> Hallo
> Dann solltest Du den Inhalt des erstellten Logfiles auch in Deinem
> nächsten Beitrag mit reinsetzen.
> Heiko


Ok, das mach ich jetzt mal. Bin gespannt, was folgt!!
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:11:15, on 26.01.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\\WINDOWS\\System32\\smss.exe
C:\\WINDOWS\\system32\\winlogon.exe
C:\\WINDOWS\\system32\\services.exe
C:\\WINDOWS\\system32\\lsass.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\Programme\\Lavasoft\\Ad-Aware 2007\\AAWTray.exe
C:\\Programme\\Gemeinsame Dateien\\EPSON\\EBAPI\\eEBSVC.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\Programme\\Gemeinsame Dateien\\Apple\\Mobile Device Support\\AppleMobileDeviceService.exe
C:\\Programme\\Bonjour\\mDNSResponder.exe
C:\\Programme\\Java\\jre6\\bin\\jqs.exe
C:\\Programme\\Gemeinsame Dateien\\Microsoft Shared\\VS7DEBUG\\MDM.EXE
C:\\Programme\\Gemeinsame Dateien\\Marmiko Shared\\MZCCntrl.exe
c:\\Programme\\Gemeinsame Dateien\\Protexis\\License Service\\PsiService_2.exe
C:\\Programme\\RSA Security\\RSA Authenticator Utility\\RsaP11Svc.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\system32\\wbem\\wmiapsrv.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\Programme\\RSA Security\\RSA Authenticator Utility\\NTNotify.exe
C:\\WINDOWS\\Explorer.EXE
C:\\Programme\\Kaspersky Lab\\Kaspersky Internet Security 2011\\avp.exe
C:\\Programme\\Gemeinsame Dateien\\Java\\Java Update\\jusched.exe
C:\\Programme\\Mindjet\\MindManager 8\\MMReminderService.exe
C:\\Programme\\Kaspersky Lab\\Kaspersky Internet Security 2011\\avp.exe
C:\\Programme\\Adobe\\Photoshop Album Starter Edition\\3.2\\Apps\\apdproxy.exe
C:\\Programme\\ScanSoft\\OmniPageSE2.0\\OpwareSE2.exe
C:\\WINDOWS\\system32\\igfxpers.exe
C:\\WINDOWS\\system32\\hkcmd.exe
C:\\WINDOWS\\system32\\igfxtray.exe
C:\\WINDOWS\\RTHDCPL.EXE
C:\\Programme\\T-Online\\T-Online_Software_6\\Basis-Software\\Basis1\\ToADiMon.exe
C:\\Programme\\iTunes\\iTunesHelper.exe
C:\\Programme\\DivX\\DivX Update\\DivXUpdate.exe
C:\\Programme\\DivX\\DivX Plus Web Player\\DDmService.exe
C:\\Programme\\Ascentive\\PC SpeedScan Pro\\PCSpeedScan.exe
C:\\Programme\\T-Online\\WLAN-Access Finder\\ToWLaAcF.exe
C:\\COOLSP~1\\PERSON~1\\PID.EXE
C:\\WINDOWS\\system32\\ctfmon.exe
C:\\Programme\\Gemeinsame Dateien\\Marmiko Shared\\MWLaMaS.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\Programme\\Radio Lechtal Player\\ixPlayer.exe
C:\\Programme\\Sony Ericsson\\Mobile\\audevicemgr.exe
C:\\Programme\\T-Online\\T-Online_Software_6\\Info-Cockpit\\INFOCOCKPIT.EXE
C:\\Programme\\OpenOffice.org 3\\program\\soffice.exe
C:\\PROGRA~1\\SONYER~1\\Mobile\\CONNEC~1\\CONNMN~1.EXE
C:\\Programme\\OpenOffice.org 3\\program\\soffice.bin
c:\\Programme\\Intuwave Ltd\\Shared\\mRouterRunTime\\mRouterRuntime.exe
C:\\Programme\\iPod\\bin\\iPodService.exe
C:\\PROGRA~1\\T-Online\\T-ONLI~1\\BASIS-~1\\Basis2\\PROFIL~1.EXE
C:\\Programme\\T-Online\\T-Online_Software_6\\Basis-Software\\Basis2\\kernel.exe
C:\\Programme\\T-Online\\T-Online_Software_6\\Basis-Software\\Basis2\\sc_watch.exe
C:\\PROGRA~1\\T-Online\\T-ONLI~1\\Notifier\\Notifier.exe
C:\\Programme\\Gemeinsame Dateien\\Marmiko Shared\\MInfraIS\\MInfraIS.exe
C:\\WINDOWS\\system32\\wisptis.exe
C:\\WINDOWS\\system32\\spoolsv.exe
C:\\Programme\\Adobe\\Acrobat 6.0\\Distillr\\acrotray.exe
C:\\PROGRAMME\\T-ONLINE\\T-ONLINE_SOFTWARE_6\\BROWSER\\BROWSER.EXE
C:\\Programme\\Mozilla Firefox\\firefox.exe
C:\\Programme\\Kaspersky Lab\\Kaspersky Internet Security 2011\\klwtblfs.exe
C:\\Programme\\Mozilla Firefox\\plugin-container.exe
C:\\Windows\\system32\\spider.exe
C:\\WINDOWS\\system32\\msiexec.exe
C:\\Programme\\Trend Micro\\HiJackThis\\HiJackThis.exe

R1 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Search,SearchAssistant =
R0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Search,CustomizeSearch =
R1 - HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings,ProxyOverride = *.local
F2 - REG:system.ini: UserInit=C:\\WINDOWS\\system32\\userinit.exe,C:\\Programme\\RSA Security\\RSA Authenticator Utility\\NTNotify.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Programme\\Adobe\\Acrobat 6.0\\Acrobat\\ActiveX\\AcroIEHelper.dll
O2 - BHO: metaspinner media GmbH - {12FC9A49-CFE0-49AA-BE9E-8F4EEAFC9443} - C:\\PROGRA~1\\klickTel\\EBAYST~1\\IEBUTT~2.DLL
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\\Programme\\Gemeinsame Dateien\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\\Programme\\DivX\\DivX Plus Web Player\\npdivx32.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\\Programme\\Kaspersky Lab\\Kaspersky Internet Security 2011\\ievkbd.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\\Programme\\DivX\\DivX Plus Web Player\\npdivx32.dll
O2 - BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\\Programme\\Mindjet\\MindManager 8\\Mm8InternetExplorer.dll
O2 - BHO: metaspinner media GmbH - {74A0AC27-3753-4080-B94E-557CC43E9E8B} - C:\\PROGRA~1\\klickTel\\KLICKT~2\\IEBUTT~2.DLL
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\\Programme\\Adobe\\Acrobat 6.0\\Acrobat\\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\\Programme\\Java\\jre6\\bin\\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\\Programme\\Kaspersky Lab\\Kaspersky Internet Security 2011\\klwtbbho.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\\Programme\\Java\\jre6\\lib\\deploy\\jqs\\ie\\jqs_plugin.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\\Programme\\Canon\\Easy-WebPrint\\Toolband.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\\Programme\\Adobe\\Acrobat 6.0\\Acrobat\\AcroIEFavClient.dll
O3 - Toolbar: enlfxgw - {959BA9FF-BE80-4A4A-8BB7-7650FD5155A2} - C:\\WINDOWS\\enlfxgw.dll (file missing)
O4 - HKLM\\..\\Run: [AVP] \"C:\\Programme\\Kaspersky Lab\\Kaspersky Internet Security 2011\\avp.exe\"
O4 - HKLM\\..\\Run: [SunJavaUpdateSched] \"C:\\Programme\\Gemeinsame Dateien\\Java\\Java Update\\jusched.exe\"
O4 - HKLM\\..\\Run: [MMReminderService] C:\\Programme\\Mindjet\\MindManager 8\\MMReminderService.exe
O4 - HKLM\\..\\Run: [Synchronization Manager] %SystemRoot%\\system32\\mobsync.exe /logon
O4 - HKLM\\..\\Run: [QuickTime Task] \"C:\\Programme\\QuickTime\\qttask.exe\" -atboottime
O4 - HKLM\\..\\Run: [Adobe Photo Downloader] \"C:\\Programme\\Adobe\\Photoshop Album Starter Edition\\3.2\\Apps\\apdproxy.exe\"
O4 - HKLM\\..\\Run: [Easy-PrintToolBox] C:\\Programme\\Canon\\Easy-PrintToolBox\\BJPSMAIN.EXE /logon
O4 - HKLM\\..\\Run: [OpwareSE2] \"C:\\Programme\\ScanSoft\\OmniPageSE2.0\\OpwareSE2.exe\"
O4 - HKLM\\..\\Run: [igfxpers] C:\\WINDOWS\\system32\\igfxpers.exe
O4 - HKLM\\..\\Run: [igfxhkcmd] C:\\WINDOWS\\system32\\hkcmd.exe
O4 - HKLM\\..\\Run: [igfxtray] C:\\WINDOWS\\system32\\igfxtray.exe
O4 - HKLM\\..\\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\\..\\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\\..\\Run: [Adobe Reader Speed Launcher] \"C:\\Programme\\Adobe\\Reader 10.0\\Reader\\Reader_sl.exe\"
O4 - HKLM\\..\\Run: [Adobe ARM] \"C:\\Programme\\Gemeinsame Dateien\\Adobe\\ARM\\1.0\\AdobeARM.exe\"
O4 - HKLM\\..\\Run: [QuickFinder Scheduler] \"c:\\Programme\\Corel\\WordPerfect Office X5\\Programs\\QFSCHD150.EXE\"
O4 - HKLM\\..\\Run: [ToADiMon.exe] C:\\Programme\\T-Online\\T-Online_Software_6\\Basis-Software\\Basis1\\ToADiMon.exe -TOnlineAutodialStart
O4 - HKLM\\..\\Run: [iTunesHelper] \"C:\\Programme\\iTunes\\iTunesHelper.exe\"
O4 - HKLM\\..\\Run: [DivXUpdate] \"C:\\Programme\\DivX\\DivX Update\\DivXUpdate.exe\" /CHECKNOW
O4 - HKLM\\..\\Run: [DivX Download Manager] \"C:\\Programme\\DivX\\DivX Plus Web Player\\DDmService.exe\" start
O4 - HKCU\\..\\Run: [PC SpeedScan Pro] C:\\Programme\\Ascentive\\PC SpeedScan Pro\\PCSpeedScan.exe -m
O4 - HKCU\\..\\Run: [Performance Center] C:\\Programme\\Ascentive\\Performance Center\\ApcMain.exe -m
O4 - HKCU\\..\\Run: [T-Online_Software_6\\WLAN-Access Finder] C:\\Programme\\T-Online\\WLAN-Access Finder\\ToWLaAcF.exe /StartMinimized
O4 - HKCU\\..\\Run: [Personal ID] C:\\COOLSP~1\\PERSON~1\\PID.EXE
O4 - HKCU\\..\\Run: [InfoCockpit] C:\\Programme\\T-Online\\T-Online_Software_6\\Info-Cockpit\\IC_START.EXE /nosplash
O4 - HKCU\\..\\Run: [ctfmon.exe] C:\\WINDOWS\\system32\\ctfmon.exe
O4 - HKUS\\S-1-5-19\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'LOKALER DIENST\')
O4 - HKUS\\S-1-5-19\\..\\Run: [InfoCockpit] C:\\Programme\\T-Online\\T-Online_Software_6\\Info-Cockpit\\IC_START.EXE /nosplash (User \'LOKALER DIENST\')
O4 - HKUS\\S-1-5-20\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'NETZWERKDIENST\')
O4 - HKUS\\S-1-5-18\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'SYSTEM\')
O4 - HKUS\\.DEFAULT\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'Default user\')
O4 - Startup: OpenOffice.org 3.2.lnk = C:\\Programme\\OpenOffice.org 3\\program\\quickstart.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\\Programme\\Adobe\\Acrobat 6.0\\Distillr\\acrotray.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\\Windows\\system32\\spool\\drivers\\w32x86\\3\\E_SRCV03.EXE
O4 - Global Startup: Telefonverbindungsmonitor.lnk = C:\\Programme\\Sony Ericsson\\Mobile\\audevicemgr.exe
O8 - Extra context menu item: Copy to &Lightning Note - C:\\Programme\\Corel\\WordPerfect Lightning\\Programs\\WPLightningCopyToNote.hta
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\\Programme\\Kaspersky Lab\\Kaspersky Internet Security 2011\\ie_banner_deny.htm
O8 - Extra context menu item: Open with WordPerfect - c:\\Programme\\Corel\\WordPerfect Office X5\\Programs\\WPLauncher.hta
O9 - Extra button: An Mindjet MindManager senden - {2F72393D-2472-4F82-B600-ED77F354B7FF} - C:\\Programme\\Mindjet\\MindManager 8\\Mm8InternetExplorer.dll
O9 - Extra button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\\Programme\\Kaspersky Lab\\Kaspersky Internet Security 2011\\klwtbbho.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\\PROGRA~1\\MICROS~2\\OFFICE11\\REFIEBAR.DLL
O9 - Extra button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\\Programme\\Kaspersky Lab\\Kaspersky Internet Security 2011\\klwtbbho.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe
O9 - Extra \'Tools\' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Programme\\Messenger\\msmsgs.exe
O9 - Extra \'Tools\' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Programme\\Messenger\\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1162468014625
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.lokalisten.de/iup/ImageUploader4.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://87.245.83.189/activex/AMC.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\\System\\CCS\\Services\\Tcpip\\..\\{A16B324C-AC86-4E63-902C-F432A66BC069}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\\System\\CS1\\Services\\Tcpip\\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\\System\\CS2\\Services\\Tcpip\\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\\System\\CCS\\Services\\Tcpip\\Parameters: NameServer = 208.67.220.220,208.67.222.222
O20 - AppInit_DLLs: C:\\PROGRA~1\\KASPER~1\\KASPER~2\\mzvkbd3.dll,C:\\PROGRA~1\\KASPER~1\\KASPER~2\\kloehk.dll
O20 - Winlogon Notify: 3gProp - C:\\Programme\\RSA Security\\RSA Authenticator Utility\\3gProp.dll
O20 - Winlogon Notify: NotifyP11Svc - C:\\Programme\\RSA Security\\RSA Authenticator Utility\\NotifyP11Svc.dll
O20 - Winlogon Notify: SOMCredMgr - C:\\Programme\\RSA Security\\RSA Authenticator Utility\\CredMgr.dll
O21 - SSODL: apdqnxp - {40E95D64-03A2-4E31-A26C-977EDBEA0342} - C:\\WINDOWS\\apdqnxp.dll (file missing)
O21 - SSODL: btrklfr - {F5729358-E2C4-4F32-BD75-E378DC9D99C7} - C:\\WINDOWS\\btrklfr.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\\WINDOWS\\system32\\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\\WINDOWS\\system32\\browseui.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\\Programme\\Lavasoft\\Ad-Aware 2007\\aawservice.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\\Programme\\Gemeinsame Dateien\\Apple\\Mobile Device Support\\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus Service (avp) - Kaspersky Lab ZAO - C:\\Programme\\Kaspersky Lab\\Kaspersky Internet Security 2011\\avp.exe
O23 - Service: Dienst \"Bonjour\" (Bonjour Service) - Apple Inc. - C:\\Programme\\Bonjour\\mDNSResponder.exe
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\\Programme\\Gemeinsame Dateien\\EPSON\\EBAPI\\eEBSVC.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\\Programme\\Gemeinsame Dateien\\Macrovision Shared\\FLEXnet Publisher\\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c9aba2cf741434) (gupdate1c9aba2cf741434) - Google Inc. - C:\\Programme\\Google\\Update\\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\\Programme\\Gemeinsame Dateien\\InstallShield\\Driver\\1050\\Intel 32\\IDriverT.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\\Programme\\iPod\\bin\\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\\Programme\\Java\\jre6\\bin\\jqs.exe
O23 - Service: T-Online WLAN Adapter Steuerungsdienst (MZCCntrl) - Deutsche Telekom AG, Marmiko IT-Solutions GmbH - C:\\Programme\\Gemeinsame Dateien\\Marmiko Shared\\MZCCntrl.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\\Programme\\Gemeinsame Dateien\\Protexis\\License Service\\PsiService_2.exe
O23 - Service: RSA Authenticator Utility 1.0 P11 Service (RsaP11Svc) - RSA Security Inc - C:\\Programme\\RSA Security\\RSA Authenticator Utility\\RsaP11Svc.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOKUME~1/Gelbke/LOKALE~1/Temp/msohtml1/01/clip_image002.jpg
O24 - Desktop Component 1: (no name) - file:///C:/DOKUME~1/Gelbke/LOKALE~1/Temp/msohtml1/01/clip_image002.gif

--
End of file - 15226 bytes