Dialer Problem

[lana]

Hallo!

Ich habe einen Dialer lt. meinen Netzwerkverbindungen, und bekomme ihn nicht weg. Jedes mal wenn ich mein netzwerkkabel einstecke, verbindet er sich automatisch, die verbindung lässt sich aber nicht mehr trennen.

kann mir bitte jem. helfen, und mir sagen, wie ich ihn entfernen kann.

mein hijackThis log file:

Logfile of HijackThis v1.99.1
Scan saved at 23:14:50, on 05.03.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\Acer\eManager\anbmServ.exe
C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Programme\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Programme\Alias\Maya7.0\docs\wrapper.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Programme\Alias\Maya7.0\docs\jre\bin\java.exe
C:\Programme\Norton AntiVirus\navapsvc.exe
C:\Programme\Norton AntiVirus\IWP\NPFMntor.exe
C:\Programme\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Programme\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\System32\alg.exe
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Programme\Synaptics\SynTP\SynTPLpr.exe
C:\Programme\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
C:\Programme\QuickTime\qttask.exe
C:\acer\epm\epm-dm.exe
C:\Programme\Launch Manager\QtZgAcer.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe
C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
C:\Programme\D-Tools\daemon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programme\Real\RealPlayer\RealPlay.exe
C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Programme\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe
C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe
C:\Programme\Hewlett-Packard\Toolbox\jre\bin\javaw.exe
C:\Programme\LG PC Suite\LG PC Sync\LGSyncManager.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Programme\acer\eRecovery\Monitor.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programme\Miranda IM\miranda32.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\PROGRA~1\LAVASOFT\AD-AWA~1\AD-AWARE.EXE
C:\WINDOWS\system32\ntvdm.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\WINPAT~1.EXE
C:\Programme\AVPersonal\AVWUPSRV.EXE
C:\Programme\AVPersonal\AVWIN.EXE
C:\WINDOWS\explorer.exe
C:\Programme\Spyware Doctor\sdhelp.exe
C:\Programme\Mozilla Thunderbird\thunderbird.exe
C:\Programme\a-squared\a2guard.exe
C:\Programme\a-squared\a2start.exe
C:\Programme\a-squared\a2scan.exe
C:\WINDOWS\system32\cmd.exe
C:\Dokumente und Einstellungen\Barbara\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programme\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programme\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQToolbar\toolbaru.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Verknüpfung mit der High Definition Audio-Eigenschaftenseite] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [RemoteControl] C:\Programme\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\Programme\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [ccApp] "C:\Programme\Gemeinsame Dateien\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programme\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [RealTray] C:\Programme\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [ScheduleSync.Siemens.SmartSync.5.2.exe] C:\Programme\Mobile Phone Manager\SmartSync\ScheduleSync.exe
O4 - HKLM\..\Run: [StatusClient 2.6] C:\Programme\Hewlett-Packard\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup 2.5] C:\Programme\Hewlett-Packard\Toolbox\hpbpsttp.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKLM\..\Run: [AVGCtrl] "C:\Programme\AVPersonal\AVGNT.EXE" /min
O4 - HKLM\..\RunOnce: [1] C:\WINDOWS\system32\cmd.exe /c erase "C:\DOKUME~1\Barbara\LOKALE~1\Temp\AcsUninstall.exe"
O4 - HKLM\..\RunOnce: [2] C:\WINDOWS\system32\cmd.exe /c erase "C:\DOKUME~1\Barbara\LOKALE~1\Temp\AcsUninstallRes.dll"
O4 - HKLM\..\RunOnce: [3] C:\WINDOWS\system32\cmd.exe /c erase "C:\DOKUME~1\Barbara\LOKALE~1\Temp\shfolder.dll"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [pdfSaver3] "C:\Programme\Tracker Software\PDF-XChange 3\pdfSaver\pdfSaver3.exe"
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Programme\Spyware Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run: [a-squared] "C:\Programme\a-squared\a2guard.exe"
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot
O4 - Global Startup: LG SyncManager.lnk = ?
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4A026B12-94F3-4D2F-A468-96AA55DE20A5} (NetCamPlayerWeb11g Control) - http://193.170.124.46/img/NetCamPlayerWeb11g.ocx
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 1363609078
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/93e ... taller.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{03037F47-681D-470C-805C-70E4818CDD66}: NameServer = 194.112.130.36,193.186.161.35
O17 - HKLM\System\CS1\Services\Tcpip\..\{03037F47-681D-470C-805C-70E4818CDD66}: NameServer = 194.112.130.36,193.186.161.35
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
O20 - Winlogon Notify: winakd32 - C:\WINDOWS\SYSTEM32\winakd32.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Programme\AVPersonal\AVWUPSRV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Programme\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: Maya 7.0 Documentation Server (maya70docserver) - Unknown owner - C:\Programme\Alias\Maya7.0\docs\wrapper.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - C:\Programme\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: MySQL5 - Unknown owner - C:\Programme\MySQL\MySQL.exe (file missing)
O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - C:\Programme\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Programme\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Programme\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Programme\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe

vielen dank im voraus!
lg lana

[Nikita]

Einzelne Dateien scannen
Oben auf der Seite --> auf Durchsuchen klicken --> Datei aussuchen --> Doppelklick auf die zu prüfende Datei --> klick auf Submit... jetzt abwarten --> abkopieren, was angezeigt wird ;)
http://www.virustotal.com/flash/index_en.html

C:\WINDOWS\SYSTEM32\winakd32.dll

----------------------------------------------------------------------------------------------------------------
1.
stelle den CleanUp genauso ein, wie hier angegeben:
http://virus-protect.org/cleanup.html

2.
öffne das HijackThis -- Button "scan" -- vor die Malware-Einträge Häkchen setzen -- Button "Fix checked" -- PC neustarten

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank

O4 - HKLM\..\RunOnce: [1] C:\WINDOWS\system32\cmd.exe /c erase "C:\DOKUME~1\Barbara\LOKALE~1\Temp\AcsUninstall.exe"
O4 - HKLM\..\RunOnce: [2] C:\WINDOWS\system32\cmd.exe /c erase "C:\DOKUME~1\Barbara\LOKALE~1\Temp\AcsUninstallRes.dll"
O4 - HKLM\..\RunOnce: [3] C:\WINDOWS\system32\cmd.exe /c erase "C:\DOKUME~1\Barbara\LOKALE~1\Temp\shfolder.dll"
O20 - Winlogon Notify: winakd32 - C:\WINDOWS\SYSTEM32\winakd32.dll


PC neustarten

3.
Kopiere diese 4 Textdateien. Sie sind nach Datum geordnet. (kopiere nur die letzten 3 Monate ab)
http://virus-protect.org/datfindbat.html

[lana]

hallo nikita!

vielen vielen dank für deine hilfe!
ich hab mal alles so gemacht wie du mir geschrieben hast, hier die antworten:

This is a report processed by VirusTotal on 03/06/2006 at 23:26:17 (CET) after scanning the file "winakd32.dll" file.

Antivirus Version Update Result
AntiVir 6.33.1.53 03.06.2006 no virus found
Avast 4.6.695.0 03.06.2006 Win32:Trojano-3292
AVG 718 03.06.2006 no virus found
Avira 6.33.1.53 03.06.2006 no virus found
BitDefender 7.2 03.06.2006 no virus found
CAT-QuickHeal 8.00 03.06.2006 no virus found
ClamAV devel-20060126 03.06.2006 no virus found
DrWeb 4.33 03.06.2006 no virus found
eTrust-InoculateIT 23.71.94 03.05.2006 no virus found
eTrust-Vet 12.4.2106 03.06.2006 no virus found
Ewido 3.5 03.06.2006 no virus found
Fortinet 2.71.0.0 03.06.2006 BDoor.CVT!bdr
F-Prot 3.16c 03.03.2006 no virus found
Ikarus 0.2.59.0 03.06.2006 no virus found
Kaspersky 4.0.2.24 03.06.2006 no virus found
McAfee 4711 03.06.2006 BackDoor-CVT
NOD32v2 1.1432 03.06.2006 no virus found
Norman 5.70.10 03.06.2006 no virus found
Panda 9.0.0.4 03.06.2006 Suspicious file
Sophos 4.03.0 03.06.2006 no virus found
Symantec 8.0 03.06.2006 Download.Trojan
TheHacker 5.9.5.107 03.06.2006 no virus found
UNA 1.83 03.02.2006 no virus found
VBA32 3.10.5 03.06.2006 no virus found
----------------------------------------
1.Log

Verzeichnis von C:\WINDOWS\system32

06.03.2006 23:38 0 eRLog.ini
06.03.2006 08:49 100 LuResult.txt
06.03.2006 08:45 42.844 kspydoc.log
06.03.2006 08:45 0 Sweeper.cfg
05.03.2006 20:09 19.968 winakd32.dll
01.03.2006 22:48 1.158 wpa.dbl
23.02.2006 10:22 57.344 avsda.dll
08.02.2006 06:23 4.513.120 MRT.exe
26.01.2006 08:31 731.384 FNTCACHE.DAT
15.01.2006 16:36 94 msiexec.log
15.01.2006 16:35 134 AddPort.ini
15.01.2006 16:34 103 hptrace.ini
15.01.2006 16:32 1.385.744 Msvbvm60.dll
14.01.2006 17:42 17.616 productregistry
04.01.2006 04:35 68.096 webclnt.dll
29.12.2005 19:44 337 lsprst7.dll
29.12.2005 19:44 351 lsprst7.tgz
29.12.2005 19:37 73 ssprs.dll
29.12.2005 19:37 87 ssprs.tgz
29.12.2005 19:28 1.025 clauth1.dll
29.12.2005 19:28 1.025 clauth2.dll
29.12.2005 19:28 1.025 sysprs7.tgz
29.12.2005 19:28 1.025 sysprs7.dll
29.12.2005 16:34 1.891 mapisvc.inf
29.12.2005 03:54 280.064 gdi32.dll
13.12.2005 21:47 6.948 jupdate-1.5.0_06-b05.log
06.12.2005 06:02 5.533.696 wmp.dll
01.12.2005 04:31 1.492.480 shdocvw.dll
------------------------------------------------------
2. log:

Verzeichnis von C:\DOKUME~1\Barbara\LOKALE~1\Temp

06.03.2006 23:44 16.384 ~DFC990.tmp
06.03.2006 23:44 16.384 ~DFCB8E.tmp
06.03.2006 23:44 2.640 dialer.tx0
06.03.2006 23:43 116.377 system32.tx0
06.03.2006 23:38 16.384 ~DFC3F6.tmp
06.03.2006 23:37 201 newtb1handler.log
-------------------------------------------------------------
3. log:

Verzeichnis von C:\WINDOWS

06.03.2006 23:38 4.260 ModemLog_Agere Systems HDA Modem #2.txt
06.03.2006 23:37 0 0.log
06.03.2006 23:37 2.048 bootstat.dat
06.03.2006 23:35 32.580 SchedLgU.Txt
06.03.2006 23:35 1.184.910 WindowsUpdate.log
06.03.2006 23:35 12 bthservsdp.dat
06.03.2006 08:52 14.051 LUINSTALL.LOG
06.03.2006 08:38 922.279 setupapi.log
03.03.2006 10:04 1.409 QTFont.for
03.03.2006 10:04 54.156 QTFont.qfn
01.03.2006 22:35 84.814 wmsetup.log
28.02.2006 23:32 311 wiadebug.log
28.02.2006 23:32 50 wiaservc.log
27.02.2006 19:32 84 winamp.ini
24.02.2006 07:42 63 vbaddin.ini
18.02.2006 20:16 12.288 impborl.dll
18.02.2006 20:16 606.848 flashax.exe
16.02.2006 08:03 923 spupdsvc.log
16.02.2006 00:41 23.105 MedCtrOC.log
16.02.2006 00:41 16.580 msgsocm.log
16.02.2006 00:41 10.778 KB911927.log
16.02.2006 00:41 56.935 netfxocm.log
16.02.2006 00:41 18.186 ocmsn.log
16.02.2006 00:41 16.533 tabletoc.log
16.02.2006 00:41 1.374 imsins.log
16.02.2006 00:41 169.038 ocgen.log
16.02.2006 00:41 340.193 FaxSetup.log
16.02.2006 00:41 540.546 iis6.log
16.02.2006 00:41 118.658 comsetup.log
16.02.2006 00:41 71.196 ntdtcsetup.log
16.02.2006 00:41 156.030 tsoc.log
16.02.2006 00:41 110.614 msmqinst.log
16.02.2006 00:41 18.804 updspapi.log
16.02.2006 00:41 1.374 imsins.BAK
16.02.2006 00:41 10.953 KB911564.log
16.02.2006 00:41 11.239 KB911565.log
16.02.2006 00:41 9.858 KB901190.log
16.02.2006 00:41 6.755 KB913446.log
15.02.2006 01:56 69 NeroDigital.ini
14.02.2006 13:03 73.728 ALCFDRTM.VER
15.01.2006 16:47 144.679 hpclj2550.his
15.01.2006 16:47 13.153 hpclj2550.ini
15.01.2006 16:33 5.790 hpclj2550.bu1
15.01.2006 16:33 51.181 hpclj2550.hi1
14.01.2006 17:45 17.090 vpd.properties
11.01.2006 17:09 10.163 KB908519.log
07.01.2006 09:31 11.115 KB912919.log
05.01.2006 13:57 281 system.ini
20.12.2005 20:37 685 win.ini
16.12.2005 23:21 541.014 Firefox Wallpaper.bmp
15.12.2005 13:35 9.439 KB910437.log
15.12.2005 13:35 16.555 KB905915.log
--------------------------------------------------------------------------------
4. Log:

Verzeichnis von C:\

06.03.2006 23:47 0 sys.txt
06.03.2006 23:46 11.095 system.txt
06.03.2006 23:45 3.597 trace.txt
06.03.2006 23:45 536 systemtemp.txt
06.03.2006 23:43 116.377 system32.txt
06.03.2006 23:37 1.608.634.368 hiberfil.sys
06.03.2006 23:36 1.610.612.736 pagefile.sys
05.03.2006 16:58 581 statusclient.log
26.02.2006 16:38 218.037 capture_26022006_163828.png
06.01.2006 03:52 9.471.459 JAXB2_20051223.jar
29.12.2005 16:40 18.891 SDSSetup.log
28.09.2005 06:31 2.284 my.cnf
28.09.2005 05:00 6 ISACER.ID
28.09.2005 04:09 194 BOOT.INI
25.06.2005 05:26 269.845 1.jpg
31.12.2004 10:37 785 IPH.PH
30.12.2004 18:51 0 AUTOEXEC.BAT
30.12.2004 18:51 0 IO.SYS
30.12.2004 18:51 0 MSDOS.SYS
30.12.2004 18:51 0 CONFIG.SYS
30.12.2004 18:35 512 BOOTSECT.DOS
30.12.2004 18:31 75 PRELOAD.AAA
04.08.2004 05:00 251.184 ntldr
04.08.2004 05:00 47.564 NTDETECT.COM
04.08.2004 05:00 4.952 bootfont.bin

lg, lana