R1 - HKCU\Software\Microsoft\Internet* Explorer\Main,Search *Bar = res://C:\WINDOWS\gmnht.dll/sp.html#88449
R1 - HKCU\Software\Microsoft\Internet* Explorer\Main,Search Page = res://C:\WINDOWS\gmnht.dll/sp.html#88449
R1 - HKLM\Software\Microsoft\Internet* Explorer\Main,Default_Search_URL = res://C:\WINDOWS\gmnht.dll/sp.html#88449
R1 - HKLM\Software\Microsoft\Internet* Explorer\Main,Search *Bar = res://C:\WINDOWS\gmnht.dll/sp.html#88449
R1 - HKLM\Software\Microsoft\Internet* Explorer\Main,Search Page = res://C:\WINDOWS\gmnht.dll/sp.html#88449
R1 - HKCU\Software\Microsoft\Internet* Explorer\Search,SearchAssistant = res://C:\WINDOWS\gmnht.dll/sp.html#88449
R0 - HKLM\Software\Microsoft\Internet* Explorer\Search,SearchAssistant = res://C:\WINDOWS\gmnht.dll/sp.html#88449
R3 - Default URLSearchHook is missing
O2 - BHO: ShprRprts - {2A8A997F-BB9F-48F6-AA2B-2762D50F9289} - C:\Programme\ShopperReports\Bin\1.0.8.0\ShprRprt.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Programme\HbTools\Bin\4.7.1.0\HbtHostIE.dll
O2 - BHO: Class - {AEC0E648-ADD3-DDDE-92AB-02CC0E6452E3} - C:\WINDOWS\winwl32.dll
O2 - BHO: MSN Suche Toolbar Helper -
O2 - BHO: WhIeHelperObj Class - {c900b400-cdfe-11d3-976a-00e02913a9e0} - C:\Program Files\webHancer\programs\whiehlpr.dll
O3 - Toolbar: H&otbar - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - C:\Programme\HbTools\Bin\4.7.1.0\HbtHostIE.dll
O4 - HKLM\..\Run: [webHancer Agent] "C:\Program Files\webHancer\Programs\whAgent.exe"
O4 - HKLM\..\Run: [webHancer Survey Companion] C:\Program Files\webHancer\Programs\whsurvey.exe
O4 - HKLM\..\Run: [vmlib] vmlib.exe
O4 - HKLM\..\Run: [BearShare] "C:\Programme\BearShare\BearShare.exe" /pause
O4 - HKLM\..\Run: [WeatherOnTray] C:\Programme\HbTools\Bin\4.7.1.0\HbtWeatherOnTray.exe
O4 - HKLM\..\Run: [HbTools] C:\Programme\HbTools\Bin\4.7.1.0\HbtOEAddOn.exe
O4 - HKLM\..\Run: [tzoqlymm] C:\WINDOWS\System32\joghagww.exe
O4 - HKLM\..\Run: [ipdx.exe] C:\WINDOWS\ipdx.exe
O4 - HKLM\..\Run: [85.tmp] C:\DOKUME~1\***\LOKALE~1\Temp\85.tmp.exe
O4 - HKLM\..\Run: [86.tmp] C:\DOKUME~1\***\LOKALE~1\Temp\86.tmp.exe
O4 - HKLM\..\Run: [85.tmp.exe] C:\DOKUME~1\***\LOKALE~1\Temp\85.tmp.exe
O4 - HKLM\..\Run: [86.tmp.exe] C:\DOKUME~1\***\LOKALE~1\Temp\86.tmp.exe
O4 - HKLM\..\Run: [ipki.exe] C:\WINDOWS\system32\ipki.exe
O4 - HKCU\..\Run: [WhenUSave] "C:\Programme\Save\Save.exe"
O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe
O10 - Hijacked *Internet access by WebHancer
O10 - Hijacked *Internet access by WebHancer
O10 - Hijacked *Internet access by WebHancer
O16 - DPF: {8C875948-9C60-4381-9248-0DF180542D53} (HbtInstObj) -
http://installs.hotbar.com/installs/...ms/hbtools.cab
O23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\ipnh.exe