Trojaner-Board - Hilfe bei Logfile Auswertung

Hallo zusammen.
Habe mir diese Woche wie viele Andere auch den Virus mit den Bugs und dem blauen Desktop eingefangen. Taskmanager deaktiviert und Sys. Wiederherstellungspunkte gelöscht etc.. Meine Freundin hat das alles in 15 h wieder hingebekommen nur ich trau dem Braten nicht ganz. Wollte jetzt mein Logfile selber auswerten, ist aber doch ein bischen zu kompliziert. Könnt ihr mir da bitte weiter helfen. Hier ist mein Logfile:
Code:
Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 13:10:55, on 08.06.2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16574)

Boot mode: Normal
 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\System32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Programme\TuneUp Utilities 2006\WinStylerThemeSvc.exe

C:\WINDOWS\System32\svchost.exe

C:\Programme\Intel\Wireless\Bin\EvtEng.exe

C:\Programme\Intel\Wireless\Bin\S24EvMon.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\WINDOWS\system32\netdde.exe

C:\Acer\eManager\anbmServ.exe

C:\PROGRA~1\ANSYSI~1\SHARED~1\LICENS~1\Intel\lmgrd.exe

C:\PROGRA~1\ANSYSI~1\SHARED~1\LICENS~1\Intel\lmgrd.exe

C:\Programme\Gemeinsame Dateien\Apple\Mobile Device 
 

Support\bin\AppleMobileDeviceService.exe

C:\Programme\Cisco Systems\VPN Client\cvpnd.exe

C:\Programme\ANSYS Inc\v110\RSM\bin\JobManagerService.exe

C:\PROGRA~1\ANSYSI~1\SHARED~1\LICENS~1\Intel\ansyslmd.exe

C:\WINDOWS\System32\lkcitdl.exe

C:\WINDOWS\System32\lkads.exe

C:\WINDOWS\System32\lktsrv.exe

C:\Programme\Intel\Wireless\Bin\ZcfgSvc.exe

C:\Programme\National Instruments\MAX\nimxs.exe

C:\Programme\National Instruments\Shared\Security\nidmsrv.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe

C:\WINDOWS\System32\nisvcloc.exe

C:\Programme\National Instruments\Shared\Tagger\tagsrv.exe

C:\Programme\Intel\Wireless\Bin\OProtSvc.exe

C:\Programme\Intel\Wireless\Bin\RegSrvc.exe

C:\Programme\ANSYS Inc\v110\RSM\bin\ScriptHostService.exe

C:\Programme\Synaptics\SynTP\SynTPLpr.exe

C:\Programme\Synaptics\SynTP\SynTPEnh.exe

C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe

C:\Programme\Intel\Wireless\Bin\EOUWiz.exe

C:\WINDOWS\System32\LVCOMSX.EXE

C:\Programme\Winamp\winampa.exe

C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe

C:\Programme\Ashampoo\Ashampoo FireWall\FireWall.exe

C:\WINDOWS\System32\svchost.exe

C:\Programme\UGS\UGSLicensing\lmgrd.exe

C:\Programme\UGS\UGSLicensing\lmgrd.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Programme\UGS\UGSLicensing\ugslmd.exe

C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe

C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\Programme\Microsoft Office\OFFICE11\OUTLOOK.EXE

C:\Programme\Microsoft Office\OFFICE11\WINWORD.EXE

C:\Programme\Internet Explorer\IEXPLORE.EXE

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Dokumente und Einstellungen\meinname\Desktop\HJthis\HiJackThis.exe

C:\WINDOWS\System32\wbem\wmiprvse.exe
 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
 

h**p://www.google.de/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
 

h**p://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
 

h**p://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
 

h**p://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
 

h**p://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} 
 

- C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: (no name) - {10B5E5C2-8901-4E3C-BF61-AC6E11039292} - (no file)

O2 - BHO: (no name) - {169CC550-3BD4-4D34-B5FB-0BF2ED8EFCF9} - (no file)

O2 - BHO: Flash Module - {669CFA6D-450B-4d88-A9D7-D2371E845370} - btaskv.dll 
 

(file missing)

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - 
 

C:\Programme\Java\jre1.6.0_02\bin\ssv.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-
 

0445EE161910} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - 
 

C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O4 - HKLM\..\Run: [LaunchApp] Alaunch

O4 - HKLM\..\Run: [SynTPLpr] C:\Programme\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [SynTPEnh] C:\Programme\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32
 

\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE 
 

/IMEName

O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control 
 

Panel\atiptaxx.exe

O4 - HKLM\..\Run: [IntelWireless] C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe 
 

/tf Intel PROSet/Wireless

O4 - HKLM\..\Run: [EOUApp] C:\Programme\Intel\Wireless\Bin\EOUWiz.exe

O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE

O4 - HKLM\..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe

O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Programme\Adobe\Acrobat 7.0
 

\Distillr\Acrotray.exe"

O4 - HKLM\..\Run: [Ashampoo FireWall] "C:\Programme\Ashampoo\Ashampoo 
 

FireWall\FireWall.exe" -TRAY

O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir PersonalEdition 
 

Classic\avgnt.exe" /min

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 
 

'LOKALER DIENST')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 
 

'NETZWERKDIENST')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 
 

'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 
 

'Default user')

O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?

O8 - Extra context menu item: Convert link target to Adobe PDF - 
 

res://C:\Programme\Adobe\Acrobat 7.0
 

\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert link target to existing PDF - 
 

res://C:\Programme\Adobe\Acrobat 7.0
 

\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert selected links to Adobe PDF - 
 

res://C:\Programme\Adobe\Acrobat 7.0
 

\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convert selected links to existing PDF - 
 

res://C:\Programme\Adobe\Acrobat 7.0
 

\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Convert selection to Adobe PDF - 
 

res://C:\Programme\Adobe\Acrobat 7.0
 

\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert selection to existing PDF - 
 

res://C:\Programme\Adobe\Acrobat 7.0
 

\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert to Adobe PDF - 
 

res://C:\Programme\Adobe\Acrobat 7.0
 

\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert to existing PDF - 
 

res://C:\Programme\Adobe\Acrobat 7.0
 

\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Nach Microsoft &Excel exportieren - 
 

res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - 
 

C:\Programme\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-
 

00401C608501} - C:\Programme\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - 
 

C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - 
 

C:\Programme\ICQLite\ICQLite.exe

O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} 
 

- C:\Programme\ICQLite\ICQLite.exe

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - 
 

C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-
 

f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - 
 

C:\Programme\Messenger\msmsgs.exe (file missing)

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-
 

00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing)

O16 - DPF: {A922B6AB-3B87-11D3-B3C2-0008C7DA6CB9} (InetDownload Class) - 
 

h**p://www.arcor.de/vod/dmd/WMDownload.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{A5D165FA-4A55-4859-BAD7-C553DCD1DBDA}: 
 

NameServer = 192.168.122.252,192.168.122.253

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - 
 

C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: ljJDWNHb - ljJDWNHb.dll (file missing)

O20 - Winlogon Notify: WinCtrl32 - WinCtrl32.dll (file missing)

O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame 
 

Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - 
 

C:\Acer\eManager\anbmServ.exe

O23 - Service: ANSYS FLEXlm license manager - Macrovision Corporation - 
 

C:\PROGRA~1\ANSYSI~1\SHARED~1\LICENS~1\Intel\lmgrd.exe

O23 - Service: Avira AntiVir Personal – Free Antivirus Planer 
 

(AntiVirScheduler) - Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition 
 

Classic\sched.exe

O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - 
 

Avira GmbH - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programme\Gemeinsame 
 

Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32
 

\Ati2evxx.exe

O23 - Service: Boonty Games - BOONTY - C:\Programme\Gemeinsame Dateien\BOONTY 
 

Shared\Service\Boonty.exe

O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - 
 

C:\Programme\Cisco Systems\VPN Client\cvpnd.exe

O23 - Service: AVM FRITZ!web Routing Service (de_serv) - AVM Berlin - 
 

C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe

O23 - Service: EvtEng - Intel Corporation - 
 

C:\Programme\Intel\Wireless\Bin\EvtEng.exe

O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - 
 

C:\Programme\iPod\bin\iPodService.exe

O23 - Service: Ansys JobManager Service V11 (JobManagerService110) - Ansys, Inc 
 

- C:\Programme\ANSYS Inc\v110\RSM\bin\JobManagerService.exe

O23 - Service: Lookout Citadel Server (LkCitadelServer) - National Instruments, 
 

Inc. - C:\WINDOWS\System32\lkcitdl.exe

O23 - Service: National Instruments PSP Server Locator (lkClassAds) - National 
 

Instruments, Inc. - C:\WINDOWS\System32\lkads.exe

O23 - Service: National Instruments Time Synchronization (lkTimeSync) - 
 

National Instruments, Inc. - C:\WINDOWS\System32\lktsrv.exe

O23 - Service: Microsoft security update service (msupdate) - Unknown owner - 
 

c:\windows\system32\mssrv32.exe (file missing)

O23 - Service: NI Configuration Manager (mxssvr) - National Instruments 
 

Corporation - C:\Programme\National Instruments\MAX\nimxs.exe

O23 - Service: National Instruments Domain Service (NIDomainService) - National 
 

Instruments, Inc. - C:\Programme\National 
 

Instruments\Shared\Security\nidmsrv.exe

O23 - Service: NILM License Manager - Macrovision Corporation - 
 

C:\Programme\UGS\UGSLicensing\Lmgrd.exe

O23 - Service: NI Service Locator (niSvcLoc) - National Instruments Corp. - 
 

C:\WINDOWS\System32\nisvcloc.exe

O23 - Service: National Instruments Variable Engine (NITaggerService) - 
 

National Instruments, Inc. - C:\Programme\National 
 

Instruments\Shared\Tagger\tagsrv.exe

O23 - Service: OwnershipProtocol - Intel Corporation - 
 

C:\Programme\Intel\Wireless\Bin\OProtSvc.exe

O23 - Service: RegSrvc - Intel Corporation - 
 

C:\Programme\Intel\Wireless\Bin\RegSrvc.exe

O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation  
 

- C:\Programme\Intel\Wireless\Bin\S24EvMon.exe

O23 - Service: Ansys ScriptHost Service V11 (ScriptHostService110) - Ansys, 
 

Inc. - C:\Programme\ANSYS Inc\v110\RSM\bin\ScriptHostService.exe

O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp 
 

Software GmbH - C:\Programme\TuneUp Utilities 2006\WinStylerThemeSvc.exe

O23 - Service: UGS License Server (ugslmd) - Macrovision Corporation - 
 

C:\Programme\UGS\UGSLicensing\lmgrd.exe
 

--

End of file - 12122 bytes
Vielen Dank