Hi Leute!
hab folgendes problem: Es öffnet sich automatisch alle 2-3min ein Internet explorer Fenster mit http:/// unten steht dann Server nicht gefunden!! Was kann tun damit dies aufhört! Hab es satt jedesmal wenn ich an meinen PC komme 50 fenster zu schliessen!!!

Hab ein log von Hijackthis und Dllcompare gemacht:
Ich hoffe mir kann jemand helfen! Vielen dank im vorraus!!

* DLLCompare Log version(1.0.0.127)
Files Found that Windows does not See or cannot Access
*Not everything listed here means you are infected!
________________________________________________

C:\WINDOWS\SYSTEM32\mfc42.dll Thu 6 Jan 2005 6:00:00 ..SH. 1.028.096 1004,00 K
C:\WINDOWS\SYSTEM32\msvcirt.dll Thu 6 Jan 2005 6:00:00 ..SH. 54.784 53,50 K
C:\WINDOWS\SYSTEM32\msvcp60.dll Thu 6 Jan 2005 6:00:00 ..SH. 413.696 404,00 K
C:\WINDOWS\SYSTEM32\msvcrt.dll Thu 6 Jan 2005 6:00:00 ..SH. 343.040 335,00 K
C:\WINDOWS\SYSTEM32\oleaut32.dll Thu 6 Jan 2005 6:00:00 ..SH. 553.472 540,50 K
C:\WINDOWS\SYSTEM32\olepro32.dll Thu 6 Jan 2005 6:00:00 ..SH. 83.456 81,50 K
________________________________________________

1.282 items found: 1.282 files (6 H/S), 0 directories.
Total of file sizes: 259.919.878 bytes 247,88 M

Administrator Account = True

--------------------End log---------------------


Logfile of HijackThis v1.99.1
Scan saved at 19:29:22, on 02.07.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Programme\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Programme\Norton AntiVirus\navapsvc.exe
C:\Programme\Norton AntiVirus\IWP\NPFMntor.exe
C:\Programme\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
C:\Programme\cFos\cFosDNT.exe
C:\Programme\Winamp\winampa.exe
C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Programme\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb03.exe
C:\Programme\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Programme\Java\j2re1.4.2_11\bin\jusched.exe
C:\Programme\Logitech\MouseWare\system\em_exec.exe
C:\Programme\Netropa\Multimedia Keyboard\TrayMon.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\Programme\Netropa\Onscreen Display\OSD.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\Programme\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Programme\Microsoft ActiveSync\wcescomm.exe
C:\Dokumente und Einstellungen\Home\Eigene Dateien\Temp\svchost.exe
C:\Dokumente und Einstellungen\Home\Eigene Dateien\Temp\winlogin.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Programme\iPod\bin\iPodService.exe
C:\Programme\Nokia\PC Suite für den Nokia 9210 Communicator\ECTaskScheduler.exe
C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Programme\Java\j2re1.4.2_11\bin\jucheck.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\Nero\Nero\nero.exe
C:\Programme\Internet Explorer\iexplore.exe
c:\Programme\Internet Explorer\iexplore.exe
C:\Programme\WinRAR\WinRAR.exe
C:\DOKUME~1\Home\LOKALE~1\Temp\Rar$EX00.554\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Programme\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Programme\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [cFosDNT] C:\Programme\cFos\cFosDNT.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Programme\Netropa\Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb03.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Programme\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [Corel Print Office 2000] "C:\WINDOWS\COREL\StpLnch.exe" /box="Corel Print Office 2000"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_11\bin\jusched.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programme\Gemeinsame Dateien\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [Winlogin] C:\Dokumente und Einstellungen\Home\Eigene Dateien\Temp\svchost.exe
O4 - HKCU\..\Run: [Winlogon] C:\Dokumente und Einstellungen\Home\Eigene Dateien\Temp\winlogin.exe
O4 - Global Startup: Adobe Acrobat - Schnellstart.lnk = ?
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: PC Suite für den Nokia 9210 Communicator Aufgabenplaner.lnk = ?
O4 - Global Startup: PC Suite für den Nokia 9210 Communicator.lnk = ?
O8 - Extra context menu item: &Google-Suche - res://C:\Programme\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Ins Deutsche übersetzen - res://C:\Programme\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Auswahl in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Auswahl in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Im Cache gespeicherte Seite - res://C:\Programme\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: In Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: In vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Verweisseiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Ähnliche Seiten - res://C:\Programme\Google\GoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_11\bin\npjpi142_11.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\j2re1.4.2_11\bin\npjpi142_11.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 1587665850
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/ ... taller.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{458F7915-B332-466D-B0D2-E60A94A124D8}: NameServer = 217.237.150.188 217.237.150.97
O18 - Protocol: bw+0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {B5547795-3AC2-40A4-9C0C-93BE65EC327D} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Programme\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - C:\Programme\Norton AntiVirus\navapsvc.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Programme\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Programme\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Programme\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programme\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe


Gruß don_esteban

Hi!

Cleanup!
http://www.stevengould.org/downloads/cl ... anUp40.exe
--> Bebilderte Anleitung ( http://virus-protect.org/cleanup.html )

-------------------

Datfinbad
- abarbeiten und alle 4 Logs in den Thread kopieren (mit Pfad)
Die letzten 3 Monate reichen
http://virus-protect.org/datfindbat.html

1. Doppel-klick DATFINDBAT
2. Es oeffnet sich der Texteditor. Speichern als system32.txt
3. auf das Command Fenster klicken und beliebige Taste druecken
4. Es oeffnet sich der Texteditor. Speichern als Temp.txt.
5. Wiederhole Schritt 3 und speichere als WINDOWS.txt.
6. Wiederhole Schritt 3 und speichere als C.txt.
7. Poste ALLE Logs hier in diesen Thread

------------------

Verzeichnis von C:\WINDOWS\system32

05.07.2006 16:22 395 hosts
29.06.2006 15:42 2.206 wpa.dbl
22.06.2006 12:47 181.248 rasmans.dll
09.06.2006 03:19 5.967.776 MRT.exe
08.06.2006 12:08 161.472 SymRedir.dll
08.06.2006 12:08 534.208 SymNeti.dll
01.06.2006 20:47 163.840 jgdw400.dll
01.06.2006 20:47 27.648 jgpl400.dll
29.05.2006 17:30 1.494.016 shdocvw.dll
19.05.2006 17:09 3.073.536 mshtml.dll
18.05.2006 07:36 450.560 jscript.dll
16.05.2006 14:34 87.808 S32EVNT1.DLL
15.05.2006 18:24 466.944 capicom.dll


Verzeichnis von C:\DOKUME~1\Home\LOKALE~1\Temp

05.07.2006 16:23 10.397 EPOCLOG.001
05.07.2006 16:22 375 WCESCOMM.LOG
05.07.2006 16:22 55.503 WCESLog.log
05.07.2006 16:22 613 jusched.log
29.03.2006 13:36 24.613 IadHide5.dll
5 Datei(en) 91.501 Bytes
0 Verzeichnis(se), 1.175.703.552 Bytes frei



Verzeichnis von C:\WINDOWS

05.07.2006 16:23 8.478 ModemLog_cFos DSL, Internet, PPPoE.txt
05.07.2006 16:23 245 Msiosd.ini
05.07.2006 16:22 395 hosts
05.07.2006 16:21 1.741.165 WindowsUpdate.log
02.07.2006 21:41 116 NeroDigital.ini
02.07.2006 16:37 601.931 setupapi.log
30.06.2006 15:10 230 wiadebug.log
30.06.2006 12:38 0 0.log
30.06.2006 12:38 50 wiaservc.log
30.06.2006 12:36 2.048 bootstat.dat
30.06.2006 04:18 1.409 QTFont.for
30.06.2006 04:18 54.156 QTFont.qfn
29.06.2006 15:41 32.606 SchedLgU.Txt
29.06.2006 13:10 140.453 wmsetup.log
28.06.2006 03:01 25.772 KB911280.log
28.06.2006 03:01 29.415 updspapi.log
18.06.2006 03:11 4.902 spupdsvc.log
18.06.2006 03:03 496.651 iis6.log
18.06.2006 03:03 134.274 comsetup.log
18.06.2006 03:03 83.320 ntdtcsetup.log
18.06.2006 03:03 183.399 tsoc.log

16.05.2006 09:54 74.752 cadkasdeinst01e.exe
13.05.2006 14:41 73.216 cadkasdeinst01.exe
13.05.2006 03:17 29 MMKEYBD.INI
13.05.2006 03:02 13.116 KB913580.log

06.03.2006 15:49 0 homeDVD-Fotos5_dlx.INI
06.03.2006 12:02 23 dvzxlt.ini
05.03.2006 21:29 13.911 WGA.log
05.03.2006 20:47 99 HPW.INI
05.03.2006 20:45 290 system.ini
05.03.2006 20:36 772 hpinfo.lnk
05.03.2006 20:35 764 reg.prm
05.03.2006 20:34 376 mozregistry.dat



Verzeichnis von C:\

05.07.2006 17:02 0 sys.txt
05.07.2006 17:01 8.793 system.txt
05.07.2006 17:01 489 systemtemp.txt
05.07.2006 17:00 97.337 system32.txt
05.07.2006 16:49 1.106 DirDPF.txt
05.07.2006 16:49 2 DirDPFCns.txt
03.07.2006 14:37 62.926 debug.log
30.06.2006 12:38 0 Log.txt
30.06.2006 12:36 536.399.872 hiberfil.sys
30.06.2006 12:36 805.306.368 pagefile.sys
27.06.2006 17:38 2.636 xPos.txt
09.03.2006 12:09 481 list
03.03.2006 00:10 0 IO.SYS
03.03.2006 00:10 0 CONFIG.SYS
03.03.2006 00:10 0 MSDOS.SYS
03.03.2006 00:10 0 AUTOEXEC.BAT
03.03.2006 00:01 211 boot.ini
06.01.2005 06:00 4.952 bootfont.bin
06.01.2005 06:00 47.564 NTDETECT.COM
06.01.2005 06:00 251.184 ntldr
20 Datei(en) 1.342.183.921 Bytes
0 Verzeichnis(se), 1.175.703.552 Bytes frei


vielen Dank
don_esteban

oeffne das HijackThis-->> Button "scan" -->> Haekchen setzen -->> Button "Fix checked" -->> PC neustarten

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [Winlogin] C:\Dokumente und Einstellungen\Home\Eigene Dateien\Temp\svchost.exe
O4 - HKCU\..\Run: [Winlogon] C:\Dokumente und Einstellungen\Home\Eigene Dateien\Temp\winlogin.exe

PC neustarten

Pocket KillBox
http://virus-protect.org/killbox.html

Options: "Delete on Reboot" und "Single File"--> anhaken
und klicke auf das rote Kreuz, wenn gefragt wird, ob "Do you want to reboot? "---- klicke auf "no",und kopiere das nächste rein, erst beim letzten auf "yes"
reinkopieren: ............

C:\WINDOWS\system32\hosts
C:\WINDOWS\hosts
C:\WINDOWS\Msiosd.ini
C:\Dokumente und Einstellungen\Home\Eigene Dateien\Temp\svchost.exe
C:\Dokumente und Einstellungen\Home\Eigene Dateien\Temp\winlogin.exe

und klicke auf das rote Kreuz, wenn gefragt wird, ob "Do you want to reboot? "----
klicke auf "no",und kopiere das nächste rein, erst beim letzten auf "yes"

PC neustarten

******************************


Counterspy
Anleitung: http://virus-protect.org/counterspy.html
Download : http://www.sunbelt-software.com/CounterSpy-Download.cfm

* Klicke: "Run a Spyware Scan Now"
* nach dem Scan muss man sich entscheiden für:

*Ignore
*Remove
*Quarantaine

wähle immer Remove und starte den PC neu (dann kopiere den Scanreport ab...

Spyware Scan Details
Start Date: 06.07.2006 17:43:42
End Date: 06.07.2006 18:31:11
Total Time: 47 mins 29 secs

Detected spyware

KaZaA P2P Program more information...
Details: KaZaA is a peer-to-peer (P2P) application that allows its users to join together in a network via the Internet and share files from each other's hard drives.
Status: Deleted

Infected registry entries detected
HKEY_CURRENT_USER\Software\Kazaa


iMesh P2P Program more information...
Details: iMesh is a peer-to-peer (P2P) application that allows its users to join together in a network via the Internet and share files from each other's hard drives.
Status: Deleted

Infected registry entries detected
HKEY_CURRENT_USER\Software\iMesh


CGI-Bin Cookie (General) more information...
Details: Cookies are small "data tags" that web sites store on PCs in order to recognize unique visitors. Cookies are used to identify returning visitors who have registered for special services; to measure and analyze visitors' use of web site features; to count
Status: Deleted

Infected cookies detected
c:\dokumente und einstellungen\home\cookies\home@cgi-bin[2].txt

Mache einen Panda Onlinescan und poste den Report.
Ausserdem bitte noch mal ein HJT Log posten.

Onlinescans
http://virus-protect.org/onlinescan.html

mfg,

Danke das problem hat sich gelöst!!!!!
gruß don