Trojaner-Board - Trojan.Flush.M lässt sich nicht entfernen

Hi, ich hat ne Datei heruntergeladen, die enthielt wohl den Virus. Nach einem Neustart kahm ich nicht mehr ins Internet und meine Norten Firewall war nicht mehr startbar. Heute ging das Internet komischerweise wieder und ich habe eine Norten Scan durchgeführt.Norten fand den benannten Virus und leitete mich auf eine Internet Seite mit deren Hilfe ich den Virus von Hand entfernen sollte, leider waren die Anweisungen auf Englisch und ich habe es nicht hinbekommen die entsprechenden Einträge in der Regedit zu löschen.
Ich habe zudem A-Squared-free und CCleaner durchgefüht. Ein Malware Scan konnte ich nicht durchführen, da das Programm nicht starten wollte.

Code:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 15:16:09, on 24.04.2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Boot mode: Normal
 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programme\Symantec\LiveUpdate\AluSchedulerSvc.exe

C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe

C:\Programme\Norton Internet Security\Norton Internet Security\Engine\16.5.0.135\ccSvcHst.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\System32\svchost.exe

C:\Programme\PGWARE\SuperRam\SuperRamService.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\Programme\Norton Internet Security\Norton Internet Security\Engine\16.5.0.135\ccSvcHst.exe

C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programme\Internet Explorer\iexplore.exe

I:\Anwendung\HiJackThis.exe

C:\WINDOWS\system32\SearchProtocolHost.exe
 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = h^^p://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Programme\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Programme\Norton Internet Security\Norton Internet Security\Engine\16.5.0.135\coIEPlg.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Programme\Norton Internet Security\Norton Internet Security\Engine\16.5.0.135\IPSBHO.DLL

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll

O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Programme\Norton Internet Security\Norton Internet Security\Engine\16.5.0.135\coIEPlg.dll

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd

O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe

O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe

O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlsr.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1236951582046

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1239383569046

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-windows-i586-jc.cab

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.187,85.255.112.208

O17 - HKLM\System\CS7\Services\Tcpip\Parameters: NameServer = 85.255.112.187,85.255.112.208

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.187,85.255.112.208

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL

O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Programme\Norton Internet Security\Norton Internet Security\Engine\16.5.0.135\coIEPlg.dll

O20 - Winlogon Notify: !SASWinLogon - C:\Programme\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: Automatisches LiveUpdate - Scheduler (Automatic LiveUpdate Scheduler) - Symantec Corporation - C:\Programme\Symantec\LiveUpdate\AluSchedulerSvc.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\Programme\Symantec\LiveUpdate\LuComServer_3_4.EXE

O23 - Service: Norton Internet Security - Symantec Corporation - C:\Programme\Norton Internet Security\Norton Internet Security\Engine\16.5.0.135\ccSvcHst.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Programme\Spyware Doctor\pctsAuxs.exe

O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Programme\Spyware Doctor\pctsSvc.exe

O23 - Service: SuperRam Memory Service (SuperRam) - PGWARE LLC - C:\Programme\PGWARE\SuperRam\SuperRamService.exe

O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\GEMEIN~1\SYMANT~1\CCPD-LC\symlcsvc.exe
 

--

End of file - 6423 bytes

Uninstal Log:

Code:

 Sansa Media Converter

Acronis Disk Director Suite

Acronis True Image Home

Ad-Aware 2007

Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Adobe Reader 8.1.2 - Deutsch

Adobe Shockwave Player 11.5

Anti-Twin (Installation 19.07.2008)

AquaSoft DiaShow XP five

a-squared Free 3.0

ATI - Software Uninstall Utility

ATI Display Driver

Audible Download Manager

Audiograbber 1.83 SE 

AVG Anti-Spyware 7.5

CamStudio

CBL Daten-Shredder

CCleaner (remove only)

C-Media WDM Audio Driver

Counter-Strike: Source

devolo dLAN-Konfigurationsassistent

devolo EasyClean

devolo EasyShare

devolo Informer

Diashow pro

Die Sims 2

Digital Video Repair 1.0

DivX Codec

DivX Converter

DivX Player

DivX Plus DirectShow Filters

DivX Web Player

Easy Video Converter 7.0.1

EasyRecovery DataRecovery Trial

Eraser

Eraser

EVEREST Home Edition v2.20

Free Games Offer, Desktop Shortcut

Full Spectrum Warrior

Funktion

GetDataBack for FAT

GetDataBack for NTFS

Google Earth

Google Toolbar for Internet Explorer

Google Toolbar for Internet Explorer

GTA San Andreas

GyroMeter

HijackThis 2.0.2

Hotfix for Microsoft .NET Framework 3.0 (KB932471)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

HP Foto- und Bildbearbeitung 2.0 - All-in-One

HP Foto und Bildbearbeitung 2.0 - hp psc 1100 series

HP Foto- und Bildbearbeitung 2.0 All-in-One Treiber 

hp psc 1100 series

HP Speicher-Disc

HyperCam 2

ICQ6

ImTOO 3GP Video Converter

Java(TM) 6 Update 3

LimeWire 4.12.11

LiveUpdate (Symantec Corporation)

LiveUpdate (Symantec Corporation)

Logitech Gaming Software

Logitech SetPoint

Lycos WLAN Manager

Lycos WLAN Sniffer

Malwarebytes' Anti-Malware

Media Library Management Wizard

Media Player Codec Pack 3.2.0

MediaCoder 0.6.2

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 German Language Pack

Microsoft .NET Framework 1.1 Hotfix (KB928366)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU

Microsoft .NET Framework 3.0 German Language Pack

Microsoft .NET Framework 3.0 German Language Pack

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU

Microsoft .NET Framework 3.5 Language Pack SP1 - deu

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 3.5 SP1

Microsoft Compression Client Pack 1.0 for Windows XP

Microsoft Internationalized Domain Names Mitigation APIs

Microsoft National Language Support Downlevel APIs

Microsoft Office XP Standard

Microsoft Silverlight

Microsoft User-Mode Driver Framework Feature Pack 1.0

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2005 Redistributable

Moleskinsoft Clone Remover 3.0.1

Moorhuhn 4 Teile

Movie Maker Background Music Files

Movie Maker Sound Effects

Movie Maker Title Images

Mozilla Firefox (3.0.7)

MP3Find pro v4.49

MSXML 4.0 SP2 (KB954430)

MSXML 6.0 Parser (KB933579)

Need for Speed™ Undercover

Nero 7 Essentials

Norton Internet Security

O&O DiskRecovery

PC Inspector File Recovery

PC Inspector smart recovery

Personal License Update Wizard for Windows Media Player

Plus! MP3 Audio Converter LE

PokerStars.net

PowerQuest PartitionMagic 7.0 Demo

RealPlayer

Recover Data for FAT & NTFS (Trial Version)

RivaTuner v2.0 Final Release

S.T.A.L.K.E.R. - Clear Sky [v1.0007]

Sicherheitsupdate für Windows Internet Explorer 7 (KB938127)

Sicherheitsupdate für Windows Internet Explorer 7 (KB942615)

Sicherheitsupdate für Windows Internet Explorer 7 (KB956390)

Sicherheitsupdate für Windows Internet Explorer 7 (KB961260)

Sicherheitsupdate für Windows XP (KB923789)

SimonTools XP-Tuner 2004

SiS 900 PCI Fast Ethernet Adapter Driver

Skype™ 4.0

Spybot - Search & Destroy

Spybot - Search & Destroy 1.5.2.20

Spyware Doctor 6.0

Steam(TM)

SUPERAntiSpyware Free Edition

SuperRam

Surfino Newsreader v 2.2.sv

TeamSpeak 2 RC2

TIPP10 Version 2.0.1

Tunatic

VC80CRTRedist - 8.0.50727.762

Video Fixer 3.23

VLC media player 0.9.8a

WC3Banlist

Windows Imaging Component

Windows Live Messenger

Windows Media Bonus Pack for Windows XP

Windows Media Format 11 runtime

Windows Media Format 11 runtime

Windows Media Player 11

Windows Media Player 11

Windows Media Player Playlist Import to Excel Wizard

Windows Media Player Skin Importer

Windows Media Player Tray Control

Windows Presentation Foundation

Windows Presentation Foundation Language Pack (DEU)

Windows XP Service Pack 3

WinPcap 4.0.2

WinRAR Archivierer

World of Warcraft

Xilisoft Video Converter Ultimate

XML Paper Specification Shared Components Language Pack 1.0