Trojaner-Board - mit SpHiJFix erfolglos

nach download und ausführung stellt der Fix fest, daß mein PC
"nicht infiziert" ist :mad:
mit normalem HiJack kann ich den Eintrag jedoch wieder sehen

Logfile of HijackThis v1.98.2
Scan saved at 12:46:56, on 15.09.2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\S3hotkey.exe
C:\WINDOWS\System32\S3tray2.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe
C:\Programme\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE
C:\t-online\BSW4\ISDN SpeedManager\Tomcat.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp4.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis1.exe
C:\Programme\BillP Studios\WinPatrol\WinPatrol.exe
C:\Programme\Microsoft IntelliPoint\point32.exe
C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe
C:\Programme\WinZip\WZQKPICK.EXE
C:\WINDOWS\System32\Drivers\trcboot.exe
C:\Programme\IBM\Personal Communications\PCS_AGNT.EXE
C:\Programme\AMD\PowerNow!\GemServ.exe
C:\Programme\Panda Software\Panda Antivirus Titanium\Pavsrv51.exe
C:\Programme\AMD\PowerNow!\gemback.exe
C:\WINDOWS\system32\slserv.exe
C:\Programme\UWIN\usr\etc\ums.exe
C:\Programme\UWIN\usr\etc\init.exe
C:\Programme\Panda Software\Panda Antivirus Titanium\AVENGINE.EXE
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\Programme\Panda Software\Panda Antivirus Titanium\pavProxy.exe
C:\WINDOWS\System32\Drivers\ldlcserv.exe
C:\Programme\UWIN\usr\etc\inetd.exe
C:\Programme\UWIN\usr\lib\cs\tcp\at\at.svc
C:\Programme\UWIN\usr\lib\cs\tcp\at\at.svc
C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Programme\IBM\Personal Communications\pcsws.exe
C:\Programme\IBM\Personal Communications\PCSCM.EXE
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Dokumente und Einstellungen\uklusgu\Desktop\SW\Virus\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://C:\DOKUME~1\uklusgu\LOKALE~1\Temp\sp.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.copas.t-online.de;127.0.0.1;10.27;10.40;bgnet.de;intranet*;*.bg48.bgnet.de;10.48.*;10.27.17.189;<local>
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [S3hotkey] S3hotkey.exe
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [APVXDWIN] "C:\Programme\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [ISDN SpeedManager] "C:\t-online\BSW4\ISDN SpeedManager\Tomcat.exe"
O4 - HKLM\..\Run: [FinePrint Dispatcher v4] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp4.exe
O4 - HKLM\..\Run: [pdfFactory Dispatcher v1] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis1.exe
O4 - HKLM\..\Run: [WinPatrol PLUS] C:\Programme\BillP Studios\WinPatrol\WinPatrol.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Programme\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Programme\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programme\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\MSMSGS.EXE
O16 - DPF: JavaConnect - http://bgnetis-coll1.bg48.bgnet.de/s...avaConnect.cab
O16 - DPF: {2226ED4E-6E9A-472E-97ED-B6D54F3B620B} (STURLConnection Control) - http://bgnetis-coll1.bg48.bgnet.de/s...lConLoader.cab
O16 - DPF: {4E888414-DB8F-11D1-9CD9-00C04F98436A} (Microsoft.WinRep) - https://webresponse.one.microsoft.co...veX/winrep.cab
O16 - DPF: {53F92AF2-3C1E-4A63-B2EA-2E33DA6286B7} (STAutoAway Control) - http://bgnetis-coll1.bg48.bgnet.de/s...AwayLoader.cab
O16 - DPF: {74FFE28D-2378-11D5-990C-006094235084} (IBM Access Support) - https://www.ibm.com/pc/support/acces...d/IbmEgath.cab
O16 - DPF: {A25BE7A9-3102-46B4-BAAE-462471B60ACB} (STConnectivityAgent Control) - http://bgnetis-coll1.bg48.bgnet.de/s...TConnAgent.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{0432D2B6-A9A5-407A-B513-F59CB8BC6F96}: NameServer = 10.48.201.153,10.48.201.154
O17 - HKLM\System\CCS\Services\Tcpip\..\{0C809C98-8C3A-4251-ABBC-616372E14211}: Domain = bg48.bgnet.de
O17 - HKLM\System\CCS\Services\Tcpip\..\{0C809C98-8C3A-4251-ABBC-616372E14211}: NameServer = 10.27.16.41,10.27.16.16
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = bg48.ad.bgnet.de,bg48.bgnet.de,bg27.bgnet.de,bgnet.de
O17 - HKLM\System\CS1\Services\Tcpip\..\{0432D2B6-A9A5-407A-B513-F59CB8BC6F96}: NameServer = 10.48.201.153,10.48.201.154
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = bg48.ad.bgnet.de,bg48.bgnet.de,bg27.bgnet.de,bgnet.de