Trojaner-Board - System neu aufsetzen

Logfile of HijackThis v1.99.1
Scan saved at 11:29:10, on 14.04.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\Programme\Ahead\InCD\InCDsrv.exe
H:\WINDOWS\system32\spoolsv.exe
H:\WINDOWS\Explorer.EXE
H:\Programme\Intel\Intel Application Accelerator\iaanotif.exe
H:\WINDOWS\system32\RunDll32.exe
H:\WINDOWS\Dit.exe
H:\WINDOWS\CNYHKey.exe
H:\Programme\FRITZ!DSL\IGDCTRL.EXE
H:\Programme\Java\jre1.5.0_05\bin\jusched.exe
H:\Programme\Home Cinema\PowerCinema\PCMService.exe
H:\Programme\Java\jre1.5.0_05\bin\jucheck.exe
H:\Programme\Ahead\InCD\InCD.exe
H:\Programme\ScanSoft\PaperPort\pptd40nt.exe
H:\Programme\Intel\Intel Application Accelerator\iaantmon.exe
H:\Programme\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
H:\WINDOWS\system32\LckFldService.exe
H:\Programme\SlySoft\AnyDVD\AnyDVD.exe
H:\PROGRA~1\VIRTUA~1\System\VCDPlay.exe
H:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
H:\Programme\Microsoft Office\Office10\WINWORD.EXE
H:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
H:\WINDOWS\system32\RUNDLL32.EXE
H:\WINDOWS\system32\taskswitch.exe
H:\WINDOWS\system32\nvsvc32.exe
H:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
H:\WINDOWS\system32\ctfmon.exe
H:\Programme\Logitech\Profiler\lwemon.exe
H:\WINDOWS\system32\svchost.exe
H:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe
H:\Programme\T-Online\T-Online_Software_6\Banking\Hb60Remind.exe
H:\Programme\Copernic Desktop Search\CopernicDesktopSearch.exe
H:\PROGRA~1\BUYERT~1\BUYERT~3\Reminder.exe
H:\Programme\FRITZ!DSL\StCenter.exe
H:\Programme\Virtual CD v4\System\vcdsecs.exe
H:\Programme\Raxco\PerfectDisk\PDSched.exe
H:\Programme\Virtual CD v4\System\VCDTray.exe
H:\Programme\Microsoft Works\WkDStore.exe
H:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
A:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h##p://www.google.de/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = h##p://www.t-online.de/service/redir/tosw5_internet.htm
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - H:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: PreispiratenSearchURL - {0B660087-931C-4056-A04F-0423890E40B6} - H:\Programme\Preispiraten\Preispiraten2\PPSearchURL.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - H:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: metaspinner GmbH - {7C7A8947-5935-4430-AC0E-E7D04697414E} - H:\PROGRA~1\BUYERT~1\BUYERT~3\IEBUTT~1.DLL
O2 - BHO: metaspinner media GmbH - {84B94901-3645-4D80-A6B7-4D0050B19455} - H:\Programme\Preispiraten\Preispiraten2\IEButtonAmazonInterface.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - h:\programme\google\googletoolbar2.dll
O2 - BHO: metaspinner GmbH - {CD9B7762-DFBC-42B1-BB30-02A78287B456} - H:\PROGRA~1\BUYERT~1\BUYERT~3\IEBUTT~2.DLL
O2 - BHO: metaspinner media GmbH - {D3AA56A9-8137-4950-A6F9-D0190A82AF2A} - H:\Programme\Preispiraten\Preispiraten2\IEButtonPPInterface.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - H:\Programme\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Copernic Desktop Search - {C5F7A735-70F1-477F-8C36-6FF3C736017B} - H:\Programme\Copernic Desktop Search\CopernicDesktopSearchIntegration910.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - h:\programme\google\googletoolbar2.dll
O4 - HKLM\..\Run: [IAAnotif] H:\Programme\Intel\Intel Application Accelerator\iaanotif.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE H:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Verknüpfung mit der High Definition Audio-Eigenschaftenseite] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] H:\Programme\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [PCMService] "H:\Programme\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [NeroFilterCheck] H:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] H:\Programme\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "H:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] H:\Programme\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] H:\Programme\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [OpwareSE2] "H:\Programme\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [AnyDVD] H:\Programme\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [VCDPlayer] H:\PROGRA~1\VIRTUA~1\System\VCDPlay.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "H:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE H:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CoolSwitch] H:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [TkBellExe] "H:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] H:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Start WingMan Profiler] "H:\Programme\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [HB60Remind] H:\Programme\T-Online\T-Online_Software_6\Banking\Hb60Remind.exe
O4 - HKCU\..\Run: [T-Online_Software_6\WLAN-Access Finder] H:\Programme\T-Online\WLAN-Access Finder\ToWLaAcF.exe /StartMinimized
O4 - HKCU\..\Run: [Copernic Desktop Search] "H:\Programme\Copernic Desktop Search\CopernicDesktopSearch.exe" /tray
O4 - HKCU\..\Run: [Buyertools Reminder] "H:\PROGRA~1\BUYERT~1\BUYERT~3\Reminder.exe" /autorun
O4 - Global Startup: FRITZ!DSL Startcenter.lnk = H:\Programme\FRITZ!DSL\StCenter.exe
O8 - Extra context menu item: &Google Search - res://h:\programme\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Preispiratensuche nach markiertem Text - H:\\Programme\\Preispiraten\\Preispiraten2\\preispiraten.html
O8 - Extra context menu item: &Translate English Word - res://h:\programme\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: amazon Suche - H:\Programme\Preispiraten\Preispiraten2\Searchamazon.htm
O8 - Extra context menu item: amazon Suche starten - H:\Programme\Preispiraten\Preispiraten2\Searchamazon.htm
O8 - Extra context menu item: Backward Links - res://h:\programme\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://h:\programme\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Easy-WebPrint - Drucken - res://H:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint - Schnelldruck - res://H:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint - Vorschau - res://H:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint - Zu Druckliste hinzufügen - res://H:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: eBay - Mein eBay - H:\Programme\Preispiraten\Preispiraten2\SearchEbaymein.htm
O8 - Extra context menu item: eBay - Powersuche - H:\Programme\Preispiraten\Preispiraten2\SearchEbaypower.htm
O8 - Extra context menu item: eBay - Startseite - H:\Programme\Preispiraten\Preispiraten2\SearchEbay.htm
O8 - Extra context menu item: eBay Powersuche - h##p://www.webtip.ch/cgi-bin/buyertools/button.pl?adv
O8 - Extra context menu item: eBay Produktsuche - H:\Programme\Buyertools\Buyertools Reminder15\SearchEbay.htm
O8 - Extra context menu item: eBay Startseite - h##p://www.webtip.ch/cgi-bin/buyertools/button.pl?heim
O8 - Extra context menu item: eBay Suche starten - H:\Programme\Preispiraten\Preispiraten2\SearchEbay.htm
O8 - Extra context menu item: Google Suche - H:\Programme\Preispiraten\Preispiraten2\SearchGoogle.htm
O8 - Extra context menu item: Google Suche starten - H:\Programme\Preispiraten\Preispiraten2\SearchGoogle.htm
O8 - Extra context menu item: Mein eBay - h##p://www.webtip.ch/cgi-bin/buyertools/button.pl?mein
O8 - Extra context menu item: Similar Pages - res://h:\programme\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://h:\programme\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Programme\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - H:\Programme\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Preispiraten 2.5 - {2638A03E-1669-43BE-8119-B47087629A7F} - H:\Programme\Preispiraten\Preispiraten2\preispiraten2ie.exe
O9 - Extra button: Buyertools Reminder - {27914077-B4D6-4A0E-9763-76B6E9DD9A81} - H:\Programme\Buyertools\Buyertools Reminder15\ReminderIE.exe
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - H:\Programme\Gemeinsame Dateien\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - H:\WINDOWS\system32\Shdocvw.dll
O16 - DPF: {08D390AE-5101-4701-A89F-6C6DADCCC402} (MSN Photo Select Tool) - http://photos.msn.de/resources/neutral/controls/MsnPPick.cab?10,0,910,0
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1125222050265
O16 - DPF: {693A2822-F041-49E7-940A-AB0FE868B776} (Federated Upload Control) - http://de-de.ms.fujifilmnet.com/FedUpload.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1130497284296
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} - h##p://www2.service.t-online.de/dyn/c/23/34/15/2334156.html
O18 - Protocol: haufereader - {39198710-62F7-42CD-9458-069843FA5D32} - H:\Programme\Haufe\HaufeReader\HRInstmon.dll
O23 - Service: AVM IGD CTRL Service - AVM Berlin - H:\Programme\FRITZ!DSL\IGDCTRL.EXE
O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - H:\Programme\Gemeinsame Dateien\AVM\de_serv.exe
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - H:\Programme\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - H:\Programme\Ahead\InCD\InCDsrv.exe
O23 - Service: InCD Helper (read only) (InCDsrvR) - Ahead Software AG - H:\Programme\Ahead\InCD\InCDsrv.exe
O23 - Service: LckFldService - Unknown owner - H:\WINDOWS\system32\LckFldService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - H:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PDEngine - Raxco Software, Inc. - H:\Programme\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - H:\Programme\Raxco\PerfectDisk\PDSched.exe
O23 - Service: PMounter - Unknown owner - H:\WINDOWS\system32\PMounter.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - H:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Virtual CD v4 Security service (VCDSecS) - H+H Software GmbH - H:\Programme\Virtual CD v4\System\vcdsecs.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - H:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe