4C09146192CA} "RealPlayer Download and Record Plugin for Internet Explorer" - "RealPlayer" - C:\Programme\Real\RealPlayer\rpbrowserrecordplugin.dll
{16CDE0AA-8522-4353-BB65-A0D738912AFA} "{16CDE0AA-8522-4353-BB65-A0D738912AFA}" - "QuickiSearch Ltd." - C:\PROGRA~1\INTERN~1\vvz.dll

[Logon]
-----( %AllUsersProfile%\Startmenü\Programme\Autostart )-----
"Adobe Reader - Schnellstart.lnk" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk (Shortcut exists | File not found)
"desktop.ini" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini
"Service Manager.lnk" - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Shortcut exists | File exists)
-----( %UserProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\E-Maus\Startmenü\Programme\Autostart\desktop.ini
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run )-----
"WinIEobject" - ? - C:\Programme\Internet Explorer\wcu.exe (File found, but it contains no detailed information)
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"updateMgr" - ? - C:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9 (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
"Adobe Photo Downloader" - "Adobe Systems Incorporated" - "C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"AppleSyncNotifier" - "Apple Inc." - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
"ATICCC" - ? - "C:\Programme\ATI Technologies\ATI.ACE\CLIStart.exe" (File found, but it contains no detailed information)
"avgnt" - "Avira GmbH" - "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
"AVMWlanClient" - "AVM Berlin GmbH" - C:\Programme\avmwlanstick\FRITZWLANMini.exe
"IntelliPoint" - "Microsoft Corporation" - "C:\Programme\Microsoft IntelliPoint\ipoint.exe"
"iTunesHelper" - "Apple Inc." - "C:\Programme\iTunes\iTunesHelper.exe"
"itype" - "Microsoft Corporation" - "C:\Programme\Microsoft IntelliType Pro\itype.exe"
"LanguageShortcut" - ? - C:\Programme\CyberLink\PowerDVD\Language\Language.exe
"NeroFilterCheck" - "Nero AG" - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe
"QuickTime Task" - "Apple Inc." - "C:\Programme\QuickTime\QTTask.exe" -atboottime
"RemoteControl" - "Cyberlink Corp." - C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
"Sony Ericsson PC Suite" - "Sony Ericsson Mobile Communications AB" - "C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe"
"vspdfprsrv.exe" - ? - C:\Programme\Visagesoft\eXPert PDF\vspdfprsrv.exe --background

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"Ice Monitor E" - "Black Ice Software" - C:\WINDOWS\system32\BuEMonNT.dll
"Microsoft Document Imaging Writer Monitor" - "Microsoft Corporation" - C:\WINDOWS\system32\mdimon.dll
"VSP1:" - ? - C:\WINDOWS\system32\vsmon1.dll (File found, but it contains no detailed information)

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
"Apple Mobile Device" (Apple Mobile Device) - "Apple Inc." - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
"ASP.NET-Zustandsdienst" (aspnet_state) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avguard.exe
"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\sched.exe
"Bonjour-Dienst" (Bonjour Service) - "Apple Inc." - C:\Programme\Bonjour\mDNSResponder.exe
"Cyberlink RichVideo Service(CRVS)" (RichVideo) - ? - C:\Programme\CyberLink\Shared Files\RichVideo.exe
"Google Software Updater" (gusvc) - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
"Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"iPod-Dienst" (iPod Service) - "Apple Inc." - C:\Programme\iPod\bin\iPodService.exe
"Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe
"Machine Debug Manager" (MDM) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
"MSSQLSERVER" (MSSQLSERVER) - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
"MSSQLServerADHelper" (MSSQLServerADHelper) - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe
"NBService" (NBService) - "Nero AG" - C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
"NMIndexingService" (NMIndexingService) - "Nero AG" - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
"SMART Board-Dienst" (SMART Board Service) - "SMART Technologies" - C:\Programme\SMART Technologies\SMART Board Drivers\SMARTBoardService.exe
"SMART SNMP Agent Service" (SMART SNMP Agent Service) - "SMART Technologies ULC" - C:\Programme\SMART Technologies\SMART Board Drivers\SMARTSNMPAgent.exe
"SMART Web-Server" (SMART Web Server) - ? - C:\Programme\SMART Technologies\SMART Board Drivers\WebServer.exe
"SQLSERVERAGENT" (SQLSERVERAGENT) - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE
"Windows CardSpace" (idsvc) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

[Winlogon]
-----( HKCU\Control Panel\IOProcs )-----
"MVB" - ? - mvfs32.dll (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )-----
"WgaLogon" - "Microsoft Corporation" - C:\WINDOWS\system32\WgaLogon.dll

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----
"mdnsNSP" - "Apple Inc." - C:\Programme\Bonjour\mdnsNSP.dll

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru

Hallo und

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"ntnwxmj" (ntnwxmj) - "Microsoft Corporation" - C:\WINDOWS\system32\drivers\ntnwxmj.sys (Hidden file, rootkit activity)
         

Bitte mit OSAM deaktivieren (siehe Anleitung zu OSAM). Poste danach ein neues Log von OSAM, lass die Datei (falls noch vorhanden)


C:\WINDOWS\system32\drivers\ntnwxmj.sys


bei https://www.virustotal.com auswerten und poste den Ergebnislink.

Hab meinen Text vergessen - sorry.

Datei ist nicht mehr da ... Konnte den Eintrag also nicht deaktivieren. Hab sie vielleicht mit Antivir heute morgen schon gelöscht. Blöd ... Hier mein neuer aktueller logfile. Was soll ich machen?

Report of OSAM: Autorun Manager v5.0.11926.0
Online Solutions. Complex Protection for Information Systems
Saved at 14:27:07 on 09.04.2010

OS: Windows XP Professional Service Pack 3 (Build 2600)
Default Browser: Mozilla Corporation Firefox 3.6.2

Scanner Settings
[x] Rootkits detection (hidden registry)
[x] Rootkits detection (hidden files)
[x] Retrieve files information
[x] Check Microsoft signatures

Filters
[ ] Trusted entries
[ ] Empty entries
[x] Hidden registry entries (rootkit activity)
[x] Exclusively opened files
[x] Not found files
[x] Files without detailed information
[x] Existing files
[ ] Non-startable services
[ ] Non-startable drivers
[x] Active entries
[x] Disabled entries


[Common]
-----( %SystemRoot%\Tasks )-----
"AppleSoftwareUpdate.job" - ? - C:\Programme\Apple Software Update\SoftwareUpdate.exe (File not found)
"Ad-Aware Update (Weekly).job" - ? - C:\Programme\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe (File not found)
"GoogleUpdateTaskMachineCore.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"GoogleUpdateTaskMachineUA.job" - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"Google Software Updater.job" - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe

[Control Panel Objects]
-----( %SystemRoot%\system32 )-----
"infocardcpl.cpl" - "Microsoft Corporation" - C:\WINDOWS\system32\infocardcpl.cpl
"javacpl.cpl" - "Sun Microsystems, Inc." - C:\WINDOWS\system32\javacpl.cpl
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls )-----
"Avira AntiVir Personal - Free Antivirus " - "Avira GmbH" - C:\PROGRA~1\Avira\ANTIVI~1\avconfig.cpl
"Avira AntiVir PersonalEdition Classic" - ? - C:\PROGRA~1\ANTIVI~1\avconfig.cpl (File not found)
"ECSEPM" - "Sony Ericsson Mobile Communications AB" - C:\Programme\Sony Ericsson\Mobile2\Mobile Phone Monitor\ecsepm.cpl
"Nero BurnRights" - "Nero AG" - C:\Programme\Nero\Nero 7\Nero Toolkit\NeroBurnRights.cpl
"QuickTime" - "Apple Inc." - C:\Programme\QuickTime\QTSystem\QuickTime.cpl
"SMARTBoardCPL" - "SMART Technologies ULC" - C:\Programme\SMART Technologies\SMART Board Drivers\SMARTBoardCPL.cpl

[Drivers]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
"avgio" (avgio) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avgio.sys
"avgntflt" (avgntflt) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avgntflt.sys
"avipbb" (avipbb) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\avipbb.sys
"BrPar" (BrPar) - "Brother Industries Ltd." - C:\WINDOWS\System32\drivers\BrPar.sys
"Changer" (Changer) - ? - C:\WINDOWS\system32\drivers\Changer.sys (File not found)
"Gigaset USB Adapter 54 Driver" (SE4501D) - "Siemens AG" - C:\WINDOWS\System32\DRIVERS\SE4501D.sys
"GMSIPCI" (GMSIPCI) - ? - E:\INSTALL\GMSIPCI.SYS (File not found)
"i2omgmt" (i2omgmt) - ? - C:\WINDOWS\system32\drivers\i2omgmt.sys (File not found)
"lbrtfdc" (lbrtfdc) - ? - C:\WINDOWS\system32\drivers\lbrtfdc.sys (File not found)
"PCIDump" (PCIDump) - ? - C:\WINDOWS\system32\drivers\PCIDump.sys (File not found)
"PDCOMP" (PDCOMP) - ? - C:\WINDOWS\system32\drivers\PDCOMP.sys (File not found)
"PDFRAME" (PDFRAME) - ? - C:\WINDOWS\system32\drivers\PDFRAME.sys (File not found)
"PDRELI" (PDRELI) - ? - C:\WINDOWS\system32\drivers\PDRELI.sys (File not found)
"PDRFRAME" (PDRFRAME) - ? - C:\WINDOWS\system32\drivers\PDRFRAME.sys (File not found)
"PxHelp20" (PxHelp20) - "Sonic Solutions" - C:\WINDOWS\System32\Drivers\PxHelp20.sys
"ssmdrv" (ssmdrv) - "Avira GmbH" - C:\WINDOWS\System32\DRIVERS\ssmdrv.sys
"WDICA" (WDICA) - ? - C:\WINDOWS\system32\drivers\WDICA.sys (File not found)

[Explorer]
-----( HKCU\Software\Microsoft\Internet Explorer\Desktop\Components )-----
"(0) Source" - ? - /C:/DOKUME~1/E-Maus/LOKALE~1/Temp/msohtml1/01/clip_image002.jpg (File not found)
-----( HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components )-----
{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath" - "Microsoft Corporation" - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install
-----( HKLM\Software\Classes\Folder\shellex\ColumnHandlers )-----
{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension" - "Adobe Systems, Inc." - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll
-----( HKLM\Software\Classes\Protocols\Filter )-----
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1" - "Microsoft Corporation" - C:\WINDOWS\system32\mscoree.dll
{807553E5-5146-11D5-A672-00B0D022E945} "text/xml" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL
-----( HKLM\Software\Classes\Protocols\Handler )-----
{32505114-5902-49B2-880A-1F7738E5A384} "Data Page Plugable Protocal mso-offdap11 Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBCOM~1\11\OWC11.DLL
{3D9F03FA-7A94-11D3-BE81-0050048385D1} "Data Page Pluggable Protocol mso-offdap Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBCOM~1\10\OWC10.DLL
{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0" - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved )-----
{653DCCC2-13DB-45B2-A389-427885776CFE} "Activities Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliPoint\ipcplact.dll
{4EB37360-49E8-11D3-95B5-004033382980} "ALZip 7.0 Context Menu Shell Extension" - "ESTsoft" - C:\Programme\ESTsoft\ALZip\AZCTM.dll
{124597D8-850A-41AE-849C-017A4FA99CA2} "Buttons Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliPoint\ipcplbtn.dll
{42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung" - ? - deskpan.dll (File not found)
{3BEABCC1-BF31-42df-88D9-A2955D6B8528} "IntelliPoint Sensitivity Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliPoint\ipcplsens.dll
{ED6E87C6-8A83-43aa-8208-8DBC8247F4D2} "IntelliType Pro Key Settings Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplkey.dll
{111D8120-25EB-4E1C-A4DF-C9EE5FCA35CB} "IntelliType Pro Scrolling Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplwhl.dll
{1825D0FA-5B0C-4e20-A929-3EFD15B6DF71} "IntelliType Pro Touchpad Control Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcpltp.dll
{A2569D1F-4E06-43EC-9825-0088B471BE47} "IntelliType Pro Wireless Control Panel Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplwir.dll
{97FA8AA2-EE77-4FF2-9449-424D8924EF21} "IntelliType Pro Zooming Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliType Pro\itcplzm.dll
{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF} "iTunes" - "Apple Inc." - C:\Programme\iTunes\iTunesMiniPlayer.dll
{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung" - ? - (File not found | COM-object registry key not found)
{32683183-48a0-441b-a342-7c2a440a9478} "Media Band" - ? - (File not found | COM-object registry key not found)
{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler" - "Microsoft Corporation" - C:\Programme\Microsoft Office\OFFICE11\msohev.dll
{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} "Microsoft Office Metadata Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{00020D75-0000-0000-C000-000000000046} "Microsoft Office Outlook" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\OFFICE11\MLSHEXT.DLL
{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} "Microsoft Office Thumbnail Handler" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\OFFICE12\msoshext.dll
{0006F045-0000-0000-C000-000000000046} "Outlook-Dateisymbolerweiterung" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\OFFICE11\OLKFSTUB.DLL
{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class" - "RealNetworks, Inc." - C:\Programme\Real\RealPlayer\rpshell.dll
{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning" - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\shlext.dll
{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung" - ? - (File not found | COM-object registry key not found)
{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References" - "Microsoft Corporation" - C:\WINDOWS\system32\dfshim.dll
{5E2121EE-0300-11D4-8D3B-444553540000} "SimpleShlExt Class" - ? - C:\Programme\ATI Technologies\ATI.ACE\atiacmxx.dll
{A5110426-177D-4e08-AB3F-785F10B4439C} "Sony Ericsson Datei-Manager" - "Sony Ericsson Mobile Communications AB" - C:\Programme\Sony Ericsson\Mobile2\File Manager\fmgrgui.dll
{BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Webordner" - "Microsoft Corporation" - C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL
{AF90F543-6A3A-4C1B-8B16-ECEC073E69BE} "Wheel Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliPoint\ipcplwhl.dll
{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR" - ? - C:\Programme\WinRAR\rarext.dll (File found, but it contains no detailed information)
{20082881-FC36-4E47-9A7A-644C95FF749F} "Wireless Property Page" - "Microsoft Corporation" - C:\Programme\Microsoft IntelliPoint\ipcplwir.dll

[Internet Explorer]
-----( HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars )-----
{32683183-48a0-441b-a342-7c2a440a9478} "{32683183-48a0-441b-a342-7c2a440a9478}" - ? - (File not found | COM-object registry key not found)
-----( HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser )-----
<binary data> "ITBar7Layout" - ? - (File not found | COM-object registry key not found)
<binary data> "ITBarLayout" - ? - (File not found | COM-object registry key not found)
-----( HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units )-----
{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_19" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_19.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} "Java Plug-in 1.6.0_19" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_19.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_19" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\npjpi160_19.dll / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab
{05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} "Office Genuine Advantage Validation Tool" - ? - C:\WINDOWS\system32\OGACheckControl.DLL / hxxp://download.microsoft.com/download/e/7/3/e7345c16-80aa-4488-ae10-9ac6be844f99/OGAControl.cab
{C7DB51B4-BCF7-4923-8874-7F1A0DC92277} "Office Update Installation Engine" - "Microsoft Corporation" - C:\WINDOWS\opuc.dll / hxxp://office.microsoft.com/officeupdate/content/opuc4.cab
{D27CDB6E-AE6D-11CF-96B8-444553540000} "Shockwave Flash Object" - "Adobe Systems, Inc." - C:\WINDOWS\system32\Macromed\Flash\Flash10e.ocx / hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} "{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}" - ? - (File not found | COM-object registry key not found) / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} "{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}" - ? - (File not found | COM-object registry key not found) / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab
{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} "{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}" - ? - (File not found | COM-object registry key not found) / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} "{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}" - ? - (File not found | COM-object registry key not found) / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} "{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}" - ? - (File not found | COM-object registry key not found) / hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
-----( HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions )-----
{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Recherchieren" - "Microsoft Corporation" - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects )-----
{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper" - "Adobe Systems Incorporated" - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
{67BCF957-85FC-4036-8DC4-D4D80E00A77B} "CIEDownload Object" - "SMART Technologies ULC." - C:\Programme\SMART Technologies\Notebook Software\NotebookPlugin.dll
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} "Google Toolbar Notifier BHO" - "Google Inc." - C:\Programme\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jp2ssv.dll
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class" - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
{3049C3E9-B461-4BC5-8870-4C09146192CA} "RealPlayer Download and Record Plugin for Internet Explorer" - "RealPlayer" - C:\Programme\Real\RealPlayer\rpbrowserrecordplugin.dll
{16CDE0AA-8522-4353-BB65-A0D738912AFA} "{16CDE0AA-8522-4353-BB65-A0D738912AFA}" - "QuickiSearch Ltd." - C:\PROGRA~1\INTERN~1\vvz.dll

[Logon]
-----( %AllUsersProfile%\Startmenü\Programme\Autostart )-----
"Adobe Reader - Schnellstart.lnk" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk (Shortcut exists | File not found)
"desktop.ini" - ? - C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini
"Service Manager.lnk" - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Shortcut exists | File exists)
-----( %UserProfile%\Startmenü\Programme\Autostart )-----
"desktop.ini" - ? - C:\Dokumente und Einstellungen\E-Maus\Startmenü\Programme\Autostart\desktop.ini
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run )-----
"WinIEobject" - ? - C:\Programme\Internet Explorer\wcu.exe (File found, but it contains no detailed information)
-----( HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run )-----
"updateMgr" - ? - C:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9 (File not found)
-----( HKLM\Software\Microsoft\Windows\CurrentVersion\Run )-----
"Adobe ARM" - "Adobe Systems Incorporated" - "C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"
"Adobe Photo Downloader" - "Adobe Systems Incorporated" - "C:\Programme\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
"Adobe Reader Speed Launcher" - "Adobe Systems Incorporated" - "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"AppleSyncNotifier" - "Apple Inc." - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
"ATICCC" - ? - "C:\Programme\ATI Technologies\ATI.ACE\CLIStart.exe" (File found, but it contains no detailed information)
"avgnt" - "Avira GmbH" - "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
"AVMWlanClient" - "AVM Berlin GmbH" - C:\Programme\avmwlanstick\FRITZWLANMini.exe
"IntelliPoint" - "Microsoft Corporation" - "C:\Programme\Microsoft IntelliPoint\ipoint.exe"
"iTunesHelper" - "Apple Inc." - "C:\Programme\iTunes\iTunesHelper.exe"
"itype" - "Microsoft Corporation" - "C:\Programme\Microsoft IntelliType Pro\itype.exe"
"LanguageShortcut" - ? - C:\Programme\CyberLink\PowerDVD\Language\Language.exe
"NeroFilterCheck" - "Nero AG" - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe
"QuickTime Task" - "Apple Inc." - "C:\Programme\QuickTime\QTTask.exe" -atboottime
"RemoteControl" - "Cyberlink Corp." - C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
"Sony Ericsson PC Suite" - "Sony Ericsson Mobile Communications AB" - "C:\Programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
"SunJavaUpdateSched" - "Sun Microsystems, Inc." - "C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe"
"vspdfprsrv.exe" - ? - C:\Programme\Visagesoft\eXPert PDF\vspdfprsrv.exe --background

[Print Monitors]
-----( HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors )-----
"Ice Monitor E" - "Black Ice Software" - C:\WINDOWS\system32\BuEMonNT.dll
"Microsoft Document Imaging Writer Monitor" - "Microsoft Corporation" - C:\WINDOWS\system32\mdimon.dll
"VSP1:" - ? - C:\WINDOWS\system32\vsmon1.dll (File found, but it contains no detailed information)

[Services]
-----( HKLM\SYSTEM\CurrentControlSet\Services )-----
".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
"Apple Mobile Device" (Apple Mobile Device) - "Apple Inc." - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
"ASP.NET-Zustandsdienst" (aspnet_state) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
"Avira AntiVir Guard" (AntiVirService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\avguard.exe
"Avira AntiVir Planer" (AntiVirSchedulerService) - "Avira GmbH" - C:\Programme\Avira\AntiVir Desktop\sched.exe
"Bonjour-Dienst" (Bonjour Service) - "Apple Inc." - C:\Programme\Bonjour\mDNSResponder.exe
"Cyberlink RichVideo Service(CRVS)" (RichVideo) - ? - C:\Programme\CyberLink\Shared Files\RichVideo.exe
"Google Software Updater" (gusvc) - "Google" - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
"Google Update Service (gupdate)" (gupdate) - "Google Inc." - C:\Programme\Google\Update\GoogleUpdate.exe
"iPod-Dienst" (iPod Service) - "Apple Inc." - C:\Programme\iPod\bin\iPodService.exe
"Java Quick Starter" (JavaQuickStarterService) - "Sun Microsystems, Inc." - C:\Programme\Java\jre6\bin\jqs.exe
"Machine Debug Manager" (MDM) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
"MSSQLSERVER" (MSSQLSERVER) - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
"MSSQLServerADHelper" (MSSQLServerADHelper) - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe
"NBService" (NBService) - "Nero AG" - C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
"NMIndexingService" (NMIndexingService) - "Nero AG" - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
"Office Source Engine" (ose) - "Microsoft Corporation" - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE
"SMART Board-Dienst" (SMART Board Service) - "SMART Technologies" - C:\Programme\SMART Technologies\SMART Board Drivers\SMARTBoardService.exe
"SMART SNMP Agent Service" (SMART SNMP Agent Service) - "SMART Technologies ULC" - C:\Programme\SMART Technologies\SMART Board Drivers\SMARTSNMPAgent.exe
"SMART Web-Server" (SMART Web Server) - ? - C:\Programme\SMART Technologies\SMART Board Drivers\WebServer.exe
"SQLSERVERAGENT" (SQLSERVERAGENT) - "Microsoft Corporation" - C:\Programme\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE
"Windows CardSpace" (idsvc) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0) - "Microsoft Corporation" - C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

[Winlogon]
-----( HKCU\Control Panel\IOProcs )-----
"MVB" - ? - mvfs32.dll (File not found)
-----( HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify )-----
"WgaLogon" - "Microsoft Corporation" - C:\WINDOWS\system32\WgaLogon.dll

[Winsock Providers]
-----( HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries )-----
"mdnsNSP" - "Apple Inc." - C:\Programme\Bonjour\mdnsNSP.dll

===[ Logfile end ]=========================================[ Logfile end ]===

If You have questions or want to get some help, You can visit Online Solutions :: Index

Sieht ok aus. Mach bitte Kontrollscans mit Malwarebytes und SUPERAntiSpyware und poste die Logs.
Denk dran beide Tools zu updaten vor dem Scan!!

Hallo Arne, danke für deine Hilfe.

Hier die beiden Berichte:

Malwarebytes' Anti-Malware 1.45
Malwarebytes

Datenbank Version: 3972

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.11

09.04.2010 14:50:45
mbam-log-2010-04-09 (14-50-45).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 110061
Laufzeit: 7 Minute(n), 7 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 3
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 2

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\CLSID\{16cde0aa-8522-4353-bb65-a0d738912afa} (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{16cde0aa-8522-4353-bb65-a0d738912afa} (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{16cde0aa-8522-4353-bb65-a0d738912afa} (Trojan.Agent) -> No action taken.

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Programme\Internet Explorer\vvz.dll (Trojan.Agent) -> No action taken.
C:\Programme\hcf163.exe (Rogue.Installer) -> No action taken.


Und jetzt noch der zweite Bericht:

SUPERAntiSpyware Scan Log
SUPERAntiSpyware.com | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!

Generated 04/09/2010 at 03:54 PM

Application Version : 4.35.1000

Core Rules Database Version : 4786
Trace Rules Database Version: 2598

Scan type : Complete Scan
Total Scan Time : 00:50:10

Memory items scanned : 817
Memory threats detected : 0
Registry items scanned : 6901
Registry threats detected : 0
File items scanned : 35889
File threats detected : 160

Adware.Tracking Cookie
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@tracking.quisma[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@guj.122.2o7[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@tracking.hrs[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@apmebf[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@atdmt[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@tracking.mindshare[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@clickaider[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@mediaplex[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@de.sitestat[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ehg-ctseventimag.hitbox[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@www.leserservice-tracking[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@statcounter[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ehg-fifa.hitbox[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ad.adition[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@server.iad.liveperson[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@imrworldwide[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@de.at.atwola[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@zanox-affiliate[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@unitymedia[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@hotelreservationservice.122.2o7[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ad.zanox[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@www.googleadservices[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@overture[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ads.quartermedia[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@adfarm1.adition[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ads2.net2day[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@msnportal.112.2o7[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@doubleclick[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@smartadserver[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ads.heias[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@2o7[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@cdn5.specificclick[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@bs.serving-sys[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ads.net2day[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@bluestreak[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@eas.apm.emediate[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@adsrv.admediate[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ad.yieldmanager[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@specificclick[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ad.adnet[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@paypal.112.2o7[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@himedia.individuad[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@advertising[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ad.ad-srv[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@stats.aperto[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@hitbox[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@tradedoubler[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@xiti[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@webmasterplan[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@im.banner.t-online[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@www.zanox-affiliate[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ads2.uclick[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@eaeacom.112.2o7[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@delivery.ads.coupling-media[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@adviva[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@content.yieldmanager[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@rotator.adjuggler[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@windowsmedia[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@traffictrack[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@adtech[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@server.iad.liveperson[3].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ads.csn[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ad.adnet[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@stats.payment-network[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ww251.smartadserver[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@de.sitestat[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@adx.chip[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ads.medienhaus[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@track.adform[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@zanox[2].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@zieltrack[1].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@de.sitestat[3].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@content.yieldmanager[3].txt
C:\Dokumente und Einstellungen\E-Maus\Cookies\e-maus@ad.adc-serv[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Ayse\Profil\Cookies\k120_f08@zanox-affiliate[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Ayse\Profil\Cookies\k120_f08@ad.zanox[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Ayse\Profil\Cookies\k120_f08@adfarm1.adition[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Ayse\Profil\Cookies\k120_f08@adserv.kwick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Ayse\Profil\Cookies\k120_f08@adtech[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Ayse\Profil\Cookies\k120_f08@atdmt[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Ayse\Profil\Cookies\k120_f08@doubleclick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Ayse\Profil\Cookies\k120_f08@tracking.quisma[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christian\Profil\Cookies\k120_f11@tto2.traffictrack[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christian\Profil\Cookies\k120_f11@adtech[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christian\Profil\Cookies\k120_f11@atdmt[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christian\Profil\Cookies\k120_f11@doubleclick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christian\Profil\Cookies\k120_f11@tradedoubler[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christian\Profil\Cookies\k120_f11@traffictrack[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christine\Profil\Cookies\k120_f02@ad.yieldmanager[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christine\Profil\Cookies\k120_f02@ad.zanox[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christine\Profil\Cookies\k120_f02@ads.gamersmedia[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christine\Profil\Cookies\k120_f02@atdmt[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christine\Profil\Cookies\k120_f02@doubleclick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christine\Profil\Cookies\k120_f02@media6degrees[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christine\Profil\Cookies\k120_f02@tradedoubler[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christine\Profil\Cookies\k120_f02@zanox[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Christine\Profil\Cookies\k120_f02@zedo[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@ad.adition[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@ad.yieldmanager[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@adfarm1.adition[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@ads.gamersmedia[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@ads.quartermedia[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@adtech[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@atdmt[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@doubleclick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@tradedoubler[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@media6degrees[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@tracking.quisma[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@traffictrack[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@tto2.traffictrack[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F04\Profil\Cookies\k120_f04@zedo[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F10\Profil\Cookies\k120_f10@adtech[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F10\Profil\Cookies\k120_f10@doubleclick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F14\Profil\Cookies\k120_f14@adfarm1.adition[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F14\Profil\Cookies\k120_f14@adtech[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F14\Profil\Cookies\k120_f14@atdmt[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F14\Profil\Cookies\k120_f14@doubleclick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F14\Profil\Cookies\k120_f14@tracking.quisma[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F14\Profil\Cookies\k120_f14@tradedoubler[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F14\Profil\Cookies\k120_f14@traffictrack[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\K120_F14\Profil\Cookies\k120_f14@tto2.traffictrack[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@tto2.traffictrack[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@ad.yieldmanager[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@ads.gamersmedia[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@adtech[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@atdmt[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@bs.serving-sys[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@doubleclick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@serving-sys[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@tracking.quisma[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@tradedoubler[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@traffictrack[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Martina\Profil\Cookies\k120_f05@zedo[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Stefanie\Profil\Cookies\k120_f03@doubleclick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Sylvia\Profil\Cookies\k120_f07@tto2.traffictrack[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Sylvia\Profil\Cookies\k120_f07@adfarm1.adition[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Sylvia\Profil\Cookies\k120_f07@adtech[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Sylvia\Profil\Cookies\k120_f07@atdmt[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Sylvia\Profil\Cookies\k120_f07@doubleclick[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Sylvia\Profil\Cookies\k120_f07@tradedoubler[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K120_19-05-2009\Sylvia\Profil\Cookies\k120_f07@traffictrack[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D01\Profil\Cookies\k216_d01@adfarm1.adition[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D01\Profil\Cookies\k216_d01@doubleclick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@doubleclick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@ad.adfill[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@ad.e-kolay[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@ad.reklamport[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@ad.zanox[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@adtech[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@imrworldwide[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@traffictrack[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@tto2.traffictrack[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@www.zanox-affiliate[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@zanox-affiliate[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D04\Profil\Cookies\k216_d04@zanox[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D07\Profil\Cookies\k216_d07@doubleclick[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D07\Profil\Cookies\k216_d07@ad.yieldmanager[1].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D07\Profil\Cookies\k216_d07@ads.quartermedia[2].txt
D:\01 Unterrichtsentwürfe\04 DV\Klassenarbeit\K216_18-05-2009\K216_D07\Profil\Cookies\k216_d07@atdmt[1].txt

Trojan.Agent/Gen-Nullo[Short]
C:\SYSTEM VOLUME INFORMATION\_RESTORE{596E0800-D3C4-4976-B059-CBE02407EE72}\RP543\A0093999.DLL

Ok. Bitte alle Funde entfernen.
Wenn danach alles ok ist, bitte die Updates prüfen, denn Dir fehlt min. der IE8!

Microsoftupdate

Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.

Windows Vista/7: Anleitung Windows-Update



PDF-Reader aktualisieren
Dein Adobe Reader ist nicht aktuell, was ein großes Sicherheitsrisiko darstellt. Du solltest daher besser die alte Version über Systemsteuerung => Software deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst.

Ich empfehle einen alternativen PDF-Reader wie SumatraPDF oder Foxit PDF Reader, beide sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink => http://filepony.de/?q=Flash+Player


Java-Update
Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.

Hallo Arne,

nochmals danke für deine Hilfe. Bisher sieht alles ganz gut aus. Hab alles nochmals auf Viren geprüft und keine Meldungen mehr erhalten. Außerdem habe ich all deine Tipps umgesetzt. Vielen Dank!!!