Habe leider seid 2 Tagen div. "komische" Meldungen per Internetexplorer.
Obwohl ich den eigentlich NIE benutze, erscheint jedes Mal wieder ein Fenster mit blöder Werbung & Werbung über "Antiviren-Programme"!

Vll. kann mir ja einer von Euch helfen, hier mal die Log-Datei:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:53:40, on 15.10.2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
E:\Windows\system32\Dwm.exe
E:\Windows\system32\taskeng.exe
E:\Program Files\Windows Sidebar\sidebar.exe
E:\Program Files\DAEMON Tools Lite\daemon.exe
E:\Program Files\Ray Adams\ATI Tray Tools\atitray.exe
E:\Program Files\Windows Media Player\wmpnscfg.exe
E:\Windows\system32\rundll32.exe
E:\Windows\system32\rundll32.exe
E:\Windows\explorer.exe
E:\Program Files\Windows Media Player\wmplayer.exe
E:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe
E:\Program Files\DVBViewer\dvbviewer.exe
E:\Program Files\DVBViewer\TS_Winlirc.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Windows\system32\SearchFilterHost.exe
E:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = h**p://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = h**p://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = h**p://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {56E3B199-9DD0-4695-9F32-B62BE7661B78} - E:\Windows\system32\awtqnlJb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: {f40b3308-a76b-cc58-da64-e8e6444d9dec} - {ced9d444-6e8e-46ad-85cc-b67a8033b04f} - E:\Windows\system32\jbkinf.dll
O2 - BHO: (no name) - {EF0C26F0-890C-8AF4-CAEE-716C7913DEE3} - (no file)
O4 - HKLM\..\Run: [MSServer] rundll32.exe E:\Windows\system32\nnnoNdaB.dll,#1
O4 - HKLM\..\Run: [727cb7df] rundll32.exe "E:\Windows\system32\bifuclxw.dll",b
O4 - HKCU\..\Run: [Sidebar] E:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "E:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [AtiTrayTools] "E:\Program Files\Ray Adams\ATI Tray Tools\atitray.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://E:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O13 - Gopher Prefix: 
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - E:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - E:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll jbkinf.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - E:\Windows\System32\DreamScene.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - E:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - E:\Windows\system32\Ati2evxx.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - E:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - E:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - E:\Windows\system32\STacSV.exe
O23 - Service: H+H Phantom Drive Management Service (VBurnSecs) - H+H Software GmbH - E:\Program Files\Phantom Drive\VBurnSecs.exe

--
End of file - 4342 bytes
         

Weiß zwar nicht obs irgendwie weiterhilf, aber würde mich über hilfreiche Post sehr freuen.


MfG
Nachtfuchs

Hallöle Nachtfuchs.

Scanne deinen rechner bitte mit SUPERAntiSpyware und Anti-Malware und poste die logs.