Smart Security, roter Desktop, Hilfe
 

Habe Smart security und oder iguard auf dem Rechner, eingeschleppt durch IE. Habe keine Ahnung wie ich die Dinge wieder vom Rechner bekomme. Hoffe hier im Forum auf Hilfe. Bin Anfänger und habe mich bis hierhin durchgearbeitet. Habe ein Logfile (was immer das ist) über hijackthis.de erstellt. Hilfestellung bitte verständlich formulieren.
Vielen Dank
Hier das logfile
Logfile of HijackThis v1.99.1
Scan saved at 09:04:46, on 28.03.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\System32\LXSUPMON.EXE
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\Programme\Java\j2re1.4.2_01\bin\jusched.exe
C:\Programme\SlySoft\CloneCD\CloneCDTray.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\pahmnz.exe
C:\Programme\Lexmark X1100 Series\lxbkbmgr.exe
C:\Programme\Winamp\winampa.exe
C:\WINDOWS\System32\tibs5.exe
C:\Programme\Lexmark X1100 Series\lxbkbmon.exe
C:\WINDOWS\All.exe
C:\WINDOWS\System32\paytime.exe
C:\WINDOWS\System32\Services\{64BEE551-0B03-4066-8B01-033215C3920F}\SVCHOST.EXE
C:\WINDOWS\msmsgr2.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE
C:\PROGRA~1\ASHAMPOO\ASHAMP~1\PopUpKiller.exe
C:\WINDOWS\System32\paytime.exe
C:\WINDOWS\TWAIN_32\S6U12BX\WATCH.exe
C:\Programme\WinZip\WZQKPICK.EXE
C:\PROGRA~1\MOZILLA.ORG\MOZILLA\MOZILLA.EXE
C:\Tools\Logfile\hijackthis_199\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOKUME~1\INGOLF~1\LOKALE~1\Temp\se.dll/spage.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.159.117.134/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOKUME~1\INGOLF~1\LOKALE~1\Temp\se.dll/spage.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.159.117.134/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.eibuhoqriyjjirvlaqn.com/G...RzZHP0iUc.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *hot-searches.com*;*lender-search.com*
R3 - Default URLSearchHook is missing
O1 - Hosts file is located at: C:\WINDOWS\nsdb\hosts
O1 - Hosts: 81.211.105.69 lender-search.com
O1 - Hosts: 81.211.105.68 hot-searches.com
O2 - BHO: CeresObj Class - {00000049-8F91-4D9C-9573-F016E7626484} - C:\WINDOWS\ceres.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0E37D980-275E-29DD-88A9-E7583729979D} - C:\WINDOWS\ANWEND~1\WMALOA~1\Ref dvd.exe
O2 - BHO: (no name) - {0F9561D0-03B2-44a3-89A6-E95E417CBA25} - C:\WINDOWS\cerbmod.dll
O2 - BHO: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Programme\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O2 - BHO: IE PopUp-Killer ; Neikeisoft - {49E0E0F0-5C30-11D4-945D-000000000003} - C:\PROGRA~1\ASHAMPOO\ASHAMP~1\PopUp.dll
O2 - BHO: Cls - {CF021F40-3E14-23A5-CBA2-717765728274} - C:\WINDOWS\System32\wer8274.dll
O2 - BHO: ADP UrlCatcher Class - {F4E04583-354E-4076-BE7D-ED6A80FD66DA} - C:\WINDOWS\System32\msbe.dll
O3 - Toolbar: SolidConverter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Programme\SolidDocuments\SolidConverterPDF\ExploreExtPDF.dll
O3 - Toolbar: (no name) - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\System32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Programme\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [rpveqcecfvjjr] C:\WINDOWS\System32\pahmnz.exe
O4 - HKLM\..\Run: [AnyDVD] C:\DOKUME~1\INGOLF~1\LOKALE~1\Temp\Rar$EX01.513\AnyDVD 3.9.4.2\AnyDVD.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Programme\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [tibs5] C:\WINDOWS\System32\tibs5.exe
O4 - HKLM\..\Run: [bias upload plan mix] C:\WINDOWS\All Users\Anwendungsdaten\axis memo bias upload\Mix Dash.exe
O4 - HKLM\..\Run: [farmmext] C:\WINDOWS\farmmext.exe
O4 - HKLM\..\Run: [Security iGuard] C:\Programme\Security iGuard\Security iGuard.exe
O4 - HKLM\..\Run: [PayTime] C:\WINDOWS\System32\paytime.exe
O4 - HKLM\..\Run: [Aqj] C:\WINDOWS\System32\Rbl.exe
O4 - HKLM\..\Run: [Disk Keeper] C:\DOKUME~1\INGOLF~1\LOKALE~1\Temp\keep.exe
O4 - HKLM\..\Run: [Service Host] C:\WINDOWS\System32\Services\{64BEE551-0B03-4066-8B01-033215C3920F}\SVCHOST.EXE
O4 - HKLM\..\Run: [_Cat4] C:\WINDOWS\msmsgr2.exe
O4 - HKLM\..\Run: [Gnl] C:\WINDOWS\System32\Lvh.exe
O4 - HKLM\..\Run: [Ncj] C:\WINDOWS\Vae.exe
O4 - HKLM\..\Run: [Chj] C:\WINDOWS\Rdu.exe
O4 - HKLM\..\Run: [Qst] C:\WINDOWS\System32\Beb.exe
O4 - HKLM\..\Run: [Ufd] C:\WINDOWS\System32\Bvg.exe
O4 - HKLM\..\Run: [Vvj] C:\WINDOWS\Rnu.exe
O4 - HKLM\..\Run: [Hth] C:\WINDOWS\Fdm.exe
O4 - HKLM\..\Run: [Obp] C:\WINDOWS\Sne.exe
O4 - HKLM\..\Run: [Lcj] C:\WINDOWS\Gev.exe
O4 - HKLM\..\Run: [Bgt] C:\WINDOWS\System32\Htq.exe
O4 - HKLM\..\Run: [Mck] C:\WINDOWS\Gug.exe
O4 - HKLM\..\Run: [Gij] C:\WINDOWS\Ved.exe
O4 - HKLM\..\Run: [Rjn] C:\WINDOWS\Pqa.exe
O4 - HKLM\..\Run: [Bsk] C:\WINDOWS\Ucq.exe
O4 - HKLM\..\Run: [Pha] C:\WINDOWS\Mpk.exe
O4 - HKLM\..\Run: [Kee] C:\WINDOWS\System32\Cvo.exe
O4 - HKLM\..\Run: [Ltm] C:\WINDOWS\Sqe.exe
O4 - HKLM\..\Run: [Fkk] C:\WINDOWS\Cih.exe
O4 - HKLM\..\Run: [Snb] C:\WINDOWS\Dhd.exe
O4 - HKLM\..\Run: [Lsj] C:\WINDOWS\Cvn.exe
O4 - HKLM\..\Run: [Nbj] C:\WINDOWS\System32\Quh.exe
O4 - HKLM\..\Run: [Olg] C:\WINDOWS\System32\Tfe.exe
O4 - HKLM\..\Run: [Kbv] C:\WINDOWS\System32\Ave.exe
O4 - HKLM\..\Run: [Mio] C:\WINDOWS\Taf.exe
O4 - HKLM\..\Run: [Ett] C:\WINDOWS\Lqo.exe
O4 - HKLM\..\Run: [Rol] C:\WINDOWS\System32\Rve.exe
O4 - HKLM\..\Run: [Emr] C:\WINDOWS\All.exe
O4 - HKLM\..\Run: [Njn] C:\WINDOWS\System32\Ugu.exe
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\RunOnce: [Local runole service] C:\WINDOWS\System32\srvc32.exe
O4 - HKLM\..\RunOnce: [Srv32 spool service] C:\WINDOWS\System32\spoolsrv32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [SlowMove] C:\WINDOWS\ANWEND~1\BROWSE~1\up 1.exe
O4 - HKCU\..\Run: [Ashampoo PopUpBlocker] C:\PROGRA~1\ASHAMPOO\ASHAMP~1\PopUpKiller.exe
O4 - HKCU\..\Run: [Pop-Up-Blocker] "C:\Programme\Tweak-XP Pro 4\popup.exe"
O4 - HKCU\..\Run: [PayTime] C:\WINDOWS\System32\paytime.exe
O4 - HKCU\..\Run: [Aqj] C:\WINDOWS\System32\Rbl.exe
O4 - HKCU\..\Run: [Gnl] C:\WINDOWS\System32\Lvh.exe
O4 - HKCU\..\Run: [Ncj] C:\WINDOWS\Vae.exe
O4 - HKCU\..\Run: [Chj] C:\WINDOWS\Rdu.exe
O4 - HKCU\..\Run: [Qst] C:\WINDOWS\System32\Beb.exe
O4 - HKCU\..\Run: [Ufd] C:\WINDOWS\System32\Bvg.exe
O4 - HKCU\..\Run: [Vvj] C:\WINDOWS\Rnu.exe
O4 - HKCU\..\Run: [Hth] C:\WINDOWS\Fdm.exe
O4 - HKCU\..\Run: [Obp] C:\WINDOWS\Sne.exe
O4 - HKCU\..\Run: [Lcj] C:\WINDOWS\Gev.exe
O4 - HKCU\..\Run: [Bgt] C:\WINDOWS\System32\Htq.exe
O4 - HKCU\..\Run: [Mck] C:\WINDOWS\Gug.exe
O4 - HKCU\..\Run: [Gij] C:\WINDOWS\Ved.exe
O4 - HKCU\..\Run: [Rjn] C:\WINDOWS\Pqa.exe
O4 - HKCU\..\Run: [Bsk] C:\WINDOWS\Ucq.exe
O4 - HKCU\..\Run: [Pha] C:\WINDOWS\Mpk.exe
O4 - HKCU\..\Run: [Kee] C:\WINDOWS\System32\Cvo.exe
O4 - HKCU\..\Run: [Ltm] C:\WINDOWS\Sqe.exe
O4 - HKCU\..\Run: [Fkk] C:\WINDOWS\Cih.exe
O4 - HKCU\..\Run: [Snb] C:\WINDOWS\Dhd.exe
O4 - HKCU\..\Run: [Lsj] C:\WINDOWS\Cvn.exe
O4 - HKCU\..\Run: [Nbj] C:\WINDOWS\System32\Quh.exe
O4 - HKCU\..\Run: [Olg] C:\WINDOWS\System32\Tfe.exe
O4 - HKCU\..\Run: [Kbv] C:\WINDOWS\System32\Ave.exe
O4 - HKCU\..\Run: [Mio] C:\WINDOWS\Taf.exe
O4 - HKCU\..\Run: [Ett] C:\WINDOWS\Lqo.exe
O4 - HKCU\..\Run: [Rol] C:\WINDOWS\System32\Rve.exe
O4 - HKCU\..\Run: [Emr] C:\WINDOWS\All.exe
O4 - HKCU\..\Run: [Njn] C:\WINDOWS\System32\Ugu.exe
O4 - HKCU\..\RunOnce: [Srv32 spool service] C:\WINDOWS\System32\spoolsrv32.exe
O4 - HKCU\..\RunOnce: [Local runole service] C:\WINDOWS\System32\srvc32.exe
O4 - Startup: WinZip Quick Pick.lnk = C:\Programme\WinZip\WZQKPICK.EXE
O4 - Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Watch.lnk = C:\WINDOWS\TWAIN_32\S6U12BX\WATCH.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM32\MSJAVA.DLL
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM32\MSJAVA.DLL
O9 - Extra button: Microsoft AntiSpyware helper - {272A4EAD-F565-4D71-9FA1-440C5CBD2953} - C:\WINDOWS\System32\wldr.dll
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {272A4EAD-F565-4D71-9FA1-440C5CBD2953} - C:\WINDOWS\System32\wldr.dll
O9 - Extra button: Mobilen Favoriten erstellen - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Programme\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: Corel Network monitor worker - {62917E71-318C-4DE0-BD51-0A24BF01FE19} - C:\WINDOWS\System32\iegfxfrw.dll
O9 - Extra 'Tools' menuitem: Corel Network monitor worker - {62917E71-318C-4DE0-BD51-0A24BF01FE19} - C:\WINDOWS\System32\iegfxfrw.dll
O9 - Extra button: Microsoft AntiSpyware helper - {6395B071-96FC-4FEA-9076-52E5D3E23EB0} - C:\WINDOWS\System32\wldr.dll
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {6395B071-96FC-4FEA-9076-52E5D3E23EB0} - C:\WINDOWS\System32\wldr.dll
O9 - Extra button: Microsoft AntiSpyware helper - {684A4C05-F9DF-4593-A3EB-B4C1715BE7B3} - C:\WINDOWS\System32\wldr.dll
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {684A4C05-F9DF-4593-A3EB-B4C1715BE7B3} - C:\WINDOWS\System32\wldr.dll
O9 - Extra button: Microsoft AntiSpyware helper - {77EB0942-234A-4715-917E-B9521A2506C8} - C:\WINDOWS\System32\wldr.dll
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {77EB0942-234A-4715-917E-B9521A2506C8} - C:\WINDOWS\System32\wldr.dll
O9 - Extra button: Microsoft AntiSpyware helper - {BD513BFB-B9EE-42DB-8D42-DF72B974F793} - C:\WINDOWS\System32\wldr.dll
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {BD513BFB-B9EE-42DB-8D42-DF72B974F793} - C:\WINDOWS\System32\wldr.dll
O9 - Extra button: Microsoft AntiSpyware helper - {BD67E9A9-28B4-49E0-B3DE-30354CF76980} - C:\WINDOWS\System32\wldr.dll
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {BD67E9A9-28B4-49E0-B3DE-30354CF76980} - C:\WINDOWS\System32\wldr.dll
O9 - Extra button: Microsoft AntiSpyware helper - {C27A2BE0-DC66-432F-BAD9-31E9379FF96F} - C:\WINDOWS\System32\wldr.dll
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {C27A2BE0-DC66-432F-BAD9-31E9379FF96F} - C:\WINDOWS\System32\wldr.dll
O9 - Extra button: Microsoft AntiSpyware helper - {CA7D4DCA-F531-4509-860D-F0CD60EC8E99} - C:\WINDOWS\System32\wldr.dll
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {CA7D4DCA-F531-4509-860D-F0CD60EC8E99} - C:\WINDOWS\System32\wldr.dll
O9 - Extra button: Microsoft AntiSpyware helper - {E12E4606-2A1E-4FFD-9455-8565CB0FD1E9} - C:\WINDOWS\System32\wldr.dll
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {E12E4606-2A1E-4FFD-9455-8565CB0FD1E9} - C:\WINDOWS\System32\wldr.dll
O9 - Extra button: Microsoft AntiSpyware helper - {F86488A0-FD5C-42B9-AD4D-0F195F869200} - C:\WINDOWS\System32\wldr.dll
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F86488A0-FD5C-42B9-AD4D-0F195F869200} - C:\WINDOWS\System32\wldr.dll
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {08D99ED7-152C-4982-A05B-C2B09CFB435A} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {08D99ED7-152C-4982-A05B-C2B09CFB435A} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {16EA83AC-CC29-4781-B452-CBD966950B71} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {16EA83AC-CC29-4781-B452-CBD966950B71} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {272A4EAD-F565-4D71-9FA1-440C5CBD2953} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {272A4EAD-F565-4D71-9FA1-440C5CBD2953} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {3140A3EA-EBCF-4DFD-8AAC-75BE618DF355} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {3140A3EA-EBCF-4DFD-8AAC-75BE618DF355} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {3446AF92-B5BF-4B7B-982C-464D95B29CDE} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {3446AF92-B5BF-4B7B-982C-464D95B29CDE} - (no file) (HKCU)
O9 - Extra button: Corel Network monitor worker - {62917E71-318C-4DE0-BD51-0A24BF01FE19} - C:\WINDOWS\System32\iegfxfrw.dll (HKCU)
O9 - Extra 'Tools' menuitem: Corel Network monitor worker - {62917E71-318C-4DE0-BD51-0A24BF01FE19} - C:\WINDOWS\System32\iegfxfrw.dll (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {6395B071-96FC-4FEA-9076-52E5D3E23EB0} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {6395B071-96FC-4FEA-9076-52E5D3E23EB0} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {684A4C05-F9DF-4593-A3EB-B4C1715BE7B3} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {684A4C05-F9DF-4593-A3EB-B4C1715BE7B3} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {6A6EDB6F-BBE8-464B-A410-7668110BA37F} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {6A6EDB6F-BBE8-464B-A410-7668110BA37F} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {7111FC93-5F29-4DCF-9410-DFECDB65631A} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {7111FC93-5F29-4DCF-9410-DFECDB65631A} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {77EB0942-234A-4715-917E-B9521A2506C8} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {77EB0942-234A-4715-917E-B9521A2506C8} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {84EF1090-CE58-4E88-A665-3E497A599804} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {84EF1090-CE58-4E88-A665-3E497A599804} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {B4F604C2-F52B-426D-BB3C-6474AC982893} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {B4F604C2-F52B-426D-BB3C-6474AC982893} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {BD513BFB-B9EE-42DB-8D42-DF72B974F793} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {BD513BFB-B9EE-42DB-8D42-DF72B974F793} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {BD67E9A9-28B4-49E0-B3DE-30354CF76980} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {BD67E9A9-28B4-49E0-B3DE-30354CF76980} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {C021F352-5946-49BD-AC40-20A5D63C5A2E} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {C021F352-5946-49BD-AC40-20A5D63C5A2E} - (no file) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {C27A2BE0-DC66-432F-BAD9-31E9379FF96F} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {C27A2BE0-DC66-432F-BAD9-31E9379FF96F} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {CA7D4DCA-F531-4509-860D-F0CD60EC8E99} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {CA7D4DCA-F531-4509-860D-F0CD60EC8E99} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {E12E4606-2A1E-4FFD-9455-8565CB0FD1E9} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {E12E4606-2A1E-4FFD-9455-8565CB0FD1E9} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {F86488A0-FD5C-42B9-AD4D-0F195F869200} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F86488A0-FD5C-42B9-AD4D-0F195F869200} - C:\WINDOWS\System32\wldr.dll (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {F9AE91DB-DC6E-4878-A341-F9C4F138EB63} - (no file) (HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F9AE91DB-DC6E-4878-A341-F9C4F138EB63} - (no file) (HKCU)
O16 - DPF: Win32 Classes -
O16 - DPF: {11311111-1111-1111-1111-111111111157} - file://C:\Recycled\Q330995.exe
O16 - DPF: {14A3221B-1678-1982-A355-7263B1281987} - ms-its:mhtml:file://c:\nosuch.mht!http://www.awmdabest.com/bltd/893.chm::/file.exe
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} - http://tools.ebayimg.com/eps/wl/acti..._v1-0-3-17.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1104494230498
O16 - DPF: {814EA0DA-E0D9-4AA4-833C-A1A6D38E79E9} (DASWebDownload Class) - http://das.microsoft.com/activate/ca...ail/DASAct.cab
O20 - Winlogon Notify: drct16 - C:\WINDOWS\SYSTEM32\drct16.dll
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Also,
Du hast mindestens einen backdoor-Trojaner drauf. Die Aktivitätten sind nicht zu übersehen, die Anzahl der Prozesse, die im Hintergrund laufen und nichts gutes bedeuten lassen ebenfalls nur eine Lösung zu:
Rechner vom Netz und System neu aufsetzen!.
Halte dich an alle Tipps in dem Link!
Melde dich wieder, wenn das Sstem neu und upgedated ist!
cacatoa

Hallo,
so ein Mist. Dann werde ich mal alles erneuern. Da ich davon keinen großen Plan habe, werde ich mir erstmal Hilfe organisieren. Danke für die Warnung und die Hinweise.
Alibabaido