Trojaner-Board - PC langsam, ein Trojaner? Hilfe!

Hallo, bin neu hier :)

Mein PC ist zur Zeit irgendwie langsam, er reagiert teilweise kaum wenn ich auf etwas klicke, ich vermute mal ich hab mir da was eingefangen. Hab mal ein LOGFILE mit Hijackthis erstellt und bitte euch herzlichst das mal anzusehen und mir zu sagen was ich am besten machen sollte.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:03:22, on 21.08.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20583)
Boot mode: Normal

Running processes:
C:\WINDOOF\System32\smss.exe
C:\WINDOOF\system32\csrss.exe
C:\WINDOOF\system32\winlogon.exe
C:\WINDOOF\system32\services.exe
C:\WINDOOF\system32\lsass.exe
C:\WINDOOF\system32\svchost.exe
C:\WINDOOF\system32\svchost.exe
C:\WINDOOF\System32\svchost.exe
C:\WINDOOF\system32\svchost.exe
C:\WINDOOF\system32\svchost.exe
C:\WINDOOF\system32\wudfhost.exe
C:\WINDOOF\system32\spoolsv.exe
C:\WINDOOF\Explorer.EXE
C:\WINDOOF\RTHDCPL.EXE
C:\Programme\GIGABYTE\GEST\GEST.exe
C:\WINDOOF\system32\RUNDLL32.EXE
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
C:\Programme\Unlocker\UnlockerAssistant.exe
C:\Programme\Logitech\Gaming Software\LWEMon.exe
C:\Programme\Spyware Doctor\pctsTray.exe
C:\WINDOOF\system32\ctfmon.exe
C:\Programme\DAEMON Tools Lite\daemon.exe
D:\Programme\Steam\Steam.exe
C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
C:\Programme\Logitech\SetPoint\SetPoint.exe
C:\Programme\Gemeinsame Dateien\Logitech\KHAL\KHALMNPR.EXE
C:\WINDOOF\system32\nvsvc32.exe
C:\WINDOOF\system32\PnkBstrA.exe
C:\Programme\CyberLink\Shared Files\RichVideo.exe
C:\Programme\Spyware Doctor\pctsAuxs.exe
C:\Programme\Spyware Doctor\pctsSvc.exe
C:\WINDOOF\System32\alg.exe
C:\Programme\GIGABYTE\GEST\GSvr.exe
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
C:\Programme\Winamp\winampa.exe
C:\Programme\Winamp Remote\bin\orbtray.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Programme\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOOF\system32\wbem\wmiprvse.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [GEST] C:\Programme\GIGABYTE\GEST\RUN.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOOF\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOOF\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOOF\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOOF\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Programme\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Programme\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Programme\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [AVP] "C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Programme\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOOF\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Programme\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Steam] "D:\Programme\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Orb] "C:\Programme\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [IE7] rundll32 advpack.dll,LaunchINFSection IE7.inf,FirstUserStart (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32 (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programme\Logitech\SetPoint\SetPoint.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Statistik für den Schutz des Web-Datenverkehrs - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOOF\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOOF\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra button: Klicke hier um das Projekt xp-AntiSpy zu unterstützen - {0e921e80-267a-42aa-aee4-60b9a1222a44} - C:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU)
O9 - Extra 'Tools' menuitem: Unterstützung für xp-AntiSpy - {0e921e80-267a-42aa-aee4-60b9a1222a44} - C:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU)
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Programme\GIGABYTE\GEST\GSvr.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOOF\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOOF\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programme\CyberLink\Shared Files\RichVideo.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Programme\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Programme\Spyware Doctor\pctsSvc.exe

--
End of file - 7725 bytes

C:\WINDOOF\system32\wudfhost.exe

AhnLab-V3 2008.8.21.0 2008.08.22 -
AntiVir 7.8.1.23 2008.08.22 -
Authentium 5.1.0.4 2008.08.22 -
Avast 4.8.1195.0 2008.08.22 -
AVG 8.0.0.161 2008.08.22 -
BitDefender 7.2 2008.08.22 -
CAT-QuickHeal 9.50 2008.08.22 -
ClamAV 0.93.1 2008.08.22 -
DrWeb 4.44.0.09170 2008.08.22 -
eSafe 7.0.17.0 2008.08.21 -
eTrust-Vet 31.6.6039 2008.08.21 -
Ewido 4.0 2008.08.22 -
F-Prot 4.4.4.56 2008.08.21 -
F-Secure 7.60.13501.0 2008.08.22 -
Fortinet 3.14.0.0 2008.08.22 -
GData 2.0.7306.1023 2008.08.20 -
Ikarus T3.1.1.34.0 2008.08.22 -
K7AntiVirus 7.10.425 2008.08.22 -
Kaspersky 7.0.0.125 2008.08.22 -
McAfee 5368 2008.08.22 -
Microsoft 1.3807 2008.08.22 -
NOD32v2 3380 2008.08.22 -
Norman 5.80.02 2008.08.22 -
Panda 9.0.0.4 2008.08.22 -
PCTools 4.4.2.0 2008.08.22 -
Prevx1 V2 2008.08.22 -
Rising 20.58.42.00 2008.08.22 -
Sophos 4.32.0 2008.08.22 -
Sunbelt 3.1.1571.1 2008.08.22 -
Symantec 10 2008.08.22 -
TheHacker 6.3.0.6.058 2008.08.22 -
TrendMicro 8.700.0.1004 2008.08.22 -
VBA32 3.12.8.4 2008.08.22 -
ViRobot 2008.8.22.1346 2008.08.22 -
VirusBuster 4.5.11.0 2008.08.22 -
Webwasher-Gateway 6.6.2 2008.08.22 -
weitere Informationen
File size: 146432 bytes
MD5...: 2ed5a170cf9e2ed6920dc1745d0d8029
SHA1..: 94676b456fe25ee54b2f761241b1d55e9deb00dd
SHA256: 2705c092bc2cafcb9b42dfd2b9c92efb381c80002b9b255757dcba1e7ffc09f8
SHA512: 16e3715ef559e8f1845b49aef0dba89f6b76530dcb726ea1a61e8532ab176ac2
231fec4ac021162f4d87a8453e0bf38891039707132c26dd7f71d3541aed1bf3
PEiD..: -
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x102025b
timedatestamp.....: 0x451c7d4f (Fri Sep 29 01:56:31 2006)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x20e1a 0x21000 5.61 0a0279d0cc74b72e8400ba68a4fdc969
.data 0x22000 0xd2c 0x600 4.82 7d5563515d852dd639e932d3e6f1de5e
.rsrc 0x23000 0x8f8 0xa00 3.95 1e1858fea3c80d82885736b471cf50ac
.reloc 0x24000 0x17e0 0x1800 6.13 a494c0e2891d5d89b0f63fbd1f486dd6

( 7 imports )
> ADVAPI32.dll: TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, ConvertStringSidToSidW, RevertToSelf
> KERNEL32.dll: CloseHandle, WaitForSingleObject, TlsFree, GetLastError, TlsGetValue, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, TlsSetValue, TlsAlloc, InitializeCriticalSectionAndSpinCount, GetSystemDirectoryW, HeapSetInformation, InterlockedIncrement, InterlockedDecrement, InterlockedCompareExchange, CreateThread, LocalFree, CreateEventW, SetEvent, DeviceIoControl, CreateFileW, InterlockedExchange, BindIoCompletionCallback, FreeLibrary, GetProcAddress, LoadLibraryExW, GetCurrentProcessId, Sleep, ReadFile, WriteFile, GetCurrentThread, LocalAlloc, LoadLibraryA, RaiseException, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, OutputDebugStringA, SetUnhandledExceptionFilter
> msvcrt.dll: __wgetmainargs, _cexit, _errno, _XcptFilter, exit, __winitenv, _initterm, _amsg_exit, __setusermatherr, _adjust_fdiv, __p__commode, __p__fmode, __set_app_type, _unlock, __dllonexit, _lock, _onexit, _controlfp, wcsncmp, _vsnwprintf, _purecall, memset, memcpy, _wcsicmp, _wcsnicmp, _exit
> ntdll.dll: RtlUnwind
> RPCRT4.dll: UuidFromStringW
> ole32.dll: CoUninitialize, CoInitializeEx, CLSIDFromString
> WUDFPlatform.dll: ShutdownPlatformLibrary, WudfWaitForDebugger, WdfGetLpcInterface, InitializePlatformLibrary, GetAndInitializePlatformObject

( 1 exports )
Microsoft_WDF_UMDF_Version

C:\Programme\GIGABYTE\GEST\GEST.exe

AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
F-Prot - - -
F-Secure - - -
Fortinet - - -
GData - - -
Ikarus - - -
Kaspersky - - -
McAfee - - -
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - -
Prevx1 - - Malicious Software
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -
weitere Informationen
MD5: a942be0f932a116fc33ae5d32e057a54
SHA1: ba0b0f56779d18b7d4408ac15ba102c4aa52349b
SHA256: 4bd30360dfda59bcb4fe2ea775d02fcb714bdddad342b0f3648a9b6630475005
SHA512: 1d0fe3b0463ad499ae5e8499670e006b45226e714cc501850f3dd97727d8815fabea16cfe9880472d5955ead5fa21eb4d25903c8a7a3a76f7230ead78516e81e

C:\Programme\GIGABYTE\GEST\GSvr.exe

AhnLab-V3 2008.8.21.0 2008.08.25 -
AntiVir 7.8.1.23 2008.08.25 -
Authentium 5.1.0.4 2008.08.25 -
Avast 4.8.1195.0 2008.08.24 -
AVG 8.0.0.161 2008.08.24 -
BitDefender 7.2 2008.08.25 -
CAT-QuickHeal 9.50 2008.08.22 -
ClamAV 0.93.1 2008.08.25 -
DrWeb 4.44.0.09170 2008.08.25 -
eSafe 7.0.17.0 2008.08.24 -
eTrust-Vet 31.6.6044 2008.08.23 -
Ewido 4.0 2008.08.24 -
F-Prot 4.4.4.56 2008.08.25 -
F-Secure 7.60.13501.0 2008.08.25 -
Fortinet 3.14.0.0 2008.08.25 -
GData 2.0.7306.1023 2008.08.20 -
Ikarus T3.1.1.34.0 2008.08.25 -
K7AntiVirus 7.10.427 2008.08.23 -
Kaspersky 7.0.0.125 2008.08.25 -
McAfee 5368 2008.08.22 -
Microsoft 1.3807 2008.08.25 -
NOD32v2 3383 2008.08.24 -
Norman 5.80.02 2008.08.22 -
Panda 9.0.0.4 2008.08.25 -
PCTools 4.4.2.0 2008.08.24 -
Prevx1 V2 2008.08.25 -
Rising 20.59.00.00 2008.08.25 -
Sophos 4.32.0 2008.08.25 -
Sunbelt 3.1.1575.1 2008.08.23 -
Symantec 10 2008.08.25 -
TheHacker 6.3.0.6.060 2008.08.23 -
TrendMicro 8.700.0.1004 2008.08.25 -
VBA32 3.12.8.4 2008.08.23 -
ViRobot 2008.8.22.1346 2008.08.22 -
VirusBuster 4.5.11.0 2008.08.24 -
Webwasher-Gateway 6.6.2 2008.08.25 -
weitere Informationen
File size: 47624 bytes
MD5...: a73082bab773171b34d656609c6d5854
SHA1..: e8c6ae0fec44cd8fd0c5ec4e25ea25570a61896d
SHA256: 93522ad123a844178ad27f914187534859ccf67ef21cc6b17580ea17abb62f1b
SHA512: 76f9773ee0bf418e8c8807b1a423f80a1ecbe076bf77fe5724b4e9dc94b01dd9
4d1b951fa7e26d587ed3d3a0d9ecdac91365c99dce7fe5bd24dff1817c84014b
PEiD..: Armadillo v1.71
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x401de0
timedatestamp.....: 0x4762cf15 (Fri Dec 14 18:44:37 2007)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x542a 0x6000 6.10 8ee3e94870c9a9a4df6d45f7bc406eed
.rdata 0x7000 0xa2a 0x1000 3.91 098bb649c253a29a24de8eecadbad108
.data 0x8000 0x22e8 0x1000 2.87 1c03eb2a25da2577ba1f20e462a1a312
.rsrc 0xb000 0x28c 0x1000 3.71 1c00f40f4b92721c83081d1b78f55f05

( 2 imports )
> KERNEL32.dll: CreateToolhelp32Snapshot, GetVersionExA, Process32First, DeleteFileA, CloseHandle, Process32Next, LoadLibraryA, GetProcAddress, FreeLibrary, GetLastError, GetModuleHandleA, Sleep, GetModuleFileNameA, GetCommandLineA, GetVersion, ExitProcess, HeapFree, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, FreeEnvironmentStringsA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, HeapDestroy, HeapCreate, VirtualFree, RtlUnwind, WriteFile, HeapAlloc, SetFilePointer, VirtualAlloc, HeapReAlloc, SetStdHandle, FlushFileBuffers, CreateFileA, GetCPInfo, GetACP, GetOEMCP, SetEndOfFile, ReadFile, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW
> ADVAPI32.dll: SetServiceStatus, OpenSCManagerA, CreateServiceA, CloseServiceHandle, OpenServiceA, DeleteService, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerA

( 0 exports )

Sorry das ich so lange gebraucht hab, war jetzt ein paar Tage nicht zuhause ;) Mal noch ne andere Frage, wieso heißt der Ordner bei mir WINDOOF? Müsste doch eigentlich WINDOWS heißen.