Hallo,
seit einiger Zeit starten einige meiner Programme nicht mehr.
Vielmehr geht im System gar nichts mehr sobald ich sagen wir mal z.B. auf FireTune zum Programmstart doppelklicke - und das habe ich gerade erst neu installiert.
Mauszeiger zeigt Beschäftigung, aber nichts mehr geht, nicht mal der Taskmanager.
Genauso ergeht es mir z.B. mit Autostart Managerprogramm das ich habe und noch einigen anderen Tools. Viele andere Programme (die meisten) laufen problemlos.

Woran kann sowas liegen? Zu unüberlegter Spybot und Adaware-Einsatz vielleicht? Obwohl - nach dem installieren von FireTune hab ich da nix gemacht.

Sehr nervig auf jeden Fall...

Habe WinXP Pro mit Service Pack 2 und den LIDL-Rechner vom März 2005 (Athlon 3400+ glaube ich).

HILLLFFFEEEE und Danke,
Alexo

Trat das Problem erst nach der Installation von FireTune auf? Wenn ja, solltest du es deinstallieren und berichten ob eine Besserung eintritt.
Poste bitte anstatt eines HijackTHis-Logfiles ein Silent-Runners-Logfile

"Silent Runners.vbs", revision 41, http://www.silentrunners.org/
Operating System: Windows XP SP2
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"Hot Keyboard" = "C:\Programme\Hot Keyboard Pro\HotKeyb.exe -minimized" ["TB Labs"]
"NCLaunch" = "REM C:\WINDOWS\NCLAUNCH.EXe" [file not found]
"freenetiPhone" = "REM c:\programme\freenetiphone\iPhoneStarter.exe" [file not found]
"ctfmon.exe" = "C:\WINDOWS\system32\ctfmon.exe" [MS]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"CARPService" = "REM carpserv.exe" [file not found]
"PinnacleDriverCheck" = "REM C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg" [file not found]
"NeroFilterCheck" = "REM C:\WINDOWS\system32\NeroCheck.exe" [file not found]
"PCMService" = ""C:\Programme\CyberLink\PowerCinema\PCMService.exe"" ["CyberLink Corp."]
"OEM-Reset" = (empty string)
"SunJavaUpdateSched" = "REM C:\Programme\Java\jre1.5.0_01\bin\jusched.exe" [file not found]
"DU Meter" = "C:\Programme\DU Meter\DUMeter.exe" ["Hagel Technologies"]
"FinePrint Dispatcher v5" = ""C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM" ["FinePrint Software, LLC"]
"DeltTray" = "DeltTray.exe" ["Doug Fetter Software Wizardry"]
"NvCplDaemon" = "REM RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [file not found]
"nwiz" = "REM nwiz.exe /install" [file not found]
"SoundMan" = "REM SOUNDMAN.EXE" [file not found]
"DataLayer" = "REM C:\PROGRA~1\GEMEIN~1\PCSuite\DATALA~1\DATALA~1.EXE" [file not found]
"PCSuiteTrayApplication" = "REM C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE" [file not found]
"BluetoothAuthenticationAgent" = "REM rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent" [file not found]
"IMJPMIG8.1" = "REM "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32" [file not found]
"IMEKRMIG6.1" = "REM C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE" [file not found]
"MSPY2002" = "REM C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC" [file not found]
"PHIME2002ASync" = "REM C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC" [file not found]
"PHIME2002A" = "REM C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName" [file not found]
"AVGCtrl" = ""C:\Programme\AVPersonal\AVGNT.EXE" /min" ["H+BEDV Datentechnik GmbH"]
"NvMediaCenter" = "REM RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit" [file not found]
"TkBellExe" = ""C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot" ["RealNetworks, Inc."]
"Zone Labs Client" = "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe" ["Zone Labs, LLC"]
"KernelFaultCheck" = "C:\WINDOWS\system32\dumprep 0 -k" [MS]

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{02478D38-C3F9-4efb-9B51-7695ECA05670}\(Default) = "Yahoo! Companion BHO" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll" ["Yahoo! Inc."]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = "AcroIEHlprObj Class" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll" ["Adobe Systems Incorporated"]
{45AD732C-2CE2-4666-B366-B2214AD57A49}\(Default) = "Idea2 SidebarBrowserMonitor Class" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Desktop Sidebar\sbhelp.dll" ["Idea2"]

HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\
"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "CPL-Erweiterung für Anzeigeverschiebung"
-> {CLSID}\InProcServer32\(Default) = "deskpan.dll" [file not found]
"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Erweiterung für HyperTerminal-Icons"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]
"{640167b4-59b0-47a6-b335-a6b3c0695aea}" = "Portable Media Devices"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS]
"{cc86590a-b60a-48e6-996b-41d25ed39a1e}" = "Portable Media Devices Menu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\Audiodev.dll" [MS]
"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Microsoft Office\OFFICE11\msohev.dll" [MS]
"{506F4668-F13E-4AA1-BB04-B43203AB3CC0}" = "{506F4668-F13E-4AA1-BB04-B43203AB3CC0}"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Microsoft Office\Visio11\VISSHE.DLL" [null data]
"{D66DC78C-4F61-447F-942B-3FB6980118CF}" = "{D66DC78C-4F61-447F-942B-3FB6980118CF}"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Microsoft Office\Visio11\VISSHE.DLL" [null data]
"{00020D75-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Desktop Icon Handler"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\OFFICE11\MLSHEXT.DLL" [MS]
"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Custom Icon Handler"
-> {CLSID}\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\OFFICE11\OLKFSTUB.DLL" [MS]
"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\WinRAR\rarext.dll" [null data]
"{9493BF10-6A0A-11D3-AFB2-00C06C397814}" = "Hot Keyboard"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Hot Keyboard Pro\HkShExt.dll" ["TB Labs"]
"{F2185E5D-720E-4956-90D9-75F6AC141575}" = "Idea2 SidebarIconHandler Class"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Desktop Sidebar\sbhelp.dll" ["Idea2"]
"{A70C977A-BF00-412C-90B7-034C51DA2439}" = "NvCpl DesktopContext Class"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{1CDB2949-8F65-4355-8456-263E7C208A5D}" = "Desktop Explorer"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A47}" = "Desktop Explorer Menu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{1E9B04FB-F9E5-4718-997B-B8DA88302A48}" = "nView Desktop Context Menu"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvshell.dll" ["NVIDIA Corporation"]
"{40950107-FEA6-4d53-A65F-B2DCBA57DD58}" = "Nokia Phone Browser"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\NokiaPhoneBrowser.dll" ["Nokia"]
"{FBFE7864-D495-41f0-B7DC-4BB601CC295E}" = "Contact View"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Nokia\Nokia PC Suite 6\Components\PhoneBrowserComponents\ContactView.dll" ["Nokia"]
"{A68865DD-EE3C-4442-9BE9-1BAB2576E3FA}" = "NOMAD Explorer"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Creative\Creative Zen Touch\NOMAD Explorer\CTJBNS.DLL" [file not found]
"{B9E1D2CB-CCFF-4AA6-9579-D7A4754030EF}" = "iTunes"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\iTunes\iTunesMiniPlayer.dll" ["Apple Computer, Inc."]
"{FFB699E0-306A-11d3-8BD1-00104B6F7516}" = "Play on my TV helper"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\nvcpl.dll" ["NVIDIA Corporation"]
"{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4}" = "Shell Extensions for RealOne Player"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Real\RealPlayer\rpshell.dll" ["RealNetworks, Inc."]
"{21569614-B795-46b1-85F4-E737A8DC09AD}" = "Shell Search Band"
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\browseui.dll" [MS]

HKLM\Software\Classes\PROTOCOLS\Filter\
INFECTION WARNING! text/xml\CLSID = "{807553E5-5146-11D5-A672-00B0D022E945}"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL" [MS]

HKLM\Software\Classes\*\shellex\ContextMenuHandlers\
AntiVir/Win\(Default) = "{a7cda720-84ee-11d0-b5c0-00001b3ca278}"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\AVPersonal\AVShlExt.DLL" ["H+BEDV Datentechnik GmbH"]
HotKeyboard\(Default) = "{9493BF10-6A0A-11D3-AFB2-00C06C397814}"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Hot Keyboard Pro\HkShExt.dll" ["TB Labs"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\WinRAR\rarext.dll" [null data]

HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\
AntiVir/Win\(Default) = "{a7cda720-84ee-11d0-b5c0-00001b3ca278}"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\AVPersonal\AVShlExt.DLL" ["H+BEDV Datentechnik GmbH"]
HotKeyboard\(Default) = "{9493BF10-6A0A-11D3-AFB2-00C06C397814}"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Hot Keyboard Pro\HkShExt.dll" ["TB Labs"]
WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\WinRAR\rarext.dll" [null data]


Active Desktop and Wallpaper:
-----------------------------

Active Desktop is disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\WINDOWS\Web\Wallpaper\Aqua Blue.bmp"


Startup items in "Alexxx" & "All Users" startup folders:
-------------------------------------------------------------------

C:\Dokumente und Einstellungen\Alexxx\Startmenü\Programme\Autostart
"Yahoo! Widget Engine" -> shortcut to: "C:\Programme\Yahoo!\WIDGET~1\WidgetEngine\YahooWidgetEngine.exe" ["Yahoo! Inc."]


Winsock2 Service Provider DLLs:
-------------------------------

Namespace Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\ {++}
000000000001\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000002\LibraryPath = "%SystemRoot%\System32\winrnr.dll" [MS]
000000000003\LibraryPath = "%SystemRoot%\System32\mswsock.dll" [MS]
000000000004\LibraryPath = "%SystemRoot%\system32\wshbth.dll" [MS]

Transport Service Providers

HKLM\System\CurrentControlSet\Services\Winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\ {++}
0000000000##\PackedCatalogItem (contains) DLL [Company Name], (at) ## range:
%SystemRoot%\system32\mswsock.dll [MS], 01 - 03, 06 - 36
%SystemRoot%\system32\rsvpsp.dll [MS], 04 - 05


Toolbars, Explorer Bars, Extensions:
------------------------------------

Toolbars

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" = "Yahoo! Companion" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll" ["Yahoo! Inc."]

HKLM\Software\Microsoft\Internet Explorer\Toolbar\
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}" = "Yahoo! Companion" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll" ["Yahoo! Inc."]

Explorer Bars

HKLM\Software\Microsoft\Internet Explorer\Explorer Bars\
{FE54FA40-D68C-11D2-98FA-00C0F0318AFE}\ = "Real.com" [from CLSID]
-> {CLSID}\InProcServer32\(Default) = "C:\WINDOWS\system32\Shdocvw.dll" [MS]

Dormant Explorer Bars in "View, Explorer Bar" menu

HKLM\Software\Classes\CLSID\{FF059E31-CC5A-4E2E-BF3B-96E929D65503}\ = "&Recherchieren"
Implemented Categories\{00021493-0000-0000-C000-000000000046}\ [vertical bar]
InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL" [MS]

Extensions (Tools menu items, main toolbar menu buttons)

HKLM\Software\Microsoft\Internet Explorer\Extensions\
{09FE188B-6E85-479E-9411-51FB2220DF80}\
"ButtonText" = "Subscribe in Desktop Sidebar"
"MenuText" = "Subscribe in Desktop Sidebar"
"CLSIDExtension" = "{45AD732C-2CE2-4666-B366-B2214AD57A49}"
-> {CLSID}\InProcServer32\(Default) = "C:\Programme\Desktop Sidebar\sbhelp.dll" ["Idea2"]

{92780B25-18CC-41C8-B9BE-3C9C571A8263}\
"ButtonText" = "Recherchieren"

{B205A35E-1FC4-4CE3-818B-899DBBB3388C}\

{CD67F990-D8E9-11D2-98FE-00C0F0318AFE}\
"ButtonText" = "Real.com"


Miscellaneous IE Hijack Points
------------------------------

C:\WINDOWS\INF\IERESET.INF (used to "Reset Web Settings")

Added lines (compared with English-language version):
[Strings]: START_PAGE_URL=http://www.targa.de

Missing lines (compared with English-language version):
[Strings]: 1 line


Running Services (Display Name, Service Name, Path {Service DLL}):
------------------------------------------------------------------

AntiVir Service, AntiVirService, ""C:\PROGRAMME\AVPERSONAL\AVGUARD.EXE"" ["H+BEDV Datentechnik GmbH"]
AntiVir Update, AVWUpSrv, ""C:\Programme\AVPersonal\AVWUPSRV.EXE"" ["H+BEDV Datentechnik GmbH, Germany"]
Bluetooth Support Service, BthServ, "C:\WINDOWS\system32\svchost.exe -k bthsvcs" {"C:\WINDOWS\System32\bthserv.dll" [MS]}
CyberLink Background Capture Service (CBCS), CLCapSvc, ""C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe"" [empty string]
CyberLink Media Library Service, CyberLink Media Library Service, ""C:\Programme\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe"" ["Cyberlink"]
CyberLink Task Scheduler (CTS), CLSched, ""C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLSched.exe"" [empty string]
HTTP-SSL, HTTPFilter, "C:\WINDOWS\System32\svchost.exe -k HTTPFilter" {"C:\WINDOWS\System32\w3ssl.dll" [MS]}
NVIDIA Display Driver Service, NVSvc, "C:\WINDOWS\system32\nvsvc32.exe" ["NVIDIA Corporation"]
TrueVector Internet Monitor, vsmon, "C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service" ["Zone Labs, LLC"]
Windows User Mode Driver Framework, UMWdf, "C:\WINDOWS\system32\wdfmgr.exe" [MS]


Print Monitors:
---------------

HKLM\System\CurrentControlSet\Control\Print\Monitors\
Canon BJ Language Monitor PIXMA iP3000\Driver = "CNMLM61.DLL" ["CANON INC."]
FPR5:\Driver = "fpmon5.dll" ["FinePrint Software, LLC"]
PDF995 Monitor\Driver = "pdf995mon.dll" [null data]


----------
+ This report excludes default entries except where indicated.
+ To see *everywhere* the script checks and *everything* it finds,
launch it from a command prompt or a shortcut with the -all parameter.
+ The search for DESKTOP.INI DLL launch points on all local fixed drives
took 65 seconds.
+ The search for all Registry CLSIDs containing dormant Explorer Bars
took 9 seconds.
---------- (total run time: 99 seconds)

Das Log schaut sauber aus, aber mir ist aufgefallen, dass die Dateien zu vielen Autostart-Einträgen nicht mehr existieren.

"DeltTray" = "DeltTray.exe" ["Doug Fetter Software Wizardry"]
"NvCplDaemon" = "REM RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [file not found]
"nwiz" = "REM nwiz.exe /install" [file not found]
"SoundMan" = "REM SOUNDMAN.EXE" [file not found]
"DataLayer" = "REM C:\PROGRA~1\GEMEIN~1\PCSuite\DATALA~1\DATALA~1.EXE " [file not found]
"PCSuiteTrayApplication" = "REM C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE" [file not found]
"BluetoothAuthenticationAgent" = "REM rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent" [file not found]
"IMJPMIG8.1" = "REM "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32" [file not found]
"IMEKRMIG6.1" = "REM C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE" [file not found]
"MSPY2002" = "REM C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC" [file not found]
"PHIME2002ASync" = "REM C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC" [file not found]
"PHIME2002A" = "REM C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName" [file not found]
"NvMediaCenter" = "REM RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit" [file not found]

Seit wann tritt das Problem genau auf? Hast du kurz davor z.B. etwas neues installiert?

die habe ich mit REM inaktiv gemacht. könnte man immer wieder aktivieren. sind aber momentan für mich überflüssig.

was könnte 'hijack this' genauer/besser anzeigen? gibt es noch eine weitere alternative zu 'hijack this'?

Zitat von alexo

was könnte 'hijack this' genauer/besser anzeigen? gibt es noch eine weitere alternative zu 'hijack this'?

Ich weiß zwar nicht auf was du dich beziehst, aber HjT ist recht gut geeignet um unterschiedlichste Malware auf dem System festzustellen. Es listet relativ viele Autostarteinträge sowie diverse andere "sicherheitsrelevante" Infos über das System auf (IE-Startseite, ActiveX-Objekte etc.)

Der wohl mächtigste Autostartviewer ist aber wohl noch immer Autoruns von Sysinternals.

Was das mit deinem Problem zu tun hat weiß ich aber nicht wirklich...

naja, weil eben das üblicherweise hier empfohlene und benutzte 'hijack this' bei mir eben auch eines der programme ist, welche unter dem von mir beschriebenen problem leiden -> es startet einfach nicht...

"silent runners" war also nur so etwas wie eine notlösung, aber wenn das genauso den job erledigt ist ja alles gut :-)

mein problem besteht nun aber also weiterhin. woran könnte so etwas liegen?



danke aber für die bisherigen antworten!


ps: das problem tritt seit einigen wochen auf, behindert mich aber bis auf einige programme, die nicht starten wollen nicht so extrem. hab bloss angst, dass da mehr dahinter steckt.

Silent Runners haben wir als Ersatzlösung genommen. In manchen Punkten ist es besser als HijackThis - in anderen schlechter.

Was passiert eigentlich, wenn du einfach mal die Dateiendung von z.B. HijackThis änderst (HijackThis.exe-> HijackThis.com)?

ps: das problem tritt seit einigen wochen auf,

Hast du damals etwas neues installiert? War sonst etwas ungewöhnliches (Warnmeldung vom Virenscanner o.ä.)?
Kannst du in der Ereignisanzeige (Start-> Ausführen-> "eventvwr.msc" -> [Eingabetaste]) einen Anhaltspunkt finden?