Trojaner-Board - Probleme mit Desktop/Explorer

Hallo zusammen,
hab da ein kleines (naja, eher grosses) Problem.
Mein Desktop hat sich in eine blinkwütige Werbetafel verwandelt auf der für Spyware geworben wird. :koch: Hab schon alles mögliche versucht,leider ohne Erfolg.
Jetzt meine letzte Hoffnung Hijackthis.

Code:

Logfile of HijackThis v1.99.1

Scan saved at 12:11:50, on 25.08.2005

Platform: Windows XP SP1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

D:\HomeCinema\PowerCinema\Kernel\TV\CLCapSvc.exe

C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe

C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe

C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe

C:\Norman\bin\ZANDA.EXE

C:\WINDOWS\System32\nvsvc32.exe

C:\s3000\ADMINI~1\ProtSrv.exe

C:\WINDOWS\System32\rconsvc.exe

C:\WINDOWS\system32\Rshsvc.exe

C:\Programme\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\s3000\ADMINI~1\Timesync.exe

C:\Programme\TightVNC\WinVNC.exe

D:\HomeCinema\PowerCinema\Kernel\TV\CLSched.exe

C:\Norman\bin\NJEEVES.EXE

C:\Norman\Nvc\BIN\NVCSCHED.EXE

C:\Norman\Nvc\BIN\nipsvc.exe

C:\Norman\Nvc\bin\nvcoas.exe

C:\WINDOWS\system32\svcnt32.exe

C:\Programme\Gemeinsame Dateien\Sonic\Update Manager\sgtray.exe

C:\Programme\Java\j2re1.4.2_03\bin\jusched.exe

C:\Programme\HP\HP Share-to-Web\hpgs2wnd.exe

D:\HomeCinema\PowerDVD\PDVDServ.exe

C:\PROGRA~1\PESTPA~1\PPMemCheck.exe

C:\Programme\HP\HP Share-to-Web\hpgs2wnf.exe

C:\PROGRA~1\PESTPA~1\PPControl.exe

C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE

D:\HomeCinema\PowerCinema\PCMService.exe

C:\Norman\bin\ZLH.EXE

C:\WINDOWS\System32\hphmon05.exe

C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd2.exe

C:\Programme\HPQ\Quick Launch Buttons\EabServr.exe

C:\WINDOWS\system32\dla\tfswctrl.exe

C:\PROGRA~1\GEMEIN~1\PCSuite\DATALA~1\DATALA~1.EXE

C:\PROGRA~1\PESTPA~1\CookiePatrol.exe

C:\Programme\HP\Digital Imaging\Unload\hpqcmon.exe

C:\Programme\Apoint2K\Apoint.exe

C:\WINDOWS\AGRSMMSG.exe

C:\s3000\administration\msupdate\SPV_client.exe

C:\Programme\Messenger\msmsgs.exe

C:\WINDOWS\System32\ctfmon.exe

C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe

C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

C:\Norman\Nvc\BIN\NIP.EXE

C:\Norman\Nvc\bin\cclaw.exe

C:\Programme\Apoint2K\Apntex.exe

C:\PROGRA~1\GEMEIN~1\PCSuite\Services\SERVIC~1.EXE

C:\WINDOWS\System32\wbem\wmiprvse.exe

C:\Dokumente und Einstellungen\Administrator\Desktop\HiHjackThis\HijackThis.exe
 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = res://C:\WINDOWS\system32\shdocvn.dll/errorAPI.htm#ID=PX8594;

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.hp.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://psguard.com/

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://autoconfig.cpqcorp.net

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll

O2 - BHO: (no name) - {B75F75B8-93F3-429D-FF34-660B206D897A} - C:\WINDOWS\System32\zolker010.dll

O2 - BHO: ZToolbar Activator Class - {FFF5092F-7172-4018-827B-FA5868FB0478} - C:\WINDOWS\System32\ztoolb010.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O4 - HKLM\..\Run: [Start Page] C:\WINDOWS\system32\svcnt32.exe home

O4 - HKLM\..\Run: [WinVNC] "C:\Programme\TightVNC\WinVNC.exe" -servicehelper

O4 - HKLM\..\Run: [UpdateManager] "C:\Programme\Gemeinsame Dateien\Sonic\Update Manager\sgtray.exe" /r

O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe"  -osboot

O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_03\bin\jusched.exe

O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Programme\HP\HP Share-to-Web\hpgs2wnd.exe

O4 - HKLM\..\Run: [RemoteControl] D:\HomeCinema\PowerDVD\PDVDServ.exe

O4 - HKLM\..\Run: [PPMemCheck] C:\PROGRA~1\PESTPA~1\PPMemCheck.exe

O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg

O4 - HKLM\..\Run: [PestPatrol Control Center] C:\PROGRA~1\PESTPA~1\PPControl.exe

O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE

O4 - HKLM\..\Run: [PCMService] "D:\HomeCinema\PowerCinema\PCMService.exe"

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH

O4 - HKLM\..\Run: [IfxSetNet] c:\s3000\Administration\resetnet32.exe

O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [ecall] c:\s3000\bin\ecallsetup.exe

O4 - HKLM\..\Run: [eabconfg.cpl] C:\Programme\HPQ\Quick Launch Buttons\EabServr.exe /Start

O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\GEMEIN~1\PCSuite\DATALA~1\DATALA~1.EXE

O4 - HKLM\..\Run: [Cpqset] C:\Programme\HPQ\Default Settings\cpqset.exe

O4 - HKLM\..\Run: [CookiePatrol] C:\PROGRA~1\PESTPA~1\CookiePatrol.exe

O4 - HKLM\..\Run: [cleanup] c:\s3000\Administration\DeleteOldStuff.cmd

O4 - HKLM\..\Run: [CamMonitor] C:\Programme\HP\Digital Imaging\Unload\hpqcmon.exe

O4 - HKLM\..\Run: [Apoint] C:\Programme\Apoint2K\Apoint.exe

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [ADGSPV_Client] c:\s3000\administration\msupdate\SPV_client.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - Global Startup: disable_autolog.cmd

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1113805439195

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = D-0088147.s3000

O17 - HKLM\Software\..\Telephony: DomainName = D-0088147.s3000

O17 - HKLM\System\CCS\Services\Tcpip\..\{BCB10593-639A-4430-83B3-1725A36AE3A3}: NameServer = 10.65.130.64

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = D-0088147.s3000

O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = D-0088147.s3000

O21 - SSODL: PSGuard spyware remover - {147A7E10-DA6F-BEB4-BEC0-E8B9DD91213C} - c:\programme\psguard\wekfykq3.dll (file missing)

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - D:\HomeCinema\PowerCinema\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - D:\HomeCinema\PowerCinema\Kernel\TV\CLSched.exe

O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe

O23 - Service: ADG MehrApo-DB-Schnittstelle (Mapo_Srv) - ADG mbH - c:\s3000\Mehrapo\MapoDBSchnitts.exe

O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN\nipsvc.exe

O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE

O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE

O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin\nvcoas.exe

O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: ADG Protocol Server (ProtSrv) - Unknown owner - C:\s3000\ADMINI~1\ProtSrv.exe

O23 - Service: Remote Console (RCONSVC) - Unknown owner - C:\WINDOWS\System32\rconsvc.exe

O23 - Service: Remote Shell Service (RshSvc) - Unknown owner - C:\WINDOWS\system32\Rshsvc.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: ADG Zeit Synchronisierung (TimeSync) - Unknown owner - C:\s3000\ADMINI~1\Timesync.exe

O23 - Service: VNC Server (winvnc) - Unknown owner - C:\Programme\TightVNC\WinVNC.exe" -service (file missing)

O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

Wäre wahnsinnig nett möglichst schnell was zu erfahren.

Bis bald
Rainer

Hallo nochmal, bin jetzt echt verzweifelt :heulen:

Sitz jetzt seit um 8 Uhr vor diesem Sch...rechner....habe alles probiert und gefixed und gelöscht und weiss der teufel was....
ABER es ist immer noch da...so ein blöder Desktophintergrund...und bei ANZEIGE gibt keinen einzigen Reiter mehr zum auswählen????

Ich poste jetzt noch mal mein logfile, vielleicht fällt ja noch jemandem was ein
bitte bitte.....

Rainer

Code:

Logfile of HijackThis v1.99.1

Scan saved at 17:41:46, on 25.08.2005

Platform: Windows XP SP1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

D:\HomeCinema\PowerCinema\Kernel\TV\CLCapSvc.exe

C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe

C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLService.exe

C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe

C:\Norman\bin\ZANDA.EXE

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\System32\rconsvc.exe

C:\WINDOWS\system32\Rshsvc.exe

C:\Programme\Analog Devices\SoundMAX\SMAgent.exe

C:\WINDOWS\System32\svchost.exe

C:\s3000\ADMINI~1\Timesync.exe

C:\Programme\TightVNC\WinVNC.exe

D:\HomeCinema\PowerCinema\Kernel\TV\CLSched.exe

C:\Norman\bin\NJEEVES.EXE

C:\Norman\Nvc\BIN\NVCSCHED.EXE

C:\Norman\Nvc\BIN\nipsvc.exe

C:\Norman\Nvc\bin\nvcoas.exe

C:\WINDOWS\Explorer.EXE

C:\Programme\Gemeinsame Dateien\Sonic\Update Manager\sgtray.exe

C:\Programme\Java\j2re1.4.2_03\bin\jusched.exe

C:\Programme\HP\HP Share-to-Web\hpgs2wnd.exe

D:\HomeCinema\PowerDVD\PDVDServ.exe

C:\Programme\PestPatrol\PPMemCheck.exe

C:\Programme\PestPatrol\PPControl.exe

C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE

D:\HomeCinema\PowerCinema\PCMService.exe

C:\Programme\HP\HP Share-to-Web\hpgs2wnf.exe

C:\Norman\bin\ZLH.EXE

C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

C:\WINDOWS\System32\hphmon05.exe

C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd2.exe

C:\Programme\HPQ\Quick Launch Buttons\EabServr.exe

C:\WINDOWS\system32\dla\tfswctrl.exe

C:\PROGRA~1\GEMEIN~1\PCSuite\DATALA~1\DATALA~1.EXE

C:\Norman\Nvc\BIN\NIP.EXE

C:\Norman\Nvc\bin\cclaw.exe

C:\Programme\PestPatrol\CookiePatrol.exe

C:\Programme\HP\Digital Imaging\Unload\hpqcmon.exe

C:\Programme\Apoint2K\Apoint.exe

C:\WINDOWS\AGRSMMSG.exe

C:\s3000\administration\msupdate\SPV_client.exe

C:\Programme\Messenger\msmsgs.exe

C:\WINDOWS\System32\ctfmon.exe

C:\PROGRA~1\GEMEIN~1\PCSuite\Services\SERVIC~1.EXE

C:\Programme\Apoint2K\Apntex.exe

C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe

C:\WINDOWS\System32\ssstars.scr

C:\Dokumente und Einstellungen\Administrator\Desktop\HiHjackThis\HijackThis.exe
 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.hp.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://autoconfig.cpqcorp.net

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll

O2 - BHO: (no name) - {B75F75B8-93F3-429D-FF34-660B206D897A} - C:\WINDOWS\System32\zolker010.dll

O2 - BHO: ZToolbar Activator Class - {FFF5092F-7172-4018-827B-FA5868FB0478} - C:\WINDOWS\System32\ztoolb010.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O4 - HKLM\..\Run: [WinVNC] "C:\Programme\TightVNC\WinVNC.exe" -servicehelper

O4 - HKLM\..\Run: [UpdateManager] "C:\Programme\Gemeinsame Dateien\Sonic\Update Manager\sgtray.exe" /r

O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe"  -osboot

O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_03\bin\jusched.exe

O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Programme\HP\HP Share-to-Web\hpgs2wnd.exe

O4 - HKLM\..\Run: [RemoteControl] D:\HomeCinema\PowerDVD\PDVDServ.exe

O4 - HKLM\..\Run: [PPMemCheck] C:\Programme\PestPatrol\PPMemCheck.exe

O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg

O4 - HKLM\..\Run: [PestPatrol Control Center] C:\Programme\PestPatrol\PPControl.exe

O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE

O4 - HKLM\..\Run: [PCMService] "D:\HomeCinema\PowerCinema\PCMService.exe"

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH

O4 - HKLM\..\Run: [IfxSetNet] c:\s3000\Administration\resetnet32.exe

O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [ecall] c:\s3000\bin\ecallsetup.exe

O4 - HKLM\..\Run: [eabconfg.cpl] C:\Programme\HPQ\Quick Launch Buttons\EabServr.exe /Start

O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\GEMEIN~1\PCSuite\DATALA~1\DATALA~1.EXE

O4 - HKLM\..\Run: [Cpqset] C:\Programme\HPQ\Default Settings\cpqset.exe

O4 - HKLM\..\Run: [CookiePatrol] C:\Programme\PestPatrol\CookiePatrol.exe

O4 - HKLM\..\Run: [cleanup] c:\s3000\Administration\DeleteOldStuff.cmd

O4 - HKLM\..\Run: [CamMonitor] C:\Programme\HP\Digital Imaging\Unload\hpqcmon.exe

O4 - HKLM\..\Run: [Apoint] C:\Programme\Apoint2K\Apoint.exe

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [ADGSPV_Client] c:\s3000\administration\msupdate\SPV_client.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - Global Startup: disable_autolog.cmd

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programme\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_03\bin\npjpi142_03.dll

O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1113805439195

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = D-0088147.s3000

O17 - HKLM\Software\..\Telephony: DomainName = D-0088147.s3000

O17 - HKLM\System\CCS\Services\Tcpip\..\{BCB10593-639A-4430-83B3-1725A36AE3A3}: NameServer = 10.65.130.64

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = D-0088147.s3000

O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = D-0088147.s3000

O21 - SSODL: PSGuard spyware remover - {147A7E10-DA6F-BEB4-BEC0-E8B9DD91213C} - c:\programme\psguard\wekfykq3.dll (file missing)

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - D:\HomeCinema\PowerCinema\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - D:\HomeCinema\PowerCinema\Kernel\TV\CLSched.exe

O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe

O23 - Service: ADG MehrApo-DB-Schnittstelle (Mapo_Srv) - ADG mbH - c:\s3000\Mehrapo\MapoDBSchnitts.exe

O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN\nipsvc.exe

O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE

O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\bin\ZANDA.EXE

O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin\nvcoas.exe

O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: ADG Protocol Server (ProtSrv) - Unknown owner - C:\s3000\ADMINI~1\ProtSrv.exe

O23 - Service: Remote Console (RCONSVC) - Unknown owner - C:\WINDOWS\System32\rconsvc.exe

O23 - Service: Remote Shell Service (RshSvc) - Unknown owner - C:\WINDOWS\system32\Rshsvc.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programme\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: ADG Zeit Synchronisierung (TimeSync) - Unknown owner - C:\s3000\ADMINI~1\Timesync.exe

O23 - Service: VNC Server (winvnc) - Unknown owner - C:\Programme\TightVNC\WinVNC.exe" -service (file missing)

O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe