Läuft nicht.
Bzw. Startet nicht.

Dann hat evtl. der Download etwas gelitten. Oder gibt es irgendeine Fehlermeldung?

Installiere mal Firefox und schaue, ob du damit schneller surfen kannst

Meine Verbindung ist vorhin Abgerissen
Ja eine Fehler Meldung.
Foxfire wird zur zeit installiert,sotte gleich fertig sein.

firefox läuft, aber nicht merkbar Schneller als mein Explorer.

ein Versuch war's wert.

dann jetzt HijackThis installieren und laufen lassen - Logfile posten.
Während dessen Malwarebytes' Anti-Malware - Reviews and free Malwarebytes' Anti-Malware downloads at Download.com nochmal downloaden.

ok, malwarebytes läuft wieder im download.
Hijack ist installiet, aber wie bekomme ich das zum laufen ? mein Englisch ist so gut und ich kriege immer Ausrufungs Zeichen mit langen englischen texten, normal Starten will der auch nicht.

klick mal auf -> HijackThis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:10:00, on 16.02.2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16809)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\T-Online\WLAN-Access Finder\ToWLaAcF.exe
C:\Users\XXX\AppData\Local\aaesc.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\802.11 Wireless LAN\802.11g USB 2.0 WLAN Dongle\WlanCU.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Marmiko Shared\MWLaMaS.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - c:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\UIBHO.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "c:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [recinfo741] c:\RecInfo\RecInfo.exe
O4 - HKLM\..\Run: [LXCFCATS] rundll32 C:\Windows\system32\spool\DRIVERS\W32X86\3\LXCFtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [T-Online_Software_6\WLAN-Access Finder] C:\Program Files\T-Online\WLAN-Access Finder\ToWLaAcF.exe /StartMinimized
O4 - HKCU\..\Run: [aaesc] "c:\users\XXX\appdata\local\aaesc.exe" aaesc
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: REALTEK USB Wireless LAN Utility.lnk = C:\Program Files\REALTEK USB Wireless LAN Driver and Utility\RtWLan.exe
O4 - Global Startup: Wireless Configuration Utility HW.14.lnk = C:\Program Files\802.11 Wireless LAN\802.11g USB 2.0 WLAN Dongle\WlanCU.exe
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.de/SnapfishActivia.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-24-0.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {A73BAEFA-EE65-494D-BEDB-DD3E5A34FA98} (Image Uploader) - http://www.extrafilm.de/ImageUploader4.cab
O16 - DPF: {BA162249-F2C5-4851-8ADC-FC58CB424243} (Image Uploader Control) - http://static.pe.studivz.net/photouploader/ImageUploader5.cab?nocache=1206384352
O16 - DPF: {BA3BAF69-72B1-4BCE-BE96-A4D304EAFBB4} (PhotoBox uploader) - http://assets.photobox.com/assets/aurigma/ImageUploader4.cab?20080806095533
O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-27-0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C50BBFC1-EAC9-4AD1-8B74-CB6753637AB2}: NameServer = 192.168.2.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Personal - Free Antivirus Planer (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Automatisches LiveUpdate - Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Symantec IS Kennwortprüfung (ISPwdSvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: lxcf_device - - C:\Windows\system32\lxcfcoms.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe

--
End of file - 10311 bytes

Hallo Anne83,

das mit HijackThis hat ja geklappt. Bist Du schon mit Malwarebyte weitergekomen?

Grüße
45cl3p1u5

Das Malwareprogramm lässt sich herunterladen und Starten; nach der Sprachauswahl geht es sofort auf "Fertigstellen" und startet kein Update.

versuche es mal mit SuperAntiSpyware

während dessen die Datei "C:\Users\XXX\AppData\Local\aaesc.exe" unter VirusTotal - Kostenloser online Viren- und Malwarescanner prüfen lassen.

Ich bin am Hertunterladen; Antwort folgt gleich.

Erstes Egebnis: - Das andere Programm ist noch beim Herunterladen.
Virus total:
a-squared 4.0.0.93 2009.02.16 -
AhnLab-V3 2009.2.16.2 2009.02.16 -
AntiVir 7.9.0.79 2009.02.16 -
Authentium 5.1.0.4 2009.02.16 -
Avast 4.8.1335.0 2009.02.16 -
AVG 8.0.0.237 2009.02.16 -
BitDefender 7.2 2009.02.16 -
CAT-QuickHeal 10.00 2009.02.16 -
ClamAV 0.94.1 2009.02.16 -
Comodo 978 2009.02.16 -
DrWeb 4.44.0.09170 2009.02.16 -
eSafe 7.0.17.0 2009.02.15 -
eTrust-Vet 31.6.6360 2009.02.16 -
F-Prot 4.4.4.56 2009.02.16 -
F-Secure 8.0.14470.0 2009.02.16 -
Fortinet 3.117.0.0 2009.02.16 -
GData 19 2009.02.16 -
Ikarus T3.1.1.45.0 2009.02.16 -
K7AntiVirus 7.10.582 2009.01.09 -
Kaspersky 7.0.0.125 2009.02.16 -
McAfee 5528 2009.02.16 -
McAfee+Artemis 5528 2009.02.16 -
Microsoft 1.4306 2009.02.16 -
NOD32 3857 2009.02.16 -
Norman 6.00.06 2009.02.16 -
nProtect 2009.1.8.0 2009.02.16 -
Panda 9.4.3.20 2009.02.16 -
PCTools 4.4.2.0 2009.02.16 -
Prevx1 V2 2009.02.16 Fraudulent Security Program
Rising 21.17.02.00 2009.02.16 -
SecureWeb-Gateway 6.7.6 2009.02.16 Trojan.LooksLike.Dropper
Sophos 4.38.0 2009.02.16 -
Sunbelt 3.2.1851.2 2009.02.12 -
Symantec 10 2009.02.16 -
TheHacker 6.3.2.2.258 2009.02.16 -
TrendMicro 8.700.0.1004 2009.02.16 -
VBA32 3.12.8.12 2009.02.16 -
ViRobot 2009.2.16.1609 2009.02.16 -
VirusBuster 4.5.11.0 2009.02.16 -
weitere Informationen
File size: 311296 bytes
MD5...: 2545eb197127181d70903caf07e68a0a
SHA1..: 30e84d55abb4a02bd29276914ce5f90575027881
SHA256: 123352efe532ce8f1a1d50b4499d47e624bedc612d051465bff455ef9bef4d53
SHA512: b2fa0adb7b2e8a6031092acb82545d991124a34988d0c52ff6253c6ade3d15b2
ae95a0a80cd958cd0b5f41f97f96e9885d11cdb2504b32e9d4b8a2549d153a4d
ssdeep: 6144:zyNswXMRx/ov98dc5K1iwJVbce+yBiYRpZW/Ezc3Ay:ONfMH/ovyFFpcYRH
9

PEiD..: Armadillo v1.71
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (53.1%)
Windows Screen Saver (18.4%)
Win32 Executable Generic (12.0%)
Win32 Dynamic Link Library (generic) (10.6%)
Generic Win/DOS Executable (2.8%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x431df6
timedatestamp.....: 0x46bd6293 (Sat Aug 11 07:17:39 2007)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x30f8c 0x31000 7.43 d687c52ddd84fa2c6f6895e78fbf4aa9
.rdata 0x32000 0x1450 0x2000 4.11 1f1cacebaa4fc81be59a0857da7be1e7
.data 0x34000 0x1774c 0x18000 5.56 ca0c43d043b997b06ddbb58b24e09782

( 11 imports )
> COMCTL32.dll: ImageList_DragEnter, ImageList_BeginDrag
> WS2_32.dll: -, WSAGetServiceClassInfoW, WSASendDisconnect, WSAAddressToStringW, -, -, -, -, -, WSADuplicateSocketA, WSARecv
> KERNEL32.dll: GetFileAttributesExA, IsBadWritePtr, FindCloseChangeNotification, SetCommTimeouts, SetEndOfFile, ReadDirectoryChangesW, CompareStringW, EnumSystemCodePagesA, EraseTape, LocalLock, IsDBCSLeadByteEx, SetEnvironmentVariableW, SetVolumeLabelA, GetThreadContext, IsBadStringPtrA, DuplicateHandle, GetSystemTime, _hread, SetConsoleTitleA, EnumCalendarInfoW, GlobalAddAtomA, GetPrivateProfileStringW, GetShortPathNameW, GetDiskFreeSpaceW, GetVersion, GetEnvironmentVariableW, FindNextChangeNotification, GetVolumeInformationW, VirtualAlloc, PeekConsoleInputW, SetConsoleCursorPosition, GetModuleHandleA, GetShortPathNameA, GetStartupInfoA
> ole32.dll: OleBuildVersion, OleSetContainedObject, MkParseDisplayName, CreateOleAdviseHolder, CoGetClassObject, OleCreate, ProgIDFromCLSID, CoTreatAsClass, GetClassFile
> OLEAUT32.dll: -
> VERSION.dll: VerFindFileA
> ADVAPI32.dll: InitiateSystemShutdownW, RegLoadKeyA, GetTokenInformation, CreateServiceA, SetFileSecurityW, GetFileSecurityW, FreeSid, CryptCreateHash, InitializeAcl, LookupAccountNameW, AbortSystemShutdownW, IsValidAcl, RegQueryValueExA, RegisterServiceCtrlHandlerW, AccessCheckAndAuditAlarmW, AccessCheckAndAuditAlarmA, GetSidIdentifierAuthority, OpenSCManagerA, RegSetValueW, SetKernelObjectSecurity, SetSecurityDescriptorDacl, RegReplaceKeyW, ImpersonateLoggedOnUser, RegCreateKeyExW, GetSidSubAuthorityCount, RegOpenKeyW, InitializeSid, NotifyChangeEventLog, RegNotifyChangeKeyValue, MakeSelfRelativeSD, QueryServiceConfigA, ClearEventLogW, CloseEventLog, RegQueryValueA, CreatePrivateObjectSecurity, QueryServiceLockStatusW, ChangeServiceConfigA, RegEnumKeyExA, QueryServiceConfigW, AllocateLocallyUniqueId, GetSecurityDescriptorOwner, GetExplicitEntriesFromAclW, IsValidSid
> USER32.dll: CharLowerA, TranslateAcceleratorW, DrawTextExA, SendDlgItemMessageA
> SHELL32.dll: DragQueryPoint, SHGetSpecialFolderPathA, ExtractIconA, FindExecutableW, FindExecutableA, SHChangeNotify, ExtractIconExW
> GDI32.dll: ExtCreateRegion, SetDIBColorTable, SetTextColor, WidenPath, ResizePalette, CreateDIBitmap, GetPaletteEntries, GetBkColor, CreateDiscardableBitmap, EqualRgn, RestoreDC, GdiComment, EnumFontFamiliesA, SelectObject, PolyBezier, SetPixelV, GetWindowExtEx
> MSVCRT.dll: _controlfp, _except_handler3, __set_app_type, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _initterm, __getmainargs, _acmdln, exit, _XcptFilter, _exit, vsprintf, isxdigit, strspn, strrchr, _umask, vprintf, _ecvt, _wstrdate, fputs, _strnicmp, _wcslwr, atoi, wcscoll, fread, _wcsnset, _wtoi, _strrev, strtoul, _vsnprintf, __p___argc, fputwc, realloc, mbstowcs, towupper, _mbsnbicmp, _popen, wcscpy, swprintf, fwrite, wcscat, _setmode, _ismbcspace, setvbuf, free, _wcsrev, mbtowc, wcstombs, sprintf, gmtime, _ltow, _mbsrchr, floor, memmove, asctime, _mbscmp, longjmp, _wputenv, iswxdigit, iswdigit, __doserrno, _wsplitpath, memchr

( 0 exports )

Prevx info: <a href='http://info.prevx.com/aboutprogramtext.asp?PX5=B09B395D00C7E43DC033040599FBF000A585DCA9' target='_blank'>http://info.prevx.com/aboutprogramtext.asp?PX5=B09B395D00C7E43DC033040599FBF000A585DCA9</a>