Mach einen OTL-Fix, beende alle evtl. geöffneten Programme, auch Virenscanner deaktivieren (!), starte OTL und kopiere folgenden Text in die "Custom Scan/Fixes" Box (unten in OTL): (das ":OTL" muss mitkopiert werden!!!)

:OTL
O4 - HKLM..\Run: []  File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.08.02 13:29:53 | 000,000,049 | R--- | M] () - I:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{5b393d00-1180-11df-9933-824479cf69e6}\Shell - "" = AutoRun
O33 - MountPoints2\{5b393d00-1180-11df-9933-824479cf69e6}\Shell\AutoRun\command - "" = I:\start.exe -- [2010.08.02 13:29:57 | 013,612,683 | R--- | M] (Galileo Press                       )
@Alternate Data Stream - 131 bytes -> C:\ProgramData\TEMP:60466E88
@Alternate Data Stream - 1170 bytes -> C:\ProgramData\Microsoft:cUU2cxOhwYmOWcpWiy9rO
@Alternate Data Stream - 1131 bytes -> C:\ProgramData\Microsoft:VG998vVfYfobNPt4WKh8tDIwLT
@Alternate Data Stream - 1013 bytes -> C:\Users\Admin\AppData\Local\Lgz8QFagKB:Oml4UsUsOMoHPlWYKwiXIlJTH
@Alternate Data Stream - 1010 bytes -> C:\Users\Admin\AppData\Local\CUvfUdeovv:27oRXF4DijpuICGG6ktAxRP
:Commands
[purity]
[resethosts]
[emptytemp]
         

Klick dann oben links auf den Button Fix!
Das Logfile müsste geöffnet werden, wenn Du nach dem Fixen auf ok klickst, poste das bitte. Evtl. wird der Rechner neu gestartet.

Die mit diesem Script gefixten Einträge, Dateien und Ordner werden zur Sicherheit nicht vollständig gelöscht, es wird eine Sicherheitskopie auf der Systempartition im Ordner "_OTL" erstellt.

Nach dem Fix Rechner neugestartet. Hier der Log, der nach dem Neustart erstellt wurde:

All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
File move failed. I:\autorun.inf scheduled to be moved on reboot.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5b393d00-1180-11df-9933-824479cf69e6}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5b393d00-1180-11df-9933-824479cf69e6}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{5b393d00-1180-11df-9933-824479cf69e6}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5b393d00-1180-11df-9933-824479cf69e6}\ not found.
File move failed. I:\start.exe scheduled to be moved on reboot.
ADS C:\ProgramData\TEMP:60466E88 deleted successfully.
ADS C:\ProgramData\Microsoft:cUU2cxOhwYmOWcpWiy9rO deleted successfully.
ADS C:\ProgramData\Microsoft:VG998vVfYfobNPt4WKh8tDIwLT deleted successfully.
ADS C:\Users\Admin\AppData\Local\Lgz8QFagKB:Oml4UsUsOMoHPlWYKwiXIlJTH deleted successfully.
ADS C:\Users\Admin\AppData\Local\CUvfUdeovv:27oRXF4DijpuICGG6ktAxRP deleted successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
[EMPTYTEMP]
 
User: Admin
->Temp folder emptied: 2194650653 bytes
->Temporary Internet Files folder emptied: 1312700259 bytes
->Java cache emptied: 4173529 bytes
->FireFox cache emptied: 67909021 bytes
->Google Chrome cache emptied: 17976513 bytes
->Flash cache emptied: 77537 bytes
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 356352 bytes
%systemroot%\System32 .tmp files removed: 1619120 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 119728210 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50434 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 3.547,00 mb
 
 
OTL by OldTimer - Version 3.2.1.3 log created on 03232011_222815

Files\Folders moved on Reboot...
File\Folder I:\autorun.inf not found!
File\Folder I:\start.exe not found!
C:\Users\Admin\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W70EN8TQ\01CA31K0DR.htm moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W70EN8TQ\01CAH1PQED.htm moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W70EN8TQ\LiveItemDetailCAAMUV46.htm moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\W70EN8TQ\LiveItemDetailCAPC4J31.htm moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\QRVD5J15\01CA0H5U1U.htm moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\QRVD5J15\blank[1].htm moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\QRVD5J15\LiveItemDetailCA6785ZN.htm moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\C4LDCMAH\01CAFBLO12.htm moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\C4LDCMAH\LiveItemDetailCARJ1DY7.htm moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\ED8654D5-B9F0-4DD9-B3E8-F8F560086FDF.dat moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\SuggestedSites.dat moved successfully.
C:\Windows\temp\vmware-SYSTEM\vmware-usbarb-SYSTEM-2336.log moved successfully.

Registry entries deleted on Reboot...
         

IE startet immer noch im Hintergrund