Trojaner, Virus??
 

Hi Leute,

Also ich hab jetzt wohl wieder nen neuen Virus aufm PC, der mich noch mehr nervt...

Jedes mal, wenn ich meinen PC neu hochfahre, habe ich 0 BYTE freien Speicherplatz, obwohl ich vor dem Neustart mindestens 200 Mbyte Speicher frei hatte. Wenn ich nun etwas lösche und z.B. wieder 200 MB freien Speicher habe, dauert es etwa eine halbe Stunde bis ich wieder nur 0 Byte freien Speicher hab. Allerdings ist davon nur die Partition C betroffen, auf der ich auch die meisten Dinge installiert habe und die ich am häufigsten benutze.

Kann es sein, dass ich ein Trojaner habe, der dauerhaft aus dem Internet irgendwelche Dateien runterläd, denn bevor ich vorgestern mein Internet hier bekommen habe, hatte ich das Problem nicht.

Edit: Achja ich habe eine 160 Gbyte Festplatte, falls ihr das wissen müsst/wollt, die in C: (65,7 GB), D: (74,6 GB) und E: (65,7 GB) ist.

Bitte helft mir! :heulen:

mfg S0RceReR

Hi,
erstmal ne Frage: Du hast von Deinen 160 Giga nur noch 200MB frei?
Und dann poste mal ein HJT-Logfile rein.
cacatoa

danke schon mal für die antwort!

Nein, ich habe von meinen 65,7 GB auf C: nur noch etwa 200 MB frei, auf D: noch 355 MB und auf E: noch 5,57 GB...

Hier die HiJackThisLogFile:

Logfile of HijackThis v1.99.1
Scan saved at 22:51:35, on 17.10.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Programme\Kaspersky\avpcc.exe
C:\Programme\Kaspersky\avpm.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\htpatch.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\Logitech\MouseWare\system\em_exec.exe
C:\Programme\D-Tools\daemon.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\WINDOWS\System32\p2pnetworking.exe
C:\Programme\winupdates\winupdates.exe
C:\Programme\MsMovies\MsMovies.exe
C:\Programme\iPod\bin\iPodService.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Trillian\trillian.exe
c:\progra~1\intern~1\iexplore.exe
C:\Programme\Steam\Steam.exe
C:\Programme\Mozilla Firefox\firefox.exe
D:\HiJackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.1und1.de/Herzlich_Willkommen/b1/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer bereitgestellt von 1 & 1 Internet AG
F0 - system.ini: Shell=Explorer.exe C:\windows\system32\msiexec16.exe
F1 - win.ini: run=C:\windows\system32\msiexec16.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {C5D0B01A-791A-FC6D-973D-4ADC26E335F9} - C:\DOKUME~1\Lukas\ANWEND~1\OPTION~1\LoudNew.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Steganos Internet Anonym - {00000000-5736-4205-0008-781cd0e19f00} - c:\programme\steganos internet anonym pro 7\siapro7iep.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [winnet] C:\PROGRA~1\COMMON~2\Toolbar\winnet.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [OfficeGuard RegChecker] C:\Programme\Kaspersky\ogrc.exe
O4 - HKLM\..\Run: [AVPCC] C:\Programme\Kaspersky\avpcc.exe /wait
O4 - HKLM\..\Run: [ATIPTA] C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ZUVJYoEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QQ0HTcow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bApGRA1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cYFGYs1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dYpGZ1ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RQ0HR91x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QkVGT51x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QwFGYo1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bI0GTk1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dI0GWoEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dYVJQcov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aEVJVgEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dMFJQsox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cYVGRs1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cUFGZ9Ux] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fgFHVA1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eQFHXsEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QYVJTsov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dEVJY9Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bkVJRwEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fApGW5ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eAFJUA1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YYFHU51w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YAFJVg1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cQVGZ51v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fIFHRkEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZgFHW1ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZEFJSsUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eEpGYs1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cIpHZoEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cYFHUAov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Qg0HZgUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YYpGR1Uw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dYFGX91w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dEVGTA1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QkFHTgow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cYpHSAEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QUFGT51v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cUVHT91v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ewFJYo1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bAVGYAEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZUFGXcUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dMFJQ11w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cYFGW5Uw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QMpGWo1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dUpHY9ow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cMFJRA1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZQVJSoEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bwFJRgUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fIVHRwEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [egFJR51v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bYpHXoUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe

Und der 2. Teil ( hat net reingepasst, war zu groß):

O4 - HKLM\..\Run: [ag0HR51w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ckVGUs1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YkVJWsUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YQ0GXAUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dI0GSA1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dUVHX11w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZQ0GYcov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eEFJY91x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZUVHXk1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fgFGVsov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ak0HVwEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZUVGVs1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dA0GVg1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [agVJVkUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZIFJY1ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dw0GQoov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cI0GZgUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fYpGWwow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fk0HQAEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZEFGUs1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RkFJTkEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QkVGZsox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QUFJYwUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YwFHQw1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dgVJUAox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZUVJVcox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dUVJYk1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YYFGWwUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [akVJYwow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZwFJQwEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QMFHU5Uw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dUpHZ51v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fYFJUwUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dUpHQA1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aMFGWk1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RwpHUsox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fU0HQ1Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QQpGY5ow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QY0HXgUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dQVJSs1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZYFGRgUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZA0HXk1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aEFJQ51w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bMVHUoEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZEFGSgov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programme\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [RApHQ5Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ag0GZoUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZIFHVoov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bEFHYgEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YAVHTAox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fUFJWs1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aYFHYg1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cEpGQ51x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RgFJX91x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Zg0HZAEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YEpGVw1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aIVGRk1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YkFJTgUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [REVGY1ow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RIVHQ51w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fQFGY1Ew] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cEVHU9Uw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dwFHX11w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eQVHXsov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YIFJWoov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [YQ0HToox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YUVGYg1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cIVHS9ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZQ0HR9Ux] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [ZEVJUk1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bw0HW5ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cQVGSgEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bwpGR51x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fMVHZsEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bYVJVcox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QQ0GXAUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YE0HXwox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fQ0GZc1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fgFJVw1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RMFJUkow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QU0GQ5Uw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YkVJYwow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aEVJQgov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QIVHWc1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YMVGZkow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ekVGWAox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QMVHVgEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Yg0GZkUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bk0HRcov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bkpGX91v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fE0GW11w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RApHV1ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YUFHRoUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZkVJS1Uw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RMVHVkUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bUFHYoox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dM0HXk1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cE0GWkUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eI0GU1Uw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RQpHVAov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RgpGTo1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fw0HYc1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bM0HToox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fQVHTwEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RkpHTo1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fEpGUsUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ek0HYsUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QQpGRgow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QYFGW11x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fk0GTwEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fE0GWA1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aEFHW91x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aQpHT9Ux] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fQ0HS9ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cA0HSoUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eEVHVgUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [akpHSAUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eEFJWwUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eM0HQg1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Qk0GXcow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eUFHT51v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cEFJR1ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QgpGQ5Ux] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eY0HQ1Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dUFJYk1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eYVJT91w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QgFGZkow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eY0GWwow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cg0HX5Ux] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aMVGSo1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Zk0HZw1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bg0HUc1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QY0HVg1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [awVGRo1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fAFGUs1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bg0GQ5Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YwVHWg1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZgFGXsUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZMVJVgUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ckVJUwUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bQFHRcow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Yw0GR9Ew] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eMpHTg1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZQ0HTA1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QwVJRsEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fI0GW5Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QEVGVwov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ekpHWoow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [egFHWg1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YYFHW9Uw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YYFJR51x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aAVGXoEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cUFHVkUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ekFJYoox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [agVGR51w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eAVHS5Ew] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RQFGYoUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YQFHRcUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eEpHQoow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fMpHVcUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Zk0HYcEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZwpGVw1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bE0GS51w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QI0GWsEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RwVHT51w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe

Und der 3. Teil^^:

O4 - HKLM\..\Run: [aUVGScov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RQVGZg1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YYVHUcEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bE0HYgEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Yk0HQAEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RMFGT51v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bAVGS5Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QkFJQkow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fQVGZ9ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YwFHWoUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RM0HYsov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YIpGW9ow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aQVGYkEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ekFHSc1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eUpHT5ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZIpHZ5Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YQVGY91w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [akVGX11v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YYFHWg1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RkVHYcUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YU0GZAEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [REFJYs1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZUVJT91w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cYFJXcov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QMVHQgEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RkpHSwox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eAVHSsEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cU0HZ91w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZA0GU1Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YYpGXsEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aU0HVgov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fEFGWsEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZMFHR11x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bUpGQw1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aIVGW1Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dgpHRs1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dMFJRwox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fw0GV9Uw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YgVGY9ow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eApGToov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aYpHUcov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YwpHSAox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dU0HYoEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bwpGRAEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZA0HXkUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ckVJQAEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QgpGQo1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cAVHQ5Uw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aIFJU91x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cYVHQc1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RgpHYAEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fYpGVgow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RE0GSo1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eQVHWs1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZQFJToow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QkFHUsUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aIpGVgUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aMVGY5ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aI0GQs1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YIFGUoov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eYVGQwox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZwpHWkEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fw0GQg1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZUpHZ9ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fM0GYg1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bgFGQcow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YQpHXwow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZwVHS1Ew] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QAFGUoox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aUFGZkox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cAVGZk1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YEpHQA1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ckpHU51w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YI0HQsox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dMFJS1Ew] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YY0GU5ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bg0GVsUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bwFGZ11x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bA0HToUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YEpGUg1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZgFGWw1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aQVGUkow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cg0GS1ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eYVJZw1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cI0HR91v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cQFHY91w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eYFGR11v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RgFJU51v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bkFHQwov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Qw0GYoox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fg0GZk1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YYVGV11v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ckpGQwov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bIFGZAUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eM0GX5ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fEVJYkUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dEFHS11v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cUFJY51w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aM0HU1ow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bgpHYgUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bIFGVsUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZQ0GS5Ux] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bIpGXoow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dAFGUoUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RMpGZkEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eYVJQ1Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YgpGYA1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fgFHScow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YgpGZ5ow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YA0HYsUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QwpHX1Uw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe

Und der 4. und LETZTE Teil:

O4 - HKLM\..\Run: [YAFHQsUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YM0GYo1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZUVGZwov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aE0HS51v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RE0HS11v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cUFJQoUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QgpGZg1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RQpGVoEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fAFHSA1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dwFHUs1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QkpGVkov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fQVGRk1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fAFJYs1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RAVJQwUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aAFHQ91x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RA0GUc1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YMFJX1ow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [aApHXs1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aMFJZ9ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cIFJZAEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YkpGScow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YYVGZwUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [REFHToUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QQFHW5ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RQpGW1Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dwpGSwow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cI0HWoow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eYFGZcov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fMFGT5ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [winupdate] C:\Programme\winupdate\winupdate.exe /auto
O4 - HKLM\..\Run: [p2pnetworking] p2pnetworking.exe
O4 - HKLM\..\Run: [winupdates] C:\Programme\winupdates\winupdates.exe /auto
O4 - HKLM\..\Run: [aU0GY5Ux] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YkpHU91w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dgVGRAox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ewpGSs1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cIFJUkUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fI0GU11v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RUFJVk1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ckpGScUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eUpGWkUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QY0GUsow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZE0GR91w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YMpGTkov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fUVHWwEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [cA0GXoov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Zw0GT5Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZQFJTwov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bMFHYcox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cAFJS9Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cgVJR9ow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ckpHTgEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RYVHR9ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [egVJSo1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RkFGQsUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dQFHT9ow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cYpGU1Ew] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fIFGRgUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fUVGUoUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZIVHXwEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YY0GQwov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [awVGVgEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eMVHXgow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QUFGR1ow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YgFHT1Ew] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bwVHZkox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RI0HTgUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fEVHWkUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QEFJXA1v] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZY0GU11w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bUFGW9ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bU0GU11x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ewFHXwov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aQFHX9Ew] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eYpHVs1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dk0GUkox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QUVHW1ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eAVJSs1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eIpGWwox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eI0HQg1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dwFHWoEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dQFGYAUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YEFJS5Ux] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ag0GVk1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cMFGYgUx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bEFHVkEw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [RgFHU9ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [aMFGZ5Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fUFGYs1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dAVHVk1w] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eEFJWgov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QwVJTsEx] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [YEFJZwow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cwFJV9Ex] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [dY0GVcow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [cE0GQ1ov] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [MsMovies] C:\Programme\MsMovies\MsMovies.exe /auto
O4 - HKLM\..\Run: [RI0GRkow] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [ZIpGS9ox] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [bEpHU9Ux] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [Junk settings mix acid] C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\funk bone junk settings\Body test.exe
O4 - HKLM\..\Run: [cEFJYwUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [fgFHWgUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [eUFHUk1x] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [bIFJVkUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\Run: [QEVGSoUw] C:\PROGRA~1\wwpwsuxw\YcQABAgM.exe
O4 - HKLM\..\RunServices: [p2pnetworking] p2pnetworking.exe
O4 - HKCU\..\Run: [Amok hold] C:\DOKUME~1\Lukas\ANWEND~1\JUMPBA~1\dogprogram.exe
O4 - Global Startup: GStartup.lnk = C:\Programme\Gemeinsame Dateien\GMT\GMT.exe
O8 - Extra context menu item: Download with NetPumper - C:\Programme\NetPumper\AddUrl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: MedionShop - {01E9CF82-AE9D-42BA-A629-B23D51A4B86B} - h**p://www.medionshop.de/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.1und1.de/Herzlich_Willkommen/b1/
O16 - DPF: {00000000-0000-0000-0000-000020030000} - h**p://www.7adpower.com/dialer/A091EMT.exe
O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - h**p://gamingzone.ubisoft.com/dev/packages/GSManager.cab
O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - h**p://www.ea.com/downloads/rtpatch/EARTPX.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - h**p://god.t-online.de/download/ExentCtl.ocx
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - h**ps://www.gamespyid.com/alaunch.cab
O16 - DPF: {8FA9D107-547B-4DBC-9D88-FABD891EDB0A} (shizmoo Class) - h**p://playroom.icq.com/odyssey_web11.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - h**p://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {AB29A544-D6B4-4E36-A1F8-D3E34FC7B00A} - h**p://install.wildtangent.com/bgn/partners/wildgames/stx/install.cab
O16 - DPF: {CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA} (Java Runtime Environment 1.4.0_03) -
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - h**p://arcade.icq.com/carlo/zuma/popcaploader_v5.cab
O16 - DPF: {E0CE16CB-741C-4B24-8D04-A817856E07F4} - h**p://cabs.roings.com/cabs/mmed.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVP Control Centre Service (AVPCC) - Kaspersky Labs. - C:\Programme\Kaspersky\avpcc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: KAV Monitor Service (KAVMonitorService) - Kaspersky Labs. - C:\Programme\Kaspersky\avpm.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: StyleXPService - Unknown owner - C:\Programme\TGTSoft\StyleXP\StyleXPService.exe (file missing)
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe



jo das isses schon ;)
un wissta jez mehr?

Bitte nochma um Hilfe!

Mfg S0RceReR

[edit]
bitte editiere deine links, wie es dir u.a. hier angezeigt wird:

http://www.trojaner-board.de/showpost.php?p=171957&postcount=1


danke
GUA
[/edit]

Dir wurde schon im Februar zur Neuinsatallation geraten und dir eine entsprechende Anleitung an die Hand gegeben. Entweder du hast überhaupt nicht neu aufgesetzt, oder du hast dich nicht an die Anleitung gehalten.

Wie auch immer, du solltest neu aufsetzen:
http://www.trojaner-board.de/showpos...28&postcount=2

Gruß :daumenhoc
Yopie