Pc Absturz

[Tobi0106]

Hi,

Mein pc stürzt immer wieder ab und ich hab große probleme bei einer lan verbindung! mir wurde dann HijackThis empfohlen und ich hab es verwendet! dabei kam heraus das ich anscheinend so bösartige datein wie folgende hab:Und die hier sind bösartig:
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file),
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Programme\MyWebSearch\SrchAstt\4.bin\MWSSRCAS.DLL,
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Programme\MyWebSearch\SrchAstt\4.bin\MWSSRCAS.DLL,
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Programme\Need2Find\bar\1.bin\ND2FNBAR.DLL,
O2 - BHO: Seekmo Search Assistant Helper - {5929CD6E-2062-44a4-B2C5-2C7E78FBAB38} - c:\programme\seekmo\seekmohook.dll

Ich lass es lieber, das ist nur ein kleiner Teil...

Kann mir jemand helfen was das für sachen sind und was ich dagegen tun kann??

[automatix]

Bitte das komplette Log posten.

[Nikita]

Kann mir jemand helfen was das für sachen sind und was ich dagegen tun kann??

Hijackthis
http://virus-protect.org/hjtkurz.html
Lade/entpacke HijackThis in einem Ordner
--> None of the above just start the program --> Save--> Savelog -->es öffnet sich der Editor
nun das KOMPLETTE Log mit rechtem Mausklick abkopieren und ins Forum mit rechtem Mausklick "einfügen

stelle den CleanUp genauso ein, wie hier angegeben:
http://virus-protect.org/cleanup.html

Kopiere diese 4 Textdateien. Sie sind nach Datum geordnet. (kopiere nur die letzten 3 Monate ab)
http://virus-protect.org/datfindbat.html

[Nikita]

automatix...du warst 0,00004 sekunden schneller

[automatix]

Ich dachte es waren 0,00005

[Tobi0106]

so des erste:Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
C:\Programme\AntiVirenKit InternetSecurity\AVK\AVKService.exe
C:\Programme\AntiVirenKit InternetSecurity\AVK\AVKWCtl.exe
C:\Programme\AVPersonal\AVWUPSRV.EXE
C:\Programme\PalickSoft\HDD Temperature Enterprise\HDDNetTempServer.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\ICQLite\ICQLite.exe
C:\Programme\Gemeinsame Dateien\G DATA\AVKMail\AVKPOP.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Programme\Logitech\Video\LogiTray.exe
C:\Programme\Logitech\Video\FxSvr2.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\programme\seekmo\seekmo.exe
C:\Programme\QuickTime\qttask.exe
C:\Programme\Skype\Phone\Skype.exe
C:\Programme\Messenger\msmsgs.exe
c:\progra~1\intern~1\iexplore.exe
C:\Programme\AntiVirenKit InternetSecurity\Firewall\kavpf.exe
C:\Programme\AntiVirenKit InternetSecurity\Webfilter\Webfilter.exe
C:\PROGRA~1\ANTIVI~1\WEBFIL~1\ADSCLE~1.EXE
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\WinRAR\WinRAR.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temporary Internet Files\Content.IE5\W9Y3C92F\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.de/0SEDEDE/SAOS01
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://de.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Programme\MyWebSearch\SrchAstt\4.bin\MWSSRCAS.DLL (file missing)
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Programme\MyWebSearch\SrchAstt\4.bin\MWSSRCAS.DLL (file missing)
O2 - BHO: Poly HTML Filter BHO - {0140DF95-9128-4053-AE72-F43F0CFCA062} - C:\WINDOWS\system32\SiKernel.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SIPAKBHO Class - {40FB69E1-9B7B-453F-B238-37D8E9528929} - C:\Programme\AntiVirenKit InternetSecurity\Webfilter\PAKIEPlugins.dll
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Programme\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: Seekmo Search Assistant Helper - {5929CD6E-2062-44a4-B2C5-2C7E78FBAB38} - c:\programme\seekmo\seekmohook.dll
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\Programme\RXToolBar\sfcont.dll (file missing)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Programme\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.5000.1021\de\msntb.dll
O2 - BHO: Offliner AdFilter Helper - {DC9377A2-2E8D-44A1-99DB-F8A821DF254D} - C:\WINDOWS\system32\SiPlugins.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programme\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O3 - Toolbar: WebFilter-Leiste - {75CD0BC5-E317-449C-9FF6-4986B3D48F64} - C:\PROGRA~1\ANTIVI~1\WEBFIL~1\PAKIEGUI.dll
O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programme\MSN Apps\MSN Toolbar\01.02.5000.1021\de\msntb.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVK Mail Checker] "C:\Programme\Gemeinsame Dateien\G DATA\AVKMail\AVKPOP.EXE"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Programme\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Programme\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [GLSetIT32] C:\windows\system32\msiexec16.exe
O4 - HKLM\..\Run: [RunProg] C:\WINDOWS\system32\server.exe
O4 - HKLM\..\Run: [skipgreyholesend] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\tick one skip grey\sign does.exe
O4 - HKLM\..\Run: [MediaGateway] C:\Programme\MediaGateway\MediaGateway.exe
O4 - HKLM\..\Run: [seekmo] "c:\programme\seekmo\seekmo.exe"
O4 - HKLM\..\Run: [jcjsd] C:\WINDOWS\jcjsd.exe
O4 - HKLM\..\Run: [SemanticInsight] C:\Programme\RXToolBar\Semantic Insight\SemanticInsight.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunServices: [GLSetIT32] C:\windows\system32\msiexec16.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] C:\Programme\Logitech\Video\ManifestEngine.exe boot
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SupportTwo] C:\DOKUME~1\Besitzer\ANWEND~1\DEFAUL~1\Extra2Meow.exe
O4 - HKCU\..\Run: [FreeMem Pro] "C:\PROGRA~1\FREEME~1\fmempro.exe" autostart
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot
O4 - Startup: HDDTempNet-warning.lnk = ?
O4 - Global Startup: Firewall.lnk = ?
O4 - Global Startup: Webfilter.lnk = C:\Programme\AntiVirenKit InternetSecurity\Webfilter\Webfilter.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: &Search - http://ku.bar.need2find.com/KU/menusearch.html?p=KU
O8 - Extra context menu item: Add selected links to Link Container - C:\PROGRA~1\ANTIVI~1\WEBFIL~1\System\Scripts\off_collector_sel.htm
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Programme\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Show domain links - C:\PROGRA~1\ANTIVI~1\WEBFIL~1\System\Scripts\off_domain_links.htm
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/fu ... 0.0.15.exe
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi ... b31267.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex ... 0-3-30.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://195.243.185.195/activex/AxisCamControl.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMe ... loader.cab
O16 - DPF: {D29C51AE-44CF-44CF-BA2F-CE18B0475E04} (CB object) - http://www.comonline.net/cblib/cblib.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by15fd.bay15.hotmail.msn.com/act ... Atchmt.ocx
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b31267.cab
O18 - Protocol: bw+0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Programme\RXToolBar\sfcont.dll
O20 - AppInit_DLLs: cytpcb59m7uphon.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: AVK Service (AVKService) - Unknown owner - C:\Programme\AntiVirenKit InternetSecurity\AVK\AVKService.exe
O23 - Service: AVK Wächter (AVKWCtl) - Unknown owner - C:\Programme\AntiVirenKit InternetSecurity\AVK\AVKWCtl.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: HDD Temperature Enterprise Server (HDDTempNetServer) - PalickSoft - C:\Programme\PalickSoft\HDD Temperature Enterprise\HDDNetTempServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

dann die 4 sachen:Volume in Laufwerk C: hat keine Bezeichnung.
Volumeseriennummer: 3C29-50C6

Verzeichnis von C:\WINDOWS\system32

01.03.2006 23:35 21.828 nvapps.xml
22.02.2006 14:22 12.598 wpa.dbl
08.02.2006 06:23 4.513.120 MRT.exe
04.02.2006 22:45 1.209 lvcoinst.log
26.01.2006 19:36 716.800 divxdec.ax
26.01.2006 19:36 574.976 DivX.dll
26.01.2006 19:35 679.936 divx_xx07.dll
26.01.2006 19:35 679.936 divx_xx0c.dll
26.01.2006 19:35 663.552 divx_xx11.dll
24.01.2006 19:08 12.288 DivXWMPExtType.dll
09.01.2006 20:32 86.016 dpl100.dll
09.01.2006 20:32 593.920 dpuGUI11.dll
09.01.2006 20:32 200.704 dtu100.dll
09.01.2006 20:32 339.968 dpus11.dll
09.01.2006 20:32 57.344 dpv11.dll
09.01.2006 20:32 294.912 dpu10.dll
09.01.2006 20:32 294.912 dpu11.dll
04.01.2006 21:57 14.668 mscornet.exe
04.01.2006 04:35 68.096 webclnt.dll
29.12.2005 03:54 280.064 gdi32.dll
28.12.2005 22:35 311.604 perfh009.dat
28.12.2005 22:35 39.992 perfc009.dat
28.12.2005 22:35 316.594 perfh007.dat
28.12.2005 22:35 48.156 perfc007.dat
28.12.2005 22:35 723.744 PerfStringBackup.INI
16.12.2005 18:38 925.395 msiexec16.exe
14.12.2005 19:45 110.080 msvbvm06.dll
14.12.2005 19:45 39.424 initbold.exe
14.12.2005 14:10 67.584 server.exe
08.12.2005 21:14 9.216 KMD.dll
06.12.2005 06:02 5.533.696 wmp.dll
05.12.2005 21:51 10.716 dsm_ja.qm
05.12.2005 21:51 15.331 dsm_de.qm
05.12.2005 21:51 15.172 dsm_fr.qm
01.12.2005 04:31 1.492.480 shdocvw.dll
30.11.2005 21:17 15.360 BASSMOD.dll
24.11.2005 00:58 3.013.632 mshtml.dll
24.11.2005 00:58 1.022.464 browseui.dll
23.11.2005 05:00 4.276 divxsm.tlb
23.11.2005 05:00 778.240 DivXsm.exe
19.11.2005 11:43 50.714 interceptor.sys
18.11.2005 14:15 12.598 wpa.bak
17.11.2005 17:19 421.888 pxdrv.dll
17.11.2005 17:19 108.544 pxcpyi64.exe
17.11.2005 17:19 109.568 pxinsi64.exe
17.11.2005 17:19 172.032 pxmas.dll
17.11.2005 17:19 372.736 px.dll
17.11.2005 17:19 56.832 pxcpya64.exe
17.11.2005 17:19 61.440 pxhpinst.exe
17.11.2005 17:19 56.320 pxinsa64.exe
17.11.2005 17:19 339.968 pxwave.dll
17.11.2005 17:19 28.672 vxblock.dll
11.11.2005 09:34 127.704 FNTCACHE.DAT
05.11.2005 04:16 606.208 urlmon.dll
05.11.2005 04:16 1.056.256 danim.dll

02.03.2006 00:00 978 TmpICQMagic_{05736BBE-C20F-4F10-A6DE-4DB1E3564B0E}18890.html
01.03.2006 23:58 32.768 ~DFE364.tmp
01.03.2006 23:39 16.384 ~DFE37B.tmp
01.03.2006 23:39 512 ~DFE397.tmp
01.03.2006 23:39 512 ~DFE2FA.tmp
01.03.2006 23:39 16.384 ~DFE348.tmp
01.03.2006 23:39 512 ~DFE331.tmp
01.03.2006 23:39 16.384 ~DFE315.tmp
01.03.2006 23:39 16.384 ~DFE2DE.tmp
01.03.2006 23:39 983 TmpICQMagic_{EC202595-1DFD-4301-A1EA-13C1E331B505}26321.html
01.03.2006 23:35 0 BCG233.tmp
01.03.2006 23:35 16.384 ~DF1F61.tmp
01.03.2006 23:35 16.384 ~DFC34D.tmp
01.03.2006 23:35 512 ~DFC479.tmp
01.03.2006 23:35 539 LVCOMSX.LOG
01.03.2006 23:34 42.458 d479_appcompat.txt
01.03.2006 23:30 16.384 ~DFD366.tmp
01.03.2006 23:30 16.384 ~DFC8BB.tmp
18 Datei(en) 210.846 Bytes
0 Verzeichnis(se), 36.375.855.104 Bytes frei



01.03.2006 23:34 249 IE4 Error Log.txt
01.03.2006 22:18 1.649.016 WindowsUpdate.log
01.03.2006 22:18 50 wiaservc.log
01.03.2006 22:18 159 wiadebug.log
01.03.2006 22:18 0 0.log
01.03.2006 22:18 2.048 bootstat.dat
01.03.2006 17:19 32.548 SchedLgU.Txt
28.02.2006 20:53 1.911 setupapi.log
28.02.2006 16:34 17.100 War3Unin.dat
28.02.2006 16:34 2.829 War3Unin.pif
28.02.2006 16:34 126.976 War3Unin.exe
27.02.2006 22:44 1.226 wmsetup.log
26.02.2006 12:22 4.154 mozver.dat
18.02.2006 00:07 1.374 imsins.BAK
05.02.2006 12:10 10 smdat32m.sys
30.01.2006 20:37 766 BU.ico
17.01.2006 20:45 7.459 INSTALL.LOG
17.01.2006 16:44 137.728 jcjsd.exe
17.01.2006 14:40 1.845 cdplayer.ini
02.12.2005 22:06 316.640 WMSysPr9.prx
12.11.2005 17:55 276 game.ini


02.03.2006 00:01 0 sys.txt
02.03.2006 00:01 7.080 system.txt
02.03.2006 00:00 1.232 systemtemp.txt
01.03.2006 23:44 105.505 system32.txt
01.03.2006 22:18 805.306.368 pagefile.sys
02.12.2005 22:04 90 LogiSetup.log
17.11.2005 17:37 315 boot.ini
30.03.2005 19:47 15.937 hpfr3600.log
11.01.2005 20:02 1.120 INSTALL.LOG
11.01.2005 15:53 0 q250204.exe
11.01.2005 15:53 0 soundmx.exe
11.01.2005 15:53 0 msdos.exe
11.01.2005 15:53 0 m.exe
11.01.2005 15:53 0 y.exe
11.01.2005 15:53 0 p.exe

[Nikita]

Versteckte- und Systemdateien sichtbar machen
http://virus-protect.org/invisible.html

start-->Ausfuehren--> regedit

falls es vorhanden ist:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\EnableAutodial --> auf 0 stellen


öffne das HijackThis -- Button "scan" -- vor die Einträge Häkchen setzen -- Button "Fix checked" -- PC neustarten

R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Programme\MyWebSearch\SrchAstt\4.bin\MWSSRCAS.DLL (file missing)
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Programme\MyWebSearch\SrchAstt\4.bin\MWSSRCAS.DLL (file missing)

O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Programme\Need2Find\bar\1.bin\ND2FNBAR.DLL (file missing)
O2 - BHO: Seekmo Search Assistant Helper - {5929CD6E-2062-44a4-B2C5-2C7E78FBAB38} - c:\programme\seekmo\seekmohook.dll
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\Programme\RXToolBar\sfcont.dll (file missing)

O3 - Toolbar: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - (no file)

O4 - HKLM\..\Run: [GLSetIT32] C:\windows\system32\msiexec16.exe
O4 - HKLM\..\Run: [RunProg] C:\WINDOWS\system32\server.exe
O4 - HKLM\..\Run: [skipgreyholesend] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\tick one skip grey\sign does.exe
O4 - HKLM\..\Run: [MediaGateway] C:\Programme\MediaGateway\MediaGateway.exe
O4 - HKLM\..\Run: [seekmo] "c:\programme\seekmo\seekmo.exe"
O4 - HKLM\..\Run: [jcjsd] C:\WINDOWS\jcjsd.exe
O4 - HKLM\..\Run: [SemanticInsight] C:\Programme\RXToolBar\Semantic Insight\SemanticInsight.exe
O4 - HKLM\..\RunServices: [GLSetIT32] C:\windows\system32\msiexec16.exe
O4 - HKCU\..\Run: [SupportTwo] C:\DOKUME~1\Besitzer\ANWEND~1\DEFAUL~1\Extra2Meow.exe

O8 - Extra context menu item: &Search - http://ku.bar.need2find.com/KU/menusearch.html?p=KU

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/fu ... BInitialSe tup1.0.0.15.exe
O16 - DPF: {D29C51AE-44CF-44CF-BA2F-CE18B0475E04} (CB object) - http://www.comonline.net/cblib/cblib.cab

O18 - Protocol: bw+0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {9096B3AF-8481-443D-8973-AD7E7D3D816A} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O18 - Filter: text/html - {2AB289AE-4B90-4281-B2AE-1F4BB034B647} - C:\Programme\RXToolBar\sfcont.dll
O20 - AppInit_DLLs: cytpcb59m7uphon.dll


PC neustarten

KILLBOX - Pocket KillBox
http://virus-protect.org/killbox.html

Options: Delete on Reboot --> anhaken
und klicke auf das rote Kreuz, wenn gefragt wird, ob "Do you want to reboot? "---- klicke auf "no",und kopiere das nächste rein, erst beim letzten auf "yes"
reinkopieren: ............

C:\WINDOWS\system32\mscornet.exe

C:\WINDOWS\system32\msiexec16.exe
C:\WINDOWS\198.125
C:\WINDOWS\686.368
C:\WINDOWS\system32\ldrmsvbvm06.dll
C:\WINDOWS\system32\msvbvm06.dll

C:\WINDOWS\system32\initbold.exe
C:\WINDOWS\system32\server.exe

C:\WINDOWS\IE4 Error Log.txt
C:\WINDOWS\smdat32m.sys
C:\WINDOWS\jcjsd.exe
C:\q250204.exe
C:\soundmx.exe
C:\msdos.exe
C:\m.exe
C:\y.exe
C:\p.exe

PC neustarten

nach dem Neustart suche: C:\!KillBox
und loesche alle dort befindlichen Dateien manuell

deinstalliere - loesche:
C:\Programme\Need2Find
C:\Programme\MyWebSearch
C:\Programme\Need2Find
c:\programme\seekmo
C:\Programme\RXToolBar
C:\Programme\MediaGateway

loesche (am besten im abgesicherten Modus)

cytpcb59m7uphon.dll

C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\DEFAUL~1\Extra2Meow.exe
C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\DEFAUL... (ist nicht der komplette Name..du must suchen)

C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\tick one skip grey\sign does.exe
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\tick one skip grey

scanne mit Counterspy und loesche den ganzen P2P-Muell, der sich auf dem PC angesammelt hat
http://virus-protect.org/counterspy.html
* nach dem Scan muss man sich entscheiden für:
*Ignore
*Remove
*Quarantaine
wähle immer Remove und starte den PC neu

multiavtool
http://virus-protect.org/multiavtool.html
* klicke "3" - McAfee -- es erscheint ein leeres DOS-Fenster.
- man muss eingeben, was gescannt werden soll
- C:\Windows\System32 dann beginnt der Scan, man sollte dann auch scannen lassen:
- C:\Windows
- C:\


scanne mit panda und poste den Scanreport
http://virus-protect.org/onlinescan.html

Start -- alle Programme -- Zubehör -- Editor und kopiere folgenden Text rein:

dir %Windir%\tasks /a h > files.txt
notepad files.txt

- Speichern als: findjobs.bat
- abspeichern unter : Dateityp: alle Dateien
- speichere auf dem Desktop
- Locate findjobs.bat-- doppelklick auf die bat-Datei , der Editor öffnet sich -- poste den Text