Trojaner-Board - HijackThis Log-File bitte anschauen

Hallo könnt ihr mir bitte helfen, ich bin neu hier.

Habe gestern den Computer mit Norton auf Viren überprüft, jedoch ist er immer noch so langsam: Jetzt hab ich ein HijackThis Log-File erstellt und bitte euch mir zu helfen, welche Einträge gelöscht werden können:

Vielen Dank im Voraus:

Gruss Michael

Logfile of HijackThis v1.97.7
Scan saved at 11:20:42, on 25.11.2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccEvtMgr.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\ccProxy.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SNDSrvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Programme\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Lexmark X74-X75\lxbbbmgr.exe
C:\WINDOWS\System32\pctspk.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Programme\Gemeinsame Dateien\Gemplus\CertReg\certreg.exe
C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Programme\Creative\Shared Files\CAMTRAY.EXE
C:\Programme\Java\j2re1.4.2_05\bin\jusched.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\Programme\QuickTime\qttask.exe
C:\WINDOWS\System32\SafeSignCertReg.exe
C:\WINDOWS\volumeco.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\WINDOWS\msncomm.exe
C:\Programme\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Programme\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Programme\Sony Ericsson\Mobile\audevicemgr.exe
C:\Programme\WinZip\WZQKPICK.EXE
C:\WINDOWS\msncomm.exe
C:\Programme\Lexmark X74-X75\lxbbbmon.exe
C:\Programme\iPod\bin\iPodService.exe
C:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\CONNMN~1.EXE
C:\Programme\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
C:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\CapMan.exe
C:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\ElogErr.exe
C:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\BROADC~1.EXE
C:\PROGRA~1\SONYER~1\Mobile\MOBILE~1\EPMWOR~1.EXE
C:\PROGRA~1\SONYER~1\Mobile\CONNEC~1\SCRFS.exe
C:\Programme\Microsoft Office\Office10\OUTLOOK.EXE
C:\Programme\Mozilla Firefox\firefox.exe
C:\PROGRA~1\SONYER~1\Mobile\SYNCIN~1.EXE
C:\Dokumente und Einstellungen\Frommelt\Desktop\HijackThis.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Programme\Gemeinsame Dateien\Symantec Shared\NMAIN.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/index.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://de.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://de.rd.yahoo.com/customize/ie/defaults/su/msgr7/*http://de.search.yahoo.com
F1 - win.ini: run=c:\windows\system32\scopedll.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programme\Gemeinsame Dateien\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Programme\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: RX Toolbar - {25D8BACF-3DE2-4B48-AE22-D659B8D835B0} - C:\Programme\RXToolBar\RXToolBar.dll (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Programme\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Programme\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKLM\..\Run: [PCTVOICE] pctspk.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Mscnt] c:\windows\system32\mscnt.exe /nocomm
O4 - HKLM\..\Run: [CertReg] C:\Programme\Gemeinsame Dateien\Gemplus\CertReg\certreg.exe
O4 - HKLM\..\Run: [mmtask] C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Programme\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Programme\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CertificateRegistration] SafeSignCertReg.exe
O4 - HKLM\..\Run: [Qtime] C:\WINDOWS\shch.exe /i
O4 - HKLM\..\Run: [gaSrv] C:\WINDOWS\gaSrv.exe
O4 - HKLM\..\Run: [QuTie Task] C:\WINDOWS\qtsk.exe
O4 - HKLM\..\Run: [IdkbHqtsk.exe] C:\WINDOWS\IdkbHqtsk.exe
O4 - HKLM\..\Run: [hPJChqtsk.exe] C:\WINDOWS\hPJChqtsk.exe
O4 - HKLM\..\Run: [BklFTqtsk.exe] C:\WINDOWS\BklFTqtsk.exe
O4 - HKLM\..\Run: [dBladqtsk.exe] C:\WINDOWS\dBladqtsk.exe
O4 - HKLM\..\Run: [LvEmsgaSrv.exe] C:\WINDOWS\LvEmsgaSrv.exe
O4 - HKLM\..\Run: [tKVKZrelsd.exe] C:\WINDOWS\tKVKZrelsd.exe
O4 - HKLM\..\Run: [wcaetgaSrv.exe] C:\WINDOWS\wcaetgaSrv.exe
O4 - HKLM\..\Run: [JLgfTrelsd.exe] C:\WINDOWS\JLgfTrelsd.exe
O4 - HKLM\..\Run: [InrTZqtsk.exe] C:\WINDOWS\InrTZqtsk.exe
O4 - HKLM\..\Run: [YILBGqtsk.exe] C:\WINDOWS\YILBGqtsk.exe
O4 - HKLM\..\Run: [JqjjTrelsd.exe] C:\WINDOWS\JqjjTrelsd.exe
O4 - HKLM\..\Run: [kfiOJgaSrv.exe] C:\WINDOWS\kfiOJgaSrv.exe
O4 - HKLM\..\Run: [ngEqerelsd.exe] C:\WINDOWS\ngEqerelsd.exe
O4 - HKLM\..\Run: [IfLPagaSrv.exe] C:\WINDOWS\IfLPagaSrv.exe
O4 - HKLM\..\Run: [LPxqPgaSrv.exe] C:\WINDOWS\LPxqPgaSrv.exe
O4 - HKLM\..\Run: [EEWxLgaSrv.exe] C:\WINDOWS\EEWxLgaSrv.exe
O4 - HKLM\..\Run: [rPjqfrelsd.exe] C:\WINDOWS\rPjqfrelsd.exe
O4 - HKLM\..\Run: [udKwNgaSrv.exe] C:\WINDOWS\udKwNgaSrv.exe
O4 - HKLM\..\Run: [ieeXiqtsk.exe] C:\WINDOWS\ieeXiqtsk.exe
O4 - HKLM\..\Run: [ZEUNUrelsd.exe] C:\WINDOWS\ZEUNUrelsd.exe
O4 - HKLM\..\Run: [mOPhlrelsd.exe] C:\WINDOWS\mOPhlrelsd.exe
O4 - HKLM\..\Run: [HEGNeqtsk.exe] C:\WINDOWS\HEGNeqtsk.exe
O4 - HKLM\..\Run: [lGAubrelsd.exe] C:\WINDOWS\lGAubrelsd.exe
O4 - HKLM\..\Run: [vXEvfqtsk.exe] C:\WINDOWS\vXEvfqtsk.exe
O4 - HKLM\..\Run: [wIRlHgaSrv.exe] C:\WINDOWS\wIRlHgaSrv.exe
O4 - HKLM\..\Run: [XvlNPgaSrv.exe] C:\WINDOWS\XvlNPgaSrv.exe
O4 - HKLM\..\Run: [ykScDgaSrv.exe] C:\WINDOWS\ykScDgaSrv.exe
O4 - HKLM\..\Run: [PSQFXrelsd.exe] C:\WINDOWS\PSQFXrelsd.exe
O4 - HKLM\..\Run: [qPqTTqtsk.exe] C:\WINDOWS\qPqTTqtsk.exe
O4 - HKLM\..\Run: [CbbCsrelsd.exe] C:\WINDOWS\CbbCsrelsd.exe
O4 - HKLM\..\Run: [faRmTrelsd.exe] C:\WINDOWS\faRmTrelsd.exe
O4 - HKLM\..\Run: [gsuRsrelsd.exe] C:\WINDOWS\gsuRsrelsd.exe
O4 - HKLM\..\Run: [paCuIrelsd.exe] C:\WINDOWS\paCuIrelsd.exe
O4 - HKLM\..\Run: [FEWkJqtsk.exe] C:\WINDOWS\FEWkJqtsk.exe
O4 - HKLM\..\Run: [CWqpqrelsd.exe] C:\WINDOWS\CWqpqrelsd.exe
O4 - HKLM\..\Run: [pZtbarelsd.exe] C:\WINDOWS\pZtbarelsd.exe
O4 - HKLM\..\Run: [bJPYMrelsd.exe] C:\WINDOWS\bJPYMrelsd.exe
O4 - HKLM\..\Run: [CtLRrgaSrv.exe] C:\WINDOWS\CtLRrgaSrv.exe
O4 - HKLM\..\Run: [rJBfcqtsk.exe] C:\WINDOWS\rJBfcqtsk.exe
O4 - HKLM\..\Run: [dbGVHqtsk.exe] C:\WINDOWS\dbGVHqtsk.exe
O4 - HKLM\..\Run: [EFXfsrelsd.exe] C:\WINDOWS\EFXfsrelsd.exe
O4 - HKLM\..\Run: [XTinGqtsk.exe] C:\WINDOWS\XTinGqtsk.exe
O4 - HKLM\..\Run: [TulxGqtsk.exe] C:\WINDOWS\TulxGqtsk.exe
O4 - HKLM\..\Run: [IfonEgaSrv.exe] C:\WINDOWS\IfonEgaSrv.exe
O4 - HKLM\..\Run: [dHnferelsd.exe] C:\WINDOWS\dHnferelsd.exe
O4 - HKLM\..\Run: [GmmMSgaSrv.exe] C:\WINDOWS\GmmMSgaSrv.exe
O4 - HKLM\..\Run: [akephgaSrv.exe] C:\WINDOWS\akephgaSrv.exe
O4 - HKLM\..\Run: [TjrfJqtsk.exe] C:\WINDOWS\TjrfJqtsk.exe
O4 - HKLM\..\Run: [fnCpDrelsd.exe] C:\WINDOWS\fnCpDrelsd.exe
O4 - HKLM\..\Run: [uwyfHrelsd.exe] C:\WINDOWS\uwyfHrelsd.exe
O4 - HKLM\..\Run: [SVEdigaSrv.exe] C:\WINDOWS\SVEdigaSrv.exe
O4 - HKLM\..\Run: [KUcmbgaSrv.exe] C:\WINDOWS\KUcmbgaSrv.exe
O4 - HKLM\..\Run: [aePKsgaSrv.exe] C:\WINDOWS\aePKsgaSrv.exe
O4 - HKLM\..\Run: [GOLLXrelsd.exe] C:\WINDOWS\GOLLXrelsd.exe
O4 - HKLM\..\Run: [Fwcdsrelsd.exe] C:\WINDOWS\Fwcdsrelsd.exe
O4 - HKLM\..\Run: [dNymTqtsk.exe] C:\WINDOWS\dNymTqtsk.exe
O4 - HKLM\..\Run: [adwBGrelsd.exe] C:\WINDOWS\adwBGrelsd.exe
O4 - HKLM\..\Run: [ApaYaqtsk.exe] C:\WINDOWS\ApaYaqtsk.exe
O4 - HKLM\..\Run: [VdiBSgaSrv.exe] C:\WINDOWS\VdiBSgaSrv.exe
O4 - HKLM\..\Run: [IVFZBrelsd.exe] C:\WINDOWS\IVFZBrelsd.exe
O4 - HKLM\..\Run: [GYOadrelsd.exe] C:\WINDOWS\GYOadrelsd.exe
O4 - HKLM\..\Run: [QEGAWqtsk.exe] C:\WINDOWS\QEGAWqtsk.exe
O4 - HKLM\..\Run: [ftGcIqtsk.exe] C:\WINDOWS\ftGcIqtsk.exe
O4 - HKLM\..\Run: [EeZYVrelsd.exe] C:\WINDOWS\EeZYVrelsd.exe
O4 - HKLM\..\Run: [FOFsbqtsk.exe] C:\WINDOWS\FOFsbqtsk.exe
O4 - HKLM\..\Run: [gLUderelsd.exe] C:\WINDOWS\gLUderelsd.exe
O4 - HKLM\..\Run: [KcdFMrelsd.exe] C:\WINDOWS\KcdFMrelsd.exe
O4 - HKLM\..\Run: [IJZuaqtsk.exe] C:\WINDOWS\IJZuaqtsk.exe
O4 - HKLM\..\Run: [TCeFPqtsk.exe] C:\WINDOWS\TCeFPqtsk.exe
O4 - HKLM\..\Run: [uWpiYrelsd.exe] C:\WINDOWS\uWpiYrelsd.exe
O4 - HKLM\..\Run: [uecNsgaSrv.exe] C:\WINDOWS\uecNsgaSrv.exe
O4 - HKLM\..\Run: [pBOlwgaSrv.exe] C:\WINDOWS\pBOlwgaSrv.exe
O4 - HKLM\..\Run: [hHhvegaSrv.exe] C:\WINDOWS\hHhvegaSrv.exe
O4 - HKLM\..\Run: [fFEDWgaSrv.exe] C:\WINDOWS\fFEDWgaSrv.exe
O4 - HKLM\..\Run: [aordjrelsd.exe] C:\WINDOWS\aordjrelsd.exe
O4 - HKLM\..\Run: [cgGDagaSrv.exe] C:\WINDOWS\cgGDagaSrv.exe
O4 - HKLM\..\Run: [hCpuOrelsd.exe] C:\WINDOWS\hCpuOrelsd.exe
O4 - HKLM\..\Run: [fYpbWgaSrv.exe] C:\WINDOWS\fYpbWgaSrv.exe
O4 - HKLM\..\Run: [PPwuGrelsd.exe] C:\WINDOWS\PPwuGrelsd.exe
O4 - HKLM\..\Run: [ccqNdqtsk.exe] C:\WINDOWS\ccqNdqtsk.exe
O4 - HKLM\..\Run: [HnbeNrelsd.exe] C:\WINDOWS\HnbeNrelsd.exe
O4 - HKLM\..\Run: [CvWCirelsd.exe] C:\WINDOWS\CvWCirelsd.exe
O4 - HKLM\..\Run: [ObpvagaSrv.exe] C:\WINDOWS\ObpvagaSrv.exe
O4 - HKLM\..\Run: [rbnCcgaSrv.exe] C:\WINDOWS\rbnCcgaSrv.exe
O4 - HKLM\..\Run: [DNwRsqtsk.exe] C:\WINDOWS\DNwRsqtsk.exe
O4 - HKLM\..\Run: [ZoCCagaSrv.exe] C:\WINDOWS\ZoCCagaSrv.exe
O4 - HKLM\..\Run: [BbtiHgaSrv.exe] C:\WINDOWS\BbtiHgaSrv.exe
O4 - HKLM\..\Run: [NogBorelsd.exe] C:\WINDOWS\NogBorelsd.exe
O4 - HKLM\..\Run: [vdWjHrelsd.exe] C:\WINDOWS\vdWjHrelsd.exe
O4 - HKLM\..\Run: [UnbsggaSrv.exe] C:\WINDOWS\UnbsggaSrv.exe
O4 - HKLM\..\Run: [bvqIHrelsd.exe] C:\WINDOWS\bvqIHrelsd.exe
O4 - HKLM\..\Run: [bcxkPqtsk.exe] C:\WINDOWS\bcxkPqtsk.exe
O4 - HKLM\..\Run: [iJnadgaSrv.exe] C:\WINDOWS\iJnadgaSrv.exe
O4 - HKLM\..\Run: [mVvWHqtsk.exe] C:\WINDOWS\mVvWHqtsk.exe
O4 - HKLM\..\Run: [FXbPGrelsd.exe] C:\WINDOWS\FXbPGrelsd.exe
O4 - HKLM\..\Run: [cbmZcqtsk.exe] C:\WINDOWS\cbmZcqtsk.exe
O4 - HKLM\..\Run: [NBdPHqtsk.exe] C:\WINDOWS\NBdPHqtsk.exe
O4 - HKLM\..\Run: [wFCnigaSrv.exe] C:\WINDOWS\wFCnigaSrv.exe
O4 - HKLM\..\Run: [sZoxmgaSrv.exe] C:\WINDOWS\sZoxmgaSrv.exe
O4 - HKLM\..\Run: [uDywGqtsk.exe] C:\WINDOWS\uDywGqtsk.exe
O4 - HKLM\..\Run: [DBwhwrelsd.exe] C:\WINDOWS\DBwhwrelsd.exe
O4 - HKLM\..\Run: [aUZVGqtsk.exe] C:\WINDOWS\aUZVGqtsk.exe
O4 - HKLM\..\Run: [plGDHrelsd.exe] C:\WINDOWS\plGDHrelsd.exe
O4 - HKLM\..\Run: [SAxFOgaSrv.exe] C:\WINDOWS\SAxFOgaSrv.exe
O4 - HKLM\..\Run: [CicDeqtsk.exe] C:\WINDOWS\CicDeqtsk.exe
O4 - HKLM\..\Run: [XNcakgaSrv.exe] C:\WINDOWS\XNcakgaSrv.exe
O4 - HKLM\..\Run: [ZOqEGqtsk.exe] C:\WINDOWS\ZOqEGqtsk.exe
O4 - HKLM\..\Run: [duqrwqtsk.exe] C:\WINDOWS\duqrwqtsk.exe
O4 - HKLM\..\Run: [dIbLAqtsk.exe] C:\WINDOWS\dIbLAqtsk.exe
O4 - HKLM\..\Run: [FHxruqtsk.exe] C:\WINDOWS\FHxruqtsk.exe
O4 - HKLM\..\Run: [Wjllcrelsd.exe] C:\WINDOWS\Wjllcrelsd.exe
O4 - HKLM\..\Run: [ZsLeAgaSrv.exe] C:\WINDOWS\ZsLeAgaSrv.exe
O4 - HKLM\..\Run: [gaSrve] C:\WINDOWS\gaSrve.exe
O4 - HKLM\..\Run: [HNwACramex.exe] C:\WINDOWS\HNwACramex.exe
O4 - HKLM\..\Run: [cfCPerestun.exe] C:\WINDOWS\cfCPerestun.exe
O4 - HKLM\..\Run: [dqRUmramex.exe] C:\WINDOWS\dqRUmramex.exe
O4 - HKLM\..\Run: [esvmcramex.exe] C:\WINDOWS\esvmcramex.exe
O4 - HKLM\..\Run: [MpfRwrestun.exe] C:\WINDOWS\MpfRwrestun.exe
O4 - HKLM\..\Run: [vLAfarestun.exe] C:\WINDOWS\vLAfarestun.exe
O4 - HKLM\..\Run: [aBVDprestun.exe] C:\WINDOWS\aBVDprestun.exe
O4 - HKLM\..\Run: [cwsLPgaSrve.exe] C:\WINDOWS\cwsLPgaSrve.exe
O4 - HKLM\..\Run: [uMwJegaSrve.exe] C:\WINDOWS\uMwJegaSrve.exe
O4 - HKLM\..\Run: [AnbBFgaSrve.exe] C:\WINDOWS\AnbBFgaSrve.exe
O4 - HKLM\..\Run: [uoIVkrestun.exe] C:\WINDOWS\uoIVkrestun.exe
O4 - HKLM\..\Run: [HtXbWramex.exe] C:\WINDOWS\HtXbWramex.exe
O4 - HKLM\..\Run: [CPYtXgaSrve.exe] C:\WINDOWS\CPYtXgaSrve.exe
O4 - HKLM\..\Run: [EbXpjramex.exe] C:\WINDOWS\EbXpjramex.exe
O4 - HKLM\..\Run: [LaAHKgaSrve.exe] C:\WINDOWS\LaAHKgaSrve.exe
O4 - HKLM\..\Run: [HEdXKrestun.exe] C:\WINDOWS\HEdXKrestun.exe
O4 - HKLM\..\Run: [EISXGgaSrve.exe] C:\WINDOWS\EISXGgaSrve.exe
O4 - HKLM\..\Run: [YqWperestun.exe] C:\WINDOWS\YqWperestun.exe
O4 - HKLM\..\Run: [fCYIhramex.exe] C:\WINDOWS\fCYIhramex.exe
O4 - HKLM\..\Run: [cMxcerestun.exe] C:\WINDOWS\cMxcerestun.exe
O4 - HKLM\..\Run: [CCiQArestun.exe] C:\WINDOWS\CCiQArestun.exe
O4 - HKLM\..\Run: [HGcPugaSrve.exe] C:\WINDOWS\HGcPugaSrve.exe
O4 - HKLM\..\Run: [gIGQtgaSrve.exe] C:\WINDOWS\gIGQtgaSrve.exe
O4 - HKLM\..\Run: [bdlpHrestun.exe] C:\WINDOWS\bdlpHrestun.exe
O4 - HKLM\..\Run: [UhEkAgaSrve.exe] C:\WINDOWS\UhEkAgaSrve.exe
O4 - HKLM\..\Run: [XfgpJrestun.exe] C:\WINDOWS\XfgpJrestun.exe
O4 - HKLM\..\Run: [dtUJjgaSrve.exe] C:\WINDOWS\dtUJjgaSrve.exe
O4 - HKLM\..\Run: [DqxrDgaSrve.exe] C:\WINDOWS\DqxrDgaSrve.exe
O4 - HKLM\..\Run: [ivjnfgaSrve.exe] C:\WINDOWS\ivjnfgaSrve.exe
O4 - HKLM\..\Run: [FhCQFgaSrve.exe] C:\WINDOWS\FhCQFgaSrve.exe
O4 - HKLM\..\Run: [XM2002] C:\Programme\IPPS\XM2002®\XM2002.exe -auto
O4 - HKLM\..\Run: [QQdacrestun.exe] C:\WINDOWS\QQdacrestun.exe
O4 - HKLM\..\Run: [tpfIJramex.exe] C:\WINDOWS\tpfIJramex.exe
O4 - HKLM\..\Run: [MebbGramex.exe] C:\WINDOWS\MebbGramex.exe
O4 - HKLM\..\Run: [winupdates] C:\Programme\winupdates\winupdates.exe /auto
O4 - HKLM\..\Run: [FXKYA2] "C:\DOKUME~1\Frommelt\LOKALE~1\Temp\cxtpls_loader.exe" /PC=CP.IST2 /SHUN /UNAR="/CTUN"
O4 - HKLM\..\Run: [VolControlo] C:\WINDOWS\volumeco.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MMTray] C:\Programme\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [Timer] C:\WINDOWS\msncomm.exe /i
O4 - HKLM\..\Run: [URLLSTCK.exe] C:\Programme\Norton Internet Security\UrlLstCk.exe
O4 - HKLM\..\Run: [SSC_UserPrompt] "C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\UsrPrmpt.exe"
O4 - HKLM\..\Run: [IS CfgWiz] C:\Programme\Norton Internet Security\cfgwiz.exe /GUID {F073BDC9-0D67-4ff0-879E-27241C843828} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [VolControl] C:\WINDOWS\volumec.exe -i
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Programme\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Programme\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Telefonverbindungsmonitor.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programme\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Programme\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Konsole (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: ICQ Lite (HKLM)
O9 - Extra 'Tools' menuitem: ICQ Lite (HKLM)
O9 - Extra button: XM2002® (HKLM)
O9 - Extra 'Tools' menuitem: &XM2002® (HKLM)
O12 - Plugin for .spop: C:\Programme\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {1B51CC54-F369-460B-9184-22D51ABCF807} (empfaenger Element) - http://www.privat-akt.com/download/empfaengerProj1.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programme\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6A1A95BF-0905-4D89-82C0-31CBBFC09858}: NameServer = 217.173.225.2 217.173.238.10
O17 - HKLM\System\CS1\Services\Tcpip\..\{6A1A95BF-0905-4D89-82C0-31CBBFC09858}: NameServer = 217.173.225.2 217.173.238.10