Trojaner-Board - 2 Trojaner eingefangen

Hallo !

Ich habe mir heute 2 Trojaner eingefangen und Kaspersky kann die nicht löschen.
Die beiden Trojaner heißen wie folgt
Bakdoor.Win32.Ciadoor.bbk
Bakdoor.Win32.Shark.ebm

Ich poste hier auch die Logs von HighJack

Vielleicht könnt Ihr es euch ja man ansehen

Gruß
Copykill
Code:
Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 14:51:23, on 2008/10/09

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal
 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Programme\Intel\Wireless\Bin\EvtEng.exe

C:\Programme\Intel\Wireless\Bin\S24EvMon.exe

C:\Programme\Intel\Wireless\Bin\WLKeeper.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\ehome\ehtray.exe

C:\WINDOWS\eHome\ehSched.exe

C:\Programme\Intel\Wireless\bin\ZCfgSvc.exe

C:\Programme\NDAS\System\ndassvc.exe

C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe

C:\Programme\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\stsystra.exe

C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe

C:\Programme\Dell\QuickSet\NICCONFIGSVC.exe

C:\Programme\Dell\QuickSet\Quickset.exe

C:\Programme\Intel\Wireless\Bin\RegSrvc.exe

C:\Programme\Java\jre1.6.0_07\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\dllhost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\eHome\ehmsas.exe

C:\Programme\Intel\Wireless\Bin\Dot1XCfg.exe

C:\Programme\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Dokumente und Einstellungen\RE\Desktop\Download\HiJackThis.exe
 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
 

h**p://www.wallstreet-online.de/

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet 
 

Settings,ProxyOverride = *.local

O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - 
 

C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: GetRight IE Download Helper - 
 

{31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Programme\GetRight\xx2gr.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - 
 

C:\Programme\Java\jre1.6.0_07\bin\ssv.dll

O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe

O4 - HKLM\..\Run: [IntelZeroConfig] 
 

"C:\Programme\Intel\Wireless\bin\ZCfgSvc.exe"

O4 - HKLM\..\Run: [IntelWireless] 
 

"C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless

O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe

O4 - HKLM\..\Run: [AVP] "C:\Programme\Kaspersky Lab\Kaspersky Internet 
 

Security 7.0\avp.exe"

O4 - HKLM\..\Run: [Dell QuickSet] C:\Programme\Dell\QuickSet\Quickset.exe

O4 - HKLM\..\Run: [SunJavaUpdateSched] 
 

"C:\Programme\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 
 

'LOKALER DIENST')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 
 

'NETZWERKDIENST')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 
 

'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 
 

'Default user')

O8 - Extra context menu item: Download with GetRight Pro - 
 

C:\Programme\GetRight\GRdownload.htm

O8 - Extra context menu item: Hinzufügen zu Kaspersky Anti-Banner - 
 

C:\Programme\Kaspersky Lab\Kaspersky Internet Security 
 

7.0\ie_banner_deny.htm

O8 - Extra context menu item: Nach Microsoft &Excel exportieren - 
 

res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: Nach Microsoft E&xel exportieren - 
 

res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Open with GetRight Pro Browser - 
 

C:\Programme\GetRight\GRbrowse.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - 
 

C:\Programme\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Konsole - 
 

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - 
 

C:\Programme\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra button: Statistik für Web-Anti-Virus - 
 

{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programme\Kaspersky 
 

Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll

O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - 
 

C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - 
 

C:\Programme\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - 
 

{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - 
 

h**p://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wu
 

web_site.cab?1195837370406

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 
 

1.6.0) - h**p://javadl.sun.com/webapps/download/AutoDL?BundleId=23100

O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - 
 

C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - 
 

C:\Programme\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe

O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel 
 

Corporation - C:\Programme\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: NDAS Service (ndassvc) - XIMETA, Inc. - 
 

C:\Programme\NDAS\System\ndassvc.exe

O23 - Service: NICCONFIGSVC - Dell Inc. - 
 

C:\Programme\Dell\QuickSet\NICCONFIGSVC.exe

O23 - Service: NMIndexingService - Nero AG - C:\Programme\Gemeinsame 
 

Dateien\Ahead\Lib\NMIndexingService.exe

O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel 
 

Corporation - C:\Programme\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel 
 

Corporation  - C:\Programme\Intel\Wireless\Bin\S24EvMon.exe

O23 - Service: UPnPService - Magix AG - C:\Programme\Gemeinsame 
 

Dateien\MAGIX Shared\UPnPService\UPnPService.exe

O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) 
 

Corporation - C:\Programme\Intel\Wireless\Bin\WLKeeper.exe
 

--

End of file - 6383 bytes