Trojaner-Board - Taskmanager deaktiviert

Guten Morgen!
Seit kurzem gibt mir mein System jedesmal, wenn ich den Taskmanager öffnen will, die Nachricht, der Taskmanager sei vom Administrator deaktiviert. Da ich aber selbst als Administrator angemeldet bin und sicher nicht den Taskmanager deaktiviert habe, wüsste ich gerne, ob irgendein Schädling auf meinem Rechner das gatan haben könnte.

Dazu hier die HijackThis-Logdatei:

Code:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 20:46:42, on 28.02.2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Boot mode: Safe mode
 

Running processes:

C:\windows\System32\smss.exe

C:\windows\system32\csrss.exe

C:\windows\system32\winlogon.exe

C:\windows\system32\services.exe

C:\windows\system32\lsass.exe

C:\windows\system32\svchost.exe

C:\windows\system32\svchost.exe

C:\windows\system32\svchost.exe

C:\Programme\Softex\OmniPass\OPXPApp.exe

C:\windows\Explorer.EXE

C:\windows\system32\ctfmon.exe

C:\Programme\Avira\AntiVir PersonalEdition Classic\avcenter.exe

C:\HijackThis\HijackThis.exe

C:\WINDOWS\System32\wbem\wmiprvse.exe
 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://resultsmaster.com/SmartOffers/Services/resultsmaster/ResultsMasterHomeLeftPane.htm

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://easyfastredirect.com/1/?wmid=totosamzz

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\windows\system32\ntos.exe,

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: metaspinner media GmbH - {12FC9A49-CFE0-49AA-BE9E-8F4EEAFC9443} - C:\Programme\Yetisports\IEButtonYetiSportsEBayInterface.dll

O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Programme\NewDotNet\newdotnet3_88.dll

O2 - BHO: TVEngine Helper /fleok=1D8A83A5C2E6107C91A475760EA83FA5EF80752B94E2D77C5B75462937C1 - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - (no file)

O2 - BHO: Alcohol Toolbar Helper - {52D06F97-5511-43FA-8FDA-C481864FD26E} - C:\Programme\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll

O2 - BHO: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - (no file)

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll

O3 - Toolbar: Alcohol Toolbar - {4C4E7CDB-5BFC-4D74-83E2-8AE659B7EDA2} - C:\Programme\Alcohol Toolbar\v3.2.0.0\Alcohol_Toolbar.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll

O4 - HKLM\..\Run: [OmniPass] C:\Programme\Softex\OmniPass\scureapp.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [odb] C:\windows\odb.exe

O4 - HKLM\..\Run: [Iyivo] rundll32.exe "C:\windows\Jcelobogebuteb.dll",e

O4 - HKLM\..\Run: [UpdateWin] C:\windows\system32\activedsf.exe

O4 - HKLM\..\Run: [runsql] C:\windows\runsql.exe

O4 - HKLM\..\Run: [netzip] C:\windows\svzip.exe

O4 - HKLM\..\Run: [net64] C:\windows\svhoster.exe

O4 - HKLM\..\Run: [vlc] C:\windows\vlc.exe

O4 - HKLM\..\Run: [wdmon] C:\windows\wdmon.exe

O4 - HKLM\..\Run: [netx] C:\windows\svx.exe

O4 - HKLM\..\Run: [netw] C:\windows\svw.exe

O4 - HKLM\..\Run: [netc] C:\windows\svc.exe

O4 - HKLM\..\RunServices: [UpdateWin] C:\windows\system32\activedsf.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe

O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit

O4 - HKCU\..\Run: [EzAgent] C:\Programme\ASUS\ASUS FM Radio\ezagent.exe

O4 - HKCU\..\Run: [userinit] C:\windows\system32\ntos.exe

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll

O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_01\bin\npjpi150_01.dll

O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - e:\Programme\ICQ6\ICQ.exe

O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - e:\Programme\ICQ6\ICQ.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O10 - Hijacked Internet access by New.Net

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O10 - Hijacked Internet access by New.Net

O10 - Hijacked Internet access by New.Net

O10 - Hijacked Internet access by New.Net

O10 - Hijacked Internet access by New.Net

O12 - Plugin for .csm: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .csml: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .cub: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .cube: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .dx: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .emb: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .embl: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .gau: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .jdx: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .mol: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .mop: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .pdb: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .rxn: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .scr: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .skc: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .spt: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .tgf: C:\Programme\Internet Explorer\Plugins\npchime.dll

O12 - Plugin for .xyz: C:\Programme\Internet Explorer\Plugins\npchime.dll

O16 - DPF: {49E67060-2C0D-415E-94C7-52A49F73B2F1} (CPlayFirstPiratePoppersControl Object) - http://games.icq.com/online/online2/pirate_poppers/PiratePoppers.1.0.0.32.cab

O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://icq.oberon-media.com/online//online2/luxor/mjolauncher.cab

O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://arcade.icq.com/online/online2/chuzzle/popcaploader_v6.cab

O22 - SharedTaskScheduler: IPC Configuration Utility - IPC Configuration Utility - (no file)

O22 - SharedTaskScheduler: Windows Installer Class - {020487CC-FC04-4B1E-863F-D9801796230B} - C:\DOKUME~1\ADMINI~1\LOKALE~1\Temp\wndutl32.dll (file missing)

O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: C-DillaCdaC11BA - Macrovision - C:\windows\System32\drivers\CDAC11BA.EXE

O23 - Service: Google Update Service (gupdate1c98dd054007280) (gupdate1c98dd054007280) - Google Inc. - C:\Programme\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Macromedia Shared\Service\Macromedia Licensing.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe

O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Programme\Fingerprint Sensor\Softex\OmniPass\Omniserv.exe

O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Programme\Panda Software\Panda Antivirus Titanium\Pavsrv51.exe

O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe

O23 - Service: Virtual CD v4 Security service (VCDSecS) - H+H Software GmbH - C:\Programme\Virtual CD v4\System\vcdsecs.exe

O23 - Service: Veoh Client Service - Unknown owner - l:\Programme\Veoh\VeohClientService.exe (file missing)

O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
 

--

End of file - 10068 bytes

...Fortsetzung im zweiten Post, da zu lang...

...Fortsetzung...

Außerdem hab ich auch mit MalwareBytes einen Scan durchgeführt, die Logdatei hier:

Code:

Malwarebytes' Anti-Malware 1.34

Datenbank Version: 1749

Windows 5.1.2600 Service Pack 3
 

01.03.2009 14:52:49

mbam-log-2009-03-01 (14-52-40).txt
 

Scan-Methode: Vollständiger Scan (C:\|D:\|E:\|F:\|)

Durchsuchte Objekte: 629065

Laufzeit: 4 hour(s), 12 minute(s), 23 second(s)
 

Infizierte Speicherprozesse: 0

Infizierte Speichermodule: 0

Infizierte Registrierungsschlüssel: 69

Infizierte Registrierungswerte: 18

Infizierte Dateiobjekte der Registrierung: 14

Infizierte Verzeichnisse: 4

Infizierte Dateien: 69
 

Infizierte Speicherprozesse:

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule:

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel:

HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2 (Adware.PopCap) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/popcaploader.dll (Adware.PopCap) -> No action taken.

HKEY_CLASSES_ROOT\TypeLib\{c9c5deaf-0a1f-4660-8279-9edfad6fefe1} (Adware.PopCap) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{e4e3e0f8-cd30-4380-8ce9-b96904bdefca} (Adware.PopCap) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{fe8a736f-4124-4d9c-b4b1-3b12381efabe} (Adware.PopCap) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> No action taken.

HKEY_CLASSES_ROOT\popcaploader.popcaploaderctrl2.1 (Adware.PopCap) -> No action taken.

HKEY_CLASSES_ROOT\tvengine.bho (Spyware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\tvengine.bho.1 (Spyware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{175816a5-219e-4079-b2f9-53c501c409ba} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{1c1793e0-1034-4cac-837d-aa545f6961bf} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{27c4569f-8728-4958-a920-a607cae8153c} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{38370864-346f-4afa-8c4b-4fbff518c0bb} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{397a208b-3d09-4b3e-93e8-ca171886612e} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{421745e9-16df-4ee4-a758-d51f939c49cb} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{4331ec56-0aab-499e-8757-dd2ee44ad671} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{54286c3a-e044-4e65-bd44-528d6ae28a18} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{5d16197a-1eaa-45af-b29a-69f1aa055e87} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{5f2b9de7-f878-4762-8cfe-e9c58f082f0e} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{601a9784-1114-4089-9b3e-cbd70dafc6ad} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{8a61a950-c325-4f44-ba64-273180ff3464} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{8d5c4ec6-af8e-4b85-ba27-64babe410510} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{8e98faf8-794f-47f9-af90-15305564ed81} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{af15975b-1498-4740-8e6c-90af78e4198c} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{b53d4cd4-406d-43cc-8244-7893d72236dd} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{b671426c-5c1a-48ac-9652-bc9402b1c404} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{b9bb3219-f84c-4060-966b-4a1e73e24226} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{bc8c2e5f-d8b4-4997-bce3-8775c3707956} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{d082721f-4bd4-4b8b-bb82-06753ee6174f} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{d24f9d3c-5d4c-47f8-9ab7-632b44ad6a0d} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{f43ec88b-b6c8-4969-a763-e2bf55602cce} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{f786cb18-3809-4e49-bc99-9a66da47db8b} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{4b18dd50-c996-44fc-ac52-0fecff82ed58} (Spyware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{020487cc-fc04-4b1e-863f-d9801796230b} (Trojan.FakeAlert) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{0ab71193-ec19-4d70-85c2-e46e2ff02755} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{1e0004ec-5df0-48c7-a8f0-fbb0488a3d94} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{31a59636-0fa3-4a56-954d-db7ad02840d8} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{3fa917b9-df69-477f-9e4f-b60d929de79f} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{420c35c9-e4f2-49f9-bf67-2be1ecf86989} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{460ac4db-b0de-4626-a0f0-175dd84dcb9b} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{7e66936c-fea0-4984-ad26-7b6661ac5b2e} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{8c875948-9c60-4381-9248-0df180542d53} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{a14c0d8d-e753-4e73-9e2b-4070791d8940} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{c2baa4c9-ae1e-4605-ae2f-a1c49a30d881} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{ed8525ea-2bfc-4440-bd8a-20efb9d5e541} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{fa16bce1-5e36-472a-8466-e0cdd5ce00e6} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Typelib\{45397063-d7d0-47c2-9508-26487608a298} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Typelib\{4cf5a3c1-07a2-4336-9b54-6870452ebde1} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Typelib\{71e9cf40-af72-4b55-bd3f-1fea2a0eaea6} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Typelib\{71efe583-62fe-4419-9918-ca3b683f7b36} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Typelib\{793af621-5cd0-4b92-b765-6712f6aaf48e} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Typelib\{9967a873-40f3-4c7e-9239-6c8760f19f61} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Typelib\{9fe6e4aa-800c-46a6-943d-dd83d90c25f0} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Typelib\{b9f51d42-cca0-4408-bb02-d433d1865a3a} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\Typelib\{f8ee014f-b34c-4544-8e45-95a7971d323b} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\AppID\{0507fdde-f3b7-49f5-9e8f-c557e991f39b} (Adware.Hotbar) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4b18dd50-c996-44fc-ac52-0fecff82ed58} (Spyware.Hotbar) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{7e66936c-fea0-4984-ad26-7b6661ac5b2e} (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{4a2aacf3-adf6-11d5-98a9-00e018981b9e} (Adware.NewDotNet) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4a2aacf3-adf6-11d5-98a9-00e018981b9e} (Adware.NewDotNet) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/piratepoppers.1.0.0.32.dll (Adware.Agent) -> No action taken.

HKEY_CLASSES_ROOT\TypeLib\{38d97cce-7243-4b6e-b6a8-dd872ad3eb33} (Adware.Agent) -> No action taken.

HKEY_CLASSES_ROOT\Interface\{6868afe5-f258-47dc-bc37-0821f96dc1d2} (Adware.Agent) -> No action taken.

HKEY_CLASSES_ROOT\CLSID\{49e67060-2c0d-415e-94c7-52a49f73b2f1} (Adware.Agent) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{49e67060-2c0d-415e-94c7-52a49f73b2f1} (Adware.Agent) -> No action taken.

HKEY_CLASSES_ROOT\AppID\WeatherOnTray.EXE (Adware.Hotbar) -> No action taken.

HKEY_CLASSES_ROOT\wallpaper.wallpapermanager (Adware.Zango) -> No action taken.

HKEY_CLASSES_ROOT\wallpaper.wallpapermanager.1 (Adware.Zango) -> No action taken.
 

Infizierte Registrierungswerte:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\Downloaded Program Files\popcaploader.dll (Adware.PopCap) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{020487cc-fc04-4b1e-863f-d9801796230b} (Trojan.FakeAlert) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.32.dll (Adware.Agent) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\netc (Trojan.Agent) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\net64 (Trojan.Agent) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\UpdateWin (Backdoor.Bot) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\netx (Trojan.FakeAlert) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\vlc (Trojan.FakeAlert) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wdmon (Trojan.FakeAlert) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\runsql (Trojan.FakeAlert) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\netzip (Trojan.FakeAlert) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\netw (Trojan.FakeAlert) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\UpdateWin (Worm.Sdbot) -> No action taken.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\UpdateWin (Worm.Sdbot) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\UID (Malware.Trace) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\odb (Trojan.FakeAlert) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\userinit (Backdoor.Bot) -> No action taken.

HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\userinit (Backdoor.Bot) -> No action taken.
 

Infizierte Dateiobjekte der Registrierung:

HKEY_CLASSES_ROOT\scrfile\shell\open\command\ (Broken.OpenCommand) -> Bad: ("C:\Programme\Internet Explorer\Iexplore.exe" %1) Good: ("%1" /S) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Backdoor.Bot) -> Data: c:\windows\system32\ntos.exe -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Backdoor.Bot) -> Data: system32\ntos.exe -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.UserInit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\windows\system32\ntos.exe,) Good: (userinit.exe) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\activedesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.
 

Infizierte Verzeichnisse:

C:\WINDOWS\system32\wsnpoem (Trojan.Agent) -> No action taken.

C:\Programme\Hotbar (Adware.Hotbar) -> No action taken.

C:\Programme\Save (Adware.WhenUSave) -> No action taken.

C:\Programme\NewDotNet (Adware.NewDotNet) -> No action taken.
 

Infizierte Dateien:

C:\WINDOWS\Downloaded Program Files\popcaploader.dll (Adware.PopCap) -> No action taken.

C:\WINDOWS\system32\wsnpoem\audio.dll (Trojan.Agent) -> No action taken.

C:\WINDOWS\system32\wsnpoem\video.dll (Trojan.Agent) -> No action taken.

C:\Programme\Save\D000000.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\D10.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\D11.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\D111.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\D12.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\D4.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\D5.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\D6.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\D7.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\D8.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\D9.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\DamNeusten.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\Daniel!!!.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\Daniel.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\Daniel2.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\Daniel3.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\Danielendlos1.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\dneu.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\Save\dneuneuneu.000 (Adware.WhenUSave) -> No action taken.

C:\Programme\NewDotNet\newdotnet3_88-1.dll (Adware.NewDotNet) -> No action taken.

C:\Programme\NewDotNet\newdotnet3_88-2.dll (Adware.NewDotNet) -> No action taken.

C:\Programme\NewDotNet\newdotnet3_88-3.dll (Adware.NewDotNet) -> No action taken.

C:\Programme\NewDotNet\newdotnet3_88-4.dll (Adware.NewDotNet) -> No action taken.

C:\Programme\NewDotNet\newdotnet3_88-5.dll (Adware.NewDotNet) -> No action taken.

C:\Programme\NewDotNet\newdotnet3_88-6.dll (Adware.NewDotNet) -> No action taken.

C:\Programme\NewDotNet\newdotnet3_88.dll (Adware.NewDotNet) -> No action taken.

C:\Programme\NewDotNet\readme.txt (Adware.NewDotNet) -> No action taken.

C:\Programme\NewDotNet\uninstall3_88.exe (Adware.NewDotNet) -> No action taken.

C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.32.dll (Adware.Agent) -> No action taken.

C:\WINDOWS\Downloaded Program Files\PiratePoppers.1.0.0.32.inf (Adware.Agent) -> No action taken.

C:\WINDOWS\svc.exe (Trojan.Agent) -> No action taken.

C:\WINDOWS\svhoster.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\5_odb.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\6_ldr.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\60325cahp25ca0.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\60325cahp25caa.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\q1.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\q2.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\q3.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\q4.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\q5.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\q6.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\q7.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\q8.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\q9.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\teste1_p.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\teste2_p.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\teste4_p.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\avto.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\avto1.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\avto2.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\avto3.exe (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\avto4.exe (Trojan.Agent) -> No action taken.

C:\WINDOWS\system32\activedsf.exe (Backdoor.Bot) -> No action taken.

C:\WINDOWS\svx.exe (Trojan.FakeAlert) -> No action taken.

C:\WINDOWS\vlc.exe (Trojan.FakeAlert) -> No action taken.

C:\WINDOWS\wdmon.exe (Trojan.FakeAlert) -> No action taken.

C:\WINDOWS\runsql.exe (Trojan.FakeAlert) -> No action taken.

C:\WINDOWS\svzip.exe (Trojan.FakeAlert) -> No action taken.

C:\WINDOWS\svw.exe (Trojan.FakeAlert) -> No action taken.

C:\WINDOWS\system32\h@tkeysh@@k.dll (Trojan.Agent) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Lokale Einstellungen\Temp\wndutl32.dll (Trojan.FakeAlert) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Anwendungsdaten\config.cfg (Malware.Trace) -> No action taken.

C:\Dokumente und Einstellungen\Daniel\Anwendungsdaten\~tmp.html (Malware.Trace) -> No action taken.

C:\WINDOWS\odb.exe (Trojan.FakeAlert) -> No action taken.

C:\WINDOWS\system32\ntos.exe (Backdoor.Bot) -> No action taken.

Wäre toll, wenn mir jemand sagen könnte, wo mein Problem liegt und wie ich es eventuell lösen kann.

Liebe Grüße und vielen Dank im Voraus!
Daniel