Trojaner-Board - WinAntiVir Pro Icon in der Systemleiste zum 2ten

Hallo miteinander!
Ich scheine das selbe Problem zu haben wie "Siam", ein rotes icon mit einem ausrufezeichen in der Systemleiste, siehe bild. wenn man draufklickt erscheint ein werbe pop-up siehe bild 2.
Ich hab die anderen threads durchgelesen sowie gegoogelt und die tipps befolgt aber nichts hat funktioniert..
Weder (Norton), eScan, AVG Anti Spyware, Spybot noch CCleaner haben geholfen!

Keine Ahnung was ich nich ausprobieren soll, für eure hilfe wär ich echt dankbar!

http://img217.imageshack.us/img217/3395/sec1as2.th.jpg

http://img117.imageshack.us/img117/3082/sec2sv3.th.jpg
Code:


Logfile of HijackThis v1.99.1

Scan saved at 19:26:15, on 12.11.2006

Platform: Windows XP  (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2600.0000)
 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Programme\Sygate\SPF\Smc.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\Bases_X\TRAYSSER.EXE

C:\WINDOWS\system32\HPConfig.exe

C:\Bases_X\avpm.exe

C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE

C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWAgent.exe

C:\Programme\Norton SystemWorks\Norton Utilities\NPROTECT.EXE

C:\WINDOWS\system32\RadioSvr.exe

C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe

C:\WINDOWS\System32\svchost.exe

C:\Programme\Norton SystemWorks\Norton AntiVirus\navapsvc.exe

C:\WINDOWS\Explorer.EXE

C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe

C:\WINDOWS\system32\dla\tfswctrl.exe

C:\Programme\Synaptics\SynTP\SynTPEnh.exe

C:\Programme\Synaptics\SynTP\SynTPLpr.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\PROGRA~1\HEWLET~1\ONE-TO~1\OneTouch.EXE

C:\Programme\Hewlett-Packard\HP Notebook Utilities\hptasks.exe

C:\WINDOWS\essspk.exe

C:\WINDOWS\System32\atiptaxx.exe

C:\Programme\Java\j2re1.4.2_03\bin\jusched.exe

C:\Programme\QuickTime\qttask.exe

C:\Bases_X\TRAYICOS.EXE

C:\Bases_X\AVPMWrap.EXE

C:\Bases_X\MAILDISP.EXE

C:\Bases_X\MAILSCAN.EXE

C:\BASES_X\SPOOLER.EXE

C:\Bases_X\kavss.exe

C:\Bases_X\AvpM.exe

C:\Programme\Grisoft\AVG Anti-Spyware 7.5\avgas.exe

C:\Programme\Messenger\msmsgs.exe

C:\WINDOWS\System32\ctfmon.exe

C:\Programme\MSN Messenger\MsnMsgr.Exe

C:\Programme\Sony Corporation\Image Transfer\SonyTray.exe

C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe

C:\Dokumente und Einstellungen\All Users\Dokumente\HijackThis.exe
 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ch/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/info/dehomepage-o

F1 - win.ini: run=info32.exe

O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programme\Norton SystemWorks\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar3.dll

O4 - HKLM\..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe -osboot

O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui

O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe

O4 - HKLM\..\Run: [HPPresentationReady] C:\Programme\Hewlett-Packard\HP Presentation Ready\PresRdy.exe -r

O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [KPDRV4XP] C:\PROGRA~1\HEWLET~1\ONE-TO~1\KPDrv4Xp.exe

O4 - HKLM\..\Run: [CP4HPOT] C:\PROGRA~1\HEWLET~1\ONE-TO~1\OneTouch.EXE

O4 - HKLM\..\Run: [HP Display Settings] C:\Programme\Hewlett-Packard\HP Notebook Utilities\hptasks.exe /s

O4 - HKLM\..\Run: [HP TV Now] C:\Programme\Hewlett-Packard\HP TV Now\HpTvNow.exe /RK

O4 - HKLM\..\Run: [EssSpkPhone] essspk.exe

O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe

O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe

O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\j2re1.4.2_03\bin\jusched.exe

O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer

O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\UsrPrmpt.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [CTDrive] rundll32.exe C:\WINDOWS\System32\drvgij.dll,startup

O4 - HKLM\..\Run: [MailScan Dispatcher] "C:\Bases_X\LAUNCH.EXE"

O4 - HKLM\..\Run: [eScan Updater] C:\Bases_X\TRAYICOS.EXE /App

O4 - HKLM\..\Run: [eScan Monitor] C:\Bases_X\AVPMWrap.EXE

O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programme\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized

O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Image Transfer.lnk = ?

O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll

O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll

O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Programme\Yahoo!\Messenger\YahooMessenger.exe

O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Programme\Yahoo!\Messenger\YahooMessenger.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\mwtsp.dll

O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com/info/dehomepage-o

O16 - DPF: {22E5D91F-89E6-4405-AD9C-0AF27BA6F06B} (HidInputMonitorX Control) - file://E:\components\hidinputmonitorx.ocx

O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://apple.speedera.net/qtinstall.info.apple.com/sikes/de/win/QuickTimeInstaller.exe

O16 - DPF: {7030CC6C-1A88-4591-BB5A-651B9F7F0C30} (WMVHDRatingCtrl Class) - file://E:\components\wmvhdrating.ocx

O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab

O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (i-m Music Manager) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB

O19 - User stylesheet: C:\WINDOWS\Web\win.def (file missing)

O19 - User stylesheet: C:\WINDOWS\default.css (file missing) (HKLM)

O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Programme\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: eScan Server-Updater (eScan-trayicos) - MicroWorld Technologies Inc. - C:\Bases_X\TRAYSSER.EXE

O23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe

O23 - Service: HP RF Device Service (HpRfDev) - Hewlett-Packard - C:\WINDOWS\system32\HpRfDev.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: eScan Monitor Service (KAVMonitorService) - Kaspersky Labs. - C:\Bases_X\avpm.exe

O23 - Service: MWAgent - MicroWorld Technologies Inc. - C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE

O23 - Service: Norton AntiVirus Auto-Protect-Dienst (navapsvc) - Symantec Corporation - C:\Programme\Norton SystemWorks\Norton AntiVirus\navapsvc.exe

O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Programme\Norton SystemWorks\Norton Utilities\NPROTECT.EXE

O23 - Service: RadioSvr - Hewlett-Packard - C:\WINDOWS\system32\RadioSvr.exe

O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\GEMEIN~1\SYMANT~1\SCRIPT~1\SBServ.exe

O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Programme\Sygate\SPF\Smc.exe

O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe

O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programme\Gemeinsame Dateien\Symantec Shared\Security Center\SymWSC.exe